Repository: CycloneDX/cyclonedx-rust-cargo (language: rust)

Issue:
0.5.2: lock file is not updated
Hi! :wave: 

I package this project for Arch Linux. When trying to upgrade to 0.5.2 I noticed that the lock file has not been updated:
https://github.com/CycloneDX/cyclonedx-rust-cargo/blob/23e466654da141a05d8d4240fe14f8159913a938/Cargo.lock#L230

For packaging purposes we want to fetch the locked sources, but this is unfortunately not possible:

```bash
$ cargo fetch --locked --target "$(rustc -vV | sed -n 's/host: //p')"
warning: profiles for the non root package will be ignored, specify profiles at the workspace root:
package:   /home/user/Downloads/cyclonedx-rust-cargo/cargo-cyclonedx/Cargo.toml
workspace: /home/user/Downloads/cyclonedx-rust-cargo/Cargo.toml
    Updating crates.io index
error: the lock file /home/user/Downloads/cyclonedx-rust-cargo/Cargo.lock needs to be updated but --locked was passed to prevent this
If you want to try to generate the lock file without accessing the network, remove the --locked flag and use --offline instead.
```


Discussion / hints:
Right, I see. I'll make a 0.5.3 point release soon with this change and also support for `cargo binstall`. Thanks for letting me know.

Fix patch:
diff --git a/Cargo.lock b/Cargo.lock
index 6c3d7fda..0dafb5c5 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -227,7 +227,7 @@ dependencies = [
 
 [[package]]
 name = "cargo-cyclonedx"
-version = "0.5.1"
+version = "0.5.3"
 dependencies = [
  "anyhow",
  "assert_cmd",
@@ -373,7 +373,7 @@ checksum = "06ea2b9bc92be3c2baa9334a323ebca2d6f074ff852cd1d7b11064035cd3868f"
 
 [[package]]
 name = "cyclonedx-bom"
-version = "0.6.0"
+version = "0.6.1"
 dependencies = [
  "base64",
  "cyclonedx-bom-macros",
diff --git a/cargo-cyclonedx/CHANGELOG.md b/cargo-cyclonedx/CHANGELOG.md
index 19b78bc4..19768406 100644
--- a/cargo-cyclonedx/CHANGELOG.md
+++ b/cargo-cyclonedx/CHANGELOG.md
@@ -5,6 +5,16 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## 0.5.3 - 2024-06-04
+
+### Added
+
+ - Add metadata to let `cargo binstall` locate our release binaries ([#727])
+
+### Fixed
+
+ - Committed an up-to-date lockfile to ease packaging for downstreams
+
 ## 0.5.2 - 2024-06-04
 
 ### Fixed
@@ -113,3 +123,4 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 [#634]: https://github.com/CycloneDX/cyclonedx-rust-cargo/pull/634
 [#722]: https://github.com/CycloneDX/cyclonedx-rust-cargo/pull/722
 [#724]: https://github.com/CycloneDX/cyclonedx-rust-cargo/pull/724
+[#727]: https://github.com/CycloneDX/cyclonedx-rust-cargo/pull/727
diff --git a/cargo-cyclonedx/Cargo.toml b/cargo-cyclonedx/Cargo.toml
index a6fda8ab..64948c66 100644
--- a/cargo-cyclonedx/Cargo.toml
+++ b/cargo-cyclonedx/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "cargo-cyclonedx"
-version = "0.5.2"
+version = "0.5.3"
 categories = ["command-line-utilities", "development-tools", "development-tools::cargo-plugins"]
 description = "CycloneDX Software Bill of Materials (SBOM) for Rust Crates"
 keywords = ["sbom", "bom", "components", "dependencies", "owasp"]


Test patch: