{"diffoscope-json-version": 1, "source1": "/input1", "source2": "/input2", "unified_diff": null, "details": [{"source1": "/input1", "source2": "/input2", "unified_diff": "@@ -1,11 +1,11 @@\n <?xml version=\"1.0\" encoding=\"utf-8\"?>\n-<bom xmlns=\"http://cyclonedx.org/schema/bom/1.4\" serialNumber=\"urn:uuid:56ef6c74-148f-4a22-a8c9-066f8747f86b\" version=\"1\">\n+<bom xmlns=\"http://cyclonedx.org/schema/bom/1.4\" serialNumber=\"urn:uuid:a6fcb368-4ee4-4780-8d09-9e95e209edef\" version=\"1\">\n   <metadata>\n-    <timestamp>2023-04-29T10:08:04Z</timestamp>\n+    <timestamp>2025-07-11T06:29:41Z</timestamp>\n     <tools>\n       <tool>\n         <vendor>CycloneDX</vendor>\n         <name>cyclonedx-gradle-plugin</name>\n         <version>1.7.4</version>\n       </tool>\n     </tools>\n@@ -13,364 +13,234 @@\n       <group>org.jreleaser</group>\n       <name>jreleaser-maven-plugin</name>\n       <version>1.6.0</version>\n       <purl>pkg:maven/org.jreleaser/jreleaser-maven-plugin@1.6.0?type=jar</purl>\n     </component>\n   </metadata>\n   <components>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar\">\n-      <group>org.apache.commons</group>\n-      <name>commons-lang3</name>\n-      <version>3.12.0</version>\n-      <description>Apache Commons Lang, a package of Java utility classes for the\n-  classes that are in java.lang's hierarchy, or are considered to be so\n-  standard as to justify existence in java.lang.</description>\n+    <component type=\"library\" bom-ref=\"pkg:maven/commons-codec/commons-codec@1.15?type=jar\">\n+      <group>commons-codec</group>\n+      <name>commons-codec</name>\n+      <version>1.15</version>\n+      <description>The Apache Commons Codec package contains simple encoder and decoders for\n+     various formats such as Base64 and Hexadecimal.  In addition to these\n+     widely used encoders and decoders, the codec package also maintains a\n+     collection of phonetic encoding utilities.</description>\n       <hashes>\n-        <hash alg=\"MD5\">19fe50567358922bdad277959ea69545</hash>\n-        <hash alg=\"SHA-1\">c6842c86792ff03b9f1d1fe2aab8dc23aa6c6f0e</hash>\n-        <hash alg=\"SHA-256\">d919d904486c037f8d193412da0c92e22a9fa24230b9d67a57855c5c31c7e94e</hash>\n-        <hash alg=\"SHA-512\">fbdbc0943cb3498b0148e86a39b773f97c8e6013740f72dbc727faeabea402073e2cc8c4d68198e5fc6b08a13b7700236292e99d4785f2c9989f2e5fac11fd81</hash>\n-        <hash alg=\"SHA-384\">c34b8a0e0eba2168ad56fedeb7a1d710b6f1d3f1ce6aae99a4e0247bd120efbbadc8dcb2f731045b8a16e3efd30604dc</hash>\n-        <hash alg=\"SHA3-384\">8ad6ebe7754bf0caa8cda7e59c0e95360d76e06a7ad6aeec5637985519dbd1dd06e7eed04711039f36ec4c49de280def</hash>\n-        <hash alg=\"SHA3-256\">18ef639b2aeeb5aedffb18dbf20c79f33e300d99fb31b131689639cc470e6e4c</hash>\n-        <hash alg=\"SHA3-512\">fbea96114dcf4f31cfaaa99987be756ddda3a6c74f8c835461997df794d54b92da1f60fe5c3f1f2a43cb8c5f5db7f4048bef77c70993673c7a93f3660fffc8da</hash>\n+        <hash alg=\"MD5\">303baf002ce6d382198090aedd9d79a2</hash>\n+        <hash alg=\"SHA-1\">49d94806b6e3dc933dacbd8acb0fdbab8ebd1e5d</hash>\n+        <hash alg=\"SHA-256\">b3e9f6d63a790109bf0d056611fbed1cf69055826defeb9894a71369d246ed63</hash>\n+        <hash alg=\"SHA-512\">da30a716770795fce390e4dd340a8b728f220c6572383ffef55bd5839655d5611fcc06128b2144f6cdcb36f53072a12ec80b04afee787665e7ad0b6e888a6787</hash>\n+        <hash alg=\"SHA-384\">05d0506283716472175d44c2a4766523397bf8a007c18848f9c9a61718cc8aa437f9cb4b91771037ab29a960860b62a0</hash>\n+        <hash alg=\"SHA3-384\">12fad4ef78274b06f97b1243cea6f970088abde082d2de9377d915a34b44f7d7d67807c03e59c849b69f1544e2a9a1be</hash>\n+        <hash alg=\"SHA3-256\">87be248f33f241121f54aad61a9a460a79eabefbf1b5b0dd22aeb95b581f727e</hash>\n+        <hash alg=\"SHA3-512\">8c992c9c569ebaa0bf956a4c5b34fbf5e1ed1c212c2dd896fa216183ee0bcd341e96698af4b9cec7e8880762faa081a3d3a27f51349aa457cb8e373e4f57c788</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar</purl>\n+      <purl>pkg:maven/commons-codec/commons-codec@1.15?type=jar</purl>\n       <modified>false</modified>\n       <externalReferences>\n         <reference type=\"issue-tracker\">\n-          <url>https://issues.apache.org/jira/browse/LANG</url>\n+          <url>https://issues.apache.org/jira/browse/CODEC</url>\n         </reference>\n         <reference type=\"vcs\">\n-          <url>https://gitbox.apache.org/repos/asf?p=commons-lang.git</url>\n+          <url>https://github.com/apache/commons-codec</url>\n         </reference>\n       </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/software.amazon.awssdk/json-utils@2.20.51?type=jar\">\n-      <group>software.amazon.awssdk</group>\n-      <name>json-utils</name>\n-      <version>2.20.51</version>\n-      <hashes>\n-        <hash alg=\"MD5\">daab6d8ae17e1a11973375f56728c903</hash>\n-        <hash alg=\"SHA-1\">380afef1a1b6fd38ba14456b61e8a6d6e1720a12</hash>\n-        <hash alg=\"SHA-256\">3ff5d2db051e02de62ef1b6a8aa00da79da7cf5c6eeff7c9d99f4aa564c6664a</hash>\n-        <hash alg=\"SHA-512\">ad5aaba55bc87044973b3ad30478783cb932f0014bee1bde4da536f2883cdc9598cec81a946d87d22ef77bb7855029abddb65ee0c51385f4c35d7974f874d693</hash>\n-        <hash alg=\"SHA-384\">e060fc0648a681d6a570cbaea0658ec7a4104e505c15c662fd1ee4881a49709b9b7ed881b911e04860f8a06e4a98c232</hash>\n-        <hash alg=\"SHA3-384\">05ed45fcd2a958b0f504e1e044dfbfec0a8c390360dffc870b712bfc5a286ca7457c0cc41abf1aa5efa73a1d06c7b905</hash>\n-        <hash alg=\"SHA3-256\">e9a3c93b55fa7ab5ebe4c23593ca981daad2f7712cf1af66d8327b89dd10ecf8</hash>\n-        <hash alg=\"SHA3-512\">b2cda2e9492b5d2f2f82cea6c94efcffe3e4c03a817885d2d456aa06f73e652ca34e433f97168e7335f8641df679f0661800115912f975170edd3c7e9f87e8e7</hash>\n-      </hashes>\n-      <licenses>\n-        <license>\n-          <id>Apache-2.0</id>\n-        </license>\n-      </licenses>\n-      <purl>pkg:maven/software.amazon.awssdk/json-utils@2.20.51?type=jar</purl>\n-      <modified>false</modified>\n-    </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/io.github.openfeign/feign-core@12.3?type=jar\">\n-      <group>io.github.openfeign</group>\n-      <name>feign-core</name>\n-      <version>12.3</version>\n-      <description>Feign Core</description>\n-      <hashes>\n-        <hash alg=\"MD5\">9e6e1ff8b68d2b6c1fc5bdc7ff208030</hash>\n-        <hash alg=\"SHA-1\">d280b09a17b63e69788fd3d8d215b7013ab48b16</hash>\n-        <hash alg=\"SHA-256\">939fbed2c2392a9633bc1d26f0ef9e934b059d1a9a9d4d966cedaf9075c546ec</hash>\n-        <hash alg=\"SHA-512\">8335901d8918747dc29d37a2ac630c6a78ea6ff04bfea77e6d8c74188e9e584142920996c45120caa86299486949a04e1ec1f1bef30229904360fcb5c5d4a1c4</hash>\n-        <hash alg=\"SHA-384\">dc7a0d10bdf2c3aeafba83ca7e41d21c3288f3df0b76e339788fcf7606381970b6429108dbf2d1212075d1feba040842</hash>\n-        <hash alg=\"SHA3-384\">2907938ea76735cde9b34676c6c8b04786f1595687f96734e7659768175cb7a525508f84c48d9b10b0b2f593158e1ed5</hash>\n-        <hash alg=\"SHA3-256\">474f6b0ab420bf63549ed123fff99b73fc881771c6a0c591e58dfb17adbe9899</hash>\n-        <hash alg=\"SHA3-512\">553a6dc1c3cf7facdb3b4e15be1d6d90259f1d36ce137db3a6e53a967ef4939aaa98c974b059c8f32dd42316bb7eee3b51910cf0fb172d0df9b8ff39d8cc722d</hash>\n-      </hashes>\n-      <licenses>\n-        <license>\n-          <id>Apache-2.0</id>\n-        </license>\n-      </licenses>\n-      <purl>pkg:maven/io.github.openfeign/feign-core@12.3?type=jar</purl>\n-      <modified>false</modified>\n-    </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/software.amazon.awssdk/annotations@2.20.51?type=jar\">\n-      <group>software.amazon.awssdk</group>\n-      <name>annotations</name>\n-      <version>2.20.51</version>\n-      <hashes>\n-        <hash alg=\"MD5\">ae97e71d75206e01e31c40035b526530</hash>\n-        <hash alg=\"SHA-1\">8853a566050a2399151fd9eef221e0ad01f577f2</hash>\n-        <hash alg=\"SHA-256\">fb888f235b4b4874b709b0faf2389942dfeb52537facb10b2aad1a5d7b59a4f4</hash>\n-        <hash alg=\"SHA-512\">ef9414876b3137eff18ef33819903661f18dfdfc2d3409625fa5f115af410aef0434c8c272828758211e037cf3a4a1b2ca800d0a29418818af1929a2e1dff319</hash>\n-        <hash alg=\"SHA-384\">de026a3e857744c52616dafe26333d0ae81289cb064e00fea8bcf9af40e333e6d8e36b3520c7b09ab333af2b7b08b77a</hash>\n-        <hash alg=\"SHA3-384\">46054e5c10c6a26e5115a48fd7b32394734b0fe065368f8aa06aa997b9f6985b96f25171845ca33226a81f603e118018</hash>\n-        <hash alg=\"SHA3-256\">10e2eb2baec15986800000b92375d71fce07aed8a93257c1abf26b1b2c89c982</hash>\n-        <hash alg=\"SHA3-512\">c67bfa1183cee73fa9f7c3a323629d29b2ad96ef82a9df48a5b164cfe85237e279bccca2a5e6540d20ba722d31a3dfc241df50d9c5b7a5b08c5ff4ab2cb0635a</hash>\n-      </hashes>\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-webhooks-java-sdk@1.6.0?type=jar\">\n+      <group>org.jreleaser</group>\n+      <name>jreleaser-webhooks-java-sdk</name>\n+      <version>1.6.0</version>\n+      <description>Java SDK for Incoming Webhooks</description>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/software.amazon.awssdk/annotations@2.20.51?type=jar</purl>\n+      <purl>pkg:maven/org.jreleaser/jreleaser-webhooks-java-sdk@1.6.0?type=jar</purl>\n       <modified>false</modified>\n+      <externalReferences>\n+        <reference type=\"vcs\">\n+          <url>https://github.com/jreleaser/jreleaser</url>\n+        </reference>\n+      </externalReferences>\n     </component>\n     <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-http-java-sdk@1.6.0?type=jar\">\n       <group>org.jreleaser</group>\n       <name>jreleaser-http-java-sdk</name>\n       <version>1.6.0</version>\n-      <hashes>\n-        <hash alg=\"MD5\">1a6ecbbdac786278d7056a70a4ad104b</hash>\n-        <hash alg=\"SHA-1\">592a38a8adf6af90b3c7c924f99b76af902d779b</hash>\n-        <hash alg=\"SHA-256\">5bb4b37f0d2a7ea55760daa96dd41920822ff0d03d506637c4e173e52a707b0c</hash>\n-        <hash alg=\"SHA-512\">22de22899df69050e377f4e31ca414bbf83cb8fdd6064ae174de8d7d60f55a4f2309742a08a61cdc2275d5aff0555f076a9b9f39d2abfd51ae2f692dc8c4ba83</hash>\n-        <hash alg=\"SHA-384\">6dcbf1d8d3a864a955d61a41e6ad2544b821a110bed517d7dc4c81d57b2f62992c5325341bcb9c3551dd6b927dfd3fd0</hash>\n-        <hash alg=\"SHA3-384\">2a142dc2bbdd6032e413583a73418bca97d84b6e88754dea55819c2dd22a3b8780ff633a1c3046fda9fbf70558019e15</hash>\n-        <hash alg=\"SHA3-256\">6fd0b39a2abc0efe13ac48099719168270a48537c8235dae5dcaf92ce8c04d6e</hash>\n-        <hash alg=\"SHA3-512\">1701fa9271a876384f1b83080ae3a1dc727de275f8cf9b0523d19bac381fe8b10f994238e11357585d8c76b99d2b9a7ad50d36d91576b72884f4e0df5b377b98</hash>\n-      </hashes>\n-      <licenses/>\n-      <purl>pkg:maven/org.jreleaser/jreleaser-http-java-sdk@1.6.0?type=jar</purl>\n-      <modified>false</modified>\n-    </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.apache.commons/commons-jexl3@3.3?type=jar\">\n-      <group>org.apache.commons</group>\n-      <name>commons-jexl3</name>\n-      <version>3.3</version>\n-      <description>JEXL is a library intended to facilitate the implementation of scripting features in\n-        applications and frameworks written in Java.</description>\n-      <hashes>\n-        <hash alg=\"MD5\">3a332e3beb67b3a2a20bd0a950fc57c4</hash>\n-        <hash alg=\"SHA-1\">c76b4cfa436c3e79e04806e62656b09968c388ba</hash>\n-        <hash alg=\"SHA-256\">07b0ff6c5a10ffb2e2c02da9e2c0e2e6702df44178cfb76881f69447fc386014</hash>\n-        <hash alg=\"SHA-512\">879111d1c3ad021ea3961e49161b3ff6ba251044ffef1ca4d36d880d9a09b1f395e17eef221a13274303f44e116204ae4b2a3ee3e931f117fc901e321d59b5c6</hash>\n-        <hash alg=\"SHA-384\">7a268bf2c903be86813fcc7f06158abf79d558ee59ebf03470ebd06ca6e6d169beb1c3600e07c20c4f95fa7827fde841</hash>\n-        <hash alg=\"SHA3-384\">1803d239f17f7eeee6edb69d38c4473319fd4eeeb684eda5c38b577a7aaf42965ce41d9082d515d5007be9a0b0712d81</hash>\n-        <hash alg=\"SHA3-256\">01163da5e720b6d1f6bf8b6e9e398d26a1be92b3f18ef6089d218d54166b0c01</hash>\n-        <hash alg=\"SHA3-512\">8abdd72c14492340c05fd5d3555682a308ac00ac1b1e1e15ae38abc47f454f50db9e0727a49df72a50bf49f1447a6ca9dadc48b9ffd45a043bcbae9e5e050d3d</hash>\n-      </hashes>\n+      <description>Java SDK for Http uploads</description>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n           <url>https://www.apache.org/licenses/LICENSE-2.0</url>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/org.apache.commons/commons-jexl3@3.3?type=jar</purl>\n+      <purl>pkg:maven/org.jreleaser/jreleaser-http-java-sdk@1.6.0?type=jar</purl>\n       <modified>false</modified>\n       <externalReferences>\n-        <reference type=\"issue-tracker\">\n-          <url>https://issues.apache.org/jira/browse/JEXL</url>\n-        </reference>\n         <reference type=\"vcs\">\n-          <url>https://gitbox.apache.org/repos/asf/commons-jexl.git</url>\n+          <url>https://github.com/jreleaser/jreleaser</url>\n         </reference>\n       </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.eclipse.jgit/org.eclipse.jgit@5.13.0.202109080827-r?type=jar\">\n-      <group>org.eclipse.jgit</group>\n-      <name>org.eclipse.jgit</name>\n-      <version>5.13.0.202109080827-r</version>\n-      <description>Repository access and algorithms</description>\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar\">\n+      <group>org.apache.httpcomponents</group>\n+      <name>httpclient</name>\n+      <version>4.5.13</version>\n+      <description>Apache HttpComponents Client</description>\n       <hashes>\n-        <hash alg=\"MD5\">5a1f197785cb9c69d1241cb0f16937a2</hash>\n-        <hash alg=\"SHA-1\">32badd5adebd660424509344259ad3e409699ba2</hash>\n-        <hash alg=\"SHA-256\">dabf8369f0cdf8cf17b7f7da4bda9320c570bb754c88e0beb7b852812cf5cd25</hash>\n-        <hash alg=\"SHA-512\">768dbb3ba2649a7025338197b4703b414983e4608138719b0d69201f7f49e57e0454846b41b775b135b083f820824749da6121f20a812c4f155a97f09c9b15ac</hash>\n-        <hash alg=\"SHA-384\">deb24e724ace28ddbaf5e7a1fafaa449a49b97d3a5a53eb487a2ab90895f05684c48a839e3677643364ff965cc33af95</hash>\n-        <hash alg=\"SHA3-384\">e5aed5403b4c28624bc58be31601897555c94eb54e680f1ccb59992a643db24d0de465b7ae879b5ba29d56a132a87b69</hash>\n-        <hash alg=\"SHA3-256\">8ccc07758fbf1ac55028538890afe7d209c866ee019875ef15acfaea9ac7244f</hash>\n-        <hash alg=\"SHA3-512\">4725fff9b6067d70d4c82cbf549b16be521e839d5c8ecf605f9a71516ec78334e348cb2d3303afb7ba18ce464a68c1e195bb6fe673d9d4d6b8d75c84d0b4e101</hash>\n+        <hash alg=\"MD5\">40d6b9075fbd28fa10292a45a0db9457</hash>\n+        <hash alg=\"SHA-1\">e5f6cae5ca7ecaac1ec2827a9e2d65ae2869cada</hash>\n+        <hash alg=\"SHA-256\">6fe9026a566c6a5001608cf3fc32196641f6c1e5e1986d1037ccdbd5f31ef743</hash>\n+        <hash alg=\"SHA-512\">3567739186e551f84cad3e4b6b270c5b8b19aba297675a96bcdff3663ff7d20d188611d21f675fe5ff1bfd7d8ca31362070910d7b92ab1b699872a120aa6f089</hash>\n+        <hash alg=\"SHA-384\">093ac3e2dde58e34aa70309c7305eb3c9b5be2509a9293f1672494da55479a86bd112e83326746dc7a32855472952b99</hash>\n+        <hash alg=\"SHA3-384\">cd6882e7868624164e460f2f3ea01466f863c0dcb902b031c656b57356f563be83b29530df41d88d634ed3d01fc9964d</hash>\n+        <hash alg=\"SHA3-256\">710b1d8d7dae0b8e4270756694ca9c83d64965f42d3b4170c609b14d47c2762c</hash>\n+        <hash alg=\"SHA3-512\">276fa6a6599dc89382d658115695cf4da6b0d39b34e9c349c17a5dbd64122eaee553bb9ed75c0378ec4a83be157c8aa39370662de3c9b8fd55ebc1dd608383e6</hash>\n       </hashes>\n       <licenses>\n         <license>\n-          <id>BSD-3-Clause</id>\n+          <id>Apache-2.0</id>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/org.eclipse.jgit/org.eclipse.jgit@5.13.0.202109080827-r?type=jar</purl>\n+      <purl>pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar</purl>\n       <modified>false</modified>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.apache.maven.shared/maven-shared-utils@3.3.4?type=jar\">\n-      <group>org.apache.maven.shared</group>\n-      <name>maven-shared-utils</name>\n-      <version>3.3.4</version>\n-      <description>Shared utilities for use by Maven core and plugins</description>\n-      <hashes>\n-        <hash alg=\"MD5\">908f2a0107ff330ac9b856356a0acaef</hash>\n-        <hash alg=\"SHA-1\">f87a61adb1e12a00dcc6cc6005a51e693aa7c4ac</hash>\n-        <hash alg=\"SHA-256\">7925d9c5a0e2040d24b8fae3f612eb399cbffe5838b33ba368777dc7bddf6dda</hash>\n-        <hash alg=\"SHA-512\">c6693f8a061de74ac59c61d185f5b130cb574405cfc37febb8e73806ea64eea822a4a75c24098fb49b7871373091543a6f4c526c0842589e528cacad40e5554a</hash>\n-        <hash alg=\"SHA-384\">bc5b42831ff598f42dda54738be004a619d60201a009b04cb3aaa0dc343d0e4fbc423b19739391eb7c33efcac3c08dd5</hash>\n-        <hash alg=\"SHA3-384\">385bebb35d7ea13d92ae6a5afa9257b184a1fcf40cba077a103c7a91d39a4d3e0180a475febdba73ac75949968e77186</hash>\n-        <hash alg=\"SHA3-256\">888fde30d4f9a9e1b7c4c5e4d61f9cf0499192e5bc1212538e2e3320688e44da</hash>\n-        <hash alg=\"SHA3-512\">40b55bb907452777443b8162d456bf1d48e02bfd9124062faed9c9bf51e0f522d40b02f4c24eb39f760469ad226570876f0de6afecd74903112ec794f0aa9a78</hash>\n-      </hashes>\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-artifactory-java-sdk@1.6.0?type=jar\">\n+      <group>org.jreleaser</group>\n+      <name>jreleaser-artifactory-java-sdk</name>\n+      <version>1.6.0</version>\n+      <description>Java SDK for JFrog Artifactory</description>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/org.apache.maven.shared/maven-shared-utils@3.3.4?type=jar</purl>\n+      <purl>pkg:maven/org.jreleaser/jreleaser-artifactory-java-sdk@1.6.0?type=jar</purl>\n       <modified>false</modified>\n       <externalReferences>\n-        <reference type=\"build-system\">\n-          <url>https://ci-builds.apache.org/job/Maven/job/maven-box/job/maven-shared-utils/</url>\n-        </reference>\n-        <reference type=\"issue-tracker\">\n-          <url>https://issues.apache.org/jira/issues/?jql=project%20%3D%20MSHARED%20AND%20component%20%3D%20maven-shared-utils</url>\n+        <reference type=\"vcs\">\n+          <url>https://github.com/jreleaser/jreleaser</url>\n         </reference>\n       </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.codehaus.plexus/plexus-classworlds@2.7.0?type=jar\">\n-      <group>org.codehaus.plexus</group>\n-      <name>plexus-classworlds</name>\n-      <version>2.7.0</version>\n-      <description>A class loader framework</description>\n-      <hashes>\n-        <hash alg=\"MD5\">6ed852b1a004288c44438381e6aaee1e</hash>\n-        <hash alg=\"SHA-1\">fe6f1acefd1a302dd4bc6d9d7f15358828d2a44d</hash>\n-        <hash alg=\"SHA-256\">c60ae538ba66adbc06aae205fbe2306211d3d213ab6df3239ec03cdde2458ad6</hash>\n-        <hash alg=\"SHA-512\">8057b6c7d52aaa61a51aba6ec613e8bd1a094d62a84d50a37bfe7776ff53780f1602b6169242c3a60b28c9d496458baaac5377575553e4af881643490ccda912</hash>\n-        <hash alg=\"SHA-384\">4b079cab0a5f50631ef134f6578f4772f59897977d20ddef071920c107ca13cc3ce85d7b3c2bad586fb7a29fb4a4e07d</hash>\n-        <hash alg=\"SHA3-384\">1e4500603fc2ac0c080f4a7b127171103295571bc7e570e50f6c479c62667cf78cf177c09b92f39702864fff83e35f9f</hash>\n-        <hash alg=\"SHA3-256\">ff715bac48dda5b19e29e18e47dbba9015cfcdf3a949c19154ae9ea3e5951c60</hash>\n-        <hash alg=\"SHA3-512\">7bb6f86ea7300d4321fb78a0cfcbd2acc2b6639abb75e68e4bf1e301622ee1d41bdeed728aa49d74578918fe5da954860a29a9a6249e651db3edae941f816bf7</hash>\n-      </hashes>\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-engine@1.6.0?type=jar\">\n+      <group>org.jreleaser</group>\n+      <name>jreleaser-engine</name>\n+      <version>1.6.0</version>\n+      <description>JReleaser Engine</description>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/org.codehaus.plexus/plexus-classworlds@2.7.0?type=jar</purl>\n+      <purl>pkg:maven/org.jreleaser/jreleaser-engine@1.6.0?type=jar</purl>\n       <modified>false</modified>\n       <externalReferences>\n-        <reference type=\"issue-tracker\">\n-          <url>http://github.com/codehaus-plexus/plexus-classworlds/issues</url>\n+        <reference type=\"vcs\">\n+          <url>https://github.com/jreleaser/jreleaser</url>\n         </reference>\n       </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-sdkman-java-sdk@1.6.0?type=jar\">\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-gitter-java-sdk@1.6.0?type=jar\">\n       <group>org.jreleaser</group>\n-      <name>jreleaser-sdkman-java-sdk</name>\n+      <name>jreleaser-gitter-java-sdk</name>\n       <version>1.6.0</version>\n-      <hashes>\n-        <hash alg=\"MD5\">e20a416817af4c3d4e6f05f5439bd10d</hash>\n-        <hash alg=\"SHA-1\">139579d9df36ea943778e24bf49057235b1d6514</hash>\n-        <hash alg=\"SHA-256\">b24990f6223d3968c42db397a340dbd291c8e53c771a7993dfcf39c2b1baeecd</hash>\n-        <hash alg=\"SHA-512\">3934d3b6ddf8c1ea07b0a50ec703c9dce2a547214d0aeb482a3e6924ae89c84fd6cc0209fb7d0898012197b8f6d48b56038df603778620ec82cf8ab1d007de22</hash>\n-        <hash alg=\"SHA-384\">d456af117ab64466d4aa6cca91769b10c3cd7cc227861f1cf37528cea420b5699f1b7656afb687ab694db7785a053e82</hash>\n-        <hash alg=\"SHA3-384\">dceb78fdd59af1d6232d3c50624157f67371a088c781e17fce034cde3f92fd9f4073c9eecd1aaed4dafc55222fce4adb</hash>\n-        <hash alg=\"SHA3-256\">c53b0b3a38bc8fee59ade4f677433353b488d0e213a70b60005438b7b9e00d3f</hash>\n-        <hash alg=\"SHA3-512\">a2047abc4b71483de44a6428b6f23d4830d4bac217e567e290e11395004f82e2770806ac7ce3d117d32078e974d76e4d1688758382f10af0cf4026e063278e3f</hash>\n-      </hashes>\n-      <licenses/>\n-      <purl>pkg:maven/org.jreleaser/jreleaser-sdkman-java-sdk@1.6.0?type=jar</purl>\n-      <modified>false</modified>\n-    </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.bouncycastle/bcpg-jdk15on@1.70?type=jar\">\n-      <group>org.bouncycastle</group>\n-      <name>bcpg-jdk15on</name>\n-      <version>1.70</version>\n-      <description>The Bouncy Castle Java API for handling the OpenPGP protocol. This jar contains the OpenPGP API for JDK 1.5 and up. The APIs can be used in conjunction with a JCE/JCA provider such as the one provided with the Bouncy Castle Cryptography APIs.</description>\n-      <hashes>\n-        <hash alg=\"MD5\">01ddc3aa0289346f4db19d95039cefdb</hash>\n-        <hash alg=\"SHA-1\">062f72ec06f31a6c31a3f3355fce0384b21126d7</hash>\n-        <hash alg=\"SHA-256\">4f08f4aa74048824151c98dd3e92e7165ac30659834404f08a8e843bdad32847</hash>\n-        <hash alg=\"SHA-512\">4e240b7811ef90c090e83a181dace41da487555e4136221861b0060f9af6d8b316f2dd0472f747adb98ca5372f46055456ef04bdc0c3992188ab13302922fce9</hash>\n-        <hash alg=\"SHA-384\">d89dec6226112d13cbea461d84740699770dd7d8ad3f67ab65e7b49fd08a096a948e54da2e6a681925c4320f410bba37</hash>\n-        <hash alg=\"SHA3-384\">5e8e8ca63cc550a8f50b627c4dd051f0eb5c31b99ff53dabd7d5f5d1ed98d0dc1d4963a09fc0db32f8e0ff769a2a6e65</hash>\n-        <hash alg=\"SHA3-256\">77f28e7e22b3b3a8d7b667fb7f783847c4b11ee7208833636e09e8b38390fd51</hash>\n-        <hash alg=\"SHA3-512\">cb238dbb641c42c49b5801bdfa6432395e860c1a7485ba68e2d57887e3d22ff254718c6cbfa34c107bfb09d74e2f85c33b95f89dfa886e141a8247a0abf2b5c2</hash>\n-      </hashes>\n+      <description>Java SDK for Gitter</description>\n       <licenses>\n         <license>\n-          <name>Bouncy Castle Licence</name>\n-          <url>https://www.bouncycastle.org/licence.html</url>\n-        </license>\n-        <license>\n-          <id>Apache-1.1</id>\n-          <url>http://apache.org/licenses/LICENSE-1.1</url>\n+          <id>Apache-2.0</id>\n+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/org.bouncycastle/bcpg-jdk15on@1.70?type=jar</purl>\n+      <purl>pkg:maven/org.jreleaser/jreleaser-gitter-java-sdk@1.6.0?type=jar</purl>\n       <modified>false</modified>\n       <externalReferences>\n-        <reference type=\"issue-tracker\">\n-          <url>https://github.com/bcgit/bc-java/issues</url>\n-        </reference>\n         <reference type=\"vcs\">\n-          <url>https://github.com/bcgit/bc-java</url>\n+          <url>https://github.com/jreleaser/jreleaser</url>\n         </reference>\n       </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-linkedin-java-sdk@1.6.0?type=jar\">\n-      <group>org.jreleaser</group>\n-      <name>jreleaser-linkedin-java-sdk</name>\n-      <version>1.6.0</version>\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.reactivestreams/reactive-streams@1.0.3?type=jar\">\n+      <group>org.reactivestreams</group>\n+      <name>reactive-streams</name>\n+      <version>1.0.3</version>\n+      <description>A Protocol for Asynchronous Non-Blocking Data Sequence</description>\n       <hashes>\n-        <hash alg=\"MD5\">f4e19b59a4fa5136724672b8d696700a</hash>\n-        <hash alg=\"SHA-1\">d3323177be263fcbf0f309c5f0b217996a70061e</hash>\n-        <hash alg=\"SHA-256\">3f02324a3d828217bfe76d0c1a9a5d086b325678654a6ca763e4a89c8db4fd2d</hash>\n-        <hash alg=\"SHA-512\">7eac41a0d93efdafd5eeb329a37f5a94cf5fa0a4c338fd59df76bb9afb90bf414fea119bae96763c559edc77a8b334ef540e1f5bf83b73f51e51e3b939ded0e4</hash>\n-        <hash alg=\"SHA-384\">dd44bb25ff56c3ef9c51bc67d7f61aa871d946269dd1752a98f9b7896da71edecf774020fd6d37d30ae7fd428a525932</hash>\n-        <hash alg=\"SHA3-384\">d7df45b2810c81c485e8f65f176f3a70bd2a3ec9f03c80b3b0c604691a5a01c70a56fb6b89958df5b3757e80cd0feb3c</hash>\n-        <hash alg=\"SHA3-256\">0bed6e2b3aea9e1d7c84a746f8c496a0faf2e5f7677956a5350d44eab882fb3f</hash>\n-        <hash alg=\"SHA3-512\">9b8cf700c4faab9c1ddad099191cd1ffc49ab731d55931716e52bf87c7e1742b94f6f2cb7cd4185ad1b241e14ad74d7aefc780e16649f3e233638fb6525f2d57</hash>\n+        <hash alg=\"MD5\">69122b098fff1c6b1bf2cd3b355e7e03</hash>\n+        <hash alg=\"SHA-1\">d9fb7a7926ffa635b3dcaa5049fb2bfa25b3e7d0</hash>\n+        <hash alg=\"SHA-256\">1dee0481072d19c929b623e155e14d2f6085dc011529a0a0dbefc84cf571d865</hash>\n+        <hash alg=\"SHA-512\">aafc86186d82b4f3bd44ef7f955978481172eab267d208aa80b24f8ca218bd902d69b587fcae2fe44a888b7a9f81fc5a209e837958307fdc0ee815248f7065f9</hash>\n+        <hash alg=\"SHA-384\">dde10163531896f3b60261795a977cea1d0114514e8fc95f1ac4b6f34789c4b78c4c83ead210901a2edb3cae9f113ed4</hash>\n+        <hash alg=\"SHA3-384\">4f9e101774f39c8ebcb2ccd3f2fe996a1f99bd879fa34ac9ba319e824752f6bdc6159d242497d38587d7191bba796e3a</hash>\n+        <hash alg=\"SHA3-256\">45c5459f651963c5797e32c87e3b8456238229f9f9e64f543eb21d6a6b7a812e</hash>\n+        <hash alg=\"SHA3-512\">9edc79ccfd2edabe1339ad79a10137cd0f1614671f976d6a8a603428b8e5179c9a6afbf4f9fcd44e6e3795be5c487cc5aa97a1d3e6d9a3e88a62d3f4de60a2ab</hash>\n       </hashes>\n-      <licenses/>\n-      <purl>pkg:maven/org.jreleaser/jreleaser-linkedin-java-sdk@1.6.0?type=jar</purl>\n+      <licenses>\n+        <license>\n+          <id>CC0-1.0</id>\n+        </license>\n+      </licenses>\n+      <purl>pkg:maven/org.reactivestreams/reactive-streams@1.0.3?type=jar</purl>\n       <modified>false</modified>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-java-sdk-commons@1.6.0?type=jar\">\n-      <group>org.jreleaser</group>\n-      <name>jreleaser-java-sdk-commons</name>\n-      <version>1.6.0</version>\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar\">\n+      <group>org.apache.httpcomponents</group>\n+      <name>httpcore</name>\n+      <version>4.4.16</version>\n+      <description>Apache HttpComponents Core (blocking I/O)</description>\n       <hashes>\n-        <hash alg=\"MD5\">a616e3581e826bb4e01c9ec7978bc4d2</hash>\n-        <hash alg=\"SHA-1\">187c502ed479e9f83427cccfd7cd47242bd5f51d</hash>\n-        <hash alg=\"SHA-256\">8043134ad00433ee9cb395081ac9e0cc479328a1589b2b67c310cfd654245ebf</hash>\n-        <hash alg=\"SHA-512\">03ed834cedf5f6b85f8d98defe2790fa0ca2971c686b46dc7c8616d130034785a6969e144ba6aa5d6f4d9093ccf888a7e4995c87d7acf862ece913e9696c550a</hash>\n-        <hash alg=\"SHA-384\">7f0545affd13b0f4298d047137850aba201b93bcd58d6625510bac088c98661c6ce3b1edb38ac7f22d765d22365a47bc</hash>\n-        <hash alg=\"SHA3-384\">9b4346b3b735ed788ca5e79e7fa4709d1e8edc60e994297f6a3fccd34d591474ab7d895720639e0739605b10d6722e60</hash>\n-        <hash alg=\"SHA3-256\">574b9169bf34389e320331ab5cf3ff85c61cb36197acfb0feb040412313326ca</hash>\n-        <hash alg=\"SHA3-512\">c4f1d762db1498baf5f6268619915811f933433ff78388429e564a3c7d94ee89867648fe79d1718dabe74c7927be99152d3475e5547f5b0f4c5d1b53ce7f75d2</hash>\n+        <hash alg=\"MD5\">28d2cd9bf8789fd2ec774fb88436ebd1</hash>\n+        <hash alg=\"SHA-1\">51cf043c87253c9f58b539c9f7e44c8894223850</hash>\n+        <hash alg=\"SHA-256\">6c9b3dd142a09dc468e23ad39aad6f75a0f2b85125104469f026e52a474e464f</hash>\n+        <hash alg=\"SHA-512\">168026436a6bcf5e96c0c59606638abbdc30de4b405ae55afde70fdf2895e267a3d48bba6bdadc5a89f38e31da3d9a9dc91e1cab7ea76f5e04322cf1ec63b838</hash>\n+        <hash alg=\"SHA-384\">ba9ceaee1a37ca3201d6a1315ecb0327b495489efd0baa155c219c475df8d3eb69fe77ab0026563db406497626da6562</hash>\n+        <hash alg=\"SHA3-384\">b9dc44dcc7cc86d5036f26d54c4003a2d72808ae7b07a0808bb53505c6d4281b5ad213eb1f3d0fef1113dec57cb0dfe1</hash>\n+        <hash alg=\"SHA3-256\">fd8ab51846476c6c18822151c9ec07b39a9633010b5d20ea937fc6910407bc64</hash>\n+        <hash alg=\"SHA3-512\">b42fa528242981a9d70e4f68ab75a24292df5112c44c21b6f18cb9201ce747885ba1d4dc69bc3d14d0da46a6c2638f937c11bc45749abeb55dc89ddada90cdda</hash>\n       </hashes>\n-      <licenses/>\n-      <purl>pkg:maven/org.jreleaser/jreleaser-java-sdk-commons@1.6.0?type=jar</purl>\n+      <licenses>\n+        <license>\n+          <id>Apache-2.0</id>\n+        </license>\n+      </licenses>\n+      <purl>pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar</purl>\n       <modified>false</modified>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.2?type=jar\">\n-      <group>com.fasterxml.jackson.core</group>\n-      <name>jackson-annotations</name>\n-      <version>2.14.2</version>\n-      <description>Core annotations used for value types, used by Jackson data binding package.