diff --git a/hibernate4/pom.xml b/hibernate4/pom.xml
index 8bd7205b..7d3d84c3 100644
--- a/hibernate4/pom.xml
+++ b/hibernate4/pom.xml
@@ -67,12 +67,11 @@ Hibernate (https://hibernate.org) version 4.x data types.
         <!-- Inherited from oss-base. Generate PackageVersion.java.-->
         <groupId>com.google.code.maven-replacer-plugin</groupId>
         <artifactId>replacer</artifactId>
-        <executions>
-          <execution>
-            <id>process-packageVersion</id>
-            <phase>generate-sources</phase>
-          </execution>
-        </executions>
+      </plugin>
+      <!-- 29-Apr-2025, tatu: SBOM generation [JSTEP-14] -->
+      <plugin>
+        <groupId>org.cyclonedx</groupId>
+        <artifactId>cyclonedx-maven-plugin</artifactId>
       </plugin>
       <plugin>
         <groupId>org.apache.maven.plugins</groupId>
diff --git a/hibernate5-jakarta/pom.xml b/hibernate5-jakarta/pom.xml
index 19a89434..352650da 100644
--- a/hibernate5-jakarta/pom.xml
+++ b/hibernate5-jakarta/pom.xml
@@ -84,12 +84,11 @@ Hibernate (https://hibernate.org) version 5.5 with Jakarta data types.
         <!-- Inherited from oss-base. Generate PackageVersion.java.-->
         <groupId>com.google.code.maven-replacer-plugin</groupId>
         <artifactId>replacer</artifactId>
-        <executions>
-          <execution>
-            <id>process-packageVersion</id>
-            <phase>generate-sources</phase>
-          </execution>
-        </executions>
+      </plugin>
+      <!-- 29-Apr-2025, tatu: SBOM generation [JSTEP-14] -->
+      <plugin>
+        <groupId>org.cyclonedx</groupId>
+        <artifactId>cyclonedx-maven-plugin</artifactId>
       </plugin>
       <plugin>
         <groupId>org.apache.maven.plugins</groupId>
diff --git a/hibernate5/pom.xml b/hibernate5/pom.xml
index d8576517..1be7009a 100644
--- a/hibernate5/pom.xml
+++ b/hibernate5/pom.xml
@@ -101,12 +101,11 @@ Hibernate (https://hibernate.org) version 5.x data types.
         <!-- Inherited from oss-base. Generate PackageVersion.java.-->
         <groupId>com.google.code.maven-replacer-plugin</groupId>
         <artifactId>replacer</artifactId>
-        <executions>
-          <execution>
-            <id>process-packageVersion</id>
-            <phase>generate-sources</phase>
-          </execution>
-        </executions>
+      </plugin>
+      <!-- 29-Apr-2025, tatu: SBOM generation [JSTEP-14] -->
+      <plugin>
+        <groupId>org.cyclonedx</groupId>
+        <artifactId>cyclonedx-maven-plugin</artifactId>
       </plugin>
       <plugin>
         <groupId>org.apache.maven.plugins</groupId>
diff --git a/hibernate6/pom.xml b/hibernate6/pom.xml
index d7525c55..ed52d890 100644
--- a/hibernate6/pom.xml
+++ b/hibernate6/pom.xml
@@ -76,14 +76,12 @@ Hibernate (https://hibernate.org/) version 6.x with Jakarta data types.
         <!-- Inherited from oss-base. Generate PackageVersion.java.-->
         <groupId>com.google.code.maven-replacer-plugin</groupId>
         <artifactId>replacer</artifactId>
-        <executions>
-          <execution>
-            <id>process-packageVersion</id>
-            <phase>generate-sources</phase>
-          </execution>
-        </executions>
       </plugin>
-
+      <!-- 29-Apr-2025, tatu: SBOM generation [JSTEP-14] -->
+      <plugin>
+        <groupId>org.cyclonedx</groupId>
+        <artifactId>cyclonedx-maven-plugin</artifactId>
+      </plugin>
       <plugin>
         <groupId>org.moditect</groupId>
         <artifactId>moditect-maven-plugin</artifactId>
diff --git a/release-notes/VERSION b/release-notes/VERSION
index bd8b8b0a..9561cf94 100644
--- a/release-notes/VERSION
+++ b/release-notes/VERSION
@@ -6,7 +6,7 @@ Project: jackson-datatype-hibernate
 
 2.20.0 (not yet released)
 
--
+- Generate SBOMs [JSTEP-14]
 
 2.19.0 (24-Apr-2025)