{"diffoscope-json-version": 1, "source1": "/input1", "source2": "/input2", "unified_diff": null, "details": [{"source1": "Pretty-printed", "source2": "Pretty-printed", "comments": ["Similarity: 0.8902951710987426%", "Differences: {\"'components'\": \"{0: {'group': 'commons-codec', 'name': 'commons-codec', 'version': '1.15', \"", " \"'description': 'The Apache Commons Codec package contains simple encoder and \"", " 'decoders for various formats such as Base64 and Hexadecimal. In addition to '", " 'these widely used encoders and decoders, the codec package also maintains a '", " \"collection of phonetic encoding utilities.', 'hashes': {0: {'content': \"", " \"'303baf002ce6d38219 [\u2026]"], "unified_diff": "@@ -1,1881 +1,1836 @@\n {\n \"bomFormat\": \"CycloneDX\",\n \"components\": [\n {\n- \"bom-ref\": \"pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar\",\n- \"description\": \"Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.\",\n+ \"bom-ref\": \"pkg:maven/commons-codec/commons-codec@1.15?type=jar\",\n+ \"description\": \"The Apache Commons Codec package contains simple encoder and decoders for various formats such as Base64 and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.\",\n \"externalReferences\": [\n {\n \"type\": \"issue-tracker\",\n- \"url\": \"https://issues.apache.org/jira/browse/LANG\"\n+ \"url\": \"https://issues.apache.org/jira/browse/CODEC\"\n },\n {\n \"type\": \"vcs\",\n- \"url\": \"https://gitbox.apache.org/repos/asf?p=commons-lang.git\"\n+ \"url\": \"https://github.com/apache/commons-codec\"\n }\n ],\n- \"group\": \"org.apache.commons\",\n+ \"group\": \"commons-codec\",\n \"hashes\": [\n {\n \"alg\": \"MD5\",\n- \"content\": \"19fe50567358922bdad277959ea69545\"\n+ \"content\": \"303baf002ce6d382198090aedd9d79a2\"\n },\n {\n \"alg\": \"SHA-1\",\n- \"content\": \"c6842c86792ff03b9f1d1fe2aab8dc23aa6c6f0e\"\n+ \"content\": \"49d94806b6e3dc933dacbd8acb0fdbab8ebd1e5d\"\n },\n {\n \"alg\": \"SHA-256\",\n- \"content\": \"d919d904486c037f8d193412da0c92e22a9fa24230b9d67a57855c5c31c7e94e\"\n+ \"content\": \"b3e9f6d63a790109bf0d056611fbed1cf69055826defeb9894a71369d246ed63\"\n },\n {\n \"alg\": \"SHA-512\",\n- \"content\": \"fbdbc0943cb3498b0148e86a39b773f97c8e6013740f72dbc727faeabea402073e2cc8c4d68198e5fc6b08a13b7700236292e99d4785f2c9989f2e5fac11fd81\"\n+ \"content\": \"da30a716770795fce390e4dd340a8b728f220c6572383ffef55bd5839655d5611fcc06128b2144f6cdcb36f53072a12ec80b04afee787665e7ad0b6e888a6787\"\n },\n {\n \"alg\": \"SHA-384\",\n- \"content\": \"c34b8a0e0eba2168ad56fedeb7a1d710b6f1d3f1ce6aae99a4e0247bd120efbbadc8dcb2f731045b8a16e3efd30604dc\"\n+ \"content\": \"05d0506283716472175d44c2a4766523397bf8a007c18848f9c9a61718cc8aa437f9cb4b91771037ab29a960860b62a0\"\n },\n {\n \"alg\": \"SHA3-384\",\n- \"content\": \"8ad6ebe7754bf0caa8cda7e59c0e95360d76e06a7ad6aeec5637985519dbd1dd06e7eed04711039f36ec4c49de280def\"\n+ \"content\": \"12fad4ef78274b06f97b1243cea6f970088abde082d2de9377d915a34b44f7d7d67807c03e59c849b69f1544e2a9a1be\"\n },\n {\n \"alg\": \"SHA3-256\",\n- \"content\": \"18ef639b2aeeb5aedffb18dbf20c79f33e300d99fb31b131689639cc470e6e4c\"\n+ \"content\": \"87be248f33f241121f54aad61a9a460a79eabefbf1b5b0dd22aeb95b581f727e\"\n },\n {\n \"alg\": \"SHA3-512\",\n- \"content\": \"fbea96114dcf4f31cfaaa99987be756ddda3a6c74f8c835461997df794d54b92da1f60fe5c3f1f2a43cb8c5f5db7f4048bef77c70993673c7a93f3660fffc8da\"\n+ \"content\": \"8c992c9c569ebaa0bf956a4c5b34fbf5e1ed1c212c2dd896fa216183ee0bcd341e96698af4b9cec7e8880762faa081a3d3a27f51349aa457cb8e373e4f57c788\"\n }\n ],\n \"licenses\": [\n {\n \"license\": {\n \"id\": \"Apache-2.0\"\n }\n }\n ],\n \"modified\": false,\n- \"name\": \"commons-lang3\",\n- \"purl\": \"pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar\",\n+ \"name\": \"commons-codec\",\n+ \"purl\": \"pkg:maven/commons-codec/commons-codec@1.15?type=jar\",\n \"type\": \"library\",\n- \"version\": \"3.12.0\"\n+ \"version\": \"1.15\"\n },\n {\n- \"bom-ref\": \"pkg:maven/io.github.openfeign/feign-core@12.3?type=jar\",\n- \"description\": \"Feign Core\",\n- \"group\": \"io.github.openfeign\",\n+ \"bom-ref\": \"pkg:maven/org.slf4j/jcl-over-slf4j@2.0.7?type=jar\",\n+ \"description\": \"JCL 1.2 implemented over SLF4J\",\n+ \"group\": \"org.slf4j\",\n \"hashes\": [\n {\n \"alg\": \"MD5\",\n- \"content\": \"9e6e1ff8b68d2b6c1fc5bdc7ff208030\"\n+ \"content\": \"4e8d6cd31f7e6277280c95157ac7845a\"\n },\n {\n \"alg\": \"SHA-1\",\n- \"content\": \"d280b09a17b63e69788fd3d8d215b7013ab48b16\"\n+ \"content\": \"f127fe5ee53404a8b3697cdd032dd1dd6a29dd77\"\n },\n {\n \"alg\": \"SHA-256\",\n- \"content\": \"939fbed2c2392a9633bc1d26f0ef9e934b059d1a9a9d4d966cedaf9075c546ec\"\n+ \"content\": \"41806757e1d26dae5d6db2ca7d4a5176eed2d6e709cd86564d4a11dab0601742\"\n },\n {\n \"alg\": \"SHA-512\",\n- \"content\": \"8335901d8918747dc29d37a2ac630c6a78ea6ff04bfea77e6d8c74188e9e584142920996c45120caa86299486949a04e1ec1f1bef30229904360fcb5c5d4a1c4\"\n+ \"content\": \"221b39b85145cf7c245acb7f2692a02b6c5816f8b1187a1a77942dd39de958c1b01ecd066682eb88244f87b2a47513d40b6c1e69ef49a43b2a07ba818f124e17\"\n },\n {\n \"alg\": \"SHA-384\",\n- \"content\": \"dc7a0d10bdf2c3aeafba83ca7e41d21c3288f3df0b76e339788fcf7606381970b6429108dbf2d1212075d1feba040842\"\n+ \"content\": \"fa8d53b46cd3ddab0bd265d384a90c35efef6a02a7822aa6f79065cee68d78f6ad7c4d248dea7497af449845dc962730\"\n },\n {\n \"alg\": \"SHA3-384\",\n- \"content\": \"2907938ea76735cde9b34676c6c8b04786f1595687f96734e7659768175cb7a525508f84c48d9b10b0b2f593158e1ed5\"\n+ \"content\": \"cf06cfeaba477f7738f089ba401fb841074681d1c7f465546cdf0e95751a8bf912493428876a7d9108eef83f637c6a1e\"\n },\n {\n \"alg\": \"SHA3-256\",\n- \"content\": \"474f6b0ab420bf63549ed123fff99b73fc881771c6a0c591e58dfb17adbe9899\"\n+ \"content\": \"efbad2de8683215936c56b3f8fd3492f1cc27c2ee77595a99c794e18777dec42\"\n },\n {\n \"alg\": \"SHA3-512\",\n- \"content\": \"553a6dc1c3cf7facdb3b4e15be1d6d90259f1d36ce137db3a6e53a967ef4939aaa98c974b059c8f32dd42316bb7eee3b51910cf0fb172d0df9b8ff39d8cc722d\"\n+ \"content\": \"2707d5513e49f6e3ea6dec96510d360cfc125dab164ae5d99a1dcbd628751640f625a70ed749dad66024ae9fd7725f1c6c7f76de7f5a6efc9d8208a9e01922f7\"\n }\n ],\n \"licenses\": [\n {\n \"license\": {\n \"id\": \"Apache-2.0\"\n }\n }\n ],\n \"modified\": false,\n- \"name\": \"feign-core\",\n- \"purl\": \"pkg:maven/io.github.openfeign/feign-core@12.3?type=jar\",\n+ \"name\": \"jcl-over-slf4j\",\n+ \"purl\": \"pkg:maven/org.slf4j/jcl-over-slf4j@2.0.7?type=jar\",\n \"type\": \"library\",\n- \"version\": \"12.3\"\n+ \"version\": \"2.0.7\"\n },\n {\n- \"bom-ref\": \"pkg:maven/org.codehaus.plexus/plexus-classworlds@2.7.0?type=jar\",\n- \"description\": \"A class loader framework\",\n- \"externalReferences\": [\n- {\n- \"type\": \"issue-tracker\",\n- \"url\": \"http://github.com/codehaus-plexus/plexus-classworlds/issues\"\n- }\n- ],\n- \"group\": \"org.codehaus.plexus\",\n+ \"bom-ref\": \"pkg:maven/org.apache.maven/maven-plugin-api@3.8.7?type=jar\",\n+ \"description\": \"The API for plugins - Mojos - development.\",\n+ \"group\": \"org.apache.maven\",\n \"hashes\": [\n {\n \"alg\": \"MD5\",\n- \"content\": \"6ed852b1a004288c44438381e6aaee1e\"\n+ \"content\": \"b1cc5a8fda5211df27c48c9e644255aa\"\n },\n {\n \"alg\": \"SHA-1\",\n- \"content\": \"fe6f1acefd1a302dd4bc6d9d7f15358828d2a44d\"\n+ \"content\": \"80c6ba199912c82627c11bc65ba81a6d21bd172f\"\n },\n {\n \"alg\": \"SHA-256\",\n- \"content\": \"c60ae538ba66adbc06aae205fbe2306211d3d213ab6df3239ec03cdde2458ad6\"\n+ \"content\": \"4f084b22f76f14eb8a795101fb83627ff11b6f2c7cb17f400d54322e7d000f74\"\n },\n {\n \"alg\": \"SHA-512\",\n- \"content\": \"8057b6c7d52aaa61a51aba6ec613e8bd1a094d62a84d50a37bfe7776ff53780f1602b6169242c3a60b28c9d496458baaac5377575553e4af881643490ccda912\"\n+ \"content\": \"22b0ea6ca5ad6a22d64b9d98eb1dc917e67584acd3fd5a9dc91a5c3e012b6ea3e78666d36ed9d378d0e410dc82d0bbb00939905fd0c8cc506e44d2ceee44aa8d\"\n },\n {\n \"alg\": \"SHA-384\",\n- \"content\": \"4b079cab0a5f50631ef134f6578f4772f59897977d20ddef071920c107ca13cc3ce85d7b3c2bad586fb7a29fb4a4e07d\"\n+ \"content\": \"bf6d11d928190987d5d8b5a384b25534905e45b573206f46689e63cf338e1a834c027ef9023d48e7ce63b2bcf4e04b74\"\n },\n {\n \"alg\": \"SHA3-384\",\n- \"content\": \"1e4500603fc2ac0c080f4a7b127171103295571bc7e570e50f6c479c62667cf78cf177c09b92f39702864fff83e35f9f\"\n+ \"content\": \"74708bf45757d31a98e12e3937a72e902c830de92cf4514b462a7430c5582bccf2c910303baee29402a83b3e1a2ede35\"\n },\n {\n \"alg\": \"SHA3-256\",\n- \"content\": \"ff715bac48dda5b19e29e18e47dbba9015cfcdf3a949c19154ae9ea3e5951c60\"\n+ \"content\": \"83805e1da8e805c20883249c20aa7e3c66c06db8fd882be9066d76e21e01b801\"\n },\n {\n \"alg\": \"SHA3-512\",\n- \"content\": \"7bb6f86ea7300d4321fb78a0cfcbd2acc2b6639abb75e68e4bf1e301622ee1d41bdeed728aa49d74578918fe5da954860a29a9a6249e651db3edae941f816bf7\"\n+ \"content\": \"60a413299f9a70e23ec87085361f176a5262774592572f1784f6522638b23ea86ee3c4823982bdb2c4d1c1e27e857d900e6fec096e2930fb2fb5258984007459\"\n }\n ],\n \"licenses\": [\n {\n \"license\": {\n \"id\": \"Apache-2.0\"\n }\n }\n ],\n \"modified\": false,\n- \"name\": \"plexus-classworlds\",\n- \"purl\": \"pkg:maven/org.codehaus.plexus/plexus-classworlds@2.7.0?type=jar\",\n+ \"name\": \"maven-plugin-api\",\n+ \"purl\": \"pkg:maven/org.apache.maven/maven-plugin-api@3.8.7?type=jar\",\n \"type\": \"library\",\n- \"version\": \"2.7.0\"\n+ \"version\": \"3.8.7\"\n },\n {\n- \"bom-ref\": \"pkg:maven/org.bouncycastle/bcpg-jdk15on@1.70?type=jar\",\n- \"description\": \"The Bouncy Castle Java API for handling the OpenPGP protocol. This jar contains the OpenPGP API for JDK 1.5 and up. The APIs can be used in conjunction with a JCE/JCA provider such as the one provided with the Bouncy Castle Cryptography APIs.\",\n- \"externalReferences\": [\n- {\n- \"type\": \"issue-tracker\",\n- \"url\": \"https://github.com/bcgit/bc-java/issues\"\n- },\n- {\n- \"type\": \"vcs\",\n- \"url\": \"https://github.com/bcgit/bc-java\"\n- }\n- ],\n- \"group\": \"org.bouncycastle\",\n+ \"bom-ref\": \"pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.3.5?type=jar\",\n+ \"group\": \"org.eclipse.sisu\",\n \"hashes\": [\n {\n \"alg\": \"MD5\",\n- \"content\": \"01ddc3aa0289346f4db19d95039cefdb\"\n+ \"content\": \"1b296b0ddd911ed3750b3df93b395cd5\"\n },\n {\n \"alg\": \"SHA-1\",\n- \"content\": \"062f72ec06f31a6c31a3f3355fce0384b21126d7\"\n+ \"content\": \"d4265dd4f0f1d7a06d80df5a5f475d5ff9c17140\"\n },\n {\n \"alg\": \"SHA-256\",\n- \"content\": \"4f08f4aa74048824151c98dd3e92e7165ac30659834404f08a8e843bdad32847\"\n+ \"content\": \"c5994010bcdce1d2bd603a4d50c47191ddbd7875d1157b23aaa26d33c82fda13\"\n },\n {\n \"alg\": \"SHA-512\",\n- \"content\": \"4e240b7811ef90c090e83a181dace41da487555e4136221861b0060f9af6d8b316f2dd0472f747adb98ca5372f46055456ef04bdc0c3992188ab13302922fce9\"\n+ \"content\": \"f4790768c0d958b3429a3241abb15f9bb6e2fd7f43a5e034dde6a3a6820e6941c00f10ad084d5c38f8edc144e7acbea7ba3dc8952f01dab41e443803db2a4efc\"\n },\n {\n \"alg\": \"SHA-384\",\n- \"content\": \"d89dec6226112d13cbea461d84740699770dd7d8ad3f67ab65e7b49fd08a096a948e54da2e6a681925c4320f410bba37\"\n+ \"content\": \"b76e74a0cda6d88c1c03d40e71d238fa13e2070485c026945ee8dc6da62eacb02071a65df35fa3e4d9d6b343a89fb605\"\n },\n {\n \"alg\": \"SHA3-384\",\n- \"content\": \"5e8e8ca63cc550a8f50b627c4dd051f0eb5c31b99ff53dabd7d5f5d1ed98d0dc1d4963a09fc0db32f8e0ff769a2a6e65\"\n+ \"content\": \"a2d3bae2f5e518c7d11e584f6b8b7368f3b927c3405f48e27d4225d4e2f4917fb5623c0071fc47f081200b7d754571d1\"\n },\n {\n \"alg\": \"SHA3-256\",\n- \"content\": \"77f28e7e22b3b3a8d7b667fb7f783847c4b11ee7208833636e09e8b38390fd51\"\n+ \"content\": \"b998bcdf4f8b5550a543865408e94fadcf1dd37ac19ec37269ff5307220b2775\"\n },\n {\n \"alg\": \"SHA3-512\",\n- \"content\": \"cb238dbb641c42c49b5801bdfa6432395e860c1a7485ba68e2d57887e3d22ff254718c6cbfa34c107bfb09d74e2f85c33b95f89dfa886e141a8247a0abf2b5c2\"\n+ \"content\": \"e9331e8a1b4281b45abec89dd9b7dd948207ebd7bed6be5978a5792d59327f7a4d4ee87c6f60392021f24f28439ab4ca4b6305ef6528e1c241c7a27c883b5931\"\n }\n ],\n \"licenses\": [\n {\n \"license\": {\n- \"name\": \"Bouncy Castle Licence\",\n- \"url\": \"https://www.bouncycastle.org/licence.html\"\n- }\n- },\n- {\n- \"license\": {\n- \"id\": \"Apache-1.1\",\n- \"url\": \"http://apache.org/licenses/LICENSE-1.1\"\n+ \"id\": \"EPL-1.0\"\n }\n }\n ],\n \"modified\": false,\n- \"name\": \"bcpg-jdk15on\",\n- \"purl\": \"pkg:maven/org.bouncycastle/bcpg-jdk15on@1.70?type=jar\",\n- \"type\": \"library\",\n- \"version\": \"1.70\"\n- },\n- {\n- \"bom-ref\": \"pkg:maven/org.jreleaser/jreleaser-disco-java-sdk@1.6.0?type=jar\",\n- \"group\": \"org.jreleaser\",\n- \"modified\": false,\n- \"name\": \"jreleaser-disco-java-sdk\",\n- \"purl\": \"pkg:maven/org.jreleaser/jreleaser-disco-java-sdk@1.6.0?type=jar\",\n+ \"name\": \"org.eclipse.sisu.inject\",\n+ \"purl\": \"pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.3.5?type=jar\",\n \"type\": \"library\",\n- \"version\": \"1.6.0\"\n+ \"version\": \"0.3.5\"\n },\n {\n- \"bom-ref\": \"pkg:maven/org.codehaus.plexus/plexus-io@3.4.1?type=jar\",\n- \"externalReferences\": [\n- {\n- \"type\": \"issue-tracker\",\n- \"url\": \"https://github.com/codehaus-plexus/plexus-io/issues\"\n- },\n- {\n- \"type\": \"vcs\",\n- \"url\": \"http://github.com/codehaus-plexus/plexus-io\"\n- }\n- ],\n- \"group\": \"org.codehaus.plexus\",\n+ \"bom-ref\": \"pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar\",\n+ \"description\": \"Apache HttpComponents Client\",\n+ \"group\": \"org.apache.httpcomponents\",\n \"hashes\": [\n {\n \"alg\": \"MD5\",\n- \"content\": \"7921fc78e18b1dc3dabe8ca5e3558657\"\n+ \"content\": \"40d6b9075fbd28fa10292a45a0db9457\"\n },\n {\n \"alg\": \"SHA-1\",\n- \"content\": \"e9dc0280372501917a124af943dcb709f73577a2\"\n+ \"content\": \"e5f6cae5ca7ecaac1ec2827a9e2d65ae2869cada\"\n },\n {\n \"alg\": \"SHA-256\",\n- \"content\": \"ac3be07c2968f98656604ddb8fdf08f1cfc560bc7b329fd17847f151510dc2c4\"\n+ \"content\": \"6fe9026a566c6a5001608cf3fc32196641f6c1e5e1986d1037ccdbd5f31ef743\"\n },\n {\n \"alg\": \"SHA-512\",\n- \"content\": \"c1555c9c23b61cd9fa1ee39c4015652eedf7e593e0515188d60ce66d1e33852e3570db7c6a471c3d128cbb0cb3bad1aaa526d2db532b0ed73b85678fb5436a5c\"\n+ \"content\": \"3567739186e551f84cad3e4b6b270c5b8b19aba297675a96bcdff3663ff7d20d188611d21f675fe5ff1bfd7d8ca31362070910d7b92ab1b699872a120aa6f089\"\n },\n {\n \"alg\": \"SHA-384\",\n- \"content\": \"96a7ad4a6ace76b43a3188e621431b316b671b416f1fb894db73ab8c57729234c2ae4b4f0680045df7a3f54e1699107b\"\n+ \"content\": \"093ac3e2dde58e34aa70309c7305eb3c9b5be2509a9293f1672494da55479a86bd112e83326746dc7a32855472952b99\"\n },\n {\n \"alg\": \"SHA3-384\",\n- \"content\": \"6e6295afe879f7236bd223f14102ceb3714f18fe539c9c1c65782d9fa250aaf90a57a433ff9df264a66053170408dc68\"\n+ \"content\": \"cd6882e7868624164e460f2f3ea01466f863c0dcb902b031c656b57356f563be83b29530df41d88d634ed3d01fc9964d\"\n },\n {\n \"alg\": \"SHA3-256\",\n- \"content\": \"ab97d2c2f4df777fb6e1a01b781c58e644b4bd2f6093d0dcd31533685d01bee4\"\n+ \"content\": \"710b1d8d7dae0b8e4270756694ca9c83d64965f42d3b4170c609b14d47c2762c\"\n },\n {\n \"alg\": \"SHA3-512\",\n- \"content\": \"9d2aa908d414745ad92fae20b8b2cf833e137293a5e01d95c5308ab1464636696d7aa6351cf62323858e7942aa64a6af676710c8788ea6bc1ebadb094353a2a4\"\n+ \"content\": \"276fa6a6599dc89382d658115695cf4da6b0d39b34e9c349c17a5dbd64122eaee553bb9ed75c0378ec4a83be157c8aa39370662de3c9b8fd55ebc1dd608383e6\"\n }\n ],\n \"licenses\": [\n {\n \"license\": {\n \"id\": \"Apache-2.0\"\n }\n }\n ],\n \"modified\": false,\n- \"name\": \"plexus-io\",\n- \"purl\": \"pkg:maven/org.codehaus.plexus/plexus-io@3.4.1?type=jar\",\n+ \"name\": \"httpclient\",\n+ \"purl\": \"pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar\",\n \"type\": \"library\",\n- \"version\": \"3.4.1\"\n+ \"version\": \"4.5.13\"\n },\n {\n- \"bom-ref\": \"pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.2?type=jar\",\n- \"description\": \"Core annotations used for value types, used by Jackson data binding package.\",\n- \"externalReferences\": [\n- {\n- \"type\": \"vcs\",\n- \"url\": \"https://github.com/FasterXML/jackson-annotations\"\n- }\n- ],\n- \"group\": \"com.fasterxml.jackson.core\",\n+ \"bom-ref\": \"pkg:maven/org.twdata.maven/mojo-executor@2.4.0?type=jar\",\n+ \"group\": \"org.twdata.maven\",\n \"hashes\": [\n {\n \"alg\": \"MD5\",\n- \"content\": \"10d19982a8890f6eb37557af2f58e272\"\n+ \"content\": \"ba2b0edcf5cfc3b5c2ba166aecc6c27c\"\n },\n {\n \"alg\": \"SHA-1\",\n- \"content\": \"a7aae9525864930723e3453ab799521fdfd9d873\"\n+ \"content\": \"64f0498596a62e2917519268183e06b08ca3e4e1\"\n },\n {\n \"alg\": \"SHA-256\",\n- \"content\": \"2c6869d505cf60dc066734b7d50339f975bd3adc635e26a78abb71acb4473c0d\"\n+ \"content\": \"7be7713cfd9f0e9fab9acbe2538bf06186ea6ae0cc80b324afdb3861aaf18889\"\n },\n {\n \"alg\": \"SHA-512\",\n- \"content\": \"a978384791bdc074df8039ffc95bb93f0f60d14d476861ee2a0ce208b33a991c486a07345cb80559252c3ff1dea14d3efb818c19bdc18435946dc8754d8e6ee3\"\n+ \"content\": \"944378ba9c3768636712f8736515ed81d6801adbc399ba00f54654fcb1af9581ae41c329b40ef01026694f036e7a6a2b1d7ac7e6d18e1809f935829d1a91503b\"\n },\n {\n \"alg\": \"SHA-384\",\n- \"content\": \"d5111c69020666689414921ae4a8950f9fbdf86dec1360f6827beeee9ebd3f78db74e69c76e0becaba47eb34fdaaeb5a\"\n+ \"content\": \"e5b17ff4a1a4ec8625c83c4f2182299d647f72ca6cb1501f90f839be8facb0933347ba8e54b9db5829233c1f578f3027\"\n },\n {\n \"alg\": \"SHA3-384\",\n- \"content\": \"53b1a8891482e16a7d8849251cb0dcd1aacf6aaa2161a73589d9742ad96763e384d426d04db762e56fc4536f4e719084\"\n+ \"content\": \"9f1d2dba50807dd3266ec4ed2e5f607954300d89def4454ca06eacb9779b1f41079ae1ce00b629ba42fb1ab2802a8ad6\"\n },\n {\n \"alg\": \"SHA3-256\",\n- \"content\": \"14f7b3c51c96f7429f7c60a69e3b7e4f9f2207820141f197d56b57018ffd5640\"\n+ \"content\": \"8192f9f0b59c25a4b4ded04a581513b5d22673e2a0e160ed0f160f834af88a18\"\n },\n {\n \"alg\": \"SHA3-512\",\n- \"content\": \"75e4e4fb847fdacdd497cf6b340362581ab4091120ccf2ec32a273709d336af0f78c90ce12b2dd1d17354aa08583af0d3ded89bb415720f45f2d9c110d71dd7a\"\n+ \"content\": \"ebb7f33969e7a77360178f0047dcb0bde06b24862efee965839b08b30eae815ea7032acbe2896070e7020168d0a5d0877f0844ec3788515e08b5ad80e51bdfd3\"\n }\n ],\n \"licenses\": [\n {\n \"license\": {\n \"id\": \"Apache-2.0\"\n }\n }\n ],\n \"modified\": false,\n- \"name\": \"jackson-annotations\",\n- \"purl\": \"pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.2?type=jar\",\n+ \"name\": \"mojo-executor\",\n+ \"purl\": \"pkg:maven/org.twdata.maven/mojo-executor@2.4.0?type=jar\",\n \"type\": \"library\",\n- \"version\": \"2.14.2\"\n+ \"version\": \"2.4.0\"\n },\n {\n- \"bom-ref\": \"pkg:maven/org.codehaus.plexus/plexus-utils@3.4.1?type=jar\",\n- \"description\": \"A collection of various utility classes to ease working with strings, files, command lines, XML and more.\",\n+ \"bom-ref\": \"pkg:maven/org.apache.commons/commons-compress@1.22?type=jar\",\n+ \"description\": \"Apache Commons Compress software defines an API for working with compression and archive formats. These include: bzip2, gzip, pack200, lzma, xz, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.\",\n \"externalReferences\": [\n {\n \"type\": \"issue-tracker\",\n- \"url\": \"http://github.com/codehaus-plexus/plexus-utils/issues\"\n+ \"url\": \"https://issues.apache.org/jira/browse/COMPRESS\"\n },\n {\n \"type\": \"vcs\",\n- \"url\": \"http://github.com/codehaus-plexus/plexus-utils\"\n+ \"url\": \"https://gitbox.apache.org/repos/asf?p=commons-compress.git\"\n }\n ],\n- \"group\": \"org.codehaus.plexus\",\n+ \"group\": \"org.apache.commons\",\n \"hashes\": [\n {\n \"alg\": \"MD5\",\n- \"content\": \"c155c4135ef7ba134659bf1af31c5156\"\n+ \"content\": \"f1e4db16fee4291212d91409313a8086\"\n },\n {\n \"alg\": \"SHA-1\",\n- \"content\": \"4de9992988c534efd668bfcca0480ebe13e0c0eb\"\n+ \"content\": \"691a8b4e6cf4248c3bc72c8b719337d5cb7359fa\"\n },\n {\n \"alg\": \"SHA-256\",\n- \"content\": \"52d85e04b3918722af11d12855b4a8257df96a0e76c8f4e3852e6faa851f357b\"\n+ \"content\": \"53d04a0efc7223baecaa303bd5d298eb0600e6b82b4076f9cecd558b97ba760b\"\n },\n {\n \"alg\": \"SHA-512\",\n- \"content\": \"0668d413520a713d9279123eccae3b5e9bc79f41dd8da3b3a1ba79b7b60086c009639d91d84df230e490192fe63b10390f3901478c69bfd452a1280364d24876\"\n+ \"content\": \"2d64fa6cd081fff5d73ee662a82f6186991fc13b4bdaee18b5f1bdcab06d9acb70e3713d18b296337791448251fbd6768bd84afaa817a10547652d0cfa885563\"\n },\n {\n \"alg\": \"SHA-384\",\n- \"content\": \"cefd95e956f79c103c95f15d8a5b914b7158dfdf1bb1d7a1cb1eb4f89ab47f841f5fbc3f1cd9380bb57252a036cb63ee\"\n+ \"content\": \"295d7f69d151abbd784e1c4d021c77ce43e129bb5bda0c55762b32d77c8607863383297674ec8a212ea3dfe4007b0044\"\n },\n {\n \"alg\": \"SHA3-384\",\n- \"content\": \"26aa374d12efd70c423a45794427f3ca297a20663b2297ef806e7f2bd57bb9e885da1222e1c557a80fb2a012cef5de52\"\n+ \"content\": \"af04eb1b4647b1a041c5ee994c2c7a32556b5410b916fedb69905f166938baa43ba54fdc67084205794c02680d3c6349\"\n },\n {\n \"alg\": \"SHA3-256\",\n- \"content\": \"6ec121dba759799e676e53ab9b57d379907c6fb8f844177f63c21b7324011dc3\"\n+ \"content\": \"40f2960e82adfb171b0c5430271fdb0c0dae243aaf9b08021df54fd4d4a3a0b0\"\n },\n {\n \"alg\": \"SHA3-512\",\n- \"content\": \"3ba2485a1471edd0e43819277db828573ba2299599dd273bbb09ae4453343bc8e32672adc3b7a4eb523edd64aed8a50427f5b7a968870c152e7859f2c6bcbf34\"\n+ \"content\": \"f2c445f77bda3ef230a2b78ea88d86e48a7d6db36805f841d5cffe1f178842a161b2fda0b0d60162af210f18ed9c5bb9579c963291c26f715c1aa389d9a6785c\"\n }\n ],\n \"licenses\": [\n {\n \"license\": {\n \"id\": \"Apache-2.0\"\n }\n }\n ],\n \"modified\": false,\n- \"name\": \"plexus-utils\",\n- \"purl\": \"pkg:maven/org.codehaus.plexus/plexus-utils@3.4.1?type=jar\",\n+ \"name\": \"commons-compress\",\n+ \"purl\": \"pkg:maven/org.apache.commons/commons-compress@1.22?type=jar\",\n \"type\": \"library\",\n- \"version\": \"3.4.1\"\n+ \"version\": \"1.22\"\n },\n {\n- \"bom-ref\": \"pkg:maven/javax.inject/javax.inject@1?type=jar\",\n- \"description\": \"The javax.inject API\",\n+ \"bom-ref\": \"pkg:maven/org.jreleaser/jreleaser-disco-java-sdk@1.6.0?type=jar\",\n+ \"description\": \"Foojay Disco API Java SDK\",\n \"externalReferences\": [\n {\n \"type\": \"vcs\",\n- \"url\": \"http://code.google.com/p/atinject/source/checkout\"\n+ \"url\": \"https://github.com/jreleaser/jreleaser\"\n }\n ],\n- \"group\": \"javax.inject\",\n+ \"group\": \"org.jreleaser\",\n+ \"licenses\": [\n+ {\n+ \"license\": {\n+ \"id\": \"Apache-2.0\",\n+ \"url\": \"https://www.apache.org/licenses/LICENSE-2.0\"\n+ }\n+ }\n+ ],\n+ \"modified\": false,\n+ \"name\": \"jreleaser-disco-java-sdk\",\n+ \"purl\": \"pkg:maven/org.jreleaser/jreleaser-disco-java-sdk@1.6.0?type=jar\",\n+ \"type\": \"library\",\n+ \"version\": \"1.6.0\"\n+ },\n+ {\n+ \"bom-ref\": \"pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar\",\n+ \"description\": \"The slf4j API\",\n+ \"group\": \"org.slf4j\",\n \"hashes\": [\n {\n \"alg\": \"MD5\",\n- \"content\": \"289075e48b909e9e74e6c915b3631d2e\"\n+ \"content\": \"403dffa46cdd2e3c82da19df4f394a4c\"\n },\n {\n \"alg\": \"SHA-1\",\n- \"content\": \"6975da39a7040257bd51d21a231b76c915872d38\"\n+ \"content\": \"41eb7184ea9d556f23e18b5cb99cad1f8581fc00\"\n },\n {\n \"alg\": \"SHA-256\",\n- \"content\": \"91c77044a50c481636c32d916fd89c9118a72195390452c81065080f957de7ff\"\n+ \"content\": \"5d6298b93a1905c32cda6478808ac14c2d4a47e91535e53c41f7feeb85d946f4\"\n },\n {\n \"alg\": \"SHA-512\",\n- \"content\": \"e126b7ccf3e42fd1984a0beef1004a7269a337c202e59e04e8e2af714280d2f2d8d2ba5e6f59481b8dcd34aaf35c966a688d0b48ec7e96f102c274dc0d3b381e\"\n+ \"content\": \"216d2cac27d501972c888f94dfa747d700b80d60813884b6ab4b12c6a3b17ed0c21a1d27e1aa4332c97c828f20039e3913d2763d7e1a3cef36ae4389a276e7a8\"\n },\n {\n \"alg\": \"SHA-384\",\n- \"content\": \"ac04c9f03ccbe35a25deb8b50280a0ca01dbe6aff0dd795d55af6112bfe3cd5817eb82f32fb18378d86cd64b07597190\"\n+ \"content\": \"c25b39f418aa726ba8405dfd9b356131f89984e2ef5a55a724a2abf3b7c78443f671105835161d2414d602cf03da9f2d\"\n },\n {\n \"alg\": \"SHA3-384\",\n- \"content\": \"fca090ecb1edeacb9fe865dc515cd1d109b323cd742d4a9733ff199a96ee96e0db4f924079520b9c189ef750f255475d\"\n+ \"content\": \"f33abfaac21badae6f85d3ebbc6c1204fd7fda3bb15173e763fa8cee95bce6a8270eec2c8f49343c66c8d2767bc317e1\"\n },\n {\n \"alg\": \"SHA3-256\",\n- \"content\": \"5b0054e39e522de0e0ffc4034d12f72270291fb24d94d5ffc9c4d69c25035fc6\"\n+ \"content\": \"6e00d4b264a2afc4ca4e98f716ecece66c32c626ca3f8c5d56b22092b6fe417b\"\n },\n {\n \"alg\": \"SHA3-512\",\n- \"content\": \"fb290f5a70b1efc1dff12f40a0b2d7b94019f66da42e78010c0b8e61f222c4f267b67e356a9e9c346eb801e5515e36243888f280c5cb95c2dd69016a30cadeb9\"\n+ \"content\": \"ad7b9142d370fc532a07cdd43881a129b012ff50e2bede3ac27d9bd31ec707bf2f45e82002fa59e962955cc38ab73cdd77713fca50cedc926c046f5617c1285b\"\n }\n ],\n \"licenses\": [\n {\n \"license\": {\n- \"id\": \"Apache-2.0\"\n+ \"id\": \"MIT\",\n+ \"url\": \"https://opensource.org/licenses/MIT\"\n }\n }\n ],\n \"modified\": false,\n- \"name\": \"javax.inject\",\n- \"purl\": \"pkg:maven/javax.inject/javax.inject@1?type=jar\",\n+ \"name\": \"slf4j-api\",\n+ \"purl\": \"pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar\",\n \"type\": \"library\",\n- \"version\": \"1\"\n+ \"version\": \"2.0.7\"\n },\n {\n- \"bom-ref\": \"pkg:maven/commons-codec/commons-codec@1.15?type=jar\",\n- \"description\": \"The Apache Commons Codec package contains simple encoder and decoders for various formats such as Base64 and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.