</description>\n+    <component type=\"library\" bom-ref=\"pkg:maven/com.github.victools/jsonschema-module-jackson@4.31.0?type=jar\">\n+      <group>com.github.victools</group>\n+      <name>jsonschema-module-jackson</name>\n+      <version>4.31.0</version>\n+      <description>Module for the jsonschema-generator \u2013 deriving JSON Schema attributes from jackson annotations</description>\n       <hashes>\n-        <hash alg=\"MD5\">10d19982a8890f6eb37557af2f58e272</hash>\n-        <hash alg=\"SHA-1\">a7aae9525864930723e3453ab799521fdfd9d873</hash>\n-        <hash alg=\"SHA-256\">2c6869d505cf60dc066734b7d50339f975bd3adc635e26a78abb71acb4473c0d</hash>\n-        <hash alg=\"SHA-512\">a978384791bdc074df8039ffc95bb93f0f60d14d476861ee2a0ce208b33a991c486a07345cb80559252c3ff1dea14d3efb818c19bdc18435946dc8754d8e6ee3</hash>\n-        <hash alg=\"SHA-384\">d5111c69020666689414921ae4a8950f9fbdf86dec1360f6827beeee9ebd3f78db74e69c76e0becaba47eb34fdaaeb5a</hash>\n-        <hash alg=\"SHA3-384\">53b1a8891482e16a7d8849251cb0dcd1aacf6aaa2161a73589d9742ad96763e384d426d04db762e56fc4536f4e719084</hash>\n-        <hash alg=\"SHA3-256\">14f7b3c51c96f7429f7c60a69e3b7e4f9f2207820141f197d56b57018ffd5640</hash>\n-        <hash alg=\"SHA3-512\">75e4e4fb847fdacdd497cf6b340362581ab4091120ccf2ec32a273709d336af0f78c90ce12b2dd1d17354aa08583af0d3ded89bb415720f45f2d9c110d71dd7a</hash>\n+        <hash alg=\"MD5\">9f823bde30ac43fe6fd6992d70902efa</hash>\n+        <hash alg=\"SHA-1\">06adbda496c2473cb9da4c917c01feb0678b2a2a</hash>\n+        <hash alg=\"SHA-256\">3efaa123a3f320a592327d9e906222be87e61a4e0c8833201cebbf826d53bfe8</hash>\n+        <hash alg=\"SHA-512\">976d7bac35f28cbab854344b0aa27c0f3ad55e4c852ca676ded9f9d8c51c2b66f4ffe7c5576b37eb53a6eb348ddccd324fd06a799e43bd1d0e9556f6bd960744</hash>\n+        <hash alg=\"SHA-384\">f4ad447e5053e370e35fe07300ec1c6a82249cab63eca89dc11c53b2ad0a5230a764227e88e5518953688606ade3a39b</hash>\n+        <hash alg=\"SHA3-384\">42732b646312579aa2de6c8e984ba9c30de2a092c9f76998afa7c073557cf0032f5a2fe2a1c0449e4f520df1d593fd8c</hash>\n+        <hash alg=\"SHA3-256\">dbd1ffc75f5cb9fde3910a68aef8b8c6a6d293a829d977efc770222754799107</hash>\n+        <hash alg=\"SHA3-512\">dfb848dc76c452afd372fc98d30ff7931f3bcee14183a6e679ce718c6db3ed7b220b79f5a95166bac9ae45379e9caf2e6b0c4385a4da1f4e779cee96e8d8c2c1</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.2?type=jar</purl>\n+      <purl>pkg:maven/com.github.victools/jsonschema-module-jackson@4.31.0?type=jar</purl>\n       <modified>false</modified>\n-      <externalReferences>\n-        <reference type=\"vcs\">\n-          <url>https://github.com/FasterXML/jackson-annotations</url>\n-        </reference>\n-      </externalReferences>\n     </component>\n     <component type=\"library\" bom-ref=\"pkg:maven/com.sun.mail/jakarta.mail@2.0.1?type=jar\">\n       <group>com.sun.mail</group>\n       <name>jakarta.mail</name>\n       <version>2.0.1</version>\n       <hashes>\n         <hash alg=\"MD5\">8885560796641719f1cc0c9ea17b8bee</hash>\n@@ -424,1449 +294,1472 @@\n           <url>https://github.com/bcgit/bc-java/issues</url>\n         </reference>\n         <reference type=\"vcs\">\n           <url>https://github.com/bcgit/bc-java</url>\n         </reference>\n       </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.14.2?type=jar\">\n-      <group>com.fasterxml.jackson.dataformat</group>\n-      <name>jackson-dataformat-xml</name>\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.apache.maven/maven-model@3.8.7?type=jar\">\n+      <group>org.apache.maven</group>\n+      <name>maven-model</name>\n+      <version>3.8.7</version>\n+      <description>Model for Maven POM (Project Object Model)</description>\n+      <hashes>\n+        <hash alg=\"MD5\">91c8c6b449ca34033832f268df64873b</hash>\n+        <hash alg=\"SHA-1\">a6a1f77aa36d158c8ec7917112192083b9467cd4</hash>\n+        <hash alg=\"SHA-256\">6fcadaee2a885c43b158f2e3833d0a3ecb68efc62e25ea5b11f77cc0716a7b2d</hash>\n+        <hash alg=\"SHA-512\">f24ea0d84444002c3bce0cc2529638125dcc7b2d8dbf1054d43438702672da499deac20d3a9432ed92fd88005d6d6660f26902011ec8914aee40650af0f9ac8a</hash>\n+        <hash alg=\"SHA-384\">e076fd71ed4f450fe18fa80fa29b0967a1ae95ac3729f1d42b7b77d05b02f18642a787a1671b975df1c40f7dbc7399ba</hash>\n+        <hash alg=\"SHA3-384\">82d7a280f6427218cb64577d41de7e974368a088cedd8f495cca0a64e73b3e29786c2ce15420bf5c348d313303eccfb9</hash>\n+        <hash alg=\"SHA3-256\">9079dd0edebc0a9b12fba1700116c09b958e5268a522a84ed5f61cea90859755</hash>\n+        <hash alg=\"SHA3-512\">fbc8f496338129a4ca92b3b3a0a8890a45a908d0bf3bfd12612abd3152e0311275c7ba8a9b01a84b4522bf209a1508fffd40c5047167252087fc4337531d41f8</hash>\n+      </hashes>\n+      <licenses>\n+        <license>\n+          <id>Apache-2.0</id>\n+        </license>\n+      </licenses>\n+      <purl>pkg:maven/org.apache.maven/maven-model@3.8.7?type=jar</purl>\n+      <modified>false</modified>\n+    </component>\n+    <component type=\"library\" bom-ref=\"pkg:maven/software.amazon.awssdk/endpoints-spi@2.20.51?type=jar\">\n+      <group>software.amazon.awssdk</group>\n+      <name>endpoints-spi</name>\n+      <version>2.20.51</version>\n+      <hashes>\n+        <hash alg=\"MD5\">e1c1ab036273e2ffbaf2fbaa6ba42569</hash>\n+        <hash alg=\"SHA-1\">f5d8db7fb745e169955d079d59155b5c949f11aa</hash>\n+        <hash alg=\"SHA-256\">f7970cd35978921717df84a8633e92e28c4d2a3825b73bf5958f12008a59cac3</hash>\n+        <hash alg=\"SHA-512\">896f2d6d5669386e07f9c29834674c0579db755881ff02be82cb70579b68c3563a407e905983d76f2869f07a3a58cf1825e54febc6bb1855af1e37e4b5e53f58</hash>\n+        <hash alg=\"SHA-384\">f9db3630272c7b02c8c0f52d69b5e88cd1227f497975fa29865ac7cfc2eea5f50dc6a0a618681c0642215c2e371e9426</hash>\n+        <hash alg=\"SHA3-384\">bfc03e263e0c5cb37e958edcecd9b339957b938acb8ee24b34d4e322fc4eca77078b1fa0257f24e91b412e5ae4fcc01a</hash>\n+        <hash alg=\"SHA3-256\">64f13930a29cea4833e87b53d0a680ff730b7d5686a59d97e9014ce411be04fd</hash>\n+        <hash alg=\"SHA3-512\">043c51cea16acc5f13f33651a81e9d27cfe82d2ee0db63efe854c9da217b0b65740712d32948e26f1e205cfa50bb793d570d95e25e7b373fc59e42a1df344325</hash>\n+      </hashes>\n+      <licenses>\n+        <license>\n+          <id>Apache-2.0</id>\n+        </license>\n+      </licenses>\n+      <purl>pkg:maven/software.amazon.awssdk/endpoints-spi@2.20.51?type=jar</purl>\n+      <modified>false</modified>\n+    </component>\n+    <component type=\"library\" bom-ref=\"pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.2?type=jar\">\n+      <group>com.fasterxml.jackson.core</group>\n+      <name>jackson-annotations</name>\n       <version>2.14.2</version>\n-      <description>Data format extension for Jackson to offer\n-alternative support for serializing POJOs as XML and deserializing XML as pojos.</description>\n+      <description>Core annotations used for value types, used by Jackson data binding package.</description>\n       <hashes>\n-        <hash alg=\"MD5\">25e7b018ae4124380443b3640ee55a38</hash>\n-        <hash alg=\"SHA-1\">1c162dd3006c0b7608becd55af4639f2c7b5a79a</hash>\n-        <hash alg=\"SHA-256\">edbda6c775a36049cf0088b111ab958cca0dc70cb9326918d6cf153cb3fa426b</hash>\n-        <hash alg=\"SHA-512\">480465e29c123a8becc74799cc38ebb1951b7fa2ee6a05af76c26b7a245fbe0c8161438729f25f38eab0988520b5925872a4b4f068523a2801d76fe53bca0cb7</hash>\n-        <hash alg=\"SHA-384\">f587c3cd5dfc7f9a97d1943e1244eaa27adf767bb0abedc701f365baba02b856003a9bfd697ddf8d530fb7ac4bb8e290</hash>\n-        <hash alg=\"SHA3-384\">9b705359248dc866aecea82487219173c6c0edd32e57069f3d8575e3ce2fcec11fed88f415dff4c6a24f189b176d15a4</hash>\n-        <hash alg=\"SHA3-256\">10590531489767ad82852cfbc15790d1e2a8dcbf1528025d3714a7cd35551bea</hash>\n-        <hash alg=\"SHA3-512\">f22f8fa99e0a8c1ebca99876e9775ed9da8cf90b9d658feb91a802991074257980e7606a62b3daf325df59417da95d65eae206de4f1af451f6149f8b37c2f38c</hash>\n+        <hash alg=\"MD5\">10d19982a8890f6eb37557af2f58e272</hash>\n+        <hash alg=\"SHA-1\">a7aae9525864930723e3453ab799521fdfd9d873</hash>\n+        <hash alg=\"SHA-256\">2c6869d505cf60dc066734b7d50339f975bd3adc635e26a78abb71acb4473c0d</hash>\n+        <hash alg=\"SHA-512\">a978384791bdc074df8039ffc95bb93f0f60d14d476861ee2a0ce208b33a991c486a07345cb80559252c3ff1dea14d3efb818c19bdc18435946dc8754d8e6ee3</hash>\n+        <hash alg=\"SHA-384\">d5111c69020666689414921ae4a8950f9fbdf86dec1360f6827beeee9ebd3f78db74e69c76e0becaba47eb34fdaaeb5a</hash>\n+        <hash alg=\"SHA3-384\">53b1a8891482e16a7d8849251cb0dcd1aacf6aaa2161a73589d9742ad96763e384d426d04db762e56fc4536f4e719084</hash>\n+        <hash alg=\"SHA3-256\">14f7b3c51c96f7429f7c60a69e3b7e4f9f2207820141f197d56b57018ffd5640</hash>\n+        <hash alg=\"SHA3-512\">75e4e4fb847fdacdd497cf6b340362581ab4091120ccf2ec32a273709d336af0f78c90ce12b2dd1d17354aa08583af0d3ded89bb415720f45f2d9c110d71dd7a</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.14.2?type=jar</purl>\n+      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.2?type=jar</purl>\n       <modified>false</modified>\n       <externalReferences>\n         <reference type=\"vcs\">\n-          <url>http://github.com/FasterXML/jackson-dataformat-xml</url>\n+          <url>https://github.com/FasterXML/jackson-annotations</url>\n         </reference>\n       </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/com.fasterxml/classmate@1.5.1?type=jar\">\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar\">\n       <publisher>fasterxml.com</publisher>\n-      <group>com.fasterxml</group>\n-      <name>classmate</name>\n-      <version>1.5.1</version>\n-      <description>Library for introspecting types with full generic information\n-        including resolving of field and method types.</description>\n+      <group>org.codehaus.woodstox</group>\n+      <name>stax2-api</name>\n+      <version>4.2.1</version>\n+      <description>tax2 API is an extension to basic Stax 1.0 API that adds significant new functionality, such as full-featured bi-direction validation interface and high-performance Typed Access API.</description>\n       <hashes>\n-        <hash alg=\"MD5\">e91fcd30ba329fd1b0b6dc5321fd067c</hash>\n-        <hash alg=\"SHA-1\">3fe0bed568c62df5e89f4f174c101eab25345b6c</hash>\n-        <hash alg=\"SHA-256\">aab4de3006808c09d25dd4ff4a3611cfb63c95463cfd99e73d2e1680d229a33b</hash>\n-        <hash alg=\"SHA-512\">7fc4764eb65227f5ba614698a5cf2f9430133f42ec6e2ae53b4c724ee53f258541a0109fe0659e0b9e45729b46c95c00227e696b8d1addcd772c85f877658c9a</hash>\n-        <hash alg=\"SHA-384\">28b4780b2353ebc08dbc02c9a343527a9062a0455bfb4ab135cb639c03e5dfd9c2250a835c44d5f17d275667c2009694</hash>\n-        <hash alg=\"SHA3-384\">b194ace8f1f49f410286bd859866678b95a1b2c6f73e41f48291eb7438dffea57aaa9b177459038b6997771ce4d1cee1</hash>\n-        <hash alg=\"SHA3-256\">50234c94efed4c816eb77bd2f70b869c9f89ddf8ee73dc25e354f4d0b81b3e1f</hash>\n-        <hash alg=\"SHA3-512\">9886421726066b313a62283a6811b76d904ea1c1e9b7b2d850cb47afa189b03cdef053c8f7f6b79e77f2269c45f8cc2ed75c3389e96594b50987fef311d5a25f</hash>\n+        <hash alg=\"MD5\">af8377bc7882332e22456616a9f164f6</hash>\n+        <hash alg=\"SHA-1\">a3f7325c52240418c2ba257b103c3c550e140c83</hash>\n+        <hash alg=\"SHA-256\">678567e48b51a42c65c699f266539ad3d676d4b1a5b0ad7d89ece8b9d5772579</hash>\n+        <hash alg=\"SHA-512\">00efc5d4d17540fb180c5b20d456630a8b3262dff46676689ae916ba16f0fbd9b1a71c7badfb254faad6597f94fed1edb96f77c15f40178eaf4d8cd35cea5e8d</hash>\n+        <hash alg=\"SHA-384\">97a6a9f0cc666776e4a4f08729c303d2a602ce5c25ee633cd6c54c72f12d11e9d43634ca6ca4ef7da5973a52030384da</hash>\n+        <hash alg=\"SHA3-384\">683a1f110ab84333e7517dabe175b91d7ea2fbead2f9d02acf798c588a7508bc67580642afa8d57441bc56ce610d5b0f</hash>\n+        <hash alg=\"SHA3-256\">5e8e54209fb6b580e928e703ef11645aff1a21dfd47cca2dc0e53d0befaef09c</hash>\n+        <hash alg=\"SHA3-512\">d79338a481605c94e144c967cb7adbc6cfd06ee6a1182b5ebc8cd8ad3deedd707931e404aa197bc94d3b5a5d82a2e6dd6a2f6cc9dafc42ce3ad5061076b05199</hash>\n       </hashes>\n       <licenses>\n         <license>\n-          <id>Apache-2.0</id>\n+          <id>BSD-4-Clause</id>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/com.fasterxml/classmate@1.5.1?type=jar</purl>\n+      <purl>pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar</purl>\n       <modified>false</modified>\n       <externalReferences>\n         <reference type=\"website\">\n-          <url>https://fasterxml.com</url>\n+          <url>http://fasterxml.com</url>\n         </reference>\n         <reference type=\"vcs\">\n-          <url>https://github.com/FasterXML/java-classmate</url>\n+          <url>http://github.com/FasterXML/stax2-api</url>\n         </reference>\n       </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.3.5?type=jar\">\n-      <group>org.eclipse.sisu</group>\n-      <name>org.eclipse.sisu.plexus</name>\n-      <version>0.3.5</version>\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.bouncycastle/bcpg-jdk15on@1.70?type=jar\">\n+      <group>org.bouncycastle</group>\n+      <name>bcpg-jdk15on</name>\n+      <version>1.70</version>\n+      <description>The Bouncy Castle Java API for handling the OpenPGP protocol. This jar contains the OpenPGP API for JDK 1.5 and up. The APIs can be used in conjunction with a JCE/JCA provider such as the one provided with the Bouncy Castle Cryptography APIs.</description>\n       <hashes>\n-        <hash alg=\"MD5\">30c4a9fa2137698ed66c8542f1be196a</hash>\n-        <hash alg=\"SHA-1\">d71996bb2e536f966b3b70e647067fff3b73d32f</hash>\n-        <hash alg=\"SHA-256\">7e4c61096d70826f20f7a7d55c59a5528e7aa5ad247ee2dfe544e4dd25f6a784</hash>\n-        <hash alg=\"SHA-512\">38d7dbe023f9751cb5e30bf154e31696590317dc7b7f768811fe0f5940513fcea4665670cd47d0b72ded85453b10f7d129b0b7428b155a41c903c7b56c986e8d</hash>\n-        <hash alg=\"SHA-384\">2e943a72f0ca201d50ba90b4cf70c3c1f7b5ffc3bbfdee45875bc2f6f2e2a3a93acbba3a2f1e7ffb32b70e041633b6de</hash>\n-        <hash alg=\"SHA3-384\">a7b121732001b6f225b0687e7747993f48b3fc1d9a4325b4321a4c59adae36b49677193f5e31e3b1f11a6cd266e459f3</hash>\n-        <hash alg=\"SHA3-256\">b879a16dd84d8d4f39c1009029b3a3a55e18049c7910f77814a32ca088b56585</hash>\n-        <hash alg=\"SHA3-512\">8f8fbebd2a3024bcf6f2e27e8206e3f3c2b2673217c1220743b1869bf60341490db7d1877d9eaf3c452500690df98ccda11a19bda996b74a6ebedc37bc9bc554</hash>\n+        <hash alg=\"MD5\">01ddc3aa0289346f4db19d95039cefdb</hash>\n+        <hash alg=\"SHA-1\">062f72ec06f31a6c31a3f3355fce0384b21126d7</hash>\n+        <hash alg=\"SHA-256\">4f08f4aa74048824151c98dd3e92e7165ac30659834404f08a8e843bdad32847</hash>\n+        <hash alg=\"SHA-512\">4e240b7811ef90c090e83a181dace41da487555e4136221861b0060f9af6d8b316f2dd0472f747adb98ca5372f46055456ef04bdc0c3992188ab13302922fce9</hash>\n+        <hash alg=\"SHA-384\">d89dec6226112d13cbea461d84740699770dd7d8ad3f67ab65e7b49fd08a096a948e54da2e6a681925c4320f410bba37</hash>\n+        <hash alg=\"SHA3-384\">5e8e8ca63cc550a8f50b627c4dd051f0eb5c31b99ff53dabd7d5f5d1ed98d0dc1d4963a09fc0db32f8e0ff769a2a6e65</hash>\n+        <hash alg=\"SHA3-256\">77f28e7e22b3b3a8d7b667fb7f783847c4b11ee7208833636e09e8b38390fd51</hash>\n+        <hash alg=\"SHA3-512\">cb238dbb641c42c49b5801bdfa6432395e860c1a7485ba68e2d57887e3d22ff254718c6cbfa34c107bfb09d74e2f85c33b95f89dfa886e141a8247a0abf2b5c2</hash>\n       </hashes>\n       <licenses>\n         <license>\n-          <id>EPL-1.0</id>\n+          <name>Bouncy Castle Licence</name>\n+          <url>https://www.bouncycastle.org/licence.html</url>\n+        </license>\n+        <license>\n+          <id>Apache-1.1</id>\n+          <url>http://apache.org/licenses/LICENSE-1.1</url>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.3.5?type=jar</purl>\n+      <purl>pkg:maven/org.bouncycastle/bcpg-jdk15on@1.70?type=jar</purl>\n       <modified>false</modified>\n+      <externalReferences>\n+        <reference type=\"issue-tracker\">\n+          <url>https://github.com/bcgit/bc-java/issues</url>\n+        </reference>\n+        <reference type=\"vcs\">\n+          <url>https://github.com/bcgit/bc-java</url>\n+        </reference>\n+      </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-engine@1.6.0?type=jar\">\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-twitter-java-sdk@1.6.0?type=jar\">\n       <group>org.jreleaser</group>\n-      <name>jreleaser-engine</name>\n+      <name>jreleaser-twitter-java-sdk</name>\n       <version>1.6.0</version>\n-      <hashes>\n-        <hash alg=\"MD5\">9f9f66067f498dff577ad02633559250</hash>\n-        <hash alg=\"SHA-1\">603e9b188290251e6cf0056935a6e3011f13cbed</hash>\n-        <hash alg=\"SHA-256\">6b86f2770717afbd562cefcf87cbf202b3087d478c2ead5ffefdc8bbd60cde40</hash>\n-        <hash alg=\"SHA-512\">51de3e09d47903dfbbd6367cb92d717ab7735440ac7b0d2f863914b2ada086c5a4356703bc8160cae783c77a0e9b0394438a5f6c671eb8ea4608f1a91c861338</hash>\n-        <hash alg=\"SHA-384\">5c26399a700c6054025a1418a3e00522fb458f721b39d9d8d43932975e062aa4d53f87de6fc2d6e35deb013e23e5fe73</hash>\n-        <hash alg=\"SHA3-384\">dace1debfe6654e88bc85eff96a893d9dcd2ab89b13e2135521a1eb7fb42334c5f95a092f89222a447153e742fc5808e</hash>\n-        <hash alg=\"SHA3-256\">43535e22504122d99943850754b93dc1353398ec4302d1a6ffabfdd427979718</hash>\n-        <hash alg=\"SHA3-512\">9dae5a081834201bbeaa5abac43592d6dcc69e61e1c2bd9f631969268a2d80fe8e0e1f7310cfa0ea2137fe85b2e9df1eca9e76df09bd908282cb3e5640909936</hash>\n-      </hashes>\n-      <licenses/>\n-      <purl>pkg:maven/org.jreleaser/jreleaser-engine@1.6.0?type=jar</purl>\n+      <description>Java SDK for Twitter</description>\n+      <licenses>\n+        <license>\n+          <id>Apache-2.0</id>\n+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>\n+        </license>\n+      </licenses>\n+      <purl>pkg:maven/org.jreleaser/jreleaser-twitter-java-sdk@1.6.0?type=jar</purl>\n       <modified>false</modified>\n+      <externalReferences>\n+        <reference type=\"vcs\">\n+          <url>https://github.com/jreleaser/jreleaser</url>\n+        </reference>\n+      </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-config-toml@1.6.0?type=jar\">\n-      <group>org.jreleaser</group>\n-      <name>jreleaser-config-toml</name>\n-      <version>1.6.0</version>\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.eclipse.jgit/org.eclipse.jgit@5.13.0.202109080827-r?type=jar\">\n+      <group>org.eclipse.jgit</group>\n+      <name>org.eclipse.jgit</name>\n+      <version>5.13.0.202109080827-r</version>\n+      <description>Repository access and algorithms</description>\n       <hashes>\n-        <hash alg=\"MD5\">c147285cb27a99b83f22a5d98cfb1e22</hash>\n-        <hash alg=\"SHA-1\">08e0562a6da0abe192620dffdc205042dd5fab8d</hash>\n-        <hash alg=\"SHA-256\">e640cd4609d56f7b8d4701820c0823a57c9bd043b524701b4685bf66f65df0e0</hash>\n-        <hash alg=\"SHA-512\">c2762fbd9f412a38732c4b6af3f030fad5d1b93ca56e4e9c6e1c9dc7c6d5dc8ed0d75e5202ef448b7b86aa78263ae0a3b8fe491d50e4a7d7dfafc52f17852641</hash>\n-        <hash alg=\"SHA-384\">417e45b04bdbc70471fea7a843ea9edd2cb0491001aa857e164b475dc51c8433add8162d98f11efef9cf5abc66dd0354</hash>\n-        <hash alg=\"SHA3-384\">2ae9e1ff1c8f199557c495ff67b4dd6864c2008859397edc80b65a88b201809c5560107ac441cf451a1712e7391052d2</hash>\n-        <hash alg=\"SHA3-256\">08aef53917744d8c4f758d59b4e9d1dccc6e61635e71694334f20c833acec57b</hash>\n-        <hash alg=\"SHA3-512\">5f63d11d9b215003a79bfa098c5256f7c7103d59f77209b22b98f94b315aefc017a9efc48cb94e4dde95ce0dd583a41e821b83fc48f64d622dfbcfcd521a4058</hash>\n+        <hash alg=\"MD5\">5a1f197785cb9c69d1241cb0f16937a2</hash>\n+        <hash alg=\"SHA-1\">32badd5adebd660424509344259ad3e409699ba2</hash>\n+        <hash alg=\"SHA-256\">dabf8369f0cdf8cf17b7f7da4bda9320c570bb754c88e0beb7b852812cf5cd25</hash>\n+        <hash alg=\"SHA-512\">768dbb3ba2649a7025338197b4703b414983e4608138719b0d69201f7f49e57e0454846b41b775b135b083f820824749da6121f20a812c4f155a97f09c9b15ac</hash>\n+        <hash alg=\"SHA-384\">deb24e724ace28ddbaf5e7a1fafaa449a49b97d3a5a53eb487a2ab90895f05684c48a839e3677643364ff965cc33af95</hash>\n+        <hash alg=\"SHA3-384\">e5aed5403b4c28624bc58be31601897555c94eb54e680f1ccb59992a643db24d0de465b7ae879b5ba29d56a132a87b69</hash>\n+        <hash alg=\"SHA3-256\">8ccc07758fbf1ac55028538890afe7d209c866ee019875ef15acfaea9ac7244f</hash>\n+        <hash alg=\"SHA3-512\">4725fff9b6067d70d4c82cbf549b16be521e839d5c8ecf605f9a71516ec78334e348cb2d3303afb7ba18ce464a68c1e195bb6fe673d9d4d6b8d75c84d0b4e101</hash>\n       </hashes>\n-      <licenses/>\n-      <purl>pkg:maven/org.jreleaser/jreleaser-config-toml@1.6.0?type=jar</purl>\n+      <licenses>\n+        <license>\n+          <id>BSD-3-Clause</id>\n+        </license>\n+      </licenses>\n+      <purl>pkg:maven/org.eclipse.jgit/org.eclipse.jgit@5.13.0.202109080827-r?type=jar</purl>\n       <modified>false</modified>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-model-impl@1.6.0?type=jar\">\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-opencollective-java-sdk@1.6.0?type=jar\">\n       <group>org.jreleaser</group>\n-      <name>jreleaser-model-impl</name>\n+      <name>jreleaser-opencollective-java-sdk</name>\n       <version>1.6.0</version>\n-      <hashes>\n-        <hash alg=\"MD5\">d2760fed3ab0f395c3ec08c3f7493d52</hash>\n-        <hash alg=\"SHA-1\">37f35b86cc5bcdf8c7d306d97884c2d89fa742d5</hash>\n-        <hash alg=\"SHA-256\">284a61227c9f031b6b6928bfef76eeea45c97e6053b7a1190e3dd64c0effd8df</hash>\n-        <hash alg=\"SHA-512\">81899b65d3eb10b0dac885ee17b45822d12d5746141876ef2573b0afaec13c92187ebf8a6c446ce002f25f8bc3d40f1a88e1c8c548bd35a556efc86d9f5ed809</hash>\n-        <hash alg=\"SHA-384\">c961c3d7d900e27341988545b53d9bc8f89275e700799e41b56dc43444173e1bf962e00f96026de0fee5894594d40d6f</hash>\n-        <hash alg=\"SHA3-384\">984a6c6ab7487eeb35b3aa8d87754d4dd55bdcbcce9239bd0ec17b1ca63e1a66e4f34767476bd5b79e0998477ccc7c35</hash>\n-        <hash alg=\"SHA3-256\">a5b874d301532774b825877e6d29045492c60e20a00d55d096e0a3b371885a41</hash>\n-        <hash alg=\"SHA3-512\">83babeb5dc661f2a4f4082872615c1c70719c66ac3f2071f367a82d1b7e44390121d4e59ace75f0fdbc66f5277c306242ee491de2268d49bc5c9da4247b260e9</hash>\n-      </hashes>\n-      <licenses/>\n-      <purl>pkg:maven/org.jreleaser/jreleaser-model-impl@1.6.0?type=jar</purl>\n+      <description>Java SDK for Opencollective</description>\n+      <licenses>\n+        <license>\n+          <id>Apache-2.0</id>\n+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>\n+        </license>\n+      </licenses>\n+      <purl>pkg:maven/org.jreleaser/jreleaser-opencollective-java-sdk@1.6.0?type=jar</purl>\n       <modified>false</modified>\n+      <externalReferences>\n+        <reference type=\"vcs\">\n+          <url>https://github.com/jreleaser/jreleaser</url>\n+        </reference>\n+      </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-discord-java-sdk@1.6.0?type=jar\">\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-ssh-java-sdk@1.6.0?type=jar\">\n       <group>org.jreleaser</group>\n-      <name>jreleaser-discord-java-sdk</name>\n+      <name>jreleaser-ssh-java-sdk</name>\n       <version>1.6.0</version>\n-      <hashes>\n-        <hash alg=\"MD5\">b302d0fb98ddf20fd9aa5e3217169f2e</hash>\n-        <hash alg=\"SHA-1\">dd7f35d943f3163fb39b1e3f99689fea9a4b4be1</hash>\n-        <hash alg=\"SHA-256\">02829114c0893a25e6ef4720d2bd46210c0d2e44035ad11e69750008b98a7683</hash>\n-        <hash alg=\"SHA-512\">bb6f24a864e1a0b76f9b033c5780a1212b6aaa792fe1db316562d0b498539325d674f8f4c43433b12994860baa2214a1c740c851cbfc37162376afcd9d78e56b</hash>\n-        <hash alg=\"SHA-384\">ca07a540cc215f68e422a5e0b57b7b971c628dd81143ebb2709d5034597490c932a7899058e1c9bce964391700ad3cb1</hash>\n-        <hash alg=\"SHA3-384\">2be59a5f86ea46e1eeae36d72aacef7c6d30cf81647edf67dafb725184042a8b190ef1c3999f8a65c9a27898c59902cc</hash>\n-        <hash alg=\"SHA3-256\">b5dd1a54295c2ea8dde278a24ffc252c4edd34f0e7eda78dddfe77434e41d6b5</hash>\n-        <hash alg=\"SHA3-512\">1e8efeff1b1b2117d172134e36683512bf0afd52b90ae54bdc3f63b6f4590968248fa75e1dba0d241de0a9ba8317712d9a0f73323d5673e383b23fd7f4dc9f78</hash>\n-      </hashes>\n-      <licenses/>\n-      <purl>pkg:maven/org.jreleaser/jreleaser-discord-java-sdk@1.6.0?type=jar</purl>\n-      <modified>false</modified>\n-    </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/commons-io/commons-io@2.11.0?type=jar\">\n-      <group>commons-io</group>\n-      <name>commons-io</name>\n-      <version>2.11.0</version>\n-      <description>The Apache Commons IO library contains utility classes, stream implementations, file filters,\n-file comparators, endian transformation classes, and much more.