{"diffoscope-json-version": 1, "source1": "/input1", "source2": "/input2", "unified_diff": null, "details": [{"source1": "/input1", "source2": "/input2", "unified_diff": "@@ -1,11 +1,11 @@\n <?xml version=\"1.0\" encoding=\"utf-8\"?>\n-<bom xmlns=\"http://cyclonedx.org/schema/bom/1.4\" serialNumber=\"urn:uuid:47756427-e882-4f95-b18b-8b445e5421e2\" version=\"1\">\n+<bom xmlns=\"http://cyclonedx.org/schema/bom/1.4\" serialNumber=\"urn:uuid:739c8a63-5064-4906-a010-5344e97b23fb\" version=\"1\">\n   <metadata>\n-    <timestamp>2023-04-29T10:08:00Z</timestamp>\n+    <timestamp>2025-07-11T06:29:41Z</timestamp>\n     <tools>\n       <tool>\n         <vendor>CycloneDX</vendor>\n         <name>cyclonedx-gradle-plugin</name>\n         <version>1.7.4</version>\n       </tool>\n     </tools>\n@@ -13,424 +13,382 @@\n       <group>org.jreleaser</group>\n       <name>jreleaser-mattermost-java-sdk</name>\n       <version>1.6.0</version>\n       <purl>pkg:maven/org.jreleaser/jreleaser-mattermost-java-sdk@1.6.0?type=jar</purl>\n     </component>\n   </metadata>\n   <components>\n-    <component type=\"library\" bom-ref=\"pkg:maven/io.github.openfeign/feign-core@12.3?type=jar\">\n-      <group>io.github.openfeign</group>\n-      <name>feign-core</name>\n-      <version>12.3</version>\n-      <description>Feign Core</description>\n+    <component type=\"library\" bom-ref=\"pkg:maven/commons-codec/commons-codec@1.15?type=jar\">\n+      <group>commons-codec</group>\n+      <name>commons-codec</name>\n+      <version>1.15</version>\n+      <description>The Apache Commons Codec package contains simple encoder and decoders for\n+     various formats such as Base64 and Hexadecimal.  In addition to these\n+     widely used encoders and decoders, the codec package also maintains a\n+     collection of phonetic encoding utilities.</description>\n       <hashes>\n-        <hash alg=\"MD5\">9e6e1ff8b68d2b6c1fc5bdc7ff208030</hash>\n-        <hash alg=\"SHA-1\">d280b09a17b63e69788fd3d8d215b7013ab48b16</hash>\n-        <hash alg=\"SHA-256\">939fbed2c2392a9633bc1d26f0ef9e934b059d1a9a9d4d966cedaf9075c546ec</hash>\n-        <hash alg=\"SHA-512\">8335901d8918747dc29d37a2ac630c6a78ea6ff04bfea77e6d8c74188e9e584142920996c45120caa86299486949a04e1ec1f1bef30229904360fcb5c5d4a1c4</hash>\n-        <hash alg=\"SHA-384\">dc7a0d10bdf2c3aeafba83ca7e41d21c3288f3df0b76e339788fcf7606381970b6429108dbf2d1212075d1feba040842</hash>\n-        <hash alg=\"SHA3-384\">2907938ea76735cde9b34676c6c8b04786f1595687f96734e7659768175cb7a525508f84c48d9b10b0b2f593158e1ed5</hash>\n-        <hash alg=\"SHA3-256\">474f6b0ab420bf63549ed123fff99b73fc881771c6a0c591e58dfb17adbe9899</hash>\n-        <hash alg=\"SHA3-512\">553a6dc1c3cf7facdb3b4e15be1d6d90259f1d36ce137db3a6e53a967ef4939aaa98c974b059c8f32dd42316bb7eee3b51910cf0fb172d0df9b8ff39d8cc722d</hash>\n+        <hash alg=\"MD5\">303baf002ce6d382198090aedd9d79a2</hash>\n+        <hash alg=\"SHA-1\">49d94806b6e3dc933dacbd8acb0fdbab8ebd1e5d</hash>\n+        <hash alg=\"SHA-256\">b3e9f6d63a790109bf0d056611fbed1cf69055826defeb9894a71369d246ed63</hash>\n+        <hash alg=\"SHA-512\">da30a716770795fce390e4dd340a8b728f220c6572383ffef55bd5839655d5611fcc06128b2144f6cdcb36f53072a12ec80b04afee787665e7ad0b6e888a6787</hash>\n+        <hash alg=\"SHA-384\">05d0506283716472175d44c2a4766523397bf8a007c18848f9c9a61718cc8aa437f9cb4b91771037ab29a960860b62a0</hash>\n+        <hash alg=\"SHA3-384\">12fad4ef78274b06f97b1243cea6f970088abde082d2de9377d915a34b44f7d7d67807c03e59c849b69f1544e2a9a1be</hash>\n+        <hash alg=\"SHA3-256\">87be248f33f241121f54aad61a9a460a79eabefbf1b5b0dd22aeb95b581f727e</hash>\n+        <hash alg=\"SHA3-512\">8c992c9c569ebaa0bf956a4c5b34fbf5e1ed1c212c2dd896fa216183ee0bcd341e96698af4b9cec7e8880762faa081a3d3a27f51349aa457cb8e373e4f57c788</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/io.github.openfeign/feign-core@12.3?type=jar</purl>\n+      <purl>pkg:maven/commons-codec/commons-codec@1.15?type=jar</purl>\n       <modified>false</modified>\n+      <externalReferences>\n+        <reference type=\"issue-tracker\">\n+          <url>https://issues.apache.org/jira/browse/CODEC</url>\n+        </reference>\n+        <reference type=\"vcs\">\n+          <url>https://github.com/apache/commons-codec</url>\n+        </reference>\n+      </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-model-api@1.6.0?type=jar\">\n-      <group>org.jreleaser</group>\n-      <name>jreleaser-model-api</name>\n-      <version>1.6.0</version>\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.slf4j/jcl-over-slf4j@2.0.7?type=jar\">\n+      <group>org.slf4j</group>\n+      <name>jcl-over-slf4j</name>\n+      <version>2.0.7</version>\n+      <description>JCL 1.2 implemented over SLF4J</description>\n       <hashes>\n-        <hash alg=\"MD5\">288354c621fdfef298e4e8cdc843e2c3</hash>\n-        <hash alg=\"SHA-1\">54bcb05008c6f0b50433f8d0fe82e3a217317db1</hash>\n-        <hash alg=\"SHA-256\">397e18c4fa02ba508e409a119866d4e78d64c6c76f5a4f22b3aefc027b662b9b</hash>\n-        <hash alg=\"SHA-512\">67c4e2f9acb6db78c21cfd23d3411ce1e32b23690a1d5035a285b48cd9b996fd4c80b504d050e87a4a5604e6b56ca52878a464593f0bd8eea53059bcb263289f</hash>\n-        <hash alg=\"SHA-384\">8f67be44af6f792c32f2b86d07738c52e5b742a650d010e8c0b5e60a62db627d5c695f23f24d814f232fc0246d03086c</hash>\n-        <hash alg=\"SHA3-384\">1e5c3dffd4e3c545081904db6dcff892bd2f27285b4fa46a57cdd23c3fbb382ab06268e87d57212996387269b2c8b72f</hash>\n-        <hash alg=\"SHA3-256\">d2b875e45846a0d17cf7f85d6289681ee42897519cdaca9625ffc56b1639909d</hash>\n-        <hash alg=\"SHA3-512\">1a098f05c0735a7ed19cf374440818e9882b0288728f6658ce3709ac534c06cc7dc36ea4d7656a35281758d1ec09c31edf13a98d6680206a0c9fb1dff21ad04f</hash>\n+        <hash alg=\"MD5\">4e8d6cd31f7e6277280c95157ac7845a</hash>\n+        <hash alg=\"SHA-1\">f127fe5ee53404a8b3697cdd032dd1dd6a29dd77</hash>\n+        <hash alg=\"SHA-256\">41806757e1d26dae5d6db2ca7d4a5176eed2d6e709cd86564d4a11dab0601742</hash>\n+        <hash alg=\"SHA-512\">221b39b85145cf7c245acb7f2692a02b6c5816f8b1187a1a77942dd39de958c1b01ecd066682eb88244f87b2a47513d40b6c1e69ef49a43b2a07ba818f124e17</hash>\n+        <hash alg=\"SHA-384\">fa8d53b46cd3ddab0bd265d384a90c35efef6a02a7822aa6f79065cee68d78f6ad7c4d248dea7497af449845dc962730</hash>\n+        <hash alg=\"SHA3-384\">cf06cfeaba477f7738f089ba401fb841074681d1c7f465546cdf0e95751a8bf912493428876a7d9108eef83f637c6a1e</hash>\n+        <hash alg=\"SHA3-256\">efbad2de8683215936c56b3f8fd3492f1cc27c2ee77595a99c794e18777dec42</hash>\n+        <hash alg=\"SHA3-512\">2707d5513e49f6e3ea6dec96510d360cfc125dab164ae5d99a1dcbd628751640f625a70ed749dad66024ae9fd7725f1c6c7f76de7f5a6efc9d8208a9e01922f7</hash>\n       </hashes>\n-      <licenses/>\n-      <purl>pkg:maven/org.jreleaser/jreleaser-model-api@1.6.0?type=jar</purl>\n+      <licenses>\n+        <license>\n+          <id>Apache-2.0</id>\n+        </license>\n+      </licenses>\n+      <purl>pkg:maven/org.slf4j/jcl-over-slf4j@2.0.7?type=jar</purl>\n       <modified>false</modified>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-git-java-sdk@1.6.0?type=jar\">\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-webhooks-java-sdk@1.6.0?type=jar\">\n       <group>org.jreleaser</group>\n-      <name>jreleaser-git-java-sdk</name>\n+      <name>jreleaser-webhooks-java-sdk</name>\n       <version>1.6.0</version>\n-      <hashes>\n-        <hash alg=\"MD5\">a82f264ee899604bfe6e634ec5a8818e</hash>\n-        <hash alg=\"SHA-1\">4c5ee97076b5bc0ae4474e6ac1ade64e60702a4f</hash>\n-        <hash alg=\"SHA-256\">ab59b4abd99100aae35f871d548c778a90f0e4aaad5d0eba94af15df688a5775</hash>\n-        <hash alg=\"SHA-512\">447286a510cd5b84f29275627ebf3bb6e930b6e150fa981c591f3266a354a46511a4a5d00cd13f95539541ed6e783641a9c9a4213c493cd7cf479780e427511f</hash>\n-        <hash alg=\"SHA-384\">f266e76c6698ecd59dcf197a55f09d8b567f9e8953e310bff7c0c617416df996ac53c5d9c4468b9b065f1816716ae3ea</hash>\n-        <hash alg=\"SHA3-384\">208684bb1093245f49be449e1a4966fadd1b4840b760aa0a89c861ae18820a63bc3f1b2d895c6e010849712394bb160e</hash>\n-        <hash alg=\"SHA3-256\">454d27e5726aae3f4a92c5da424f306eb159edf40da4da52619e9e878cb48b3a</hash>\n-        <hash alg=\"SHA3-512\">3a995062f0dfeaa46f17214c0c8179a3d8ad4ba71b4579448e16445e5661ba1102044e2d69fd9833b15b51620636f78aa8f9dec87fde449147f2185b5df5b3e6</hash>\n-      </hashes>\n-      <licenses/>\n-      <purl>pkg:maven/org.jreleaser/jreleaser-git-java-sdk@1.6.0?type=jar</purl>\n-      <modified>false</modified>\n-    </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.apache.commons/commons-jexl3@3.3?type=jar\">\n-      <group>org.apache.commons</group>\n-      <name>commons-jexl3</name>\n-      <version>3.3</version>\n-      <description>JEXL is a library intended to facilitate the implementation of scripting features in\n-        applications and frameworks written in Java.</description>\n-      <hashes>\n-        <hash alg=\"MD5\">3a332e3beb67b3a2a20bd0a950fc57c4</hash>\n-        <hash alg=\"SHA-1\">c76b4cfa436c3e79e04806e62656b09968c388ba</hash>\n-        <hash alg=\"SHA-256\">07b0ff6c5a10ffb2e2c02da9e2c0e2e6702df44178cfb76881f69447fc386014</hash>\n-        <hash alg=\"SHA-512\">879111d1c3ad021ea3961e49161b3ff6ba251044ffef1ca4d36d880d9a09b1f395e17eef221a13274303f44e116204ae4b2a3ee3e931f117fc901e321d59b5c6</hash>\n-        <hash alg=\"SHA-384\">7a268bf2c903be86813fcc7f06158abf79d558ee59ebf03470ebd06ca6e6d169beb1c3600e07c20c4f95fa7827fde841</hash>\n-        <hash alg=\"SHA3-384\">1803d239f17f7eeee6edb69d38c4473319fd4eeeb684eda5c38b577a7aaf42965ce41d9082d515d5007be9a0b0712d81</hash>\n-        <hash alg=\"SHA3-256\">01163da5e720b6d1f6bf8b6e9e398d26a1be92b3f18ef6089d218d54166b0c01</hash>\n-        <hash alg=\"SHA3-512\">8abdd72c14492340c05fd5d3555682a308ac00ac1b1e1e15ae38abc47f454f50db9e0727a49df72a50bf49f1447a6ca9dadc48b9ffd45a043bcbae9e5e050d3d</hash>\n-      </hashes>\n+      <description>Java SDK for Incoming Webhooks</description>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n           <url>https://www.apache.org/licenses/LICENSE-2.0</url>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/org.apache.commons/commons-jexl3@3.3?type=jar</purl>\n+      <purl>pkg:maven/org.jreleaser/jreleaser-webhooks-java-sdk@1.6.0?type=jar</purl>\n       <modified>false</modified>\n       <externalReferences>\n-        <reference type=\"issue-tracker\">\n-          <url>https://issues.apache.org/jira/browse/JEXL</url>\n-        </reference>\n         <reference type=\"vcs\">\n-          <url>https://gitbox.apache.org/repos/asf/commons-jexl.git</url>\n+          <url>https://github.com/jreleaser/jreleaser</url>\n         </reference>\n       </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.eclipse.jgit/org.eclipse.jgit@5.13.0.202109080827-r?type=jar\">\n-      <group>org.eclipse.jgit</group>\n-      <name>org.eclipse.jgit</name>\n-      <version>5.13.0.202109080827-r</version>\n-      <description>Repository access and algorithms</description>\n-      <hashes>\n-        <hash alg=\"MD5\">5a1f197785cb9c69d1241cb0f16937a2</hash>\n-        <hash alg=\"SHA-1\">32badd5adebd660424509344259ad3e409699ba2</hash>\n-        <hash alg=\"SHA-256\">dabf8369f0cdf8cf17b7f7da4bda9320c570bb754c88e0beb7b852812cf5cd25</hash>\n-        <hash alg=\"SHA-512\">768dbb3ba2649a7025338197b4703b414983e4608138719b0d69201f7f49e57e0454846b41b775b135b083f820824749da6121f20a812c4f155a97f09c9b15ac</hash>\n-        <hash alg=\"SHA-384\">deb24e724ace28ddbaf5e7a1fafaa449a49b97d3a5a53eb487a2ab90895f05684c48a839e3677643364ff965cc33af95</hash>\n-        <hash alg=\"SHA3-384\">e5aed5403b4c28624bc58be31601897555c94eb54e680f1ccb59992a643db24d0de465b7ae879b5ba29d56a132a87b69</hash>\n-        <hash alg=\"SHA3-256\">8ccc07758fbf1ac55028538890afe7d209c866ee019875ef15acfaea9ac7244f</hash>\n-        <hash alg=\"SHA3-512\">4725fff9b6067d70d4c82cbf549b16be521e839d5c8ecf605f9a71516ec78334e348cb2d3303afb7ba18ce464a68c1e195bb6fe673d9d4d6b8d75c84d0b4e101</hash>\n-      </hashes>\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-tool-java-sdk@1.6.0?type=jar\">\n+      <group>org.jreleaser</group>\n+      <name>jreleaser-tool-java-sdk</name>\n+      <version>1.6.0</version>\n+      <description>Java SDK for Tools</description>\n       <licenses>\n         <license>\n-          <id>BSD-3-Clause</id>\n+          <id>Apache-2.0</id>\n+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/org.eclipse.jgit/org.eclipse.jgit@5.13.0.202109080827-r?type=jar</purl>\n+      <purl>pkg:maven/org.jreleaser/jreleaser-tool-java-sdk@1.6.0?type=jar</purl>\n       <modified>false</modified>\n+      <externalReferences>\n+        <reference type=\"vcs\">\n+          <url>https://github.com/jreleaser/jreleaser</url>\n+        </reference>\n+      </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.bouncycastle/bcpg-jdk15on@1.70?type=jar\">\n-      <group>org.bouncycastle</group>\n-      <name>bcpg-jdk15on</name>\n-      <version>1.70</version>\n-      <description>The Bouncy Castle Java API for handling the OpenPGP protocol. This jar contains the OpenPGP API for JDK 1.5 and up. The APIs can be used in conjunction with a JCE/JCA provider such as the one provided with the Bouncy Castle Cryptography APIs.