Support for SPDX 3.0

[janjaeschke]

We are generating SPDX 3.0 SBOMs using Microsofts sbom-tool.

Currently we see the following output:
Error during extraction: (extracting as sbom/spdx) unsupported SDPX version: SPDX-3.0

Is the support for SPDX 3.0 planned?

[cuixq]

We user osv-scalibr's extractor for SBOM/SPDX extraction which depends on github.com/spdx/tools-golang.

And I believe this error is due to github.com/spdx/tools-golang lacking SPDX 3.0 support, see their README, and there is already an issue for 3.0 support spdx/tools-golang#237 and the draft PR spdx/tools-golang#247.