</description>\n-      <hashes>\n-        <hash alg=\"MD5\">3b4b7ccfaeceeac240b804839ee1a1ca</hash>\n-        <hash alg=\"SHA-1\">a2503f302b11ebde7ebc3df41daebe0e4eea3689</hash>\n-        <hash alg=\"SHA-256\">961b2f6d87dbacc5d54abf45ab7a6e2495f89b75598962d8c723cea9bc210908</hash>\n-        <hash alg=\"SHA-512\">5bd78eed456ede30119319c5bed8e3e4c443b6fd7bdb3a7a5686647bd83094d0c3e2832a7575cfb60e4ef25f08106b93476939d3adcfecf5533cc030b3039e10</hash>\n-        <hash alg=\"SHA-384\">114f1e324d90ad887c177876d410f5787a8e8da6c48d4b2862d365802c0efded3a88cb24046976bf6276cadad3712f0f</hash>\n-        <hash alg=\"SHA3-384\">80288c03ad4d80d69f91d056ffc5570d49a9c76bf54ad2dff0121ecde26a560df76d05156f281f5c6db2a38ff07a873d</hash>\n-        <hash alg=\"SHA3-256\">5adfb5ccaf5f21a549422f426118a9542673926fcd18c68390cf813e791dcf6c</hash>\n-        <hash alg=\"SHA3-512\">7573f47f0babb53cefdc7c2309a0b982d800139064537b0797da442853d081010ad7c3c74a500598a0f800639a5d540eca21963ea652c68613907059bd4278c2</hash>\n-      </hashes>\n+      <description>Java SDK for SCP/SFTP upload/download</description>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/commons-io/commons-io@2.11.0?type=jar</purl>\n+      <purl>pkg:maven/org.jreleaser/jreleaser-ssh-java-sdk@1.6.0?type=jar</purl>\n       <modified>false</modified>\n       <externalReferences>\n-        <reference type=\"issue-tracker\">\n-          <url>https://issues.apache.org/jira/browse/IO</url>\n-        </reference>\n         <reference type=\"vcs\">\n-          <url>https://gitbox.apache.org/repos/asf?p=commons-io.git</url>\n+          <url>https://github.com/jreleaser/jreleaser</url>\n         </reference>\n       </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-signing-java-sdk@1.6.0?type=jar\">\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-config-json@1.6.0?type=jar\">\n       <group>org.jreleaser</group>\n-      <name>jreleaser-signing-java-sdk</name>\n+      <name>jreleaser-config-json</name>\n       <version>1.6.0</version>\n-      <hashes>\n-        <hash alg=\"MD5\">2608fa713b1fa2a515ec2c83ec96a49c</hash>\n-        <hash alg=\"SHA-1\">f0de8990fee988060fe7721d389d6ba8aad481a4</hash>\n-        <hash alg=\"SHA-256\">ea0e35358f453eee98d0a4e921bfa6114c04afe52adb0c74bcc5200092971454</hash>\n-        <hash alg=\"SHA-512\">4d0146d43526b329139bb38edbe63f6f783ae99f5d2778c6c6af8851be458739afe31951bf8e54f85da7c6e5d5e7d4670b45917c6ffa855f578355a6359286a6</hash>\n-        <hash alg=\"SHA-384\">a29024fbd6fb57818b5800cb961a043d4d131e4c16d0b6965a4abd4ef275001bd607697195f562e6b3d4f36fac5847b0</hash>\n-        <hash alg=\"SHA3-384\">5b9e053c6b9a48483a7cdd898f37fc72275171348ed4433b9759e0a4f86edad6a26c84ed69eae8612811e17b806df60a</hash>\n-        <hash alg=\"SHA3-256\">477c36bff3a1ec95810622a43d43ea9b1c614c54306897d9c4ee66f2a349a9e9</hash>\n-        <hash alg=\"SHA3-512\">b6594d20048651c4982230202c5af186f064025bf80d21c87d4cacb3d1b466bc1e5c850fea374edf9c3c98fda734ea52284bd62bbd456aee903c705152d767da</hash>\n-      </hashes>\n-      <licenses/>\n-      <purl>pkg:maven/org.jreleaser/jreleaser-signing-java-sdk@1.6.0?type=jar</purl>\n-      <modified>false</modified>\n-    </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/dev.failsafe/failsafe@3.3.1?type=jar\">\n-      <group>dev.failsafe</group>\n-      <name>failsafe</name>\n-      <version>3.3.1</version>\n-      <hashes>\n-        <hash alg=\"MD5\">a16b9f66f4009f924e2118e296ec927a</hash>\n-        <hash alg=\"SHA-1\">cca46c10dd22fb0beb7e0c1e468604430355a4ab</hash>\n-        <hash alg=\"SHA-256\">af90a069c56918d9ddbef7bbd5ef5a25c1eb8bef459ae1ee89c1db21cd5f6bf5</hash>\n-        <hash alg=\"SHA-512\">fffcbd84b95656c302b4be7ba7bffbf686323bf7af265c2b85bedc72695843067b1a804ab1bbecad0f2732ebf46562c3266f0ed970517b64d93a1a67535b7cd9</hash>\n-        <hash alg=\"SHA-384\">8acb7ba45c47316ffac8c55e9a3ae8a36c7473a503ad6f365ed487758147f7f3fa741edb76d4a31d4616d31065d529c4</hash>\n-        <hash alg=\"SHA3-384\">0e31c4d6e5ae74bb049a649e2beb49259d8c946a6d2b962e36c1f6b1bd8c279951348d7dfe74ce213e28329a062f5052</hash>\n-        <hash alg=\"SHA3-256\">67c631af5a746bd0eb97ebebec9d22f790d8c38f25b417401fc4c9708e08316c</hash>\n-        <hash alg=\"SHA3-512\">3e70f44b56b3b275026c619b127c4a9fce234bf70c4df4a54cb53a36035e7f5f57f9acbd001fb92b46fd91b1ef3d24ace58d5c9876c32e81c56dbd4b814c0ccf</hash>\n-      </hashes>\n+      <description>JReleaser JSON config support</description>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/dev.failsafe/failsafe@3.3.1?type=jar</purl>\n+      <purl>pkg:maven/org.jreleaser/jreleaser-config-json@1.6.0?type=jar</purl>\n       <modified>false</modified>\n+      <externalReferences>\n+        <reference type=\"vcs\">\n+          <url>https://github.com/jreleaser/jreleaser</url>\n+        </reference>\n+      </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.reactivestreams/reactive-streams@1.0.3?type=jar\">\n-      <group>org.reactivestreams</group>\n-      <name>reactive-streams</name>\n-      <version>1.0.3</version>\n-      <description>A Protocol for Asynchronous Non-Blocking Data Sequence</description>\n+    <component type=\"library\" bom-ref=\"pkg:maven/io.github.openfeign/feign-core@12.3?type=jar\">\n+      <group>io.github.openfeign</group>\n+      <name>feign-core</name>\n+      <version>12.3</version>\n+      <description>Feign Core</description>\n       <hashes>\n-        <hash alg=\"MD5\">69122b098fff1c6b1bf2cd3b355e7e03</hash>\n-        <hash alg=\"SHA-1\">d9fb7a7926ffa635b3dcaa5049fb2bfa25b3e7d0</hash>\n-        <hash alg=\"SHA-256\">1dee0481072d19c929b623e155e14d2f6085dc011529a0a0dbefc84cf571d865</hash>\n-        <hash alg=\"SHA-512\">aafc86186d82b4f3bd44ef7f955978481172eab267d208aa80b24f8ca218bd902d69b587fcae2fe44a888b7a9f81fc5a209e837958307fdc0ee815248f7065f9</hash>\n-        <hash alg=\"SHA-384\">dde10163531896f3b60261795a977cea1d0114514e8fc95f1ac4b6f34789c4b78c4c83ead210901a2edb3cae9f113ed4</hash>\n-        <hash alg=\"SHA3-384\">4f9e101774f39c8ebcb2ccd3f2fe996a1f99bd879fa34ac9ba319e824752f6bdc6159d242497d38587d7191bba796e3a</hash>\n-        <hash alg=\"SHA3-256\">45c5459f651963c5797e32c87e3b8456238229f9f9e64f543eb21d6a6b7a812e</hash>\n-        <hash alg=\"SHA3-512\">9edc79ccfd2edabe1339ad79a10137cd0f1614671f976d6a8a603428b8e5179c9a6afbf4f9fcd44e6e3795be5c487cc5aa97a1d3e6d9a3e88a62d3f4de60a2ab</hash>\n+        <hash alg=\"MD5\">9e6e1ff8b68d2b6c1fc5bdc7ff208030</hash>\n+        <hash alg=\"SHA-1\">d280b09a17b63e69788fd3d8d215b7013ab48b16</hash>\n+        <hash alg=\"SHA-256\">939fbed2c2392a9633bc1d26f0ef9e934b059d1a9a9d4d966cedaf9075c546ec</hash>\n+        <hash alg=\"SHA-512\">8335901d8918747dc29d37a2ac630c6a78ea6ff04bfea77e6d8c74188e9e584142920996c45120caa86299486949a04e1ec1f1bef30229904360fcb5c5d4a1c4</hash>\n+        <hash alg=\"SHA-384\">dc7a0d10bdf2c3aeafba83ca7e41d21c3288f3df0b76e339788fcf7606381970b6429108dbf2d1212075d1feba040842</hash>\n+        <hash alg=\"SHA3-384\">2907938ea76735cde9b34676c6c8b04786f1595687f96734e7659768175cb7a525508f84c48d9b10b0b2f593158e1ed5</hash>\n+        <hash alg=\"SHA3-256\">474f6b0ab420bf63549ed123fff99b73fc881771c6a0c591e58dfb17adbe9899</hash>\n+        <hash alg=\"SHA3-512\">553a6dc1c3cf7facdb3b4e15be1d6d90259f1d36ce137db3a6e53a967ef4939aaa98c974b059c8f32dd42316bb7eee3b51910cf0fb172d0df9b8ff39d8cc722d</hash>\n       </hashes>\n       <licenses>\n         <license>\n-          <id>CC0-1.0</id>\n+          <id>Apache-2.0</id>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/org.reactivestreams/reactive-streams@1.0.3?type=jar</purl>\n+      <purl>pkg:maven/io.github.openfeign/feign-core@12.3?type=jar</purl>\n       <modified>false</modified>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/software.amazon.awssdk/sdk-core@2.20.51?type=jar\">\n-      <group>software.amazon.awssdk</group>\n-      <name>sdk-core</name>\n-      <version>2.20.51</version>\n-      <description>The AWS SDK for Java - SDK Core runtime module holds the classes that are used by the individual service\n-        clients to interact with\n-        Amazon Web Services. Users need to depend on aws-java-sdk artifact for accessing individual client classes.</description>\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.codehaus.plexus/plexus-classworlds@2.7.0?type=jar\">\n+      <group>org.codehaus.plexus</group>\n+      <name>plexus-classworlds</name>\n+      <version>2.7.0</version>\n+      <description>A class loader framework</description>\n       <hashes>\n-        <hash alg=\"MD5\">b7d192ccc4a7098ffbfb3a5241d560d8</hash>\n-        <hash alg=\"SHA-1\">e3f9e8708dd477b58253125f1d828deaeaf94d69</hash>\n-        <hash alg=\"SHA-256\">eee62acd22433ce285d8b735356c72355a8827f587933d969cf51dc5fcaa0140</hash>\n-        <hash alg=\"SHA-512\">285401aa6bbb998330bc97c109bb6c79fc329de23c9729742c48353156a6a3cd7d2c356a97ecc9f795dfa9be50762c6a5d76b92c13fcd06a34e5ea7cd959f065</hash>\n-        <hash alg=\"SHA-384\">50f7536e6d95d0c0596983b19c61cbd5ea359c265a527e87816399df0579bdcef3563a470324fa8602c7db97aa82340b</hash>\n-        <hash alg=\"SHA3-384\">f0487bd4188e85d07d502b82bf55043be4c88518163d315af85b2f91f50c6bff657e0c3b2fb9013513948b3cbe9ab2eb</hash>\n-        <hash alg=\"SHA3-256\">f7d6979f92addad31ef970812b1d9e49e1ad170aeec6d341598a4fe4d0897a4e</hash>\n-        <hash alg=\"SHA3-512\">88f5ffc890d90d9988e05f9a84f609894aa173e0d9e1ea0c908243c0ffbf97460dc643b2709793103cae1b2f098e87ef8cdda93003de1915763aa394b8800766</hash>\n+        <hash alg=\"MD5\">6ed852b1a004288c44438381e6aaee1e</hash>\n+        <hash alg=\"SHA-1\">fe6f1acefd1a302dd4bc6d9d7f15358828d2a44d</hash>\n+        <hash alg=\"SHA-256\">c60ae538ba66adbc06aae205fbe2306211d3d213ab6df3239ec03cdde2458ad6</hash>\n+        <hash alg=\"SHA-512\">8057b6c7d52aaa61a51aba6ec613e8bd1a094d62a84d50a37bfe7776ff53780f1602b6169242c3a60b28c9d496458baaac5377575553e4af881643490ccda912</hash>\n+        <hash alg=\"SHA-384\">4b079cab0a5f50631ef134f6578f4772f59897977d20ddef071920c107ca13cc3ce85d7b3c2bad586fb7a29fb4a4e07d</hash>\n+        <hash alg=\"SHA3-384\">1e4500603fc2ac0c080f4a7b127171103295571bc7e570e50f6c479c62667cf78cf177c09b92f39702864fff83e35f9f</hash>\n+        <hash alg=\"SHA3-256\">ff715bac48dda5b19e29e18e47dbba9015cfcdf3a949c19154ae9ea3e5951c60</hash>\n+        <hash alg=\"SHA3-512\">7bb6f86ea7300d4321fb78a0cfcbd2acc2b6639abb75e68e4bf1e301622ee1d41bdeed728aa49d74578918fe5da954860a29a9a6249e651db3edae941f816bf7</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/software.amazon.awssdk/sdk-core@2.20.51?type=jar</purl>\n+      <purl>pkg:maven/org.codehaus.plexus/plexus-classworlds@2.7.0?type=jar</purl>\n       <modified>false</modified>\n+      <externalReferences>\n+        <reference type=\"issue-tracker\">\n+          <url>http://github.com/codehaus-plexus/plexus-classworlds/issues</url>\n+        </reference>\n+      </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-telegram-java-sdk@1.6.0?type=jar\">\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-google-chat-java-sdk@1.6.0?type=jar\">\n       <group>org.jreleaser</group>\n-      <name>jreleaser-telegram-java-sdk</name>\n+      <name>jreleaser-google-chat-java-sdk</name>\n       <version>1.6.0</version>\n-      <hashes>\n-        <hash alg=\"MD5\">61b592b20cd4efa54a0ac55c22667db8</hash>\n-        <hash alg=\"SHA-1\">65963268201e745a441da57cca4bcc5bbc31fdd2</hash>\n-        <hash alg=\"SHA-256\">1b509c35ef7b4ab28ad2918cc30ba3e3aff0d1a1873e29a8e81357d14d562353</hash>\n-        <hash alg=\"SHA-512\">b7fa8083aed609a964183b82c3977ecc3e4718cefd08351b3e4a036879963481bd088ff1aacc91724f24a34a39da84e86f3e104a5fe3b40fe94a6a8c854d60bd</hash>\n-        <hash alg=\"SHA-384\">b05a70fd5db34ceeba33c4a032818e3ce7dc670dda76fa3b3abf1f76eba85d165389d7534139514442f55d1408061bb3</hash>\n-        <hash alg=\"SHA3-384\">3c2d49bd40531b48d68192a6a129033a38fa26be3579d50b19c94de166debff88c7bc2a15f5de3470761f4043e35dc44</hash>\n-        <hash alg=\"SHA3-256\">d91a2fecf4f9e39551ed03e63e6d8f172dee8880cfa708fea9a99ab4c70781d9</hash>\n-        <hash alg=\"SHA3-512\">5341ac0a5f7a04e3b6b200165a2459984edc0787558aba78207ff9668045673a89b2816d757cec986c46ef8ea4d45c4760586d79010ecb0eeff86bf0797bde34</hash>\n-      </hashes>\n-      <licenses/>\n-      <purl>pkg:maven/org.jreleaser/jreleaser-telegram-java-sdk@1.6.0?type=jar</purl>\n+      <description>Java SDK for Google Chat</description>\n+      <licenses>\n+        <license>\n+          <id>Apache-2.0</id>\n+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>\n+        </license>\n+      </licenses>\n+      <purl>pkg:maven/org.jreleaser/jreleaser-google-chat-java-sdk@1.6.0?type=jar</purl>\n       <modified>false</modified>\n+      <externalReferences>\n+        <reference type=\"vcs\">\n+          <url>https://github.com/jreleaser/jreleaser</url>\n+        </reference>\n+      </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar\">\n-      <group>org.apache.commons</group>\n-      <name>commons-text</name>\n-      <version>1.10.0</version>\n-      <description>Apache Commons Text is a library focused on algorithms working on strings.</description>\n+    <component type=\"library\" bom-ref=\"pkg:maven/com.github.sbaudoin/yamllint@1.5.0?type=jar\">\n+      <group>com.github.sbaudoin</group>\n+      <name>yamllint</name>\n+      <version>1.5.0</version>\n+      <description>YAML 1.1 linter</description>\n       <hashes>\n-        <hash alg=\"MD5\">4afc9bfa2d31dbf7330c98fcc954b892</hash>\n-        <hash alg=\"SHA-1\">3363381aef8cef2dbc1023b3e3a9433b08b64e01</hash>\n-        <hash alg=\"SHA-256\">770cd903fa7b604d1f7ef7ba17f84108667294b2b478be8ed1af3bffb4ae0018</hash>\n-        <hash alg=\"SHA-512\">afd836a1094449e0a791fee67363666c47b6d24acff353a5089b837b332c0f4af89565c354682521e37062d20e6b52d70c77bb4f24cca9b9532c274fc708a831</hash>\n-        <hash alg=\"SHA-384\">06c56e6e513dd77cf10d0da46cdea08c34e220e81fa024735b668c6650df4234e564fe865ff5cafea963f56b1e8ffd4a</hash>\n-        <hash alg=\"SHA3-384\">f09065ed066c25debf8c78cbb0bcc738e1ea283302ec992dcfb649acb90091cff879465c65a162e94534d454e3b4e9bb</hash>\n-        <hash alg=\"SHA3-256\">0b59c567164bb755f2353b78ba66744000a8c4b35e1df05255b080a21c3a3dd5</hash>\n-        <hash alg=\"SHA3-512\">f0fbce02a862b70f472a27d0722c54ac111ca2eb94584b8b0b73d1926aec26047cd92542ad0b3cf980a6825077587f41b194aa93d6f6350d1b87e59e8df1be7c</hash>\n+        <hash alg=\"MD5\">bc2f934bd698696823f9ecc7677a20cd</hash>\n+        <hash alg=\"SHA-1\">d3d53f3d461edd88fb8bfab89169122b29a62b4f</hash>\n+        <hash alg=\"SHA-256\">5bba1d3ce753620e290835d561c13b0411884cbf4bf1c35525d5ad26ef4d2391</hash>\n+        <hash alg=\"SHA-512\">e8b42c4ba8250246f7f8cedb5a5787bfd453dfa9d71951f366e2b1d1e385ab5ef2bac0605aaedae5224d8fda12153fcd6983bfc4cb60448978c0f18c44136b05</hash>\n+        <hash alg=\"SHA-384\">161adc86a1301608ee5af9f51390217f670ad6edf2215ae382a35111476b08f0aa35d925cf9256f81818c236c1f9b2eb</hash>\n+        <hash alg=\"SHA3-384\">89502cc5f7ee210448f4cc3c6e0cf61a1f31726b8e7f00f82aceab823dc2a0b66c17d76f0935c9fa213fc33d21fd918b</hash>\n+        <hash alg=\"SHA3-256\">e7db7ae83b8f184b28cb61269786102a80a2b29bd44d50693504bc7468a1c4c5</hash>\n+        <hash alg=\"SHA3-512\">e8e018b4bcd6e56492c33225927ab828d7a725d56d08ce33f7193e11f53c961fdfaaadfb5d6745c3b6048787a9cb0ff6b8398a3925c5553710d387df7716d3aa</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar</purl>\n+      <purl>pkg:maven/com.github.sbaudoin/yamllint@1.5.0?type=jar</purl>\n       <modified>false</modified>\n       <externalReferences>\n         <reference type=\"issue-tracker\">\n-          <url>https://issues.apache.org/jira/browse/TEXT</url>\n+          <url>https://github.com/sbaudoin/yamllint/issues</url>\n         </reference>\n         <reference type=\"vcs\">\n-          <url>https://gitbox.apache.org/repos/asf?p=commons-text.git</url>\n+          <url>https://github.com/sbaudoin/yamllint.git</url>\n         </reference>\n       </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar\">\n-      <publisher>fasterxml.com</publisher>\n-      <group>org.codehaus.woodstox</group>\n-      <name>stax2-api</name>\n-      <version>4.2.1</version>\n-      <description>tax2 API is an extension to basic Stax 1.0 API that adds significant new functionality, such as full-featured bi-direction validation interface and high-performance Typed Access API.</description>\n+    <component type=\"library\" bom-ref=\"pkg:maven/software.amazon.awssdk/protocol-core@2.20.51?type=jar\">\n+      <group>software.amazon.awssdk</group>\n+      <name>protocol-core</name>\n+      <version>2.20.51</version>\n+      <description>The AWS SDK for Java - module holds the core protocol classes</description>\n       <hashes>\n-        <hash alg=\"MD5\">af8377bc7882332e22456616a9f164f6</hash>\n-        <hash alg=\"SHA-1\">a3f7325c52240418c2ba257b103c3c550e140c83</hash>\n-        <hash alg=\"SHA-256\">678567e48b51a42c65c699f266539ad3d676d4b1a5b0ad7d89ece8b9d5772579</hash>\n-        <hash alg=\"SHA-512\">00efc5d4d17540fb180c5b20d456630a8b3262dff46676689ae916ba16f0fbd9b1a71c7badfb254faad6597f94fed1edb96f77c15f40178eaf4d8cd35cea5e8d</hash>\n-        <hash alg=\"SHA-384\">97a6a9f0cc666776e4a4f08729c303d2a602ce5c25ee633cd6c54c72f12d11e9d43634ca6ca4ef7da5973a52030384da</hash>\n-        <hash alg=\"SHA3-384\">683a1f110ab84333e7517dabe175b91d7ea2fbead2f9d02acf798c588a7508bc67580642afa8d57441bc56ce610d5b0f</hash>\n-        <hash alg=\"SHA3-256\">5e8e54209fb6b580e928e703ef11645aff1a21dfd47cca2dc0e53d0befaef09c</hash>\n-        <hash alg=\"SHA3-512\">d79338a481605c94e144c967cb7adbc6cfd06ee6a1182b5ebc8cd8ad3deedd707931e404aa197bc94d3b5a5d82a2e6dd6a2f6cc9dafc42ce3ad5061076b05199</hash>\n+        <hash alg=\"MD5\">3d0b4657b8d3be3a31000ffe35887b87</hash>\n+        <hash alg=\"SHA-1\">468ae64371ed038de20ff7dc0a390bc10df83b53</hash>\n+        <hash alg=\"SHA-256\">e250389e15ca5e9359982d506852f25f87f839a5e4db1d7127f2b3e85fff4d13</hash>\n+        <hash alg=\"SHA-512\">dc61e56b5608bedd5a5e1cf2bee29566b89a06e8523d19b3a8290eda59d261baa55d34525e922e52c93a6af6191eb526d1bf5ae2946cf3b2c12eb8bedf173549</hash>\n+        <hash alg=\"SHA-384\">356fceb1793b17cc9a4c3ddf4c4c0fb167a318c1f301f8dd78fc38802466b6ae6061abb6c526255360c93f0ac00ee867</hash>\n+        <hash alg=\"SHA3-384\">9eb4084ced509ca754d3c3018d137053c064dd593a339874c4e2bbb26d2d746d4a0f92268e1750af5856df5e61d5ed8b</hash>\n+        <hash alg=\"SHA3-256\">c403de7790b63e51b2c3b0df3e19687767157e99ed182c7b23a839ee4eec7165</hash>\n+        <hash alg=\"SHA3-512\">8e3d1d826376124f0530614cb28ea44723e7eb11c7ee8f44aa56b4c905eec7058a4e9dd2e40c541dfc814575facd612b9f5e28dbbf1c7c03f55b91f6d3721290</hash>\n       </hashes>\n       <licenses>\n         <license>\n-          <id>BSD-4-Clause</id>\n+          <id>Apache-2.0</id>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar</purl>\n+      <purl>pkg:maven/software.amazon.awssdk/protocol-core@2.20.51?type=jar</purl>\n       <modified>false</modified>\n-      <externalReferences>\n-        <reference type=\"website\">\n-          <url>http://fasterxml.com</url>\n-        </reference>\n-        <reference type=\"vcs\">\n-          <url>http://github.com/FasterXML/stax2-api</url>\n-        </reference>\n-      </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-twitter-java-sdk@1.6.0?type=jar\">\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-ftp-java-sdk@1.6.0?type=jar\">\n       <group>org.jreleaser</group>\n-      <name>jreleaser-twitter-java-sdk</name>\n+      <name>jreleaser-ftp-java-sdk</name>\n       <version>1.6.0</version>\n-      <hashes>\n-        <hash alg=\"MD5\">0aa9503dfd06d524b7bbc67efcc9c9ab</hash>\n-        <hash alg=\"SHA-1\">0a75b7ed8beaea5ae17c64ce620c67b4b3845fd6</hash>\n-        <hash alg=\"SHA-256\">1fdc4313e339a4c7f5f9a2ed25ab54a1e22dee1f724dea31197eb4ac8c4d3f1e</hash>\n-        <hash alg=\"SHA-512\">2d420ee55d6f384907e868a3928d12eee6e4fd3be7aa95f5861c95714a7e12d77c530ee655d94bb977f8fcc2f761e190cdb3b784c2ce3632ca1839f18abacde0</hash>\n-        <hash alg=\"SHA-384\">cf4bf52bcad030b41dd8703f98ecc6404ba5d7c3ee0b1aa6cb6ddf5081839af6d74518a8cdd5257e7ee81ed91592b48d</hash>\n-        <hash alg=\"SHA3-384\">f6b6c52d963cca2359aba65421b4dacbd627d206ecc5d06464a20055fe50cd383c61ad441acf8b6612e46aa296f1ab6b</hash>\n-        <hash alg=\"SHA3-256\">9cfaa44598b510932a7c24859a5ee13da4b32360fa6c79315628e4aa74c93158</hash>\n-        <hash alg=\"SHA3-512\">845258552479ad52e9c518abcb24114734c7e01d2694af36176b330d87b0c658c40a4d9ae91c93666f73d1700155618bfe9b8acc723f90f14444472dfe0ebc65</hash>\n-      </hashes>\n-      <licenses/>\n-      <purl>pkg:maven/org.jreleaser/jreleaser-twitter-java-sdk@1.6.0?type=jar</purl>\n+      <description>Java SDK for FTP upload/download</description>\n+      <licenses>\n+        <license>\n+          <id>Apache-2.0</id>\n+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>\n+        </license>\n+      </licenses>\n+      <purl>pkg:maven/org.jreleaser/jreleaser-ftp-java-sdk@1.6.0?type=jar</purl>\n       <modified>false</modified>\n+      <externalReferences>\n+        <reference type=\"vcs\">\n+          <url>https://github.com/jreleaser/jreleaser</url>\n+        </reference>\n+      </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/software.amazon.awssdk/aws-core@2.20.51?type=jar\">\n+    <component type=\"library\" bom-ref=\"pkg:maven/software.amazon.awssdk/http-client-spi@2.20.51?type=jar\">\n       <group>software.amazon.awssdk</group>\n-      <name>aws-core</name>\n+      <name>http-client-spi</name>\n       <version>2.20.51</version>\n-      <description>The AWS SDK for Java - Core runtime module holds the classes that are used by the individual service\n-        clients to interact with\n-        Amazon Web Services. Users need to depend on aws-java-sdk artifact for accessing individual client classes.</description>\n       <hashes>\n-        <hash alg=\"MD5\">9f1facc51eaf0f96979038c8fa2b556a</hash>\n-        <hash alg=\"SHA-1\">637aa646f46cb19da5b5b0e7cff07ca36389b5aa</hash>\n-        <hash alg=\"SHA-256\">60e54a6305c7d7de1c5473b9a32da33e1b517ef77afb9ef9cba2407afda93b9f</hash>\n-        <hash alg=\"SHA-512\">be86cccfb7bc6207928af7369fb89b657eaad6797cdf3bd0191bee5f27a695cb35016944985826012a2712f3b6ef7e2dfdb1399bf752c7ab783b466a54588fa2</hash>\n-        <hash alg=\"SHA-384\">ba6fcf12fa29fe797202efc2f5e0b3fefe3fced71bda349867bd65b647c637db4fb4ef1f7b496f136d47bbfff4285cb3</hash>\n-        <hash alg=\"SHA3-384\">3e9c9d488660989bd06dbeb4d01914078d8ff109f3342a4518d5ff8de78ca546381cb1bf550eb7d3ed96984a5ba98c3b</hash>\n-        <hash alg=\"SHA3-256\">8ecb8982c24f5eed018da2a44e2ee1db25bcb522c08502a958dc47b39d3e7e58</hash>\n-        <hash alg=\"SHA3-512\">2da6b8f8baf2f1c20742f924923bd535d38ac8628537cee69672db31b21988aaede39680aaf0d6504d5b285a81ca38c55419192411164b6c799b45ab8f52d4a1</hash>\n+        <hash alg=\"MD5\">5f1d20ac43c278682cba7bee5f0a40fc</hash>\n+        <hash alg=\"SHA-1\">3e05bdeea9ff32bdc4a82583190b217480f40554</hash>\n+        <hash alg=\"SHA-256\">ee5c9e32d35fb3a858e4c33e164a33ca12e1546a2a0230b892b57ecb3228f112</hash>\n+        <hash alg=\"SHA-512\">0bd388536c765fa3e230cce24da4721affafa16c86bb0af0025aa1cbbb3dca03db961e092a5973119dae569ac5d58f71e9b616bc189667b82c757ab19471f8f1</hash>\n+        <hash alg=\"SHA-384\">33f1f9a1d838fe71dcde06d31e38257967f21829d6479218bad757749ea5b19c1d52f4104611e9c8a03842888d25eafb</hash>\n+        <hash alg=\"SHA3-384\">e3f45e8daf0b3bf4ad4741113cc46868cb5347bc9c6e96e0f689fe24e27e7c1ec122d924ea93c5d1244db7abcbd2a0a1</hash>\n+        <hash alg=\"SHA3-256\">942ac8bf3fcae5f32c95ad1072a89847df7af3c22c61fdbe97a3b4415c59c08f</hash>\n+        <hash alg=\"SHA3-512\">3a29a471c2487d017c6758a5d049da8119615c04b0fef608f73d59d433a20b7c139cc15913249211cd2fbdcb892d8866dc4719d6b7d7000ea5222f3c66c3634d</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/software.amazon.awssdk/aws-core@2.20.51?type=jar</purl>\n+      <purl>pkg:maven/software.amazon.awssdk/http-client-spi@2.20.51?type=jar</purl>\n       <modified>false</modified>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/commons-codec/commons-codec@1.15?type=jar\">\n-      <group>commons-codec</group>\n-      <name>commons-codec</name>\n-      <version>1.15</version>\n-      <description>The Apache Commons Codec package contains simple encoder and decoders for\n-     various formats such as Base64 and Hexadecimal.  In addition to these\n-     widely used encoders and decoders, the codec package also maintains a\n-     collection of phonetic encoding utilities.