0.13.0

Update security plugins to latest version.

Migration:

• Cyclonedx BOM requires you to have group and version in your build.gradle. Please make sure these two are set.
• As we're now forced to have a version on the build.gradle, all builds that use the 'gradle disttar' will need some adaptations in the Dockerfile as the output filename is now servicename-version.tar
  Otherwise, you can put this block in build.gradle:

distTar {
    archiveFileName = "${project.name}.zip"
}

• issue with textfixtures
  The cyclonedX does generate an issue with textfitures. To fix, you can force cyclonedx to use runtimeClasspath:

cyclonedxBom {
   includeConfigs = ["runtimeClasspath"]
}