Update pom.xml EE4J parent to 1.0.9

[arjantijms]

Changes: eclipse-ee4j/ee4j@1.0.8...1.0.9

[dmatej]

Did you check the SBOM generation?

[arjantijms]

Did you check the SBOM generation?

Yes, it runs, and it indeed generates a [root]/target/bom.xml and bom.json.

[INFO] --- cyclonedx:2.7.9:makeAggregateBom (default) @ glassfish-main-aggregator ---
[INFO] CycloneDX: Resolving Aggregated Dependencies
[WARNING] BOM dependency listed but is not depended upon: pkg:maven/org.glassfish.main/nucleus-parent@7.0.10-SNAPSHOT?type=pom
[WARNING] BOM dependency listed but is not depended upon: pkg:maven/jakarta.transaction/jakarta.transaction-api@2.0.0?type=jar
[WARNING] BOM dependency listed but is not depended upon: pkg:maven/org.osgi/org.osgi.core@5.0.0?type=jar
[WARNING] BOM dependency listed but is not depended upon: pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1?type=jar
[WARNING] BOM dependency listed but is not depended upon: pkg:maven/org.glassfish/jakarta.el@5.0.0-M1?type=jar
[WARNING] BOM dependency listed but is not depended upon: pkg:maven/org.glassfish.docs/docs@7.0.10-SNAPSHOT?type=pom
[INFO] CycloneDX: Creating BOM version 1.4 with 853 component(s)
[INFO] CycloneDX: Writing and validating BOM (XML): /glassfish/target/bom.xml
[INFO]            attaching as glassfish-main-aggregator-7.0.10-SNAPSHOT-cyclonedx.xml
[INFO] CycloneDX: Writing and validating BOM (JSON): /glassfish/target/bom.json
[WARNING] Unknown keyword additionalItems - you should define your own Meta Schema. If the keyword is irrelevant for validation, just use a NonValidationKeyword
[INFO]            attaching as glassfish-main-aggregator-7.0.10-SNAPSHOT-cyclonedx.json