</description>\n-      <hashes>\n-        <hash alg=\"MD5\">303baf002ce6d382198090aedd9d79a2</hash>\n-        <hash alg=\"SHA-1\">49d94806b6e3dc933dacbd8acb0fdbab8ebd1e5d</hash>\n-        <hash alg=\"SHA-256\">b3e9f6d63a790109bf0d056611fbed1cf69055826defeb9894a71369d246ed63</hash>\n-        <hash alg=\"SHA-512\">da30a716770795fce390e4dd340a8b728f220c6572383ffef55bd5839655d5611fcc06128b2144f6cdcb36f53072a12ec80b04afee787665e7ad0b6e888a6787</hash>\n-        <hash alg=\"SHA-384\">05d0506283716472175d44c2a4766523397bf8a007c18848f9c9a61718cc8aa437f9cb4b91771037ab29a960860b62a0</hash>\n-        <hash alg=\"SHA3-384\">12fad4ef78274b06f97b1243cea6f970088abde082d2de9377d915a34b44f7d7d67807c03e59c849b69f1544e2a9a1be</hash>\n-        <hash alg=\"SHA3-256\">87be248f33f241121f54aad61a9a460a79eabefbf1b5b0dd22aeb95b581f727e</hash>\n-        <hash alg=\"SHA3-512\">8c992c9c569ebaa0bf956a4c5b34fbf5e1ed1c212c2dd896fa216183ee0bcd341e96698af4b9cec7e8880762faa081a3d3a27f51349aa457cb8e373e4f57c788</hash>\n-      </hashes>\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-config-yaml@1.6.0?type=jar\">\n+      <group>org.jreleaser</group>\n+      <name>jreleaser-config-yaml</name>\n+      <version>1.6.0</version>\n+      <description>JReleaser YAML config support</description>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/commons-codec/commons-codec@1.15?type=jar</purl>\n+      <purl>pkg:maven/org.jreleaser/jreleaser-config-yaml@1.6.0?type=jar</purl>\n       <modified>false</modified>\n       <externalReferences>\n-        <reference type=\"issue-tracker\">\n-          <url>https://issues.apache.org/jira/browse/CODEC</url>\n-        </reference>\n         <reference type=\"vcs\">\n-          <url>https://github.com/apache/commons-codec</url>\n+          <url>https://github.com/jreleaser/jreleaser</url>\n         </reference>\n       </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/com.fasterxml.woodstox/woodstox-core@6.5.0?type=jar\">\n-      <publisher>FasterXML</publisher>\n-      <group>com.fasterxml.woodstox</group>\n-      <name>woodstox-core</name>\n-      <version>6.5.0</version>\n-      <description>Woodstox is a high-performance XML processor that implements Stax (JSR-173),\n-SAX2 and Stax2 APIs</description>\n+    <component type=\"library\" bom-ref=\"pkg:maven/software.amazon.awssdk/aws-query-protocol@2.20.51?type=jar\">\n+      <group>software.amazon.awssdk</group>\n+      <name>aws-query-protocol</name>\n+      <version>2.20.51</version>\n+      <description>The AWS SDK for Java - module holds the classes for AWS Query protocol</description>\n       <hashes>\n-        <hash alg=\"MD5\">7faa8bf352ed3d280244cbc43f55c658</hash>\n-        <hash alg=\"SHA-1\">cafa8aac5ddf104d28f172f19294d88d5e8c24c0</hash>\n-        <hash alg=\"SHA-256\">21ad5f842f5332e0e2b56631178df45a8d205921d8370e2d5f557dc7f76cf4e2</hash>\n-        <hash alg=\"SHA-512\">491e0659c8ffe61a8aa8a5e099af6722e6c13313b9607490b28c389b35cc15683df1c360b1e5e161d6067540064188213a481f53f434445979c99925fcd2aaff</hash>\n-        <hash alg=\"SHA-384\">1f20ddfb41422b3a829d0ee2440c37c597e919a1c336df812bb6946639702895b112b6b13859dce195389e2e140a326b</hash>\n-        <hash alg=\"SHA3-384\">f595086bcb02ea7f2d403dbf8f640da6ec11eecad366849dded6ee35cc757280084dc1aa98fb4dd07a52bad745ea38d5</hash>\n-        <hash alg=\"SHA3-256\">19bacb8d935f29a492edde2d2a0c36b74714c37181aa8cfdc5232383ae0015d4</hash>\n-        <hash alg=\"SHA3-512\">678f14a93c4e60ea806aae894db1e89ed3ff3fdf53e899071ad96d4f9038169f0f50d6ea427436a47337273de3fa2f82ba67849180e9b89ce8ebf9252645fa85</hash>\n+        <hash alg=\"MD5\">6794d6e8aad17bf7702af82372421eb9</hash>\n+        <hash alg=\"SHA-1\">7995d1f7684112e2e92a45395a15d7cc1af064a8</hash>\n+        <hash alg=\"SHA-256\">f47256e9af5b92c1d993e4179924da7a0d7a94f46e3d5e11211a4aac23de2f38</hash>\n+        <hash alg=\"SHA-512\">1a92031b06677f98712b98a1935ff100200f8f85c06cc2a10d50bc19c7071a33ef012af9daa4226778833aa920f61932a9f55fd0b9082543a5f15d20385ac563</hash>\n+        <hash alg=\"SHA-384\">bbe4c41051dd2792945bc3a1bad600b946937b51529911170f47d1c6472ff7f4dd52af1e15a1c86ee64d56b12599b654</hash>\n+        <hash alg=\"SHA3-384\">e1a687b8ee22aacf9449a68df1c6ab829b9278131a620c670d7e78cf42459d447615f828ff7e9ea59bee7769bf3cb77e</hash>\n+        <hash alg=\"SHA3-256\">6deabf009c9b593e6656563a045e0895f3616f4b713a24a6d23fb50ee3fd0b80</hash>\n+        <hash alg=\"SHA3-512\">6f0d9c5c501e02094d06f0310c27d930a156424b3ae6479a21bc7a1beb9c776b5cfdfb6e087ff360263bfd68a53b1568d7fe0ccb34e22aed47705f51fa4438f0</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/com.fasterxml.woodstox/woodstox-core@6.5.0?type=jar</purl>\n+      <purl>pkg:maven/software.amazon.awssdk/aws-query-protocol@2.20.51?type=jar</purl>\n+      <modified>false</modified>\n+    </component>\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-gitlab-java-sdk@1.6.0?type=jar\">\n+      <group>org.jreleaser</group>\n+      <name>jreleaser-gitlab-java-sdk</name>\n+      <version>1.6.0</version>\n+      <description>Java SDK for Gitlab</description>\n+      <licenses>\n+        <license>\n+          <id>Apache-2.0</id>\n+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>\n+        </license>\n+      </licenses>\n+      <purl>pkg:maven/org.jreleaser/jreleaser-gitlab-java-sdk@1.6.0?type=jar</purl>\n       <modified>false</modified>\n       <externalReferences>\n-        <reference type=\"website\">\n-          <url>http://fasterxml.com</url>\n-        </reference>\n-        <reference type=\"issue-tracker\">\n-          <url>https://github.com/FasterXML/woodstox/issues</url>\n-        </reference>\n         <reference type=\"vcs\">\n-          <url>https://github.com/FasterXML/woodstox</url>\n+          <url>https://github.com/jreleaser/jreleaser</url>\n         </reference>\n       </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-logger-api@1.6.0?type=jar\">\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-s3-java-sdk@1.6.0?type=jar\">\n       <group>org.jreleaser</group>\n-      <name>jreleaser-logger-api</name>\n+      <name>jreleaser-s3-java-sdk</name>\n       <version>1.6.0</version>\n-      <hashes>\n-        <hash alg=\"MD5\">e7da806a3427ab10405584067d880ead</hash>\n-        <hash alg=\"SHA-1\">92ae4e1826cf1d8321fcefd3f4ece0fa5cc4fc94</hash>\n-        <hash alg=\"SHA-256\">372d4b6cee7af83429f9f054a69f73d38d6fb4c983b14ce97f2599791d59aee9</hash>\n-        <hash alg=\"SHA-512\">c4f4edf49e18f475b7b44677497250cd93af45e302fb39306a94dc8f0ee1f783921967de3e1f1b7591f970a359080f43b24c1499a363280d904c2519d2e9bcb2</hash>\n-        <hash alg=\"SHA-384\">fcdadd6f2e8af30a7761e98f5c717ab1b8f6f0a79825a711454c8c9cc9842cf8fe0f5917b5ea48603eb0ee5788ed7a8b</hash>\n-        <hash alg=\"SHA3-384\">42a3e276d69efc85ce5798c5cd78ba1a910ef328169fb39a1a685eea5b98e9c3bf495124f56b518d553f1ca2e63d62f7</hash>\n-        <hash alg=\"SHA3-256\">0fb4d06e278df39d6633d1a09ed01ad4f7788838668f2ebc097f919384cec97d</hash>\n-        <hash alg=\"SHA3-512\">bb5a8b000955af1038d4d75c0fd8786561b3a2cf7bb804e09e42518a0bcc3e23ab01dd5236de4bdb58fd9b1a0e923982eb6cc6d0e450896bed9c86dfe808675d</hash>\n-      </hashes>\n-      <licenses/>\n-      <purl>pkg:maven/org.jreleaser/jreleaser-logger-api@1.6.0?type=jar</purl>\n+      <description>Java SDK for AWS S3</description>\n+      <licenses>\n+        <license>\n+          <id>Apache-2.0</id>\n+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>\n+        </license>\n+      </licenses>\n+      <purl>pkg:maven/org.jreleaser/jreleaser-s3-java-sdk@1.6.0?type=jar</purl>\n       <modified>false</modified>\n+      <externalReferences>\n+        <reference type=\"vcs\">\n+          <url>https://github.com/jreleaser/jreleaser</url>\n+        </reference>\n+      </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-ssh-java-sdk@1.6.0?type=jar\">\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-genericgit-java-sdk@1.6.0?type=jar\">\n       <group>org.jreleaser</group>\n-      <name>jreleaser-ssh-java-sdk</name>\n+      <name>jreleaser-genericgit-java-sdk</name>\n       <version>1.6.0</version>\n-      <hashes>\n-        <hash alg=\"MD5\">c15a1565ba7d4fce4940115ad517d066</hash>\n-        <hash alg=\"SHA-1\">a04fe651a28baf67c085342f701d4985d182636f</hash>\n-        <hash alg=\"SHA-256\">a6e448e138acab6827d0415ad1920da5ae010b4297e89c25e87f06bd377e41a5</hash>\n-        <hash alg=\"SHA-512\">5839424b0c10c4884fe33fb4827464a52b36aab471a66519965d49374d1a5d158b8d10b7747532978aac24d411239de556e9780db7d1da811f8e3b757275aa00</hash>\n-        <hash alg=\"SHA-384\">843c1f5ce1a157bb1e43081f37b93aae2a05d455aecf7f6dc67710d4052005772adab5cff6cc69b28b2cd15c294d41f4</hash>\n-        <hash alg=\"SHA3-384\">14d6eedf2a06f3e63e1caa067d3d9a30b4d09114ee4ee2747f7162fd5da6bf3aa076491e90893882026a69aa4b2862e6</hash>\n-        <hash alg=\"SHA3-256\">9386c47db5790ccda3b3f52680f7a3d72bfdcc24feadd1e6907e9d9c9d1c004f</hash>\n-        <hash alg=\"SHA3-512\">efccd6ca0eaf4a30fda6b9aa58cce07deb94af83456076b927eaf38d8ebd587b7b65f6f79a0116e15849e8e2d3f2bd59d418d55eab551a12d46bae1d0d8fa073</hash>\n-      </hashes>\n-      <licenses/>\n-      <purl>pkg:maven/org.jreleaser/jreleaser-ssh-java-sdk@1.6.0?type=jar</purl>\n+      <description>Java SDK for a Generic Git service</description>\n+      <licenses>\n+        <license>\n+          <id>Apache-2.0</id>\n+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>\n+        </license>\n+      </licenses>\n+      <purl>pkg:maven/org.jreleaser/jreleaser-genericgit-java-sdk@1.6.0?type=jar</purl>\n       <modified>false</modified>\n+      <externalReferences>\n+        <reference type=\"vcs\">\n+          <url>https://github.com/jreleaser/jreleaser</url>\n+        </reference>\n+      </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.apache.maven/maven-plugin-api@3.8.7?type=jar\">\n-      <group>org.apache.maven</group>\n-      <name>maven-plugin-api</name>\n-      <version>3.8.7</version>\n-      <description>The API for plugins - Mojos - development.</description>\n+    <component type=\"library\" bom-ref=\"pkg:maven/com.github.spullara.mustache.java/compiler@0.9.10?type=jar\">\n+      <group>com.github.spullara.mustache.java</group>\n+      <name>compiler</name>\n+      <version>0.9.10</version>\n+      <description>Implementation of mustache.js for Java</description>\n       <hashes>\n-        <hash alg=\"MD5\">b1cc5a8fda5211df27c48c9e644255aa</hash>\n-        <hash alg=\"SHA-1\">80c6ba199912c82627c11bc65ba81a6d21bd172f</hash>\n-        <hash alg=\"SHA-256\">4f084b22f76f14eb8a795101fb83627ff11b6f2c7cb17f400d54322e7d000f74</hash>\n-        <hash alg=\"SHA-512\">22b0ea6ca5ad6a22d64b9d98eb1dc917e67584acd3fd5a9dc91a5c3e012b6ea3e78666d36ed9d378d0e410dc82d0bbb00939905fd0c8cc506e44d2ceee44aa8d</hash>\n-        <hash alg=\"SHA-384\">bf6d11d928190987d5d8b5a384b25534905e45b573206f46689e63cf338e1a834c027ef9023d48e7ce63b2bcf4e04b74</hash>\n-        <hash alg=\"SHA3-384\">74708bf45757d31a98e12e3937a72e902c830de92cf4514b462a7430c5582bccf2c910303baee29402a83b3e1a2ede35</hash>\n-        <hash alg=\"SHA3-256\">83805e1da8e805c20883249c20aa7e3c66c06db8fd882be9066d76e21e01b801</hash>\n-        <hash alg=\"SHA3-512\">60a413299f9a70e23ec87085361f176a5262774592572f1784f6522638b23ea86ee3c4823982bdb2c4d1c1e27e857d900e6fec096e2930fb2fb5258984007459</hash>\n+        <hash alg=\"MD5\">5638fc78a17d5063cc4b0d00f6e87491</hash>\n+        <hash alg=\"SHA-1\">6111ae24e3be9ecbd75f5fe908583fc14b4f0174</hash>\n+        <hash alg=\"SHA-256\">2b5a9217811cb99846a473fa8e0d233eb33629347b7f44941f6c0fbd4cdf1038</hash>\n+        <hash alg=\"SHA-512\">2ccf3196af2b518c96df748a72a0122d033dc222e1fab3e12f3e2094146d44bec20bd1502390b59abf090cbdf5dd4d580084b07fb7241248b5b8da2605207559</hash>\n+        <hash alg=\"SHA-384\">0204e77a4a64701af5000df6601f4f4c23cb5e53dd39a1325615d4f942cd2c91d04bbac20348ae49731f586282165c33</hash>\n+        <hash alg=\"SHA3-384\">0960da7175835484471f485d481499f8b65f134ff4f1629618560adaa5a08caa897fbefcea190f93106ee9e3273381b2</hash>\n+        <hash alg=\"SHA3-256\">cfb7e640392ef590069e6b1d059dc20b8fcff984a4b267b3969fcf50ed0edd4f</hash>\n+        <hash alg=\"SHA3-512\">db3dad3809879bca835a04da890fd86dbc58ba6637c72f07d02e39d13645ebb6c640b7fecc18a779e58946072078bdf114b91445026a32dd6501b5d1c6e7d933</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/org.apache.maven/maven-plugin-api@3.8.7?type=jar</purl>\n+      <purl>pkg:maven/com.github.spullara.mustache.java/compiler@0.9.10?type=jar</purl>\n       <modified>false</modified>\n+      <externalReferences>\n+        <reference type=\"vcs\">\n+          <url>http://github.com/spullara/mustache.java</url>\n+        </reference>\n+      </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-zulip-java-sdk@1.6.0?type=jar\">\n-      <group>org.jreleaser</group>\n-      <name>jreleaser-zulip-java-sdk</name>\n-      <version>1.6.0</version>\n+    <component type=\"library\" bom-ref=\"pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.2?type=jar\">\n+      <group>com.fasterxml.jackson.core</group>\n+      <name>jackson-databind</name>\n+      <version>2.14.2</version>\n+      <description>General data-binding functionality for Jackson: works on core streaming API</description>\n       <hashes>\n-        <hash alg=\"MD5\">4a8db04495dba44524b01a96804cff34</hash>\n-        <hash alg=\"SHA-1\">b887cc9f5dc3119e6e9d01310fc09846923816d7</hash>\n-        <hash alg=\"SHA-256\">5d7e3cb41b7762ed01be3468b862d514ad5213cca9598aa41e5f4fe28e96fc33</hash>\n-        <hash alg=\"SHA-512\">ef331cedaec3741a8dd7d02b406feb674de9f8129cc0bf7cb4f2e01062b96754cc270bcdf33e758defbda43c6a59757f6512a73b3296a485a3dda96dc3f55405</hash>\n-        <hash alg=\"SHA-384\">c47abbff931ee247927b8d150b97b49ff502977495d3eefaa1107b350ec26c07f5f2578aeb81c02df0e2a72895db58c3</hash>\n-        <hash alg=\"SHA3-384\">d485e56515817e63141e0f387ea1eb20968a80cd46a927b39b5fd19a77f57e41b901c944021c5bcdf4986ae222041c65</hash>\n-        <hash alg=\"SHA3-256\">7a9ace9e81f4b60a58cf345fbdccdb2f0c3084363a6906c0ffef01ef3af6b98d</hash>\n-        <hash alg=\"SHA3-512\">b2c0bbc044263fd1951fa2c076ff5436f1ea3e0470c8b69ecbc66dc0c07833d4dcb9bec44ba4f0de2f9a79dd8fc3b69d8adaa4a7815e5e9e25f60a6a7a8feb34</hash>\n+        <hash alg=\"MD5\">c1b12dd14734cd1986132bf55042dd7e</hash>\n+        <hash alg=\"SHA-1\">01e71fddbc80bb86f71a6345ac1e8ab8a00e7134</hash>\n+        <hash alg=\"SHA-256\">501d3abce4d18dcc381058ec593c5b94477906bba6efbac14dae40a642f77424</hash>\n+        <hash alg=\"SHA-512\">85473a29d23292f49092af9e7a7a63993206847c53b3e71f3c67245d68f7b19cc7c341e0ece409eb5e96602df98a848e957d8691fdd2c5fcddd807df9078255e</hash>\n+        <hash alg=\"SHA-384\">5c54d6c497cb329c3424a30319bf657ea222349eadc5ae74c30e8dc1525d7b60b7785f4d20370267b03343dd738cc13e</hash>\n+        <hash alg=\"SHA3-384\">98ff0b2a4dfc1faf319d4b0d38376c3c7a58b65d071db293232eed810adf2e525fecee3be45c99b41e20cf6a3a8ebef9</hash>\n+        <hash alg=\"SHA3-256\">2dba45f78a0d37402083975e18dbb3201705faf7e533c3e9721b9364c2a1ab0f</hash>\n+        <hash alg=\"SHA3-512\">76ef73198269cfd0922f4ae86c8b7e6a9cd1b96ee55da43ebfe57dd34365cc1c5c5630fadf79e46156a52b6b96b7d1f694f5e4f5c4f6a3d3ebb31c927e414435</hash>\n       </hashes>\n-      <licenses/>\n-      <purl>pkg:maven/org.jreleaser/jreleaser-zulip-java-sdk@1.6.0?type=jar</purl>\n+      <licenses>\n+        <license>\n+          <id>Apache-2.0</id>\n+        </license>\n+      </licenses>\n+      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.2?type=jar</purl>\n       <modified>false</modified>\n+      <externalReferences>\n+        <reference type=\"vcs\">\n+          <url>https://github.com/FasterXML/jackson-databind</url>\n+        </reference>\n+      </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.slf4j/jcl-over-slf4j@2.0.7?type=jar\">\n-      <group>org.slf4j</group>\n-      <name>jcl-over-slf4j</name>\n-      <version>2.0.7</version>\n-      <description>JCL 1.2 implemented over SLF4J</description>\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-resource-bundle@1.6.0?type=jar\">\n+      <group>org.jreleaser</group>\n+      <name>jreleaser-resource-bundle</name>\n+      <version>1.6.0</version>\n+      <description>JReleaser resource bundle</description>\n       <hashes>\n-        <hash alg=\"MD5\">4e8d6cd31f7e6277280c95157ac7845a</hash>\n-        <hash alg=\"SHA-1\">f127fe5ee53404a8b3697cdd032dd1dd6a29dd77</hash>\n-        <hash alg=\"SHA-256\">41806757e1d26dae5d6db2ca7d4a5176eed2d6e709cd86564d4a11dab0601742</hash>\n-        <hash alg=\"SHA-512\">221b39b85145cf7c245acb7f2692a02b6c5816f8b1187a1a77942dd39de958c1b01ecd066682eb88244f87b2a47513d40b6c1e69ef49a43b2a07ba818f124e17</hash>\n-        <hash alg=\"SHA-384\">fa8d53b46cd3ddab0bd265d384a90c35efef6a02a7822aa6f79065cee68d78f6ad7c4d248dea7497af449845dc962730</hash>\n-        <hash alg=\"SHA3-384\">cf06cfeaba477f7738f089ba401fb841074681d1c7f465546cdf0e95751a8bf912493428876a7d9108eef83f637c6a1e</hash>\n-        <hash alg=\"SHA3-256\">efbad2de8683215936c56b3f8fd3492f1cc27c2ee77595a99c794e18777dec42</hash>\n-        <hash alg=\"SHA3-512\">2707d5513e49f6e3ea6dec96510d360cfc125dab164ae5d99a1dcbd628751640f625a70ed749dad66024ae9fd7725f1c6c7f76de7f5a6efc9d8208a9e01922f7</hash>\n+        <hash alg=\"MD5\">8419930ec5e42489dad5e26749a994eb</hash>\n+        <hash alg=\"SHA-1\">050aba092fa794e0cb91158de894a97aff581356</hash>\n+        <hash alg=\"SHA-256\">38434b31fac439399aa37018fa69302a9d1b04be6efb7b23d53d18615e1f4f2b</hash>\n+        <hash alg=\"SHA-512\">c77c476e972e17b25de3aecf75d71482535d68cdc5e4bf556f5d4cab17345b9318d47fa42c9da671769f9bcf7f549efde70b64eff5cb189c805bb406fd705cb8</hash>\n+        <hash alg=\"SHA-384\">b1d8f56681f39c638806e669447d9600507946448b528060d98afc2123c637980ba5609aba4b357c83acd772bfbdb73e</hash>\n+        <hash alg=\"SHA3-384\">74a52a9891c520a0f90ffbab33da0219cd787bbe309ae8eca303de00c6041692554e8d650a6a3925e057322bd00700ff</hash>\n+        <hash alg=\"SHA3-256\">304bae90a7c53e6ad711e54bb8847c3eedc0e18cac03bffa14729918cb59efce</hash>\n+        <hash alg=\"SHA3-512\">16a31cb40ed20dcaa5d34cb6aa2b81325f285b7feb5dda2486206496449fd548ef51117b38a8074a4a106fba9836de72232762dff60f535cd76f5848860c2f6c</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/org.slf4j/jcl-over-slf4j@2.0.7?type=jar</purl>\n+      <purl>pkg:maven/org.jreleaser/jreleaser-resource-bundle@1.6.0?type=jar</purl>\n       <modified>false</modified>\n+      <externalReferences>\n+        <reference type=\"vcs\">\n+          <url>https://github.com/jreleaser/jreleaser</url>\n+        </reference>\n+      </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-slack-java-sdk@1.6.0?type=jar\">\n-      <group>org.jreleaser</group>\n-      <name>jreleaser-slack-java-sdk</name>\n-      <version>1.6.0</version>\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.apache.commons/commons-jexl3@3.3?type=jar\">\n+      <group>org.apache.commons</group>\n+      <name>commons-jexl3</name>\n+      <version>3.3</version>\n+      <description>JEXL is a library intended to facilitate the implementation of scripting features in\n+        applications and frameworks written in Java.</description>\n       <hashes>\n-        <hash alg=\"MD5\">555f2bd9efc591ccf89382e8232cfe03</hash>\n-        <hash alg=\"SHA-1\">40a17d20b160bea8083852f9410e128343e36387</hash>\n-        <hash alg=\"SHA-256\">02a0ae259db8f71f3a5227efc6a127862816106cf76fb2ffc3e76bca7d4d2571</hash>\n-        <hash alg=\"SHA-512\">0767a19fb84b858724a6f004c6d9acc80827b6038a7f38362a76b84f0137e4a19bd3628e6952be15c63aca269de71fa11191d457afd0a203bcaae7bd81f496c9</hash>\n-        <hash alg=\"SHA-384\">a04f3886dae4f670f7cf07e917aec6565d5f002efa6896789af5f137fdb4d31af088487c78f8277566f5aca8d02fd457</hash>\n-        <hash alg=\"SHA3-384\">ab0acc86b2d2029f547ca75ddaa35c4acae3375ebac3c97cb4159927b9a76af48d1db4763f7d33c592bff6710b911a42</hash>\n-        <hash alg=\"SHA3-256\">02bcdabf1c9d715a42f65367ff672a2631f76004c830d19702e9a85fb21edd5f</hash>\n-        <hash alg=\"SHA3-512\">a948c0926da0cc622efd48f5ff365992ba9de05275bda241a60f07f9bfb77dac905db45a92370bb50a4aacd5a4a6ab5c7d0b969b47b2d87685e52a826854ec6f</hash>\n+        <hash alg=\"MD5\">3a332e3beb67b3a2a20bd0a950fc57c4</hash>\n+        <hash alg=\"SHA-1\">c76b4cfa436c3e79e04806e62656b09968c388ba</hash>\n+        <hash alg=\"SHA-256\">07b0ff6c5a10ffb2e2c02da9e2c0e2e6702df44178cfb76881f69447fc386014</hash>\n+        <hash alg=\"SHA-512\">879111d1c3ad021ea3961e49161b3ff6ba251044ffef1ca4d36d880d9a09b1f395e17eef221a13274303f44e116204ae4b2a3ee3e931f117fc901e321d59b5c6</hash>\n+        <hash alg=\"SHA-384\">7a268bf2c903be86813fcc7f06158abf79d558ee59ebf03470ebd06ca6e6d169beb1c3600e07c20c4f95fa7827fde841</hash>\n+        <hash alg=\"SHA3-384\">1803d239f17f7eeee6edb69d38c4473319fd4eeeb684eda5c38b577a7aaf42965ce41d9082d515d5007be9a0b0712d81</hash>\n+        <hash alg=\"SHA3-256\">01163da5e720b6d1f6bf8b6e9e398d26a1be92b3f18ef6089d218d54166b0c01</hash>\n+        <hash alg=\"SHA3-512\">8abdd72c14492340c05fd5d3555682a308ac00ac1b1e1e15ae38abc47f454f50db9e0727a49df72a50bf49f1447a6ca9dadc48b9ffd45a043bcbae9e5e050d3d</hash>\n       </hashes>\n-      <licenses/>\n-      <purl>pkg:maven/org.jreleaser/jreleaser-slack-java-sdk@1.6.0?type=jar</purl>\n+      <licenses>\n+        <license>\n+          <id>Apache-2.0</id>\n+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>\n+        </license>\n+      </licenses>\n+      <purl>pkg:maven/org.apache.commons/commons-jexl3@3.3?type=jar</purl>\n       <modified>false</modified>\n+      <externalReferences>\n+        <reference type=\"issue-tracker\">\n+          <url>https://issues.apache.org/jira/browse/JEXL</url>\n+        </reference>\n+        <reference type=\"vcs\">\n+          <url>https://gitbox.apache.org/repos/asf/commons-jexl.git</url>\n+        </reference>\n+      </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/com.jcraft/jzlib@1.1.3?type=jar\">\n-      <publisher>jcraft</publisher>\n-      <group>com.jcraft</group>\n-      <name>jzlib</name>\n-      <version>1.1.3</version>\n-      <description>JZlib is a re-implementation of zlib in pure Java</description>\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.apache.tika/tika-core@2.7.0?type=jar\">\n+      <publisher>The Apache Software Foundation</publisher>\n+      <group>org.apache.tika</group>\n+      <name>tika-core</name>\n+      <version>2.7.0</version>\n+      <description>This is the core Apache Tika\u2122 toolkit library from which all other modules inherit functionality. It\n+    also\n+    includes the core facades for the Tika API.</description>\n       <hashes>\n-        <hash alg=\"MD5\">386d3714fef534d21175d8885ae48bf7</hash>\n-        <hash alg=\"SHA-1\">c01428efa717624f7aabf4df319939dda9646b2d</hash>\n-        <hash alg=\"SHA-256\">89b1360f407381bf61fde411019d8cbd009ebb10cff715f3669017a031027560</hash>\n-        <hash alg=\"SHA-512\">339793df0001214aaadac2a5456c3cd54a0c09ba2c9e73cf13155adbfdf1c2a953f7336903e45e76a52ce6b48c5b7c78436667d7836e7354e02e85ba0908afd3</hash>\n-        <hash alg=\"SHA-384\">e0fe861e00a6136b1c97ae781ef56068b0e30c22a64ba4186b1703fd543878920e809f32756323f0fa68afc25f64653e</hash>\n-        <hash alg=\"SHA3-384\">48f4e07ed293214fedb6ed444886131225f20e591ab0ac8236f64498b2f9aae067d0cb92c8e100263e6e9ccad8074c52</hash>\n-        <hash alg=\"SHA3-256\">1a141fb006354f69bbf72a11e15c716be8260f7670ceff4ca764394e4473a91e</hash>\n-        <hash alg=\"SHA3-512\">90236a8e878a8838ddc5f3129a1a9ab84d0849702bc4b8ec02d6c5dc09271927359d7da1121f55f36c16bd7d371b6fc631d5439cdd93d9a30ab248dcd84d4618</hash>\n+        <hash alg=\"MD5\">42b3dd0d4679ec6bafd848b6c0cb3035</hash>\n+        <hash alg=\"SHA-1\">e9e8f1a7dc833e633fb2c717e8fa811e3e9dbf4a</hash>\n+        <hash alg=\"SHA-256\">2603961edec8bcee014d2c360e5a9a0cdbf10aa8e6e95cf67abe190c837bb054</hash>\n+        <hash alg=\"SHA-512\">1d0a07cd55db3bdd6d3d169f0747e920491936a7401af45e5f14f10400f3addd93918f8efb80445c0cf9d91803571877d7d4e1429440ab6ae8c49ec36a77e103</hash>\n+        <hash alg=\"SHA-384\">c3e7ad76e7abdaa27d28416e101110eab481f0f72cd0053de9030a0220549c1f346314116e04665ee70cdeba5fcbc5f8</hash>\n+        <hash alg=\"SHA3-384\">97b801fbde8b9b84c13aea4dd087cbb333e7cba52737d7f5c54f4ea46516d80677d363a2063de9cc014773da2bc5c4a5</hash>\n+        <hash alg=\"SHA3-256\">45ce7c3c2ea1ef9b7785a42604a0ec75444a9bd55b0687307e5a874d51f29547</hash>\n+        <hash alg=\"SHA3-512\">bd45003a2aa326c195e847199cda6aa52f5498cacf6faaab99b95826b4812da9590c29a80c0a3811c27403cc52a8e79a38c4770ce4063b7e013566b7e794af98</hash>\n       </hashes>\n       <licenses>\n         <license>\n-          <id>BSD-4-Clause</id>\n+          <id>Apache-2.0</id>\n+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/com.jcraft/jzlib@1.1.3?type=jar</purl>\n+      <purl>pkg:maven/org.apache.tika/tika-core@2.7.0?type=jar</purl>\n       <modified>false</modified>\n       <externalReferences>\n         <reference type=\"website\">\n-          <url>http://www.jcraft.com/</url>\n+          <url>http://www.apache.org</url>\n         </reference>\n+        <reference type=\"build-system\">\n+          <url>https://builds.apache.org/job/Tika-trunk/</url>\n+        </reference>\n+        <reference type=\"issue-tracker\">\n+          <url>https://issues.apache.org/jira/browse/TIKA</url>\n+        </reference>\n+      </externalReferences>\n+    </component>\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-model-impl@1.6.0?type=jar\">\n+      <group>org.jreleaser</group>\n+      <name>jreleaser-model-impl</name>\n+      <version>1.6.0</version>\n+      <description>JReleaser Model implementation</description>\n+      <licenses>\n+        <license>\n+          <id>Apache-2.0</id>\n+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>\n+        </license>\n+      </licenses>\n+      <purl>pkg:maven/org.jreleaser/jreleaser-model-impl@1.6.0?type=jar</purl>\n+      <modified>false</modified>\n+      <externalReferences>\n         <reference type=\"vcs\">\n-          <url>git://github.com/ymnk/jzlib.git</url>\n+          <url>https://github.com/jreleaser/jreleaser</url>\n         </reference>\n       </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/software.amazon.awssdk/third-party-jackson-core@2.20.51?type=jar\">\n+    <component type=\"library\" bom-ref=\"pkg:maven/software.amazon.awssdk/crt-core@2.20.51?type=jar\">\n       <group>software.amazon.awssdk</group>\n-      <name>third-party-jackson-core</name>\n+      <name>crt-core</name>\n       <version>2.20.51</version>\n+      <description>The AWS SDK for Java - AWS CRT Core holds common types that are built on the AWS Common Runtime</description>\n       <hashes>\n-        <hash alg=\"MD5\">754edab759af7a3a0dff1f9d6632579a</hash>\n-        <hash alg=\"SHA-1\">796fd2170ee91bac97cf20804740f98347c3d473</hash>\n-        <hash alg=\"SHA-256\">ccc32bc095398cf037805757c7a4278b4728af98ca18768654b4f70078162343</hash>\n-        <hash alg=\"SHA-512\">34b307a8e2258943c27ecb098571de58858a88d2a357a53e5cc60eb3b8b1844a99339e0287d6dfee5cce257f6a96ccae8f6216ba7e05d1bb69a4a38ca9dd4f81</hash>\n-        <hash alg=\"SHA-384\">d541b577cf460ea23848cf703713bee974b441303676333ec7866beab226d1c808abcfc0c5f10250f46f43bf91ecc15e</hash>\n-        <hash alg=\"SHA3-384\">e328f959d2c37e9d7fcab6b7e08ebac97599d93b5f5b7e629a6ed7effa87a213faa76c639228c6b3ae5d8d2db74409c8</hash>\n-        <hash alg=\"SHA3-256\">726de46a6ea776769da2e0b620bf95267a735123d0847c638637f0da909201cd</hash>\n-        <hash alg=\"SHA3-512\">7369b6097922847dc77ffb7726e16e9f5764de312bd30aa499f1b2a19bfa006517dcdd9800753e3c8861c77fd90a40ebdf6b614da301ebb91377d9806e942f6f</hash>\n+        <hash alg=\"MD5\">4cfe5bc24966d0650fe2be7569a05fc2</hash>\n+        <hash alg=\"SHA-1\">3ac703f55178aafa2fe047cf919401e3f13fea78</hash>\n+        <hash alg=\"SHA-256\">006109b066f3083dea57bb862e8cb2c2093aa5482978ebf58b7632fc43b6c264</hash>\n+        <hash alg=\"SHA-512\">f3a6c54a16c2051b285fe0834f5fa70c39935e8fb7b3ab9efc8ea60ad7750c6bd704389f98928caa312c126114627de956672ee2ff132e0d7ab9ccbcd560c468</hash>\n+        <hash