--- results/org.cyclonedx/cyclonedx-core-java/9.0.4/oss-rebuild/reference/cyclonedx-core-java-9.0.4-cyclonedx.xml:bom.xml	2025-04-04 16:27:42.524258897 +0000
+++ results/org.cyclonedx/cyclonedx-core-java/9.0.4/oss-rebuild/rebuild/cyclonedx-core-java-9.0.4-cyclonedx.xml:bom.xml	2025-04-04 16:27:48.984157442 +0000
@@ -17,9 +17,6 @@
           <hash alg="SHA-256">6852aa0f4e42a2db745bab80e384951a6a65b9215d041081d675780999027e81</hash>
           <hash alg="SHA-512">417de20fcdcb11c9713bacbd57290d8e68037fdb4553fd31b8cb08bd760ad52dc65ea88ad4be15844ad3fd5a4d3e440d2f70326f2fe1e63ec78e059c9a883f8d</hash>
           <hash alg="SHA-384">5eb755c6492e7a7385fa9a1e1f4517875bcb834b2df437808a37a2d6f5285df428741762305980315a63fcef1406597d</hash>
-          <hash alg="SHA3-384">0fe16a47cf7aab0b22251dafcc39939b68e8f1778093309d8d2060b51a08df445a8b8ed5a9561669faf2e55f907c76d8</hash>
-          <hash alg="SHA3-256">3e5a1eb5ab7d0797498862794709ff8eaaa071fe4cc9ec77f52db7e2f97ef487</hash>
-          <hash alg="SHA3-512">59281a3e29e76270d7f44b40b5b9f05e55f1ae3ec716d80add806f360940809e3813998ac7c5758043b8e248aed73b86e37dc506cdb4cde03c16bb617d8e5a3a</hash>
         </hashes>
       </tool>
     </tools>
@@ -61,9 +58,6 @@
         <hash alg="SHA-256">f700de80ac270d0344fdea7468201d8b9c805e5c648331c3619f2ee067ccfc59</hash>
         <hash alg="SHA-512">cb9c3b2055d0b31d106293f0bc3696f90a11a30953e5b05a1a3c453e98a563475c93d7c6d1707e75f59d0806fba5fd8e4486b8bd72e58bb6ae995bdbbeeb7e17</hash>
         <hash alg="SHA-384">a0fd174b2f8a21b43828371a7ee03c915b79e69d7b0e16cfe6367f794e2f8e6bbebc261e8a4ba35a79779b2338a774a4</hash>
-        <hash alg="SHA3-384">803fb227bd6770cc21c701b9529606f95ba05c30ea3d807b18b3681fde0c7cabd0e2f40ab36567832f63e0c42b77d0f2</hash>
-        <hash alg="SHA3-256">41b9b86fd0b19ff44d19d108302d7b0111ed86d07a65a90efe1023537fad8748</hash>
-        <hash alg="SHA3-512">eaacc9eafccf4bda0c72c5151dbd7e99954842782c91b501af8c7ca462a04b6c59d7ab8e1ef43b3ebc1b12ca62f4574544bc31df10f33f4a15cd3c3399bd808b</hash>
       </hashes>
       <licenses>
         <license>
@@ -88,9 +82,6 @@
         <hash alg="SHA-256">f41f7baacd716896447ace9758621f62c1c6b0a91d89acee488da26fc477c84f</hash>
         <hash alg="SHA-512">97eab31b073c5c57c8bcfaa2fec7b481a15a9a1f9ed864dfdc63b57f062b230557caa734c3133aca1165facb588c58db0185c07832241d70159e87a4bcf48008</hash>
         <hash alg="SHA-384">bd78e2eb3d005046d1329557d3a77529e98384d4d87940374eef432d73d5a06ef20fb7b0c44389de64496fe134dcf199</hash>
-        <hash alg="SHA3-384">f9acc2f04f076328d17e2d0615da4367470b45b15f828008d8df57033401ae6b3b83b21cf9bc1745ff3cfe5a102bc48e</hash>
-        <hash alg="SHA3-256">5d4bbe43356c92e3970b69892b44a10cc736ef8cb1bedfc753cc8df050520161</hash>
-        <hash alg="SHA3-512">29440ccf2551b383c7e6cbdf78ef7784a421322e418da1be3fcd3251c8a826ffd5c6d1bea32b9c80e74744c035cc9cd8483e629e407110ff3133a05cb34bef93</hash>
       </hashes>
       <licenses>
         <license>
@@ -116,9 +107,6 @@
         <hash alg="SHA-256">7b96bf3ee68949abb5bc465559ac270e0551596fa34523fddf890ec418dde13c</hash>
