Re: Building Ant with JDK 8 - ComponentBomTask fails during BOM creation

On 26/07/26 8:55 pm, Stefan Bodewig wrote:
> On 2026-07-26, Stefan Bodewig wrote:
>
>> On 2026-07-26, Jaikiran Pai wrote:
>>> I was trying to investigate some issue with Ant on JDK 8. Against the
>>> latest master branch I ran "./bootstrap.sh" with JAVA_HOME pointing to
>>> JDK 8. That runs into the exception I have pasted below. I haven't yet
>>> looked up the SBOM expectations. Is SHA3-256 mandatory for the SBOMs
>>> or should we be using a different one when SHA3-256 isn't available?
>> This the the CycloneDX Core Java library not checking whether the
>> required algorithms are there. I've opened
>> https://github.com/CycloneDX/cyclonedx-core-java/issues/848 a while ago.
>> If this causes a problem we could make SBOM generation make dependent on
>> Java 9+.
> I will just do that.

Thank you Stefan, I hadn't noticed the issue you filed with cyclonedx. 
Requiring Java 9+ for SBOM generation sounds good to me. I just updated 
my master branch which brings in your change and ran "./bootstrap.sh" 
with Java 8 as well as Java 11. It builds fine on both versions and on 
Java 11 I do see the SBOM generation happening.

-Jaikiran