They are precisely in the binary ZIP:
$ unzip -l log4j/2.24.1/apache-log4j-2.24.1-bin.zip | grep cyclonedx
29163 2024-09-24 13:33 log4j-1.2-api-2.24.1-cyclonedx.xml
21118 2024-09-24 13:33 log4j-2.24.1-cyclonedx.xml
25085 2024-09-24 13:33 log4j-api-2.24.1-cyclonedx.xml
13913
+1
It looks good to me, thanks for the hard work
--
The Apache Software Foundation
V.P., Data Privacy
On Tue, Sep 24, 2024, at 21:48, Jan Friedrich wrote:
> This is a vote to release the Apache Log4net 3.0.1.
>
> Website:
> https://logging.staged.apache.org/log4net/release/release-notes.html
>
Is there anything that people are looking for in a new release? We've
got a good bunch of changes ready, so I figure it's about time to do a
new release.
-Robert Middleton