         <hash alg="SHA-512">0338b50767166e5746ada6d6aa2e071e7221d699323bfb629f7f204b294c1dc4cad140610a129ed751798443b43e74e0818989c7df7d33c5915aa29742be9ba8</hash>
         <hash alg="SHA-384">908d0a22dc17aaa04caa5104cff7cad5b88b77eecb78dd5b3b3fefa22ff71ac50a4fb9e31c897ac243f9d841e4b3453d</hash>
-        <hash alg="SHA3-384">8a7f2e061b998780870eddd571620fbf3d3c70bcb54e24539d0db504f59d65bc6bda58136284498babe29fcc5eabb7a6</hash>
-        <hash alg="SHA3-256">022bf1f8039fcea717e9e34dd96eb80cfff05b43c9cbb76e9739b2421e2d027c</hash>
-        <hash alg="SHA3-512">0bcbc4edce974ea970c46e2da12ec98d9fd962c2cf64f757ac97136dec5623ca52af0c225895303c17ffabb57090e6772d7bd326d5e7438cef5454f8bbaeecfa</hash>
       </hashes>
       <licenses>
         <license>
@@ -142,9 +130,6 @@
         <hash alg="SHA-256">1df8b9430b5c8ed143d7815e403e33ef5371b2400aadbe9bda0883762e0846d1</hash>
         <hash alg="SHA-512">5939c9931eb9557caee3b45fe1dd9ce54cabdc4e6182ed7faac77e1a866dd0cb602bfa4ece2f3316d769913366106bd2b61bf3bb5faad1fa7d808124c06dec0f</hash>
         <hash alg="SHA-384">74059fd8f61c366ed448e102256fdbd1db0d690501c2c296c80f3657a2c0d8ade3dd9533b1431cc29786bbb624195f46</hash>
-        <hash alg="SHA3-384">15034fb39842620bf3b152cd90bce252644ebc6a29fafd6dcf5e1f3925f09ccea2ae4e195817450f996b25a7081a9a3f</hash>
-        <hash alg="SHA3-256">1716630a207a8f4a83bf9ef19245f46c87d62bfebbcfa1227101e6dd51da8fa5</hash>
-        <hash alg="SHA3-512">c290c98c7b5825d024644ec1162804a1f9ad4da3bb5324d147ddffee6cc79e3c0ecc3825d6116502f2ca292ec80c4e7f8d49a03542dda8f4d58b0dc8228923c5</hash>
       </hashes>
       <licenses>
         <license>
@@ -167,9 +152,6 @@
         <hash alg="SHA-256">e45551727707acc0c56ac62d56964332ea0f138d6cc3656d988b9369150f5247</hash>
         <hash alg="SHA-512">8064df400154caa110b8845bd17e6cea2683307e575ce88e40d7c0c8965ea0af6c150a376d8b9ba7354676c41b52c94535f30c6e830447613299ccf5fc7aa959</hash>
         <hash alg="SHA-384">0597100022f72e020c9d929bf57ecef91af7574610fb03b4019feba4b25f491a076f03577be2009e66d9001c4c0f8ab0</hash>
-        <hash alg="SHA3-384">bbdd55a31a4755ef589bcb176283fe03e3c9089d315eab577fef3a9c2d02e632c6ac3fdebbc90a2f0f8ed7974b9f397c</hash>
-        <hash alg="SHA3-256">c9881b69bde35ea6ff4006877b9fbf91462f911b5b142aa699a45a00867d413a</hash>
-        <hash alg="SHA3-512">2b9caf58deef687a9bf01abd61a7af4abdb61247a8a966683a18157ee948f1ea424602598dc8f665bf24f7e1e516866298ef0507e9d697cb20dcf60eff2095ca</hash>
       </hashes>
       <licenses>
         <license>
@@ -194,9 +176,6 @@
         <hash alg="SHA-256">bf90159666e64d2b4a43f411552ac0fcdc26fa7c3d2de50533031b05c19b6359</hash>
         <hash alg="SHA-512">82efd284346872042b9abe77705d3698727d1327510e64da77fc83d6270c434def1110ab966e57051f7c84d8a038c3ed098e09e75661a781f82596810aa51afb</hash>
         <hash alg="SHA-384">5545ff3ba7ad0188441b46fce651850ec6b9cba9da44dbb8b71ec8b876f5fa5f1446f395314525eb15084e1d82e9c418</hash>
-        <hash alg="SHA3-384">729dcef762dfd3fdea5d8191a597839fc856f1c170a8ab539e40acb91a06e0114630707882cd4a2ddfff43842f036800</hash>
