Andrea Vibelli

feat: Add missing provides mapping to Dependency to comply with CycloneDX 1.6 spec

2

Following https://github.com/CycloneDX/cyclonedx-core-java/issues/565, this PR attempts to add the missing mapping to comply with the CycloneDX 1.6 spec for the "provides" field inside the Dependency object: https://cyclonedx.org/docs/1.6/json/#dependencies_items_provides.

org.cyclonedx.model.Dependency is missing "provides" mapping according to CycloneDX 1.6 spec

1

Hi, looking at the CycloneDX 1.6 spec (https://cyclonedx.org/docs/1.6/json/#dependencies_items_provides), the Dependency object should be able to include a `provides` Array of Strings (bom-refs). The current implementation of `org.cyclonedx.model.Dependency` is missing such...