\",\n+ \"bom-ref\": \"pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.2?type=jar\",\n+ \"description\": \"General data-binding functionality for Jackson: works on core streaming API\",\n \"externalReferences\": [\n {\n- \"type\": \"issue-tracker\",\n- \"url\": \"https://issues.apache.org/jira/browse/CODEC\"\n- },\n- {\n \"type\": \"vcs\",\n- \"url\": \"https://github.com/apache/commons-codec\"\n+ \"url\": \"https://github.com/FasterXML/jackson-databind\"\n }\n ],\n- \"group\": \"commons-codec\",\n+ \"group\": \"com.fasterxml.jackson.core\",\n \"hashes\": [\n {\n \"alg\": \"MD5\",\n- \"content\": \"303baf002ce6d382198090aedd9d79a2\"\n+ \"content\": \"c1b12dd14734cd1986132bf55042dd7e\"\n },\n {\n \"alg\": \"SHA-1\",\n- \"content\": \"49d94806b6e3dc933dacbd8acb0fdbab8ebd1e5d\"\n+ \"content\": \"01e71fddbc80bb86f71a6345ac1e8ab8a00e7134\"\n },\n {\n \"alg\": \"SHA-256\",\n- \"content\": \"b3e9f6d63a790109bf0d056611fbed1cf69055826defeb9894a71369d246ed63\"\n+ \"content\": \"501d3abce4d18dcc381058ec593c5b94477906bba6efbac14dae40a642f77424\"\n },\n {\n \"alg\": \"SHA-512\",\n- \"content\": \"da30a716770795fce390e4dd340a8b728f220c6572383ffef55bd5839655d5611fcc06128b2144f6cdcb36f53072a12ec80b04afee787665e7ad0b6e888a6787\"\n+ \"content\": \"85473a29d23292f49092af9e7a7a63993206847c53b3e71f3c67245d68f7b19cc7c341e0ece409eb5e96602df98a848e957d8691fdd2c5fcddd807df9078255e\"\n },\n {\n \"alg\": \"SHA-384\",\n- \"content\": \"05d0506283716472175d44c2a4766523397bf8a007c18848f9c9a61718cc8aa437f9cb4b91771037ab29a960860b62a0\"\n+ \"content\": \"5c54d6c497cb329c3424a30319bf657ea222349eadc5ae74c30e8dc1525d7b60b7785f4d20370267b03343dd738cc13e\"\n },\n {\n \"alg\": \"SHA3-384\",\n- \"content\": \"12fad4ef78274b06f97b1243cea6f970088abde082d2de9377d915a34b44f7d7d67807c03e59c849b69f1544e2a9a1be\"\n+ \"content\": \"98ff0b2a4dfc1faf319d4b0d38376c3c7a58b65d071db293232eed810adf2e525fecee3be45c99b41e20cf6a3a8ebef9\"\n },\n {\n \"alg\": \"SHA3-256\",\n- \"content\": \"87be248f33f241121f54aad61a9a460a79eabefbf1b5b0dd22aeb95b581f727e\"\n+ \"content\": \"2dba45f78a0d37402083975e18dbb3201705faf7e533c3e9721b9364c2a1ab0f\"\n },\n {\n \"alg\": \"SHA3-512\",\n- \"content\": \"8c992c9c569ebaa0bf956a4c5b34fbf5e1ed1c212c2dd896fa216183ee0bcd341e96698af4b9cec7e8880762faa081a3d3a27f51349aa457cb8e373e4f57c788\"\n+ \"content\": \"76ef73198269cfd0922f4ae86c8b7e6a9cd1b96ee55da43ebfe57dd34365cc1c5c5630fadf79e46156a52b6b96b7d1f694f5e4f5c4f6a3d3ebb31c927e414435\"\n }\n ],\n \"licenses\": [\n {\n \"license\": {\n \"id\": \"Apache-2.0\"\n }\n }\n ],\n \"modified\": false,\n- \"name\": \"commons-codec\",\n- \"purl\": \"pkg:maven/commons-codec/commons-codec@1.15?type=jar\",\n+ \"name\": \"jackson-databind\",\n+ \"purl\": \"pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.2?type=jar\",\n \"type\": \"library\",\n- \"version\": \"1.15\"\n+ \"version\": \"2.14.2\"\n },\n {\n- \"bom-ref\": \"pkg:maven/org.jreleaser/jreleaser-logger-api@1.6.0?type=jar\",\n- \"group\": \"org.jreleaser\",\n+ \"bom-ref\": \"pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar\",\n+ \"description\": \"Apache HttpComponents Core (blocking I/O)\",\n+ \"group\": \"org.apache.httpcomponents\",\n \"hashes\": [\n {\n \"alg\": \"MD5\",\n- \"content\": \"e7da806a3427ab10405584067d880ead\"\n+ \"content\": \"28d2cd9bf8789fd2ec774fb88436ebd1\"\n },\n {\n \"alg\": \"SHA-1\",\n- \"content\": \"92ae4e1826cf1d8321fcefd3f4ece0fa5cc4fc94\"\n+ \"content\": \"51cf043c87253c9f58b539c9f7e44c8894223850\"\n },\n {\n \"alg\": \"SHA-256\",\n- \"content\": \"372d4b6cee7af83429f9f054a69f73d38d6fb4c983b14ce97f2599791d59aee9\"\n+ \"content\": \"6c9b3dd142a09dc468e23ad39aad6f75a0f2b85125104469f026e52a474e464f\"\n },\n {\n \"alg\": \"SHA-512\",\n- \"content\": \"c4f4edf49e18f475b7b44677497250cd93af45e302fb39306a94dc8f0ee1f783921967de3e1f1b7591f970a359080f43b24c1499a363280d904c2519d2e9bcb2\"\n+ \"content\": \"168026436a6bcf5e96c0c59606638abbdc30de4b405ae55afde70fdf2895e267a3d48bba6bdadc5a89f38e31da3d9a9dc91e1cab7ea76f5e04322cf1ec63b838\"\n },\n {\n \"alg\": \"SHA-384\",\n- \"content\": \"fcdadd6f2e8af30a7761e98f5c717ab1b8f6f0a79825a711454c8c9cc9842cf8fe0f5917b5ea48603eb0ee5788ed7a8b\"\n+ \"content\": \"ba9ceaee1a37ca3201d6a1315ecb0327b495489efd0baa155c219c475df8d3eb69fe77ab0026563db406497626da6562\"\n },\n {\n \"alg\": \"SHA3-384\",\n- \"content\": \"42a3e276d69efc85ce5798c5cd78ba1a910ef328169fb39a1a685eea5b98e9c3bf495124f56b518d553f1ca2e63d62f7\"\n+ \"content\": \"b9dc44dcc7cc86d5036f26d54c4003a2d72808ae7b07a0808bb53505c6d4281b5ad213eb1f3d0fef1113dec57cb0dfe1\"\n },\n {\n \"alg\": \"SHA3-256\",\n- \"content\": \"0fb4d06e278df39d6633d1a09ed01ad4f7788838668f2ebc097f919384cec97d\"\n+ \"content\": \"fd8ab51846476c6c18822151c9ec07b39a9633010b5d20ea937fc6910407bc64\"\n },\n {\n \"alg\": \"SHA3-512\",\n- \"content\": \"bb5a8b000955af1038d4d75c0fd8786561b3a2cf7bb804e09e42518a0bcc3e23ab01dd5236de4bdb58fd9b1a0e923982eb6cc6d0e450896bed9c86dfe808675d\"\n+ \"content\": \"b42fa528242981a9d70e4f68ab75a24292df5112c44c21b6f18cb9201ce747885ba1d4dc69bc3d14d0da46a6c2638f937c11bc45749abeb55dc89ddada90cdda\"\n+ }\n+ ],\n+ \"licenses\": [\n+ {\n+ \"license\": {\n+ \"id\": \"Apache-2.0\"\n+ }\n }\n ],\n- \"licenses\": [],\n \"modified\": false,\n- \"name\": \"jreleaser-logger-api\",\n- \"purl\": \"pkg:maven/org.jreleaser/jreleaser-logger-api@1.6.0?type=jar\",\n+ \"name\": \"httpcore\",\n+ \"purl\": \"pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar\",\n \"type\": \"library\",\n- \"version\": \"1.6.0\"\n+ \"version\": \"4.4.16\"\n },\n {\n- \"bom-ref\": \"pkg:maven/org.apache.maven/maven-plugin-api@3.8.7?type=jar\",\n- \"description\": \"The API for plugins - Mojos - development.\",\n- \"group\": \"org.apache.maven\",\n+ \"bom-ref\": \"pkg:maven/commons-io/commons-io@2.11.0?type=jar\",\n+ \"description\": \"The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.\",\n+ \"externalReferences\": [\n+ {\n+ \"type\": \"issue-tracker\",\n+ \"url\": \"https://issues.apache.org/jira/browse/IO\"\n+ },\n+ {\n+ \"type\": \"vcs\",\n+ \"url\": \"https://gitbox.apache.org/repos/asf?p=commons-io.git\"\n+ }\n+ ],\n+ \"group\": \"commons-io\",\n \"hashes\": [\n {\n \"alg\": \"MD5\",\n- \"content\": \"b1cc5a8fda5211df27c48c9e644255aa\"\n+ \"content\": \"3b4b7ccfaeceeac240b804839ee1a1ca\"\n },\n {\n \"alg\": \"SHA-1\",\n- \"content\": \"80c6ba199912c82627c11bc65ba81a6d21bd172f\"\n+ \"content\": \"a2503f302b11ebde7ebc3df41daebe0e4eea3689\"\n },\n {\n \"alg\": \"SHA-256\",\n- \"content\": \"4f084b22f76f14eb8a795101fb83627ff11b6f2c7cb17f400d54322e7d000f74\"\n+ \"content\": \"961b2f6d87dbacc5d54abf45ab7a6e2495f89b75598962d8c723cea9bc210908\"\n },\n {\n \"alg\": \"SHA-512\",\n- \"content\": \"22b0ea6ca5ad6a22d64b9d98eb1dc917e67584acd3fd5a9dc91a5c3e012b6ea3e78666d36ed9d378d0e410dc82d0bbb00939905fd0c8cc506e44d2ceee44aa8d\"\n+ \"content\": \"5bd78eed456ede30119319c5bed8e3e4c443b6fd7bdb3a7a5686647bd83094d0c3e2832a7575cfb60e4ef25f08106b93476939d3adcfecf5533cc030b3039e10\"\n },\n {\n \"alg\": \"SHA-384\",\n- \"content\": \"bf6d11d928190987d5d8b5a384b25534905e45b573206f46689e63cf338e1a834c027ef9023d48e7ce63b2bcf4e04b74\"\n+ \"content\": \"114f1e324d90ad887c177876d410f5787a8e8da6c48d4b2862d365802c0efded3a88cb24046976bf6276cadad3712f0f\"\n },\n {\n \"alg\": \"SHA3-384\",\n- \"content\": \"74708bf45757d31a98e12e3937a72e902c830de92cf4514b462a7430c5582bccf2c910303baee29402a83b3e1a2ede35\"\n+ \"content\": \"80288c03ad4d80d69f91d056ffc5570d49a9c76bf54ad2dff0121ecde26a560df76d05156f281f5c6db2a38ff07a873d\"\n },\n {\n \"alg\": \"SHA3-256\",\n- \"content\": \"83805e1da8e805c20883249c20aa7e3c66c06db8fd882be9066d76e21e01b801\"\n+ \"content\": \"5adfb5ccaf5f21a549422f426118a9542673926fcd18c68390cf813e791dcf6c\"\n },\n {\n \"alg\": \"SHA3-512\",\n- \"content\": \"60a413299f9a70e23ec87085361f176a5262774592572f1784f6522638b23ea86ee3c4823982bdb2c4d1c1e27e857d900e6fec096e2930fb2fb5258984007459\"\n+ \"content\": \"7573f47f0babb53cefdc7c2309a0b982d800139064537b0797da442853d081010ad7c3c74a500598a0f800639a5d540eca21963ea652c68613907059bd4278c2\"\n }\n ],\n \"licenses\": [\n {\n \"license\": {\n \"id\": \"Apache-2.0\"\n }\n }\n ],\n \"modified\": false,\n- \"name\": \"maven-plugin-api\",\n- \"purl\": \"pkg:maven/org.apache.maven/maven-plugin-api@3.8.7?type=jar\",\n+ \"name\": \"commons-io\",\n+ \"purl\": \"pkg:maven/commons-io/commons-io@2.11.0?type=jar\",\n \"type\": \"library\",\n- \"version\": \"3.8.7\"\n+ \"version\": \"2.11.0\"\n },\n {\n- \"bom-ref\": \"pkg:maven/com.github.luben/zstd-jni@1.5.4-1?type=jar\",\n- \"description\": \"JNI bindings for Zstd native library that provides fast and high compression lossless algorithm for Java and all JVM languages.\",\n- \"group\": \"com.github.luben\",\n+ \"bom-ref\": \"pkg:maven/org.tukaani/xz@1.9?type=jar\",\n+ \"description\": \"XZ data compression\",\n+ \"externalReferences\": [\n+ {\n+ \"type\": \"vcs\",\n+ \"url\": \"https://git.tukaani.org/?p=xz-java.git\"\n+ }\n+ ],\n+ \"group\": \"org.tukaani\",\n \"hashes\": [\n {\n \"alg\": \"MD5\",\n- \"content\": \"e787241d6ec56aac451be8b0d920c85b\"\n+ \"content\": \"57c2fbfeb55e307ccae52e5322082e02\"\n },\n {\n \"alg\": \"SHA-1\",\n- \"content\": \"291ccaacc039e41932de877303edb6af98a91c24\"\n+ \"content\": \"1ea4bec1a921180164852c65006d928617bd2caf\"\n },\n {\n \"alg\": \"SHA-256\",\n- \"content\": \"f0469d891127dc5ae6bd2df93a5aa38c4d79bcd5f360fbb88c2785b52a572349\"\n+ \"content\": \"211b306cfc44f8f96df3a0a3ddaf75ba8c5289eed77d60d72f889bb855f535e5\"\n },\n {\n \"alg\": \"SHA-512\",\n- \"content\": \"368916f0057d69fa4ba3768f6f617291ce4083b89913e46c2daa68cc94c48b92e0ca626241486f34a4d154502eb77b19e82c16c68b341ecfc82ccc0520f8d4a9\"\n+ \"content\": \"a4362db234d4e83683e90f5baf90c82107450cc4404acab96e3fab14b8a3d4588a19722171d32f27d18463682a6994cad9af0b1065c954e3a77ea7bdcf586bac\"\n },\n {\n \"alg\": \"SHA-384\",\n- \"content\": \"7e72184873689fa286d93d88f69f8baa24f818fcd61105a14332fbb5ed254363c0969afa98befd797a3762577bc77993\"\n+ \"content\": \"aa30349b094723369908369a18e2cb5beb5b7ca0b24b4d56c2f5725fae152220f6526466672b22bfec939e2e0622a01d\"\n },\n {\n \"alg\": \"SHA3-384\",\n- \"content\": \"1302636797b291dbbe19f39bdeb66160c1317b395a0a9360ba93aeaa262de7ad8de7257e6a997a9c659fdf53b3367ee6\"\n+ \"content\": \"b3e1fee7784188df5e1931c9e8137ac0e20e63f66f93e7f938a448fc0b3adb4be5205c7a5f1835007e233fee2696fc2c\"\n },\n {\n \"alg\": \"SHA3-256\",\n- \"content\": \"54505ed16257a55330bb44c76719a687251d2623fa5e50a192b54c5067573255\"\n+ \"content\": \"92eff603ed0aab557e1a45e17a74e80d8ec656b5f137197b23c429c903fa448f\"\n },\n {\n \"alg\": \"SHA3-512\",\n- \"content\": \"6e01cc9654c2d68c36a284e23c388267ac7013d534cceed0b6ab44679a6bbb6d03d4cfc52c967c4e76dbd5b8963c268e40d9890c927866ea00824821b0ecb82d\"\n+ \"content\": \"b290f92958f8cd91705331d8411140c23957ab8b568fbe19a70f4f1dc97eddc13d3a200df28a02ab5911ce18f546c33f720878be0f727edac839a6e63ee66ece\"\n }\n ],\n \"licenses\": [\n {\n \"license\": {\n- \"id\": \"BSD-2-Clause\"\n+ \"name\": \"Public Domain\"\n }\n }\n ],\n \"modified\": false,\n- \"name\": \"zstd-jni\",\n- \"publisher\": \"com.github.luben\",\n- \"purl\": \"pkg:maven/com.github.luben/zstd-jni@1.5.4-1?type=jar\",\n+ \"name\": \"xz\",\n+ \"purl\": \"pkg:maven/org.tukaani/xz@1.9?type=jar\",\n \"type\": \"library\",\n- \"version\": \"1.5.4-1\"\n+ \"version\": \"1.9\"\n },\n {\n- \"bom-ref\": \"pkg:maven/org.slf4j/jcl-over-slf4j@2.0.7?type=jar\",\n- \"description\": \"JCL 1.2 implemented over SLF4J\",\n- \"group\": \"org.slf4j\",\n+ \"bom-ref\": \"pkg:maven/org.bouncycastle/bcprov-jdk15on@1.70?type=jar\",\n+ \"description\": \"The Bouncy Castle Crypto package is a Java implementation of cryptographic algorithms. This jar contains JCE provider and lightweight API for the Bouncy Castle Cryptography APIs for JDK 1.5 and up.