-        <hash alg="SHA3-256">04091c73e32a65919905213a90f9501c17e6486e3833948c11b4e239a51b1875</hash>
-        <hash alg="SHA3-512">f80f3cc160510a6d017985c3d017d034732b97618e35a7d58e2e193a59e1c50b416f5ab6eeb159d721780924d7767ad5b7930f5928ceaf36acd60ef2b61de572</hash>
       </hashes>
       <licenses>
         <license>
@@ -219,9 +198,6 @@
         <hash alg="SHA-256">ddb26c8a1f1a84535e8213c48b35b253370434e3287b3cf15777856fc4e58ce6</hash>
         <hash alg="SHA-512">5ea2d50e0807082e01574df591567022f98a8366efae1ac9dd7085c3fb8508ea1cc39bf578bbd5d6e109e9116370062a96d1703e2d501b6c5884f54c3be4f171</hash>
         <hash alg="SHA-384">1009a8e6db52c3de411d70380ee2b8f8b569e2beba5145fd788f8783bc866fb14cee757a5e0bcf51fc3e1692bd024f29</hash>
-        <hash alg="SHA3-384">9d81565f61a363c89e87f11e3645fd747cd065b60d01607ecc8cef2ca8a9dab6540a77cc1d2587808824ab72782457e4</hash>
-        <hash alg="SHA3-256">a30bb87fe658889b753394eff933ebcfc646656cc7ab99c13d3e6aae13681d14</hash>
-        <hash alg="SHA3-512">e95c5a29de2ab54909272363503130b3e57e7ac01e98223b1d7c00cb16f38ca64ef4a2834e419482b11b08bea1b7fe16a7d5fc42a43a2f5c060227343b36a7a2</hash>
       </hashes>
       <licenses>
         <license>
@@ -244,9 +220,6 @@
         <hash alg="SHA-256">fccad82e13172c0e4384db71577219c9b8631c0820f4b18daaa57016fb661c76</hash>
         <hash alg="SHA-512">d3edb04cffb0a7c3349c7dc1dcd154ff0a16686155b13e5e674adedbb07d6eaca156a5b0bec2857496dec8c3669dae7d04b3debce6b324ffcfdb278ea0fcc0fe</hash>
         <hash alg="SHA-384">df95479d6e84ea028ee42d491336d0fb69100dcbeb2b828fd1794c272c33bb16e4a7dfffee82bff09fc4119ba4669a5d</hash>
-        <hash alg="SHA3-384">a84cb1dda50488ac552cfcb372ca0f313f39577100b208209b337c22a0bb0a5c6185b78ed38a998991ddb01234bb3346</hash>
-        <hash alg="SHA3-256">2ed3dfad7ad53ac0b835fb4c2b1fa8bff1b68d3be86c9a93b67ffe369305ad29</hash>
-        <hash alg="SHA3-512">79213b46cb73f63e4839b2840e418c8648acb39c3c27a87c075eda08cfc342354c73a45ee7a303eb8234c914a60d152180cb29eabad71e2b4f7d44140b3059a7</hash>
       </hashes>
       <licenses>
         <license>
@@ -269,9 +242,6 @@
         <hash alg="SHA-256">b6ca2f7d5b1ab245cec5495ec339773d2d90554c48592590673fb18f4400a948</hash>
         <hash alg="SHA-512">ca3fa3b21047c8762b5b806f82de712a353f30880af00297fce1f4fec90471435a25d93aa0925961a34f4fa18e0d973f4611d5cb2c53d3d0b28f00ac1b9b6462</hash>
         <hash alg="SHA-384">e6d921331272972f4c6cd1f72b5dd4c0ede8f0eb4f3da0ae1cb7ee12ed64ceb6d7693a8f52601bc8df0ad8b3fa7cb45c</hash>
-        <hash alg="SHA3-384">c21aee49a0131f017692f0749a4988759da20a791d327b2e33c2f6277aed192d082868369d6fbceb541d5483c6dbe399</hash>
-        <hash alg="SHA3-256">e656bb7d5f0df07c47dcba4658b18843e4b3a4a12ca3b521a7e8607b48795d80</hash>
-        <hash alg="SHA3-512">b833061dcb9c159a5063ccb554051818c7969fd2967160aaa9e7f3c45981a3a43e8053bfc2997b83774a950837425f9410f6f9b9a6eb37b7d5f8608081726fe1</hash>
       </hashes>
       <licenses>
         <license>
@@ -294,9 +264,6 @@
