When generating SBOMs on Windows, it looks like Windows line endings are used.

We probably want to be deterministic and generate exactly the same SBOM whether running on Windows or Unix-like systems.

Can be tested by removing the -w flag from the diff invocations in src/sbt-test/dependencies/*/build.sbt