alg=\"SHA-384\">71edae6ec7151293bb0612327de823179ac1c361606698b2a8225ee3af4632f630f36b80b18cd363b62e7fc24d5cdbc0</hash>\n+        <hash alg=\"SHA3-384\">8161c020c37cd8e946cb0d53364fe78ab0b2828acd13f49594a909ccba33f832587b3b7f90d23158fc21fb23534ce2a0</hash>\n+        <hash alg=\"SHA3-256\">ea3bd58b5d11f28b1de5c8a9a00964d998799e934076451f32a7fdbc1fb6b1ca</hash>\n+        <hash alg=\"SHA3-512\">83dd80c1208db834cd4af29485bbbd9d828ebe4b961c5b35bf6047fef9d893debb16b6c712ed2897200bc49ced858c622e5d9ee374ac5213d837b583d6326282</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/software.amazon.awssdk/third-party-jackson-core@2.20.51?type=jar</purl>\n+      <purl>pkg:maven/software.amazon.awssdk/crt-core@2.20.51?type=jar</purl>\n       <modified>false</modified>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar\">\n-      <group>org.slf4j</group>\n-      <name>slf4j-api</name>\n-      <version>2.0.7</version>\n-      <description>The slf4j API</description>\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.commonmark/commonmark@0.21.0?type=jar\">\n+      <group>org.commonmark</group>\n+      <name>commonmark</name>\n+      <version>0.21.0</version>\n+      <description>Core of commonmark-java (implementation of CommonMark for parsing markdown and rendering to HTML)</description>\n       <hashes>\n-        <hash alg=\"MD5\">403dffa46cdd2e3c82da19df4f394a4c</hash>\n-        <hash alg=\"SHA-1\">41eb7184ea9d556f23e18b5cb99cad1f8581fc00</hash>\n-        <hash alg=\"SHA-256\">5d6298b93a1905c32cda6478808ac14c2d4a47e91535e53c41f7feeb85d946f4</hash>\n-        <hash alg=\"SHA-512\">216d2cac27d501972c888f94dfa747d700b80d60813884b6ab4b12c6a3b17ed0c21a1d27e1aa4332c97c828f20039e3913d2763d7e1a3cef36ae4389a276e7a8</hash>\n-        <hash alg=\"SHA-384\">c25b39f418aa726ba8405dfd9b356131f89984e2ef5a55a724a2abf3b7c78443f671105835161d2414d602cf03da9f2d</hash>\n-        <hash alg=\"SHA3-384\">f33abfaac21badae6f85d3ebbc6c1204fd7fda3bb15173e763fa8cee95bce6a8270eec2c8f49343c66c8d2767bc317e1</hash>\n-        <hash alg=\"SHA3-256\">6e00d4b264a2afc4ca4e98f716ecece66c32c626ca3f8c5d56b22092b6fe417b</hash>\n-        <hash alg=\"SHA3-512\">ad7b9142d370fc532a07cdd43881a129b012ff50e2bede3ac27d9bd31ec707bf2f45e82002fa59e962955cc38ab73cdd77713fca50cedc926c046f5617c1285b</hash>\n+        <hash alg=\"MD5\">c0c0bf595a23b868d229b5f5806b0646</hash>\n+        <hash alg=\"SHA-1\">c98f0473b17c87fe4fa2fc62a7c6523a2fe018f0</hash>\n+        <hash alg=\"SHA-256\">81084a7035046fe306f0dbf16ef57a68d08ee5c97004ea867e62b5db46e98afb</hash>\n+        <hash alg=\"SHA-512\">24dd29b724943c3221873bea8886ad8926020dbd2e4fbf7d976b7616ad228808c8cf2639b277a093ed615f7ec93baf8c9a96ce5a1419023be2378ace0118893d</hash>\n+        <hash alg=\"SHA-384\">e212ed3dd01945e4c168c1b4fca9ce485dcff55aaf0734c472dcc58867c625d5b5a41af5fc24f5e348ddfed97bffc30d</hash>\n+        <hash alg=\"SHA3-384\">8e4efaf02b257beadc43e95e0cd62f9cad79eb7699e4d896f2dc1a54abf23f529be7a7f7c315c2fa4bc44e287dda2de7</hash>\n+        <hash alg=\"SHA3-256\">8bd31a3e49f971ab0eed8b9f88025a9718ee83941d33d2ab42acd71120583f25</hash>\n+        <hash alg=\"SHA3-512\">78fc1aa5a37db03e769b6bbf2919db977fd8d7edb71dab65d2df1914dfd9b186a6d85b35f2d3a627b72858abfd463f23622fb990cf4b58a41c812f909df327a8</hash>\n       </hashes>\n       <licenses>\n         <license>\n-          <id>MIT</id>\n-          <url>https://opensource.org/licenses/MIT</url>\n+          <id>BSD-2-Clause</id>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar</purl>\n+      <purl>pkg:maven/org.commonmark/commonmark@0.21.0?type=jar</purl>\n       <modified>false</modified>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-azure-java-sdk@1.6.0?type=jar\">\n-      <group>org.jreleaser</group>\n-      <name>jreleaser-azure-java-sdk</name>\n-      <version>1.6.0</version>\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.1?type=jar\">\n+      <group>org.codehaus.plexus</group>\n+      <name>plexus-component-annotations</name>\n+      <version>2.1.1</version>\n+      <description>Plexus Component \"Java 5\" Annotations, to describe plexus components properties in java sources with\n+    standard annotations instead of javadoc annotations.</description>\n       <hashes>\n-        <hash alg=\"MD5\">85a7d6b600eea1035dbe58c5969018b9</hash>\n-        <hash alg=\"SHA-1\">3ede0ca549abdb27689545f77f02df5163e1109a</hash>\n-        <hash alg=\"SHA-256\">3c1e3c935a1b9d36b0fb0f310fbcc3d76a357e99deb9e82d8ececcd38b939ccb</hash>\n-        <hash alg=\"SHA-512\">4f608a653f455597383722414f17fc5dc03271c26ec06c35b479868b9b1aed8631e1051130059d026d0d2f06043d618326adcc2363fa07b89732324515b27b0f</hash>\n-        <hash alg=\"SHA-384\">0513c293e596cf7995cccddb1435c17c8c79a372eab3eb859c164f618ebcf5bcae4a406bdbdef15707569cee4bf70d79</hash>\n-        <hash alg=\"SHA3-384\">6a5f22105acceeac65933635b66024b8a720944b3c09337646a3e32cfb892e9528549a2ae6b5f4b717044845a49a0431</hash>\n-        <hash alg=\"SHA3-256\">eee559cd262d79f88993fe2322692a95ace2e688fc0944f5aa5158bd2a3018bc</hash>\n-        <hash alg=\"SHA3-512\">df4528c1439010310073a0bef47e772778187d63e1f42efd8723c4472ec0a8c568e61f1ec4a958e6ffbe81d8e780550aafae2d402b5ae527eb50b765ad2e55a7</hash>\n+        <hash alg=\"MD5\">c001d5485e42fc73831e095f3cce0a82</hash>\n+        <hash alg=\"SHA-1\">856d33577e7e404f2438b2f14dbdf4ff5d6078b9</hash>\n+        <hash alg=\"SHA-256\">623711b3db0d3c6beaaf22578aea8b2706baee8b26ea328dfe94d96cbe2835dd</hash>\n+        <hash alg=\"SHA-512\">4495cfe289d1faa605878e7c9bcb274764310409c2d43fa58186c6968f4ff62f32d611e37a95d9dc5e3be31f282b369aeef47e1557e98a3b3665d08eba1d200b</hash>\n+        <hash alg=\"SHA-384\">ff6b0b15b9d9960711e58b660957b21439f9557c1f30091d729a0b4670724081edddf19f51a07dad5d2d61584ef9c997</hash>\n+        <hash alg=\"SHA3-384\">94a9a4aeceecfe18990e567b25e7dc2a2bda1cbbb024a1b3bffc8d98a76ab08fd8555d50e7819148fbd86afcaf1ea07d</hash>\n+        <hash alg=\"SHA3-256\">d5d2308dd7abc07284741d657e7b2c01364d9c9fa7f561c69a2c67c915dfcf5b</hash>\n+        <hash alg=\"SHA3-512\">ccec7f177cda69051523c0da6a868002fb850eea769601412bde67b08c85ac515d8e06f44924c1f7d364a25089f6e43782928f3ff9d0990c22fd2ae1753fa915</hash>\n       </hashes>\n-      <licenses/>\n-      <purl>pkg:maven/org.jreleaser/jreleaser-azure-java-sdk@1.6.0?type=jar</purl>\n+      <licenses>\n+        <license>\n+          <id>Apache-2.0</id>\n+        </license>\n+      </licenses>\n+      <purl>pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.1?type=jar</purl>\n       <modified>false</modified>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.3.5?type=jar\">\n-      <group>org.eclipse.sisu</group>\n-      <name>org.eclipse.sisu.inject</name>\n-      <version>0.3.5</version>\n+    <component type=\"library\" bom-ref=\"pkg:maven/com.hierynomus/asn-one@0.6.0?type=jar\">\n+      <group>com.hierynomus</group>\n+      <name>asn-one</name>\n+      <version>0.6.0</version>\n+      <description>ASN.1 serialization and parsing library</description>\n       <hashes>\n-        <hash alg=\"MD5\">1b296b0ddd911ed3750b3df93b395cd5</hash>\n-        <hash alg=\"SHA-1\">d4265dd4f0f1d7a06d80df5a5f475d5ff9c17140</hash>\n-        <hash alg=\"SHA-256\">c5994010bcdce1d2bd603a4d50c47191ddbd7875d1157b23aaa26d33c82fda13</hash>\n-        <hash alg=\"SHA-512\">f4790768c0d958b3429a3241abb15f9bb6e2fd7f43a5e034dde6a3a6820e6941c00f10ad084d5c38f8edc144e7acbea7ba3dc8952f01dab41e443803db2a4efc</hash>\n-        <hash alg=\"SHA-384\">b76e74a0cda6d88c1c03d40e71d238fa13e2070485c026945ee8dc6da62eacb02071a65df35fa3e4d9d6b343a89fb605</hash>\n-        <hash alg=\"SHA3-384\">a2d3bae2f5e518c7d11e584f6b8b7368f3b927c3405f48e27d4225d4e2f4917fb5623c0071fc47f081200b7d754571d1</hash>\n-        <hash alg=\"SHA3-256\">b998bcdf4f8b5550a543865408e94fadcf1dd37ac19ec37269ff5307220b2775</hash>\n-        <hash alg=\"SHA3-512\">e9331e8a1b4281b45abec89dd9b7dd948207ebd7bed6be5978a5792d59327f7a4d4ee87c6f60392021f24f28439ab4ca4b6305ef6528e1c241c7a27c883b5931</hash>\n+        <hash alg=\"MD5\">5012b14a62f3369439ee0eb62c7d34f9</hash>\n+        <hash alg=\"SHA-1\">7f6141541e0a4d3ae0b02c901c2c1e9a772eb3d7</hash>\n+        <hash alg=\"SHA-256\">e4f70fd92849b52240048b8ebace0c9a17d3bb7b9c882b3c7778cec3458495f5</hash>\n+        <hash alg=\"SHA-512\">475e4b7d9ccdb347039e1cd06aba7e4ae8c009e85781eefcc5ca00f692084c7f1bbff51f2d8f8ba6e00bc6d9dba3d0cf6c22a9df03c42e3f29722b69de1d2101</hash>\n+        <hash alg=\"SHA-384\">6dc0626cd44a83e7ff85064bd53e359530ffd97267deedc8071d78961a86855c1af3c64de33f8f694487376d3f34e8f9</hash>\n+        <hash alg=\"SHA3-384\">fd7dd266ed905efc29ffd3a60324ecf4ae7ff84ad2e7a610a844702630f414de760a76664f1e6d4c02f39beb6dea9169</hash>\n+        <hash alg=\"SHA3-256\">9dc9200a17356b8631862a1a6f16b164bc0678e2f3f5b3bd7b5d9c9a2242a0cf</hash>\n+        <hash alg=\"SHA3-512\">e47d0d8ff9c6bb77654e3ca694c6f221d343a8f16ff75da7fbd22d5437693df182339ed1ca01b178e2a16d58567388249278eba8bd8678662ef92397307ef3cf</hash>\n       </hashes>\n       <licenses>\n         <license>\n-          <id>EPL-1.0</id>\n+          <id>Apache-2.0</id>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.3.5?type=jar</purl>\n+      <purl>pkg:maven/com.hierynomus/asn-one@0.6.0?type=jar</purl>\n       <modified>false</modified>\n+      <externalReferences>\n+        <reference type=\"issue-tracker\">\n+          <url>https://github.com/hierynomus/asn-one/issues</url>\n+        </reference>\n+        <reference type=\"vcs\">\n+          <url>https://github.com/hierynomus/asn-one</url>\n+        </reference>\n+      </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-mastodon-java-sdk@1.6.0?type=jar\">\n-      <group>org.jreleaser</group>\n-      <name>jreleaser-mastodon-java-sdk</name>\n-      <version>1.6.0</version>\n+    <component type=\"library\" bom-ref=\"pkg:maven/io.github.openfeign.form/feign-form@3.8.0?type=jar\">\n+      <group>io.github.openfeign.form</group>\n+      <name>feign-form</name>\n+      <version>3.8.0</version>\n       <hashes>\n-        <hash alg=\"MD5\">2583179240b2c42294a783936e1ca75b</hash>\n-        <hash alg=\"SHA-1\">4472426cbc89136e9bfd3d5778e7e5e13e970e83</hash>\n-        <hash alg=\"SHA-256\">8a7f3ad53939a045a1f5bbf4768d8ac95fc157454c62bb034ada27cc05d4f419</hash>\n-        <hash alg=\"SHA-512\">cd2a31d593354b5e3acdb26bdb7cc91aa2d626f84174b95e18dca59a6ce7776f3aa5474d43b0d115354301cbabe445b38e07d34f4b98878c35736e82be446b0c</hash>\n-        <hash alg=\"SHA-384\">bd5dd17cf24b74ea31c450122a927fe9acbc94f2a256fa82ddfe5a1a1c98429d6c15333eb8d5d7004d50a1f8a0b86bb6</hash>\n-        <hash alg=\"SHA3-384\">7138905968997a5672b07f091529100244dce9bc94b98d86c73afb49b7f54d981b69963557e831ddfd2433eda1ebce59</hash>\n-        <hash alg=\"SHA3-256\">cf707d9521f0a2e7128eb538111a6617e1541a41df675b5fa484d9b669fc57ab</hash>\n-        <hash alg=\"SHA3-512\">6205c6dcd3c7801a4fc22940fa333007e4ec7b7cf158fcb276d849c90295feb97d034c0fce456f86c6abb0c0ce7762846fed1e356933cf1259883e1bdc0ffa23</hash>\n+        <hash alg=\"MD5\">ab48cdaa9aecefe5e938873ba2db3bb0</hash>\n+        <hash alg=\"SHA-1\">3083889996b18443c275a352d3ab4bc6c8321598</hash>\n+        <hash alg=\"SHA-256\">b21d37321b390995c90b5dbb4ff0c33f09d1cc7768207cc0da910ad20bf58961</hash>\n+        <hash alg=\"SHA-512\">3a1718c21e4caffcd5f686d2cde011b2f72a026d03caa03b876ad6e7c8c40b7bd59189eed6efa0654bf988a438775ef2c429fae497d502c1806c8c4d9d474c2e</hash>\n+        <hash alg=\"SHA-384\">02b96ee7cb8c67cdfe63422247035cbb003b7423a82756714d36de926118ac5e96c407fd324090c851962c63f7d4fd6f</hash>\n+        <hash alg=\"SHA3-384\">0d63a4c22216be6259584b62d3753a86220ea181a002641cda45de153501272fd79b7064d21bdee0ecd8129194fd7c3e</hash>\n+        <hash alg=\"SHA3-256\">ffc2832df09d0edf0251c5e6def39b6c36fd2c02c55ad29f0e63e3160cb709e1</hash>\n+        <hash alg=\"SHA3-512\">c2013da332e97e32962ee34459c5834b04ab2f6598960cb06e4f247a2683ced3fac3919d15151be4dae083c74911c7ead1906faabfc8a7cb6245fcd7138ef0df</hash>\n       </hashes>\n-      <licenses/>\n-      <purl>pkg:maven/org.jreleaser/jreleaser-mastodon-java-sdk@1.6.0?type=jar</purl>\n+      <licenses>\n+        <license>\n+          <id>Apache-2.0</id>\n+        </license>\n+      </licenses>\n+      <purl>pkg:maven/io.github.openfeign.form/feign-form@3.8.0?type=jar</purl>\n       <modified>false</modified>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/commons-net/commons-net@3.9.0?type=jar\">\n-      <group>commons-net</group>\n-      <name>commons-net</name>\n-      <version>3.9.0</version>\n-      <description>Apache Commons Net library contains a collection of network utilities and protocol implementations.\n-Supported protocols include: Echo, Finger, FTP, NNTP, NTP, POP3(S), SMTP(S), Telnet, Whois</description>\n-      <hashes>\n-        <hash alg=\"MD5\">5254d7c277c30a378518e99b9d1d3522</hash>\n-        <hash alg=\"SHA-1\">5a4e26802e0a5a42938f987976b55dae4a6cc636</hash>\n-        <hash alg=\"SHA-256\">e3c1566f821b84489308cd933f57e8c00dd8714dc96b898bef844386510d3461</hash>\n-        <hash alg=\"SHA-512\">c76a5e586ef9d7314683580442f9ecef3a3c32f85c0539cc62944d5d4471d1ab06f2e9f5a28f444a9add41541ecc6b6f639e4bf1961b2a29515bffe4d591e17d</hash>\n-        <hash alg=\"SHA-384\">081d2a7131a5b0000b8d6723b079326c530c814a1fc504e60ba6aab527ce8844896b782c424097c3d33310bfe3934026</hash>\n-        <hash alg=\"SHA3-384\">1c3da6c243b6855b95ba625b40a2f0e9ea8c091f5f92735f4f9a620034ce6887ccc1507a483c521ae5aeb07bfc4e4141</hash>\n-        <hash alg=\"SHA3-256\">c7f780c0cd1e1ae7758235b9adf5893c6c503dbaad1bbab96c2804f7e74861d7</hash>\n-        <hash alg=\"SHA3-512\">2346ea5a81ee59eb0f3ed47db11351652e94ce39c4d6ec8f04704d81f51fa0573772625a651f8db665ee3d80cfcbe7ae3decdf753c6e82cceaf80af1b2a250f6</hash>\n-      </hashes>\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-linkedin-java-sdk@1.6.0?type=jar\">\n+      <group>org.jreleaser</group>\n+      <name>jreleaser-linkedin-java-sdk</name>\n+      <version>1.6.0</version>\n+      <description>Java SDK for Linkedin</description>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/commons-net/commons-net@3.9.0?type=jar</purl>\n+      <purl>pkg:maven/org.jreleaser/jreleaser-linkedin-java-sdk@1.6.0?type=jar</purl>\n       <modified>false</modified>\n       <externalReferences>\n-        <reference type=\"issue-tracker\">\n-          <url>https://issues.apache.org/jira/browse/NET</url>\n-        </reference>\n         <reference type=\"vcs\">\n-          <url>https://gitbox.apache.org/repos/asf/commons-net</url>\n+          <url>https://github.com/jreleaser/jreleaser</url>\n         </reference>\n       </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-mattermost-java-sdk@1.6.0?type=jar\">\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-sdkman-java-sdk@1.6.0?type=jar\">\n       <group>org.jreleaser</group>\n-      <name>jreleaser-mattermost-java-sdk</name>\n+      <name>jreleaser-sdkman-java-sdk</name>\n       <version>1.6.0</version>\n-      <hashes>\n-        <hash alg=\"MD5\">ff1b1b7c068c6362fa76fdbaf4c6ad9d</hash>\n-        <hash alg=\"SHA-1\">4c78b85c946624be5aefa2ae9a495631253ab30d</hash>\n-        <hash alg=\"SHA-256\">65fb930f5de439b97743a71bbd3274090f8382cd44585e25bb7c5c86c92665b8</hash>\n-        <hash alg=\"SHA-512\">5d6712bdd2cce531aaa863dda3952106f799018ca35d659add95f66d757bfb13bb4a9d964db447261fcee3e38db862d07a4f5fb80793c6c275839cec87ca3e32</hash>\n-        <hash alg=\"SHA-384\">cd1a118d63b66683f1497a173026da8d3b6fd7e005ca1133793ed8f9f86d60a8328358bc87276c75e49d1d1c95b12e36</hash>\n-        <hash alg=\"SHA3-384\">5c18aafafd1c7a04478c911637e2d655e63a15f600c27f3f313e62359fd740f75934519d4cd47be738ad880b72d5ad00</hash>\n-        <hash alg=\"SHA3-256\">3e717633ed04baa23c662dd8dec06343f3cad4567fcc404b81720d4b9bf48ecd</hash>\n-        <hash alg=\"SHA3-512\">6d4fc1528386263e9c1f01b3cb55111e42cc3ae47b27f44550f6e5a311321a830afd70fd5335f5bf0b22c810f612db6e2d43870a409f2f99ae7922ecaafb2024</hash>\n-      </hashes>\n-      <licenses/>\n-      <purl>pkg:maven/org.jreleaser/jreleaser-mattermost-java-sdk@1.6.0?type=jar</purl>\n+      <description>Java SDK for SDKMAN</description>\n+      <licenses>\n+        <license>\n+          <id>Apache-2.0</id>\n+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>\n+        </license>\n+      </licenses>\n+      <purl>pkg:maven/org.jreleaser/jreleaser-sdkman-java-sdk@1.6.0?type=jar</purl>\n       <modified>false</modified>\n+      <externalReferences>\n+        <reference type=\"vcs\">\n+          <url>https://github.com/jreleaser/jreleaser</url>\n+        </reference>\n+      </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-resource-bundle@1.6.0?type=jar\">\n-      <group>org.jreleaser</group>\n-      <name>jreleaser-resource-bundle</name>\n-      <version>1.6.0</version>\n+    <component type=\"library\" bom-ref=\"pkg:maven/io.github.openfeign/feign-jackson@12.3?type=jar\">\n+      <group>io.github.openfeign</group>\n+      <name>feign-jackson</name>\n+      <version>12.3</version>\n+      <description>Feign Jackson</description>\n       <hashes>\n-        <hash alg=\"MD5\">8419930ec5e42489dad5e26749a994eb</hash>\n-        <hash alg=\"SHA-1\">050aba092fa794e0cb91158de894a97aff581356</hash>\n-        <hash alg=\"SHA-256\">38434b31fac439399aa37018fa69302a9d1b04be6efb7b23d53d18615e1f4f2b</hash>\n-        <hash alg=\"SHA-512\">c77c476e972e17b25de3aecf75d71482535d68cdc5e4bf556f5d4cab17345b9318d47fa42c9da671769f9bcf7f549efde70b64eff5cb189c805bb406fd705cb8</hash>\n-        <hash alg=\"SHA-384\">b1d8f56681f39c638806e669447d9600507946448b528060d98afc2123c637980ba5609aba4b357c83acd772bfbdb73e</hash>\n-        <hash alg=\"SHA3-384\">74a52a9891c520a0f90ffbab33da0219cd787bbe309ae8eca303de00c6041692554e8d650a6a3925e057322bd00700ff</hash>\n-        <hash alg=\"SHA3-256\">304bae90a7c53e6ad711e54bb8847c3eedc0e18cac03bffa14729918cb59efce</hash>\n-        <hash alg=\"SHA3-512\">16a31cb40ed20dcaa5d34cb6aa2b81325f285b7feb5dda2486206496449fd548ef51117b38a8074a4a106fba9836de72232762dff60f535cd76f5848860c2f6c</hash>\n+        <hash alg=\"MD5\">8bbba5bba4c26edb1b5c89e1a4912c22</hash>\n+        <hash alg=\"SHA-1\">583c0ce0354e6ed81d998d5b8f1786ade1e9f2c4</hash>\n+        <hash alg=\"SHA-256\">1dfc43d604693ce51ef3935f27dbfecd2d65636699a088eee32ff37cc50ea479</hash>\n+        <hash alg=\"SHA-512\">8ea71fae9a2a4ad9d06f27e21e078001e1a29761af85e81b91bf2a38e4dd8841184a12fdf467915c234d080aa28484452fe45b9bc0a381ce23d8366b03be1395</hash>\n+        <hash alg=\"SHA-384\">03553ac35a79266a150940fc62d3da7a389b47825102d91392f37b719da94af2d2355c2592d2b68604bf84248c73baf9</hash>\n+        <hash alg=\"SHA3-384\">986284d22c0bbb7abfbc1762447a44d0919c266002d6925c4ca75040f3950a3d943a71dedf2f72592e6a185218c498a9</hash>\n+        <hash alg=\"SHA3-256\">60242fd373d71575ffcb8a4f866b27d291b6acecf83be67e6ff51a13559dc016</hash>\n+        <hash alg=\"SHA3-512\">b7e0392fc793f19b3daf64c7e7b875fb2e4ec7ba2f1681d51c14c5c9efd5991817766753e62999a76bad83c624601f9f5a55304c4e06d2e3cd88ec4c609a1ede</hash>\n       </hashes>\n-      <licenses/>\n-      <purl>pkg:maven/org.jreleaser/jreleaser-resource-bundle@1.6.0?type=jar</purl>\n+      <licenses>\n+        <license>\n+          <id>Apache-2.0</id>\n+        </license>\n+      </licenses>\n+      <purl>pkg:maven/io.github.openfeign/feign-jackson@12.3?type=jar</purl>\n       <modified>false</modified>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/com.googlecode.javaewah/JavaEWAH@1.2.3?type=jar\">\n-      <group>com.googlecode.javaewah</group>\n-      <name>JavaEWAH</name>\n-      <version>1.2.3</version>\n-      <description>The bit array data structure is implemented in Java as the BitSet class. Unfortunately, this fails to scale without compression.\n-  JavaEWAH is a word-aligned compressed variant of the Java bitset class. It uses a 64-bit run-length encoding (RLE) compression scheme.\n-  The goal of word-aligned compression is not to achieve the best compression, but rather to improve query processing time. Hence, we try to save CPU cycles, maybe at the expense of storage. However, the EWAH scheme we implemented is always more efficient storage-wise than an uncompressed bitmap (implemented in Java as the BitSet class). Unlike some alternatives, javaewah does not rely on a patented scheme.</description>\n-      <hashes>\n-        <hash alg=\"MD5\">8fdeda28c1fb10e67b3d79f86bef5e61</hash>\n-        <hash alg=\"SHA-1\">13a27c856e0c8808cee9a64032c58eee11c3adc9</hash>\n-        <hash alg=\"SHA-256\">d65226949713c4c61a784f41c51167e7b0316f93764398ebba9e4336b3d954c2</hash>\n-        <hash alg=\"SHA-512\">48cd9df9252c58e9ffe4583e68607944bcdf2ad7a3be7b4317467f503c4f56cdbde358ca7c4f34fa620d01615072a42f3a572fc4f1237e266310b7508e79bcac</hash>\n-        <hash alg=\"SHA-384\">d1fd074f21b8a54a07d3f4579376d7c3ab72f24814ebc9ba92344e9da4721e9bfa3cda3a599137e4ddf2395a3c5b88e4</hash>\n-        <hash alg=\"SHA3-384\">a553864f196f73c139a104170ab79e780046fb5f322072c5494a6590361021f875afd7168f858b0531b61918ab49b94e</hash>\n-        <hash alg=\"SHA3-256\">bab97f3f893af36c36218a151b0c3fece27d47f358cc19e1ca9c22d77942bb76</hash>\n-        <hash alg=\"SHA3-512\">be817b93c7093d44ec8dded565d7e5651772ce38e9c72283c05191b33d0ecb2798cd385395f553500446573ac49dccc21f4ba3067d71eb89e03daa384d0193be</hash>\n-      </hashes>\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-model-api@1.6.0?type=jar\">\n+      <group>org.jreleaser</group>\n+      <name>jreleaser-model-api</name>\n+      <version>1.6.0</version>\n+      <description>JReleaser Model API</description>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/com.googlecode.javaewah/JavaEWAH@1.2.3?type=jar</purl>\n+      <purl>pkg:maven/org.jreleaser/jreleaser-model-api@1.6.0?type=jar</purl>\n       <modified>false</modified>\n       <externalReferences>\n-        <reference type=\"issue-tracker\">\n-          <url>https://github.com/lemire/javaewah/issues</url>\n-        </reference>\n         <reference type=\"vcs\">\n-          <url>scm:git:git@github.com:lemire/javaewah.git</url>\n+          <url>https://github.com/jreleaser/jreleaser</url>\n         </reference>\n       </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-utils@1.6.0?type=jar\">\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-smtp-java-sdk@1.6.0?type=jar\">\n       <group>org.jreleaser</group>\n-      <name>jreleaser-utils</name>\n+      <name>jreleaser-smtp-java-sdk</name>\n       <version>1.6.0</version>\n+      <description>Java SDK for SMTP</description>\n+      <licenses>\n+        <license>\n+          <id>Apache-2.0</id>\n+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>\n+        </license>\n+      </licenses>\n+      <purl>pkg:maven/org.jreleaser/jreleaser-smtp-java-sdk@1.6.0?type=jar</purl>\n+      <modified>false</modified>\n+      <externalReferences>\n+        <reference type=\"vcs\">\n+          <url>https://github.com/jreleaser/jreleaser</url>\n+        </reference>\n+      </externalReferences>\n+    </component>\n+    <component type=\"library\" bom-ref=\"pkg:maven/software.amazon.awssdk/profiles@2.20.51?type=jar\">\n+      <group>software.amazon.awssdk</group>\n+      <name>profiles</name>\n+      <version>2.20.51</version>\n+      <description>Profile module allows loading information from AWS configuration and credentials files.</description>\n       <hashes>\n-        <hash alg=\"MD5\">ca784b5aa352b016a37b393e9e500325</hash>\n-        <hash alg=\"SHA-1\">b0dde5ebbe5a98e5fa90b101dca5ad56e92c49c8</hash>\n-        <hash alg=\"SHA-256\">02b038af2f098d6019b94f4f4e55b8f901d2b5b4a072b083b23e47bd6a3e23cd</hash>\n-        <hash alg=\"SHA-512\">9b5e03766473ee854f877182a758a4842a9566772405af73cd200388eeeb981712e6a3e57f4f2f14f09a912b0cad625a75c5441b57eaa238699beabf327dd56a</hash>\n-        <hash alg=\"SHA-384\">ebc800a8a0a6d19ac2bc922598f8913df5a5eb972dc46ba4eadec5034538c9c95866839670dbf92ca93b075dcb659a0c</hash>\n-        <hash alg=\"SHA3-384\">ed0ba35caf8b7d7dc67d7350617b6cbd54de336634fd5927f03768a89f74ede798ecf343964ef0484302ee262617756b</hash>\n-        <hash alg=\"SHA3-256\">b81154ce5c428820626ee1a99e7f9bbe63d4803f7f311744a26bb8331fb193cc</hash>\n-        <hash alg=\"SHA3-512\">b6429f8944cedd026f7b0c30328f8b5e2717493624cee82df48f7e69c8fe8a26b0542d447b1795c7fad7ff90affadcc087d69a576d69cbaccf3ccf1ca962be56</hash>\n+        <hash alg=\"MD5\">f45574632db6f8bd3569e6f964ad7e11</hash>\n+        <hash alg=\"SHA-1\">3b1737f5f9d57b20f6982e4a12c069fc990afc20</hash>\n+        <hash alg=\"SHA-256\">1066653a1f695d965ea55800b27cc8e191315731de73ee8b3baa46a8047d0df8</hash>\n+        <hash alg=\"SHA-512\">7e34222ec60c0a9918ac6348e4b54b7f964e35f26416294df553fbdc424d38b2f777abb7498f11b261d8526eb86cf048e5695c9cbecc9f9058e83d51669ae7cb</hash>\n+        <hash alg=\"SHA-384\">d8cb4c2bdc51621c5370148e5fb810b6db796de698965cb140d0a2f57a5adc40afd650ed2ac5dc6c5f701d8dae5cbf0f</hash>\n+        <hash alg=\"SHA3-384\">44dcdf67fa96dcf92193b0d34bb1ea0ac71e44d1c3a2e87a7402b3ee6518afda08abd53d7dc440c9a6f3b3abe65ac1ac</hash>\n+        <hash alg=\"SHA3-256\">5a84e699501b049593fa8c8db89c4037a8f368376a4e4e084eeb8b5ba0fd1327</hash>\n+        <hash alg=\"SHA3-512\">67e2fef5e5c2d10e93abd4bc972d38df9cffc8f5250ed5d006fa1b37aaffae1c7f2acc3d7e9d7f7e9c5cbe30be99a5e922ddf630025b37f82fca0c8a613f75ad</hash>\n       </hashes>\n-      <licenses/>\n-      <purl>pkg:maven/org.jreleaser/jreleaser-utils@1.6.0?type=jar</purl>\n+      <licenses>\n+        <license>\n+          <id>Apache-2.0</id>\n+        </license>\n+      </licenses>\n+      <purl>pkg:maven/software.amazon.awssdk/profiles@2.20.51?type=jar</purl>\n       <modified>false</modified>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.bouncycastle/bcprov-jdk15on@1.70?type=jar\">\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.bouncycastle/bcpkix-jdk15on@1.70?type=jar\">\n       <group>org.bouncycastle</group>\n-      <name>bcprov-jdk15on</name>\n+      <name>bcpkix-jdk15on</name>\n       <version>1.70</version>\n-      <description>The Bouncy Castle Crypto package is a Java implementation of cryptographic algorithms. This jar contains JCE provider and lightweight API for the Bouncy Castle Cryptography APIs for JDK 1.5 and up.</description>\n+      <description>The Bouncy Castle Java APIs for CMS, PKCS, EAC, TSP, CMP, CRMF, OCSP, and certificate generation. This jar contains APIs for JDK 1.5 and up. The APIs can be used in conjunction with a JCE/JCA provider such as the one provided with the Bouncy Castle Cryptography APIs.