CycloneDxReporter: Update CycloneDX Version to v1.4

[mawl]

CycloneDX Version 1.4 was released 12 January 2022: https://cyclonedx.org/about/history/

Can you please update the version in

ort/plugins/reporters/cyclonedx/src/main/kotlin/CycloneDxReporter.kt

Line 63 in c5bae30

val DEFAULT_SCHEMA_VERSION = CycloneDxSchema.Version.VERSION_13

BTW: v1.4 is the first version supporting vulnerabilities: https://cyclonedx.org/docs/1.4/json/

Thanks :)

[sschuberth]

@mawl, are you aware that this is just the default schema version that can be overridden via the reporter-specific "schema.version" option? (I just realized that option is not documented for the class, I'll fix that.)

[mawl]

@sschuberth: you mean https://github.com/oss-review-toolkit/ort/blob/c79919dfe7a4a1e963973679982582a627112d6b/plugins/reporters/cyclonedx/src/main/kotlin/CycloneDxReporter.kt#LL67C19-L67C41 - Sounds good to me. Maybe you can also document output.file.formats as I have learned yesterday that you also support json output :)

[mawl]

--report-option CycloneDX=schema.version=1.4 works, thanks :)

[sschuberth]

Maybe you can also document output.file.formats

It's already documented as part of the class docs 😉

And version 1.4 is now also the default.