\",\n+ \"externalReferences\": [\n+ {\n+ \"type\": \"issue-tracker\",\n+ \"url\": \"https://github.com/bcgit/bc-java/issues\"\n+ },\n+ {\n+ \"type\": \"vcs\",\n+ \"url\": \"https://github.com/bcgit/bc-java\"\n+ }\n+ ],\n+ \"group\": \"org.bouncycastle\",\n \"hashes\": [\n {\n \"alg\": \"MD5\",\n- \"content\": \"4e8d6cd31f7e6277280c95157ac7845a\"\n+ \"content\": \"1809d0449a6374279c01fdd3be26cd92\"\n },\n {\n \"alg\": \"SHA-1\",\n- \"content\": \"f127fe5ee53404a8b3697cdd032dd1dd6a29dd77\"\n+ \"content\": \"4636a0d01f74acaf28082fb62b317f1080118371\"\n },\n {\n \"alg\": \"SHA-256\",\n- \"content\": \"41806757e1d26dae5d6db2ca7d4a5176eed2d6e709cd86564d4a11dab0601742\"\n+ \"content\": \"8f3c20e3e2d565d26f33e8d4857a37d0d7f8ac39b62a7026496fcab1bdac30d4\"\n },\n {\n \"alg\": \"SHA-512\",\n- \"content\": \"221b39b85145cf7c245acb7f2692a02b6c5816f8b1187a1a77942dd39de958c1b01ecd066682eb88244f87b2a47513d40b6c1e69ef49a43b2a07ba818f124e17\"\n+ \"content\": \"7dccfc636ee4df1487615818cfa99c69941081df95e8ef1eaf4bca165594dff9547e3774fd70de3418abace77d2c45889f70bcd2e6823f8539f359e68eaf36d1\"\n },\n {\n \"alg\": \"SHA-384\",\n- \"content\": \"fa8d53b46cd3ddab0bd265d384a90c35efef6a02a7822aa6f79065cee68d78f6ad7c4d248dea7497af449845dc962730\"\n+ \"content\": \"a0b35d204cd962f1d246fa94b6e8b0fcee1a7c3f37b7e87cda742f2124a25b48794ce11a903ea8d12009c86227b6808d\"\n },\n {\n \"alg\": \"SHA3-384\",\n- \"content\": \"cf06cfeaba477f7738f089ba401fb841074681d1c7f465546cdf0e95751a8bf912493428876a7d9108eef83f637c6a1e\"\n+ \"content\": \"980d81d3d9906764bbf2ae9b3b364ea58628b485ce1dc3d06734e10495d79f2be2e7cc7df61ac88cd67c1104c7af9393\"\n },\n {\n \"alg\": \"SHA3-256\",\n- \"content\": \"efbad2de8683215936c56b3f8fd3492f1cc27c2ee77595a99c794e18777dec42\"\n+ \"content\": \"10a3572e42d29f609721d795116e3e5d0f6f03efef84bb979ce72e26908d242b\"\n },\n {\n \"alg\": \"SHA3-512\",\n- \"content\": \"2707d5513e49f6e3ea6dec96510d360cfc125dab164ae5d99a1dcbd628751640f625a70ed749dad66024ae9fd7725f1c6c7f76de7f5a6efc9d8208a9e01922f7\"\n+ \"content\": \"a0761cb6deeb86c94b96850c72c0a0eaf516ca849f4b8268f9f60c9ed2a6730e692c15098d47e617da294e931113c6cbcaddec8957c9f029fa595b5f14ff35ac\"\n }\n ],\n \"licenses\": [\n {\n \"license\": {\n- \"id\": \"Apache-2.0\"\n+ \"name\": \"Bouncy Castle Licence\",\n+ \"url\": \"https://www.bouncycastle.org/licence.html\"\n }\n }\n ],\n \"modified\": false,\n- \"name\": \"jcl-over-slf4j\",\n- \"purl\": \"pkg:maven/org.slf4j/jcl-over-slf4j@2.0.7?type=jar\",\n+ \"name\": \"bcprov-jdk15on\",\n+ \"purl\": \"pkg:maven/org.bouncycastle/bcprov-jdk15on@1.70?type=jar\",\n \"type\": \"library\",\n- \"version\": \"2.0.7\"\n+ \"version\": \"1.70\"\n },\n {\n- \"bom-ref\": \"pkg:maven/org.iq80.snappy/snappy@0.4?type=jar\",\n- \"description\": \"Port of Snappy to Java\",\n+ \"bom-ref\": \"pkg:maven/org.codehaus.plexus/plexus-utils@3.4.1?type=jar\",\n+ \"description\": \"A collection of various utility classes to ease working with strings, files, command lines, XML and more.\",\n \"externalReferences\": [\n {\n- \"type\": \"distribution\",\n- \"url\": \"https://oss.sonatype.org/service/local/staging/deploy/maven2/\"\n+ \"type\": \"issue-tracker\",\n+ \"url\": \"http://github.com/codehaus-plexus/plexus-utils/issues\"\n },\n {\n \"type\": \"vcs\",\n- \"url\": \"http://github.com/dain/snapy/tree/master\"\n+ \"url\": \"http://github.com/codehaus-plexus/plexus-utils\"\n }\n ],\n- \"group\": \"org.iq80.snappy\",\n+ \"group\": \"org.codehaus.plexus\",\n \"hashes\": [\n {\n \"alg\": \"MD5\",\n- \"content\": \"f0792d1dbe7f90d8b34c7c19961e0073\"\n+ \"content\": \"c155c4135ef7ba134659bf1af31c5156\"\n },\n {\n \"alg\": \"SHA-1\",\n- \"content\": \"a42b2d92a89efd35bb14738000dabcac6bd07a8d\"\n+ \"content\": \"4de9992988c534efd668bfcca0480ebe13e0c0eb\"\n },\n {\n \"alg\": \"SHA-256\",\n- \"content\": \"46a0c87d504ce9d6063e1ff6e4d20738feb49d8abf85b5071a7d18df4f11bac9\"\n+ \"content\": \"52d85e04b3918722af11d12855b4a8257df96a0e76c8f4e3852e6faa851f357b\"\n },\n {\n \"alg\": \"SHA-512\",\n- \"content\": \"dfd2559bf0388c6f1987d1393497a423203b2a72febbe648b3429e4d07b47a504797228e6e4e39a94c6800c5d3df8d3792863a3b841e6e8f65cfdcda91b6f0ab\"\n+ \"content\": \"0668d413520a713d9279123eccae3b5e9bc79f41dd8da3b3a1ba79b7b60086c009639d91d84df230e490192fe63b10390f3901478c69bfd452a1280364d24876\"\n },\n {\n \"alg\": \"SHA-384\",\n- \"content\": \"7b5feeb0f1ee3fd3f5cd17c5ea31a75cdd060e7beaa1773474727711c308d2cf5b900b5717965afe8c14912e33c41538\"\n+ \"content\": \"cefd95e956f79c103c95f15d8a5b914b7158dfdf1bb1d7a1cb1eb4f89ab47f841f5fbc3f1cd9380bb57252a036cb63ee\"\n },\n {\n \"alg\": \"SHA3-384\",\n- \"content\": \"d96d486687e858c1ebe1fadbd731d33e0233922eee703f1a4e36e68fa1dcc527cdcc4fae8fc91894ebeada2a1214606e\"\n+ \"content\": \"26aa374d12efd70c423a45794427f3ca297a20663b2297ef806e7f2bd57bb9e885da1222e1c557a80fb2a012cef5de52\"\n },\n {\n \"alg\": \"SHA3-256\",\n- \"content\": \"cf1b329b3f46891dc9e86fe9c6350a023dc0cb411739d2fd9d35490dfa8397aa\"\n+ \"content\": \"6ec121dba759799e676e53ab9b57d379907c6fb8f844177f63c21b7324011dc3\"\n },\n {\n \"alg\": \"SHA3-512\",\n- \"content\": \"3a8584d15b63d4c371fed5b615f7a121fe2530d35d234b2caa499c53e7c558376ed22d289828276fbc77cd7c1311ba4d6c1af03edf08c5f051d5b674f01e6120\"\n+ \"content\": \"3ba2485a1471edd0e43819277db828573ba2299599dd273bbb09ae4453343bc8e32672adc3b7a4eb523edd64aed8a50427f5b7a968870c152e7859f2c6bcbf34\"\n }\n ],\n \"licenses\": [\n {\n \"license\": {\n- \"id\": \"Apache-2.0\",\n- \"url\": \"https://www.apache.org/licenses/LICENSE-2.0\"\n+ \"id\": \"Apache-2.0\"\n }\n }\n ],\n \"modified\": false,\n- \"name\": \"snappy\",\n- \"purl\": \"pkg:maven/org.iq80.snappy/snappy@0.4?type=jar\",\n+ \"name\": \"plexus-utils\",\n+ \"purl\": \"pkg:maven/org.codehaus.plexus/plexus-utils@3.4.1?type=jar\",\n \"type\": \"library\",\n- \"version\": \"0.4\"\n+ \"version\": \"3.4.1\"\n },\n {\n- \"bom-ref\": \"pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.1?type=jar\",\n- \"description\": \"Plexus Component \\\"Java 5\\\" Annotations, to describe plexus components properties in java sources with standard annotations instead of javadoc annotations.\",\n+ \"bom-ref\": \"pkg:maven/org.codehaus.plexus/plexus-archiver@4.6.3?type=jar\",\n+ \"externalReferences\": [\n+ {\n+ \"type\": \"issue-tracker\",\n+ \"url\": \"https://github.com/codehaus-plexus/plexus-archiver/issues\"\n+ }\n+ ],\n \"group\": \"org.codehaus.plexus\",\n \"hashes\": [\n {\n \"alg\": \"MD5\",\n- \"content\": \"c001d5485e42fc73831e095f3cce0a82\"\n+ \"content\": \"7212a1e9bad1423a041c4452fc2e2892\"\n },\n {\n \"alg\": \"SHA-1\",\n- \"content\": \"856d33577e7e404f2438b2f14dbdf4ff5d6078b9\"\n+ \"content\": \"c75ce6850ef98c92e2a143438660e9de61367039\"\n },\n {\n \"alg\": \"SHA-256\",\n- \"content\": \"623711b3db0d3c6beaaf22578aea8b2706baee8b26ea328dfe94d96cbe2835dd\"\n+ \"content\": \"d7c8bfc698dadb5a354167f6e5021f471a3dd9f1754ad140ee449d0824d2e7c5\"\n },\n {\n \"alg\": \"SHA-512\",\n- \"content\": \"4495cfe289d1faa605878e7c9bcb274764310409c2d43fa58186c6968f4ff62f32d611e37a95d9dc5e3be31f282b369aeef47e1557e98a3b3665d08eba1d200b\"\n+ \"content\": \"235f57b76fa68670883d597b997eadc9a467beea1d55a785719a8a0a1286f7fd3c0217c422c3d6dc1cf66ce4a6ba03ae7f37d5942c360325b2b644173f3565e8\"\n },\n {\n \"alg\": \"SHA-384\",\n- \"content\": \"ff6b0b15b9d9960711e58b660957b21439f9557c1f30091d729a0b4670724081edddf19f51a07dad5d2d61584ef9c997\"\n+ \"content\": \"73f6447fa143e6fc055faa1356b1df9e45c55e7710efa338a7f81e59287525eb0032d7934e1c3c1b376939aa4778eed2\"\n },\n {\n \"alg\": \"SHA3-384\",\n- \"content\": \"94a9a4aeceecfe18990e567b25e7dc2a2bda1cbbb024a1b3bffc8d98a76ab08fd8555d50e7819148fbd86afcaf1ea07d\"\n+ \"content\": \"c2e929909df2a1c43d7321628247bdade15720084d2d1d0cb25a3447fc815624ce8ccca19c5920ab3d983cbf5e40f0b5\"\n },\n {\n \"alg\": \"SHA3-256\",\n- \"content\": \"d5d2308dd7abc07284741d657e7b2c01364d9c9fa7f561c69a2c67c915dfcf5b\"\n+ \"content\": \"a6f22922b3682367ccbc11020cae01d2c6b0053f6fa7ca1122726efdbe66ec13\"\n },\n {\n \"alg\": \"SHA3-512\",\n- \"content\": \"ccec7f177cda69051523c0da6a868002fb850eea769601412bde67b08c85ac515d8e06f44924c1f7d364a25089f6e43782928f3ff9d0990c22fd2ae1753fa915\"\n+ \"content\": \"16a4782a692314b21dc7616ecf595ebc6370488395c61a13e5e23837dbb87e36af69d11e52a6865523207d51b891d8c6ddff6063bab47faac548d77d9dbdad2f\"\n }\n ],\n \"licenses\": [\n {\n \"license\": {\n \"id\": \"Apache-2.0\"\n }\n }\n ],\n \"modified\": false,\n- \"name\": \"plexus-component-annotations\",\n- \"purl\": \"pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.1?type=jar\",\n+ \"name\": \"plexus-archiver\",\n+ \"purl\": \"pkg:maven/org.codehaus.plexus/plexus-archiver@4.6.3?type=jar\",\n \"type\": \"library\",\n- \"version\": \"2.1.1\"\n+ \"version\": \"4.6.3\"\n },\n {\n- \"bom-ref\": \"pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.2?type=jar\",\n- \"description\": \"Core Jackson processing abstractions (aka Streaming API), implementation for JSON\",\n+ \"bom-ref\": \"pkg:maven/javax.inject/javax.inject@1?type=jar\",\n+ \"description\": \"The javax.inject API\",\n \"externalReferences\": [\n {\n \"type\": \"vcs\",\n- \"url\": \"https://github.com/FasterXML/jackson-core\"\n+ \"url\": \"http://code.google.com/p/atinject/source/checkout\"\n }\n ],\n- \"group\": \"com.fasterxml.jackson.core\",\n+ \"group\": \"javax.inject\",\n \"hashes\": [\n {\n \"alg\": \"MD5\",\n- \"content\": \"6ee422ee4c481b2d5aacb2b5e36a7dc0\"\n+ \"content\": \"289075e48b909e9e74e6c915b3631d2e\"\n },\n {\n \"alg\": \"SHA-1\",\n- \"content\": \"f804090e6399ce0cf78242db086017512dd71fcc\"\n+ \"content\": \"6975da39a7040257bd51d21a231b76c915872d38\"\n },\n {\n \"alg\": \"SHA-256\",\n- \"content\": \"b5d37a77c88277b97e3593c8740925216c06df8e4172bbde058528df04ad3e7a\"\n+ \"content\": \"91c77044a50c481636c32d916fd89c9118a72195390452c81065080f957de7ff\"\n },\n {\n \"alg\": \"SHA-512\",\n- \"content\": \"208953cf72691b3bab1ca2f9a045cccd3d75c46c90099ba884fbf16bc3e45045e5cd014d2c68c96e8a8826f87a5f0e18cb34b35e7ef03348953869c21e197367\"\n+ \"content\": \"e126b7ccf3e42fd1984a0beef1004a7269a337c202e59e04e8e2af714280d2f2d8d2ba5e6f59481b8dcd34aaf35c966a688d0b48ec7e96f102c274dc0d3b381e\"\n },\n {\n \"alg\": \"SHA-384\",\n- \"content\": \"e806595862c5fcdae801d9845befc1d12c97e6036ee839d34590dbd785a422d5832cf4fc5c7ee6e1a5ee7a59f37740f0\"\n+ \"content\": \"ac04c9f03ccbe35a25deb8b50280a0ca01dbe6aff0dd795d55af6112bfe3cd5817eb82f32fb18378d86cd64b07597190\"\n },\n {\n \"alg\": \"SHA3-384\",\n- \"content\": \"4fa59f572f2e100e2eba6fc664a3b9f804fabd911a552cb40805f39e624a9c04246b679cf4b017bb782c8272877f49d2\"\n+ \"content\": \"fca090ecb1edeacb9fe865dc515cd1d109b323cd742d4a9733ff199a96ee96e0db4f924079520b9c189ef750f255475d\"\n },\n {\n \"alg\": \"SHA3-256\",\n- \"content\": \"cef17d3a539cbf798cfb0bfa9faffa2b7baff3670b50743e91ee58b4c60b59f1\"\n+ \"content\": \"5b0054e39e522de0e0ffc4034d12f72270291fb24d94d5ffc9c4d69c25035fc6\"\n },\n {\n \"alg\": \"SHA3-512\",\n- \"content\": \"fceeed5cb8fe4335d88282d15657762a4728483275a7ff45f50b9fe6a999757ccb37c415d001eb6250226f98f5c576b1b36a83e601fb393cfd34a811c2df5d00\"\n+ \"content\": \"fb290f5a70b1efc1dff12f40a0b2d7b94019f66da42e78010c0b8e61f222c4f267b67e356a9e9c346eb801e5515e36243888f280c5cb95c2dd69016a30cadeb9\"\n }\n ],\n \"licenses\": [\n {\n \"license\": {\n \"id\": \"Apache-2.0\"\n }\n }\n ],\n \"modified\": false,\n- \"name\": \"jackson-core\",\n- \"purl\": \"pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.2?type=jar\",\n+ \"name\": \"javax.inject\",\n+ \"purl\": \"pkg:maven/javax.inject/javax.inject@1?type=jar\",\n \"type\": \"library\",\n- \"version\": \"2.14.2\"\n+ \"version\": \"1\"\n },\n {\n- \"bom-ref\": \"pkg:maven/org.apache.maven/maven-artifact@3.8.7?type=jar\",\n- \"group\": \"org.apache.maven\",\n+ \"bom-ref\": \"pkg:maven/com.github.luben/zstd-jni@1.5.4-1?type=jar\",\n+ \"description\": \"JNI bindings for Zstd native library that provides fast and high compression lossless algorithm for Java and all JVM languages.