</description>\n       <hashes>\n-        <hash alg=\"MD5\">1809d0449a6374279c01fdd3be26cd92</hash>\n-        <hash alg=\"SHA-1\">4636a0d01f74acaf28082fb62b317f1080118371</hash>\n-        <hash alg=\"SHA-256\">8f3c20e3e2d565d26f33e8d4857a37d0d7f8ac39b62a7026496fcab1bdac30d4</hash>\n-        <hash alg=\"SHA-512\">7dccfc636ee4df1487615818cfa99c69941081df95e8ef1eaf4bca165594dff9547e3774fd70de3418abace77d2c45889f70bcd2e6823f8539f359e68eaf36d1</hash>\n-        <hash alg=\"SHA-384\">a0b35d204cd962f1d246fa94b6e8b0fcee1a7c3f37b7e87cda742f2124a25b48794ce11a903ea8d12009c86227b6808d</hash>\n-        <hash alg=\"SHA3-384\">980d81d3d9906764bbf2ae9b3b364ea58628b485ce1dc3d06734e10495d79f2be2e7cc7df61ac88cd67c1104c7af9393</hash>\n-        <hash alg=\"SHA3-256\">10a3572e42d29f609721d795116e3e5d0f6f03efef84bb979ce72e26908d242b</hash>\n-        <hash alg=\"SHA3-512\">a0761cb6deeb86c94b96850c72c0a0eaf516ca849f4b8268f9f60c9ed2a6730e692c15098d47e617da294e931113c6cbcaddec8957c9f029fa595b5f14ff35ac</hash>\n+        <hash alg=\"MD5\">2c383f50d41937eae4fd32c35d8668cd</hash>\n+        <hash alg=\"SHA-1\">f81e5af49571a9d5a109a88f239a73ce87055417</hash>\n+        <hash alg=\"SHA-256\">e5b9cb821df57f70b0593358e89c0e8d7266515da9d088af6c646f63d433c07c</hash>\n+        <hash alg=\"SHA-512\">477001e9556cdbe7fe9eca0c35b3ce29cd6b4d9cd5e13d1f44e3da6433d56a18e23f3679603a23730d78a93bd401113b804562c8bacb1e745e7944127f7afa4c</hash>\n+        <hash alg=\"SHA-384\">249614fa138e4b405ad067f69ee538269ade5a517d8f47b6d69bfc8180ae48c019570540a47314f3b64060a6bca20682</hash>\n+        <hash alg=\"SHA3-384\">13d1354f83de80b89fa91ffc44a14b0aeee418367ec7dde95aaecd70f6d219e4ed1bbf102e099cdfe64737c06dafc199</hash>\n+        <hash alg=\"SHA3-256\">afc8204fb76d0ec343ba436eaeac7834156ee976a1e0b2bafd0075812451046a</hash>\n+        <hash alg=\"SHA3-512\">b55bcc09c9f9c87332160ce068ca349502d628c34b156ebb30a99d94f87606d59ccc62f8ded4a927d57ed9553d274b34a8f9b5602a5eefad66958f9eddbffa28</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <name>Bouncy Castle Licence</name>\n           <url>https://www.bouncycastle.org/licence.html</url>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/org.bouncycastle/bcprov-jdk15on@1.70?type=jar</purl>\n+      <purl>pkg:maven/org.bouncycastle/bcpkix-jdk15on@1.70?type=jar</purl>\n       <modified>false</modified>\n       <externalReferences>\n         <reference type=\"issue-tracker\">\n           <url>https://github.com/bcgit/bc-java/issues</url>\n         </reference>\n         <reference type=\"vcs\">\n           <url>https://github.com/bcgit/bc-java</url>\n         </reference>\n       </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-gitlab-java-sdk@1.6.0?type=jar\">\n-      <group>org.jreleaser</group>\n-      <name>jreleaser-gitlab-java-sdk</name>\n-      <version>1.6.0</version>\n-      <hashes>\n-        <hash alg=\"MD5\">e373e28c652e67e4f7615bf4aa14017a</hash>\n-        <hash alg=\"SHA-1\">fff9ab29ded192b1ea9caa7943644e5372298418</hash>\n-        <hash alg=\"SHA-256\">119f928cc54d317400676fbe71afb4a08ec41c45425dbb39412d9b8277f348d5</hash>\n-        <hash alg=\"SHA-512\">7d5262b777aea18be7c024e97314fbe6815a5b6f0a20d51743a3eb81bd1fe4f73628a5a13e63b20d491aed4416353dbf014494777fd167353100e723b3f7371b</hash>\n-        <hash alg=\"SHA-384\">42c78845869437423337386f1798beacae035a83f1309e7e10473b3320140069d9a20968c8186e91b9833ee1e1581ca0</hash>\n-        <hash alg=\"SHA3-384\">ae4cfec795e3348af145917831b1a80bedb4d6583cc308fb16f3e2867e6c32cbd6752cfdf9f4467094be4d37d9ccb6a6</hash>\n-        <hash alg=\"SHA3-256\">3f29be441acd0a4b880dd62351021f09a99bdab03cf8de82e1e47b845fee770d</hash>\n-        <hash alg=\"SHA3-512\">cb736ae5ad68fb5fa3bbd849df20a18b66ed335362aae921d87b5fbf119bb5a8b6829eaee9ab6f00a5fc83d32aefb4e1b0932fb6df8b38eaf2ed92d7b3c254ef</hash>\n-      </hashes>\n-      <licenses/>\n-      <purl>pkg:maven/org.jreleaser/jreleaser-gitlab-java-sdk@1.6.0?type=jar</purl>\n-      <modified>false</modified>\n-    </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/software.amazon.awssdk/metrics-spi@2.20.51?type=jar\">\n+    <component type=\"library\" bom-ref=\"pkg:maven/software.amazon.awssdk/aws-xml-protocol@2.20.51?type=jar\">\n       <group>software.amazon.awssdk</group>\n-      <name>metrics-spi</name>\n+      <name>aws-xml-protocol</name>\n       <version>2.20.51</version>\n-      <description>This is the base module for SDK metrics feature. It contains the interfaces used for metrics feature\n-        that are used by other modules in the library.</description>\n+      <description>The AWS SDK for Java - module holds the classes for AWS Xml protocol</description>\n       <hashes>\n-        <hash alg=\"MD5\">6d4145875ba12db8f7e3dac57e9ec0fb</hash>\n-        <hash alg=\"SHA-1\">b878ceda314f2bb0820afcf7eca3c5bfa7a16a37</hash>\n-        <hash alg=\"SHA-256\">ffa8629a48d23b175def8de4ef73026f399dad55345f7c56fa6772f2c2089dc7</hash>\n-        <hash alg=\"SHA-512\">bcc1aa5a3930ecc6e2568e240fd48dee8525666dc60e22de99c075dbe931d191f77cd47fd8ebcda7db2e8b3c0d64492f28d01d949a36b504cd345d8f0d1e04d3</hash>\n-        <hash alg=\"SHA-384\">f0065e7b61fa109e8785e7cd22173e362fa6253ae7eb482802b968faa9e7f0d660fe9eb684c719852087e057878bd8fc</hash>\n-        <hash alg=\"SHA3-384\">8c7cca3f3a754f4f5057f073eb525a50c339d8dec1c867ca0c8d0b4afe037ed63fb86b530812b786a74d0ee9605fe02a</hash>\n-        <hash alg=\"SHA3-256\">24844edfd3c2bc025d03d3d7d77c7fe8599210b5945e3e417d137f0edb81ebee</hash>\n-        <hash alg=\"SHA3-512\">5a42a47951ed5c05fbd1276794c23cc863746b01ea0ee6e85897eca401392b0bca77b8d284b53e68a3bd5df618f7d3637a0a7e2387c501f98db6bbd5f17546e6</hash>\n+        <hash alg=\"MD5\">be387d57689357c6412edacc0ed7b918</hash>\n+        <hash alg=\"SHA-1\">8036f7d4821c5232b8dd0254a11b75a873878e71</hash>\n+        <hash alg=\"SHA-256\">05d3c0576b0abac13044a0a9088626f2c5a809d7829c239ee03da66d8475d277</hash>\n+        <hash alg=\"SHA-512\">62c00d21ba56575d4f73a3be511803ab8993862d6d58aeda5c9906ca6b4817b64f60e5d22227aa895b44cd9e87639c9bde6b2d5676e2f111825ebe3534a46c6b</hash>\n+        <hash alg=\"SHA-384\">148778757f5c2d60530f91df3338b0ab2d9c311fcb86c2036e4f39bf0cd46e1989f2fbe5ea5f4948d2e9ff5fc3385c09</hash>\n+        <hash alg=\"SHA3-384\">0e45c6bc2039f2ca6ed7b935352f686152fca5273b853f3592cbcda0952fdc26b2e562fd0416f761793d8d5fffdd084f</hash>\n+        <hash alg=\"SHA3-256\">e8736cad1e5ae6e7da24c9f90e413e317724893049af4e353f6f1daec5aa4422</hash>\n+        <hash alg=\"SHA3-512\">b394fc53985672621c467aadda64a44da58eab4a2a14bb47be2e5143b4dd9d85db346db34dbdbd7141991b7ad749644e32fbccff3d402d0585fc166f778b9537</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/software.amazon.awssdk/metrics-spi@2.20.51?type=jar</purl>\n+      <purl>pkg:maven/software.amazon.awssdk/aws-xml-protocol@2.20.51?type=jar</purl>\n       <modified>false</modified>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar\">\n-      <group>org.apache.httpcomponents</group>\n-      <name>httpcore</name>\n-      <version>4.4.16</version>\n-      <description>Apache HttpComponents Core (blocking I/O)</description>\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.twitter4j/twitter4j-core@4.1.2?type=jar\">\n+      <group>org.twitter4j</group>\n+      <name>twitter4j-core</name>\n+      <version>4.1.2</version>\n+      <description>twitter4j</description>\n       <hashes>\n-        <hash alg=\"MD5\">28d2cd9bf8789fd2ec774fb88436ebd1</hash>\n-        <hash alg=\"SHA-1\">51cf043c87253c9f58b539c9f7e44c8894223850</hash>\n-        <hash alg=\"SHA-256\">6c9b3dd142a09dc468e23ad39aad6f75a0f2b85125104469f026e52a474e464f</hash>\n-        <hash alg=\"SHA-512\">168026436a6bcf5e96c0c59606638abbdc30de4b405ae55afde70fdf2895e267a3d48bba6bdadc5a89f38e31da3d9a9dc91e1cab7ea76f5e04322cf1ec63b838</hash>\n-        <hash alg=\"SHA-384\">ba9ceaee1a37ca3201d6a1315ecb0327b495489efd0baa155c219c475df8d3eb69fe77ab0026563db406497626da6562</hash>\n-        <hash alg=\"SHA3-384\">b9dc44dcc7cc86d5036f26d54c4003a2d72808ae7b07a0808bb53505c6d4281b5ad213eb1f3d0fef1113dec57cb0dfe1</hash>\n-        <hash alg=\"SHA3-256\">fd8ab51846476c6c18822151c9ec07b39a9633010b5d20ea937fc6910407bc64</hash>\n-        <hash alg=\"SHA3-512\">b42fa528242981a9d70e4f68ab75a24292df5112c44c21b6f18cb9201ce747885ba1d4dc69bc3d14d0da46a6c2638f937c11bc45749abeb55dc89ddada90cdda</hash>\n+        <hash alg=\"MD5\">e49ac6cdf9fcf8df46e8046a58f37318</hash>\n+        <hash alg=\"SHA-1\">48fa821ad67644648d6a9cce9b793acc34cf3838</hash>\n+        <hash alg=\"SHA-256\">72602281c06d97e92c63ce84bd93d007642fa0bff852f63df12fd123b990b1f2</hash>\n+        <hash alg=\"SHA-512\">0cc76bc361059e746d68864cf7f8018a4aab642416793677c4879e1e4c8e0122cb8ced39f0448865b33ed94cd771f3dba92fcf8225f43e43daebac2087b1e563</hash>\n+        <hash alg=\"SHA-384\">484e15475fd5c337d7696aa369b228cc49ceba90c421bc55c7e365b9dec11e6bfa21cfaabab2de2e432e007e432ecf37</hash>\n+        <hash alg=\"SHA3-384\">f234454d1d564103cc5c623cf98ebef8f7d2ae69c287211d21ebbf55792e0253eac0f7a37b94b14adfd9f7576a01a361</hash>\n+        <hash alg=\"SHA3-256\">8a4e7cf2cce02be7f91951a9be55791d7db07ca6e3360ff66c509f1316e3449b</hash>\n+        <hash alg=\"SHA3-512\">d7cecc92e3d606eeaed7bbfb4e300bf4b22d17a2a58c7d79e4c7ac1da4b819fb02b4fd08e685615268f6572da0ac6703cad244cd9415b0ca26617014d7800e4e</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar</purl>\n-      <modified>false</modified>\n-    </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-model-api@1.6.0?type=jar\">\n-      <group>org.jreleaser</group>\n-      <name>jreleaser-model-api</name>\n-      <version>1.6.0</version>\n-      <hashes>\n-        <hash alg=\"MD5\">288354c621fdfef298e4e8cdc843e2c3</hash>\n-        <hash alg=\"SHA-1\">54bcb05008c6f0b50433f8d0fe82e3a217317db1</hash>\n-        <hash alg=\"SHA-256\">397e18c4fa02ba508e409a119866d4e78d64c6c76f5a4f22b3aefc027b662b9b</hash>\n-        <hash alg=\"SHA-512\">67c4e2f9acb6db78c21cfd23d3411ce1e32b23690a1d5035a285b48cd9b996fd4c80b504d050e87a4a5604e6b56ca52878a464593f0bd8eea53059bcb263289f</hash>\n-        <hash alg=\"SHA-384\">8f67be44af6f792c32f2b86d07738c52e5b742a650d010e8c0b5e60a62db627d5c695f23f24d814f232fc0246d03086c</hash>\n-        <hash alg=\"SHA3-384\">1e5c3dffd4e3c545081904db6dcff892bd2f27285b4fa46a57cdd23c3fbb382ab06268e87d57212996387269b2c8b72f</hash>\n-        <hash alg=\"SHA3-256\">d2b875e45846a0d17cf7f85d6289681ee42897519cdaca9625ffc56b1639909d</hash>\n-        <hash alg=\"SHA3-512\">1a098f05c0735a7ed19cf374440818e9882b0288728f6658ce3709ac534c06cc7dc36ea4d7656a35281758d1ec09c31edf13a98d6680206a0c9fb1dff21ad04f</hash>\n-      </hashes>\n-      <licenses/>\n-      <purl>pkg:maven/org.jreleaser/jreleaser-model-api@1.6.0?type=jar</purl>\n+      <purl>pkg:maven/org.twitter4j/twitter4j-core@4.1.2?type=jar</purl>\n       <modified>false</modified>\n+      <externalReferences>\n+        <reference type=\"vcs\">\n+          <url>https://github.com/Twitter4J/Twitter4J/</url>\n+        </reference>\n+      </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/software.amazon.awssdk/aws-query-protocol@2.20.51?type=jar\">\n-      <group>software.amazon.awssdk</group>\n-      <name>aws-query-protocol</name>\n-      <version>2.20.51</version>\n-      <description>The AWS SDK for Java - module holds the classes for AWS Query protocol</description>\n+    <component type=\"library\" bom-ref=\"pkg:maven/com.fasterxml/classmate@1.5.1?type=jar\">\n+      <publisher>fasterxml.com</publisher>\n+      <group>com.fasterxml</group>\n+      <name>classmate</name>\n+      <version>1.5.1</version>\n+      <description>Library for introspecting types with full generic information\n+        including resolving of field and method types.</description>\n       <hashes>\n-        <hash alg=\"MD5\">6794d6e8aad17bf7702af82372421eb9</hash>\n-        <hash alg=\"SHA-1\">7995d1f7684112e2e92a45395a15d7cc1af064a8</hash>\n-        <hash alg=\"SHA-256\">f47256e9af5b92c1d993e4179924da7a0d7a94f46e3d5e11211a4aac23de2f38</hash>\n-        <hash alg=\"SHA-512\">1a92031b06677f98712b98a1935ff100200f8f85c06cc2a10d50bc19c7071a33ef012af9daa4226778833aa920f61932a9f55fd0b9082543a5f15d20385ac563</hash>\n-        <hash alg=\"SHA-384\">bbe4c41051dd2792945bc3a1bad600b946937b51529911170f47d1c6472ff7f4dd52af1e15a1c86ee64d56b12599b654</hash>\n-        <hash alg=\"SHA3-384\">e1a687b8ee22aacf9449a68df1c6ab829b9278131a620c670d7e78cf42459d447615f828ff7e9ea59bee7769bf3cb77e</hash>\n-        <hash alg=\"SHA3-256\">6deabf009c9b593e6656563a045e0895f3616f4b713a24a6d23fb50ee3fd0b80</hash>\n-        <hash alg=\"SHA3-512\">6f0d9c5c501e02094d06f0310c27d930a156424b3ae6479a21bc7a1beb9c776b5cfdfb6e087ff360263bfd68a53b1568d7fe0ccb34e22aed47705f51fa4438f0</hash>\n+        <hash alg=\"MD5\">e91fcd30ba329fd1b0b6dc5321fd067c</hash>\n+        <hash alg=\"SHA-1\">3fe0bed568c62df5e89f4f174c101eab25345b6c</hash>\n+        <hash alg=\"SHA-256\">aab4de3006808c09d25dd4ff4a3611cfb63c95463cfd99e73d2e1680d229a33b</hash>\n+        <hash alg=\"SHA-512\">7fc4764eb65227f5ba614698a5cf2f9430133f42ec6e2ae53b4c724ee53f258541a0109fe0659e0b9e45729b46c95c00227e696b8d1addcd772c85f877658c9a</hash>\n+        <hash alg=\"SHA-384\">28b4780b2353ebc08dbc02c9a343527a9062a0455bfb4ab135cb639c03e5dfd9c2250a835c44d5f17d275667c2009694</hash>\n+        <hash alg=\"SHA3-384\">b194ace8f1f49f410286bd859866678b95a1b2c6f73e41f48291eb7438dffea57aaa9b177459038b6997771ce4d1cee1</hash>\n+        <hash alg=\"SHA3-256\">50234c94efed4c816eb77bd2f70b869c9f89ddf8ee73dc25e354f4d0b81b3e1f</hash>\n+        <hash alg=\"SHA3-512\">9886421726066b313a62283a6811b76d904ea1c1e9b7b2d850cb47afa189b03cdef053c8f7f6b79e77f2269c45f8cc2ed75c3389e96594b50987fef311d5a25f</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/software.amazon.awssdk/aws-query-protocol@2.20.51?type=jar</purl>\n+      <purl>pkg:maven/com.fasterxml/classmate@1.5.1?type=jar</purl>\n       <modified>false</modified>\n+      <externalReferences>\n+        <reference type=\"website\">\n+          <url>https://fasterxml.com</url>\n+        </reference>\n+        <reference type=\"vcs\">\n+          <url>https://github.com/FasterXML/java-classmate</url>\n+        </reference>\n+      </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-git-java-sdk@1.6.0?type=jar\">\n-      <group>org.jreleaser</group>\n-      <name>jreleaser-git-java-sdk</name>\n-      <version>1.6.0</version>\n+    <component type=\"library\" bom-ref=\"pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.2?type=jar\">\n+      <group>com.fasterxml.jackson.core</group>\n+      <name>jackson-core</name>\n+      <version>2.14.2</version>\n+      <description>Core Jackson processing abstractions (aka Streaming API), implementation for JSON</description>\n       <hashes>\n-        <hash alg=\"MD5\">a82f264ee899604bfe6e634ec5a8818e</hash>\n-        <hash alg=\"SHA-1\">4c5ee97076b5bc0ae4474e6ac1ade64e60702a4f</hash>\n-        <hash alg=\"SHA-256\">ab59b4abd99100aae35f871d548c778a90f0e4aaad5d0eba94af15df688a5775</hash>\n-        <hash alg=\"SHA-512\">447286a510cd5b84f29275627ebf3bb6e930b6e150fa981c591f3266a354a46511a4a5d00cd13f95539541ed6e783641a9c9a4213c493cd7cf479780e427511f</hash>\n-        <hash alg=\"SHA-384\">f266e76c6698ecd59dcf197a55f09d8b567f9e8953e310bff7c0c617416df996ac53c5d9c4468b9b065f1816716ae3ea</hash>\n-        <hash alg=\"SHA3-384\">208684bb1093245f49be449e1a4966fadd1b4840b760aa0a89c861ae18820a63bc3f1b2d895c6e010849712394bb160e</hash>\n-        <hash alg=\"SHA3-256\">454d27e5726aae3f4a92c5da424f306eb159edf40da4da52619e9e878cb48b3a</hash>\n-        <hash alg=\"SHA3-512\">3a995062f0dfeaa46f17214c0c8179a3d8ad4ba71b4579448e16445e5661ba1102044e2d69fd9833b15b51620636f78aa8f9dec87fde449147f2185b5df5b3e6</hash>\n+        <hash alg=\"MD5\">6ee422ee4c481b2d5aacb2b5e36a7dc0</hash>\n+        <hash alg=\"SHA-1\">f804090e6399ce0cf78242db086017512dd71fcc</hash>\n+        <hash alg=\"SHA-256\">b5d37a77c88277b97e3593c8740925216c06df8e4172bbde058528df04ad3e7a</hash>\n+        <hash alg=\"SHA-512\">208953cf72691b3bab1ca2f9a045cccd3d75c46c90099ba884fbf16bc3e45045e5cd014d2c68c96e8a8826f87a5f0e18cb34b35e7ef03348953869c21e197367</hash>\n+        <hash alg=\"SHA-384\">e806595862c5fcdae801d9845befc1d12c97e6036ee839d34590dbd785a422d5832cf4fc5c7ee6e1a5ee7a59f37740f0</hash>\n+        <hash alg=\"SHA3-384\">4fa59f572f2e100e2eba6fc664a3b9f804fabd911a552cb40805f39e624a9c04246b679cf4b017bb782c8272877f49d2</hash>\n+        <hash alg=\"SHA3-256\">cef17d3a539cbf798cfb0bfa9faffa2b7baff3670b50743e91ee58b4c60b59f1</hash>\n+        <hash alg=\"SHA3-512\">fceeed5cb8fe4335d88282d15657762a4728483275a7ff45f50b9fe6a999757ccb37c415d001eb6250226f98f5c576b1b36a83e601fb393cfd34a811c2df5d00</hash>\n       </hashes>\n-      <licenses/>\n-      <purl>pkg:maven/org.jreleaser/jreleaser-git-java-sdk@1.6.0?type=jar</purl>\n+      <licenses>\n+        <license>\n+          <id>Apache-2.0</id>\n+        </license>\n+      </licenses>\n+      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.2?type=jar</purl>\n       <modified>false</modified>\n+      <externalReferences>\n+        <reference type=\"vcs\">\n+          <url>https://github.com/FasterXML/jackson-core</url>\n+        </reference>\n+      </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-gitea-java-sdk@1.6.0?type=jar\">\n-      <group>org.jreleaser</group>\n-      <name>jreleaser-gitea-java-sdk</name>\n-      <version>1.6.0</version>\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.yaml/snakeyaml@1.33?type=jar\">\n+      <group>org.yaml</group>\n+      <name>snakeyaml</name>\n+      <version>1.33</version>\n+      <description>YAML 1.1 parser and emitter for Java</description>\n       <hashes>\n-        <hash alg=\"MD5\">b03ac2ae6a9ad47aa723e2809701b19b</hash>\n-        <hash alg=\"SHA-1\">911583c03aba3956459f6dad6756c5641f299ed7</hash>\n-        <hash alg=\"SHA-256\">61c82313e56811363d7175595c9c3cd0a7506ec1e8ba5fe5311421c3ca5152c3</hash>\n-        <hash alg=\"SHA-512\">38a507eb56a2f58d25547908340097f0674716c65bd53176005ba027b0c3434f7585d482e2c608e8b40a219d4640bad1ee9156a5724112bc08465935c1e4e264</hash>\n-        <hash alg=\"SHA-384\">452da00250b661900cd10641b7c6094feddc1dd5568b6eafb8c077b8d6ad3b9cf50c74dd0a807d7dde1b175e04ae472e</hash>\n-        <hash alg=\"SHA3-384\">a525ba401fb7b13d99295cee33d791b9d6b1a7da41feff2b66b8975df0752e9cc50c91f70c0472654aa64e0e9e9b0cec</hash>\n-        <hash alg=\"SHA3-256\">c4c19681454553c67db05c9362e8668ecc196cffedffd2b3b501731d6641000a</hash>\n-        <hash alg=\"SHA3-512\">920c914f65fb37527861db6ad494ceb4076f5df47e58d3410093a94d6fc7223eaad89cc682d2c5fe6cc541e9c0b80f2be886871df681f085cd7428d471942fb5</hash>\n+        <hash alg=\"MD5\">e0164a637c691c8cf01d29f90a709c02</hash>\n+        <hash alg=\"SHA-1\">2cd0a87ff7df953f810c344bdf2fe3340b954c69</hash>\n+        <hash alg=\"SHA-256\">11ff459788f0a2d781f56a4a86d7e69202cebacd0273d5269c4ae9f02f3fd8f0</hash>\n+        <hash alg=\"SHA-512\">787b72aebb685689ab379ed8f238fc2f4175bb82d285909e39e7ff1ee1b9e64ad8878f4685dadde274f950b0dc77dca3082a52921c11094aa2a535672ae4f33c</hash>\n+        <hash alg=\"SHA-384\">9f0a0a35df2b339830b9e78294634ea894e7096e01709c82d965e24a9fa9ac6ee15edbbbf23368dcd57741de5bf23086</hash>\n+        <hash alg=\"SHA3-384\">91d8fd581d60be4090d3b522d8c119c12449cff2ce6c436d0e53977e1c9fea8686b2b360fb15f4c3507e4f243d7d6170</hash>\n+        <hash alg=\"SHA3-256\">7dcf0429ecb923a66e00ec633bafeb297e3b90e1cc2be0f85443fd61367f355a</hash>\n+        <hash alg=\"SHA3-512\">59b32910dddf63475893f7c830d58ca320cd6183704d80b8111cee7bb1674f97f5699c8ac52f905a5b9a20128b9e2b6a26a07490f217033c858d9c358bedcafc</hash>\n       </hashes>\n-      <licenses/>\n-      <purl>pkg:maven/org.jreleaser/jreleaser-gitea-java-sdk@1.6.0?type=jar</purl>\n+      <licenses>\n+        <license>\n+          <id>Apache-2.0</id>\n+        </license>\n+      </licenses>\n+      <purl>pkg:maven/org.yaml/snakeyaml@1.33?type=jar</purl>\n       <modified>false</modified>\n+      <externalReferences>\n+        <reference type=\"issue-tracker\">\n+          <url>https://bitbucket.org/snakeyaml/snakeyaml/issues</url>\n+        </reference>\n+        <reference type=\"vcs\">\n+          <url>https://bitbucket.org/snakeyaml/snakeyaml/src</url>\n+        </reference>\n+      </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-command-java-sdk@1.6.0?type=jar\">\n-      <group>org.jreleaser</group>\n-      <name>jreleaser-command-java-sdk</name>\n-      <version>1.6.0</version>\n+    <component type=\"library\" bom-ref=\"pkg:maven/commons-net/commons-net@3.9.0?type=jar\">\n+      <group>commons-net</group>\n+      <name>commons-net</name>\n+      <version>3.9.0</version>\n+      <description>Apache Commons Net library contains a collection of network utilities and protocol implementations.\n+Supported protocols include: Echo, Finger, FTP, NNTP, NTP, POP3(S), SMTP(S), Telnet, Whois</description>\n       <hashes>\n-        <hash alg=\"MD5\">acbbfe01e59912d40bdaf2b516b8199d</hash>\n-        <hash alg=\"SHA-1\">f922261945a1a25999d8b4c95326c38f15b167e8</hash>\n-        <hash alg=\"SHA-256\">cc3bbe8d8a2cdcba73857752b9c2fbae3344c8597af7f37ac7cd0926b02d92ea</hash>\n-        <hash alg=\"SHA-512\">d40f5671c80589711087a7dc5e4148ffee88ffacbca4db3a5360c0827e2ccc0e3fe80ed95e9c4b91d8c29617dbf6171a8a849a652e9b7a472e906692cd792498</hash>\n-        <hash alg=\"SHA-384\">cc3b16425ab2505338e26c64b006157218391762d04cec9d4a9a2897ce33036a8cd6f6199b55c80e646bad434322c18c</hash>\n-        <hash alg=\"SHA3-384\">09fe1086a3bbfda7fa50c320ab4c60b056ea2b37002f281bb413a17cc4f8846be4a9bcaf4b6f507a51af74474b189bd1</hash>\n-        <hash alg=\"SHA3-256\">ef9ad8cd599799ffa70998131cfbaf2985c3070a8ff727becac8ceb5480ab900</hash>\n-        <hash alg=\"SHA3-512\">a62c41fdaca8e1849d661ffded5af92bf09e43afc3497c5f923f5d7463756116dabef382cd8649a71473e9e938e698734b09e3d81153a852ff278876cd7ba8c9</hash>\n+        <hash alg=\"MD5\">5254d7c277c30a378518e99b9d1d3522</hash>\n+        <hash alg=\"SHA-1\">5a4e26802e0a5a42938f987976b55dae4a6cc636</hash>\n+        <hash alg=\"SHA-256\">e3c1566f821b84489308cd933f57e8c00dd8714dc96b898bef844386510d3461</hash>\n+        <hash alg=\"SHA-512\">c76a5e586ef9d7314683580442f9ecef3a3c32f85c0539cc62944d5d4471d1ab06f2e9f5a28f444a9add41541ecc6b6f639e4bf1961b2a29515bffe4d591e17d</hash>\n+        <hash alg=\"SHA-384\">081d2a7131a5b0000b8d6723b079326c530c814a1fc504e60ba6aab527ce8844896b782c424097c3d33310bfe3934026</hash>\n+        <hash alg=\"SHA3-384\">1c3da6c243b6855b95ba625b40a2f0e9ea8c091f5f92735f4f9a620034ce6887ccc1507a483c521ae5aeb07bfc4e4141</hash>\n+        <hash alg=\"SHA3-256\">c7f780c0cd1e1ae7758235b9adf5893c6c503dbaad1bbab96c2804f7e74861d7</hash>\n+        <hash alg=\"SHA3-512\">2346ea5a81ee59eb0f3ed47db11351652e94ce39c4d6ec8f04704d81f51fa0573772625a651f8db665ee3d80cfcbe7ae3decdf753c6e82cceaf80af1b2a250f6</hash>\n       </hashes>\n-      <licenses/>\n-      <purl>pkg:maven/org.jreleaser/jreleaser-command-java-sdk@1.6.0?type=jar</purl>\n+      <licenses>\n+        <license>\n+          <id>Apache-2.0</id>\n+        </license>\n+      </licenses>\n+      <purl>pkg:maven/commons-net/commons-net@3.9.0?type=jar</purl>\n       <modified>false</modified>\n+      <externalReferences>\n+        <reference type=\"issue-tracker\">\n+          <url>https://issues.apache.org/jira/browse/NET</url>\n+        </reference>\n+        <reference type=\"vcs\">\n+          <url>https://gitbox.apache.org/repos/asf/commons-net</url>\n+        </reference>\n+      </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-codeberg-java-sdk@1.6.0?type=jar\">\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-azure-java-sdk@1.6.0?type=jar\">\n       <group>org.jreleaser</group>\n-      <name>jreleaser-codeberg-java-sdk</name>\n+      <name>jreleaser-azure-java-sdk</name>\n       <version>1.6.0</version>\n-      <hashes>\n-        <hash alg=\"MD5\">457f9eabfa5e18a86f2bcc56c6b8e1e7</hash>\n-        <hash alg=\"SHA-1\">230f84cd29c59dc71a39fcf65d9cbea9608613c0</hash>\n-        <hash alg=\"SHA-256\">b803ffe598a9a80f66d446127088b96b08cd5857369565114951a08058a7557c</hash>\n-        <hash alg=\"SHA-512\">4e7c66912a2cb0da8741dedea746b46f655016764eb02113c9533fd7f9bbecb848b7a740643a872f719495f805f37c0941234ea24cea6f09f95eec57598ece86</hash>\n-        <hash alg=\"SHA-384\">2a60c9717df271f1a84d31866150748f4f261db2717cc0cd97bb68f069a4cbc9958b2c1abe26d8634ebedc6f537119c1</hash>\n-        <hash alg=\"SHA3-384\">cdaedefcd9d19673420cffe794b5c5ed64c959f073e9822ccaa801c55e1e79c3505198853a7864f117c9a93e1eb9462f</hash>\n-        <hash alg=\"SHA3-256\">f2983baa71b3318ba219014861c6cca18beef02547e88e24932ad99c856427ec</hash>\n-        <hash alg=\"SHA3-512\">3cef6cb766354ff18aba5d44b3edf03ffc63c92add152ba0aaba7210bee5aa9e0ef0cddeb6ead9075d40f3e4aea2aa54af046b0543a5c8d8500e67564b031941</hash>\n-      </hashes>\n-      <licenses/>\n-      <purl>pkg:maven/org.jreleaser/jreleaser-codeberg-java-sdk@1.6.0?type=jar</purl>\n+      <description>Java SDK for Azure</description>\n+      <licenses>\n+        <license>\n+          <id>Apache-2.0</id>\n+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>\n+        </license>\n+      </licenses>\n+      <purl>pkg:maven/org.jreleaser/jreleaser-azure-java-sdk@1.6.0?type=jar</purl>\n       <modified>false</modified>\n+      <externalReferences>\n+        <reference type=\"vcs\">\n+          <url>https://github.com/jreleaser/jreleaser</url>\n+        </reference>\n+      </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/software.amazon.awssdk/protocol-core@2.20.51?type=jar\">\n-      <group>software.amazon.awssdk</group>\n-      <name>protocol-core</name>\n-      <version>2.20.51</version>\n-      <description>The AWS SDK for Java - module holds the core protocol classes</description>\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.slf4j/jcl-over-slf4j@2.0.7?type=jar\">\n+      <group>org.slf4j</group>\n+      <name>jcl-over-slf4j</name>\n+      <version>2.0.7</version>\n+      <description>JCL 1.2 implemented over SLF4J</description>\n       <hashes>\n-        <hash alg=\"MD5\">3d0b4657b8d3be3a31000ffe35887b87</hash>\n-        <hash alg=\"SHA-1\">468ae64371ed038de20ff7dc0a390bc10df83b53</hash>\n-        <hash alg=\"SHA-256\">e250389e15ca5e9359982d506852f25f87f839a5e4db1d7127f2b3e85fff4d13</hash>\n-        <hash alg=\"SHA-512\">dc61e56b5608bedd5a5e1cf2bee29566b89a06e8523d19b3a8290eda59d261baa55d34525e922e52c93a6af6191eb526d1bf5ae2946cf3b2c12eb8bedf173549</hash>\n-        <hash alg=\"SHA-384\">356fceb1793b17cc9a4c3ddf4c4c0fb167a318c1f301f8dd78fc38802466b6ae6061abb6c526255360c93f0ac00ee867</hash>\n-        <hash alg=\"SHA3-384\">9eb4084ced509ca754d3c3018d137053c064dd593a339874c4e2bbb26d2d746d4a0f92268e1750af5856df5e61d5ed8b</hash>\n-        <hash alg=\"SHA3-256\">c403de7790b63e51b2c3b0df3e19687767157e99ed182c7b23a839ee4eec7165</hash>\n-        <hash alg=\"SHA3-512\">8e3d1d826376124f0530614cb28ea44723e7eb11c7ee8f44aa56b4c905eec7058a4e9dd2e40c541dfc814575facd612b9f5e28dbbf1c7c03f55b91f6d3721290</hash>\n+        <hash alg=\"MD5\">4e8d6cd31f7e6277280c95157ac7845a</hash>\n+        <hash alg=\"SHA-1\">f127fe5ee53404a8b3697cdd032dd1dd6a29dd77</hash>\n+        <hash alg=\"SHA-256\">41806757e1d26dae5d6db2ca7d4a5176eed2d6e709cd86564d4a11dab0601742</hash>\n+        <hash alg=\"SHA-512\">221b39b85145cf7c245acb7f2692a02b6c5816f8b1187a1a77942dd39de958c1b01ecd066682eb88244f87b2a47513d40b6c1e69ef49a43b2a07ba818f124e17</hash>\n+        <hash alg=\"SHA-384\">fa8d53b46cd3ddab0bd265d384a90c35efef6a02a7822aa6f79065cee68d78f6ad7c4d248dea7497af449845dc962730</hash>\n+        <hash alg=\"SHA3-384\">cf06cfeaba477f7738f089ba401fb841074681d1c7f465546cdf0e95751a8bf912493428876a7d9108eef83f637c6a1e</hash>\n+        <hash alg=\"SHA3-256\">efbad2de8683215936c56b3f8fd3492f1cc27c2ee77595a99c794e18777dec42</hash>\n+        <hash alg=\"SHA3-512\">2707d5513e49f6e3ea6dec96510d360cfc125dab164ae5d99a1dcbd628751640f625a70ed749dad66024ae9fd7725f1c6c7f76de7f5a6efc9d8208a9e01922f7</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/software.amazon.awssdk/protocol-core@2.20.51?type=jar</purl>\n+      <purl>pkg:maven/org.slf4j/jcl-over-slf4j@2.0.7?type=jar</purl>\n       <modified>false</modified>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/software.amazon.awssdk/regions@2.20.51?type=jar\">\n-      <group>software.amazon.awssdk</group>\n-      <name>regions</name>\n-      <version>2.20.51</version>\n+    <component type=\"library\" bom-ref=\"pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-toml@2.14.2?type=jar\">\n+      <group>com.fasterxml.jackson.dataformat</group>\n+      <name>jackson-dataformat-toml</name>\n+      <version>2.14.2</version>\n+      <description>Support for reading and writing TOML-encoded data via Jackson abstractions.