</description>\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar\">\n+      <group>org.apache.httpcomponents</group>\n+      <name>httpclient</name>\n+      <version>4.5.13</version>\n+      <description>Apache HttpComponents Client</description>\n       <hashes>\n-        <hash alg=\"MD5\">01ddc3aa0289346f4db19d95039cefdb</hash>\n-        <hash alg=\"SHA-1\">062f72ec06f31a6c31a3f3355fce0384b21126d7</hash>\n-        <hash alg=\"SHA-256\">4f08f4aa74048824151c98dd3e92e7165ac30659834404f08a8e843bdad32847</hash>\n-        <hash alg=\"SHA-512\">4e240b7811ef90c090e83a181dace41da487555e4136221861b0060f9af6d8b316f2dd0472f747adb98ca5372f46055456ef04bdc0c3992188ab13302922fce9</hash>\n-        <hash alg=\"SHA-384\">d89dec6226112d13cbea461d84740699770dd7d8ad3f67ab65e7b49fd08a096a948e54da2e6a681925c4320f410bba37</hash>\n-        <hash alg=\"SHA3-384\">5e8e8ca63cc550a8f50b627c4dd051f0eb5c31b99ff53dabd7d5f5d1ed98d0dc1d4963a09fc0db32f8e0ff769a2a6e65</hash>\n-        <hash alg=\"SHA3-256\">77f28e7e22b3b3a8d7b667fb7f783847c4b11ee7208833636e09e8b38390fd51</hash>\n-        <hash alg=\"SHA3-512\">cb238dbb641c42c49b5801bdfa6432395e860c1a7485ba68e2d57887e3d22ff254718c6cbfa34c107bfb09d74e2f85c33b95f89dfa886e141a8247a0abf2b5c2</hash>\n+        <hash alg=\"MD5\">40d6b9075fbd28fa10292a45a0db9457</hash>\n+        <hash alg=\"SHA-1\">e5f6cae5ca7ecaac1ec2827a9e2d65ae2869cada</hash>\n+        <hash alg=\"SHA-256\">6fe9026a566c6a5001608cf3fc32196641f6c1e5e1986d1037ccdbd5f31ef743</hash>\n+        <hash alg=\"SHA-512\">3567739186e551f84cad3e4b6b270c5b8b19aba297675a96bcdff3663ff7d20d188611d21f675fe5ff1bfd7d8ca31362070910d7b92ab1b699872a120aa6f089</hash>\n+        <hash alg=\"SHA-384\">093ac3e2dde58e34aa70309c7305eb3c9b5be2509a9293f1672494da55479a86bd112e83326746dc7a32855472952b99</hash>\n+        <hash alg=\"SHA3-384\">cd6882e7868624164e460f2f3ea01466f863c0dcb902b031c656b57356f563be83b29530df41d88d634ed3d01fc9964d</hash>\n+        <hash alg=\"SHA3-256\">710b1d8d7dae0b8e4270756694ca9c83d64965f42d3b4170c609b14d47c2762c</hash>\n+        <hash alg=\"SHA3-512\">276fa6a6599dc89382d658115695cf4da6b0d39b34e9c349c17a5dbd64122eaee553bb9ed75c0378ec4a83be157c8aa39370662de3c9b8fd55ebc1dd608383e6</hash>\n       </hashes>\n       <licenses>\n         <license>\n-          <name>Bouncy Castle Licence</name>\n-          <url>https://www.bouncycastle.org/licence.html</url>\n-        </license>\n-        <license>\n-          <id>Apache-1.1</id>\n-          <url>http://apache.org/licenses/LICENSE-1.1</url>\n+          <id>Apache-2.0</id>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/org.bouncycastle/bcpg-jdk15on@1.70?type=jar</purl>\n+      <purl>pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar</purl>\n       <modified>false</modified>\n-      <externalReferences>\n-        <reference type=\"issue-tracker\">\n-          <url>https://github.com/bcgit/bc-java/issues</url>\n-        </reference>\n-        <reference type=\"vcs\">\n-          <url>https://github.com/bcgit/bc-java</url>\n-        </reference>\n-      </externalReferences>\n     </component>\n     <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-command-java-sdk@1.6.0?type=jar\">\n       <group>org.jreleaser</group>\n       <name>jreleaser-command-java-sdk</name>\n       <version>1.6.0</version>\n-      <hashes>\n-        <hash alg=\"MD5\">acbbfe01e59912d40bdaf2b516b8199d</hash>\n-        <hash alg=\"SHA-1\">f922261945a1a25999d8b4c95326c38f15b167e8</hash>\n-        <hash alg=\"SHA-256\">cc3bbe8d8a2cdcba73857752b9c2fbae3344c8597af7f37ac7cd0926b02d92ea</hash>\n-        <hash alg=\"SHA-512\">d40f5671c80589711087a7dc5e4148ffee88ffacbca4db3a5360c0827e2ccc0e3fe80ed95e9c4b91d8c29617dbf6171a8a849a652e9b7a472e906692cd792498</hash>\n-        <hash alg=\"SHA-384\">cc3b16425ab2505338e26c64b006157218391762d04cec9d4a9a2897ce33036a8cd6f6199b55c80e646bad434322c18c</hash>\n-        <hash alg=\"SHA3-384\">09fe1086a3bbfda7fa50c320ab4c60b056ea2b37002f281bb413a17cc4f8846be4a9bcaf4b6f507a51af74474b189bd1</hash>\n-        <hash alg=\"SHA3-256\">ef9ad8cd599799ffa70998131cfbaf2985c3070a8ff727becac8ceb5480ab900</hash>\n-        <hash alg=\"SHA3-512\">a62c41fdaca8e1849d661ffded5af92bf09e43afc3497c5f923f5d7463756116dabef382cd8649a71473e9e938e698734b09e3d81153a852ff278876cd7ba8c9</hash>\n-      </hashes>\n-      <licenses/>\n-      <purl>pkg:maven/org.jreleaser/jreleaser-command-java-sdk@1.6.0?type=jar</purl>\n-      <modified>false</modified>\n-    </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-java-sdk-commons@1.6.0?type=jar\">\n-      <group>org.jreleaser</group>\n-      <name>jreleaser-java-sdk-commons</name>\n-      <version>1.6.0</version>\n-      <hashes>\n-        <hash alg=\"MD5\">a616e3581e826bb4e01c9ec7978bc4d2</hash>\n-        <hash alg=\"SHA-1\">187c502ed479e9f83427cccfd7cd47242bd5f51d</hash>\n-        <hash alg=\"SHA-256\">8043134ad00433ee9cb395081ac9e0cc479328a1589b2b67c310cfd654245ebf</hash>\n-        <hash alg=\"SHA-512\">03ed834cedf5f6b85f8d98defe2790fa0ca2971c686b46dc7c8616d130034785a6969e144ba6aa5d6f4d9093ccf888a7e4995c87d7acf862ece913e9696c550a</hash>\n-        <hash alg=\"SHA-384\">7f0545affd13b0f4298d047137850aba201b93bcd58d6625510bac088c98661c6ce3b1edb38ac7f22d765d22365a47bc</hash>\n-        <hash alg=\"SHA3-384\">9b4346b3b735ed788ca5e79e7fa4709d1e8edc60e994297f6a3fccd34d591474ab7d895720639e0739605b10d6722e60</hash>\n-        <hash alg=\"SHA3-256\">574b9169bf34389e320331ab5cf3ff85c61cb36197acfb0feb040412313326ca</hash>\n-        <hash alg=\"SHA3-512\">c4f1d762db1498baf5f6268619915811f933433ff78388429e564a3c7d94ee89867648fe79d1718dabe74c7927be99152d3475e5547f5b0f4c5d1b53ce7f75d2</hash>\n-      </hashes>\n-      <licenses/>\n-      <purl>pkg:maven/org.jreleaser/jreleaser-java-sdk-commons@1.6.0?type=jar</purl>\n-      <modified>false</modified>\n-    </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.2?type=jar\">\n-      <group>com.fasterxml.jackson.core</group>\n-      <name>jackson-annotations</name>\n-      <version>2.14.2</version>\n-      <description>Core annotations used for value types, used by Jackson data binding package.</description>\n-      <hashes>\n-        <hash alg=\"MD5\">10d19982a8890f6eb37557af2f58e272</hash>\n-        <hash alg=\"SHA-1\">a7aae9525864930723e3453ab799521fdfd9d873</hash>\n-        <hash alg=\"SHA-256\">2c6869d505cf60dc066734b7d50339f975bd3adc635e26a78abb71acb4473c0d</hash>\n-        <hash alg=\"SHA-512\">a978384791bdc074df8039ffc95bb93f0f60d14d476861ee2a0ce208b33a991c486a07345cb80559252c3ff1dea14d3efb818c19bdc18435946dc8754d8e6ee3</hash>\n-        <hash alg=\"SHA-384\">d5111c69020666689414921ae4a8950f9fbdf86dec1360f6827beeee9ebd3f78db74e69c76e0becaba47eb34fdaaeb5a</hash>\n-        <hash alg=\"SHA3-384\">53b1a8891482e16a7d8849251cb0dcd1aacf6aaa2161a73589d9742ad96763e384d426d04db762e56fc4536f4e719084</hash>\n-        <hash alg=\"SHA3-256\">14f7b3c51c96f7429f7c60a69e3b7e4f9f2207820141f197d56b57018ffd5640</hash>\n-        <hash alg=\"SHA3-512\">75e4e4fb847fdacdd497cf6b340362581ab4091120ccf2ec32a273709d336af0f78c90ce12b2dd1d17354aa08583af0d3ded89bb415720f45f2d9c110d71dd7a</hash>\n-      </hashes>\n+      <description>JReleaser command SDK</description>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.2?type=jar</purl>\n+      <purl>pkg:maven/org.jreleaser/jreleaser-command-java-sdk@1.6.0?type=jar</purl>\n       <modified>false</modified>\n       <externalReferences>\n         <reference type=\"vcs\">\n-          <url>https://github.com/FasterXML/jackson-annotations</url>\n+          <url>https://github.com/jreleaser/jreleaser</url>\n         </reference>\n       </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/commons-codec/commons-codec@1.15?type=jar\">\n-      <group>commons-codec</group>\n-      <name>commons-codec</name>\n-      <version>1.15</version>\n-      <description>The Apache Commons Codec package contains simple encoder and decoders for\n-     various formats such as Base64 and Hexadecimal.  In addition to these\n-     widely used encoders and decoders, the codec package also maintains a\n-     collection of phonetic encoding utilities.</description>\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.apache.commons/commons-compress@1.22?type=jar\">\n+      <group>org.apache.commons</group>\n+      <name>commons-compress</name>\n+      <version>1.22</version>\n+      <description>Apache Commons Compress software defines an API for working with\n+compression and archive formats.  These include: bzip2, gzip, pack200,\n+lzma, xz, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4,\n+Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.