With https://github.com/FasterXML/jackson-future-ideas/wiki/JSTEP-14 all Jackson repos have Maven build capable of producing CycloneDX sboms. But although 2.20+, 3.0+ should do that, something in build broke with changes to use Central portal so the only published version with sboms seems to be 3.0.0-rc4:
https://repo1.maven.org/maven2/tools/jackson/core/jackson-databind/3.0.0-rc4/
I suspect this is related to something about plug-in binding to build phases differing b/w old sonatype nexus publishing plug-in and new one. But I couldn't figure it out last I checked.
But I hope someone does.
NOTE: while filed against jackson-databind this affects all Jackson repos.