{"diffoscope-json-version": 1, "source1": "/input1", "source2": "/input2", "unified_diff": null, "details": [{"source1": "/input1", "source2": "/input2", "unified_diff": "@@ -1,11 +1,11 @@\n <?xml version=\"1.0\" encoding=\"utf-8\"?>\n-<bom xmlns=\"http://cyclonedx.org/schema/bom/1.4\" serialNumber=\"urn:uuid:5297aff9-aac6-490b-8525-36c98cdfccf4\" version=\"1\">\n+<bom xmlns=\"http://cyclonedx.org/schema/bom/1.4\" serialNumber=\"urn:uuid:404d2c44-6247-4fc6-bcae-b5aad50321a3\" version=\"1\">\n   <metadata>\n-    <timestamp>2023-04-29T10:07:57Z</timestamp>\n+    <timestamp>2025-07-11T06:29:41Z</timestamp>\n     <tools>\n       <tool>\n         <vendor>CycloneDX</vendor>\n         <name>cyclonedx-gradle-plugin</name>\n         <version>1.7.4</version>\n       </tool>\n     </tools>\n@@ -13,14 +13,37 @@\n       <group>org.jreleaser</group>\n       <name>jreleaser-logger-api</name>\n       <version>1.6.0</version>\n       <purl>pkg:maven/org.jreleaser/jreleaser-logger-api@1.6.0?type=jar</purl>\n     </component>\n   </metadata>\n   <components>\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.slf4j/jcl-over-slf4j@2.0.7?type=jar\">\n+      <group>org.slf4j</group>\n+      <name>jcl-over-slf4j</name>\n+      <version>2.0.7</version>\n+      <description>JCL 1.2 implemented over SLF4J</description>\n+      <hashes>\n+        <hash alg=\"MD5\">4e8d6cd31f7e6277280c95157ac7845a</hash>\n+        <hash alg=\"SHA-1\">f127fe5ee53404a8b3697cdd032dd1dd6a29dd77</hash>\n+        <hash alg=\"SHA-256\">41806757e1d26dae5d6db2ca7d4a5176eed2d6e709cd86564d4a11dab0601742</hash>\n+        <hash alg=\"SHA-512\">221b39b85145cf7c245acb7f2692a02b6c5816f8b1187a1a77942dd39de958c1b01ecd066682eb88244f87b2a47513d40b6c1e69ef49a43b2a07ba818f124e17</hash>\n+        <hash alg=\"SHA-384\">fa8d53b46cd3ddab0bd265d384a90c35efef6a02a7822aa6f79065cee68d78f6ad7c4d248dea7497af449845dc962730</hash>\n+        <hash alg=\"SHA3-384\">cf06cfeaba477f7738f089ba401fb841074681d1c7f465546cdf0e95751a8bf912493428876a7d9108eef83f637c6a1e</hash>\n+        <hash alg=\"SHA3-256\">efbad2de8683215936c56b3f8fd3492f1cc27c2ee77595a99c794e18777dec42</hash>\n+        <hash alg=\"SHA3-512\">2707d5513e49f6e3ea6dec96510d360cfc125dab164ae5d99a1dcbd628751640f625a70ed749dad66024ae9fd7725f1c6c7f76de7f5a6efc9d8208a9e01922f7</hash>\n+      </hashes>\n+      <licenses>\n+        <license>\n+          <id>Apache-2.0</id>\n+        </license>\n+      </licenses>\n+      <purl>pkg:maven/org.slf4j/jcl-over-slf4j@2.0.7?type=jar</purl>\n+      <modified>false</modified>\n+    </component>\n     <component type=\"library\" bom-ref=\"pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar\">\n       <group>org.slf4j</group>\n       <name>slf4j-api</name>\n       <version>2.0.7</version>\n       <description>The slf4j API</description>\n       <hashes>\n         <hash alg=\"MD5\">403dffa46cdd2e3c82da19df4f394a4c</hash>\n@@ -37,37 +60,14 @@\n           <id>MIT</id>\n           <url>https://opensource.org/licenses/MIT</url>\n         </license>\n       </licenses>\n       <purl>pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar</purl>\n       <modified>false</modified>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.slf4j/jcl-over-slf4j@2.0.7?type=jar\">\n-      <group>org.slf4j</group>\n-      <name>jcl-over-slf4j</name>\n-      <version>2.0.7</version>\n-      <description>JCL 1.2 implemented over SLF4J</description>\n-      <hashes>\n-        <hash alg=\"MD5\">4e8d6cd31f7e6277280c95157ac7845a</hash>\n-        <hash alg=\"SHA-1\">f127fe5ee53404a8b3697cdd032dd1dd6a29dd77</hash>\n-        <hash alg=\"SHA-256\">41806757e1d26dae5d6db2ca7d4a5176eed2d6e709cd86564d4a11dab0601742</hash>\n-        <hash alg=\"SHA-512\">221b39b85145cf7c245acb7f2692a02b6c5816f8b1187a1a77942dd39de958c1b01ecd066682eb88244f87b2a47513d40b6c1e69ef49a43b2a07ba818f124e17</hash>\n-        <hash alg=\"SHA-384\">fa8d53b46cd3ddab0bd265d384a90c35efef6a02a7822aa6f79065cee68d78f6ad7c4d248dea7497af449845dc962730</hash>\n-        <hash alg=\"SHA3-384\">cf06cfeaba477f7738f089ba401fb841074681d1c7f465546cdf0e95751a8bf912493428876a7d9108eef83f637c6a1e</hash>\n-        <hash alg=\"SHA3-256\">efbad2de8683215936c56b3f8fd3492f1cc27c2ee77595a99c794e18777dec42</hash>\n-        <hash alg=\"SHA3-512\">2707d5513e49f6e3ea6dec96510d360cfc125dab164ae5d99a1dcbd628751640f625a70ed749dad66024ae9fd7725f1c6c7f76de7f5a6efc9d8208a9e01922f7</hash>\n-      </hashes>\n-      <licenses>\n-        <license>\n-          <id>Apache-2.0</id>\n-        </license>\n-      </licenses>\n-      <purl>pkg:maven/org.slf4j/jcl-over-slf4j@2.0.7?type=jar</purl>\n-      <modified>false</modified>\n-    </component>\n   </components>\n   <dependencies>\n     <dependency ref=\"pkg:maven/org.slf4j/jcl-over-slf4j@2.0.7?type=jar\">\n       <dependency ref=\"pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar\"/>\n     </dependency>\n     <dependency ref=\"pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar\"/>\n     <dependency ref=\"pkg:maven/org.jreleaser/jreleaser-logger-api@1.6.0?type=jar\">\n"}]}