chore: fix bomber flag again [skip ci] (#4580) (#4584)

Co-authored-by: Manuel Carrasco Moñino <manolo@vaadin.com>

Author: vaadin-bot

.github/workflows/sbom.yml

@@ -16,8 +16,7 @@ on:
             description: 'Use bomber'
             required: false
             type: boolean
-            ## TODO: do not disable bomber by default (https://github.com/devops-kung-fu/bomber/issues/174)
-            default: false
+            default: true
           useOSV:
             description: 'Use osv-scanner'
             required: false
@@ -85,9 +84,10 @@ jobs:
           echo '{"username":"'`echo ${{secrets.TB_LICENSE}} | cut -d / -f1`'","proKey":"'`echo ${{secrets.TB_LICENSE}} | cut -d / -f2`'"}' > ~/.vaadin/proKey
         name: Install proKey
       - run: |
+          ## TODO: do not disable bomber by default (https://github.com/devops-kung-fu/bomber/issues/174)
           [ -z "${{github.event.inputs.useBomber}}" -o false = "${{github.event.inputs.useBomber}}" ] && A="$A --disable-bomber"
-          [ -z "${{github.event.inputs.useOSV}}" -o false = "${{github.event.inputs.useOSV}}" ] && A="$A --disable-osv-scan"
-          [ -z "${{github.event.inputs.useOWASP}}" -o false = "${{github.event.inputs.useOWASP}}" ] && A="$A --disable-owasp"
+          [ false = "${{github.event.inputs.useOSV}}" ] && A="$A --disable-osv-scan"
+          [ false = "${{github.event.inputs.useOWASP}}" ] && A="$A --disable-owasp"
           [ true = "${{github.event.inputs.useFullOWASP}}" ] && A="$A --enable-full-owasp"
           [ true = "${{github.event.inputs.useSnapshots}}" ] && A="$A --useSnapshots"
           V="${{ github.event.inputs.version || github.event.release.tag_name }}"

scripts/generateAndCheckSBOM.js

@@ -243,7 +243,7 @@ function sortReleases(releases) {
 }
 
 async function computeLastVersions(release) {
-  const releases = (await run(`git tag`, { debug: false })).stdout.split('\n').filter(l => /^2[43]\.[03]/.test(l));
+  const releases = (await run(`git tag`, { debug: false })).stdout.split('\n').filter(l => /^[2-9][3-9]\.\d/.test(l));
   const minor = release.replace(/^(\d+\.\d+).*$/, '$1');
   let sorted = sortReleases([release, ...releases]);
   const lastPatch = sorted[sorted.indexOf(release) + 1];