fix(ci): update CycloneDX release invocation #27

Merged

ochenstarik-ui merged 1 commit from hermes/release-sbom-cli-fix into antigravity/signed-delivery-queue-a

2026-08-10 07:52:30 +00:00

ochenstarik-ui commented

2026-08-10 07:42:27 +00:00

(Migrated from github.com)

Summary

pin the CycloneDX .NET tool to 6.2.0
replace the removed -j flag with --output-format Json
use explicit .json SBOM filenames in all three release jobs

Root cause

Release runs 31321852849 and 31321852856 installed CycloneDX 6.2.0 and failed with Unrecognized command or argument '-j'.

Verification

actionlint v1.7.12: PASS for both workflows
full CycloneDX probe: PASS (67 packages / 63 components)
dotnet test ServerMonitorManager.slnx --no-restore --configuration Release: 108/108 PASS
focused self-cleaning verifier: AD_HOC_RELEASE_WORKFLOW_VERIFICATION=PASS
independent staged-diff review: APPROVE, no findings

This PR targets the Signed Delivery Queue A branch so PR #26 receives the repair before merging to main.

## Summary - pin the CycloneDX .NET tool to 6.2.0 - replace the removed `-j` flag with `--output-format Json` - use explicit `.json` SBOM filenames in all three release jobs ## Root cause Release runs 31321852849 and 31321852856 installed CycloneDX 6.2.0 and failed with `Unrecognized command or argument '-j'`. ## Verification - actionlint v1.7.12: PASS for both workflows - full CycloneDX probe: PASS (67 packages / 63 components) - `dotnet test ServerMonitorManager.slnx --no-restore --configuration Release`: 108/108 PASS - focused self-cleaning verifier: `AD_HOC_RELEASE_WORKFLOW_VERIFICATION=PASS` - independent staged-diff review: APPROVE, no findings This PR targets the Signed Delivery Queue A branch so PR #26 receives the repair before merging to main.