</description>\n       <hashes>\n-        <hash alg=\"MD5\">303baf002ce6d382198090aedd9d79a2</hash>\n-        <hash alg=\"SHA-1\">49d94806b6e3dc933dacbd8acb0fdbab8ebd1e5d</hash>\n-        <hash alg=\"SHA-256\">b3e9f6d63a790109bf0d056611fbed1cf69055826defeb9894a71369d246ed63</hash>\n-        <hash alg=\"SHA-512\">da30a716770795fce390e4dd340a8b728f220c6572383ffef55bd5839655d5611fcc06128b2144f6cdcb36f53072a12ec80b04afee787665e7ad0b6e888a6787</hash>\n-        <hash alg=\"SHA-384\">05d0506283716472175d44c2a4766523397bf8a007c18848f9c9a61718cc8aa437f9cb4b91771037ab29a960860b62a0</hash>\n-        <hash alg=\"SHA3-384\">12fad4ef78274b06f97b1243cea6f970088abde082d2de9377d915a34b44f7d7d67807c03e59c849b69f1544e2a9a1be</hash>\n-        <hash alg=\"SHA3-256\">87be248f33f241121f54aad61a9a460a79eabefbf1b5b0dd22aeb95b581f727e</hash>\n-        <hash alg=\"SHA3-512\">8c992c9c569ebaa0bf956a4c5b34fbf5e1ed1c212c2dd896fa216183ee0bcd341e96698af4b9cec7e8880762faa081a3d3a27f51349aa457cb8e373e4f57c788</hash>\n+        <hash alg=\"MD5\">f1e4db16fee4291212d91409313a8086</hash>\n+        <hash alg=\"SHA-1\">691a8b4e6cf4248c3bc72c8b719337d5cb7359fa</hash>\n+        <hash alg=\"SHA-256\">53d04a0efc7223baecaa303bd5d298eb0600e6b82b4076f9cecd558b97ba760b</hash>\n+        <hash alg=\"SHA-512\">2d64fa6cd081fff5d73ee662a82f6186991fc13b4bdaee18b5f1bdcab06d9acb70e3713d18b296337791448251fbd6768bd84afaa817a10547652d0cfa885563</hash>\n+        <hash alg=\"SHA-384\">295d7f69d151abbd784e1c4d021c77ce43e129bb5bda0c55762b32d77c8607863383297674ec8a212ea3dfe4007b0044</hash>\n+        <hash alg=\"SHA3-384\">af04eb1b4647b1a041c5ee994c2c7a32556b5410b916fedb69905f166938baa43ba54fdc67084205794c02680d3c6349</hash>\n+        <hash alg=\"SHA3-256\">40f2960e82adfb171b0c5430271fdb0c0dae243aaf9b08021df54fd4d4a3a0b0</hash>\n+        <hash alg=\"SHA3-512\">f2c445f77bda3ef230a2b78ea88d86e48a7d6db36805f841d5cffe1f178842a161b2fda0b0d60162af210f18ed9c5bb9579c963291c26f715c1aa389d9a6785c</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/commons-codec/commons-codec@1.15?type=jar</purl>\n+      <purl>pkg:maven/org.apache.commons/commons-compress@1.22?type=jar</purl>\n       <modified>false</modified>\n       <externalReferences>\n         <reference type=\"issue-tracker\">\n-          <url>https://issues.apache.org/jira/browse/CODEC</url>\n+          <url>https://issues.apache.org/jira/browse/COMPRESS</url>\n         </reference>\n         <reference type=\"vcs\">\n-          <url>https://github.com/apache/commons-codec</url>\n+          <url>https://gitbox.apache.org/repos/asf?p=commons-compress.git</url>\n         </reference>\n       </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-logger-api@1.6.0?type=jar\">\n-      <group>org.jreleaser</group>\n-      <name>jreleaser-logger-api</name>\n-      <version>1.6.0</version>\n-      <hashes>\n-        <hash alg=\"MD5\">e7da806a3427ab10405584067d880ead</hash>\n-        <hash alg=\"SHA-1\">92ae4e1826cf1d8321fcefd3f4ece0fa5cc4fc94</hash>\n-        <hash alg=\"SHA-256\">372d4b6cee7af83429f9f054a69f73d38d6fb4c983b14ce97f2599791d59aee9</hash>\n-        <hash alg=\"SHA-512\">c4f4edf49e18f475b7b44677497250cd93af45e302fb39306a94dc8f0ee1f783921967de3e1f1b7591f970a359080f43b24c1499a363280d904c2519d2e9bcb2</hash>\n-        <hash alg=\"SHA-384\">fcdadd6f2e8af30a7761e98f5c717ab1b8f6f0a79825a711454c8c9cc9842cf8fe0f5917b5ea48603eb0ee5788ed7a8b</hash>\n-        <hash alg=\"SHA3-384\">42a3e276d69efc85ce5798c5cd78ba1a910ef328169fb39a1a685eea5b98e9c3bf495124f56b518d553f1ca2e63d62f7</hash>\n-        <hash alg=\"SHA3-256\">0fb4d06e278df39d6633d1a09ed01ad4f7788838668f2ebc097f919384cec97d</hash>\n-        <hash alg=\"SHA3-512\">bb5a8b000955af1038d4d75c0fd8786561b3a2cf7bb804e09e42518a0bcc3e23ab01dd5236de4bdb58fd9b1a0e923982eb6cc6d0e450896bed9c86dfe808675d</hash>\n-      </hashes>\n-      <licenses/>\n-      <purl>pkg:maven/org.jreleaser/jreleaser-logger-api@1.6.0?type=jar</purl>\n-      <modified>false</modified>\n-    </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/com.github.luben/zstd-jni@1.5.4-1?type=jar\">\n-      <publisher>com.github.luben</publisher>\n-      <group>com.github.luben</group>\n-      <name>zstd-jni</name>\n-      <version>1.5.4-1</version>\n-      <description>JNI bindings for Zstd native library that provides fast and high compression lossless algorithm for Java and all JVM languages.</description>\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar\">\n+      <group>org.slf4j</group>\n+      <name>slf4j-api</name>\n+      <version>2.0.7</version>\n+      <description>The slf4j API</description>\n       <hashes>\n-        <hash alg=\"MD5\">e787241d6ec56aac451be8b0d920c85b</hash>\n-        <hash alg=\"SHA-1\">291ccaacc039e41932de877303edb6af98a91c24</hash>\n-        <hash alg=\"SHA-256\">f0469d891127dc5ae6bd2df93a5aa38c4d79bcd5f360fbb88c2785b52a572349</hash>\n-        <hash alg=\"SHA-512\">368916f0057d69fa4ba3768f6f617291ce4083b89913e46c2daa68cc94c48b92e0ca626241486f34a4d154502eb77b19e82c16c68b341ecfc82ccc0520f8d4a9</hash>\n-        <hash alg=\"SHA-384\">7e72184873689fa286d93d88f69f8baa24f818fcd61105a14332fbb5ed254363c0969afa98befd797a3762577bc77993</hash>\n-        <hash alg=\"SHA3-384\">1302636797b291dbbe19f39bdeb66160c1317b395a0a9360ba93aeaa262de7ad8de7257e6a997a9c659fdf53b3367ee6</hash>\n-        <hash alg=\"SHA3-256\">54505ed16257a55330bb44c76719a687251d2623fa5e50a192b54c5067573255</hash>\n-        <hash alg=\"SHA3-512\">6e01cc9654c2d68c36a284e23c388267ac7013d534cceed0b6ab44679a6bbb6d03d4cfc52c967c4e76dbd5b8963c268e40d9890c927866ea00824821b0ecb82d</hash>\n+        <hash alg=\"MD5\">403dffa46cdd2e3c82da19df4f394a4c</hash>\n+        <hash alg=\"SHA-1\">41eb7184ea9d556f23e18b5cb99cad1f8581fc00</hash>\n+        <hash alg=\"SHA-256\">5d6298b93a1905c32cda6478808ac14c2d4a47e91535e53c41f7feeb85d946f4</hash>\n+        <hash alg=\"SHA-512\">216d2cac27d501972c888f94dfa747d700b80d60813884b6ab4b12c6a3b17ed0c21a1d27e1aa4332c97c828f20039e3913d2763d7e1a3cef36ae4389a276e7a8</hash>\n+        <hash alg=\"SHA-384\">c25b39f418aa726ba8405dfd9b356131f89984e2ef5a55a724a2abf3b7c78443f671105835161d2414d602cf03da9f2d</hash>\n+        <hash alg=\"SHA3-384\">f33abfaac21badae6f85d3ebbc6c1204fd7fda3bb15173e763fa8cee95bce6a8270eec2c8f49343c66c8d2767bc317e1</hash>\n+        <hash alg=\"SHA3-256\">6e00d4b264a2afc4ca4e98f716ecece66c32c626ca3f8c5d56b22092b6fe417b</hash>\n+        <hash alg=\"SHA3-512\">ad7b9142d370fc532a07cdd43881a129b012ff50e2bede3ac27d9bd31ec707bf2f45e82002fa59e962955cc38ab73cdd77713fca50cedc926c046f5617c1285b</hash>\n       </hashes>\n       <licenses>\n         <license>\n-          <id>BSD-2-Clause</id>\n+          <id>MIT</id>\n+          <url>https://opensource.org/licenses/MIT</url>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/com.github.luben/zstd-jni@1.5.4-1?type=jar</purl>\n+      <purl>pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar</purl>\n       <modified>false</modified>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.slf4j/jcl-over-slf4j@2.0.7?type=jar\">\n-      <group>org.slf4j</group>\n-      <name>jcl-over-slf4j</name>\n-      <version>2.0.7</version>\n-      <description>JCL 1.2 implemented over SLF4J</description>\n+    <component type=\"library\" bom-ref=\"pkg:maven/com.github.spullara.mustache.java/compiler@0.9.10?type=jar\">\n+      <group>com.github.spullara.mustache.java</group>\n+      <name>compiler</name>\n+      <version>0.9.10</version>\n+      <description>Implementation of mustache.js for Java</description>\n       <hashes>\n-        <hash alg=\"MD5\">4e8d6cd31f7e6277280c95157ac7845a</hash>\n-        <hash alg=\"SHA-1\">f127fe5ee53404a8b3697cdd032dd1dd6a29dd77</hash>\n-        <hash alg=\"SHA-256\">41806757e1d26dae5d6db2ca7d4a5176eed2d6e709cd86564d4a11dab0601742</hash>\n-        <hash alg=\"SHA-512\">221b39b85145cf7c245acb7f2692a02b6c5816f8b1187a1a77942dd39de958c1b01ecd066682eb88244f87b2a47513d40b6c1e69ef49a43b2a07ba818f124e17</hash>\n-        <hash alg=\"SHA-384\">fa8d53b46cd3ddab0bd265d384a90c35efef6a02a7822aa6f79065cee68d78f6ad7c4d248dea7497af449845dc962730</hash>\n-        <hash alg=\"SHA3-384\">cf06cfeaba477f7738f089ba401fb841074681d1c7f465546cdf0e95751a8bf912493428876a7d9108eef83f637c6a1e</hash>\n-        <hash alg=\"SHA3-256\">efbad2de8683215936c56b3f8fd3492f1cc27c2ee77595a99c794e18777dec42</hash>\n-        <hash alg=\"SHA3-512\">2707d5513e49f6e3ea6dec96510d360cfc125dab164ae5d99a1dcbd628751640f625a70ed749dad66024ae9fd7725f1c6c7f76de7f5a6efc9d8208a9e01922f7</hash>\n+        <hash alg=\"MD5\">5638fc78a17d5063cc4b0d00f6e87491</hash>\n+        <hash alg=\"SHA-1\">6111ae24e3be9ecbd75f5fe908583fc14b4f0174</hash>\n+        <hash alg=\"SHA-256\">2b5a9217811cb99846a473fa8e0d233eb33629347b7f44941f6c0fbd4cdf1038</hash>\n+        <hash alg=\"SHA-512\">2ccf3196af2b518c96df748a72a0122d033dc222e1fab3e12f3e2094146d44bec20bd1502390b59abf090cbdf5dd4d580084b07fb7241248b5b8da2605207559</hash>\n+        <hash alg=\"SHA-384\">0204e77a4a64701af5000df6601f4f4c23cb5e53dd39a1325615d4f942cd2c91d04bbac20348ae49731f586282165c33</hash>\n+        <hash alg=\"SHA3-384\">0960da7175835484471f485d481499f8b65f134ff4f1629618560adaa5a08caa897fbefcea190f93106ee9e3273381b2</hash>\n+        <hash alg=\"SHA3-256\">cfb7e640392ef590069e6b1d059dc20b8fcff984a4b267b3969fcf50ed0edd4f</hash>\n+        <hash alg=\"SHA3-512\">db3dad3809879bca835a04da890fd86dbc58ba6637c72f07d02e39d13645ebb6c640b7fecc18a779e58946072078bdf114b91445026a32dd6501b5d1c6e7d933</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/org.slf4j/jcl-over-slf4j@2.0.7?type=jar</purl>\n+      <purl>pkg:maven/com.github.spullara.mustache.java/compiler@0.9.10?type=jar</purl>\n       <modified>false</modified>\n+      <externalReferences>\n+        <reference type=\"vcs\">\n+          <url>http://github.com/spullara/mustache.java</url>\n+        </reference>\n+      </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/io.github.openfeign.form/feign-form@3.8.0?type=jar\">\n-      <group>io.github.openfeign.form</group>\n-      <name>feign-form</name>\n-      <version>3.8.0</version>\n+    <component type=\"library\" bom-ref=\"pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.2?type=jar\">\n+      <group>com.fasterxml.jackson.core</group>\n+      <name>jackson-databind</name>\n+      <version>2.14.2</version>\n+      <description>General data-binding functionality for Jackson: works on core streaming API</description>\n       <hashes>\n-        <hash alg=\"MD5\">ab48cdaa9aecefe5e938873ba2db3bb0</hash>\n-        <hash alg=\"SHA-1\">3083889996b18443c275a352d3ab4bc6c8321598</hash>\n-        <hash alg=\"SHA-256\">b21d37321b390995c90b5dbb4ff0c33f09d1cc7768207cc0da910ad20bf58961</hash>\n-        <hash alg=\"SHA-512\">3a1718c21e4caffcd5f686d2cde011b2f72a026d03caa03b876ad6e7c8c40b7bd59189eed6efa0654bf988a438775ef2c429fae497d502c1806c8c4d9d474c2e</hash>\n-        <hash alg=\"SHA-384\">02b96ee7cb8c67cdfe63422247035cbb003b7423a82756714d36de926118ac5e96c407fd324090c851962c63f7d4fd6f</hash>\n-        <hash alg=\"SHA3-384\">0d63a4c22216be6259584b62d3753a86220ea181a002641cda45de153501272fd79b7064d21bdee0ecd8129194fd7c3e</hash>\n-        <hash alg=\"SHA3-256\">ffc2832df09d0edf0251c5e6def39b6c36fd2c02c55ad29f0e63e3160cb709e1</hash>\n-        <hash alg=\"SHA3-512\">c2013da332e97e32962ee34459c5834b04ab2f6598960cb06e4f247a2683ced3fac3919d15151be4dae083c74911c7ead1906faabfc8a7cb6245fcd7138ef0df</hash>\n+        <hash alg=\"MD5\">c1b12dd14734cd1986132bf55042dd7e</hash>\n+        <hash alg=\"SHA-1\">01e71fddbc80bb86f71a6345ac1e8ab8a00e7134</hash>\n+        <hash alg=\"SHA-256\">501d3abce4d18dcc381058ec593c5b94477906bba6efbac14dae40a642f77424</hash>\n+        <hash alg=\"SHA-512\">85473a29d23292f49092af9e7a7a63993206847c53b3e71f3c67245d68f7b19cc7c341e0ece409eb5e96602df98a848e957d8691fdd2c5fcddd807df9078255e</hash>\n+        <hash alg=\"SHA-384\">5c54d6c497cb329c3424a30319bf657ea222349eadc5ae74c30e8dc1525d7b60b7785f4d20370267b03343dd738cc13e</hash>\n+        <hash alg=\"SHA3-384\">98ff0b2a4dfc1faf319d4b0d38376c3c7a58b65d071db293232eed810adf2e525fecee3be45c99b41e20cf6a3a8ebef9</hash>\n+        <hash alg=\"SHA3-256\">2dba45f78a0d37402083975e18dbb3201705faf7e533c3e9721b9364c2a1ab0f</hash>\n+        <hash alg=\"SHA3-512\">76ef73198269cfd0922f4ae86c8b7e6a9cd1b96ee55da43ebfe57dd34365cc1c5c5630fadf79e46156a52b6b96b7d1f694f5e4f5c4f6a3d3ebb31c927e414435</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/io.github.openfeign.form/feign-form@3.8.0?type=jar</purl>\n+      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.2?type=jar</purl>\n       <modified>false</modified>\n+      <externalReferences>\n+        <reference type=\"vcs\">\n+          <url>https://github.com/FasterXML/jackson-databind</url>\n+        </reference>\n+      </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.2?type=jar\">\n-      <group>com.fasterxml.jackson.core</group>\n-      <name>jackson-core</name>\n-      <version>2.14.2</version>\n-      <description>Core Jackson processing abstractions (aka Streaming API), implementation for JSON</description>\n+    <component type=\"library\" bom-ref=\"pkg:maven/com.googlecode.javaewah/JavaEWAH@1.2.3?type=jar\">\n+      <group>com.googlecode.javaewah</group>\n+      <name>JavaEWAH</name>\n+      <version>1.2.3</version>\n+      <description>The bit array data structure is implemented in Java as the BitSet class. Unfortunately, this fails to scale without compression.