</description>\n       <hashes>\n-        <hash alg=\"MD5\">f87d7272055f055781679f6aae7df61a</hash>\n-        <hash alg=\"SHA-1\">a62a4122d49bc6f5fa9c3aea521dac03d13273dc</hash>\n-        <hash alg=\"SHA-256\">91b9cc0c22554bb7b8c69da48d8861b7ac1213b1977af5393bc56293c005f542</hash>\n-        <hash alg=\"SHA-512\">32ea2e890ebdac92a11f2276229ee244cbb209ab141e8e12327bd191b362ad6f6c40e317d18ef8d6dbed1efd4d506518b4de861be411e31d5e30a6f92b5b5b55</hash>\n-        <hash alg=\"SHA-384\">329e538463fe110b18a3fe1fe2e34eea2257be993dbdb2254f8833a7e3df3b30e35c8da3e01544e83868b543d813ac53</hash>\n-        <hash alg=\"SHA3-384\">433ddf50101f015923dd8e0fd35bcae05595651221e414f9f91cdda10d70738969d3e6c94d0f1fd47380e9c757bd754d</hash>\n-        <hash alg=\"SHA3-256\">e31cc79fcc3025aa48f9a32e80e5abd36b0fb1be2e297bc39dfb99f429443233</hash>\n-        <hash alg=\"SHA3-512\">0ef5edfa599efb2b569ad41d53d337e2eea8c79c38a37c8e0ff0d5a14f2b675281678e5cc5991748d5ad4868665974072bd89d6bae613cf8dc8f2f847248296a</hash>\n+        <hash alg=\"MD5\">34b400b8afaeee54cd30949374bb79d3</hash>\n+        <hash alg=\"SHA-1\">c40f33f9f727b2fd0ecfcb596b114358fd1f08b0</hash>\n+        <hash alg=\"SHA-256\">ce99092b9c4216df5a66cdbc42cc28d78411afaff0a11cc0478b36a7e512a4fb</hash>\n+        <hash alg=\"SHA-512\">393fe13d02cbd785f21ecd20a28449a30c8252dcbd4ad94eba12c71224cb8134eec1b9b6e4c69cfc945e495d6e51038cae7f9c69af8f04c77ee51266407ccea7</hash>\n+        <hash alg=\"SHA-384\">0a418251651b41034c6814a3fc1c833b87aff085d53c04dd040f752ab50e41472fa942670dd7266f86afc4d4c7c753ce</hash>\n+        <hash alg=\"SHA3-384\">ea0eeb1f5de98175287e481fedc3b4e3d1d1aa6a994ec5caec0db9a2c838ba3106c812ffb09a9667caf386089bdc3e61</hash>\n+        <hash alg=\"SHA3-256\">4fb89845d771f6fd863d3829f85bb7931d6ae29339a5b0a7f25231fb68d0d415</hash>\n+        <hash alg=\"SHA3-512\">e2dc3d3303c659e23f3dab88936e2f4256dd76188839e4418fab22fd3fe6419a7b292493b745c42ecf606d94b33c59c72805ecb7d74970e0c25d097cd10be3af</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/software.amazon.awssdk/regions@2.20.51?type=jar</purl>\n+      <purl>pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-toml@2.14.2?type=jar</purl>\n       <modified>false</modified>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/software.amazon.awssdk/utils@2.20.51?type=jar\">\n-      <group>software.amazon.awssdk</group>\n-      <name>utils</name>\n-      <version>2.20.51</version>\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.apache.maven/maven-plugin-api@3.8.7?type=jar\">\n+      <group>org.apache.maven</group>\n+      <name>maven-plugin-api</name>\n+      <version>3.8.7</version>\n+      <description>The API for plugins - Mojos - development.</description>\n       <hashes>\n-        <hash alg=\"MD5\">c66858bba8fdc222d29f6b6d5f127894</hash>\n-        <hash alg=\"SHA-1\">295479c04f8db65535aba0f4b3e642304c09ade4</hash>\n-        <hash alg=\"SHA-256\">89282e9f885914cc3e4951bd46ba83f75c11d88554e19bbed47175c0cc10ac0c</hash>\n-        <hash alg=\"SHA-512\">348f54494d88f5c5123f7b177b1e7699a9ff6772db7c72139d5cce62cdbddb82d4022331857ed21b5a9d6aa7acd70468b166893a08ea30959ee9de781e50f887</hash>\n-        <hash alg=\"SHA-384\">7604765fcdbc2879ed8445af66d0dfcae508d834a53ffe6cf12546fa3703817d0425051bfc51014faeaf00d3c42f7181</hash>\n-        <hash alg=\"SHA3-384\">6a344e509536b26fa1ebbf2207e0194bb455d620d336fd10f7eda276376a39dd09d24f6ef06ba7f3cbf73e6918bb8174</hash>\n-        <hash alg=\"SHA3-256\">4fb56af6eadac87597f0d9f86bf4095caaf18102f625b410f0811bc63ed7208d</hash>\n-        <hash alg=\"SHA3-512\">cdb73cb9cf1537f7fc3305df7ffbaa1ebaaa9ae36f711e2609e0673fef190d17bd2d5e867cd7f73a4cf3dd3144e6156e6661974e6038c90493ffdeeca96eb39e</hash>\n+        <hash alg=\"MD5\">b1cc5a8fda5211df27c48c9e644255aa</hash>\n+        <hash alg=\"SHA-1\">80c6ba199912c82627c11bc65ba81a6d21bd172f</hash>\n+        <hash alg=\"SHA-256\">4f084b22f76f14eb8a795101fb83627ff11b6f2c7cb17f400d54322e7d000f74</hash>\n+        <hash alg=\"SHA-512\">22b0ea6ca5ad6a22d64b9d98eb1dc917e67584acd3fd5a9dc91a5c3e012b6ea3e78666d36ed9d378d0e410dc82d0bbb00939905fd0c8cc506e44d2ceee44aa8d</hash>\n+        <hash alg=\"SHA-384\">bf6d11d928190987d5d8b5a384b25534905e45b573206f46689e63cf338e1a834c027ef9023d48e7ce63b2bcf4e04b74</hash>\n+        <hash alg=\"SHA3-384\">74708bf45757d31a98e12e3937a72e902c830de92cf4514b462a7430c5582bccf2c910303baee29402a83b3e1a2ede35</hash>\n+        <hash alg=\"SHA3-256\">83805e1da8e805c20883249c20aa7e3c66c06db8fd882be9066d76e21e01b801</hash>\n+        <hash alg=\"SHA3-512\">60a413299f9a70e23ec87085361f176a5262774592572f1784f6522638b23ea86ee3c4823982bdb2c4d1c1e27e857d900e6fec096e2930fb2fb5258984007459</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/software.amazon.awssdk/utils@2.20.51?type=jar</purl>\n+      <purl>pkg:maven/org.apache.maven/maven-plugin-api@3.8.7?type=jar</purl>\n       <modified>false</modified>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/com.github.sbaudoin/yamllint@1.5.0?type=jar\">\n-      <group>com.github.sbaudoin</group>\n-      <name>yamllint</name>\n-      <version>1.5.0</version>\n-      <description>YAML 1.1 linter</description>\n+    <component type=\"library\" bom-ref=\"pkg:maven/com.fasterxml.woodstox/woodstox-core@6.5.0?type=jar\">\n+      <publisher>FasterXML</publisher>\n+      <group>com.fasterxml.woodstox</group>\n+      <name>woodstox-core</name>\n+      <version>6.5.0</version>\n+      <description>Woodstox is a high-performance XML processor that implements Stax (JSR-173),\n+SAX2 and Stax2 APIs</description>\n       <hashes>\n-        <hash alg=\"MD5\">bc2f934bd698696823f9ecc7677a20cd</hash>\n-        <hash alg=\"SHA-1\">d3d53f3d461edd88fb8bfab89169122b29a62b4f</hash>\n-        <hash alg=\"SHA-256\">5bba1d3ce753620e290835d561c13b0411884cbf4bf1c35525d5ad26ef4d2391</hash>\n-        <hash alg=\"SHA-512\">e8b42c4ba8250246f7f8cedb5a5787bfd453dfa9d71951f366e2b1d1e385ab5ef2bac0605aaedae5224d8fda12153fcd6983bfc4cb60448978c0f18c44136b05</hash>\n-        <hash alg=\"SHA-384\">161adc86a1301608ee5af9f51390217f670ad6edf2215ae382a35111476b08f0aa35d925cf9256f81818c236c1f9b2eb</hash>\n-        <hash alg=\"SHA3-384\">89502cc5f7ee210448f4cc3c6e0cf61a1f31726b8e7f00f82aceab823dc2a0b66c17d76f0935c9fa213fc33d21fd918b</hash>\n-        <hash alg=\"SHA3-256\">e7db7ae83b8f184b28cb61269786102a80a2b29bd44d50693504bc7468a1c4c5</hash>\n-        <hash alg=\"SHA3-512\">e8e018b4bcd6e56492c33225927ab828d7a725d56d08ce33f7193e11f53c961fdfaaadfb5d6745c3b6048787a9cb0ff6b8398a3925c5553710d387df7716d3aa</hash>\n+        <hash alg=\"MD5\">7faa8bf352ed3d280244cbc43f55c658</hash>\n+        <hash alg=\"SHA-1\">cafa8aac5ddf104d28f172f19294d88d5e8c24c0</hash>\n+        <hash alg=\"SHA-256\">21ad5f842f5332e0e2b56631178df45a8d205921d8370e2d5f557dc7f76cf4e2</hash>\n+        <hash alg=\"SHA-512\">491e0659c8ffe61a8aa8a5e099af6722e6c13313b9607490b28c389b35cc15683df1c360b1e5e161d6067540064188213a481f53f434445979c99925fcd2aaff</hash>\n+        <hash alg=\"SHA-384\">1f20ddfb41422b3a829d0ee2440c37c597e919a1c336df812bb6946639702895b112b6b13859dce195389e2e140a326b</hash>\n+        <hash alg=\"SHA3-384\">f595086bcb02ea7f2d403dbf8f640da6ec11eecad366849dded6ee35cc757280084dc1aa98fb4dd07a52bad745ea38d5</hash>\n+        <hash alg=\"SHA3-256\">19bacb8d935f29a492edde2d2a0c36b74714c37181aa8cfdc5232383ae0015d4</hash>\n+        <hash alg=\"SHA3-512\">678f14a93c4e60ea806aae894db1e89ed3ff3fdf53e899071ad96d4f9038169f0f50d6ea427436a47337273de3fa2f82ba67849180e9b89ce8ebf9252645fa85</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/com.github.sbaudoin/yamllint@1.5.0?type=jar</purl>\n+      <purl>pkg:maven/com.fasterxml.woodstox/woodstox-core@6.5.0?type=jar</purl>\n       <modified>false</modified>\n       <externalReferences>\n+        <reference type=\"website\">\n+          <url>http://fasterxml.com</url>\n+        </reference>\n         <reference type=\"issue-tracker\">\n-          <url>https://github.com/sbaudoin/yamllint/issues</url>\n+          <url>https://github.com/FasterXML/woodstox/issues</url>\n         </reference>\n         <reference type=\"vcs\">\n-          <url>https://github.com/sbaudoin/yamllint.git</url>\n+          <url>https://github.com/FasterXML/woodstox</url>\n         </reference>\n       </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/com.github.luben/zstd-jni@1.5.4-1?type=jar\">\n-      <publisher>com.github.luben</publisher>\n-      <group>com.github.luben</group>\n-      <name>zstd-jni</name>\n-      <version>1.5.4-1</version>\n-      <description>JNI bindings for Zstd native library that provides fast and high compression lossless algorithm for Java and all JVM languages.</description>\n+    <component type=\"library\" bom-ref=\"pkg:maven/com.github.victools/jsonschema-generator@4.31.0?type=jar\">\n+      <group>com.github.victools</group>\n+      <name>jsonschema-generator</name>\n+      <version>4.31.0</version>\n+      <description>Java JSON Schema Generator \u2013 creating a JSON Schema (Draft 6, Draft 7 or Draft 2019-09) from your Java classes</description>\n       <hashes>\n-        <hash alg=\"MD5\">e787241d6ec56aac451be8b0d920c85b</hash>\n-        <hash alg=\"SHA-1\">291ccaacc039e41932de877303edb6af98a91c24</hash>\n-        <hash alg=\"SHA-256\">f0469d891127dc5ae6bd2df93a5aa38c4d79bcd5f360fbb88c2785b52a572349</hash>\n-        <hash alg=\"SHA-512\">368916f0057d69fa4ba3768f6f617291ce4083b89913e46c2daa68cc94c48b92e0ca626241486f34a4d154502eb77b19e82c16c68b341ecfc82ccc0520f8d4a9</hash>\n-        <hash alg=\"SHA-384\">7e72184873689fa286d93d88f69f8baa24f818fcd61105a14332fbb5ed254363c0969afa98befd797a3762577bc77993</hash>\n-        <hash alg=\"SHA3-384\">1302636797b291dbbe19f39bdeb66160c1317b395a0a9360ba93aeaa262de7ad8de7257e6a997a9c659fdf53b3367ee6</hash>\n-        <hash alg=\"SHA3-256\">54505ed16257a55330bb44c76719a687251d2623fa5e50a192b54c5067573255</hash>\n-        <hash alg=\"SHA3-512\">6e01cc9654c2d68c36a284e23c388267ac7013d534cceed0b6ab44679a6bbb6d03d4cfc52c967c4e76dbd5b8963c268e40d9890c927866ea00824821b0ecb82d</hash>\n+        <hash alg=\"MD5\">e50c4f33901852812669a6e8a75b5d44</hash>\n+        <hash alg=\"SHA-1\">f723d13688083684a38efabef8dfda23e8ca00eb</hash>\n+        <hash alg=\"SHA-256\">c67db2f37d2e6e300c40742a91929a04e56efe47671bb1c6418b3824ce0fa2d5</hash>\n+        <hash alg=\"SHA-512\">537045f43e2931ce6938a45d445b03647114615dea82f71c70eaf9db7d544883174d1c2c1cd1664f3141e85efcb15db0373113a8ba40bfb52ac21ccbbbee5bb1</hash>\n+        <hash alg=\"SHA-384\">8cb0fea856fd3373f8a2918bc8e86ccde0678bce1fdd4fe28c4531cd758e6aa55f8790904e1d95d5fe88828bcacab347</hash>\n+        <hash alg=\"SHA3-384\">ce102c6d8dca6d3b5eef5367830b65fe4971080ce353d423c6d8a814f84fbd65055d80b321f9d15b58849f930c3950c6</hash>\n+        <hash alg=\"SHA3-256\">d8ef3eaa176ae16d8d3bdba814ef9e648a76ce57b2607a1f314b8b402d6b2cbb</hash>\n+        <hash alg=\"SHA3-512\">9b2b338c5e31e4010d8772538db5ccffb768f6d4d63a258185efe7543127b293b875cb1fc107568c4a6a8e15a849414596b2566a21963197d2ab8080f9ed4577</hash>\n       </hashes>\n       <licenses>\n         <license>\n-          <id>BSD-2-Clause</id>\n+          <id>Apache-2.0</id>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/com.github.luben/zstd-jni@1.5.4-1?type=jar</purl>\n+      <purl>pkg:maven/com.github.victools/jsonschema-generator@4.31.0?type=jar</purl>\n       <modified>false</modified>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.1?type=jar\">\n-      <group>org.codehaus.plexus</group>\n-      <name>plexus-component-annotations</name>\n-      <version>2.1.1</version>\n-      <description>Plexus Component \"Java 5\" Annotations, to describe plexus components properties in java sources with\n-    standard annotations instead of javadoc annotations.</description>\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.3.5?type=jar\">\n+      <group>org.eclipse.sisu</group>\n+      <name>org.eclipse.sisu.inject</name>\n+      <version>0.3.5</version>\n       <hashes>\n-        <hash alg=\"MD5\">c001d5485e42fc73831e095f3cce0a82</hash>\n-        <hash alg=\"SHA-1\">856d33577e7e404f2438b2f14dbdf4ff5d6078b9</hash>\n-        <hash alg=\"SHA-256\">623711b3db0d3c6beaaf22578aea8b2706baee8b26ea328dfe94d96cbe2835dd</hash>\n-        <hash alg=\"SHA-512\">4495cfe289d1faa605878e7c9bcb274764310409c2d43fa58186c6968f4ff62f32d611e37a95d9dc5e3be31f282b369aeef47e1557e98a3b3665d08eba1d200b</hash>\n-        <hash alg=\"SHA-384\">ff6b0b15b9d9960711e58b660957b21439f9557c1f30091d729a0b4670724081edddf19f51a07dad5d2d61584ef9c997</hash>\n-        <hash alg=\"SHA3-384\">94a9a4aeceecfe18990e567b25e7dc2a2bda1cbbb024a1b3bffc8d98a76ab08fd8555d50e7819148fbd86afcaf1ea07d</hash>\n-        <hash alg=\"SHA3-256\">d5d2308dd7abc07284741d657e7b2c01364d9c9fa7f561c69a2c67c915dfcf5b</hash>\n-        <hash alg=\"SHA3-512\">ccec7f177cda69051523c0da6a868002fb850eea769601412bde67b08c85ac515d8e06f44924c1f7d364a25089f6e43782928f3ff9d0990c22fd2ae1753fa915</hash>\n+        <hash alg=\"MD5\">1b296b0ddd911ed3750b3df93b395cd5</hash>\n+        <hash alg=\"SHA-1\">d4265dd4f0f1d7a06d80df5a5f475d5ff9c17140</hash>\n+        <hash alg=\"SHA-256\">c5994010bcdce1d2bd603a4d50c47191ddbd7875d1157b23aaa26d33c82fda13</hash>\n+        <hash alg=\"SHA-512\">f4790768c0d958b3429a3241abb15f9bb6e2fd7f43a5e034dde6a3a6820e6941c00f10ad084d5c38f8edc144e7acbea7ba3dc8952f01dab41e443803db2a4efc</hash>\n+        <hash alg=\"SHA-384\">b76e74a0cda6d88c1c03d40e71d238fa13e2070485c026945ee8dc6da62eacb02071a65df35fa3e4d9d6b343a89fb605</hash>\n+        <hash alg=\"SHA3-384\">a2d3bae2f5e518c7d11e584f6b8b7368f3b927c3405f48e27d4225d4e2f4917fb5623c0071fc47f081200b7d754571d1</hash>\n+        <hash alg=\"SHA3-256\">b998bcdf4f8b5550a543865408e94fadcf1dd37ac19ec37269ff5307220b2775</hash>\n+        <hash alg=\"SHA3-512\">e9331e8a1b4281b45abec89dd9b7dd948207ebd7bed6be5978a5792d59327f7a4d4ee87c6f60392021f24f28439ab4ca4b6305ef6528e1c241c7a27c883b5931</hash>\n       </hashes>\n       <licenses>\n         <license>\n-          <id>Apache-2.0</id>\n+          <id>EPL-1.0</id>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.1?type=jar</purl>\n+      <purl>pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.3.5?type=jar</purl>\n       <modified>false</modified>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/io.github.openfeign.form/feign-form@3.8.0?type=jar\">\n-      <group>io.github.openfeign.form</group>\n-      <name>feign-form</name>\n-      <version>3.8.0</version>\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar\">\n+      <group>org.apache.commons</group>\n+      <name>commons-text</name>\n+      <version>1.10.0</version>\n+      <description>Apache Commons Text is a library focused on algorithms working on strings.</description>\n       <hashes>\n-        <hash alg=\"MD5\">ab48cdaa9aecefe5e938873ba2db3bb0</hash>\n-        <hash alg=\"SHA-1\">3083889996b18443c275a352d3ab4bc6c8321598</hash>\n-        <hash alg=\"SHA-256\">b21d37321b390995c90b5dbb4ff0c33f09d1cc7768207cc0da910ad20bf58961</hash>\n-        <hash alg=\"SHA-512\">3a1718c21e4caffcd5f686d2cde011b2f72a026d03caa03b876ad6e7c8c40b7bd59189eed6efa0654bf988a438775ef2c429fae497d502c1806c8c4d9d474c2e</hash>\n-        <hash alg=\"SHA-384\">02b96ee7cb8c67cdfe63422247035cbb003b7423a82756714d36de926118ac5e96c407fd324090c851962c63f7d4fd6f</hash>\n-        <hash alg=\"SHA3-384\">0d63a4c22216be6259584b62d3753a86220ea181a002641cda45de153501272fd79b7064d21bdee0ecd8129194fd7c3e</hash>\n-        <hash alg=\"SHA3-256\">ffc2832df09d0edf0251c5e6def39b6c36fd2c02c55ad29f0e63e3160cb709e1</hash>\n-        <hash alg=\"SHA3-512\">c2013da332e97e32962ee34459c5834b04ab2f6598960cb06e4f247a2683ced3fac3919d15151be4dae083c74911c7ead1906faabfc8a7cb6245fcd7138ef0df</hash>\n+        <hash alg=\"MD5\">4afc9bfa2d31dbf7330c98fcc954b892</hash>\n+        <hash alg=\"SHA-1\">3363381aef8cef2dbc1023b3e3a9433b08b64e01</hash>\n+        <hash alg=\"SHA-256\">770cd903fa7b604d1f7ef7ba17f84108667294b2b478be8ed1af3bffb4ae0018</hash>\n+        <hash alg=\"SHA-512\">afd836a1094449e0a791fee67363666c47b6d24acff353a5089b837b332c0f4af89565c354682521e37062d20e6b52d70c77bb4f24cca9b9532c274fc708a831</hash>\n+        <hash alg=\"SHA-384\">06c56e6e513dd77cf10d0da46cdea08c34e220e81fa024735b668c6650df4234e564fe865ff5cafea963f56b1e8ffd4a</hash>\n+        <hash alg=\"SHA3-384\">f09065ed066c25debf8c78cbb0bcc738e1ea283302ec992dcfb649acb90091cff879465c65a162e94534d454e3b4e9bb</hash>\n+        <hash alg=\"SHA3-256\">0b59c567164bb755f2353b78ba66744000a8c4b35e1df05255b080a21c3a3dd5</hash>\n+        <hash alg=\"SHA3-512\">f0fbce02a862b70f472a27d0722c54ac111ca2eb94584b8b0b73d1926aec26047cd92542ad0b3cf980a6825077587f41b194aa93d6f6350d1b87e59e8df1be7c</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/io.github.openfeign.form/feign-form@3.8.0?type=jar</purl>\n+      <purl>pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar</purl>\n       <modified>false</modified>\n+      <externalReferences>\n+        <reference type=\"issue-tracker\">\n+          <url>https://issues.apache.org/jira/browse/TEXT</url>\n+        </reference>\n+        <reference type=\"vcs\">\n+          <url>https://gitbox.apache.org/repos/asf?p=commons-text.git</url>\n+        </reference>\n+      </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.twitter4j/twitter4j-core@4.1.2?type=jar\">\n-      <group>org.twitter4j</group>\n-      <name>twitter4j-core</name>\n-      <version>4.1.2</version>\n-      <description>twitter4j</description>\n-      <hashes>\n-        <hash alg=\"MD5\">e49ac6cdf9fcf8df46e8046a58f37318</hash>\n-        <hash alg=\"SHA-1\">48fa821ad67644648d6a9cce9b793acc34cf3838</hash>\n-        <hash alg=\"SHA-256\">72602281c06d97e92c63ce84bd93d007642fa0bff852f63df12fd123b990b1f2</hash>\n-        <hash alg=\"SHA-512\">0cc76bc361059e746d68864cf7f8018a4aab642416793677c4879e1e4c8e0122cb8ced39f0448865b33ed94cd771f3dba92fcf8225f43e43daebac2087b1e563</hash>\n-        <hash alg=\"SHA-384\">484e15475fd5c337d7696aa369b228cc49ceba90c421bc55c7e365b9dec11e6bfa21cfaabab2de2e432e007e432ecf37</hash>\n-        <hash alg=\"SHA3-384\">f234454d1d564103cc5c623cf98ebef8f7d2ae69c287211d21ebbf55792e0253eac0f7a37b94b14adfd9f7576a01a361</hash>\n-        <hash alg=\"SHA3-256\">8a4e7cf2cce02be7f91951a9be55791d7db07ca6e3360ff66c509f1316e3449b</hash>\n-        <hash alg=\"SHA3-512\">d7cecc92e3d606eeaed7bbfb4e300bf4b22d17a2a58c7d79e4c7ac1da4b819fb02b4fd08e685615268f6572da0ac6703cad244cd9415b0ca26617014d7800e4e</hash>\n-      </hashes>\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-tool-java-sdk@1.6.0?type=jar\">\n+      <group>org.jreleaser</group>\n+      <name>jreleaser-tool-java-sdk</name>\n+      <version>1.6.0</version>\n+      <description>Java SDK for Tools</description>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/org.twitter4j/twitter4j-core@4.1.2?type=jar</purl>\n+      <purl>pkg:maven/org.jreleaser/jreleaser-tool-java-sdk@1.6.0?type=jar</purl>\n       <modified>false</modified>\n       <externalReferences>\n         <reference type=\"vcs\">\n-          <url>https://github.com/Twitter4J/Twitter4J/</url>\n+          <url>https://github.com/jreleaser/jreleaser</url>\n         </reference>\n       </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/software.amazon.awssdk/auth@2.20.51?type=jar\">\n+    <component type=\"library\" bom-ref=\"pkg:maven/software.amazon.awssdk/arns@2.20.51?type=jar\">\n       <group>software.amazon.awssdk</group>\n-      <name>auth</name>\n+      <name>arns</name>\n       <version>2.20.51</version>\n-      <description>The AWS SDK for Java - Auth module holds the classes that are used for authentication with AWS services</description>\n+      <description>The AWS SDK for Java - Arns module holds the classes that are related to AWS ARN</description>\n       <hashes>\n-        <hash alg=\"MD5\">7eeb2fd8646413078f9d4293ce141dc9</hash>\n-        <hash alg=\"SHA-1\">0cbc50040e2108a7dfcee1a7c54a1b7724aac5d2</hash>\n-        <hash alg=\"SHA-256\">2dc6383205e0787117ba5fe3eb882f7f70d07210a1c41881697d5871fd9740e8</hash>\n-        <hash alg=\"SHA-512\">ee92470920a88d1b4a4bbc4a419fb901281b2a397e3c48aa8f8b6d424df86d9b18fb42ee2acba06d606b4e74a14bdc6666a9420756f9e06298d9dcf8d2cd7418</hash>\n-        <hash alg=\"SHA-384\">f39c508f04250b447a1dde6f249d45752b51fd34ace007a6cee006189a827ac2a6d28a47e4b43ee8f7d683135105af3c</hash>\n-        <hash alg=\"SHA3-384\">d9a669123cdfee1dd620894d4e1518c52fdddd6980312a58db38d0f177d81369c33e59d1bcc83e34cc962c2a17cbc0da</hash>\n-        <hash alg=\"SHA3-256\">e63b21952ed1dec5ea41a67f2c739af17f62634a81575770fc07b71d0e994b55</hash>\n-        <hash alg=\"SHA3-512\">3832c4342ae4e811cb2ce9c0182fadf3e7096cb936af1e6e77b47ed404900ba123a09a0c54d2f62f9ca25c9955909e9ed7ce47a6d49691af2923f9aa1425efd5</hash>\n+        <hash alg=\"MD5\">8d826e61b6a82c3709cce4365d8e1d78</hash>\n+        <hash alg=\"SHA-1\">9305f0f4a9435df88bb5a35ec61aace0be0ce3c8</hash>\n+        <hash alg=\"SHA-256\">9885a1486c514fac5d44405fd0c9f1a2eb0eb62a5db669342058181e0f86edba</hash>\n+        <hash alg=\"SHA-512\">a4a7bc31322df09c81bcd9abea03cd0c8647ff69789bb06bc31284feab200ceeb65c41c2eea80c90056f1f54ac310e79d8dd1af892cae3ab80721bd34c3f9b0e</hash>\n+        <hash alg=\"SHA-384\">bbd8004e4d60a32794a6f9d779034d20a6b2c170117bd60e8f12dbd898d9216b41074624e66dee876ebf5c48845320b7</hash>\n+        <hash alg=\"SHA3-384\">8afbe17519ee08634c02adbae872d04c34e83325cd7319d3550e07cdd86fa8a5ff673adb392221e8eac777529cd85b31</hash>\n+        <hash alg=\"SHA3-256\">3fd520aafd89360244143e94b5b4e886cda217dbea4add63fa563b5d13482b8a</hash>\n+        <hash alg=\"SHA3-512\">3bd511652b05f6beaa7974a07b8630d6c2d3595ffa450aa2090d287adeaed87b4136a77702a6ae5d663c061902ae3e8c0846b6bb9ee4203d6a1a481b77191df4</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/software.amazon.awssdk/auth@2.20.51?type=jar</purl>\n+      <purl>pkg:maven/software.amazon.awssdk/arns@2.20.51?type=jar</purl>\n       <modified>false</modified>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/io.github.openfeign/feign-httpclient@12.3?type=jar\">\n-      <group>io.github.openfeign</group>\n-      <name>feign-httpclient</name>\n-      <version>12.3</version>\n-      <description>Feign Apache HttpClient</description>\n-      <hashes>\n-        <hash alg=\"MD5\">4ec31fa7f187c15f9967c7ffcf714449</hash>\n-        <hash alg=\"SHA-1\">0ea51fdb4797c3ab62e1f8a726d4e02cf522dba2</hash>\n-        <hash alg=\"SHA-256\">3a2833e18cc868bff19d6320f22054f96995dc073ed27edfeb2d83996d2ef37c</hash>\n-        <hash alg=\"SHA-512\">3440afa129150c035670cd098e6eba6f676afc82db2db53a10b20621e30658b411d820652e4668dab5ca615f599a41a06dc826378b5e783f88f26c2cddfce8ed</hash>\n-        <hash alg=\"SHA-384\">b8dc38126b28fb486d459e23ae61a34073f16f0ef7ec37f49636919d0fd5a8d86354d76314462dba94efd4f613db92ef</hash>\n-        <hash alg=\"SHA3-384\">7c4161078011223122067406e5ad6efedfcf45c71d6e081f37e3fba1c73578c748d5a5e60d372a5fa7159ec7737e71bb</hash>\n-        <hash alg=\"SHA3-256\">b6d851642b9a5628dbe3cab5706c9d434f1d59ec881cd5cdf6fae84f644eb7c1</hash>\n-        <hash alg=\"SHA3-512\">9b3b7edc25efc7345a9cc7b2fe0eccefd57fa40d62e6a85b4a698827b9c34ff568236d591f6d5645de7eb275be2b10aee80f42881f6068f0b1c38f274faf4c5f</hash>\n-      </hashes>\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-command-java-sdk@1.6.0?type=jar\">\n+      <group>org.jreleaser</group>\n+      <name>jreleaser-command-java-sdk</name>\n+      <version>1.6.0</version>\n+      <description>JReleaser command SDK</description>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/io.github.openfeign/feign-httpclient@12.3?type=jar</purl>\n-      <modified>false</modified>\n-    </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-artifactory-java-sdk@1.6.0?type=jar\">\n-      <group>org.jreleaser</group>\n-      <name>jreleaser-artifactory-java-sdk</name>\n-      <version>1.6.0</version>\n-      <hashes>\n-        <hash alg=\"MD5\">0424b4222c584b10ffa0a1bd4ee5ceb0</hash>\n-        <hash alg=\"SHA-1\">644d6b9d3c99517ed3eef9d354bd26b6add6fb30</hash>\n-        <hash alg=\"SHA-256\">e5a3f17ebe3848758e2a1fa0bc4a95adef9dfc5675bfdaed00d5a67f800d710e</hash>\n-        <hash alg=\"SHA-512\">eb2db5da7399fd5c0d66c0b074bde8b9b574e6e35bd7a36419bf0b8fdfc3c9910011924636966245665191affa48351516ea926487e509f66a1dafdb2e87e3aa</hash>\n-        <hash alg=\"SHA-384\">1f70af8d9762bee3de7118919a5d104bbb5f3d106a8d35952fe249b5a7def724b11f112d6adad0885c385b97a51d6555</hash>\n-        <hash alg=\"SHA3-384\">faeba77c9de4200b9cdad0fb7ee5fac8c08813a3e9837339f7a86033419daa5602e788d2d97fa6225350b33355ad83b5</hash>\n-        <hash alg=\"SHA3-256\">f4087f0fe5219ae10b73ffce21156bc80188bfac50e8134ba10029f767559576</hash>\n-        <hash alg=\"SHA3-512\">93a40efa525118744e1cb70ab5537d1f2a711cf7e24bc091a5964bd45170df54ca845bf28e2f187fc0da186064bc4d4f06e5605233db400f73ebb4cc2c33efcb</hash>\n-      </hashes>\n-      <licenses/>\n-      <purl>pkg:maven/org.jreleaser/jreleaser-artifactory-java-sdk@1.6.0?type=jar</purl>\n+      <purl>pkg:maven/org.jreleaser/jreleaser-command-java-sdk@1.6.0?type=jar</purl>\n       <modified>false</modified>\n+      <externalReferences>\n+        <reference type=\"vcs\">\n+          <url>https://github.com/jreleaser/jreleaser</url>\n+        </reference>\n+      </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.apache.maven/maven-artifact@3.8.7?type=jar\">\n-      <group>org.apache.maven</group>\n-      <name>maven-artifact</name>\n-      <version>3.8.7</version>\n+    <component type=\"library\" bom-ref=\"pkg:maven/software.amazon.awssdk/sdk-core@2.20.51?type=jar\">\n+      <group>software.amazon.awssdk</group>\n+      <name>sdk-core</name>\n+      <version>2.20.51</version>\n+      <description>The AWS SDK for Java - SDK Core runtime module holds the classes that are used by the individual service\n+        clients to interact with\n+        Amazon Web Services. Users need to depend on aws-java-sdk artifact for accessing individual client classes.