         <hash alg="SHA-256">a61c48d553efad78bc01fffc4ac528bebbae64cbaec170b2a5e39cf61eb51abe</hash>
         <hash alg="SHA-512">1c0587ecb4c5a659ce2ae1fe36ffc12636a8ecba549a29f2cf91cb4d1d36a335c05f35776f480488d40d894230389f76aeeb363887026c6ef5c565995c17b7c6</hash>
         <hash alg="SHA-384">3b617db8307a081df858a4110f5b8fec51c06355762506cbc4be5557fb06959f0499f7e672103d46f71c66bae472a7bd</hash>
-        <hash alg="SHA3-384">22a3150713f7072962e26c286a1ef97d849b10d7f1251c56ae34252f247127b56dd189daa758c64776b4196ee0060517</hash>
-        <hash alg="SHA3-256">174868c81672068b42ccde35310d4dad60f457b795101e99588c28b0eebdefc2</hash>
-        <hash alg="SHA3-512">c88de5a2137e3b63b632ef24799a677c998b76e736407f1e8c6af85d1b6a94c76bc20d26e6cac847d8383ab6760f1b5c2ae7574fba21e1e6a96de7cdd38f0e39</hash>
       </hashes>
       <licenses>
         <license>
@@ -320,9 +287,6 @@
         <hash alg="SHA-256">8d097391bb3f3009fb37a565222b7ad3ffd49c49565a478ac0b2445448f55896</hash>
         <hash alg="SHA-512">00a18366306de76827a0d3ff83236054ed7ecbf4be2092fd8ac29fb63bcca9d86a6ffb5f41027029a869a4d47f978acf44118397e0fc21482cea3182eb1e4703</hash>
         <hash alg="SHA-384">80c2d8aefd00a9dcc4d9ca0ef4d259b3047f5c4bbca8be36a3689237b352ee1d8157a8cd2f5e60c5f3586b5219d9a6f9</hash>
-        <hash alg="SHA3-384">9c88ff480e97e57e55f7f6542d9d75cd8f75cd8e840cde47ce7b3040fc9167786c54c163a23b6c5564f8f1e08d261a40</hash>
-        <hash alg="SHA3-256">9cb25d5c1fa642757a01b7c6bcaaf7fd4722469c309f90d0d735d79b15360e9b</hash>
-        <hash alg="SHA3-512">f9ff7ae6b1e9e3cf30fbf236222db5ac715b85334a321bfae352360f235d3b656d3bdacc855c41f8ae4380526bec1d10fcbe679447849bf7dc513815444035cf</hash>
       </hashes>
       <licenses>
         <license>
@@ -344,9 +308,6 @@
         <hash alg="SHA-256">a0a51d1ea0d274efcc0a545e09304336b34d651e08b8ef9af22a6a2bfea59d9c</hash>
         <hash alg="SHA-512">78e9e2790224fab4c57faec3b72013e3b6c5986378b2d3e7fc41c31722a4ec0f3c3a06a972e336ff0d5422484f454650db43674a5914e6e6a4e93c1caed27eed</hash>
         <hash alg="SHA-384">458f640078180b67945359dac4e43da6aa1beae899e5f02ca6533fb564f9e6f32e7bc4108090ed2c82fe6b797b7744a9</hash>
-        <hash alg="SHA3-384">4a845dcb7b9f38a44750a5a4fc9dd9934a0de19d34935bd4dcfcf4f8cf214c6652c071708d372d1ca944914d0b86ab93</hash>
-        <hash alg="SHA3-256">338c31b07b8589aeb2220b9994915fb43986197aa5471d416cd283038be7edd0</hash>
-        <hash alg="SHA3-512">2192910921bf4b322a6ae81f44efdfcf7888e707771c581df495ef6395e1fbfc46448b80cb679804e13d1300f79bddc58116b4c0fa1ba1628f9a17925fe90e7f</hash>
       </hashes>
       <licenses>
         <license>
@@ -368,9 +329,6 @@
         <hash alg="SHA-256">0424b2ff0c20265a084a32a4907521b28e7b86af25d131987a6b31ef63b9687c</hash>
         <hash alg="SHA-512">cd109e39af788d88543f0867fff48adefe23b01a77b4a5f1963b117b125b71c9613ba3009f69d8f1131f5066689e3f43457cc2a8f02e827f40502b5e13bc3794</hash>
         <hash alg="SHA-384">2411434f4e66f288d86fe37039ef1017adb28ee0996f8836a86571c547f6351561e127a49309a336bcdd5423b99cd2c8</hash>
