Merge pull request CycloneDX#231 from CycloneDX/v1.5-dev

[WIP] finalize 1.5

Added support for Vulnerability Exploitability Exchange (VEX), a stan…

…dard release notes format, improved hardware device support and many other small improvements.

Merge pull request CycloneDX#64 from CycloneDX/dependabot/maven/tools…

…/commons-io-commons-io-2.7

Bump commons-io from 2.5 to 2.7 in /tools

Added release