{"diffoscope-json-version": 1, "source1": "/input1", "source2": "/input2", "unified_diff": null, "details": [{"source1": "Pretty-printed", "source2": "Pretty-printed", "comments": ["Similarity: 0.8894024834814308%", "Differences: {\"'components'\": \"{0: {'group': 'commons-codec', 'name': 'commons-codec', 'version': '1.15', \"", "                 \"'description': 'The Apache Commons Codec package contains simple encoder and \"", "                 'decoders for various formats such as Base64 and Hexadecimal. In addition to '", "                 'these widely used encoders and decoders, the codec package also maintains a '", "                 \"collection of phonetic encoding utilities.', 'hashes': {0: {'content': \"", "                 \"'303baf002ce6d38219 [\u2026]"], "unified_diff": "@@ -1,169 +1,278 @@\n {\n     \"bomFormat\": \"CycloneDX\",\n     \"components\": [\n         {\n-            \"bom-ref\": \"pkg:maven/io.github.openfeign/feign-core@12.3?type=jar\",\n-            \"description\": \"Feign Core\",\n-            \"group\": \"io.github.openfeign\",\n+            \"bom-ref\": \"pkg:maven/commons-codec/commons-codec@1.15?type=jar\",\n+            \"description\": \"The Apache Commons Codec package contains simple encoder and decoders for various formats such as Base64 and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.\",\n+            \"externalReferences\": [\n+                {\n+                    \"type\": \"issue-tracker\",\n+                    \"url\": \"https://issues.apache.org/jira/browse/CODEC\"\n+                },\n+                {\n+                    \"type\": \"vcs\",\n+                    \"url\": \"https://github.com/apache/commons-codec\"\n+                }\n+            ],\n+            \"group\": \"commons-codec\",\n             \"hashes\": [\n                 {\n                     \"alg\": \"MD5\",\n-                    \"content\": \"9e6e1ff8b68d2b6c1fc5bdc7ff208030\"\n+                    \"content\": \"303baf002ce6d382198090aedd9d79a2\"\n                 },\n                 {\n                     \"alg\": \"SHA-1\",\n-                    \"content\": \"d280b09a17b63e69788fd3d8d215b7013ab48b16\"\n+                    \"content\": \"49d94806b6e3dc933dacbd8acb0fdbab8ebd1e5d\"\n                 },\n                 {\n                     \"alg\": \"SHA-256\",\n-                    \"content\": \"939fbed2c2392a9633bc1d26f0ef9e934b059d1a9a9d4d966cedaf9075c546ec\"\n+                    \"content\": \"b3e9f6d63a790109bf0d056611fbed1cf69055826defeb9894a71369d246ed63\"\n                 },\n                 {\n                     \"alg\": \"SHA-512\",\n-                    \"content\": \"8335901d8918747dc29d37a2ac630c6a78ea6ff04bfea77e6d8c74188e9e584142920996c45120caa86299486949a04e1ec1f1bef30229904360fcb5c5d4a1c4\"\n+                    \"content\": \"da30a716770795fce390e4dd340a8b728f220c6572383ffef55bd5839655d5611fcc06128b2144f6cdcb36f53072a12ec80b04afee787665e7ad0b6e888a6787\"\n                 },\n                 {\n                     \"alg\": \"SHA-384\",\n-                    \"content\": \"dc7a0d10bdf2c3aeafba83ca7e41d21c3288f3df0b76e339788fcf7606381970b6429108dbf2d1212075d1feba040842\"\n+                    \"content\": \"05d0506283716472175d44c2a4766523397bf8a007c18848f9c9a61718cc8aa437f9cb4b91771037ab29a960860b62a0\"\n                 },\n                 {\n                     \"alg\": \"SHA3-384\",\n-                    \"content\": \"2907938ea76735cde9b34676c6c8b04786f1595687f96734e7659768175cb7a525508f84c48d9b10b0b2f593158e1ed5\"\n+                    \"content\": \"12fad4ef78274b06f97b1243cea6f970088abde082d2de9377d915a34b44f7d7d67807c03e59c849b69f1544e2a9a1be\"\n                 },\n                 {\n                     \"alg\": \"SHA3-256\",\n-                    \"content\": \"474f6b0ab420bf63549ed123fff99b73fc881771c6a0c591e58dfb17adbe9899\"\n+                    \"content\": \"87be248f33f241121f54aad61a9a460a79eabefbf1b5b0dd22aeb95b581f727e\"\n                 },\n                 {\n                     \"alg\": \"SHA3-512\",\n-                    \"content\": \"553a6dc1c3cf7facdb3b4e15be1d6d90259f1d36ce137db3a6e53a967ef4939aaa98c974b059c8f32dd42316bb7eee3b51910cf0fb172d0df9b8ff39d8cc722d\"\n+                    \"content\": \"8c992c9c569ebaa0bf956a4c5b34fbf5e1ed1c212c2dd896fa216183ee0bcd341e96698af4b9cec7e8880762faa081a3d3a27f51349aa457cb8e373e4f57c788\"\n                 }\n             ],\n             \"licenses\": [\n                 {\n                     \"license\": {\n                         \"id\": \"Apache-2.0\"\n                     }\n                 }\n             ],\n             \"modified\": false,\n-            \"name\": \"feign-core\",\n-            \"purl\": \"pkg:maven/io.github.openfeign/feign-core@12.3?type=jar\",\n+            \"name\": \"commons-codec\",\n+            \"purl\": \"pkg:maven/commons-codec/commons-codec@1.15?type=jar\",\n             \"type\": \"library\",\n-            \"version\": \"12.3\"\n+            \"version\": \"1.15\"\n         },\n         {\n-            \"bom-ref\": \"pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar\",\n-            \"description\": \"The slf4j API\",\n+            \"bom-ref\": \"pkg:maven/com.github.luben/zstd-jni@1.5.4-1?type=jar\",\n+            \"description\": \"JNI bindings for Zstd native library that provides fast and high compression lossless algorithm for Java and all JVM languages.\",\n+            \"group\": \"com.github.luben\",\n+            \"hashes\": [\n+                {\n+                    \"alg\": \"MD5\",\n+                    \"content\": \"e787241d6ec56aac451be8b0d920c85b\"\n+                },\n+                {\n+                    \"alg\": \"SHA-1\",\n+                    \"content\": \"291ccaacc039e41932de877303edb6af98a91c24\"\n+                },\n+                {\n+                    \"alg\": \"SHA-256\",\n+                    \"content\": \"f0469d891127dc5ae6bd2df93a5aa38c4d79bcd5f360fbb88c2785b52a572349\"\n+                },\n+                {\n+                    \"alg\": \"SHA-512\",\n+                    \"content\": \"368916f0057d69fa4ba3768f6f617291ce4083b89913e46c2daa68cc94c48b92e0ca626241486f34a4d154502eb77b19e82c16c68b341ecfc82ccc0520f8d4a9\"\n+                },\n+                {\n+                    \"alg\": \"SHA-384\",\n+                    \"content\": \"7e72184873689fa286d93d88f69f8baa24f818fcd61105a14332fbb5ed254363c0969afa98befd797a3762577bc77993\"\n+                },\n+                {\n+                    \"alg\": \"SHA3-384\",\n+                    \"content\": \"1302636797b291dbbe19f39bdeb66160c1317b395a0a9360ba93aeaa262de7ad8de7257e6a997a9c659fdf53b3367ee6\"\n+                },\n+                {\n+                    \"alg\": \"SHA3-256\",\n+                    \"content\": \"54505ed16257a55330bb44c76719a687251d2623fa5e50a192b54c5067573255\"\n+                },\n+                {\n+                    \"alg\": \"SHA3-512\",\n+                    \"content\": \"6e01cc9654c2d68c36a284e23c388267ac7013d534cceed0b6ab44679a6bbb6d03d4cfc52c967c4e76dbd5b8963c268e40d9890c927866ea00824821b0ecb82d\"\n+                }\n+            ],\n+            \"licenses\": [\n+                {\n+                    \"license\": {\n+                        \"id\": \"BSD-2-Clause\"\n+                    }\n+                }\n+            ],\n+            \"modified\": false,\n+            \"name\": \"zstd-jni\",\n+            \"publisher\": \"com.github.luben\",\n+            \"purl\": \"pkg:maven/com.github.luben/zstd-jni@1.5.4-1?type=jar\",\n+            \"type\": \"library\",\n+            \"version\": \"1.5.4-1\"\n+        },\n+        {\n+            \"bom-ref\": \"pkg:maven/org.slf4j/jcl-over-slf4j@2.0.7?type=jar\",\n+            \"description\": \"JCL 1.2 implemented over SLF4J\",\n             \"group\": \"org.slf4j\",\n             \"hashes\": [\n                 {\n                     \"alg\": \"MD5\",\n-                    \"content\": \"403dffa46cdd2e3c82da19df4f394a4c\"\n+                    \"content\": \"4e8d6cd31f7e6277280c95157ac7845a\"\n                 },\n                 {\n                     \"alg\": \"SHA-1\",\n-                    \"content\": \"41eb7184ea9d556f23e18b5cb99cad1f8581fc00\"\n+                    \"content\": \"f127fe5ee53404a8b3697cdd032dd1dd6a29dd77\"\n                 },\n                 {\n                     \"alg\": \"SHA-256\",\n-                    \"content\": \"5d6298b93a1905c32cda6478808ac14c2d4a47e91535e53c41f7feeb85d946f4\"\n+                    \"content\": \"41806757e1d26dae5d6db2ca7d4a5176eed2d6e709cd86564d4a11dab0601742\"\n                 },\n                 {\n                     \"alg\": \"SHA-512\",\n-                    \"content\": \"216d2cac27d501972c888f94dfa747d700b80d60813884b6ab4b12c6a3b17ed0c21a1d27e1aa4332c97c828f20039e3913d2763d7e1a3cef36ae4389a276e7a8\"\n+                    \"content\": \"221b39b85145cf7c245acb7f2692a02b6c5816f8b1187a1a77942dd39de958c1b01ecd066682eb88244f87b2a47513d40b6c1e69ef49a43b2a07ba818f124e17\"\n                 },\n                 {\n                     \"alg\": \"SHA-384\",\n-                    \"content\": \"c25b39f418aa726ba8405dfd9b356131f89984e2ef5a55a724a2abf3b7c78443f671105835161d2414d602cf03da9f2d\"\n+                    \"content\": \"fa8d53b46cd3ddab0bd265d384a90c35efef6a02a7822aa6f79065cee68d78f6ad7c4d248dea7497af449845dc962730\"\n                 },\n                 {\n                     \"alg\": \"SHA3-384\",\n-                    \"content\": \"f33abfaac21badae6f85d3ebbc6c1204fd7fda3bb15173e763fa8cee95bce6a8270eec2c8f49343c66c8d2767bc317e1\"\n+                    \"content\": \"cf06cfeaba477f7738f089ba401fb841074681d1c7f465546cdf0e95751a8bf912493428876a7d9108eef83f637c6a1e\"\n                 },\n                 {\n                     \"alg\": \"SHA3-256\",\n-                    \"content\": \"6e00d4b264a2afc4ca4e98f716ecece66c32c626ca3f8c5d56b22092b6fe417b\"\n+                    \"content\": \"efbad2de8683215936c56b3f8fd3492f1cc27c2ee77595a99c794e18777dec42\"\n                 },\n                 {\n                     \"alg\": \"SHA3-512\",\n-                    \"content\": \"ad7b9142d370fc532a07cdd43881a129b012ff50e2bede3ac27d9bd31ec707bf2f45e82002fa59e962955cc38ab73cdd77713fca50cedc926c046f5617c1285b\"\n+                    \"content\": \"2707d5513e49f6e3ea6dec96510d360cfc125dab164ae5d99a1dcbd628751640f625a70ed749dad66024ae9fd7725f1c6c7f76de7f5a6efc9d8208a9e01922f7\"\n                 }\n             ],\n             \"licenses\": [\n                 {\n                     \"license\": {\n-                        \"id\": \"MIT\",\n-                        \"url\": \"https://opensource.org/licenses/MIT\"\n+                        \"id\": \"Apache-2.0\"\n                     }\n                 }\n             ],\n             \"modified\": false,\n-            \"name\": \"slf4j-api\",\n-            \"purl\": \"pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar\",\n+            \"name\": \"jcl-over-slf4j\",\n+            \"purl\": \"pkg:maven/org.slf4j/jcl-over-slf4j@2.0.7?type=jar\",\n             \"type\": \"library\",\n             \"version\": \"2.0.7\"\n         },\n         {\n-            \"bom-ref\": \"pkg:maven/org.tukaani/xz@1.9?type=jar\",\n-            \"description\": \"XZ data compression\",\n+            \"bom-ref\": \"pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.2?type=jar\",\n+            \"description\": \"Core annotations used for value types, used by Jackson data binding package.\",\n             \"externalReferences\": [\n                 {\n                     \"type\": \"vcs\",\n-                    \"url\": \"https://git.tukaani.org/?p=xz-java.git\"\n+                    \"url\": \"https://github.com/FasterXML/jackson-annotations\"\n                 }\n             ],\n-            \"group\": \"org.tukaani\",\n+            \"group\": \"com.fasterxml.jackson.core\",\n             \"hashes\": [\n                 {\n                     \"alg\": \"MD5\",\n-                    \"content\": \"57c2fbfeb55e307ccae52e5322082e02\"\n+                    \"content\": \"10d19982a8890f6eb37557af2f58e272\"\n                 },\n                 {\n                     \"alg\": \"SHA-1\",\n-                    \"content\": \"1ea4bec1a921180164852c65006d928617bd2caf\"\n+                    \"content\": \"a7aae9525864930723e3453ab799521fdfd9d873\"\n                 },\n                 {\n                     \"alg\": \"SHA-256\",\n-                    \"content\": \"211b306cfc44f8f96df3a0a3ddaf75ba8c5289eed77d60d72f889bb855f535e5\"\n+                    \"content\": \"2c6869d505cf60dc066734b7d50339f975bd3adc635e26a78abb71acb4473c0d\"\n                 },\n                 {\n                     \"alg\": \"SHA-512\",\n-                    \"content\": \"a4362db234d4e83683e90f5baf90c82107450cc4404acab96e3fab14b8a3d4588a19722171d32f27d18463682a6994cad9af0b1065c954e3a77ea7bdcf586bac\"\n+                    \"content\": \"a978384791bdc074df8039ffc95bb93f0f60d14d476861ee2a0ce208b33a991c486a07345cb80559252c3ff1dea14d3efb818c19bdc18435946dc8754d8e6ee3\"\n                 },\n                 {\n                     \"alg\": \"SHA-384\",\n-                    \"content\": \"aa30349b094723369908369a18e2cb5beb5b7ca0b24b4d56c2f5725fae152220f6526466672b22bfec939e2e0622a01d\"\n+                    \"content\": \"d5111c69020666689414921ae4a8950f9fbdf86dec1360f6827beeee9ebd3f78db74e69c76e0becaba47eb34fdaaeb5a\"\n                 },\n                 {\n                     \"alg\": \"SHA3-384\",\n-                    \"content\": \"b3e1fee7784188df5e1931c9e8137ac0e20e63f66f93e7f938a448fc0b3adb4be5205c7a5f1835007e233fee2696fc2c\"\n+                    \"content\": \"53b1a8891482e16a7d8849251cb0dcd1aacf6aaa2161a73589d9742ad96763e384d426d04db762e56fc4536f4e719084\"\n                 },\n                 {\n                     \"alg\": \"SHA3-256\",\n-                    \"content\": \"92eff603ed0aab557e1a45e17a74e80d8ec656b5f137197b23c429c903fa448f\"\n+                    \"content\": \"14f7b3c51c96f7429f7c60a69e3b7e4f9f2207820141f197d56b57018ffd5640\"\n                 },\n                 {\n                     \"alg\": \"SHA3-512\",\n-                    \"content\": \"b290f92958f8cd91705331d8411140c23957ab8b568fbe19a70f4f1dc97eddc13d3a200df28a02ab5911ce18f546c33f720878be0f727edac839a6e63ee66ece\"\n+                    \"content\": \"75e4e4fb847fdacdd497cf6b340362581ab4091120ccf2ec32a273709d336af0f78c90ce12b2dd1d17354aa08583af0d3ded89bb415720f45f2d9c110d71dd7a\"\n                 }\n             ],\n             \"licenses\": [\n                 {\n                     \"license\": {\n-                        \"name\": \"Public Domain\"\n+                        \"id\": \"Apache-2.0\"\n                     }\n                 }\n             ],\n             \"modified\": false,\n-            \"name\": \"xz\",\n-            \"purl\": \"pkg:maven/org.tukaani/xz@1.9?type=jar\",\n+            \"name\": \"jackson-annotations\",\n+            \"purl\": \"pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.2?type=jar\",\n             \"type\": \"library\",\n-            \"version\": \"1.9\"\n+            \"version\": \"2.14.2\"\n+        },\n+        {\n+            \"bom-ref\": \"pkg:maven/org.jreleaser/jreleaser-logger-api@1.6.0?type=jar\",\n+            \"description\": \"JReleaser logger API\",\n+            \"externalReferences\": [\n+                {\n+                    \"type\": \"vcs\",\n+                    \"url\": \"https://github.com/jreleaser/jreleaser\"\n+                }\n+            ],\n+            \"group\": \"org.jreleaser\",\n+            \"licenses\": [\n+                {\n+                    \"license\": {\n+                        \"id\": \"Apache-2.0\",\n+                        \"url\": \"https://www.apache.org/licenses/LICENSE-2.0\"\n+                    }\n+                }\n+            ],\n+            \"modified\": false,\n+            \"name\": \"jreleaser-logger-api\",\n+            \"purl\": \"pkg:maven/org.jreleaser/jreleaser-logger-api@1.6.0?type=jar\",\n+            \"type\": \"library\",\n+            \"version\": \"1.6.0\"\n+        },\n+        {\n+            \"bom-ref\": \"pkg:maven/org.jreleaser/jreleaser-utils@1.6.0?type=jar\",\n+            \"description\": \"JReleaser utility classes\",\n+            \"externalReferences\": [\n+                {\n+                    \"type\": \"vcs\",\n+                    \"url\": \"https://github.com/jreleaser/jreleaser\"\n+                }\n+            ],\n+            \"group\": \"org.jreleaser\",\n+            \"licenses\": [\n+                {\n+                    \"license\": {\n+                        \"id\": \"Apache-2.0\",\n+                        \"url\": \"https://www.apache.org/licenses/LICENSE-2.0\"\n+                    }\n+                }\n+            ],\n+            \"modified\": false,\n+            \"name\": \"jreleaser-utils\",\n+            \"purl\": \"pkg:maven/org.jreleaser/jreleaser-utils@1.6.0?type=jar\",\n+            \"type\": \"library\",\n+            \"version\": \"1.6.0\"\n         },\n         {\n             \"bom-ref\": \"pkg:maven/org.bouncycastle/bcpg-jdk15on@1.70?type=jar\",\n             \"description\": \"The Bouncy Castle Java API for handling the OpenPGP protocol. This jar contains the OpenPGP API for JDK 1.5 and up. The APIs can be used in conjunction with a JCE/JCA provider such as the one provided with the Bouncy Castle Cryptography APIs.\",\n             \"externalReferences\": [\n                 {\n                     \"type\": \"issue-tracker\",\n@@ -277,286 +386,251 @@\n             \"modified\": false,\n             \"name\": \"feign-jackson\",\n             \"purl\": \"pkg:maven/io.github.openfeign/feign-jackson@12.3?type=jar\",\n             \"type\": \"library\",\n             \"version\": \"12.3\"\n         },\n         {\n-            \"bom-ref\": \"pkg:maven/org.apache.commons/commons-compress@1.22?type=jar\",\n-            \"description\": \"Apache Commons Compress software defines an API for working with compression and archive formats. These include: bzip2, gzip, pack200, lzma, xz, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.\",\n-            \"externalReferences\": [\n-                {\n-                    \"type\": \"issue-tracker\",\n-                    \"url\": \"https://issues.apache.org/jira/browse/COMPRESS\"\n-                },\n-                {\n-                    \"type\": \"vcs\",\n-                    \"url\": \"https://gitbox.apache.org/repos/asf?p=commons-compress.git\"\n-                }\n-            ],\n-            \"group\": \"org.apache.commons\",\n+            \"bom-ref\": \"pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar\",\n+            \"description\": \"Apache HttpComponents Client\",\n+            \"group\": \"org.apache.httpcomponents\",\n             \"hashes\": [\n                 {\n                     \"alg\": \"MD5\",\n-                    \"content\": \"f1e4db16fee4291212d91409313a8086\"\n+                    \"content\": \"40d6b9075fbd28fa10292a45a0db9457\"\n                 },\n                 {\n                     \"alg\": \"SHA-1\",\n-                    \"content\": \"691a8b4e6cf4248c3bc72c8b719337d5cb7359fa\"\n+                    \"content\": \"e5f6cae5ca7ecaac1ec2827a9e2d65ae2869cada\"\n                 },\n                 {\n                     \"alg\": \"SHA-256\",\n-                    \"content\": \"53d04a0efc7223baecaa303bd5d298eb0600e6b82b4076f9cecd558b97ba760b\"\n+                    \"content\": \"6fe9026a566c6a5001608cf3fc32196641f6c1e5e1986d1037ccdbd5f31ef743\"\n                 },\n                 {\n                     \"alg\": \"SHA-512\",\n-                    \"content\": \"2d64fa6cd081fff5d73ee662a82f6186991fc13b4bdaee18b5f1bdcab06d9acb70e3713d18b296337791448251fbd6768bd84afaa817a10547652d0cfa885563\"\n+                    \"content\": \"3567739186e551f84cad3e4b6b270c5b8b19aba297675a96bcdff3663ff7d20d188611d21f675fe5ff1bfd7d8ca31362070910d7b92ab1b699872a120aa6f089\"\n                 },\n                 {\n                     \"alg\": \"SHA-384\",\n-                    \"content\": \"295d7f69d151abbd784e1c4d021c77ce43e129bb5bda0c55762b32d77c8607863383297674ec8a212ea3dfe4007b0044\"\n+                    \"content\": \"093ac3e2dde58e34aa70309c7305eb3c9b5be2509a9293f1672494da55479a86bd112e83326746dc7a32855472952b99\"\n                 },\n                 {\n                     \"alg\": \"SHA3-384\",\n-                    \"content\": \"af04eb1b4647b1a041c5ee994c2c7a32556b5410b916fedb69905f166938baa43ba54fdc67084205794c02680d3c6349\"\n+                    \"content\": \"cd6882e7868624164e460f2f3ea01466f863c0dcb902b031c656b57356f563be83b29530df41d88d634ed3d01fc9964d\"\n                 },\n                 {\n                     \"alg\": \"SHA3-256\",\n-                    \"content\": \"40f2960e82adfb171b0c5430271fdb0c0dae243aaf9b08021df54fd4d4a3a0b0\"\n+                    \"content\": \"710b1d8d7dae0b8e4270756694ca9c83d64965f42d3b4170c609b14d47c2762c\"\n                 },\n                 {\n                     \"alg\": \"SHA3-512\",\n-                    \"content\": \"f2c445f77bda3ef230a2b78ea88d86e48a7d6db36805f841d5cffe1f178842a161b2fda0b0d60162af210f18ed9c5bb9579c963291c26f715c1aa389d9a6785c\"\n+                    \"content\": \"276fa6a6599dc89382d658115695cf4da6b0d39b34e9c349c17a5dbd64122eaee553bb9ed75c0378ec4a83be157c8aa39370662de3c9b8fd55ebc1dd608383e6\"\n                 }\n             ],\n             \"licenses\": [\n                 {\n                     \"license\": {\n                         \"id\": \"Apache-2.0\"\n                     }\n                 }\n             ],\n             \"modified\": false,\n-            \"name\": \"commons-compress\",\n-            \"purl\": \"pkg:maven/org.apache.commons/commons-compress@1.22?type=jar\",\n+            \"name\": \"httpclient\",\n+            \"purl\": \"pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar\",\n             \"type\": \"library\",\n-            \"version\": \"1.22\"\n+            \"version\": \"4.5.13\"\n         },\n         {\n-            \"bom-ref\": \"pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.2?type=jar\",\n-            \"description\": \"Core annotations used for value types, used by Jackson data binding package.\",\n+            \"bom-ref\": \"pkg:maven/org.apache.commons/commons-compress@1.22?type=jar\",\n+            \"description\": \"Apache Commons Compress software defines an API for working with compression and archive formats. These include: bzip2, gzip, pack200, lzma, xz, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.\",\n             \"externalReferences\": [\n                 {\n+                    \"type\": \"issue-tracker\",\n+                    \"url\": \"https://issues.apache.org/jira/browse/COMPRESS\"\n+                },\n+                {\n                     \"type\": \"vcs\",\n-                    \"url\": \"https://github.com/FasterXML/jackson-annotations\"\n+                    \"url\": \"https://gitbox.apache.org/repos/asf?p=commons-compress.git\"\n                 }\n             ],\n-            \"group\": \"com.fasterxml.jackson.core\",\n+            \"group\": \"org.apache.commons\",\n             \"hashes\": [\n                 {\n                     \"alg\": \"MD5\",\n-                    \"content\": \"10d19982a8890f6eb37557af2f58e272\"\n+                    \"content\": \"f1e4db16fee4291212d91409313a8086\"\n                 },\n                 {\n                     \"alg\": \"SHA-1\",\n-                    \"content\": \"a7aae9525864930723e3453ab799521fdfd9d873\"\n+                    \"content\": \"691a8b4e6cf4248c3bc72c8b719337d5cb7359fa\"\n                 },\n                 {\n                     \"alg\": \"SHA-256\",\n-                    \"content\": \"2c6869d505cf60dc066734b7d50339f975bd3adc635e26a78abb71acb4473c0d\"\n+                    \"content\": \"53d04a0efc7223baecaa303bd5d298eb0600e6b82b4076f9cecd558b97ba760b\"\n                 },\n                 {\n                     \"alg\": \"SHA-512\",\n-                    \"content\": \"a978384791bdc074df8039ffc95bb93f0f60d14d476861ee2a0ce208b33a991c486a07345cb80559252c3ff1dea14d3efb818c19bdc18435946dc8754d8e6ee3\"\n+                    \"content\": \"2d64fa6cd081fff5d73ee662a82f6186991fc13b4bdaee18b5f1bdcab06d9acb70e3713d18b296337791448251fbd6768bd84afaa817a10547652d0cfa885563\"\n                 },\n                 {\n                     \"alg\": \"SHA-384\",\n-                    \"content\": \"d5111c69020666689414921ae4a8950f9fbdf86dec1360f6827beeee9ebd3f78db74e69c76e0becaba47eb34fdaaeb5a\"\n+                    \"content\": \"295d7f69d151abbd784e1c4d021c77ce43e129bb5bda0c55762b32d77c8607863383297674ec8a212ea3dfe4007b0044\"\n                 },\n                 {\n                     \"alg\": \"SHA3-384\",\n-                    \"content\": \"53b1a8891482e16a7d8849251cb0dcd1aacf6aaa2161a73589d9742ad96763e384d426d04db762e56fc4536f4e719084\"\n+                    \"content\": \"af04eb1b4647b1a041c5ee994c2c7a32556b5410b916fedb69905f166938baa43ba54fdc67084205794c02680d3c6349\"\n                 },\n                 {\n                     \"alg\": \"SHA3-256\",\n-                    \"content\": \"14f7b3c51c96f7429f7c60a69e3b7e4f9f2207820141f197d56b57018ffd5640\"\n+                    \"content\": \"40f2960e82adfb171b0c5430271fdb0c0dae243aaf9b08021df54fd4d4a3a0b0\"\n                 },\n                 {\n                     \"alg\": \"SHA3-512\",\n-                    \"content\": \"75e4e4fb847fdacdd497cf6b340362581ab4091120ccf2ec32a273709d336af0f78c90ce12b2dd1d17354aa08583af0d3ded89bb415720f45f2d9c110d71dd7a\"\n+                    \"content\": \"f2c445f77bda3ef230a2b78ea88d86e48a7d6db36805f841d5cffe1f178842a161b2fda0b0d60162af210f18ed9c5bb9579c963291c26f715c1aa389d9a6785c\"\n                 }\n             ],\n             \"licenses\": [\n                 {\n                     \"license\": {\n                         \"id\": \"Apache-2.0\"\n                     }\n                 }\n             ],\n             \"modified\": false,\n-            \"name\": \"jackson-annotations\",\n-            \"purl\": \"pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.2?type=jar\",\n+            \"name\": \"commons-compress\",\n+            \"purl\": \"pkg:maven/org.apache.commons/commons-compress@1.22?type=jar\",\n             \"type\": \"library\",\n-            \"version\": \"2.14.2\"\n+            \"version\": \"1.22\"\n         },\n         {\n-            \"bom-ref\": \"pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar\",\n-            \"description\": \"Apache HttpComponents Client\",\n-            \"group\": \"org.apache.httpcomponents\",\n+            \"bom-ref\": \"pkg:maven/io.github.openfeign/feign-core@12.3?type=jar\",\n+            \"description\": \"Feign Core\",\n+            \"group\": \"io.github.openfeign\",\n             \"hashes\": [\n                 {\n                     \"alg\": \"MD5\",\n-                    \"content\": \"40d6b9075fbd28fa10292a45a0db9457\"\n+                    \"content\": \"9e6e1ff8b68d2b6c1fc5bdc7ff208030\"\n                 },\n                 {\n                     \"alg\": \"SHA-1\",\n-                    \"content\": \"e5f6cae5ca7ecaac1ec2827a9e2d65ae2869cada\"\n+                    \"content\": \"d280b09a17b63e69788fd3d8d215b7013ab48b16\"\n                 },\n                 {\n                     \"alg\": \"SHA-256\",\n-                    \"content\": \"6fe9026a566c6a5001608cf3fc32196641f6c1e5e1986d1037ccdbd5f31ef743\"\n+                    \"content\": \"939fbed2c2392a9633bc1d26f0ef9e934b059d1a9a9d4d966cedaf9075c546ec\"\n                 },\n                 {\n                     \"alg\": \"SHA-512\",\n-                    \"content\": \"3567739186e551f84cad3e4b6b270c5b8b19aba297675a96bcdff3663ff7d20d188611d21f675fe5ff1bfd7d8ca31362070910d7b92ab1b699872a120aa6f089\"\n+                    \"content\": \"8335901d8918747dc29d37a2ac630c6a78ea6ff04bfea77e6d8c74188e9e584142920996c45120caa86299486949a04e1ec1f1bef30229904360fcb5c5d4a1c4\"\n                 },\n                 {\n                     \"alg\": \"SHA-384\",\n-                    \"content\": \"093ac3e2dde58e34aa70309c7305eb3c9b5be2509a9293f1672494da55479a86bd112e83326746dc7a32855472952b99\"\n+                    \"content\": \"dc7a0d10bdf2c3aeafba83ca7e41d21c3288f3df0b76e339788fcf7606381970b6429108dbf2d1212075d1feba040842\"\n                 },\n                 {\n                     \"alg\": \"SHA3-384\",\n-                    \"content\": \"cd6882e7868624164e460f2f3ea01466f863c0dcb902b031c656b57356f563be83b29530df41d88d634ed3d01fc9964d\"\n+                    \"content\": \"2907938ea76735cde9b34676c6c8b04786f1595687f96734e7659768175cb7a525508f84c48d9b10b0b2f593158e1ed5\"\n                 },\n                 {\n                     \"alg\": \"SHA3-256\",\n-                    \"content\": \"710b1d8d7dae0b8e4270756694ca9c83d64965f42d3b4170c609b14d47c2762c\"\n+                    \"content\": \"474f6b0ab420bf63549ed123fff99b73fc881771c6a0c591e58dfb17adbe9899\"\n                 },\n                 {\n                     \"alg\": \"SHA3-512\",\n-                    \"content\": \"276fa6a6599dc89382d658115695cf4da6b0d39b34e9c349c17a5dbd64122eaee553bb9ed75c0378ec4a83be157c8aa39370662de3c9b8fd55ebc1dd608383e6\"\n+                    \"content\": \"553a6dc1c3cf7facdb3b4e15be1d6d90259f1d36ce137db3a6e53a967ef4939aaa98c974b059c8f32dd42316bb7eee3b51910cf0fb172d0df9b8ff39d8cc722d\"\n                 }\n             ],\n             \"licenses\": [\n                 {\n                     \"license\": {\n                         \"id\": \"Apache-2.0\"\n                     }\n                 }\n             ],\n             \"modified\": false,\n-            \"name\": \"httpclient\",\n-            \"purl\": \"pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar\",\n+            \"name\": \"feign-core\",\n+            \"purl\": \"pkg:maven/io.github.openfeign/feign-core@12.3?type=jar\",\n             \"type\": \"library\",\n-            \"version\": \"4.5.13\"\n+            \"version\": \"12.3\"\n         },\n         {\n-            \"bom-ref\": \"pkg:maven/commons-codec/commons-codec@1.15?type=jar\",\n-            \"description\": \"The Apache Commons Codec package contains simple encoder and decoders for various formats such as Base64 and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.\",\n+            \"bom-ref\": \"pkg:maven/org.jreleaser/jreleaser-resource-bundle@1.6.0?type=jar\",\n+            \"description\": \"JReleaser resource bundle\",\n             \"externalReferences\": [\n                 {\n-                    \"type\": \"issue-tracker\",\n-                    \"url\": \"https://issues.apache.org/jira/browse/CODEC\"\n-                },\n-                {\n                     \"type\": \"vcs\",\n-                    \"url\": \"https://github.com/apache/commons-codec\"\n-                }\n-            ],\n-            \"group\": \"commons-codec\",\n-            \"hashes\": [\n-                {\n-                    \"alg\": \"MD5\",\n-                    \"content\": \"303baf002ce6d382198090aedd9d79a2\"\n-                },\n-                {\n-                    \"alg\": \"SHA-1\",\n-                    \"content\": \"49d94806b6e3dc933dacbd8acb0fdbab8ebd1e5d\"\n-                },\n-                {\n-                    \"alg\": \"SHA-256\",\n-                    \"content\": \"b3e9f6d63a790109bf0d056611fbed1cf69055826defeb9894a71369d246ed63\"\n-                },\n-                {\n-                    \"alg\": \"SHA-512\",\n-                    \"content\": \"da30a716770795fce390e4dd340a8b728f220c6572383ffef55bd5839655d5611fcc06128b2144f6cdcb36f53072a12ec80b04afee787665e7ad0b6e888a6787\"\n-                },\n-                {\n-                    \"alg\": \"SHA-384\",\n-                    \"content\": \"05d0506283716472175d44c2a4766523397bf8a007c18848f9c9a61718cc8aa437f9cb4b91771037ab29a960860b62a0\"\n-                },\n-                {\n-                    \"alg\": \"SHA3-384\",\n-                    \"content\": \"12fad4ef78274b06f97b1243cea6f970088abde082d2de9377d915a34b44f7d7d67807c03e59c849b69f1544e2a9a1be\"\n-                },\n-                {\n-                    \"alg\": \"SHA3-256\",\n-                    \"content\": \"87be248f33f241121f54aad61a9a460a79eabefbf1b5b0dd22aeb95b581f727e\"\n-                },\n-                {\n-                    \"alg\": \"SHA3-512\",\n-                    \"content\": \"8c992c9c569ebaa0bf956a4c5b34fbf5e1ed1c212c2dd896fa216183ee0bcd341e96698af4b9cec7e8880762faa081a3d3a27f51349aa457cb8e373e4f57c788\"\n+                    \"url\": \"https://github.com/jreleaser/jreleaser\"\n                 }\n             ],\n+            \"group\": \"org.jreleaser\",\n             \"licenses\": [\n                 {\n                     \"license\": {\n-                        \"id\": \"Apache-2.0\"\n+                        \"id\": \"Apache-2.0\",\n+                        \"url\": \"https://www.apache.org/licenses/LICENSE-2.0\"\n                     }\n                 }\n             ],\n             \"modified\": false,\n-            \"name\": \"commons-codec\",\n-            \"purl\": \"pkg:maven/commons-codec/commons-codec@1.15?type=jar\",\n+            \"name\": \"jreleaser-resource-bundle\",\n+            \"purl\": \"pkg:maven/org.jreleaser/jreleaser-resource-bundle@1.6.0?type=jar\",\n             \"type\": \"library\",\n-            \"version\": \"1.15\"\n+            \"version\": \"1.6.0\"\n         },\n         {\n-            \"bom-ref\": \"pkg:maven/org.jreleaser/jreleaser-logger-api@1.6.0?type=jar\",\n-            \"group\": \"org.jreleaser\",\n+            \"bom-ref\": \"pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar\",\n+            \"description\": \"The slf4j API\",\n+            \"group\": \"org.slf4j\",\n             \"hashes\": [\n                 {\n                     \"alg\": \"MD5\",\n-                    \"content\": \"e7da806a3427ab10405584067d880ead\"\n+                    \"content\": \"403dffa46cdd2e3c82da19df4f394a4c\"\n                 },\n                 {\n                     \"alg\": \"SHA-1\",\n-                    \"content\": \"92ae4e1826cf1d8321fcefd3f4ece0fa5cc4fc94\"\n+                    \"content\": \"41eb7184ea9d556f23e18b5cb99cad1f8581fc00\"\n                 },\n                 {\n                     \"alg\": \"SHA-256\",\n-                    \"content\": \"372d4b6cee7af83429f9f054a69f73d38d6fb4c983b14ce97f2599791d59aee9\"\n+                    \"content\": \"5d6298b93a1905c32cda6478808ac14c2d4a47e91535e53c41f7feeb85d946f4\"\n                 },\n                 {\n                     \"alg\": \"SHA-512\",\n-                    \"content\": \"c4f4edf49e18f475b7b44677497250cd93af45e302fb39306a94dc8f0ee1f783921967de3e1f1b7591f970a359080f43b24c1499a363280d904c2519d2e9bcb2\"\n+                    \"content\": \"216d2cac27d501972c888f94dfa747d700b80d60813884b6ab4b12c6a3b17ed0c21a1d27e1aa4332c97c828f20039e3913d2763d7e1a3cef36ae4389a276e7a8\"\n                 },\n                 {\n                     \"alg\": \"SHA-384\",\n-                    \"content\": \"fcdadd6f2e8af30a7761e98f5c717ab1b8f6f0a79825a711454c8c9cc9842cf8fe0f5917b5ea48603eb0ee5788ed7a8b\"\n+                    \"content\": \"c25b39f418aa726ba8405dfd9b356131f89984e2ef5a55a724a2abf3b7c78443f671105835161d2414d602cf03da9f2d\"\n                 },\n                 {\n                     \"alg\": \"SHA3-384\",\n-                    \"content\": \"42a3e276d69efc85ce5798c5cd78ba1a910ef328169fb39a1a685eea5b98e9c3bf495124f56b518d553f1ca2e63d62f7\"\n+                    \"content\": \"f33abfaac21badae6f85d3ebbc6c1204fd7fda3bb15173e763fa8cee95bce6a8270eec2c8f49343c66c8d2767bc317e1\"\n                 },\n                 {\n                     \"alg\": \"SHA3-256\",\n-                    \"content\": \"0fb4d06e278df39d6633d1a09ed01ad4f7788838668f2ebc097f919384cec97d\"\n+                    \"content\": \"6e00d4b264a2afc4ca4e98f716ecece66c32c626ca3f8c5d56b22092b6fe417b\"\n                 },\n                 {\n                     \"alg\": \"SHA3-512\",\n-                    \"content\": \"bb5a8b000955af1038d4d75c0fd8786561b3a2cf7bb804e09e42518a0bcc3e23ab01dd5236de4bdb58fd9b1a0e923982eb6cc6d0e450896bed9c86dfe808675d\"\n+                    \"content\": \"ad7b9142d370fc532a07cdd43881a129b012ff50e2bede3ac27d9bd31ec707bf2f45e82002fa59e962955cc38ab73cdd77713fca50cedc926c046f5617c1285b\"\n+                }\n+            ],\n+            \"licenses\": [\n+                {\n+                    \"license\": {\n+                        \"id\": \"MIT\",\n+                        \"url\": \"https://opensource.org/licenses/MIT\"\n+                    }\n                 }\n             ],\n-            \"licenses\": [],\n             \"modified\": false,\n-            \"name\": \"jreleaser-logger-api\",\n-            \"purl\": \"pkg:maven/org.jreleaser/jreleaser-logger-api@1.6.0?type=jar\",\n+            \"name\": \"slf4j-api\",\n+            \"purl\": \"pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar\",\n             \"type\": \"library\",\n-            \"version\": \"1.6.0\"\n+            \"version\": \"2.0.7\"\n         },\n         {\n             \"bom-ref\": \"pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.2?type=jar\",\n             \"description\": \"General data-binding functionality for Jackson: works on core streaming API\",\n             \"externalReferences\": [\n                 {\n                     \"type\": \"vcs\",\n@@ -608,203 +682,120 @@\n             \"modified\": false,\n             \"name\": \"jackson-databind\",\n             \"purl\": \"pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.2?type=jar\",\n             \"type\": \"library\",\n             \"version\": \"2.14.2\"\n         },\n         {\n-            \"bom-ref\": \"pkg:maven/com.github.luben/zstd-jni@1.5.4-1?type=jar\",\n-            \"description\": \"JNI bindings for Zstd native library that provides fast and high compression lossless algorithm for Java and all JVM languages.\",\n-            \"group\": \"com.github.luben\",\n+            \"bom-ref\": \"pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar\",\n+            \"description\": \"Apache HttpComponents Core (blocking I/O)\",\n+            \"group\": \"org.apache.httpcomponents\",\n             \"hashes\": [\n                 {\n                     \"alg\": \"MD5\",\n-                    \"content\": \"e787241d6ec56aac451be8b0d920c85b\"\n+                    \"content\": \"28d2cd9bf8789fd2ec774fb88436ebd1\"\n                 },\n                 {\n                     \"alg\": \"SHA-1\",\n-                    \"content\": \"291ccaacc039e41932de877303edb6af98a91c24\"\n+                    \"content\": \"51cf043c87253c9f58b539c9f7e44c8894223850\"\n                 },\n                 {\n                     \"alg\": \"SHA-256\",\n-                    \"content\": \"f0469d891127dc5ae6bd2df93a5aa38c4d79bcd5f360fbb88c2785b52a572349\"\n+                    \"content\": \"6c9b3dd142a09dc468e23ad39aad6f75a0f2b85125104469f026e52a474e464f\"\n                 },\n                 {\n                     \"alg\": \"SHA-512\",\n-                    \"content\": \"368916f0057d69fa4ba3768f6f617291ce4083b89913e46c2daa68cc94c48b92e0ca626241486f34a4d154502eb77b19e82c16c68b341ecfc82ccc0520f8d4a9\"\n+                    \"content\": \"168026436a6bcf5e96c0c59606638abbdc30de4b405ae55afde70fdf2895e267a3d48bba6bdadc5a89f38e31da3d9a9dc91e1cab7ea76f5e04322cf1ec63b838\"\n                 },\n                 {\n                     \"alg\": \"SHA-384\",\n-                    \"content\": \"7e72184873689fa286d93d88f69f8baa24f818fcd61105a14332fbb5ed254363c0969afa98befd797a3762577bc77993\"\n+                    \"content\": \"ba9ceaee1a37ca3201d6a1315ecb0327b495489efd0baa155c219c475df8d3eb69fe77ab0026563db406497626da6562\"\n                 },\n                 {\n                     \"alg\": \"SHA3-384\",\n-                    \"content\": \"1302636797b291dbbe19f39bdeb66160c1317b395a0a9360ba93aeaa262de7ad8de7257e6a997a9c659fdf53b3367ee6\"\n+                    \"content\": \"b9dc44dcc7cc86d5036f26d54c4003a2d72808ae7b07a0808bb53505c6d4281b5ad213eb1f3d0fef1113dec57cb0dfe1\"\n                 },\n                 {\n                     \"alg\": \"SHA3-256\",\n-                    \"content\": \"54505ed16257a55330bb44c76719a687251d2623fa5e50a192b54c5067573255\"\n+                    \"content\": \"fd8ab51846476c6c18822151c9ec07b39a9633010b5d20ea937fc6910407bc64\"\n                 },\n                 {\n                     \"alg\": \"SHA3-512\",\n-                    \"content\": \"6e01cc9654c2d68c36a284e23c388267ac7013d534cceed0b6ab44679a6bbb6d03d4cfc52c967c4e76dbd5b8963c268e40d9890c927866ea00824821b0ecb82d\"\n+                    \"content\": \"b42fa528242981a9d70e4f68ab75a24292df5112c44c21b6f18cb9201ce747885ba1d4dc69bc3d14d0da46a6c2638f937c11bc45749abeb55dc89ddada90cdda\"\n                 }\n             ],\n             \"licenses\": [\n                 {\n                     \"license\": {\n-                        \"id\": \"BSD-2-Clause\"\n+                        \"id\": \"Apache-2.0\"\n                     }\n                 }\n             ],\n             \"modified\": false,\n-            \"name\": \"zstd-jni\",\n-            \"publisher\": \"com.github.luben\",\n-            \"purl\": \"pkg:maven/com.github.luben/zstd-jni@1.5.4-1?type=jar\",\n+            \"name\": \"httpcore\",\n+            \"purl\": \"pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar\",\n             \"type\": \"library\",\n-            \"version\": \"1.5.4-1\"\n+            \"version\": \"4.4.16\"\n         },\n         {\n-            \"bom-ref\": \"pkg:maven/org.slf4j/jcl-over-slf4j@2.0.7?type=jar\",\n-            \"description\": \"JCL 1.2 implemented over SLF4J\",\n-            \"group\": \"org.slf4j\",\n-            \"hashes\": [\n-                {\n-                    \"alg\": \"MD5\",\n-                    \"content\": \"4e8d6cd31f7e6277280c95157ac7845a\"\n-                },\n-                {\n-                    \"alg\": \"SHA-1\",\n-                    \"content\": \"f127fe5ee53404a8b3697cdd032dd1dd6a29dd77\"\n-                },\n-                {\n-                    \"alg\": \"SHA-256\",\n-                    \"content\": \"41806757e1d26dae5d6db2ca7d4a5176eed2d6e709cd86564d4a11dab0601742\"\n-                },\n-                {\n-                    \"alg\": \"SHA-512\",\n-                    \"content\": \"221b39b85145cf7c245acb7f2692a02b6c5816f8b1187a1a77942dd39de958c1b01ecd066682eb88244f87b2a47513d40b6c1e69ef49a43b2a07ba818f124e17\"\n-                },\n-                {\n-                    \"alg\": \"SHA-384\",\n-                    \"content\": \"fa8d53b46cd3ddab0bd265d384a90c35efef6a02a7822aa6f79065cee68d78f6ad7c4d248dea7497af449845dc962730\"\n-                },\n-                {\n-                    \"alg\": \"SHA3-384\",\n-                    \"content\": \"cf06cfeaba477f7738f089ba401fb841074681d1c7f465546cdf0e95751a8bf912493428876a7d9108eef83f637c6a1e\"\n-                },\n-                {\n-                    \"alg\": \"SHA3-256\",\n-                    \"content\": \"efbad2de8683215936c56b3f8fd3492f1cc27c2ee77595a99c794e18777dec42\"\n-                },\n-                {\n-                    \"alg\": \"SHA3-512\",\n-                    \"content\": \"2707d5513e49f6e3ea6dec96510d360cfc125dab164ae5d99a1dcbd628751640f625a70ed749dad66024ae9fd7725f1c6c7f76de7f5a6efc9d8208a9e01922f7\"\n-                }\n-            ],\n-            \"licenses\": [\n+            \"bom-ref\": \"pkg:maven/org.tukaani/xz@1.9?type=jar\",\n+            \"description\": \"XZ data compression\",\n+            \"externalReferences\": [\n                 {\n-                    \"license\": {\n-                        \"id\": \"Apache-2.0\"\n-                    }\n+                    \"type\": \"vcs\",\n+                    \"url\": \"https://git.tukaani.org/?p=xz-java.git\"\n                 }\n             ],\n-            \"modified\": false,\n-            \"name\": \"jcl-over-slf4j\",\n-            \"purl\": \"pkg:maven/org.slf4j/jcl-over-slf4j@2.0.7?type=jar\",\n-            \"type\": \"library\",\n-            \"version\": \"2.0.7\"\n-        },\n-        {\n-            \"bom-ref\": \"pkg:maven/org.jreleaser/jreleaser-resource-bundle@1.6.0?type=jar\",\n-            \"group\": \"org.jreleaser\",\n+            \"group\": \"org.tukaani\",\n             \"hashes\": [\n                 {\n                     \"alg\": \"MD5\",\n-                    \"content\": \"8419930ec5e42489dad5e26749a994eb\"\n+                    \"content\": \"57c2fbfeb55e307ccae52e5322082e02\"\n                 },\n                 {\n                     \"alg\": \"SHA-1\",\n-                    \"content\": \"050aba092fa794e0cb91158de894a97aff581356\"\n+                    \"content\": \"1ea4bec1a921180164852c65006d928617bd2caf\"\n                 },\n                 {\n                     \"alg\": \"SHA-256\",\n-                    \"content\": \"38434b31fac439399aa37018fa69302a9d1b04be6efb7b23d53d18615e1f4f2b\"\n+                    \"content\": \"211b306cfc44f8f96df3a0a3ddaf75ba8c5289eed77d60d72f889bb855f535e5\"\n                 },\n                 {\n                     \"alg\": \"SHA-512\",\n-                    \"content\": \"c77c476e972e17b25de3aecf75d71482535d68cdc5e4bf556f5d4cab17345b9318d47fa42c9da671769f9bcf7f549efde70b64eff5cb189c805bb406fd705cb8\"\n+                    \"content\": \"a4362db234d4e83683e90f5baf90c82107450cc4404acab96e3fab14b8a3d4588a19722171d32f27d18463682a6994cad9af0b1065c954e3a77ea7bdcf586bac\"\n                 },\n                 {\n                     \"alg\": \"SHA-384\",\n-                    \"content\": \"b1d8f56681f39c638806e669447d9600507946448b528060d98afc2123c637980ba5609aba4b357c83acd772bfbdb73e\"\n+                    \"content\": \"aa30349b094723369908369a18e2cb5beb5b7ca0b24b4d56c2f5725fae152220f6526466672b22bfec939e2e0622a01d\"\n                 },\n                 {\n                     \"alg\": \"SHA3-384\",\n-                    \"content\": \"74a52a9891c520a0f90ffbab33da0219cd787bbe309ae8eca303de00c6041692554e8d650a6a3925e057322bd00700ff\"\n+                    \"content\": \"b3e1fee7784188df5e1931c9e8137ac0e20e63f66f93e7f938a448fc0b3adb4be5205c7a5f1835007e233fee2696fc2c\"\n                 },\n                 {\n                     \"alg\": \"SHA3-256\",\n-                    \"content\": \"304bae90a7c53e6ad711e54bb8847c3eedc0e18cac03bffa14729918cb59efce\"\n+                    \"content\": \"92eff603ed0aab557e1a45e17a74e80d8ec656b5f137197b23c429c903fa448f\"\n                 },\n                 {\n                     \"alg\": \"SHA3-512\",\n-                    \"content\": \"16a31cb40ed20dcaa5d34cb6aa2b81325f285b7feb5dda2486206496449fd548ef51117b38a8074a4a106fba9836de72232762dff60f535cd76f5848860c2f6c\"\n+                    \"content\": \"b290f92958f8cd91705331d8411140c23957ab8b568fbe19a70f4f1dc97eddc13d3a200df28a02ab5911ce18f546c33f720878be0f727edac839a6e63ee66ece\"\n                 }\n             ],\n-            \"licenses\": [],\n-            \"modified\": false,\n-            \"name\": \"jreleaser-resource-bundle\",\n-            \"purl\": \"pkg:maven/org.jreleaser/jreleaser-resource-bundle@1.6.0?type=jar\",\n-            \"type\": \"library\",\n-            \"version\": \"1.6.0\"\n-        },\n-        {\n-            \"bom-ref\": \"pkg:maven/org.jreleaser/jreleaser-utils@1.6.0?type=jar\",\n-            \"group\": \"org.jreleaser\",\n-            \"hashes\": [\n-                {\n-                    \"alg\": \"MD5\",\n-                    \"content\": \"ca784b5aa352b016a37b393e9e500325\"\n-                },\n-                {\n-                    \"alg\": \"SHA-1\",\n-                    \"content\": \"b0dde5ebbe5a98e5fa90b101dca5ad56e92c49c8\"\n-                },\n-                {\n-                    \"alg\": \"SHA-256\",\n-                    \"content\": \"02b038af2f098d6019b94f4f4e55b8f901d2b5b4a072b083b23e47bd6a3e23cd\"\n-                },\n-                {\n-                    \"alg\": \"SHA-512\",\n-                    \"content\": \"9b5e03766473ee854f877182a758a4842a9566772405af73cd200388eeeb981712e6a3e57f4f2f14f09a912b0cad625a75c5441b57eaa238699beabf327dd56a\"\n-                },\n-                {\n-                    \"alg\": \"SHA-384\",\n-                    \"content\": \"ebc800a8a0a6d19ac2bc922598f8913df5a5eb972dc46ba4eadec5034538c9c95866839670dbf92ca93b075dcb659a0c\"\n-                },\n-                {\n-                    \"alg\": \"SHA3-384\",\n-                    \"content\": \"ed0ba35caf8b7d7dc67d7350617b6cbd54de336634fd5927f03768a89f74ede798ecf343964ef0484302ee262617756b\"\n-                },\n-                {\n-                    \"alg\": \"SHA3-256\",\n-                    \"content\": \"b81154ce5c428820626ee1a99e7f9bbe63d4803f7f311744a26bb8331fb193cc\"\n-                },\n+            \"licenses\": [\n                 {\n-                    \"alg\": \"SHA3-512\",\n-                    \"content\": \"b6429f8944cedd026f7b0c30328f8b5e2717493624cee82df48f7e69c8fe8a26b0542d447b1795c7fad7ff90affadcc087d69a576d69cbaccf3ccf1ca962be56\"\n+                    \"license\": {\n+                        \"name\": \"Public Domain\"\n+                    }\n                 }\n             ],\n-            \"licenses\": [],\n             \"modified\": false,\n-            \"name\": \"jreleaser-utils\",\n-            \"purl\": \"pkg:maven/org.jreleaser/jreleaser-utils@1.6.0?type=jar\",\n+            \"name\": \"xz\",\n+            \"purl\": \"pkg:maven/org.tukaani/xz@1.9?type=jar\",\n             \"type\": \"library\",\n-            \"version\": \"1.6.0\"\n+            \"version\": \"1.9\"\n         },\n         {\n             \"bom-ref\": \"pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.2?type=jar\",\n             \"description\": \"Core Jackson processing abstractions (aka Streaming API), implementation for JSON\",\n             \"externalReferences\": [\n                 {\n                     \"type\": \"vcs\",\n@@ -916,65 +907,14 @@\n                 }\n             ],\n             \"modified\": false,\n             \"name\": \"bcprov-jdk15on\",\n             \"purl\": \"pkg:maven/org.bouncycastle/bcprov-jdk15on@1.70?type=jar\",\n             \"type\": \"library\",\n             \"version\": \"1.70\"\n-        },\n-        {\n-            \"bom-ref\": \"pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar\",\n-            \"description\": \"Apache HttpComponents Core (blocking I/O)\",\n-            \"group\": \"org.apache.httpcomponents\",\n-            \"hashes\": [\n-                {\n-                    \"alg\": \"MD5\",\n-                    \"content\": \"28d2cd9bf8789fd2ec774fb88436ebd1\"\n-                },\n-                {\n-                    \"alg\": \"SHA-1\",\n-                    \"content\": \"51cf043c87253c9f58b539c9f7e44c8894223850\"\n-                },\n-                {\n-                    \"alg\": \"SHA-256\",\n-                    \"content\": \"6c9b3dd142a09dc468e23ad39aad6f75a0f2b85125104469f026e52a474e464f\"\n-                },\n-                {\n-                    \"alg\": \"SHA-512\",\n-                    \"content\": \"168026436a6bcf5e96c0c59606638abbdc30de4b405ae55afde70fdf2895e267a3d48bba6bdadc5a89f38e31da3d9a9dc91e1cab7ea76f5e04322cf1ec63b838\"\n-                },\n-                {\n-                    \"alg\": \"SHA-384\",\n-                    \"content\": \"ba9ceaee1a37ca3201d6a1315ecb0327b495489efd0baa155c219c475df8d3eb69fe77ab0026563db406497626da6562\"\n-                },\n-                {\n-                    \"alg\": \"SHA3-384\",\n-                    \"content\": \"b9dc44dcc7cc86d5036f26d54c4003a2d72808ae7b07a0808bb53505c6d4281b5ad213eb1f3d0fef1113dec57cb0dfe1\"\n-                },\n-                {\n-                    \"alg\": \"SHA3-256\",\n-                    \"content\": \"fd8ab51846476c6c18822151c9ec07b39a9633010b5d20ea937fc6910407bc64\"\n-                },\n-                {\n-                    \"alg\": \"SHA3-512\",\n-                    \"content\": \"b42fa528242981a9d70e4f68ab75a24292df5112c44c21b6f18cb9201ce747885ba1d4dc69bc3d14d0da46a6c2638f937c11bc45749abeb55dc89ddada90cdda\"\n-                }\n-            ],\n-            \"licenses\": [\n-                {\n-                    \"license\": {\n-                        \"id\": \"Apache-2.0\"\n-                    }\n-                }\n-            ],\n-            \"modified\": false,\n-            \"name\": \"httpcore\",\n-            \"purl\": \"pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar\",\n-            \"type\": \"library\",\n-            \"version\": \"4.4.16\"\n         }\n     ],\n     \"dependencies\": [\n         {\n             \"dependsOn\": [\n                 \"pkg:maven/commons-codec/commons-codec@1.15?type=jar\",\n                 \"pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.2?type=jar\",\n@@ -1091,20 +1031,20 @@\n             \"bom-ref\": \"pkg:maven/org.jreleaser/jreleaser-disco-java-sdk@1.6.0?type=jar\",\n             \"group\": \"org.jreleaser\",\n             \"name\": \"jreleaser-disco-java-sdk\",\n             \"purl\": \"pkg:maven/org.jreleaser/jreleaser-disco-java-sdk@1.6.0?type=jar\",\n             \"type\": \"library\",\n             \"version\": \"1.6.0\"\n         },\n-        \"timestamp\": \"2023-04-29T10:07:09Z\",\n+        \"timestamp\": \"2025-07-11T06:29:33Z\",\n         \"tools\": [\n             {\n                 \"name\": \"cyclonedx-gradle-plugin\",\n                 \"vendor\": \"CycloneDX\",\n                 \"version\": \"1.7.4\"\n             }\n         ]\n     },\n-    \"serialNumber\": \"urn:uuid:f1beee9d-e505-4332-878f-630fe94eb997\",\n+    \"serialNumber\": \"urn:uuid:73f6349d-ec9c-4bce-b4ce-0882d2758377\",\n     \"specVersion\": \"1.4\",\n     \"version\": 1\n }\n"}]}