feat(sbom): migrate to CycloneDX v1.6

[DmitriyLewen]

Description

migrate to CycloneDX v1.6

validation:

➜  sbom-utility validate --input-file integration/testdata/fluentd-multiple-lockfiles.cdx.json.golden 
Welcome to the sbom-utility! Version `x.y.z` (unset) (linux/amd64)
==================================================================
[INFO] Loading (embedded) default schema config file: `config.json`...
[INFO] Loading (embedded) default license policy file: `license.json`...
[INFO] Attempting to load and unmarshal data from: `integration/testdata/fluentd-multiple-lockfiles.cdx.json.golden`...
[INFO] Successfully unmarshalled data from: `integration/testdata/fluentd-multiple-lockfiles.cdx.json.golden`
[INFO] Determining file's BOM format and version...
[INFO] Determined BOM format, version (variant): `CycloneDX`, `1.6` (latest)
[INFO] Matching BOM schema (for validation): schema/cyclonedx/1.6/bom-1.6.schema.json
[INFO] Loading schema `schema/cyclonedx/1.6/bom-1.6.schema.json`...
[INFO] Schema `schema/cyclonedx/1.6/bom-1.6.schema.json` loaded.
[INFO] Validating `integration/testdata/fluentd-multiple-lockfiles.cdx.json.golden`...
[INFO] BOM valid against JSON schema: `true`

Related issues

• Close feat(sbom): migrate to CycloneDX v1.6 #6902

Checklist

• I've read the guidelines for contributing to this repository.
• I've followed the conventions in the PR title.
• I've added tests that prove my fix is effective or that my feature works.
• I've updated the documentation with the relevant information (if needed).
• I've added usage information (if the PR introduces new options)
• I've included a "before" and "after" example to the description (if the PR is a user interface change).