1.3.3

A repair release. The library is untouched — the classes are identical to 1.3.1 and 1.3.2, and japicmp reports no API differences. What this release fixes is the release process itself, which broke two things in 1.3.2 that only a published release could reveal.

The SBOM ships this time (#175)

1.3.2 reached Maven Central without one. skipNotDeployed defaults to true, and the release hands deployment to the Sonatype central plugin, which disables the standard deploy plugin — so CycloneDX read the release build as one that does not publish and skipped itself. Every local and CI build generated the SBOM, which is why the gap went unnoticed until Central was checked.

This release attaches jlibnotify-1.3.3-cyclonedx.xml and jlibnotify-1.3.3-cyclonedx.json, recording that the library is Apache-2.0 and that the JNA dependencies are dual-licensed LGPL-2.1-or-later / Apache-2.0.

The API compatibility report compares against the previous release (#174)

The japicmp report on the 1.3.2 site compared 1.3.2 against itself, because deploy installs the version being released before site runs and the baseline was the RELEASE meta-version. The release workflow now pins the baseline to the newest release tag below the one being built.

Also

Plugin versions declared in both <build> and <reporting> now come from a single property (#172), so the build and the site report cannot drift onto different versions of the same tool.

The ten site reports introduced in 1.3.2 are unchanged: https://hectorespert.github.io/jlibnotify/