\",\n+ \"group\": \"com.github.luben\",\n \"hashes\": [\n {\n \"alg\": \"MD5\",\n- \"content\": \"4c2a8316eda726b35c9ae90b7c271dd4\"\n+ \"content\": \"e787241d6ec56aac451be8b0d920c85b\"\n },\n {\n \"alg\": \"SHA-1\",\n- \"content\": \"4b820734b856682f99f6ad2de4f1f7dd4b82335f\"\n+ \"content\": \"291ccaacc039e41932de877303edb6af98a91c24\"\n },\n {\n \"alg\": \"SHA-256\",\n- \"content\": \"23eb1c5c26f3d1b4694647b071beabfd96083191b006394707753af2ced8db01\"\n+ \"content\": \"f0469d891127dc5ae6bd2df93a5aa38c4d79bcd5f360fbb88c2785b52a572349\"\n },\n {\n \"alg\": \"SHA-512\",\n- \"content\": \"2b892be25a88774d7aaf22db235e660abcdd041c0d685bd0c4e0b404a15301d61b3e06cd8dbede8f6a6293951f65a2235ee6cbb8d4a00fd5a7e33ab1655b2429\"\n+ \"content\": \"368916f0057d69fa4ba3768f6f617291ce4083b89913e46c2daa68cc94c48b92e0ca626241486f34a4d154502eb77b19e82c16c68b341ecfc82ccc0520f8d4a9\"\n },\n {\n \"alg\": \"SHA-384\",\n- \"content\": \"1abb1c8a0bd8bc1cbf5857cb9a3d30ff3e92d6fd720dff1ec0a5cb368027a2fbea61a4c1d10db255d51b9e5d1dedd73f\"\n+ \"content\": \"7e72184873689fa286d93d88f69f8baa24f818fcd61105a14332fbb5ed254363c0969afa98befd797a3762577bc77993\"\n },\n {\n \"alg\": \"SHA3-384\",\n- \"content\": \"5d183e617198c1e032352f476edbe4db0be3dc0c7efd36c3be281a4fb1cb813feed558e3d21f52d55479e791b72c63c7\"\n+ \"content\": \"1302636797b291dbbe19f39bdeb66160c1317b395a0a9360ba93aeaa262de7ad8de7257e6a997a9c659fdf53b3367ee6\"\n },\n {\n \"alg\": \"SHA3-256\",\n- \"content\": \"6deb8cba7a9c6b4d6cd314d681a3dfc1f02624e1e56699f760bfb1c6539dd9e1\"\n+ \"content\": \"54505ed16257a55330bb44c76719a687251d2623fa5e50a192b54c5067573255\"\n },\n {\n \"alg\": \"SHA3-512\",\n- \"content\": \"04220b96703beb3cac238e11e150303a420fe55004c9b05dc9e72ebb38e140eead6914211428175bdd1e0442ccdb2b66d9313869b6c54356c19531df7e4985fe\"\n+ \"content\": \"6e01cc9654c2d68c36a284e23c388267ac7013d534cceed0b6ab44679a6bbb6d03d4cfc52c967c4e76dbd5b8963c268e40d9890c927866ea00824821b0ecb82d\"\n }\n ],\n \"licenses\": [\n {\n \"license\": {\n- \"id\": \"Apache-2.0\"\n+ \"id\": \"BSD-2-Clause\"\n }\n }\n ],\n \"modified\": false,\n- \"name\": \"maven-artifact\",\n- \"purl\": \"pkg:maven/org.apache.maven/maven-artifact@3.8.7?type=jar\",\n+ \"name\": \"zstd-jni\",\n+ \"publisher\": \"com.github.luben\",\n+ \"purl\": \"pkg:maven/com.github.luben/zstd-jni@1.5.4-1?type=jar\",\n \"type\": \"library\",\n- \"version\": \"3.8.7\"\n+ \"version\": \"1.5.4-1\"\n },\n {\n- \"bom-ref\": \"pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar\",\n- \"description\": \"The slf4j API\",\n- \"group\": \"org.slf4j\",\n+ \"bom-ref\": \"pkg:maven/org.apache.maven/maven-model@3.8.7?type=jar\",\n+ \"description\": \"Model for Maven POM (Project Object Model)\",\n+ \"group\": \"org.apache.maven\",\n \"hashes\": [\n {\n \"alg\": \"MD5\",\n- \"content\": \"403dffa46cdd2e3c82da19df4f394a4c\"\n+ \"content\": \"91c8c6b449ca34033832f268df64873b\"\n },\n {\n \"alg\": \"SHA-1\",\n- \"content\": \"41eb7184ea9d556f23e18b5cb99cad1f8581fc00\"\n+ \"content\": \"a6a1f77aa36d158c8ec7917112192083b9467cd4\"\n },\n {\n \"alg\": \"SHA-256\",\n- \"content\": \"5d6298b93a1905c32cda6478808ac14c2d4a47e91535e53c41f7feeb85d946f4\"\n+ \"content\": \"6fcadaee2a885c43b158f2e3833d0a3ecb68efc62e25ea5b11f77cc0716a7b2d\"\n },\n {\n \"alg\": \"SHA-512\",\n- \"content\": \"216d2cac27d501972c888f94dfa747d700b80d60813884b6ab4b12c6a3b17ed0c21a1d27e1aa4332c97c828f20039e3913d2763d7e1a3cef36ae4389a276e7a8\"\n+ \"content\": \"f24ea0d84444002c3bce0cc2529638125dcc7b2d8dbf1054d43438702672da499deac20d3a9432ed92fd88005d6d6660f26902011ec8914aee40650af0f9ac8a\"\n },\n {\n \"alg\": \"SHA-384\",\n- \"content\": \"c25b39f418aa726ba8405dfd9b356131f89984e2ef5a55a724a2abf3b7c78443f671105835161d2414d602cf03da9f2d\"\n+ \"content\": \"e076fd71ed4f450fe18fa80fa29b0967a1ae95ac3729f1d42b7b77d05b02f18642a787a1671b975df1c40f7dbc7399ba\"\n },\n {\n \"alg\": \"SHA3-384\",\n- \"content\": \"f33abfaac21badae6f85d3ebbc6c1204fd7fda3bb15173e763fa8cee95bce6a8270eec2c8f49343c66c8d2767bc317e1\"\n+ \"content\": \"82d7a280f6427218cb64577d41de7e974368a088cedd8f495cca0a64e73b3e29786c2ce15420bf5c348d313303eccfb9\"\n },\n {\n \"alg\": \"SHA3-256\",\n- \"content\": \"6e00d4b264a2afc4ca4e98f716ecece66c32c626ca3f8c5d56b22092b6fe417b\"\n+ \"content\": \"9079dd0edebc0a9b12fba1700116c09b958e5268a522a84ed5f61cea90859755\"\n },\n {\n \"alg\": \"SHA3-512\",\n- \"content\": \"ad7b9142d370fc532a07cdd43881a129b012ff50e2bede3ac27d9bd31ec707bf2f45e82002fa59e962955cc38ab73cdd77713fca50cedc926c046f5617c1285b\"\n+ \"content\": \"fbc8f496338129a4ca92b3b3a0a8890a45a908d0bf3bfd12612abd3152e0311275c7ba8a9b01a84b4522bf209a1508fffd40c5047167252087fc4337531d41f8\"\n }\n ],\n \"licenses\": [\n {\n \"license\": {\n- \"id\": \"MIT\",\n- \"url\": \"https://opensource.org/licenses/MIT\"\n+ \"id\": \"Apache-2.0\"\n }\n }\n ],\n \"modified\": false,\n- \"name\": \"slf4j-api\",\n- \"purl\": \"pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar\",\n+ \"name\": \"maven-model\",\n+ \"purl\": \"pkg:maven/org.apache.maven/maven-model@3.8.7?type=jar\",\n \"type\": \"library\",\n- \"version\": \"2.0.7\"\n+ \"version\": \"3.8.7\"\n },\n {\n- \"bom-ref\": \"pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.3.5?type=jar\",\n- \"group\": \"org.eclipse.sisu\",\n+ \"bom-ref\": \"pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.1?type=jar\",\n+ \"description\": \"Plexus Component \\\"Java 5\\\" Annotations, to describe plexus components properties in java sources with standard annotations instead of javadoc annotations.\",\n+ \"group\": \"org.codehaus.plexus\",\n \"hashes\": [\n {\n \"alg\": \"MD5\",\n- \"content\": \"30c4a9fa2137698ed66c8542f1be196a\"\n+ \"content\": \"c001d5485e42fc73831e095f3cce0a82\"\n },\n {\n \"alg\": \"SHA-1\",\n- \"content\": \"d71996bb2e536f966b3b70e647067fff3b73d32f\"\n+ \"content\": \"856d33577e7e404f2438b2f14dbdf4ff5d6078b9\"\n },\n {\n \"alg\": \"SHA-256\",\n- \"content\": \"7e4c61096d70826f20f7a7d55c59a5528e7aa5ad247ee2dfe544e4dd25f6a784\"\n+ \"content\": \"623711b3db0d3c6beaaf22578aea8b2706baee8b26ea328dfe94d96cbe2835dd\"\n },\n {\n \"alg\": \"SHA-512\",\n- \"content\": \"38d7dbe023f9751cb5e30bf154e31696590317dc7b7f768811fe0f5940513fcea4665670cd47d0b72ded85453b10f7d129b0b7428b155a41c903c7b56c986e8d\"\n+ \"content\": \"4495cfe289d1faa605878e7c9bcb274764310409c2d43fa58186c6968f4ff62f32d611e37a95d9dc5e3be31f282b369aeef47e1557e98a3b3665d08eba1d200b\"\n },\n {\n \"alg\": \"SHA-384\",\n- \"content\": \"2e943a72f0ca201d50ba90b4cf70c3c1f7b5ffc3bbfdee45875bc2f6f2e2a3a93acbba3a2f1e7ffb32b70e041633b6de\"\n+ \"content\": \"ff6b0b15b9d9960711e58b660957b21439f9557c1f30091d729a0b4670724081edddf19f51a07dad5d2d61584ef9c997\"\n },\n {\n \"alg\": \"SHA3-384\",\n- \"content\": \"a7b121732001b6f225b0687e7747993f48b3fc1d9a4325b4321a4c59adae36b49677193f5e31e3b1f11a6cd266e459f3\"\n+ \"content\": \"94a9a4aeceecfe18990e567b25e7dc2a2bda1cbbb024a1b3bffc8d98a76ab08fd8555d50e7819148fbd86afcaf1ea07d\"\n },\n {\n \"alg\": \"SHA3-256\",\n- \"content\": \"b879a16dd84d8d4f39c1009029b3a3a55e18049c7910f77814a32ca088b56585\"\n+ \"content\": \"d5d2308dd7abc07284741d657e7b2c01364d9c9fa7f561c69a2c67c915dfcf5b\"\n },\n {\n \"alg\": \"SHA3-512\",\n- \"content\": \"8f8fbebd2a3024bcf6f2e27e8206e3f3c2b2673217c1220743b1869bf60341490db7d1877d9eaf3c452500690df98ccda11a19bda996b74a6ebedc37bc9bc554\"\n+ \"content\": \"ccec7f177cda69051523c0da6a868002fb850eea769601412bde67b08c85ac515d8e06f44924c1f7d364a25089f6e43782928f3ff9d0990c22fd2ae1753fa915\"\n }\n ],\n \"licenses\": [\n {\n \"license\": {\n- \"id\": \"EPL-1.0\"\n+ \"id\": \"Apache-2.0\"\n }\n }\n ],\n \"modified\": false,\n- \"name\": \"org.eclipse.sisu.plexus\",\n- \"purl\": \"pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.3.5?type=jar\",\n+ \"name\": \"plexus-component-annotations\",\n+ \"purl\": \"pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.1?type=jar\",\n \"type\": \"library\",\n- \"version\": \"0.3.5\"\n+ \"version\": \"2.1.1\"\n },\n {\n- \"bom-ref\": \"pkg:maven/org.tukaani/xz@1.9?type=jar\",\n- \"description\": \"XZ data compression\",\n+ \"bom-ref\": \"pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.2?type=jar\",\n+ \"description\": \"Core annotations used for value types, used by Jackson data binding package.\",\n \"externalReferences\": [\n {\n \"type\": \"vcs\",\n- \"url\": \"https://git.tukaani.org/?p=xz-java.git\"\n+ \"url\": \"https://github.com/FasterXML/jackson-annotations\"\n }\n ],\n- \"group\": \"org.tukaani\",\n+ \"group\": \"com.fasterxml.jackson.core\",\n \"hashes\": [\n {\n \"alg\": \"MD5\",\n- \"content\": \"57c2fbfeb55e307ccae52e5322082e02\"\n+ \"content\": \"10d19982a8890f6eb37557af2f58e272\"\n },\n {\n \"alg\": \"SHA-1\",\n- \"content\": \"1ea4bec1a921180164852c65006d928617bd2caf\"\n+ \"content\": \"a7aae9525864930723e3453ab799521fdfd9d873\"\n },\n {\n \"alg\": \"SHA-256\",\n- \"content\": \"211b306cfc44f8f96df3a0a3ddaf75ba8c5289eed77d60d72f889bb855f535e5\"\n+ \"content\": \"2c6869d505cf60dc066734b7d50339f975bd3adc635e26a78abb71acb4473c0d\"\n },\n {\n \"alg\": \"SHA-512\",\n- \"content\": \"a4362db234d4e83683e90f5baf90c82107450cc4404acab96e3fab14b8a3d4588a19722171d32f27d18463682a6994cad9af0b1065c954e3a77ea7bdcf586bac\"\n+ \"content\": \"a978384791bdc074df8039ffc95bb93f0f60d14d476861ee2a0ce208b33a991c486a07345cb80559252c3ff1dea14d3efb818c19bdc18435946dc8754d8e6ee3\"\n },\n {\n \"alg\": \"SHA-384\",\n- \"content\": \"aa30349b094723369908369a18e2cb5beb5b7ca0b24b4d56c2f5725fae152220f6526466672b22bfec939e2e0622a01d\"\n+ \"content\": \"d5111c69020666689414921ae4a8950f9fbdf86dec1360f6827beeee9ebd3f78db74e69c76e0becaba47eb34fdaaeb5a\"\n },\n {\n \"alg\": \"SHA3-384\",\n- \"content\": \"b3e1fee7784188df5e1931c9e8137ac0e20e63f66f93e7f938a448fc0b3adb4be5205c7a5f1835007e233fee2696fc2c\"\n+ \"content\": \"53b1a8891482e16a7d8849251cb0dcd1aacf6aaa2161a73589d9742ad96763e384d426d04db762e56fc4536f4e719084\"\n },\n {\n \"alg\": \"SHA3-256\",\n- \"content\": \"92eff603ed0aab557e1a45e17a74e80d8ec656b5f137197b23c429c903fa448f\"\n+ \"content\": \"14f7b3c51c96f7429f7c60a69e3b7e4f9f2207820141f197d56b57018ffd5640\"\n },\n {\n \"alg\": \"SHA3-512\",\n- \"content\": \"b290f92958f8cd91705331d8411140c23957ab8b568fbe19a70f4f1dc97eddc13d3a200df28a02ab5911ce18f546c33f720878be0f727edac839a6e63ee66ece\"\n+ \"content\": \"75e4e4fb847fdacdd497cf6b340362581ab4091120ccf2ec32a273709d336af0f78c90ce12b2dd1d17354aa08583af0d3ded89bb415720f45f2d9c110d71dd7a\"\n }\n ],\n \"licenses\": [\n {\n \"license\": {\n- \"name\": \"Public Domain\"\n+ \"id\": \"Apache-2.0\"\n }\n }\n ],\n \"modified\": false,\n- \"name\": \"xz\",\n- \"purl\": \"pkg:maven/org.tukaani/xz@1.9?type=jar\",\n+ \"name\": \"jackson-annotations\",\n+ \"purl\": \"pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.2?type=jar\",\n \"type\": \"library\",\n- \"version\": \"1.9\"\n+ \"version\": \"2.14.2\"\n },\n {\n- \"bom-ref\": \"pkg:maven/io.github.openfeign/feign-jackson@12.3?type=jar\",\n- \"description\": \"Feign Jackson\",\n- \"group\": \"io.github.openfeign\",\n- \"hashes\": [\n- {\n- \"alg\": \"MD5\",\n- \"content\": \"8bbba5bba4c26edb1b5c89e1a4912c22\"\n- },\n- {\n- \"alg\": \"SHA-1\",\n- \"content\": \"583c0ce0354e6ed81d998d5b8f1786ade1e9f2c4\"\n- },\n- {\n- \"alg\": \"SHA-256\",\n- \"content\": \"1dfc43d604693ce51ef3935f27dbfecd2d65636699a088eee32ff37cc50ea479\"\n- },\n- {\n- \"alg\": \"SHA-512\",\n- \"content\": \"8ea71fae9a2a4ad9d06f27e21e078001e1a29761af85e81b91bf2a38e4dd8841184a12fdf467915c234d080aa28484452fe45b9bc0a381ce23d8366b03be1395\"\n- },\n- {\n- \"alg\": \"SHA-384\",\n- \"content\": \"03553ac35a79266a150940fc62d3da7a389b47825102d91392f37b719da94af2d2355c2592d2b68604bf84248c73baf9\"\n- },\n- {\n- \"alg\": \"SHA3-384\",\n- \"content\": \"986284d22c0bbb7abfbc1762447a44d0919c266002d6925c4ca75040f3950a3d943a71dedf2f72592e6a185218c498a9\"\n- },\n- {\n- \"alg\": \"SHA3-256\",\n- \"content\": \"60242fd373d71575ffcb8a4f866b27d291b6acecf83be67e6ff51a13559dc016\"\n- },\n+ \"bom-ref\": \"pkg:maven/org.jreleaser/jreleaser-logger-api@1.6.0?type=jar\",\n+ \"description\": \"JReleaser logger API\",\n+ \"externalReferences\": [\n {\n- \"alg\": \"SHA3-512\",\n- \"content\": \"b7e0392fc793f19b3daf64c7e7b875fb2e4ec7ba2f1681d51c14c5c9efd5991817766753e62999a76bad83c624601f9f5a55304c4e06d2e3cd88ec4c609a1ede\"\n+ \"type\": \"vcs\",\n+ \"url\": \"https://github.com/jreleaser/jreleaser\"\n }\n ],\n+ \"group\": \"org.jreleaser\",\n \"licenses\": [\n {\n \"license\": {\n- \"id\": \"Apache-2.0\"\n+ \"id\": \"Apache-2.0\",\n+ \"url\": \"https://www.apache.org/licenses/LICENSE-2.0\"\n }\n }\n ],\n \"modified\": false,\n- \"name\": \"feign-jackson\",\n- \"purl\": \"pkg:maven/io.github.openfeign/feign-jackson@12.3?type=jar\",\n+ \"name\": \"jreleaser-logger-api\",\n+ \"purl\": \"pkg:maven/org.jreleaser/jreleaser-logger-api@1.6.0?type=jar\",\n \"type\": \"library\",\n- \"version\": \"12.3\"\n+ \"version\": \"1.6.0\"\n },\n {\n- \"bom-ref\": \"pkg:maven/javax.annotation/javax.annotation-api@1.2?type=jar\",\n- \"description\": \"Common Annotations for the JavaTM Platform API\",\n+ \"bom-ref\": \"pkg:maven/org.jreleaser/jreleaser-utils@1.6.0?type=jar\",\n+ \"description\": \"JReleaser utility classes\",\n \"externalReferences\": [\n {\n- \"type\": \"website\",\n- \"url\": \"https://glassfish.java.net\"\n- },\n- {\n- \"type\": \"issue-tracker\",\n- \"url\": \"http://java.net/jira/browse/GLASSFISH\"\n- },\n- {\n \"type\": \"vcs\",\n- \"url\": \"http://java.net/projects/glassfish/sources/svn/show/tags/javax.annotation-api-1.2\"\n- }\n- ],\n- \"group\": \"javax.annotation\",\n- \"hashes\": [\n- {\n- \"alg\": \"MD5\",\n- \"content\": \"75fe320d2b3763bd6883ae1ede35e987\"\n- },\n- {\n- \"alg\": \"SHA-1\",\n- \"content\": \"479c1e06db31c432330183f5cae684163f186146\"\n- },\n- {\n- \"alg\": \"SHA-256\",\n- \"content\": \"5909b396ca3a2be10d0eea32c74ef78d816e1b4ead21de1d78de1f890d033e04\"\n- },\n- {\n- \"alg\": \"SHA-512\",\n- \"content\": \"2453330b27a0822bba440c28b98ae1d83d60d97dfa2d040562dd5126b3548e0caa040fea3b886ac6feb0a858e6c1bc45b6c5472b180f1f14792e5ca33e355959\"\n- },\n- {\n- \"alg\": \"SHA-384\",\n- \"content\": \"37a46eaa1d011969d28ff0daaecd67a560169b3ae70c40102331d85a71139ca07110169fe367f484735914ce5c6b86c0\"\n- },\n- {\n- \"alg\": \"SHA3-384\",\n- \"content\": \"e2f8df1aad5867355fd1d3de2374d077e3ad885e6bddac3ce7c7bc72a34097e33bc5dfe960f839a7feb515bd5a92ffd1\"\n- },\n- {\n- \"alg\": \"SHA3-256\",\n- \"content\": \"2e2acc7429faecd2e74c0c441209b1a5b0ccbc245ccd8391425c4b1e4b2fbc94\"\n- },\n- {\n- \"alg\": \"SHA3-512\",\n- \"content\": \"9a28cb34c7761e695ccea04cc6df1e0f9cd18fef59bf50d5943ddc06802e616bc2bd55211e863c65f7f7661f963ba8ee9e569324642b87bc1703dc6f07cba5e3\"\n+ \"url\": \"https://github.com/jreleaser/jreleaser\"\n }\n ],\n+ \"group\": \"org.jreleaser\",\n \"licenses\": [\n {\n- \"expression\": \"(CDDL-1.0 OR GPL-2.0-with-classpath-exception)\"\n+ \"license\": {\n+ \"id\": \"Apache-2.0\",\n+ \"url\": \"https://www.apache.org/licenses/LICENSE-2.0\"\n+ }\n }\n ],\n \"modified\": false,\n- \"name\": \"javax.annotation-api\",\n- \"publisher\": \"GlassFish Community\",\n- \"purl\": \"pkg:maven/javax.annotation/javax.annotation-api@1.2?type=jar\",\n+ \"name\": \"jreleaser-utils\",\n+ \"purl\": \"pkg:maven/org.jreleaser/jreleaser-utils@1.6.0?type=jar\",\n \"type\": \"library\",\n- \"version\": \"1.2\"\n+ \"version\": \"1.6.0\"\n },\n {\n- \"bom-ref\": \"pkg:maven/org.apache.commons/commons-compress@1.22?type=jar\",\n- \"description\": \"Apache Commons Compress software defines an API for working with compression and archive formats. These include: bzip2, gzip, pack200, lzma, xz, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.\",\n+ \"bom-ref\": \"pkg:maven/org.bouncycastle/bcpg-jdk15on@1.70?type=jar\",\n+ \"description\": \"The Bouncy Castle Java API for handling the OpenPGP protocol. This jar contains the OpenPGP API for JDK 1.5 and up. The APIs can be used in conjunction with a JCE/JCA provider such as the one provided with the Bouncy Castle Cryptography APIs.\",\n \"externalReferences\": [\n {\n \"type\": \"issue-tracker\",\n- \"url\": \"https://issues.apache.org/jira/browse/COMPRESS\"\n+ \"url\": \"https://github.com/bcgit/bc-java/issues\"\n },\n {\n \"type\": \"vcs\",\n- \"url\": \"https://gitbox.apache.org/repos/asf?p=commons-compress.git\"\n+ \"url\": \"https://github.com/bcgit/bc-java\"\n }\n ],\n- \"group\": \"org.apache.commons\",\n+ \"group\": \"org.bouncycastle\",\n \"hashes\": [\n {\n \"alg\": \"MD5\",\n- \"content\": \"f1e4db16fee4291212d91409313a8086\"\n+ \"content\": \"01ddc3aa0289346f4db19d95039cefdb\"\n },\n {\n \"alg\": \"SHA-1\",\n- \"content\": \"691a8b4e6cf4248c3bc72c8b719337d5cb7359fa\"\n+ \"content\": \"062f72ec06f31a6c31a3f3355fce0384b21126d7\"\n },\n {\n \"alg\": \"SHA-256\",\n- \"content\": \"53d04a0efc7223baecaa303bd5d298eb0600e6b82b4076f9cecd558b97ba760b\"\n+ \"content\": \"4f08f4aa74048824151c98dd3e92e7165ac30659834404f08a8e843bdad32847\"\n },\n {\n \"alg\": \"SHA-512\",\n- \"content\": \"2d64fa6cd081fff5d73ee662a82f6186991fc13b4bdaee18b5f1bdcab06d9acb70e3713d18b296337791448251fbd6768bd84afaa817a10547652d0cfa885563\"\n+ \"content\": \"4e240b7811ef90c090e83a181dace41da487555e4136221861b0060f9af6d8b316f2dd0472f747adb98ca5372f46055456ef04bdc0c3992188ab13302922fce9\"\n },\n {\n \"alg\": \"SHA-384\",\n- \"content\": \"295d7f69d151abbd784e1c4d021c77ce43e129bb5bda0c55762b32d77c8607863383297674ec8a212ea3dfe4007b0044\"\n+ \"content\": \"d89dec6226112d13cbea461d84740699770dd7d8ad3f67ab65e7b49fd08a096a948e54da2e6a681925c4320f410bba37\"\n },\n {\n \"alg\": \"SHA3-384\",\n- \"content\": \"af04eb1b4647b1a041c5ee994c2c7a32556b5410b916fedb69905f166938baa43ba54fdc67084205794c02680d3c6349\"\n+ \"content\": \"5e8e8ca63cc550a8f50b627c4dd051f0eb5c31b99ff53dabd7d5f5d1ed98d0dc1d4963a09fc0db32f8e0ff769a2a6e65\"\n },\n {\n \"alg\": \"SHA3-256\",\n- \"content\": \"40f2960e82adfb171b0c5430271fdb0c0dae243aaf9b08021df54fd4d4a3a0b0\"\n+ \"content\": \"77f28e7e22b3b3a8d7b667fb7f783847c4b11ee7208833636e09e8b38390fd51\"\n },\n {\n \"alg\": \"SHA3-512\",\n- \"content\": \"f2c445f77bda3ef230a2b78ea88d86e48a7d6db36805f841d5cffe1f178842a161b2fda0b0d60162af210f18ed9c5bb9579c963291c26f715c1aa389d9a6785c\"\n+ \"content\": \"cb238dbb641c42c49b5801bdfa6432395e860c1a7485ba68e2d57887e3d22ff254718c6cbfa34c107bfb09d74e2f85c33b95f89dfa886e141a8247a0abf2b5c2\"\n }\n ],\n \"licenses\": [\n {\n \"license\": {\n- \"id\": \"Apache-2.0\"\n+ \"name\": \"Bouncy Castle Licence\",\n+ \"url\": \"https://www.bouncycastle.org/licence.html\"\n+ }\n+ },\n+ {\n+ \"license\": {\n+ \"id\": \"Apache-1.1\",\n+ \"url\": \"http://apache.org/licenses/LICENSE-1.1\"\n }\n }\n ],\n \"modified\": false,\n- \"name\": \"commons-compress\",\n- \"purl\": \"pkg:maven/org.apache.commons/commons-compress@1.22?type=jar\",\n+ \"name\": \"bcpg-jdk15on\",\n+ \"purl\": \"pkg:maven/org.bouncycastle/bcpg-jdk15on@1.70?type=jar\",\n \"type\": \"library\",\n- \"version\": \"1.22\"\n+ \"version\": \"1.70\"\n },\n {\n- \"bom-ref\": \"pkg:maven/org.twdata.maven/mojo-executor@2.4.0?type=jar\",\n- \"group\": \"org.twdata.maven\",\n+ \"bom-ref\": \"pkg:maven/io.github.openfeign/feign-jackson@12.3?type=jar\",\n+ \"description\": \"Feign Jackson\",\n+ \"group\": \"io.github.openfeign\",\n \"hashes\": [\n {\n \"alg\": \"MD5\",\n- \"content\": \"ba2b0edcf5cfc3b5c2ba166aecc6c27c\"\n+ \"content\": \"8bbba5bba4c26edb1b5c89e1a4912c22\"\n },\n {\n \"alg\": \"SHA-1\",\n- \"content\": \"64f0498596a62e2917519268183e06b08ca3e4e1\"\n+ \"content\": \"583c0ce0354e6ed81d998d5b8f1786ade1e9f2c4\"\n },\n {\n \"alg\": \"SHA-256\",\n- \"content\": \"7be7713cfd9f0e9fab9acbe2538bf06186ea6ae0cc80b324afdb3861aaf18889\"\n+ \"content\": \"1dfc43d604693ce51ef3935f27dbfecd2d65636699a088eee32ff37cc50ea479\"\n },\n {\n \"alg\": \"SHA-512\",\n- \"content\": \"944378ba9c3768636712f8736515ed81d6801adbc399ba00f54654fcb1af9581ae41c329b40ef01026694f036e7a6a2b1d7ac7e6d18e1809f935829d1a91503b\"\n+ \"content\": \"8ea71fae9a2a4ad9d06f27e21e078001e1a29761af85e81b91bf2a38e4dd8841184a12fdf467915c234d080aa28484452fe45b9bc0a381ce23d8366b03be1395\"\n },\n {\n \"alg\": \"SHA-384\",\n- \"content\": \"e5b17ff4a1a4ec8625c83c4f2182299d647f72ca6cb1501f90f839be8facb0933347ba8e54b9db5829233c1f578f3027\"\n+ \"content\": \"03553ac35a79266a150940fc62d3da7a389b47825102d91392f37b719da94af2d2355c2592d2b68604bf84248c73baf9\"\n },\n {\n \"alg\": \"SHA3-384\",\n- \"content\": \"9f1d2dba50807dd3266ec4ed2e5f607954300d89def4454ca06eacb9779b1f41079ae1ce00b629ba42fb1ab2802a8ad6\"\n+ \"content\": \"986284d22c0bbb7abfbc1762447a44d0919c266002d6925c4ca75040f3950a3d943a71dedf2f72592e6a185218c498a9\"\n },\n {\n \"alg\": \"SHA3-256\",\n- \"content\": \"8192f9f0b59c25a4b4ded04a581513b5d22673e2a0e160ed0f160f834af88a18\"\n+ \"content\": \"60242fd373d71575ffcb8a4f866b27d291b6acecf83be67e6ff51a13559dc016\"\n },\n {\n \"alg\": \"SHA3-512\",\n- \"content\": \"ebb7f33969e7a77360178f0047dcb0bde06b24862efee965839b08b30eae815ea7032acbe2896070e7020168d0a5d0877f0844ec3788515e08b5ad80e51bdfd3\"\n+ \"content\": \"b7e0392fc793f19b3daf64c7e7b875fb2e4ec7ba2f1681d51c14c5c9efd5991817766753e62999a76bad83c624601f9f5a55304c4e06d2e3cd88ec4c609a1ede\"\n }\n ],\n \"licenses\": [\n {\n \"license\": {\n \"id\": \"Apache-2.0\"\n }\n }\n ],\n \"modified\": false,\n- \"name\": \"mojo-executor\",\n- \"purl\": \"pkg:maven/org.twdata.maven/mojo-executor@2.4.0?type=jar\",\n+ \"name\": \"feign-jackson\",\n+ \"purl\": \"pkg:maven/io.github.openfeign/feign-jackson@12.3?type=jar\",\n \"type\": \"library\",\n- \"version\": \"2.4.0\"\n+ \"version\": \"12.3\"\n },\n {\n- \"bom-ref\": \"pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.3.5?type=jar\",\n+ \"bom-ref\": \"pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.3.5?type=jar\",\n \"group\": \"org.eclipse.sisu\",\n \"hashes\": [\n {\n \"alg\": \"MD5\",\n- \"content\": \"1b296b0ddd911ed3750b3df93b395cd5\"\n+ \"content\": \"30c4a9fa2137698ed66c8542f1be196a\"\n },\n {\n \"alg\": \"SHA-1\",\n- \"content\": \"d4265dd4f0f1d7a06d80df5a5f475d5ff9c17140\"\n+ \"content\": \"d71996bb2e536f966b3b70e647067fff3b73d32f\"\n },\n {\n \"alg\": \"SHA-256\",\n- \"content\": \"c5994010bcdce1d2bd603a4d50c47191ddbd7875d1157b23aaa26d33c82fda13\"\n+ \"content\": \"7e4c61096d70826f20f7a7d55c59a5528e7aa5ad247ee2dfe544e4dd25f6a784\"\n },\n {\n \"alg\": \"SHA-512\",\n- \"content\": \"f4790768c0d958b3429a3241abb15f9bb6e2fd7f43a5e034dde6a3a6820e6941c00f10ad084d5c38f8edc144e7acbea7ba3dc8952f01dab41e443803db2a4efc\"\n+ \"content\": \"38d7dbe023f9751cb5e30bf154e31696590317dc7b7f768811fe0f5940513fcea4665670cd47d0b72ded85453b10f7d129b0b7428b155a41c903c7b56c986e8d\"\n },\n {\n \"alg\": \"SHA-384\",\n- \"content\": \"b76e74a0cda6d88c1c03d40e71d238fa13e2070485c026945ee8dc6da62eacb02071a65df35fa3e4d9d6b343a89fb605\"\n+ \"content\": \"2e943a72f0ca201d50ba90b4cf70c3c1f7b5ffc3bbfdee45875bc2f6f2e2a3a93acbba3a2f1e7ffb32b70e041633b6de\"\n },\n {\n \"alg\": \"SHA3-384\",\n- \"content\": \"a2d3bae2f5e518c7d11e584f6b8b7368f3b927c3405f48e27d4225d4e2f4917fb5623c0071fc47f081200b7d754571d1\"\n+ \"content\": \"a7b121732001b6f225b0687e7747993f48b3fc1d9a4325b4321a4c59adae36b49677193f5e31e3b1f11a6cd266e459f3\"\n },\n {\n \"alg\": \"SHA3-256\",\n- \"content\": \"b998bcdf4f8b5550a543865408e94fadcf1dd37ac19ec37269ff5307220b2775\"\n+ \"content\": \"b879a16dd84d8d4f39c1009029b3a3a55e18049c7910f77814a32ca088b56585\"\n },\n {\n \"alg\": \"SHA3-512\",\n- \"content\": \"e9331e8a1b4281b45abec89dd9b7dd948207ebd7bed6be5978a5792d59327f7a4d4ee87c6f60392021f24f28439ab4ca4b6305ef6528e1c241c7a27c883b5931\"\n+ \"content\": \"8f8fbebd2a3024bcf6f2e27e8206e3f3c2b2673217c1220743b1869bf60341490db7d1877d9eaf3c452500690df98ccda11a19bda996b74a6ebedc37bc9bc554\"\n }\n ],\n \"licenses\": [\n {\n \"license\": {\n \"id\": \"EPL-1.0\"\n }\n }\n ],\n \"modified\": false,\n- \"name\": \"org.eclipse.sisu.inject\",\n- \"purl\": \"pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.3.5?type=jar\",\n+ \"name\": \"org.eclipse.sisu.plexus\",\n+ \"purl\": \"pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.3.5?type=jar\",\n \"type\": \"library\",\n \"version\": \"0.3.5\"\n },\n {\n- \"bom-ref\": \"pkg:maven/org.codehaus.plexus/plexus-archiver@4.6.3?type=jar\",\n+ \"bom-ref\": \"pkg:maven/org.codehaus.plexus/plexus-io@3.4.1?type=jar\",\n \"externalReferences\": [\n {\n \"type\": \"issue-tracker\",\n- \"url\": \"https://github.com/codehaus-plexus/plexus-archiver/issues\"\n+ \"url\": \"https://github.com/codehaus-plexus/plexus-io/issues\"\n+ },\n+ {\n+ \"type\": \"vcs\",\n+ \"url\": \"http://github.com/codehaus-plexus/plexus-io\"\n }\n ],\n \"group\": \"org.codehaus.plexus\",\n \"hashes\": [\n {\n \"alg\": \"MD5\",\n- \"content\": \"7212a1e9bad1423a041c4452fc2e2892\"\n+ \"content\": \"7921fc78e18b1dc3dabe8ca5e3558657\"\n },\n {\n \"alg\": \"SHA-1\",\n- \"content\": \"c75ce6850ef98c92e2a143438660e9de61367039\"\n+ \"content\": \"e9dc0280372501917a124af943dcb709f73577a2\"\n },\n {\n \"alg\": \"SHA-256\",\n- \"content\": \"d7c8bfc698dadb5a354167f6e5021f471a3dd9f1754ad140ee449d0824d2e7c5\"\n+ \"content\": \"ac3be07c2968f98656604ddb8fdf08f1cfc560bc7b329fd17847f151510dc2c4\"\n },\n {\n \"alg\": \"SHA-512\",\n- \"content\": \"235f57b76fa68670883d597b997eadc9a467beea1d55a785719a8a0a1286f7fd3c0217c422c3d6dc1cf66ce4a6ba03ae7f37d5942c360325b2b644173f3565e8\"\n+ \"content\": \"c1555c9c23b61cd9fa1ee39c4015652eedf7e593e0515188d60ce66d1e33852e3570db7c6a471c3d128cbb0cb3bad1aaa526d2db532b0ed73b85678fb5436a5c\"\n },\n {\n \"alg\": \"SHA-384\",\n- \"content\": \"73f6447fa143e6fc055faa1356b1df9e45c55e7710efa338a7f81e59287525eb0032d7934e1c3c1b376939aa4778eed2\"\n+ \"content\": \"96a7ad4a6ace76b43a3188e621431b316b671b416f1fb894db73ab8c57729234c2ae4b4f0680045df7a3f54e1699107b\"\n },\n {\n \"alg\": \"SHA3-384\",\n- \"content\": \"c2e929909df2a1c43d7321628247bdade15720084d2d1d0cb25a3447fc815624ce8ccca19c5920ab3d983cbf5e40f0b5\"\n+ \"content\": \"6e6295afe879f7236bd223f14102ceb3714f18fe539c9c1c65782d9fa250aaf90a57a433ff9df264a66053170408dc68\"\n },\n {\n \"alg\": \"SHA3-256\",\n- \"content\": \"a6f22922b3682367ccbc11020cae01d2c6b0053f6fa7ca1122726efdbe66ec13\"\n+ \"content\": \"ab97d2c2f4df777fb6e1a01b781c58e644b4bd2f6093d0dcd31533685d01bee4\"\n },\n {\n \"alg\": \"SHA3-512\",\n- \"content\": \"16a4782a692314b21dc7616ecf595ebc6370488395c61a13e5e23837dbb87e36af69d11e52a6865523207d51b891d8c6ddff6063bab47faac548d77d9dbdad2f\"\n+ \"content\": \"9d2aa908d414745ad92fae20b8b2cf833e137293a5e01d95c5308ab1464636696d7aa6351cf62323858e7942aa64a6af676710c8788ea6bc1ebadb094353a2a4\"\n }\n ],\n \"licenses\": [\n {\n \"license\": {\n \"id\": \"Apache-2.0\"\n }\n }\n ],\n \"modified\": false,\n- \"name\": \"plexus-archiver\",\n- \"purl\": \"pkg:maven/org.codehaus.plexus/plexus-archiver@4.6.3?type=jar\",\n+ \"name\": \"plexus-io\",\n+ \"purl\": \"pkg:maven/org.codehaus.plexus/plexus-io@3.4.1?type=jar\",\n \"type\": \"library\",\n- \"version\": \"4.6.3\"\n+ \"version\": \"3.4.1\"\n },\n {\n- \"bom-ref\": \"pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar\",\n- \"description\": \"Apache HttpComponents Client\",\n- \"group\": \"org.apache.httpcomponents\",\n+ \"bom-ref\": \"pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar\",\n+ \"description\": \"Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.