\n+  JavaEWAH is a word-aligned compressed variant of the Java bitset class. It uses a 64-bit run-length encoding (RLE) compression scheme.\n+  The goal of word-aligned compression is not to achieve the best compression, but rather to improve query processing time. Hence, we try to save CPU cycles, maybe at the expense of storage. However, the EWAH scheme we implemented is always more efficient storage-wise than an uncompressed bitmap (implemented in Java as the BitSet class). Unlike some alternatives, javaewah does not rely on a patented scheme.</description>\n       <hashes>\n-        <hash alg=\"MD5\">6ee422ee4c481b2d5aacb2b5e36a7dc0</hash>\n-        <hash alg=\"SHA-1\">f804090e6399ce0cf78242db086017512dd71fcc</hash>\n-        <hash alg=\"SHA-256\">b5d37a77c88277b97e3593c8740925216c06df8e4172bbde058528df04ad3e7a</hash>\n-        <hash alg=\"SHA-512\">208953cf72691b3bab1ca2f9a045cccd3d75c46c90099ba884fbf16bc3e45045e5cd014d2c68c96e8a8826f87a5f0e18cb34b35e7ef03348953869c21e197367</hash>\n-        <hash alg=\"SHA-384\">e806595862c5fcdae801d9845befc1d12c97e6036ee839d34590dbd785a422d5832cf4fc5c7ee6e1a5ee7a59f37740f0</hash>\n-        <hash alg=\"SHA3-384\">4fa59f572f2e100e2eba6fc664a3b9f804fabd911a552cb40805f39e624a9c04246b679cf4b017bb782c8272877f49d2</hash>\n-        <hash alg=\"SHA3-256\">cef17d3a539cbf798cfb0bfa9faffa2b7baff3670b50743e91ee58b4c60b59f1</hash>\n-        <hash alg=\"SHA3-512\">fceeed5cb8fe4335d88282d15657762a4728483275a7ff45f50b9fe6a999757ccb37c415d001eb6250226f98f5c576b1b36a83e601fb393cfd34a811c2df5d00</hash>\n+        <hash alg=\"MD5\">8fdeda28c1fb10e67b3d79f86bef5e61</hash>\n+        <hash alg=\"SHA-1\">13a27c856e0c8808cee9a64032c58eee11c3adc9</hash>\n+        <hash alg=\"SHA-256\">d65226949713c4c61a784f41c51167e7b0316f93764398ebba9e4336b3d954c2</hash>\n+        <hash alg=\"SHA-512\">48cd9df9252c58e9ffe4583e68607944bcdf2ad7a3be7b4317467f503c4f56cdbde358ca7c4f34fa620d01615072a42f3a572fc4f1237e266310b7508e79bcac</hash>\n+        <hash alg=\"SHA-384\">d1fd074f21b8a54a07d3f4579376d7c3ab72f24814ebc9ba92344e9da4721e9bfa3cda3a599137e4ddf2395a3c5b88e4</hash>\n+        <hash alg=\"SHA3-384\">a553864f196f73c139a104170ab79e780046fb5f322072c5494a6590361021f875afd7168f858b0531b61918ab49b94e</hash>\n+        <hash alg=\"SHA3-256\">bab97f3f893af36c36218a151b0c3fece27d47f358cc19e1ca9c22d77942bb76</hash>\n+        <hash alg=\"SHA3-512\">be817b93c7093d44ec8dded565d7e5651772ce38e9c72283c05191b33d0ecb2798cd385395f553500446573ac49dccc21f4ba3067d71eb89e03daa384d0193be</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.2?type=jar</purl>\n+      <purl>pkg:maven/com.googlecode.javaewah/JavaEWAH@1.2.3?type=jar</purl>\n       <modified>false</modified>\n       <externalReferences>\n+        <reference type=\"issue-tracker\">\n+          <url>https://github.com/lemire/javaewah/issues</url>\n+        </reference>\n         <reference type=\"vcs\">\n-          <url>https://github.com/FasterXML/jackson-core</url>\n+          <url>scm:git:git@github.com:lemire/javaewah.git</url>\n         </reference>\n       </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/io.github.openfeign/feign-httpclient@12.3?type=jar\">\n-      <group>io.github.openfeign</group>\n-      <name>feign-httpclient</name>\n-      <version>12.3</version>\n-      <description>Feign Apache HttpClient</description>\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar\">\n+      <group>org.apache.httpcomponents</group>\n+      <name>httpcore</name>\n+      <version>4.4.16</version>\n+      <description>Apache HttpComponents Core (blocking I/O)</description>\n       <hashes>\n-        <hash alg=\"MD5\">4ec31fa7f187c15f9967c7ffcf714449</hash>\n-        <hash alg=\"SHA-1\">0ea51fdb4797c3ab62e1f8a726d4e02cf522dba2</hash>\n-        <hash alg=\"SHA-256\">3a2833e18cc868bff19d6320f22054f96995dc073ed27edfeb2d83996d2ef37c</hash>\n-        <hash alg=\"SHA-512\">3440afa129150c035670cd098e6eba6f676afc82db2db53a10b20621e30658b411d820652e4668dab5ca615f599a41a06dc826378b5e783f88f26c2cddfce8ed</hash>\n-        <hash alg=\"SHA-384\">b8dc38126b28fb486d459e23ae61a34073f16f0ef7ec37f49636919d0fd5a8d86354d76314462dba94efd4f613db92ef</hash>\n-        <hash alg=\"SHA3-384\">7c4161078011223122067406e5ad6efedfcf45c71d6e081f37e3fba1c73578c748d5a5e60d372a5fa7159ec7737e71bb</hash>\n-        <hash alg=\"SHA3-256\">b6d851642b9a5628dbe3cab5706c9d434f1d59ec881cd5cdf6fae84f644eb7c1</hash>\n-        <hash alg=\"SHA3-512\">9b3b7edc25efc7345a9cc7b2fe0eccefd57fa40d62e6a85b4a698827b9c34ff568236d591f6d5645de7eb275be2b10aee80f42881f6068f0b1c38f274faf4c5f</hash>\n+        <hash alg=\"MD5\">28d2cd9bf8789fd2ec774fb88436ebd1</hash>\n+        <hash alg=\"SHA-1\">51cf043c87253c9f58b539c9f7e44c8894223850</hash>\n+        <hash alg=\"SHA-256\">6c9b3dd142a09dc468e23ad39aad6f75a0f2b85125104469f026e52a474e464f</hash>\n+        <hash alg=\"SHA-512\">168026436a6bcf5e96c0c59606638abbdc30de4b405ae55afde70fdf2895e267a3d48bba6bdadc5a89f38e31da3d9a9dc91e1cab7ea76f5e04322cf1ec63b838</hash>\n+        <hash alg=\"SHA-384\">ba9ceaee1a37ca3201d6a1315ecb0327b495489efd0baa155c219c475df8d3eb69fe77ab0026563db406497626da6562</hash>\n+        <hash alg=\"SHA3-384\">b9dc44dcc7cc86d5036f26d54c4003a2d72808ae7b07a0808bb53505c6d4281b5ad213eb1f3d0fef1113dec57cb0dfe1</hash>\n+        <hash alg=\"SHA3-256\">fd8ab51846476c6c18822151c9ec07b39a9633010b5d20ea937fc6910407bc64</hash>\n+        <hash alg=\"SHA3-512\">b42fa528242981a9d70e4f68ab75a24292df5112c44c21b6f18cb9201ce747885ba1d4dc69bc3d14d0da46a6c2638f937c11bc45749abeb55dc89ddada90cdda</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/io.github.openfeign/feign-httpclient@12.3?type=jar</purl>\n+      <purl>pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar</purl>\n       <modified>false</modified>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar\">\n-      <group>org.slf4j</group>\n-      <name>slf4j-api</name>\n-      <version>2.0.7</version>\n-      <description>The slf4j API</description>\n+    <component type=\"library\" bom-ref=\"pkg:maven/commons-io/commons-io@2.11.0?type=jar\">\n+      <group>commons-io</group>\n+      <name>commons-io</name>\n+      <version>2.11.0</version>\n+      <description>The Apache Commons IO library contains utility classes, stream implementations, file filters,\n+file comparators, endian transformation classes, and much more.</description>\n       <hashes>\n-        <hash alg=\"MD5\">403dffa46cdd2e3c82da19df4f394a4c</hash>\n-        <hash alg=\"SHA-1\">41eb7184ea9d556f23e18b5cb99cad1f8581fc00</hash>\n-        <hash alg=\"SHA-256\">5d6298b93a1905c32cda6478808ac14c2d4a47e91535e53c41f7feeb85d946f4</hash>\n-        <hash alg=\"SHA-512\">216d2cac27d501972c888f94dfa747d700b80d60813884b6ab4b12c6a3b17ed0c21a1d27e1aa4332c97c828f20039e3913d2763d7e1a3cef36ae4389a276e7a8</hash>\n-        <hash alg=\"SHA-384\">c25b39f418aa726ba8405dfd9b356131f89984e2ef5a55a724a2abf3b7c78443f671105835161d2414d602cf03da9f2d</hash>\n-        <hash alg=\"SHA3-384\">f33abfaac21badae6f85d3ebbc6c1204fd7fda3bb15173e763fa8cee95bce6a8270eec2c8f49343c66c8d2767bc317e1</hash>\n-        <hash alg=\"SHA3-256\">6e00d4b264a2afc4ca4e98f716ecece66c32c626ca3f8c5d56b22092b6fe417b</hash>\n-        <hash alg=\"SHA3-512\">ad7b9142d370fc532a07cdd43881a129b012ff50e2bede3ac27d9bd31ec707bf2f45e82002fa59e962955cc38ab73cdd77713fca50cedc926c046f5617c1285b</hash>\n+        <hash alg=\"MD5\">3b4b7ccfaeceeac240b804839ee1a1ca</hash>\n+        <hash alg=\"SHA-1\">a2503f302b11ebde7ebc3df41daebe0e4eea3689</hash>\n+        <hash alg=\"SHA-256\">961b2f6d87dbacc5d54abf45ab7a6e2495f89b75598962d8c723cea9bc210908</hash>\n+        <hash alg=\"SHA-512\">5bd78eed456ede30119319c5bed8e3e4c443b6fd7bdb3a7a5686647bd83094d0c3e2832a7575cfb60e4ef25f08106b93476939d3adcfecf5533cc030b3039e10</hash>\n+        <hash alg=\"SHA-384\">114f1e324d90ad887c177876d410f5787a8e8da6c48d4b2862d365802c0efded3a88cb24046976bf6276cadad3712f0f</hash>\n+        <hash alg=\"SHA3-384\">80288c03ad4d80d69f91d056ffc5570d49a9c76bf54ad2dff0121ecde26a560df76d05156f281f5c6db2a38ff07a873d</hash>\n+        <hash alg=\"SHA3-256\">5adfb5ccaf5f21a549422f426118a9542673926fcd18c68390cf813e791dcf6c</hash>\n+        <hash alg=\"SHA3-512\">7573f47f0babb53cefdc7c2309a0b982d800139064537b0797da442853d081010ad7c3c74a500598a0f800639a5d540eca21963ea652c68613907059bd4278c2</hash>\n       </hashes>\n       <licenses>\n         <license>\n-          <id>MIT</id>\n-          <url>https://opensource.org/licenses/MIT</url>\n+          <id>Apache-2.0</id>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar</purl>\n+      <purl>pkg:maven/commons-io/commons-io@2.11.0?type=jar</purl>\n       <modified>false</modified>\n+      <externalReferences>\n+        <reference type=\"issue-tracker\">\n+          <url>https://issues.apache.org/jira/browse/IO</url>\n+        </reference>\n+        <reference type=\"vcs\">\n+          <url>https://gitbox.apache.org/repos/asf?p=commons-io.git</url>\n+        </reference>\n+      </externalReferences>\n+    </component>\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-resource-bundle@1.6.0?type=jar\">\n+      <group>org.jreleaser</group>\n+      <name>jreleaser-resource-bundle</name>\n+      <version>1.6.0</version>\n+      <description>JReleaser resource bundle</description>\n+      <hashes>\n+        <hash alg=\"MD5\">8419930ec5e42489dad5e26749a994eb</hash>\n+        <hash alg=\"SHA-1\">050aba092fa794e0cb91158de894a97aff581356</hash>\n+        <hash alg=\"SHA-256\">38434b31fac439399aa37018fa69302a9d1b04be6efb7b23d53d18615e1f4f2b</hash>\n+        <hash alg=\"SHA-512\">c77c476e972e17b25de3aecf75d71482535d68cdc5e4bf556f5d4cab17345b9318d47fa42c9da671769f9bcf7f549efde70b64eff5cb189c805bb406fd705cb8</hash>\n+        <hash alg=\"SHA-384\">b1d8f56681f39c638806e669447d9600507946448b528060d98afc2123c637980ba5609aba4b357c83acd772bfbdb73e</hash>\n+        <hash alg=\"SHA3-384\">74a52a9891c520a0f90ffbab33da0219cd787bbe309ae8eca303de00c6041692554e8d650a6a3925e057322bd00700ff</hash>\n+        <hash alg=\"SHA3-256\">304bae90a7c53e6ad711e54bb8847c3eedc0e18cac03bffa14729918cb59efce</hash>\n+        <hash alg=\"SHA3-512\">16a31cb40ed20dcaa5d34cb6aa2b81325f285b7feb5dda2486206496449fd548ef51117b38a8074a4a106fba9836de72232762dff60f535cd76f5848860c2f6c</hash>\n+      </hashes>\n+      <licenses>\n+        <license>\n+          <id>Apache-2.0</id>\n+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>\n+        </license>\n+      </licenses>\n+      <purl>pkg:maven/org.jreleaser/jreleaser-resource-bundle@1.6.0?type=jar</purl>\n+      <modified>false</modified>\n+      <externalReferences>\n+        <reference type=\"vcs\">\n+          <url>https://github.com/jreleaser/jreleaser</url>\n+        </reference>\n+      </externalReferences>\n     </component>\n     <component type=\"library\" bom-ref=\"pkg:maven/org.tukaani/xz@1.9?type=jar\">\n       <group>org.tukaani</group>\n       <name>xz</name>\n       <version>1.9</version>\n       <description>XZ data compression</description>\n       <hashes>\n@@ -452,130 +410,47 @@\n       <modified>false</modified>\n       <externalReferences>\n         <reference type=\"vcs\">\n           <url>https://git.tukaani.org/?p=xz-java.git</url>\n         </reference>\n       </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-model-impl@1.6.0?type=jar\">\n-      <group>org.jreleaser</group>\n-      <name>jreleaser-model-impl</name>\n-      <version>1.6.0</version>\n-      <hashes>\n-        <hash alg=\"MD5\">d2760fed3ab0f395c3ec08c3f7493d52</hash>\n-        <hash alg=\"SHA-1\">37f35b86cc5bcdf8c7d306d97884c2d89fa742d5</hash>\n-        <hash alg=\"SHA-256\">284a61227c9f031b6b6928bfef76eeea45c97e6053b7a1190e3dd64c0effd8df</hash>\n-        <hash alg=\"SHA-512\">81899b65d3eb10b0dac885ee17b45822d12d5746141876ef2573b0afaec13c92187ebf8a6c446ce002f25f8bc3d40f1a88e1c8c548bd35a556efc86d9f5ed809</hash>\n-        <hash alg=\"SHA-384\">c961c3d7d900e27341988545b53d9bc8f89275e700799e41b56dc43444173e1bf962e00f96026de0fee5894594d40d6f</hash>\n-        <hash alg=\"SHA3-384\">984a6c6ab7487eeb35b3aa8d87754d4dd55bdcbcce9239bd0ec17b1ca63e1a66e4f34767476bd5b79e0998477ccc7c35</hash>\n-        <hash alg=\"SHA3-256\">a5b874d301532774b825877e6d29045492c60e20a00d55d096e0a3b371885a41</hash>\n-        <hash alg=\"SHA3-512\">83babeb5dc661f2a4f4082872615c1c70719c66ac3f2071f367a82d1b7e44390121d4e59ace75f0fdbc66f5277c306242ee491de2268d49bc5c9da4247b260e9</hash>\n-      </hashes>\n-      <licenses/>\n-      <purl>pkg:maven/org.jreleaser/jreleaser-model-impl@1.6.0?type=jar</purl>\n-      <modified>false</modified>\n-    </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/io.github.openfeign/feign-jackson@12.3?type=jar\">\n-      <group>io.github.openfeign</group>\n-      <name>feign-jackson</name>\n-      <version>12.3</version>\n-      <description>Feign Jackson</description>\n-      <hashes>\n-        <hash alg=\"MD5\">8bbba5bba4c26edb1b5c89e1a4912c22</hash>\n-        <hash alg=\"SHA-1\">583c0ce0354e6ed81d998d5b8f1786ade1e9f2c4</hash>\n-        <hash alg=\"SHA-256\">1dfc43d604693ce51ef3935f27dbfecd2d65636699a088eee32ff37cc50ea479</hash>\n-        <hash alg=\"SHA-512\">8ea71fae9a2a4ad9d06f27e21e078001e1a29761af85e81b91bf2a38e4dd8841184a12fdf467915c234d080aa28484452fe45b9bc0a381ce23d8366b03be1395</hash>\n-        <hash alg=\"SHA-384\">03553ac35a79266a150940fc62d3da7a389b47825102d91392f37b719da94af2d2355c2592d2b68604bf84248c73baf9</hash>\n-        <hash alg=\"SHA3-384\">986284d22c0bbb7abfbc1762447a44d0919c266002d6925c4ca75040f3950a3d943a71dedf2f72592e6a185218c498a9</hash>\n-        <hash alg=\"SHA3-256\">60242fd373d71575ffcb8a4f866b27d291b6acecf83be67e6ff51a13559dc016</hash>\n-        <hash alg=\"SHA3-512\">b7e0392fc793f19b3daf64c7e7b875fb2e4ec7ba2f1681d51c14c5c9efd5991817766753e62999a76bad83c624601f9f5a55304c4e06d2e3cd88ec4c609a1ede</hash>\n-      </hashes>\n-      <licenses>\n-        <license>\n-          <id>Apache-2.0</id>\n-        </license>\n-      </licenses>\n-      <purl>pkg:maven/io.github.openfeign/feign-jackson@12.3?type=jar</purl>\n-      <modified>false</modified>\n-    </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-webhooks-java-sdk@1.6.0?type=jar\">\n-      <group>org.jreleaser</group>\n-      <name>jreleaser-webhooks-java-sdk</name>\n-      <version>1.6.0</version>\n-      <hashes>\n-        <hash alg=\"MD5\">f57f28ed21eca592af5df56d8270bcdb</hash>\n-        <hash alg=\"SHA-1\">5b492eb059bafbec89108ab86a7f2deaa5b9a976</hash>\n-        <hash alg=\"SHA-256\">6efa516483596a2d89d358da2d13070cecf6c8811473152d137de6af7f24b933</hash>\n-        <hash alg=\"SHA-512\">96d830d498e8be929060f2abb77e44c1906c8395a39d6ba855c4773b0c05dd4e79b4a166bf63a0424f84db99e612c176647fa0e18a8d8e8d4595fbefdda1d58c</hash>\n-        <hash alg=\"SHA-384\">25c4f0d99e610d6f28826bba6305199bfb1726aa7c874f86d6b45164d1e6504dd4be94b212e86616c55a5fb4d8da392d</hash>\n-        <hash alg=\"SHA3-384\">8bbe66311465f2f4dc36c49f0aa47ceaf180a61d5a6b533b466631fff16d7733d68e883c1f766bd23d7ca9a041cc4cd0</hash>\n-        <hash alg=\"SHA3-256\">c46e8ca6ca0c6dca95faa94eb869831f7afbac466352467d2821474037473db6</hash>\n-        <hash alg=\"SHA3-512\">a772358f29b4ab8c77bc466cf7c15e0082464b8ef6fca6d65fc9351bdcb287b6a93480537a2a014fe1efef52a199658027d7fa1e4ebbf1a147440fd2c9b4b730</hash>\n-      </hashes>\n-      <licenses/>\n-      <purl>pkg:maven/org.jreleaser/jreleaser-webhooks-java-sdk@1.6.0?type=jar</purl>\n-      <modified>false</modified>\n-    </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.apache.commons/commons-compress@1.22?type=jar\">\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.apache.commons/commons-jexl3@3.3?type=jar\">\n       <group>org.apache.commons</group>\n-      <name>commons-compress</name>\n-      <version>1.22</version>\n-      <description>Apache Commons Compress software defines an API for working with\n-compression and archive formats.  These include: bzip2, gzip, pack200,\n-lzma, xz, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4,\n-Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.</description>\n+      <name>commons-jexl3</name>\n+      <version>3.3</version>\n+      <description>JEXL is a library intended to facilitate the implementation of scripting features in\n+        applications and frameworks written in Java.</description>\n       <hashes>\n-        <hash alg=\"MD5\">f1e4db16fee4291212d91409313a8086</hash>\n-        <hash alg=\"SHA-1\">691a8b4e6cf4248c3bc72c8b719337d5cb7359fa</hash>\n-        <hash alg=\"SHA-256\">53d04a0efc7223baecaa303bd5d298eb0600e6b82b4076f9cecd558b97ba760b</hash>\n-        <hash alg=\"SHA-512\">2d64fa6cd081fff5d73ee662a82f6186991fc13b4bdaee18b5f1bdcab06d9acb70e3713d18b296337791448251fbd6768bd84afaa817a10547652d0cfa885563</hash>\n-        <hash alg=\"SHA-384\">295d7f69d151abbd784e1c4d021c77ce43e129bb5bda0c55762b32d77c8607863383297674ec8a212ea3dfe4007b0044</hash>\n-        <hash alg=\"SHA3-384\">af04eb1b4647b1a041c5ee994c2c7a32556b5410b916fedb69905f166938baa43ba54fdc67084205794c02680d3c6349</hash>\n-        <hash alg=\"SHA3-256\">40f2960e82adfb171b0c5430271fdb0c0dae243aaf9b08021df54fd4d4a3a0b0</hash>\n-        <hash alg=\"SHA3-512\">f2c445f77bda3ef230a2b78ea88d86e48a7d6db36805f841d5cffe1f178842a161b2fda0b0d60162af210f18ed9c5bb9579c963291c26f715c1aa389d9a6785c</hash>\n+        <hash alg=\"MD5\">3a332e3beb67b3a2a20bd0a950fc57c4</hash>\n+        <hash alg=\"SHA-1\">c76b4cfa436c3e79e04806e62656b09968c388ba</hash>\n+        <hash alg=\"SHA-256\">07b0ff6c5a10ffb2e2c02da9e2c0e2e6702df44178cfb76881f69447fc386014</hash>\n+        <hash alg=\"SHA-512\">879111d1c3ad021ea3961e49161b3ff6ba251044ffef1ca4d36d880d9a09b1f395e17eef221a13274303f44e116204ae4b2a3ee3e931f117fc901e321d59b5c6</hash>\n+        <hash alg=\"SHA-384\">7a268bf2c903be86813fcc7f06158abf79d558ee59ebf03470ebd06ca6e6d169beb1c3600e07c20c4f95fa7827fde841</hash>\n+        <hash alg=\"SHA3-384\">1803d239f17f7eeee6edb69d38c4473319fd4eeeb684eda5c38b577a7aaf42965ce41d9082d515d5007be9a0b0712d81</hash>\n+        <hash alg=\"SHA3-256\">01163da5e720b6d1f6bf8b6e9e398d26a1be92b3f18ef6089d218d54166b0c01</hash>\n+        <hash alg=\"SHA3-512\">8abdd72c14492340c05fd5d3555682a308ac00ac1b1e1e15ae38abc47f454f50db9e0727a49df72a50bf49f1447a6ca9dadc48b9ffd45a043bcbae9e5e050d3d</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/org.apache.commons/commons-compress@1.22?type=jar</purl>\n+      <purl>pkg:maven/org.apache.commons/commons-jexl3@3.3?type=jar</purl>\n       <modified>false</modified>\n       <externalReferences>\n         <reference type=\"issue-tracker\">\n-          <url>https://issues.apache.org/jira/browse/COMPRESS</url>\n+          <url>https://issues.apache.org/jira/browse/JEXL</url>\n         </reference>\n         <reference type=\"vcs\">\n-          <url>https://gitbox.apache.org/repos/asf?p=commons-compress.git</url>\n+          <url>https://gitbox.apache.org/repos/asf/commons-jexl.git</url>\n         </reference>\n       </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar\">\n-      <group>org.apache.httpcomponents</group>\n-      <name>httpclient</name>\n-      <version>4.5.13</version>\n-      <description>Apache HttpComponents Client</description>\n-      <hashes>\n-        <hash alg=\"MD5\">40d6b9075fbd28fa10292a45a0db9457</hash>\n-        <hash alg=\"SHA-1\">e5f6cae5ca7ecaac1ec2827a9e2d65ae2869cada</hash>\n-        <hash alg=\"SHA-256\">6fe9026a566c6a5001608cf3fc32196641f6c1e5e1986d1037ccdbd5f31ef743</hash>\n-        <hash alg=\"SHA-512\">3567739186e551f84cad3e4b6b270c5b8b19aba297675a96bcdff3663ff7d20d188611d21f675fe5ff1bfd7d8ca31362070910d7b92ab1b699872a120aa6f089</hash>\n-        <hash alg=\"SHA-384\">093ac3e2dde58e34aa70309c7305eb3c9b5be2509a9293f1672494da55479a86bd112e83326746dc7a32855472952b99</hash>\n-        <hash alg=\"SHA3-384\">cd6882e7868624164e460f2f3ea01466f863c0dcb902b031c656b57356f563be83b29530df41d88d634ed3d01fc9964d</hash>\n-        <hash alg=\"SHA3-256\">710b1d8d7dae0b8e4270756694ca9c83d64965f42d3b4170c609b14d47c2762c</hash>\n-        <hash alg=\"SHA3-512\">276fa6a6599dc89382d658115695cf4da6b0d39b34e9c349c17a5dbd64122eaee553bb9ed75c0378ec4a83be157c8aa39370662de3c9b8fd55ebc1dd608383e6</hash>\n-      </hashes>\n-      <licenses>\n-        <license>\n-          <id>Apache-2.0</id>\n-        </license>\n-      </licenses>\n-      <purl>pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar</purl>\n-      <modified>false</modified>\n-    </component>\n     <component type=\"library\" bom-ref=\"pkg:maven/org.apache.tika/tika-core@2.7.0?type=jar\">\n       <publisher>The Apache Software Foundation</publisher>\n       <group>org.apache.tika</group>\n       <name>tika-core</name>\n       <version>2.7.0</version>\n       <description>This is the core Apache Tika\u2122 toolkit library from which all other modules inherit functionality. It\n     also\n@@ -606,262 +481,418 @@\n           <url>https://builds.apache.org/job/Tika-trunk/</url>\n         </reference>\n         <reference type=\"issue-tracker\">\n           <url>https://issues.apache.org/jira/browse/TIKA</url>\n         </reference>\n       </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-tool-java-sdk@1.6.0?type=jar\">\n-      <group>org.jreleaser</group>\n-      <name>jreleaser-tool-java-sdk</name>\n-      <version>1.6.0</version>\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.bouncycastle/bcprov-jdk15on@1.70?type=jar\">\n+      <group>org.bouncycastle</group>\n+      <name>bcprov-jdk15on</name>\n+      <version>1.70</version>\n+      <description>The Bouncy Castle Crypto package is a Java implementation of cryptographic algorithms. This jar contains JCE provider and lightweight API for the Bouncy Castle Cryptography APIs for JDK 1.5 and up.