-        <hash alg="SHA3-384">4d33f9a2d525d0e3778c68526ef75a141a239e24a396b4456afc6fbb742415e7c801b1f8b4582fa26664b54bd69e217d</hash>
-        <hash alg="SHA3-256">887b21b9dd007248b77ef52db5dff20dc2cdf4728b6aaac32b6612bf1952f118</hash>
-        <hash alg="SHA3-512">b3ee4789007071421545ac04b51263946d5131787cc62bf2994b6fbace70dc10211f0382f4d0d4eb6df8e2b7da5f93782fe005fbab8e6352ef906819958ec80f</hash>
       </hashes>
       <licenses>
         <license>
@@ -393,9 +351,6 @@
         <hash alg="SHA-256">83f38459593bc10caeb1fa2653616813b1743b6bed67163c8ae8e5a4d32a5456</hash>
         <hash alg="SHA-512">6b3fb996677c7df09c7f0599bd206c41d0e75cbd3ed3f756baf3e79ed28bdb1354ba04f22366583e322ecec1e7d9935d8e2eecfd375d492834bc7b68d0d235e1</hash>
         <hash alg="SHA-384">7276cea2c1295a30d9416bd34d650cf8e3760be752fdadaf5da887f23633a2d001d8126fccc4ca99734cc6813bce88b6</hash>
-        <hash alg="SHA3-384">8ea63a97a14f20192e17799794f02ff120ee1894bbf938ea246cb303b1464768c88174bf52a3e5c3babb6ee1826dc07f</hash>
-        <hash alg="SHA3-256">cb586aa5dc5408d85ac04f3e65bea716c4a7a5e703b5aae90effa8301a12f284</hash>
-        <hash alg="SHA3-512">13d160753212ae43ab68780bbac73b509e60bf102c41ca726493cd181cfa87197849fcec02389ada49e27cc91f4d092b05dd323e0be6717533d982256e6aafa2</hash>
       </hashes>
       <licenses>
         <license>
@@ -417,9 +372,6 @@
         <hash alg="SHA-256">1467931448a0817696ae2805b7b8b20bfb082652bf9c4efaed528930dc49389b</hash>
         <hash alg="SHA-512">11547e75cc80bee26f532e2598bc6e4ffa802941496dc0d8ce017f1b15e01ebbb80e91ed17d1047916e32bf2fc58da532bc71a1dfe93afccc277a296d86634ba</hash>
         <hash alg="SHA-384">dae0cb1a7ab9ccc75413f46f18ae160e12e91dfef0c17a07ea547a365e9fb422c071aa01579f2a320f15ce6ee4c29038</hash>
-        <hash alg="SHA3-384">654b418f330fa02f1111a20c27395ec5c7f463907ae44f60057c94da04f81e815cf1c3959f005026381ef79030049694</hash>
-        <hash alg="SHA3-256">2c4deb8d79876b80b210ef72dc5de2b19607e50fbe3abf09a4324576ca0881fc</hash>
-        <hash alg="SHA3-512">0d9be5610b2bcb6bb7562ee8bcc0d68f81d3771958ce9299c5e57e8ec952c96906d711587b7f72936328c72fb41687b4f908c4de3070b78cc1f3e257cf4b715e</hash>
       </hashes>
       <licenses>
         <license>
@@ -442,9 +394,6 @@
         <hash alg="SHA-256">e7c2a48e8515ba1f49fa637d57b4e2f590b3f5bd97407ac699c3aa5efb1204a9</hash>
         <hash alg="SHA-512">b4eeb5757118e264ec7f107d879270784357380d6f53471b7874dd7e0166fdf5686a95eb66bab867abbe9536da032ab052e207165211391c293cbf6178431fb6</hash>
         <hash alg="SHA-384">b67cbb4ef32141423000dd4e067bf32e0c1dd2c4689c611522b9fedfc1744513175a22f4b1276f2cec4721c9467cf882</hash>
-        <hash alg="SHA3-384">817fc9641f4fc52bfd76006886c6eba975f6f09b2a7cc59334729a8cc033807c8e89be9ec4309acfc16ed65ff6eee018</hash>
-        <hash alg="SHA3-256">f26080cceb5a2e605f3844d6dc8dd3f14c543cb14510765d841d71a64fa454dc</hash>
-        <hash alg="SHA3-512">00646c78d65ec854e157638f40735f1888aa585ede59915d58386c599c2fe54ec8c1da73284aeff00ce3142165e33c4c995ad39d08843c31e9e4d7e32c746836</hash>
       </hashes>
       <licenses>
         <license>