\",\n+ \"externalReferences\": [\n+ {\n+ \"type\": \"issue-tracker\",\n+ \"url\": \"https://issues.apache.org/jira/browse/LANG\"\n+ },\n+ {\n+ \"type\": \"vcs\",\n+ \"url\": \"https://gitbox.apache.org/repos/asf?p=commons-lang.git\"\n+ }\n+ ],\n+ \"group\": \"org.apache.commons\",\n \"hashes\": [\n {\n \"alg\": \"MD5\",\n- \"content\": \"40d6b9075fbd28fa10292a45a0db9457\"\n+ \"content\": \"19fe50567358922bdad277959ea69545\"\n },\n {\n \"alg\": \"SHA-1\",\n- \"content\": \"e5f6cae5ca7ecaac1ec2827a9e2d65ae2869cada\"\n+ \"content\": \"c6842c86792ff03b9f1d1fe2aab8dc23aa6c6f0e\"\n },\n {\n \"alg\": \"SHA-256\",\n- \"content\": \"6fe9026a566c6a5001608cf3fc32196641f6c1e5e1986d1037ccdbd5f31ef743\"\n+ \"content\": \"d919d904486c037f8d193412da0c92e22a9fa24230b9d67a57855c5c31c7e94e\"\n },\n {\n \"alg\": \"SHA-512\",\n- \"content\": \"3567739186e551f84cad3e4b6b270c5b8b19aba297675a96bcdff3663ff7d20d188611d21f675fe5ff1bfd7d8ca31362070910d7b92ab1b699872a120aa6f089\"\n+ \"content\": \"fbdbc0943cb3498b0148e86a39b773f97c8e6013740f72dbc727faeabea402073e2cc8c4d68198e5fc6b08a13b7700236292e99d4785f2c9989f2e5fac11fd81\"\n },\n {\n \"alg\": \"SHA-384\",\n- \"content\": \"093ac3e2dde58e34aa70309c7305eb3c9b5be2509a9293f1672494da55479a86bd112e83326746dc7a32855472952b99\"\n+ \"content\": \"c34b8a0e0eba2168ad56fedeb7a1d710b6f1d3f1ce6aae99a4e0247bd120efbbadc8dcb2f731045b8a16e3efd30604dc\"\n },\n {\n \"alg\": \"SHA3-384\",\n- \"content\": \"cd6882e7868624164e460f2f3ea01466f863c0dcb902b031c656b57356f563be83b29530df41d88d634ed3d01fc9964d\"\n+ \"content\": \"8ad6ebe7754bf0caa8cda7e59c0e95360d76e06a7ad6aeec5637985519dbd1dd06e7eed04711039f36ec4c49de280def\"\n },\n {\n \"alg\": \"SHA3-256\",\n- \"content\": \"710b1d8d7dae0b8e4270756694ca9c83d64965f42d3b4170c609b14d47c2762c\"\n+ \"content\": \"18ef639b2aeeb5aedffb18dbf20c79f33e300d99fb31b131689639cc470e6e4c\"\n },\n {\n \"alg\": \"SHA3-512\",\n- \"content\": \"276fa6a6599dc89382d658115695cf4da6b0d39b34e9c349c17a5dbd64122eaee553bb9ed75c0378ec4a83be157c8aa39370662de3c9b8fd55ebc1dd608383e6\"\n+ \"content\": \"fbea96114dcf4f31cfaaa99987be756ddda3a6c74f8c835461997df794d54b92da1f60fe5c3f1f2a43cb8c5f5db7f4048bef77c70993673c7a93f3660fffc8da\"\n }\n ],\n \"licenses\": [\n {\n \"license\": {\n \"id\": \"Apache-2.0\"\n }\n }\n ],\n \"modified\": false,\n- \"name\": \"httpclient\",\n- \"purl\": \"pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar\",\n+ \"name\": \"commons-lang3\",\n+ \"purl\": \"pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar\",\n \"type\": \"library\",\n- \"version\": \"4.5.13\"\n+ \"version\": \"3.12.0\"\n },\n {\n- \"bom-ref\": \"pkg:maven/org.apache.maven/maven-model@3.8.7?type=jar\",\n- \"description\": \"Model for Maven POM (Project Object Model)\",\n- \"group\": \"org.apache.maven\",\n+ \"bom-ref\": \"pkg:maven/javax.annotation/javax.annotation-api@1.2?type=jar\",\n+ \"description\": \"Common Annotations for the JavaTM Platform API\",\n+ \"externalReferences\": [\n+ {\n+ \"type\": \"website\",\n+ \"url\": \"https://glassfish.java.net\"\n+ },\n+ {\n+ \"type\": \"issue-tracker\",\n+ \"url\": \"http://java.net/jira/browse/GLASSFISH\"\n+ },\n+ {\n+ \"type\": \"vcs\",\n+ \"url\": \"http://java.net/projects/glassfish/sources/svn/show/tags/javax.annotation-api-1.2\"\n+ }\n+ ],\n+ \"group\": \"javax.annotation\",\n \"hashes\": [\n {\n \"alg\": \"MD5\",\n- \"content\": \"91c8c6b449ca34033832f268df64873b\"\n+ \"content\": \"75fe320d2b3763bd6883ae1ede35e987\"\n },\n {\n \"alg\": \"SHA-1\",\n- \"content\": \"a6a1f77aa36d158c8ec7917112192083b9467cd4\"\n+ \"content\": \"479c1e06db31c432330183f5cae684163f186146\"\n },\n {\n \"alg\": \"SHA-256\",\n- \"content\": \"6fcadaee2a885c43b158f2e3833d0a3ecb68efc62e25ea5b11f77cc0716a7b2d\"\n+ \"content\": \"5909b396ca3a2be10d0eea32c74ef78d816e1b4ead21de1d78de1f890d033e04\"\n },\n {\n \"alg\": \"SHA-512\",\n- \"content\": \"f24ea0d84444002c3bce0cc2529638125dcc7b2d8dbf1054d43438702672da499deac20d3a9432ed92fd88005d6d6660f26902011ec8914aee40650af0f9ac8a\"\n+ \"content\": \"2453330b27a0822bba440c28b98ae1d83d60d97dfa2d040562dd5126b3548e0caa040fea3b886ac6feb0a858e6c1bc45b6c5472b180f1f14792e5ca33e355959\"\n },\n {\n \"alg\": \"SHA-384\",\n- \"content\": \"e076fd71ed4f450fe18fa80fa29b0967a1ae95ac3729f1d42b7b77d05b02f18642a787a1671b975df1c40f7dbc7399ba\"\n+ \"content\": \"37a46eaa1d011969d28ff0daaecd67a560169b3ae70c40102331d85a71139ca07110169fe367f484735914ce5c6b86c0\"\n },\n {\n \"alg\": \"SHA3-384\",\n- \"content\": \"82d7a280f6427218cb64577d41de7e974368a088cedd8f495cca0a64e73b3e29786c2ce15420bf5c348d313303eccfb9\"\n+ \"content\": \"e2f8df1aad5867355fd1d3de2374d077e3ad885e6bddac3ce7c7bc72a34097e33bc5dfe960f839a7feb515bd5a92ffd1\"\n },\n {\n \"alg\": \"SHA3-256\",\n- \"content\": \"9079dd0edebc0a9b12fba1700116c09b958e5268a522a84ed5f61cea90859755\"\n+ \"content\": \"2e2acc7429faecd2e74c0c441209b1a5b0ccbc245ccd8391425c4b1e4b2fbc94\"\n },\n {\n \"alg\": \"SHA3-512\",\n- \"content\": \"fbc8f496338129a4ca92b3b3a0a8890a45a908d0bf3bfd12612abd3152e0311275c7ba8a9b01a84b4522bf209a1508fffd40c5047167252087fc4337531d41f8\"\n+ \"content\": \"9a28cb34c7761e695ccea04cc6df1e0f9cd18fef59bf50d5943ddc06802e616bc2bd55211e863c65f7f7661f963ba8ee9e569324642b87bc1703dc6f07cba5e3\"\n }\n ],\n \"licenses\": [\n {\n- \"license\": {\n- \"id\": \"Apache-2.0\"\n- }\n+ \"expression\": \"(CDDL-1.0 OR GPL-2.0-with-classpath-exception)\"\n }\n ],\n \"modified\": false,\n- \"name\": \"maven-model\",\n- \"purl\": \"pkg:maven/org.apache.maven/maven-model@3.8.7?type=jar\",\n+ \"name\": \"javax.annotation-api\",\n+ \"publisher\": \"GlassFish Community\",\n+ \"purl\": \"pkg:maven/javax.annotation/javax.annotation-api@1.2?type=jar\",\n \"type\": \"library\",\n- \"version\": \"3.8.7\"\n+ \"version\": \"1.2\"\n },\n {\n- \"bom-ref\": \"pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.2?type=jar\",\n- \"description\": \"General data-binding functionality for Jackson: works on core streaming API\",\n- \"externalReferences\": [\n- {\n- \"type\": \"vcs\",\n- \"url\": \"https://github.com/FasterXML/jackson-databind\"\n- }\n- ],\n- \"group\": \"com.fasterxml.jackson.core\",\n+ \"bom-ref\": \"pkg:maven/io.github.openfeign/feign-core@12.3?type=jar\",\n+ \"description\": \"Feign Core\",\n+ \"group\": \"io.github.openfeign\",\n \"hashes\": [\n {\n \"alg\": \"MD5\",\n- \"content\": \"c1b12dd14734cd1986132bf55042dd7e\"\n+ \"content\": \"9e6e1ff8b68d2b6c1fc5bdc7ff208030\"\n },\n {\n \"alg\": \"SHA-1\",\n- \"content\": \"01e71fddbc80bb86f71a6345ac1e8ab8a00e7134\"\n+ \"content\": \"d280b09a17b63e69788fd3d8d215b7013ab48b16\"\n },\n {\n \"alg\": \"SHA-256\",\n- \"content\": \"501d3abce4d18dcc381058ec593c5b94477906bba6efbac14dae40a642f77424\"\n+ \"content\": \"939fbed2c2392a9633bc1d26f0ef9e934b059d1a9a9d4d966cedaf9075c546ec\"\n },\n {\n \"alg\": \"SHA-512\",\n- \"content\": \"85473a29d23292f49092af9e7a7a63993206847c53b3e71f3c67245d68f7b19cc7c341e0ece409eb5e96602df98a848e957d8691fdd2c5fcddd807df9078255e\"\n+ \"content\": \"8335901d8918747dc29d37a2ac630c6a78ea6ff04bfea77e6d8c74188e9e584142920996c45120caa86299486949a04e1ec1f1bef30229904360fcb5c5d4a1c4\"\n },\n {\n \"alg\": \"SHA-384\",\n- \"content\": \"5c54d6c497cb329c3424a30319bf657ea222349eadc5ae74c30e8dc1525d7b60b7785f4d20370267b03343dd738cc13e\"\n+ \"content\": \"dc7a0d10bdf2c3aeafba83ca7e41d21c3288f3df0b76e339788fcf7606381970b6429108dbf2d1212075d1feba040842\"\n },\n {\n \"alg\": \"SHA3-384\",\n- \"content\": \"98ff0b2a4dfc1faf319d4b0d38376c3c7a58b65d071db293232eed810adf2e525fecee3be45c99b41e20cf6a3a8ebef9\"\n+ \"content\": \"2907938ea76735cde9b34676c6c8b04786f1595687f96734e7659768175cb7a525508f84c48d9b10b0b2f593158e1ed5\"\n },\n {\n \"alg\": \"SHA3-256\",\n- \"content\": \"2dba45f78a0d37402083975e18dbb3201705faf7e533c3e9721b9364c2a1ab0f\"\n+ \"content\": \"474f6b0ab420bf63549ed123fff99b73fc881771c6a0c591e58dfb17adbe9899\"\n },\n {\n \"alg\": \"SHA3-512\",\n- \"content\": \"76ef73198269cfd0922f4ae86c8b7e6a9cd1b96ee55da43ebfe57dd34365cc1c5c5630fadf79e46156a52b6b96b7d1f694f5e4f5c4f6a3d3ebb31c927e414435\"\n+ \"content\": \"553a6dc1c3cf7facdb3b4e15be1d6d90259f1d36ce137db3a6e53a967ef4939aaa98c974b059c8f32dd42316bb7eee3b51910cf0fb172d0df9b8ff39d8cc722d\"\n }\n ],\n \"licenses\": [\n {\n \"license\": {\n \"id\": \"Apache-2.0\"\n }\n }\n ],\n \"modified\": false,\n- \"name\": \"jackson-databind\",\n- \"purl\": \"pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.2?type=jar\",\n+ \"name\": \"feign-core\",\n+ \"purl\": \"pkg:maven/io.github.openfeign/feign-core@12.3?type=jar\",\n \"type\": \"library\",\n- \"version\": \"2.14.2\"\n+ \"version\": \"12.3\"\n },\n {\n \"bom-ref\": \"pkg:maven/org.jreleaser/jreleaser-resource-bundle@1.6.0?type=jar\",\n- \"group\": \"org.jreleaser\",\n- \"hashes\": [\n- {\n- \"alg\": \"MD5\",\n- \"content\": \"8419930ec5e42489dad5e26749a994eb\"\n- },\n- {\n- \"alg\": \"SHA-1\",\n- \"content\": \"050aba092fa794e0cb91158de894a97aff581356\"\n- },\n- {\n- \"alg\": \"SHA-256\",\n- \"content\": \"38434b31fac439399aa37018fa69302a9d1b04be6efb7b23d53d18615e1f4f2b\"\n- },\n- {\n- \"alg\": \"SHA-512\",\n- \"content\": \"c77c476e972e17b25de3aecf75d71482535d68cdc5e4bf556f5d4cab17345b9318d47fa42c9da671769f9bcf7f549efde70b64eff5cb189c805bb406fd705cb8\"\n- },\n- {\n- \"alg\": \"SHA-384\",\n- \"content\": \"b1d8f56681f39c638806e669447d9600507946448b528060d98afc2123c637980ba5609aba4b357c83acd772bfbdb73e\"\n- },\n- {\n- \"alg\": \"SHA3-384\",\n- \"content\": \"74a52a9891c520a0f90ffbab33da0219cd787bbe309ae8eca303de00c6041692554e8d650a6a3925e057322bd00700ff\"\n- },\n+ \"description\": \"JReleaser resource bundle\",\n+ \"externalReferences\": [\n {\n- \"alg\": \"SHA3-256\",\n- \"content\": \"304bae90a7c53e6ad711e54bb8847c3eedc0e18cac03bffa14729918cb59efce\"\n- },\n+ \"type\": \"vcs\",\n+ \"url\": \"https://github.com/jreleaser/jreleaser\"\n+ }\n+ ],\n+ \"group\": \"org.jreleaser\",\n+ \"licenses\": [\n {\n- \"alg\": \"SHA3-512\",\n- \"content\": \"16a31cb40ed20dcaa5d34cb6aa2b81325f285b7feb5dda2486206496449fd548ef51117b38a8074a4a106fba9836de72232762dff60f535cd76f5848860c2f6c\"\n+ \"license\": {\n+ \"id\": \"Apache-2.0\",\n+ \"url\": \"https://www.apache.org/licenses/LICENSE-2.0\"\n+ }\n }\n ],\n- \"licenses\": [],\n \"modified\": false,\n \"name\": \"jreleaser-resource-bundle\",\n \"purl\": \"pkg:maven/org.jreleaser/jreleaser-resource-bundle@1.6.0?type=jar\",\n \"type\": \"library\",\n \"version\": \"1.6.0\"\n },\n {\n- \"bom-ref\": \"pkg:maven/commons-io/commons-io@2.11.0?type=jar\",\n- \"description\": \"The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.