</description>\n       <hashes>\n-        <hash alg=\"MD5\">abfd7ce4581351b44b505c26c1367955</hash>\n-        <hash alg=\"SHA-1\">ef1e1b370a0a24a202089f732598f82ce91c74f2</hash>\n-        <hash alg=\"SHA-256\">a4bcf1548d74752460e28bd3ab7e43b779b5a8f446285b8e7643dd83983f5b7f</hash>\n-        <hash alg=\"SHA-512\">e14548ab617020cac195b98b2b6bf04043cf409ef395783e8c2c38441c761f38dd34b4858d4d7e26d2c69fde233ccaa102f180d3ff547efc29e475d0c38b7b40</hash>\n-        <hash alg=\"SHA-384\">85953ec5ec2714df877d6012db03c5d88a971dcb35cfc43c197570e8e2b010c1c292e228e4fe8c7f93418e11868b8654</hash>\n-        <hash alg=\"SHA3-384\">cb294f21ab1d8a8c8f488e2f60b456e66985b55dbb5ecc56646b57fc6fbb9e36aa69801bdb6c1ea5825288baab329183</hash>\n-        <hash alg=\"SHA3-256\">cf8c1f78e8630a84e28269970a18752616d82aec3a5d9297459244fb4d52980a</hash>\n-        <hash alg=\"SHA3-512\">bd42233ee963b74dd472abde6801b8140f3ec1b08e503e486bd7c8ef7575e65a72f0bd8a3ca996adbc832d4df6be8e2b500a425b77dfdfd80e57818af84a79c2</hash>\n+        <hash alg=\"MD5\">1809d0449a6374279c01fdd3be26cd92</hash>\n+        <hash alg=\"SHA-1\">4636a0d01f74acaf28082fb62b317f1080118371</hash>\n+        <hash alg=\"SHA-256\">8f3c20e3e2d565d26f33e8d4857a37d0d7f8ac39b62a7026496fcab1bdac30d4</hash>\n+        <hash alg=\"SHA-512\">7dccfc636ee4df1487615818cfa99c69941081df95e8ef1eaf4bca165594dff9547e3774fd70de3418abace77d2c45889f70bcd2e6823f8539f359e68eaf36d1</hash>\n+        <hash alg=\"SHA-384\">a0b35d204cd962f1d246fa94b6e8b0fcee1a7c3f37b7e87cda742f2124a25b48794ce11a903ea8d12009c86227b6808d</hash>\n+        <hash alg=\"SHA3-384\">980d81d3d9906764bbf2ae9b3b364ea58628b485ce1dc3d06734e10495d79f2be2e7cc7df61ac88cd67c1104c7af9393</hash>\n+        <hash alg=\"SHA3-256\">10a3572e42d29f609721d795116e3e5d0f6f03efef84bb979ce72e26908d242b</hash>\n+        <hash alg=\"SHA3-512\">a0761cb6deeb86c94b96850c72c0a0eaf516ca849f4b8268f9f60c9ed2a6730e692c15098d47e617da294e931113c6cbcaddec8957c9f029fa595b5f14ff35ac</hash>\n       </hashes>\n-      <licenses/>\n-      <purl>pkg:maven/org.jreleaser/jreleaser-tool-java-sdk@1.6.0?type=jar</purl>\n+      <licenses>\n+        <license>\n+          <name>Bouncy Castle Licence</name>\n+          <url>https://www.bouncycastle.org/licence.html</url>\n+        </license>\n+      </licenses>\n+      <purl>pkg:maven/org.bouncycastle/bcprov-jdk15on@1.70?type=jar</purl>\n       <modified>false</modified>\n+      <externalReferences>\n+        <reference type=\"issue-tracker\">\n+          <url>https://github.com/bcgit/bc-java/issues</url>\n+        </reference>\n+        <reference type=\"vcs\">\n+          <url>https://github.com/bcgit/bc-java</url>\n+        </reference>\n+      </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.2?type=jar\">\n-      <group>com.fasterxml.jackson.core</group>\n-      <name>jackson-databind</name>\n-      <version>2.14.2</version>\n-      <description>General data-binding functionality for Jackson: works on core streaming API</description>\n-      <hashes>\n-        <hash alg=\"MD5\">c1b12dd14734cd1986132bf55042dd7e</hash>\n-        <hash alg=\"SHA-1\">01e71fddbc80bb86f71a6345ac1e8ab8a00e7134</hash>\n-        <hash alg=\"SHA-256\">501d3abce4d18dcc381058ec593c5b94477906bba6efbac14dae40a642f77424</hash>\n-        <hash alg=\"SHA-512\">85473a29d23292f49092af9e7a7a63993206847c53b3e71f3c67245d68f7b19cc7c341e0ece409eb5e96602df98a848e957d8691fdd2c5fcddd807df9078255e</hash>\n-        <hash alg=\"SHA-384\">5c54d6c497cb329c3424a30319bf657ea222349eadc5ae74c30e8dc1525d7b60b7785f4d20370267b03343dd738cc13e</hash>\n-        <hash alg=\"SHA3-384\">98ff0b2a4dfc1faf319d4b0d38376c3c7a58b65d071db293232eed810adf2e525fecee3be45c99b41e20cf6a3a8ebef9</hash>\n-        <hash alg=\"SHA3-256\">2dba45f78a0d37402083975e18dbb3201705faf7e533c3e9721b9364c2a1ab0f</hash>\n-        <hash alg=\"SHA3-512\">76ef73198269cfd0922f4ae86c8b7e6a9cd1b96ee55da43ebfe57dd34365cc1c5c5630fadf79e46156a52b6b96b7d1f694f5e4f5c4f6a3d3ebb31c927e414435</hash>\n-      </hashes>\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-model-impl@1.6.0?type=jar\">\n+      <group>org.jreleaser</group>\n+      <name>jreleaser-model-impl</name>\n+      <version>1.6.0</version>\n+      <description>JReleaser Model implementation</description>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.2?type=jar</purl>\n+      <purl>pkg:maven/org.jreleaser/jreleaser-model-impl@1.6.0?type=jar</purl>\n       <modified>false</modified>\n       <externalReferences>\n         <reference type=\"vcs\">\n-          <url>https://github.com/FasterXML/jackson-databind</url>\n+          <url>https://github.com/jreleaser/jreleaser</url>\n         </reference>\n       </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-resource-bundle@1.6.0?type=jar\">\n-      <group>org.jreleaser</group>\n-      <name>jreleaser-resource-bundle</name>\n-      <version>1.6.0</version>\n+    <component type=\"library\" bom-ref=\"pkg:maven/com.github.luben/zstd-jni@1.5.4-1?type=jar\">\n+      <publisher>com.github.luben</publisher>\n+      <group>com.github.luben</group>\n+      <name>zstd-jni</name>\n+      <version>1.5.4-1</version>\n+      <description>JNI bindings for Zstd native library that provides fast and high compression lossless algorithm for Java and all JVM languages.</description>\n       <hashes>\n-        <hash alg=\"MD5\">8419930ec5e42489dad5e26749a994eb</hash>\n-        <hash alg=\"SHA-1\">050aba092fa794e0cb91158de894a97aff581356</hash>\n-        <hash alg=\"SHA-256\">38434b31fac439399aa37018fa69302a9d1b04be6efb7b23d53d18615e1f4f2b</hash>\n-        <hash alg=\"SHA-512\">c77c476e972e17b25de3aecf75d71482535d68cdc5e4bf556f5d4cab17345b9318d47fa42c9da671769f9bcf7f549efde70b64eff5cb189c805bb406fd705cb8</hash>\n-        <hash alg=\"SHA-384\">b1d8f56681f39c638806e669447d9600507946448b528060d98afc2123c637980ba5609aba4b357c83acd772bfbdb73e</hash>\n-        <hash alg=\"SHA3-384\">74a52a9891c520a0f90ffbab33da0219cd787bbe309ae8eca303de00c6041692554e8d650a6a3925e057322bd00700ff</hash>\n-        <hash alg=\"SHA3-256\">304bae90a7c53e6ad711e54bb8847c3eedc0e18cac03bffa14729918cb59efce</hash>\n-        <hash alg=\"SHA3-512\">16a31cb40ed20dcaa5d34cb6aa2b81325f285b7feb5dda2486206496449fd548ef51117b38a8074a4a106fba9836de72232762dff60f535cd76f5848860c2f6c</hash>\n+        <hash alg=\"MD5\">e787241d6ec56aac451be8b0d920c85b</hash>\n+        <hash alg=\"SHA-1\">291ccaacc039e41932de877303edb6af98a91c24</hash>\n+        <hash alg=\"SHA-256\">f0469d891127dc5ae6bd2df93a5aa38c4d79bcd5f360fbb88c2785b52a572349</hash>\n+        <hash alg=\"SHA-512\">368916f0057d69fa4ba3768f6f617291ce4083b89913e46c2daa68cc94c48b92e0ca626241486f34a4d154502eb77b19e82c16c68b341ecfc82ccc0520f8d4a9</hash>\n+        <hash alg=\"SHA-384\">7e72184873689fa286d93d88f69f8baa24f818fcd61105a14332fbb5ed254363c0969afa98befd797a3762577bc77993</hash>\n+        <hash alg=\"SHA3-384\">1302636797b291dbbe19f39bdeb66160c1317b395a0a9360ba93aeaa262de7ad8de7257e6a997a9c659fdf53b3367ee6</hash>\n+        <hash alg=\"SHA3-256\">54505ed16257a55330bb44c76719a687251d2623fa5e50a192b54c5067573255</hash>\n+        <hash alg=\"SHA3-512\">6e01cc9654c2d68c36a284e23c388267ac7013d534cceed0b6ab44679a6bbb6d03d4cfc52c967c4e76dbd5b8963c268e40d9890c927866ea00824821b0ecb82d</hash>\n       </hashes>\n-      <licenses/>\n-      <purl>pkg:maven/org.jreleaser/jreleaser-resource-bundle@1.6.0?type=jar</purl>\n+      <licenses>\n+        <license>\n+          <id>BSD-2-Clause</id>\n+        </license>\n+      </licenses>\n+      <purl>pkg:maven/com.github.luben/zstd-jni@1.5.4-1?type=jar</purl>\n       <modified>false</modified>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/com.googlecode.javaewah/JavaEWAH@1.2.3?type=jar\">\n-      <group>com.googlecode.javaewah</group>\n-      <name>JavaEWAH</name>\n-      <version>1.2.3</version>\n-      <description>The bit array data structure is implemented in Java as the BitSet class. Unfortunately, this fails to scale without compression.\n-  JavaEWAH is a word-aligned compressed variant of the Java bitset class. It uses a 64-bit run-length encoding (RLE) compression scheme.\n-  The goal of word-aligned compression is not to achieve the best compression, but rather to improve query processing time. Hence, we try to save CPU cycles, maybe at the expense of storage. However, the EWAH scheme we implemented is always more efficient storage-wise than an uncompressed bitmap (implemented in Java as the BitSet class). Unlike some alternatives, javaewah does not rely on a patented scheme.</description>\n+    <component type=\"library\" bom-ref=\"pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.2?type=jar\">\n+      <group>com.fasterxml.jackson.core</group>\n+      <name>jackson-annotations</name>\n+      <version>2.14.2</version>\n+      <description>Core annotations used for value types, used by Jackson data binding package.</description>\n       <hashes>\n-        <hash alg=\"MD5\">8fdeda28c1fb10e67b3d79f86bef5e61</hash>\n-        <hash alg=\"SHA-1\">13a27c856e0c8808cee9a64032c58eee11c3adc9</hash>\n-        <hash alg=\"SHA-256\">d65226949713c4c61a784f41c51167e7b0316f93764398ebba9e4336b3d954c2</hash>\n-        <hash alg=\"SHA-512\">48cd9df9252c58e9ffe4583e68607944bcdf2ad7a3be7b4317467f503c4f56cdbde358ca7c4f34fa620d01615072a42f3a572fc4f1237e266310b7508e79bcac</hash>\n-        <hash alg=\"SHA-384\">d1fd074f21b8a54a07d3f4579376d7c3ab72f24814ebc9ba92344e9da4721e9bfa3cda3a599137e4ddf2395a3c5b88e4</hash>\n-        <hash alg=\"SHA3-384\">a553864f196f73c139a104170ab79e780046fb5f322072c5494a6590361021f875afd7168f858b0531b61918ab49b94e</hash>\n-        <hash alg=\"SHA3-256\">bab97f3f893af36c36218a151b0c3fece27d47f358cc19e1ca9c22d77942bb76</hash>\n-        <hash alg=\"SHA3-512\">be817b93c7093d44ec8dded565d7e5651772ce38e9c72283c05191b33d0ecb2798cd385395f553500446573ac49dccc21f4ba3067d71eb89e03daa384d0193be</hash>\n+        <hash alg=\"MD5\">10d19982a8890f6eb37557af2f58e272</hash>\n+        <hash alg=\"SHA-1\">a7aae9525864930723e3453ab799521fdfd9d873</hash>\n+        <hash alg=\"SHA-256\">2c6869d505cf60dc066734b7d50339f975bd3adc635e26a78abb71acb4473c0d</hash>\n+        <hash alg=\"SHA-512\">a978384791bdc074df8039ffc95bb93f0f60d14d476861ee2a0ce208b33a991c486a07345cb80559252c3ff1dea14d3efb818c19bdc18435946dc8754d8e6ee3</hash>\n+        <hash alg=\"SHA-384\">d5111c69020666689414921ae4a8950f9fbdf86dec1360f6827beeee9ebd3f78db74e69c76e0becaba47eb34fdaaeb5a</hash>\n+        <hash alg=\"SHA3-384\">53b1a8891482e16a7d8849251cb0dcd1aacf6aaa2161a73589d9742ad96763e384d426d04db762e56fc4536f4e719084</hash>\n+        <hash alg=\"SHA3-256\">14f7b3c51c96f7429f7c60a69e3b7e4f9f2207820141f197d56b57018ffd5640</hash>\n+        <hash alg=\"SHA3-512\">75e4e4fb847fdacdd497cf6b340362581ab4091120ccf2ec32a273709d336af0f78c90ce12b2dd1d17354aa08583af0d3ded89bb415720f45f2d9c110d71dd7a</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/com.googlecode.javaewah/JavaEWAH@1.2.3?type=jar</purl>\n+      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.2?type=jar</purl>\n       <modified>false</modified>\n       <externalReferences>\n-        <reference type=\"issue-tracker\">\n-          <url>https://github.com/lemire/javaewah/issues</url>\n-        </reference>\n         <reference type=\"vcs\">\n-          <url>scm:git:git@github.com:lemire/javaewah.git</url>\n+          <url>https://github.com/FasterXML/jackson-annotations</url>\n         </reference>\n       </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/commons-io/commons-io@2.11.0?type=jar\">\n-      <group>commons-io</group>\n-      <name>commons-io</name>\n-      <version>2.11.0</version>\n-      <description>The Apache Commons IO library contains utility classes, stream implementations, file filters,\n-file comparators, endian transformation classes, and much more.