CycloneDX cannot be installed on .NET 9

[nil4]

CycloneDX cannot be installed as a global tool on a .NET SDK version newer than the tool targeted when it was published.

For instance, v4.0.0, which targets net8.0, does not install on .NET SDK 9.0:

> dotnet --version
9.0.100-rc.2.24474.11

> dotnet tool install --global CycloneDX --version 4.0.0
Package cyclonedx is not a .NET tool.

The error message is in fact misleading, the root cause is that CycloneDX hasn't been configured to run on newer .NET runtimes.

This can be done by adding <RollForward>Major</RollForward> to the tool project file (ref. https://learn.microsoft.com/en-us/dotnet/core/whats-new/dotnet-core-3-0#major-version-runtime-roll-forward)

Additional references:

• runtime-options (--roll-forward) for local tools dotnet/sdk#26824
• dotnet-format has this setting enabled: https://github.com/dotnet/format/blob/ad8125a6fc036fe1eb4e57aa604a79f2d98d5aa0/src/dotnet-format.csproj#L11 (added in dotnet/format@7a5df81)
• as does dotnet-ef: https://github.com/dotnet/efcore/blob/486047c7422ec04530ca66c7c55256fa89b0ffc2/src/dotnet-ef/dotnet-ef.csproj#L24 (added in dotnet/efcore@11e7fc6)
• as does docfx: https://github.com/dotnet/docfx/blob/dbd57048f68411fa39aeea9ccc6c00dc88ecde9f/src/docfx/docfx.csproj#L5 (added in dotnet/docfx@c641c03)
• as does my own dotnet-xdt: https://github.com/nil4/dotnet-transform-xdt/blob/6272bb1152e8535ec40da5b0d68ff950bc13735b/dotnet-xdt/dotnet-xdt.csproj#L47 (added in Run with only .NET Core 3.x installed nil4/dotnet-transform-xdt#42)

[nil4]

The root cause of this issue is a bug in .NET SDK 9.0-rc2: dotnet/sdk#43844

Closing this but keeping related PR to enable running CycloneDX on later .NET SDKs than those it was published for.