Support CycloneDX 1.7

[janbiasi]

CycloneDX Specification 1.7 was released 2 weeks ago, see:

• https://github.com/CycloneDX/specification/releases/tag/1.7
• https://cyclonedx.org/news/cyclonedx-v1.7-released/

We should add support in options and update the default spec version to 1.7.
As there are no breaking changes in our scope, this is considered a "feature" release.
This is considered a breaking change, see #207 (comment)

[jkowalleck]

We should add support in options and update the default spec version to 1.7.
As there are no breaking changes in our scope, this is considered a "feature" release.

updating the default value of any interface - I'd consider this a breaking change.

My POV:
Let's say, I have this pipeline that generates and feeds SBOMs onto a tool. This tool does support CycloneDX 1.4 to 1.6. And this tool validates input - the tool will fail when ingesting unsupported versions.
If the SBOM generator was update and would output an unsupported SBOM, this wouldbreak my process.

[janbiasi]

@jkowalleck thanks for your feedback, in retrospective I'd agree that changing defaults, which impact the output, are indeed breaking changes. Marking this issue for v4.