</description>\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-logger-api@1.6.0?type=jar\">\n+      <group>org.jreleaser</group>\n+      <name>jreleaser-logger-api</name>\n+      <version>1.6.0</version>\n+      <description>JReleaser logger API</description>\n       <hashes>\n-        <hash alg=\"MD5\">3b4b7ccfaeceeac240b804839ee1a1ca</hash>\n-        <hash alg=\"SHA-1\">a2503f302b11ebde7ebc3df41daebe0e4eea3689</hash>\n-        <hash alg=\"SHA-256\">961b2f6d87dbacc5d54abf45ab7a6e2495f89b75598962d8c723cea9bc210908</hash>\n-        <hash alg=\"SHA-512\">5bd78eed456ede30119319c5bed8e3e4c443b6fd7bdb3a7a5686647bd83094d0c3e2832a7575cfb60e4ef25f08106b93476939d3adcfecf5533cc030b3039e10</hash>\n-        <hash alg=\"SHA-384\">114f1e324d90ad887c177876d410f5787a8e8da6c48d4b2862d365802c0efded3a88cb24046976bf6276cadad3712f0f</hash>\n-        <hash alg=\"SHA3-384\">80288c03ad4d80d69f91d056ffc5570d49a9c76bf54ad2dff0121ecde26a560df76d05156f281f5c6db2a38ff07a873d</hash>\n-        <hash alg=\"SHA3-256\">5adfb5ccaf5f21a549422f426118a9542673926fcd18c68390cf813e791dcf6c</hash>\n-        <hash alg=\"SHA3-512\">7573f47f0babb53cefdc7c2309a0b982d800139064537b0797da442853d081010ad7c3c74a500598a0f800639a5d540eca21963ea652c68613907059bd4278c2</hash>\n+        <hash alg=\"MD5\">e7da806a3427ab10405584067d880ead</hash>\n+        <hash alg=\"SHA-1\">92ae4e1826cf1d8321fcefd3f4ece0fa5cc4fc94</hash>\n+        <hash alg=\"SHA-256\">372d4b6cee7af83429f9f054a69f73d38d6fb4c983b14ce97f2599791d59aee9</hash>\n+        <hash alg=\"SHA-512\">c4f4edf49e18f475b7b44677497250cd93af45e302fb39306a94dc8f0ee1f783921967de3e1f1b7591f970a359080f43b24c1499a363280d904c2519d2e9bcb2</hash>\n+        <hash alg=\"SHA-384\">fcdadd6f2e8af30a7761e98f5c717ab1b8f6f0a79825a711454c8c9cc9842cf8fe0f5917b5ea48603eb0ee5788ed7a8b</hash>\n+        <hash alg=\"SHA3-384\">42a3e276d69efc85ce5798c5cd78ba1a910ef328169fb39a1a685eea5b98e9c3bf495124f56b518d553f1ca2e63d62f7</hash>\n+        <hash alg=\"SHA3-256\">0fb4d06e278df39d6633d1a09ed01ad4f7788838668f2ebc097f919384cec97d</hash>\n+        <hash alg=\"SHA3-512\">bb5a8b000955af1038d4d75c0fd8786561b3a2cf7bb804e09e42518a0bcc3e23ab01dd5236de4bdb58fd9b1a0e923982eb6cc6d0e450896bed9c86dfe808675d</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/commons-io/commons-io@2.11.0?type=jar</purl>\n+      <purl>pkg:maven/org.jreleaser/jreleaser-logger-api@1.6.0?type=jar</purl>\n       <modified>false</modified>\n       <externalReferences>\n-        <reference type=\"issue-tracker\">\n-          <url>https://issues.apache.org/jira/browse/IO</url>\n-        </reference>\n         <reference type=\"vcs\">\n-          <url>https://gitbox.apache.org/repos/asf?p=commons-io.git</url>\n+          <url>https://github.com/jreleaser/jreleaser</url>\n         </reference>\n       </externalReferences>\n     </component>\n+    <component type=\"library\" bom-ref=\"pkg:maven/io.github.openfeign.form/feign-form@3.8.0?type=jar\">\n+      <group>io.github.openfeign.form</group>\n+      <name>feign-form</name>\n+      <version>3.8.0</version>\n+      <hashes>\n+        <hash alg=\"MD5\">ab48cdaa9aecefe5e938873ba2db3bb0</hash>\n+        <hash alg=\"SHA-1\">3083889996b18443c275a352d3ab4bc6c8321598</hash>\n+        <hash alg=\"SHA-256\">b21d37321b390995c90b5dbb4ff0c33f09d1cc7768207cc0da910ad20bf58961</hash>\n+        <hash alg=\"SHA-512\">3a1718c21e4caffcd5f686d2cde011b2f72a026d03caa03b876ad6e7c8c40b7bd59189eed6efa0654bf988a438775ef2c429fae497d502c1806c8c4d9d474c2e</hash>\n+        <hash alg=\"SHA-384\">02b96ee7cb8c67cdfe63422247035cbb003b7423a82756714d36de926118ac5e96c407fd324090c851962c63f7d4fd6f</hash>\n+        <hash alg=\"SHA3-384\">0d63a4c22216be6259584b62d3753a86220ea181a002641cda45de153501272fd79b7064d21bdee0ecd8129194fd7c3e</hash>\n+        <hash alg=\"SHA3-256\">ffc2832df09d0edf0251c5e6def39b6c36fd2c02c55ad29f0e63e3160cb709e1</hash>\n+        <hash alg=\"SHA3-512\">c2013da332e97e32962ee34459c5834b04ab2f6598960cb06e4f247a2683ced3fac3919d15151be4dae083c74911c7ead1906faabfc8a7cb6245fcd7138ef0df</hash>\n+      </hashes>\n+      <licenses>\n+        <license>\n+          <id>Apache-2.0</id>\n+        </license>\n+      </licenses>\n+      <purl>pkg:maven/io.github.openfeign.form/feign-form@3.8.0?type=jar</purl>\n+      <modified>false</modified>\n+    </component>\n     <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-utils@1.6.0?type=jar\">\n       <group>org.jreleaser</group>\n       <name>jreleaser-utils</name>\n       <version>1.6.0</version>\n-      <hashes>\n-        <hash alg=\"MD5\">ca784b5aa352b016a37b393e9e500325</hash>\n-        <hash alg=\"SHA-1\">b0dde5ebbe5a98e5fa90b101dca5ad56e92c49c8</hash>\n-        <hash alg=\"SHA-256\">02b038af2f098d6019b94f4f4e55b8f901d2b5b4a072b083b23e47bd6a3e23cd</hash>\n-        <hash alg=\"SHA-512\">9b5e03766473ee854f877182a758a4842a9566772405af73cd200388eeeb981712e6a3e57f4f2f14f09a912b0cad625a75c5441b57eaa238699beabf327dd56a</hash>\n-        <hash alg=\"SHA-384\">ebc800a8a0a6d19ac2bc922598f8913df5a5eb972dc46ba4eadec5034538c9c95866839670dbf92ca93b075dcb659a0c</hash>\n-        <hash alg=\"SHA3-384\">ed0ba35caf8b7d7dc67d7350617b6cbd54de336634fd5927f03768a89f74ede798ecf343964ef0484302ee262617756b</hash>\n-        <hash alg=\"SHA3-256\">b81154ce5c428820626ee1a99e7f9bbe63d4803f7f311744a26bb8331fb193cc</hash>\n-        <hash alg=\"SHA3-512\">b6429f8944cedd026f7b0c30328f8b5e2717493624cee82df48f7e69c8fe8a26b0542d447b1795c7fad7ff90affadcc087d69a576d69cbaccf3ccf1ca962be56</hash>\n-      </hashes>\n-      <licenses/>\n+      <description>JReleaser utility classes</description>\n+      <licenses>\n+        <license>\n+          <id>Apache-2.0</id>\n+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>\n+        </license>\n+      </licenses>\n       <purl>pkg:maven/org.jreleaser/jreleaser-utils@1.6.0?type=jar</purl>\n       <modified>false</modified>\n+      <externalReferences>\n+        <reference type=\"vcs\">\n+          <url>https://github.com/jreleaser/jreleaser</url>\n+        </reference>\n+      </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.bouncycastle/bcprov-jdk15on@1.70?type=jar\">\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.bouncycastle/bcpg-jdk15on@1.70?type=jar\">\n       <group>org.bouncycastle</group>\n-      <name>bcprov-jdk15on</name>\n+      <name>bcpg-jdk15on</name>\n       <version>1.70</version>\n-      <description>The Bouncy Castle Crypto package is a Java implementation of cryptographic algorithms. This jar contains JCE provider and lightweight API for the Bouncy Castle Cryptography APIs for JDK 1.5 and up.</description>\n+      <description>The Bouncy Castle Java API for handling the OpenPGP protocol. This jar contains the OpenPGP API for JDK 1.5 and up. The APIs can be used in conjunction with a JCE/JCA provider such as the one provided with the Bouncy Castle Cryptography APIs.</description>\n       <hashes>\n-        <hash alg=\"MD5\">1809d0449a6374279c01fdd3be26cd92</hash>\n-        <hash alg=\"SHA-1\">4636a0d01f74acaf28082fb62b317f1080118371</hash>\n-        <hash alg=\"SHA-256\">8f3c20e3e2d565d26f33e8d4857a37d0d7f8ac39b62a7026496fcab1bdac30d4</hash>\n-        <hash alg=\"SHA-512\">7dccfc636ee4df1487615818cfa99c69941081df95e8ef1eaf4bca165594dff9547e3774fd70de3418abace77d2c45889f70bcd2e6823f8539f359e68eaf36d1</hash>\n-        <hash alg=\"SHA-384\">a0b35d204cd962f1d246fa94b6e8b0fcee1a7c3f37b7e87cda742f2124a25b48794ce11a903ea8d12009c86227b6808d</hash>\n-        <hash alg=\"SHA3-384\">980d81d3d9906764bbf2ae9b3b364ea58628b485ce1dc3d06734e10495d79f2be2e7cc7df61ac88cd67c1104c7af9393</hash>\n-        <hash alg=\"SHA3-256\">10a3572e42d29f609721d795116e3e5d0f6f03efef84bb979ce72e26908d242b</hash>\n-        <hash alg=\"SHA3-512\">a0761cb6deeb86c94b96850c72c0a0eaf516ca849f4b8268f9f60c9ed2a6730e692c15098d47e617da294e931113c6cbcaddec8957c9f029fa595b5f14ff35ac</hash>\n+        <hash alg=\"MD5\">01ddc3aa0289346f4db19d95039cefdb</hash>\n+        <hash alg=\"SHA-1\">062f72ec06f31a6c31a3f3355fce0384b21126d7</hash>\n+        <hash alg=\"SHA-256\">4f08f4aa74048824151c98dd3e92e7165ac30659834404f08a8e843bdad32847</hash>\n+        <hash alg=\"SHA-512\">4e240b7811ef90c090e83a181dace41da487555e4136221861b0060f9af6d8b316f2dd0472f747adb98ca5372f46055456ef04bdc0c3992188ab13302922fce9</hash>\n+        <hash alg=\"SHA-384\">d89dec6226112d13cbea461d84740699770dd7d8ad3f67ab65e7b49fd08a096a948e54da2e6a681925c4320f410bba37</hash>\n+        <hash alg=\"SHA3-384\">5e8e8ca63cc550a8f50b627c4dd051f0eb5c31b99ff53dabd7d5f5d1ed98d0dc1d4963a09fc0db32f8e0ff769a2a6e65</hash>\n+        <hash alg=\"SHA3-256\">77f28e7e22b3b3a8d7b667fb7f783847c4b11ee7208833636e09e8b38390fd51</hash>\n+        <hash alg=\"SHA3-512\">cb238dbb641c42c49b5801bdfa6432395e860c1a7485ba68e2d57887e3d22ff254718c6cbfa34c107bfb09d74e2f85c33b95f89dfa886e141a8247a0abf2b5c2</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <name>Bouncy Castle Licence</name>\n           <url>https://www.bouncycastle.org/licence.html</url>\n         </license>\n+        <license>\n+          <id>Apache-1.1</id>\n+          <url>http://apache.org/licenses/LICENSE-1.1</url>\n+        </license>\n       </licenses>\n-      <purl>pkg:maven/org.bouncycastle/bcprov-jdk15on@1.70?type=jar</purl>\n+      <purl>pkg:maven/org.bouncycastle/bcpg-jdk15on@1.70?type=jar</purl>\n       <modified>false</modified>\n       <externalReferences>\n         <reference type=\"issue-tracker\">\n           <url>https://github.com/bcgit/bc-java/issues</url>\n         </reference>\n         <reference type=\"vcs\">\n           <url>https://github.com/bcgit/bc-java</url>\n         </reference>\n       </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-signing-java-sdk@1.6.0?type=jar\">\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-java-sdk-commons@1.6.0?type=jar\">\n       <group>org.jreleaser</group>\n-      <name>jreleaser-signing-java-sdk</name>\n+      <name>jreleaser-java-sdk-commons</name>\n       <version>1.6.0</version>\n+      <description>Utilities for Java SDKs</description>\n+      <licenses>\n+        <license>\n+          <id>Apache-2.0</id>\n+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>\n+        </license>\n+      </licenses>\n+      <purl>pkg:maven/org.jreleaser/jreleaser-java-sdk-commons@1.6.0?type=jar</purl>\n+      <modified>false</modified>\n+      <externalReferences>\n+        <reference type=\"vcs\">\n+          <url>https://github.com/jreleaser/jreleaser</url>\n+        </reference>\n+      </externalReferences>\n+    </component>\n+    <component type=\"library\" bom-ref=\"pkg:maven/io.github.openfeign/feign-jackson@12.3?type=jar\">\n+      <group>io.github.openfeign</group>\n+      <name>feign-jackson</name>\n+      <version>12.3</version>\n+      <description>Feign Jackson</description>\n       <hashes>\n-        <hash alg=\"MD5\">2608fa713b1fa2a515ec2c83ec96a49c</hash>\n-        <hash alg=\"SHA-1\">f0de8990fee988060fe7721d389d6ba8aad481a4</hash>\n-        <hash alg=\"SHA-256\">ea0e35358f453eee98d0a4e921bfa6114c04afe52adb0c74bcc5200092971454</hash>\n-        <hash alg=\"SHA-512\">4d0146d43526b329139bb38edbe63f6f783ae99f5d2778c6c6af8851be458739afe31951bf8e54f85da7c6e5d5e7d4670b45917c6ffa855f578355a6359286a6</hash>\n-        <hash alg=\"SHA-384\">a29024fbd6fb57818b5800cb961a043d4d131e4c16d0b6965a4abd4ef275001bd607697195f562e6b3d4f36fac5847b0</hash>\n-        <hash alg=\"SHA3-384\">5b9e053c6b9a48483a7cdd898f37fc72275171348ed4433b9759e0a4f86edad6a26c84ed69eae8612811e17b806df60a</hash>\n-        <hash alg=\"SHA3-256\">477c36bff3a1ec95810622a43d43ea9b1c614c54306897d9c4ee66f2a349a9e9</hash>\n-        <hash alg=\"SHA3-512\">b6594d20048651c4982230202c5af186f064025bf80d21c87d4cacb3d1b466bc1e5c850fea374edf9c3c98fda734ea52284bd62bbd456aee903c705152d767da</hash>\n+        <hash alg=\"MD5\">8bbba5bba4c26edb1b5c89e1a4912c22</hash>\n+        <hash alg=\"SHA-1\">583c0ce0354e6ed81d998d5b8f1786ade1e9f2c4</hash>\n+        <hash alg=\"SHA-256\">1dfc43d604693ce51ef3935f27dbfecd2d65636699a088eee32ff37cc50ea479</hash>\n+        <hash alg=\"SHA-512\">8ea71fae9a2a4ad9d06f27e21e078001e1a29761af85e81b91bf2a38e4dd8841184a12fdf467915c234d080aa28484452fe45b9bc0a381ce23d8366b03be1395</hash>\n+        <hash alg=\"SHA-384\">03553ac35a79266a150940fc62d3da7a389b47825102d91392f37b719da94af2d2355c2592d2b68604bf84248c73baf9</hash>\n+        <hash alg=\"SHA3-384\">986284d22c0bbb7abfbc1762447a44d0919c266002d6925c4ca75040f3950a3d943a71dedf2f72592e6a185218c498a9</hash>\n+        <hash alg=\"SHA3-256\">60242fd373d71575ffcb8a4f866b27d291b6acecf83be67e6ff51a13559dc016</hash>\n+        <hash alg=\"SHA3-512\">b7e0392fc793f19b3daf64c7e7b875fb2e4ec7ba2f1681d51c14c5c9efd5991817766753e62999a76bad83c624601f9f5a55304c4e06d2e3cd88ec4c609a1ede</hash>\n       </hashes>\n-      <licenses/>\n-      <purl>pkg:maven/org.jreleaser/jreleaser-signing-java-sdk@1.6.0?type=jar</purl>\n+      <licenses>\n+        <license>\n+          <id>Apache-2.0</id>\n+        </license>\n+      </licenses>\n+      <purl>pkg:maven/io.github.openfeign/feign-jackson@12.3?type=jar</purl>\n       <modified>false</modified>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/com.github.spullara.mustache.java/compiler@0.9.10?type=jar\">\n-      <group>com.github.spullara.mustache.java</group>\n-      <name>compiler</name>\n-      <version>0.9.10</version>\n-      <description>Implementation of mustache.js for Java</description>\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-git-java-sdk@1.6.0?type=jar\">\n+      <group>org.jreleaser</group>\n+      <name>jreleaser-git-java-sdk</name>\n+      <version>1.6.0</version>\n+      <description>Java SDK for Git</description>\n+      <licenses>\n+        <license>\n+          <id>Apache-2.0</id>\n+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>\n+        </license>\n+      </licenses>\n+      <purl>pkg:maven/org.jreleaser/jreleaser-git-java-sdk@1.6.0?type=jar</purl>\n+      <modified>false</modified>\n+      <externalReferences>\n+        <reference type=\"vcs\">\n+          <url>https://github.com/jreleaser/jreleaser</url>\n+        </reference>\n+      </externalReferences>\n+    </component>\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-model-api@1.6.0?type=jar\">\n+      <group>org.jreleaser</group>\n+      <name>jreleaser-model-api</name>\n+      <version>1.6.0</version>\n+      <description>JReleaser Model API</description>\n+      <licenses>\n+        <license>\n+          <id>Apache-2.0</id>\n+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>\n+        </license>\n+      </licenses>\n+      <purl>pkg:maven/org.jreleaser/jreleaser-model-api@1.6.0?type=jar</purl>\n+      <modified>false</modified>\n+      <externalReferences>\n+        <reference type=\"vcs\">\n+          <url>https://github.com/jreleaser/jreleaser</url>\n+        </reference>\n+      </externalReferences>\n+    </component>\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.eclipse.jgit/org.eclipse.jgit@5.13.0.202109080827-r?type=jar\">\n+      <group>org.eclipse.jgit</group>\n+      <name>org.eclipse.jgit</name>\n+      <version>5.13.0.202109080827-r</version>\n+      <description>Repository access and algorithms</description>\n       <hashes>\n-        <hash alg=\"MD5\">5638fc78a17d5063cc4b0d00f6e87491</hash>\n-        <hash alg=\"SHA-1\">6111ae24e3be9ecbd75f5fe908583fc14b4f0174</hash>\n-        <hash alg=\"SHA-256\">2b5a9217811cb99846a473fa8e0d233eb33629347b7f44941f6c0fbd4cdf1038</hash>\n-        <hash alg=\"SHA-512\">2ccf3196af2b518c96df748a72a0122d033dc222e1fab3e12f3e2094146d44bec20bd1502390b59abf090cbdf5dd4d580084b07fb7241248b5b8da2605207559</hash>\n-        <hash alg=\"SHA-384\">0204e77a4a64701af5000df6601f4f4c23cb5e53dd39a1325615d4f942cd2c91d04bbac20348ae49731f586282165c33</hash>\n-        <hash alg=\"SHA3-384\">0960da7175835484471f485d481499f8b65f134ff4f1629618560adaa5a08caa897fbefcea190f93106ee9e3273381b2</hash>\n-        <hash alg=\"SHA3-256\">cfb7e640392ef590069e6b1d059dc20b8fcff984a4b267b3969fcf50ed0edd4f</hash>\n-        <hash alg=\"SHA3-512\">db3dad3809879bca835a04da890fd86dbc58ba6637c72f07d02e39d13645ebb6c640b7fecc18a779e58946072078bdf114b91445026a32dd6501b5d1c6e7d933</hash>\n+        <hash alg=\"MD5\">5a1f197785cb9c69d1241cb0f16937a2</hash>\n+        <hash alg=\"SHA-1\">32badd5adebd660424509344259ad3e409699ba2</hash>\n+        <hash alg=\"SHA-256\">dabf8369f0cdf8cf17b7f7da4bda9320c570bb754c88e0beb7b852812cf5cd25</hash>\n+        <hash alg=\"SHA-512\">768dbb3ba2649a7025338197b4703b414983e4608138719b0d69201f7f49e57e0454846b41b775b135b083f820824749da6121f20a812c4f155a97f09c9b15ac</hash>\n+        <hash alg=\"SHA-384\">deb24e724ace28ddbaf5e7a1fafaa449a49b97d3a5a53eb487a2ab90895f05684c48a839e3677643364ff965cc33af95</hash>\n+        <hash alg=\"SHA3-384\">e5aed5403b4c28624bc58be31601897555c94eb54e680f1ccb59992a643db24d0de465b7ae879b5ba29d56a132a87b69</hash>\n+        <hash alg=\"SHA3-256\">8ccc07758fbf1ac55028538890afe7d209c866ee019875ef15acfaea9ac7244f</hash>\n+        <hash alg=\"SHA3-512\">4725fff9b6067d70d4c82cbf549b16be521e839d5c8ecf605f9a71516ec78334e348cb2d3303afb7ba18ce464a68c1e195bb6fe673d9d4d6b8d75c84d0b4e101</hash>\n+      </hashes>\n+      <licenses>\n+        <license>\n+          <id>BSD-3-Clause</id>\n+        </license>\n+      </licenses>\n+      <purl>pkg:maven/org.eclipse.jgit/org.eclipse.jgit@5.13.0.202109080827-r?type=jar</purl>\n+      <modified>false</modified>\n+    </component>\n+    <component type=\"library\" bom-ref=\"pkg:maven/io.github.openfeign/feign-core@12.3?type=jar\">\n+      <group>io.github.openfeign</group>\n+      <name>feign-core</name>\n+      <version>12.3</version>\n+      <description>Feign Core</description>\n+      <hashes>\n+        <hash alg=\"MD5\">9e6e1ff8b68d2b6c1fc5bdc7ff208030</hash>\n+        <hash alg=\"SHA-1\">d280b09a17b63e69788fd3d8d215b7013ab48b16</hash>\n+        <hash alg=\"SHA-256\">939fbed2c2392a9633bc1d26f0ef9e934b059d1a9a9d4d966cedaf9075c546ec</hash>\n+        <hash alg=\"SHA-512\">8335901d8918747dc29d37a2ac630c6a78ea6ff04bfea77e6d8c74188e9e584142920996c45120caa86299486949a04e1ec1f1bef30229904360fcb5c5d4a1c4</hash>\n+        <hash alg=\"SHA-384\">dc7a0d10bdf2c3aeafba83ca7e41d21c3288f3df0b76e339788fcf7606381970b6429108dbf2d1212075d1feba040842</hash>\n+        <hash alg=\"SHA3-384\">2907938ea76735cde9b34676c6c8b04786f1595687f96734e7659768175cb7a525508f84c48d9b10b0b2f593158e1ed5</hash>\n+        <hash alg=\"SHA3-256\">474f6b0ab420bf63549ed123fff99b73fc881771c6a0c591e58dfb17adbe9899</hash>\n+        <hash alg=\"SHA3-512\">553a6dc1c3cf7facdb3b4e15be1d6d90259f1d36ce137db3a6e53a967ef4939aaa98c974b059c8f32dd42316bb7eee3b51910cf0fb172d0df9b8ff39d8cc722d</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n+        </license>\n+      </licenses>\n+      <purl>pkg:maven/io.github.openfeign/feign-core@12.3?type=jar</purl>\n+      <modified>false</modified>\n+    </component>\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-signing-java-sdk@1.6.0?type=jar\">\n+      <group>org.jreleaser</group>\n+      <name>jreleaser-signing-java-sdk</name>\n+      <version>1.6.0</version>\n+      <description>JReleaser signing Java SDK</description>\n+      <licenses>\n+        <license>\n+          <id>Apache-2.0</id>\n           <url>https://www.apache.org/licenses/LICENSE-2.0</url>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/com.github.spullara.mustache.java/compiler@0.9.10?type=jar</purl>\n+      <purl>pkg:maven/org.jreleaser/jreleaser-signing-java-sdk@1.6.0?type=jar</purl>\n       <modified>false</modified>\n       <externalReferences>\n         <reference type=\"vcs\">\n-          <url>http://github.com/spullara/mustache.java</url>\n+          <url>https://github.com/jreleaser/jreleaser</url>\n         </reference>\n       </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar\">\n-      <group>org.apache.httpcomponents</group>\n-      <name>httpcore</name>\n-      <version>4.4.16</version>\n-      <description>Apache HttpComponents Core (blocking I/O)</description>\n+    <component type=\"library\" bom-ref=\"pkg:maven/io.github.openfeign/feign-httpclient@12.3?type=jar\">\n+      <group>io.github.openfeign</group>\n+      <name>feign-httpclient</name>\n+      <version>12.3</version>\n+      <description>Feign Apache HttpClient</description>\n       <hashes>\n-        <hash alg=\"MD5\">28d2cd9bf8789fd2ec774fb88436ebd1</hash>\n-        <hash alg=\"SHA-1\">51cf043c87253c9f58b539c9f7e44c8894223850</hash>\n-        <hash alg=\"SHA-256\">6c9b3dd142a09dc468e23ad39aad6f75a0f2b85125104469f026e52a474e464f</hash>\n-        <hash alg=\"SHA-512\">168026436a6bcf5e96c0c59606638abbdc30de4b405ae55afde70fdf2895e267a3d48bba6bdadc5a89f38e31da3d9a9dc91e1cab7ea76f5e04322cf1ec63b838</hash>\n-        <hash alg=\"SHA-384\">ba9ceaee1a37ca3201d6a1315ecb0327b495489efd0baa155c219c475df8d3eb69fe77ab0026563db406497626da6562</hash>\n-        <hash alg=\"SHA3-384\">b9dc44dcc7cc86d5036f26d54c4003a2d72808ae7b07a0808bb53505c6d4281b5ad213eb1f3d0fef1113dec57cb0dfe1</hash>\n-        <hash alg=\"SHA3-256\">fd8ab51846476c6c18822151c9ec07b39a9633010b5d20ea937fc6910407bc64</hash>\n-        <hash alg=\"SHA3-512\">b42fa528242981a9d70e4f68ab75a24292df5112c44c21b6f18cb9201ce747885ba1d4dc69bc3d14d0da46a6c2638f937c11bc45749abeb55dc89ddada90cdda</hash>\n+        <hash alg=\"MD5\">4ec31fa7f187c15f9967c7ffcf714449</hash>\n+        <hash alg=\"SHA-1\">0ea51fdb4797c3ab62e1f8a726d4e02cf522dba2</hash>\n+        <hash alg=\"SHA-256\">3a2833e18cc868bff19d6320f22054f96995dc073ed27edfeb2d83996d2ef37c</hash>\n+        <hash alg=\"SHA-512\">3440afa129150c035670cd098e6eba6f676afc82db2db53a10b20621e30658b411d820652e4668dab5ca615f599a41a06dc826378b5e783f88f26c2cddfce8ed</hash>\n+        <hash alg=\"SHA-384\">b8dc38126b28fb486d459e23ae61a34073f16f0ef7ec37f49636919d0fd5a8d86354d76314462dba94efd4f613db92ef</hash>\n+        <hash alg=\"SHA3-384\">7c4161078011223122067406e5ad6efedfcf45c71d6e081f37e3fba1c73578c748d5a5e60d372a5fa7159ec7737e71bb</hash>\n+        <hash alg=\"SHA3-256\">b6d851642b9a5628dbe3cab5706c9d434f1d59ec881cd5cdf6fae84f644eb7c1</hash>\n+        <hash alg=\"SHA3-512\">9b3b7edc25efc7345a9cc7b2fe0eccefd57fa40d62e6a85b4a698827b9c34ff568236d591f6d5645de7eb275be2b10aee80f42881f6068f0b1c38f274faf4c5f</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar</purl>\n+      <purl>pkg:maven/io.github.openfeign/feign-httpclient@12.3?type=jar</purl>\n+      <modified>false</modified>\n+    </component>\n+    <component type=\"library\" bom-ref=\"pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.2?type=jar\">\n+      <group>com.fasterxml.jackson.core</group>\n+      <name>jackson-core</name>\n+      <version>2.14.2</version>\n+      <description>Core Jackson processing abstractions (aka Streaming API), implementation for JSON</description>\n+      <hashes>\n+        <hash alg=\"MD5\">6ee422ee4c481b2d5aacb2b5e36a7dc0</hash>\n+        <hash alg=\"SHA-1\">f804090e6399ce0cf78242db086017512dd71fcc</hash>\n+        <hash alg=\"SHA-256\">b5d37a77c88277b97e3593c8740925216c06df8e4172bbde058528df04ad3e7a</hash>\n+        <hash alg=\"SHA-512\">208953cf72691b3bab1ca2f9a045cccd3d75c46c90099ba884fbf16bc3e45045e5cd014d2c68c96e8a8826f87a5f0e18cb34b35e7ef03348953869c21e197367</hash>\n+        <hash alg=\"SHA-384\">e806595862c5fcdae801d9845befc1d12c97e6036ee839d34590dbd785a422d5832cf4fc5c7ee6e1a5ee7a59f37740f0</hash>\n+        <hash alg=\"SHA3-384\">4fa59f572f2e100e2eba6fc664a3b9f804fabd911a552cb40805f39e624a9c04246b679cf4b017bb782c8272877f49d2</hash>\n+        <hash alg=\"SHA3-256\">cef17d3a539cbf798cfb0bfa9faffa2b7baff3670b50743e91ee58b4c60b59f1</hash>\n+        <hash alg=\"SHA3-512\">fceeed5cb8fe4335d88282d15657762a4728483275a7ff45f50b9fe6a999757ccb37c415d001eb6250226f98f5c576b1b36a83e601fb393cfd34a811c2df5d00</hash>\n+      </hashes>\n+      <licenses>\n+        <license>\n+          <id>Apache-2.0</id>\n+        </license>\n+      </licenses>\n+      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.2?type=jar</purl>\n       <modified>false</modified>\n+      <externalReferences>\n+        <reference type=\"vcs\">\n+          <url>https://github.com/FasterXML/jackson-core</url>\n+        </reference>\n+      </externalReferences>\n     </component>\n   </components>\n   <dependencies>\n     <dependency ref=\"pkg:maven/org.jreleaser/jreleaser-git-java-sdk@1.6.0?type=jar\">\n       <dependency ref=\"pkg:maven/org.jreleaser/jreleaser-model-impl@1.6.0?type=jar\"/>\n       <dependency ref=\"pkg:maven/org.eclipse.jgit/org.eclipse.jgit@5.13.0.202109080827-r?type=jar\"/>\n     </dependency>\n"}]}
