Re: Building Ant with JDK 8 - ComponentBomTask fails during BOM creation

On 2026-07-26, Stefan Bodewig wrote:

> On 2026-07-26, Jaikiran Pai wrote:

>> I was trying to investigate some issue with Ant on JDK 8. Against the
>> latest master branch I ran "./bootstrap.sh" with JAVA_HOME pointing to
>> JDK 8. That runs into the exception I have pasted below. I haven't yet
>> looked up the SBOM expectations. Is SHA3-256 mandatory for the SBOMs
>> or should we be using a different one when SHA3-256 isn't available?

> This the the CycloneDX Core Java library not checking whether the
> required algorithms are there. I've opened
> https://github.com/CycloneDX/cyclonedx-core-java/issues/848 a while ago.

> If this causes a problem we could make SBOM generation make dependent on
> Java 9+.

I will just do that.

Stefan