\",\n+ \"bom-ref\": \"pkg:maven/org.codehaus.plexus/plexus-classworlds@2.7.0?type=jar\",\n+ \"description\": \"A class loader framework\",\n \"externalReferences\": [\n {\n \"type\": \"issue-tracker\",\n- \"url\": \"https://issues.apache.org/jira/browse/IO\"\n- },\n- {\n- \"type\": \"vcs\",\n- \"url\": \"https://gitbox.apache.org/repos/asf?p=commons-io.git\"\n+ \"url\": \"http://github.com/codehaus-plexus/plexus-classworlds/issues\"\n }\n ],\n- \"group\": \"commons-io\",\n+ \"group\": \"org.codehaus.plexus\",\n \"hashes\": [\n {\n \"alg\": \"MD5\",\n- \"content\": \"3b4b7ccfaeceeac240b804839ee1a1ca\"\n+ \"content\": \"6ed852b1a004288c44438381e6aaee1e\"\n },\n {\n \"alg\": \"SHA-1\",\n- \"content\": \"a2503f302b11ebde7ebc3df41daebe0e4eea3689\"\n+ \"content\": \"fe6f1acefd1a302dd4bc6d9d7f15358828d2a44d\"\n },\n {\n \"alg\": \"SHA-256\",\n- \"content\": \"961b2f6d87dbacc5d54abf45ab7a6e2495f89b75598962d8c723cea9bc210908\"\n+ \"content\": \"c60ae538ba66adbc06aae205fbe2306211d3d213ab6df3239ec03cdde2458ad6\"\n },\n {\n \"alg\": \"SHA-512\",\n- \"content\": \"5bd78eed456ede30119319c5bed8e3e4c443b6fd7bdb3a7a5686647bd83094d0c3e2832a7575cfb60e4ef25f08106b93476939d3adcfecf5533cc030b3039e10\"\n+ \"content\": \"8057b6c7d52aaa61a51aba6ec613e8bd1a094d62a84d50a37bfe7776ff53780f1602b6169242c3a60b28c9d496458baaac5377575553e4af881643490ccda912\"\n },\n {\n \"alg\": \"SHA-384\",\n- \"content\": \"114f1e324d90ad887c177876d410f5787a8e8da6c48d4b2862d365802c0efded3a88cb24046976bf6276cadad3712f0f\"\n+ \"content\": \"4b079cab0a5f50631ef134f6578f4772f59897977d20ddef071920c107ca13cc3ce85d7b3c2bad586fb7a29fb4a4e07d\"\n },\n {\n \"alg\": \"SHA3-384\",\n- \"content\": \"80288c03ad4d80d69f91d056ffc5570d49a9c76bf54ad2dff0121ecde26a560df76d05156f281f5c6db2a38ff07a873d\"\n+ \"content\": \"1e4500603fc2ac0c080f4a7b127171103295571bc7e570e50f6c479c62667cf78cf177c09b92f39702864fff83e35f9f\"\n },\n {\n \"alg\": \"SHA3-256\",\n- \"content\": \"5adfb5ccaf5f21a549422f426118a9542673926fcd18c68390cf813e791dcf6c\"\n+ \"content\": \"ff715bac48dda5b19e29e18e47dbba9015cfcdf3a949c19154ae9ea3e5951c60\"\n },\n {\n \"alg\": \"SHA3-512\",\n- \"content\": \"7573f47f0babb53cefdc7c2309a0b982d800139064537b0797da442853d081010ad7c3c74a500598a0f800639a5d540eca21963ea652c68613907059bd4278c2\"\n+ \"content\": \"7bb6f86ea7300d4321fb78a0cfcbd2acc2b6639abb75e68e4bf1e301622ee1d41bdeed728aa49d74578918fe5da954860a29a9a6249e651db3edae941f816bf7\"\n }\n ],\n \"licenses\": [\n {\n \"license\": {\n \"id\": \"Apache-2.0\"\n }\n }\n ],\n \"modified\": false,\n- \"name\": \"commons-io\",\n- \"purl\": \"pkg:maven/commons-io/commons-io@2.11.0?type=jar\",\n+ \"name\": \"plexus-classworlds\",\n+ \"purl\": \"pkg:maven/org.codehaus.plexus/plexus-classworlds@2.7.0?type=jar\",\n \"type\": \"library\",\n- \"version\": \"2.11.0\"\n+ \"version\": \"2.7.0\"\n },\n {\n- \"bom-ref\": \"pkg:maven/org.jreleaser/jreleaser-utils@1.6.0?type=jar\",\n- \"group\": \"org.jreleaser\",\n+ \"bom-ref\": \"pkg:maven/org.iq80.snappy/snappy@0.4?type=jar\",\n+ \"description\": \"Port of Snappy to Java\",\n+ \"externalReferences\": [\n+ {\n+ \"type\": \"distribution\",\n+ \"url\": \"https://oss.sonatype.org/service/local/staging/deploy/maven2/\"\n+ },\n+ {\n+ \"type\": \"vcs\",\n+ \"url\": \"http://github.com/dain/snapy/tree/master\"\n+ }\n+ ],\n+ \"group\": \"org.iq80.snappy\",\n \"hashes\": [\n {\n \"alg\": \"MD5\",\n- \"content\": \"ca784b5aa352b016a37b393e9e500325\"\n+ \"content\": \"f0792d1dbe7f90d8b34c7c19961e0073\"\n },\n {\n \"alg\": \"SHA-1\",\n- \"content\": \"b0dde5ebbe5a98e5fa90b101dca5ad56e92c49c8\"\n+ \"content\": \"a42b2d92a89efd35bb14738000dabcac6bd07a8d\"\n },\n {\n \"alg\": \"SHA-256\",\n- \"content\": \"02b038af2f098d6019b94f4f4e55b8f901d2b5b4a072b083b23e47bd6a3e23cd\"\n+ \"content\": \"46a0c87d504ce9d6063e1ff6e4d20738feb49d8abf85b5071a7d18df4f11bac9\"\n },\n {\n \"alg\": \"SHA-512\",\n- \"content\": \"9b5e03766473ee854f877182a758a4842a9566772405af73cd200388eeeb981712e6a3e57f4f2f14f09a912b0cad625a75c5441b57eaa238699beabf327dd56a\"\n+ \"content\": \"dfd2559bf0388c6f1987d1393497a423203b2a72febbe648b3429e4d07b47a504797228e6e4e39a94c6800c5d3df8d3792863a3b841e6e8f65cfdcda91b6f0ab\"\n },\n {\n \"alg\": \"SHA-384\",\n- \"content\": \"ebc800a8a0a6d19ac2bc922598f8913df5a5eb972dc46ba4eadec5034538c9c95866839670dbf92ca93b075dcb659a0c\"\n+ \"content\": \"7b5feeb0f1ee3fd3f5cd17c5ea31a75cdd060e7beaa1773474727711c308d2cf5b900b5717965afe8c14912e33c41538\"\n },\n {\n \"alg\": \"SHA3-384\",\n- \"content\": \"ed0ba35caf8b7d7dc67d7350617b6cbd54de336634fd5927f03768a89f74ede798ecf343964ef0484302ee262617756b\"\n+ \"content\": \"d96d486687e858c1ebe1fadbd731d33e0233922eee703f1a4e36e68fa1dcc527cdcc4fae8fc91894ebeada2a1214606e\"\n },\n {\n \"alg\": \"SHA3-256\",\n- \"content\": \"b81154ce5c428820626ee1a99e7f9bbe63d4803f7f311744a26bb8331fb193cc\"\n+ \"content\": \"cf1b329b3f46891dc9e86fe9c6350a023dc0cb411739d2fd9d35490dfa8397aa\"\n },\n {\n \"alg\": \"SHA3-512\",\n- \"content\": \"b6429f8944cedd026f7b0c30328f8b5e2717493624cee82df48f7e69c8fe8a26b0542d447b1795c7fad7ff90affadcc087d69a576d69cbaccf3ccf1ca962be56\"\n+ \"content\": \"3a8584d15b63d4c371fed5b615f7a121fe2530d35d234b2caa499c53e7c558376ed22d289828276fbc77cd7c1311ba4d6c1af03edf08c5f051d5b674f01e6120\"\n+ }\n+ ],\n+ \"licenses\": [\n+ {\n+ \"license\": {\n+ \"id\": \"Apache-2.0\",\n+ \"url\": \"https://www.apache.org/licenses/LICENSE-2.0\"\n+ }\n }\n ],\n- \"licenses\": [],\n \"modified\": false,\n- \"name\": \"jreleaser-utils\",\n- \"purl\": \"pkg:maven/org.jreleaser/jreleaser-utils@1.6.0?type=jar\",\n+ \"name\": \"snappy\",\n+ \"purl\": \"pkg:maven/org.iq80.snappy/snappy@0.4?type=jar\",\n \"type\": \"library\",\n- \"version\": \"1.6.0\"\n+ \"version\": \"0.4\"\n },\n {\n- \"bom-ref\": \"pkg:maven/org.bouncycastle/bcprov-jdk15on@1.70?type=jar\",\n- \"description\": \"The Bouncy Castle Crypto package is a Java implementation of cryptographic algorithms. This jar contains JCE provider and lightweight API for the Bouncy Castle Cryptography APIs for JDK 1.5 and up.\",\n+ \"bom-ref\": \"pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.2?type=jar\",\n+ \"description\": \"Core Jackson processing abstractions (aka Streaming API), implementation for JSON\",\n \"externalReferences\": [\n {\n- \"type\": \"issue-tracker\",\n- \"url\": \"https://github.com/bcgit/bc-java/issues\"\n- },\n- {\n \"type\": \"vcs\",\n- \"url\": \"https://github.com/bcgit/bc-java\"\n+ \"url\": \"https://github.com/FasterXML/jackson-core\"\n }\n ],\n- \"group\": \"org.bouncycastle\",\n+ \"group\": \"com.fasterxml.jackson.core\",\n \"hashes\": [\n {\n \"alg\": \"MD5\",\n- \"content\": \"1809d0449a6374279c01fdd3be26cd92\"\n+ \"content\": \"6ee422ee4c481b2d5aacb2b5e36a7dc0\"\n },\n {\n \"alg\": \"SHA-1\",\n- \"content\": \"4636a0d01f74acaf28082fb62b317f1080118371\"\n+ \"content\": \"f804090e6399ce0cf78242db086017512dd71fcc\"\n },\n {\n \"alg\": \"SHA-256\",\n- \"content\": \"8f3c20e3e2d565d26f33e8d4857a37d0d7f8ac39b62a7026496fcab1bdac30d4\"\n+ \"content\": \"b5d37a77c88277b97e3593c8740925216c06df8e4172bbde058528df04ad3e7a\"\n },\n {\n \"alg\": \"SHA-512\",\n- \"content\": \"7dccfc636ee4df1487615818cfa99c69941081df95e8ef1eaf4bca165594dff9547e3774fd70de3418abace77d2c45889f70bcd2e6823f8539f359e68eaf36d1\"\n+ \"content\": \"208953cf72691b3bab1ca2f9a045cccd3d75c46c90099ba884fbf16bc3e45045e5cd014d2c68c96e8a8826f87a5f0e18cb34b35e7ef03348953869c21e197367\"\n },\n {\n \"alg\": \"SHA-384\",\n- \"content\": \"a0b35d204cd962f1d246fa94b6e8b0fcee1a7c3f37b7e87cda742f2124a25b48794ce11a903ea8d12009c86227b6808d\"\n+ \"content\": \"e806595862c5fcdae801d9845befc1d12c97e6036ee839d34590dbd785a422d5832cf4fc5c7ee6e1a5ee7a59f37740f0\"\n },\n {\n \"alg\": \"SHA3-384\",\n- \"content\": \"980d81d3d9906764bbf2ae9b3b364ea58628b485ce1dc3d06734e10495d79f2be2e7cc7df61ac88cd67c1104c7af9393\"\n+ \"content\": \"4fa59f572f2e100e2eba6fc664a3b9f804fabd911a552cb40805f39e624a9c04246b679cf4b017bb782c8272877f49d2\"\n },\n {\n \"alg\": \"SHA3-256\",\n- \"content\": \"10a3572e42d29f609721d795116e3e5d0f6f03efef84bb979ce72e26908d242b\"\n+ \"content\": \"cef17d3a539cbf798cfb0bfa9faffa2b7baff3670b50743e91ee58b4c60b59f1\"\n },\n {\n \"alg\": \"SHA3-512\",\n- \"content\": \"a0761cb6deeb86c94b96850c72c0a0eaf516ca849f4b8268f9f60c9ed2a6730e692c15098d47e617da294e931113c6cbcaddec8957c9f029fa595b5f14ff35ac\"\n+ \"content\": \"fceeed5cb8fe4335d88282d15657762a4728483275a7ff45f50b9fe6a999757ccb37c415d001eb6250226f98f5c576b1b36a83e601fb393cfd34a811c2df5d00\"\n }\n ],\n \"licenses\": [\n {\n \"license\": {\n- \"name\": \"Bouncy Castle Licence\",\n- \"url\": \"https://www.bouncycastle.org/licence.html\"\n+ \"id\": \"Apache-2.0\"\n }\n }\n ],\n \"modified\": false,\n- \"name\": \"bcprov-jdk15on\",\n- \"purl\": \"pkg:maven/org.bouncycastle/bcprov-jdk15on@1.70?type=jar\",\n+ \"name\": \"jackson-core\",\n+ \"purl\": \"pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.2?type=jar\",\n \"type\": \"library\",\n- \"version\": \"1.70\"\n+ \"version\": \"2.14.2\"\n },\n {\n- \"bom-ref\": \"pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar\",\n- \"description\": \"Apache HttpComponents Core (blocking I/O)\",\n- \"group\": \"org.apache.httpcomponents\",\n+ \"bom-ref\": \"pkg:maven/org.apache.maven/maven-artifact@3.8.7?type=jar\",\n+ \"group\": \"org.apache.maven\",\n \"hashes\": [\n {\n \"alg\": \"MD5\",\n- \"content\": \"28d2cd9bf8789fd2ec774fb88436ebd1\"\n+ \"content\": \"4c2a8316eda726b35c9ae90b7c271dd4\"\n },\n {\n \"alg\": \"SHA-1\",\n- \"content\": \"51cf043c87253c9f58b539c9f7e44c8894223850\"\n+ \"content\": \"4b820734b856682f99f6ad2de4f1f7dd4b82335f\"\n },\n {\n \"alg\": \"SHA-256\",\n- \"content\": \"6c9b3dd142a09dc468e23ad39aad6f75a0f2b85125104469f026e52a474e464f\"\n+ \"content\": \"23eb1c5c26f3d1b4694647b071beabfd96083191b006394707753af2ced8db01\"\n },\n {\n \"alg\": \"SHA-512\",\n- \"content\": \"168026436a6bcf5e96c0c59606638abbdc30de4b405ae55afde70fdf2895e267a3d48bba6bdadc5a89f38e31da3d9a9dc91e1cab7ea76f5e04322cf1ec63b838\"\n+ \"content\": \"2b892be25a88774d7aaf22db235e660abcdd041c0d685bd0c4e0b404a15301d61b3e06cd8dbede8f6a6293951f65a2235ee6cbb8d4a00fd5a7e33ab1655b2429\"\n },\n {\n \"alg\": \"SHA-384\",\n- \"content\": \"ba9ceaee1a37ca3201d6a1315ecb0327b495489efd0baa155c219c475df8d3eb69fe77ab0026563db406497626da6562\"\n+ \"content\": \"1abb1c8a0bd8bc1cbf5857cb9a3d30ff3e92d6fd720dff1ec0a5cb368027a2fbea61a4c1d10db255d51b9e5d1dedd73f\"\n },\n {\n \"alg\": \"SHA3-384\",\n- \"content\": \"b9dc44dcc7cc86d5036f26d54c4003a2d72808ae7b07a0808bb53505c6d4281b5ad213eb1f3d0fef1113dec57cb0dfe1\"\n+ \"content\": \"5d183e617198c1e032352f476edbe4db0be3dc0c7efd36c3be281a4fb1cb813feed558e3d21f52d55479e791b72c63c7\"\n },\n {\n \"alg\": \"SHA3-256\",\n- \"content\": \"fd8ab51846476c6c18822151c9ec07b39a9633010b5d20ea937fc6910407bc64\"\n+ \"content\": \"6deb8cba7a9c6b4d6cd314d681a3dfc1f02624e1e56699f760bfb1c6539dd9e1\"\n },\n {\n \"alg\": \"SHA3-512\",\n- \"content\": \"b42fa528242981a9d70e4f68ab75a24292df5112c44c21b6f18cb9201ce747885ba1d4dc69bc3d14d0da46a6c2638f937c11bc45749abeb55dc89ddada90cdda\"\n+ \"content\": \"04220b96703beb3cac238e11e150303a420fe55004c9b05dc9e72ebb38e140eead6914211428175bdd1e0442ccdb2b66d9313869b6c54356c19531df7e4985fe\"\n }\n ],\n \"licenses\": [\n {\n \"license\": {\n \"id\": \"Apache-2.0\"\n }\n }\n ],\n \"modified\": false,\n- \"name\": \"httpcore\",\n- \"purl\": \"pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar\",\n+ \"name\": \"maven-artifact\",\n+ \"purl\": \"pkg:maven/org.apache.maven/maven-artifact@3.8.7?type=jar\",\n \"type\": \"library\",\n- \"version\": \"4.4.16\"\n+ \"version\": \"3.8.7\"\n }\n ],\n \"dependencies\": [\n {\n \"dependsOn\": [\n \"pkg:maven/org.jreleaser/jreleaser-disco-java-sdk@1.6.0?type=jar\",\n \"pkg:maven/org.twdata.maven/mojo-executor@2.4.0?type=jar\",\n@@ -2098,20 +2053,20 @@\n \"bom-ref\": \"pkg:maven/org.jreleaser/jdks-maven-plugin@1.6.0?type=jar\",\n \"group\": \"org.jreleaser\",\n \"name\": \"jdks-maven-plugin\",\n \"purl\": \"pkg:maven/org.jreleaser/jdks-maven-plugin@1.6.0?type=jar\",\n \"type\": \"application\",\n \"version\": \"1.6.0\"\n },\n- \"timestamp\": \"2023-04-29T10:06:19Z\",\n+ \"timestamp\": \"2025-07-11T06:29:32Z\",\n \"tools\": [\n {\n \"name\": \"cyclonedx-gradle-plugin\",\n \"vendor\": \"CycloneDX\",\n \"version\": \"1.7.4\"\n }\n ]\n },\n- \"serialNumber\": \"urn:uuid:e5d2da54-c742-43c4-9939-8423c4f92b24\",\n+ \"serialNumber\": \"urn:uuid:91946ec6-e2d0-4032-9a8d-30ceb385d144\",\n \"specVersion\": \"1.4\",\n \"version\": 1\n }\n"}]}