</description>\n       <hashes>\n-        <hash alg=\"MD5\">4c2a8316eda726b35c9ae90b7c271dd4</hash>\n-        <hash alg=\"SHA-1\">4b820734b856682f99f6ad2de4f1f7dd4b82335f</hash>\n-        <hash alg=\"SHA-256\">23eb1c5c26f3d1b4694647b071beabfd96083191b006394707753af2ced8db01</hash>\n-        <hash alg=\"SHA-512\">2b892be25a88774d7aaf22db235e660abcdd041c0d685bd0c4e0b404a15301d61b3e06cd8dbede8f6a6293951f65a2235ee6cbb8d4a00fd5a7e33ab1655b2429</hash>\n-        <hash alg=\"SHA-384\">1abb1c8a0bd8bc1cbf5857cb9a3d30ff3e92d6fd720dff1ec0a5cb368027a2fbea61a4c1d10db255d51b9e5d1dedd73f</hash>\n-        <hash alg=\"SHA3-384\">5d183e617198c1e032352f476edbe4db0be3dc0c7efd36c3be281a4fb1cb813feed558e3d21f52d55479e791b72c63c7</hash>\n-        <hash alg=\"SHA3-256\">6deb8cba7a9c6b4d6cd314d681a3dfc1f02624e1e56699f760bfb1c6539dd9e1</hash>\n-        <hash alg=\"SHA3-512\">04220b96703beb3cac238e11e150303a420fe55004c9b05dc9e72ebb38e140eead6914211428175bdd1e0442ccdb2b66d9313869b6c54356c19531df7e4985fe</hash>\n+        <hash alg=\"MD5\">b7d192ccc4a7098ffbfb3a5241d560d8</hash>\n+        <hash alg=\"SHA-1\">e3f9e8708dd477b58253125f1d828deaeaf94d69</hash>\n+        <hash alg=\"SHA-256\">eee62acd22433ce285d8b735356c72355a8827f587933d969cf51dc5fcaa0140</hash>\n+        <hash alg=\"SHA-512\">285401aa6bbb998330bc97c109bb6c79fc329de23c9729742c48353156a6a3cd7d2c356a97ecc9f795dfa9be50762c6a5d76b92c13fcd06a34e5ea7cd959f065</hash>\n+        <hash alg=\"SHA-384\">50f7536e6d95d0c0596983b19c61cbd5ea359c265a527e87816399df0579bdcef3563a470324fa8602c7db97aa82340b</hash>\n+        <hash alg=\"SHA3-384\">f0487bd4188e85d07d502b82bf55043be4c88518163d315af85b2f91f50c6bff657e0c3b2fb9013513948b3cbe9ab2eb</hash>\n+        <hash alg=\"SHA3-256\">f7d6979f92addad31ef970812b1d9e49e1ad170aeec6d341598a4fe4d0897a4e</hash>\n+        <hash alg=\"SHA3-512\">88f5ffc890d90d9988e05f9a84f609894aa173e0d9e1ea0c908243c0ffbf97460dc643b2709793103cae1b2f098e87ef8cdda93003de1915763aa394b8800766</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/org.apache.maven/maven-artifact@3.8.7?type=jar</purl>\n+      <purl>pkg:maven/software.amazon.awssdk/sdk-core@2.20.51?type=jar</purl>\n       <modified>false</modified>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.tukaani/xz@1.9?type=jar\">\n-      <group>org.tukaani</group>\n-      <name>xz</name>\n-      <version>1.9</version>\n-      <description>XZ data compression</description>\n-      <hashes>\n-        <hash alg=\"MD5\">57c2fbfeb55e307ccae52e5322082e02</hash>\n-        <hash alg=\"SHA-1\">1ea4bec1a921180164852c65006d928617bd2caf</hash>\n-        <hash alg=\"SHA-256\">211b306cfc44f8f96df3a0a3ddaf75ba8c5289eed77d60d72f889bb855f535e5</hash>\n-        <hash alg=\"SHA-512\">a4362db234d4e83683e90f5baf90c82107450cc4404acab96e3fab14b8a3d4588a19722171d32f27d18463682a6994cad9af0b1065c954e3a77ea7bdcf586bac</hash>\n-        <hash alg=\"SHA-384\">aa30349b094723369908369a18e2cb5beb5b7ca0b24b4d56c2f5725fae152220f6526466672b22bfec939e2e0622a01d</hash>\n-        <hash alg=\"SHA3-384\">b3e1fee7784188df5e1931c9e8137ac0e20e63f66f93e7f938a448fc0b3adb4be5205c7a5f1835007e233fee2696fc2c</hash>\n-        <hash alg=\"SHA3-256\">92eff603ed0aab557e1a45e17a74e80d8ec656b5f137197b23c429c903fa448f</hash>\n-        <hash alg=\"SHA3-512\">b290f92958f8cd91705331d8411140c23957ab8b568fbe19a70f4f1dc97eddc13d3a200df28a02ab5911ce18f546c33f720878be0f727edac839a6e63ee66ece</hash>\n-      </hashes>\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-mattermost-java-sdk@1.6.0?type=jar\">\n+      <group>org.jreleaser</group>\n+      <name>jreleaser-mattermost-java-sdk</name>\n+      <version>1.6.0</version>\n+      <description>Java SDK for Mattermost</description>\n       <licenses>\n         <license>\n-          <name>Public Domain</name>\n+          <id>Apache-2.0</id>\n+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/org.tukaani/xz@1.9?type=jar</purl>\n+      <purl>pkg:maven/org.jreleaser/jreleaser-mattermost-java-sdk@1.6.0?type=jar</purl>\n       <modified>false</modified>\n       <externalReferences>\n         <reference type=\"vcs\">\n-          <url>https://git.tukaani.org/?p=xz-java.git</url>\n+          <url>https://github.com/jreleaser/jreleaser</url>\n         </reference>\n       </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/software.amazon.awssdk/apache-client@2.20.51?type=jar\">\n-      <group>software.amazon.awssdk</group>\n-      <name>apache-client</name>\n-      <version>2.20.51</version>\n+    <component type=\"library\" bom-ref=\"pkg:maven/dev.failsafe/failsafe@3.3.1?type=jar\">\n+      <group>dev.failsafe</group>\n+      <name>failsafe</name>\n+      <version>3.3.1</version>\n       <hashes>\n-        <hash alg=\"MD5\">883a34bacf829210ba8399ff6107698e</hash>\n-        <hash alg=\"SHA-1\">965650dfa90875767e69a56d41ae56f658b77b84</hash>\n-        <hash alg=\"SHA-256\">5b45a7336811c00346a6ac53b9a034e121c9a86739405457e803dbba546b3089</hash>\n-        <hash alg=\"SHA-512\">8a0739ff68f09a778e54b40b813d4c7507e4523913210aa3cc7196db07a0253952ccce4964ccddb9b332e9fed2b99ddd8170ae030104c00f879caa604b28b964</hash>\n-        <hash alg=\"SHA-384\">b98baedb6fd915a51ecf76e08103d2f9b48dcfc4c46d70fb1bea7dec010b57bed5091838614266f8d85c7bcb1694d90e</hash>\n-        <hash alg=\"SHA3-384\">9513030fc7eb334a1f1a90a5109c35c282823864c550ba8d9fa8edb9c097a834edc7c53faed3cb5dfe4b3b7a323daab9</hash>\n-        <hash alg=\"SHA3-256\">faedd3e1307755149f42000bbfb70cbea89c9f7b057aebe1edfb2968f1930606</hash>\n-        <hash alg=\"SHA3-512\">c32001445e7fb6dcf1442941c087253387bb0058bbf78fce710af7538bb86e4fc47a30c4e6a8b1035f53249a52deeefe2507439555c9bee74eadb93db6516e31</hash>\n+        <hash alg=\"MD5\">a16b9f66f4009f924e2118e296ec927a</hash>\n+        <hash alg=\"SHA-1\">cca46c10dd22fb0beb7e0c1e468604430355a4ab</hash>\n+        <hash alg=\"SHA-256\">af90a069c56918d9ddbef7bbd5ef5a25c1eb8bef459ae1ee89c1db21cd5f6bf5</hash>\n+        <hash alg=\"SHA-512\">fffcbd84b95656c302b4be7ba7bffbf686323bf7af265c2b85bedc72695843067b1a804ab1bbecad0f2732ebf46562c3266f0ed970517b64d93a1a67535b7cd9</hash>\n+        <hash alg=\"SHA-384\">8acb7ba45c47316ffac8c55e9a3ae8a36c7473a503ad6f365ed487758147f7f3fa741edb76d4a31d4616d31065d529c4</hash>\n+        <hash alg=\"SHA3-384\">0e31c4d6e5ae74bb049a649e2beb49259d8c946a6d2b962e36c1f6b1bd8c279951348d7dfe74ce213e28329a062f5052</hash>\n+        <hash alg=\"SHA3-256\">67c631af5a746bd0eb97ebebec9d22f790d8c38f25b417401fc4c9708e08316c</hash>\n+        <hash alg=\"SHA3-512\">3e70f44b56b3b275026c619b127c4a9fce234bf70c4df4a54cb53a36035e7f5f57f9acbd001fb92b46fd91b1ef3d24ace58d5c9876c32e81c56dbd4b814c0ccf</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/software.amazon.awssdk/apache-client@2.20.51?type=jar</purl>\n-      <modified>false</modified>\n-    </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-discourse-java-sdk@1.6.0?type=jar\">\n-      <group>org.jreleaser</group>\n-      <name>jreleaser-discourse-java-sdk</name>\n-      <version>1.6.0</version>\n-      <hashes>\n-        <hash alg=\"MD5\">dee71b6c7c8839508e8b3fb0ecebc56c</hash>\n-        <hash alg=\"SHA-1\">5fa0dc25a0cc5bbed20990a272de0825e5d4cec5</hash>\n-        <hash alg=\"SHA-256\">f8da4b626c4c9856c2a1dc74f1fa766c0f4ac88bdf7fe6edcc98b28d1e1339cc</hash>\n-        <hash alg=\"SHA-512\">ffad5ec59bf9848349ebddd5a6b0d1c301bad6f13d57f36ce603dd2cf2d6d74a16811caa8b9ee26e190e0c7db734742a4391fe20ad754c444534775d2b0d747a</hash>\n-        <hash alg=\"SHA-384\">058d6d1db8fbae092e1f0622f1ab968b29aefea4b9ec20d602274ff1053f8e73f3cdcd204970fefad3414fb4cb1ebc12</hash>\n-        <hash alg=\"SHA3-384\">9baf304239351c558230af8456b877165d20c9e3472a4ee2f402b99774b5039e0750d0fbba7fc605defdfb48b65e2db8</hash>\n-        <hash alg=\"SHA3-256\">15bc2a19efbd16348a7494798166ccdf336ff892a4a4203e7c12dd1f9dbfa1e6</hash>\n-        <hash alg=\"SHA3-512\">b7af0c28818ce6f8d2a92a598fe8255a33497d047fc9ca96eb9df3114b55197acb5623fe07c4d26c206a0f6ccc0e9d03aa4aab8363b188c0a292b309b09ec4b9</hash>\n-      </hashes>\n-      <licenses/>\n-      <purl>pkg:maven/org.jreleaser/jreleaser-discourse-java-sdk@1.6.0?type=jar</purl>\n-      <modified>false</modified>\n-    </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/javax.annotation/javax.annotation-api@1.2?type=jar\">\n-      <publisher>GlassFish Community</publisher>\n-      <group>javax.annotation</group>\n-      <name>javax.annotation-api</name>\n-      <version>1.2</version>\n-      <description>Common Annotations for the JavaTM Platform API</description>\n-      <hashes>\n-        <hash alg=\"MD5\">75fe320d2b3763bd6883ae1ede35e987</hash>\n-        <hash alg=\"SHA-1\">479c1e06db31c432330183f5cae684163f186146</hash>\n-        <hash alg=\"SHA-256\">5909b396ca3a2be10d0eea32c74ef78d816e1b4ead21de1d78de1f890d033e04</hash>\n-        <hash alg=\"SHA-512\">2453330b27a0822bba440c28b98ae1d83d60d97dfa2d040562dd5126b3548e0caa040fea3b886ac6feb0a858e6c1bc45b6c5472b180f1f14792e5ca33e355959</hash>\n-        <hash alg=\"SHA-384\">37a46eaa1d011969d28ff0daaecd67a560169b3ae70c40102331d85a71139ca07110169fe367f484735914ce5c6b86c0</hash>\n-        <hash alg=\"SHA3-384\">e2f8df1aad5867355fd1d3de2374d077e3ad885e6bddac3ce7c7bc72a34097e33bc5dfe960f839a7feb515bd5a92ffd1</hash>\n-        <hash alg=\"SHA3-256\">2e2acc7429faecd2e74c0c441209b1a5b0ccbc245ccd8391425c4b1e4b2fbc94</hash>\n-        <hash alg=\"SHA3-512\">9a28cb34c7761e695ccea04cc6df1e0f9cd18fef59bf50d5943ddc06802e616bc2bd55211e863c65f7f7661f963ba8ee9e569324642b87bc1703dc6f07cba5e3</hash>\n-      </hashes>\n-      <licenses>\n-        <expression>(CDDL-1.0 OR GPL-2.0-with-classpath-exception)</expression>\n-      </licenses>\n-      <purl>pkg:maven/javax.annotation/javax.annotation-api@1.2?type=jar</purl>\n+      <purl>pkg:maven/dev.failsafe/failsafe@3.3.1?type=jar</purl>\n       <modified>false</modified>\n-      <externalReferences>\n-        <reference type=\"website\">\n-          <url>https://glassfish.java.net</url>\n-        </reference>\n-        <reference type=\"issue-tracker\">\n-          <url>http://java.net/jira/browse/GLASSFISH</url>\n-        </reference>\n-        <reference type=\"vcs\">\n-          <url>http://java.net/projects/glassfish/sources/svn/show/tags/javax.annotation-api-1.2</url>\n-        </reference>\n-      </externalReferences>\n     </component>\n     <component type=\"library\" bom-ref=\"pkg:maven/org.apache.commons/commons-compress@1.22?type=jar\">\n       <group>org.apache.commons</group>\n       <name>commons-compress</name>\n       <version>1.22</version>\n       <description>Apache Commons Compress software defines an API for working with\n compression and archive formats.  These include: bzip2, gzip, pack200,\n@@ -1894,350 +1787,332 @@\n           <url>https://issues.apache.org/jira/browse/COMPRESS</url>\n         </reference>\n         <reference type=\"vcs\">\n           <url>https://gitbox.apache.org/repos/asf?p=commons-compress.git</url>\n         </reference>\n       </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-config-yaml@1.6.0?type=jar\">\n-      <group>org.jreleaser</group>\n-      <name>jreleaser-config-yaml</name>\n-      <version>1.6.0</version>\n+    <component type=\"library\" bom-ref=\"pkg:maven/com.sun.activation/jakarta.activation@2.0.1?type=jar\">\n+      <group>com.sun.activation</group>\n+      <name>jakarta.activation</name>\n+      <version>2.0.1</version>\n       <hashes>\n-        <hash alg=\"MD5\">933859a62f2cb460f18df82e55bbb8f0</hash>\n-        <hash alg=\"SHA-1\">db520d584846539c441653811e15f30d356a0d0d</hash>\n-        <hash alg=\"SHA-256\">2b0e7998057950cc4cd87ad9afbed036de522914ebeef5fe777205d9810330a4</hash>\n-        <hash alg=\"SHA-512\">35e839587ad0124f9cd431ff584362d5cef45675ddbc02a22546590d491cc7b4d5b3d9dcd1851c62aee93e2f25667f1e8ad08084f68cae60bd829134e3fd3477</hash>\n-        <hash alg=\"SHA-384\">23029ed919f04e8fb6283efb73ae3edb20ff7801117d5d64a002830e37d452b440291459eaab59680aa434d5a5f71365</hash>\n-        <hash alg=\"SHA3-384\">caae6558d9d5bfdb02152b710d0b0765955753bb8f83710137b6cce4eb123ec70669aaeecb2df6766710530aafa28704</hash>\n-        <hash alg=\"SHA3-256\">d7e45f012cea3a98a3e677177af301164a167a943db18bbbdfe5c9d15fe322e4</hash>\n-        <hash alg=\"SHA3-512\">38e24c9c2c602bcca77e7b495b14323fd9e525bf853af7bc4cb9f0ddaef3a7b3c17e7ae037bf54c72070edd05d39ae4cae5d6b8245b839dc4ff562d41b51c1f4</hash>\n+        <hash alg=\"MD5\">39228ac67f033514a0ccb3360ac461f3</hash>\n+        <hash alg=\"SHA-1\">828b80e886a52bb09fe41ff410b10b342f533ce1</hash>\n+        <hash alg=\"SHA-256\">b9e24b7dd6e07495562ea96531be3130c96dba4d78e1dfd88adbbdebf4332871</hash>\n+        <hash alg=\"SHA-512\">d1c214d2d6ecc61bba396d913c66c977418e74dfe96e5558951ccf99a60cfca6adfea3fc64b6e2d15f698e30dac870b8f6e8d7a22e0dff975f8dd83864714fc5</hash>\n+        <hash alg=\"SHA-384\">7481f94524b06ba81d12f5d9427dcd389d2c9130176567ff3e11c82fcfe605bf654116463b23d259573f3222b3414bcd</hash>\n+        <hash alg=\"SHA3-384\">0bcd7603bc9ff7cae8fb9d7c6547c012d88a5d6374a71670d58086dc597cd592f6686abccc63d095cb17cdafe4dba762</hash>\n+        <hash alg=\"SHA3-256\">47760a6311d1023c1384ebaea0c2eb35c8ecbb06e424fdefe935693088e2f88e</hash>\n+        <hash alg=\"SHA3-512\">f5d531480ed1cc9323281d1ca402d21ec71a7ad267372c95a8c8dcf0f1e6919d545085fe5c7b154c5594f26538873ee75459795e826c6acb3fa6c4629a7f983a</hash>\n       </hashes>\n-      <licenses/>\n-      <purl>pkg:maven/org.jreleaser/jreleaser-config-yaml@1.6.0?type=jar</purl>\n+      <licenses>\n+        <license>\n+          <id>BSD-3-Clause</id>\n+        </license>\n+      </licenses>\n+      <purl>pkg:maven/com.sun.activation/jakarta.activation@2.0.1?type=jar</purl>\n       <modified>false</modified>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.apache.maven/maven-model@3.8.7?type=jar\">\n-      <group>org.apache.maven</group>\n-      <name>maven-model</name>\n-      <version>3.8.7</version>\n-      <description>Model for Maven POM (Project Object Model)</description>\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-codeberg-java-sdk@1.6.0?type=jar\">\n+      <group>org.jreleaser</group>\n+      <name>jreleaser-codeberg-java-sdk</name>\n+      <version>1.6.0</version>\n+      <description>Java SDK for Codeberg</description>\n+      <licenses>\n+        <license>\n+          <id>Apache-2.0</id>\n+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>\n+        </license>\n+      </licenses>\n+      <purl>pkg:maven/org.jreleaser/jreleaser-codeberg-java-sdk@1.6.0?type=jar</purl>\n+      <modified>false</modified>\n+      <externalReferences>\n+        <reference type=\"vcs\">\n+          <url>https://github.com/jreleaser/jreleaser</url>\n+        </reference>\n+      </externalReferences>\n+    </component>\n+    <component type=\"library\" bom-ref=\"pkg:maven/software.amazon.awssdk/metrics-spi@2.20.51?type=jar\">\n+      <group>software.amazon.awssdk</group>\n+      <name>metrics-spi</name>\n+      <version>2.20.51</version>\n+      <description>This is the base module for SDK metrics feature. It contains the interfaces used for metrics feature\n+        that are used by other modules in the library.</description>\n       <hashes>\n-        <hash alg=\"MD5\">91c8c6b449ca34033832f268df64873b</hash>\n-        <hash alg=\"SHA-1\">a6a1f77aa36d158c8ec7917112192083b9467cd4</hash>\n-        <hash alg=\"SHA-256\">6fcadaee2a885c43b158f2e3833d0a3ecb68efc62e25ea5b11f77cc0716a7b2d</hash>\n-        <hash alg=\"SHA-512\">f24ea0d84444002c3bce0cc2529638125dcc7b2d8dbf1054d43438702672da499deac20d3a9432ed92fd88005d6d6660f26902011ec8914aee40650af0f9ac8a</hash>\n-        <hash alg=\"SHA-384\">e076fd71ed4f450fe18fa80fa29b0967a1ae95ac3729f1d42b7b77d05b02f18642a787a1671b975df1c40f7dbc7399ba</hash>\n-        <hash alg=\"SHA3-384\">82d7a280f6427218cb64577d41de7e974368a088cedd8f495cca0a64e73b3e29786c2ce15420bf5c348d313303eccfb9</hash>\n-        <hash alg=\"SHA3-256\">9079dd0edebc0a9b12fba1700116c09b958e5268a522a84ed5f61cea90859755</hash>\n-        <hash alg=\"SHA3-512\">fbc8f496338129a4ca92b3b3a0a8890a45a908d0bf3bfd12612abd3152e0311275c7ba8a9b01a84b4522bf209a1508fffd40c5047167252087fc4337531d41f8</hash>\n+        <hash alg=\"MD5\">6d4145875ba12db8f7e3dac57e9ec0fb</hash>\n+        <hash alg=\"SHA-1\">b878ceda314f2bb0820afcf7eca3c5bfa7a16a37</hash>\n+        <hash alg=\"SHA-256\">ffa8629a48d23b175def8de4ef73026f399dad55345f7c56fa6772f2c2089dc7</hash>\n+        <hash alg=\"SHA-512\">bcc1aa5a3930ecc6e2568e240fd48dee8525666dc60e22de99c075dbe931d191f77cd47fd8ebcda7db2e8b3c0d64492f28d01d949a36b504cd345d8f0d1e04d3</hash>\n+        <hash alg=\"SHA-384\">f0065e7b61fa109e8785e7cd22173e362fa6253ae7eb482802b968faa9e7f0d660fe9eb684c719852087e057878bd8fc</hash>\n+        <hash alg=\"SHA3-384\">8c7cca3f3a754f4f5057f073eb525a50c339d8dec1c867ca0c8d0b4afe037ed63fb86b530812b786a74d0ee9605fe02a</hash>\n+        <hash alg=\"SHA3-256\">24844edfd3c2bc025d03d3d7d77c7fe8599210b5945e3e417d137f0edb81ebee</hash>\n+        <hash alg=\"SHA3-512\">5a42a47951ed5c05fbd1276794c23cc863746b01ea0ee6e85897eca401392b0bca77b8d284b53e68a3bd5df618f7d3637a0a7e2387c501f98db6bbd5f17546e6</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/org.apache.maven/maven-model@3.8.7?type=jar</purl>\n+      <purl>pkg:maven/software.amazon.awssdk/metrics-spi@2.20.51?type=jar</purl>\n       <modified>false</modified>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.yaml/snakeyaml@1.33?type=jar\">\n-      <group>org.yaml</group>\n-      <name>snakeyaml</name>\n-      <version>1.33</version>\n-      <description>YAML 1.1 parser and emitter for Java</description>\n+    <component type=\"library\" bom-ref=\"pkg:maven/commons-io/commons-io@2.11.0?type=jar\">\n+      <group>commons-io</group>\n+      <name>commons-io</name>\n+      <version>2.11.0</version>\n+      <description>The Apache Commons IO library contains utility classes, stream implementations, file filters,\n+file comparators, endian transformation classes, and much more.</description>\n       <hashes>\n-        <hash alg=\"MD5\">e0164a637c691c8cf01d29f90a709c02</hash>\n-        <hash alg=\"SHA-1\">2cd0a87ff7df953f810c344bdf2fe3340b954c69</hash>\n-        <hash alg=\"SHA-256\">11ff459788f0a2d781f56a4a86d7e69202cebacd0273d5269c4ae9f02f3fd8f0</hash>\n-        <hash alg=\"SHA-512\">787b72aebb685689ab379ed8f238fc2f4175bb82d285909e39e7ff1ee1b9e64ad8878f4685dadde274f950b0dc77dca3082a52921c11094aa2a535672ae4f33c</hash>\n-        <hash alg=\"SHA-384\">9f0a0a35df2b339830b9e78294634ea894e7096e01709c82d965e24a9fa9ac6ee15edbbbf23368dcd57741de5bf23086</hash>\n-        <hash alg=\"SHA3-384\">91d8fd581d60be4090d3b522d8c119c12449cff2ce6c436d0e53977e1c9fea8686b2b360fb15f4c3507e4f243d7d6170</hash>\n-        <hash alg=\"SHA3-256\">7dcf0429ecb923a66e00ec633bafeb297e3b90e1cc2be0f85443fd61367f355a</hash>\n-        <hash alg=\"SHA3-512\">59b32910dddf63475893f7c830d58ca320cd6183704d80b8111cee7bb1674f97f5699c8ac52f905a5b9a20128b9e2b6a26a07490f217033c858d9c358bedcafc</hash>\n+        <hash alg=\"MD5\">3b4b7ccfaeceeac240b804839ee1a1ca</hash>\n+        <hash alg=\"SHA-1\">a2503f302b11ebde7ebc3df41daebe0e4eea3689</hash>\n+        <hash alg=\"SHA-256\">961b2f6d87dbacc5d54abf45ab7a6e2495f89b75598962d8c723cea9bc210908</hash>\n+        <hash alg=\"SHA-512\">5bd78eed456ede30119319c5bed8e3e4c443b6fd7bdb3a7a5686647bd83094d0c3e2832a7575cfb60e4ef25f08106b93476939d3adcfecf5533cc030b3039e10</hash>\n+        <hash alg=\"SHA-384\">114f1e324d90ad887c177876d410f5787a8e8da6c48d4b2862d365802c0efded3a88cb24046976bf6276cadad3712f0f</hash>\n+        <hash alg=\"SHA3-384\">80288c03ad4d80d69f91d056ffc5570d49a9c76bf54ad2dff0121ecde26a560df76d05156f281f5c6db2a38ff07a873d</hash>\n+        <hash alg=\"SHA3-256\">5adfb5ccaf5f21a549422f426118a9542673926fcd18c68390cf813e791dcf6c</hash>\n+        <hash alg=\"SHA3-512\">7573f47f0babb53cefdc7c2309a0b982d800139064537b0797da442853d081010ad7c3c74a500598a0f800639a5d540eca21963ea652c68613907059bd4278c2</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/org.yaml/snakeyaml@1.33?type=jar</purl>\n+      <purl>pkg:maven/commons-io/commons-io@2.11.0?type=jar</purl>\n       <modified>false</modified>\n       <externalReferences>\n         <reference type=\"issue-tracker\">\n-          <url>https://bitbucket.org/snakeyaml/snakeyaml/issues</url>\n+          <url>https://issues.apache.org/jira/browse/IO</url>\n         </reference>\n         <reference type=\"vcs\">\n-          <url>https://bitbucket.org/snakeyaml/snakeyaml/src</url>\n+          <url>https://gitbox.apache.org/repos/asf?p=commons-io.git</url>\n         </reference>\n       </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-google-chat-java-sdk@1.6.0?type=jar\">\n-      <group>org.jreleaser</group>\n-      <name>jreleaser-google-chat-java-sdk</name>\n-      <version>1.6.0</version>\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.tukaani/xz@1.9?type=jar\">\n+      <group>org.tukaani</group>\n+      <name>xz</name>\n+      <version>1.9</version>\n+      <description>XZ data compression</description>\n       <hashes>\n-        <hash alg=\"MD5\">4b4aa3a98847fa1769e18f41c1e1afa2</hash>\n-        <hash alg=\"SHA-1\">f08a97f4ec40fd22b500daad164845622c38676c</hash>\n-        <hash alg=\"SHA-256\">6f2b223e0b566b805d83f4671e30de8dd39694bfa0688c9668fa0331474cb68a</hash>\n-        <hash alg=\"SHA-512\">e37042a113d309d84678949801f28b8ab61f90963d0ee116ccc23580c3b22f886233c300ab81bd2a0f3af8a70c0959e36d950e18e3d2c3b7ad9bdb6b5c3bfef2</hash>\n-        <hash alg=\"SHA-384\">1534c8b0020301472a0a70dcfc9a427de8152bb8d9e93764c5c0cb86a169904de12cdd9552091a3c6e4a9df5d68e87e9</hash>\n-        <hash alg=\"SHA3-384\">9867b122636f59b39100e06c95177579fdaf04ef3dc64ed19a380ae72ae18203fedd208d79060563fcb24944c961bbd0</hash>\n-        <hash alg=\"SHA3-256\">83efdf0487625bec79b7cc680b35fea26878f6c22f812c26111d5892a8769ae2</hash>\n-        <hash alg=\"SHA3-512\">0540c660b19157641a7acae3215cd35692fcd6c17134b1deca0d4f65faae9aa863766f09441e4c59b1a3cd73a01e58b536a21e65f27fd9dec1767fa7f01cae47</hash>\n+        <hash alg=\"MD5\">57c2fbfeb55e307ccae52e5322082e02</hash>\n+        <hash alg=\"SHA-1\">1ea4bec1a921180164852c65006d928617bd2caf</hash>\n+        <hash alg=\"SHA-256\">211b306cfc44f8f96df3a0a3ddaf75ba8c5289eed77d60d72f889bb855f535e5</hash>\n+        <hash alg=\"SHA-512\">a4362db234d4e83683e90f5baf90c82107450cc4404acab96e3fab14b8a3d4588a19722171d32f27d18463682a6994cad9af0b1065c954e3a77ea7bdcf586bac</hash>\n+        <hash alg=\"SHA-384\">aa30349b094723369908369a18e2cb5beb5b7ca0b24b4d56c2f5725fae152220f6526466672b22bfec939e2e0622a01d</hash>\n+        <hash alg=\"SHA3-384\">b3e1fee7784188df5e1931c9e8137ac0e20e63f66f93e7f938a448fc0b3adb4be5205c7a5f1835007e233fee2696fc2c</hash>\n+        <hash alg=\"SHA3-256\">92eff603ed0aab557e1a45e17a74e80d8ec656b5f137197b23c429c903fa448f</hash>\n+        <hash alg=\"SHA3-512\">b290f92958f8cd91705331d8411140c23957ab8b568fbe19a70f4f1dc97eddc13d3a200df28a02ab5911ce18f546c33f720878be0f727edac839a6e63ee66ece</hash>\n       </hashes>\n-      <licenses/>\n-      <purl>pkg:maven/org.jreleaser/jreleaser-google-chat-java-sdk@1.6.0?type=jar</purl>\n+      <licenses>\n+        <license>\n+          <name>Public Domain</name>\n+        </license>\n+      </licenses>\n+      <purl>pkg:maven/org.tukaani/xz@1.9?type=jar</purl>\n       <modified>false</modified>\n+      <externalReferences>\n+        <reference type=\"vcs\">\n+          <url>https://git.tukaani.org/?p=xz-java.git</url>\n+        </reference>\n+      </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.apache.tika/tika-core@2.7.0?type=jar\">\n-      <publisher>The Apache Software Foundation</publisher>\n-      <group>org.apache.tika</group>\n-      <name>tika-core</name>\n-      <version>2.7.0</version>\n-      <description>This is the core Apache Tika\u2122 toolkit library from which all other modules inherit functionality. It\n-    also\n-    includes the core facades for the Tika API.</description>\n-      <hashes>\n-        <hash alg=\"MD5\">42b3dd0d4679ec6bafd848b6c0cb3035</hash>\n-        <hash alg=\"SHA-1\">e9e8f1a7dc833e633fb2c717e8fa811e3e9dbf4a</hash>\n-        <hash alg=\"SHA-256\">2603961edec8bcee014d2c360e5a9a0cdbf10aa8e6e95cf67abe190c837bb054</hash>\n-        <hash alg=\"SHA-512\">1d0a07cd55db3bdd6d3d169f0747e920491936a7401af45e5f14f10400f3addd93918f8efb80445c0cf9d91803571877d7d4e1429440ab6ae8c49ec36a77e103</hash>\n-        <hash alg=\"SHA-384\">c3e7ad76e7abdaa27d28416e101110eab481f0f72cd0053de9030a0220549c1f346314116e04665ee70cdeba5fcbc5f8</hash>\n-        <hash alg=\"SHA3-384\">97b801fbde8b9b84c13aea4dd087cbb333e7cba52737d7f5c54f4ea46516d80677d363a2063de9cc014773da2bc5c4a5</hash>\n-        <hash alg=\"SHA3-256\">45ce7c3c2ea1ef9b7785a42604a0ec75444a9bd55b0687307e5a874d51f29547</hash>\n-        <hash alg=\"SHA3-512\">bd45003a2aa326c195e847199cda6aa52f5498cacf6faaab99b95826b4812da9590c29a80c0a3811c27403cc52a8e79a38c4770ce4063b7e013566b7e794af98</hash>\n-      </hashes>\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-telegram-java-sdk@1.6.0?type=jar\">\n+      <group>org.jreleaser</group>\n+      <name>jreleaser-telegram-java-sdk</name>\n+      <version>1.6.0</version>\n+      <description>Java SDK for Telegram</description>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n           <url>https://www.apache.org/licenses/LICENSE-2.0</url>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/org.apache.tika/tika-core@2.7.0?type=jar</purl>\n+      <purl>pkg:maven/org.jreleaser/jreleaser-telegram-java-sdk@1.6.0?type=jar</purl>\n       <modified>false</modified>\n       <externalReferences>\n-        <reference type=\"website\">\n-          <url>http://www.apache.org</url>\n-        </reference>\n-        <reference type=\"build-system\">\n-          <url>https://builds.apache.org/job/Tika-trunk/</url>\n-        </reference>\n-        <reference type=\"issue-tracker\">\n-          <url>https://issues.apache.org/jira/browse/TIKA</url>\n+        <reference type=\"vcs\">\n+          <url>https://github.com/jreleaser/jreleaser</url>\n         </reference>\n       </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.2?type=jar\">\n-      <group>com.fasterxml.jackson.core</group>\n-      <name>jackson-databind</name>\n+    <component type=\"library\" bom-ref=\"pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.14.2?type=jar\">\n+      <group>com.fasterxml.jackson.dataformat</group>\n+      <name>jackson-dataformat-yaml</name>\n       <version>2.14.2</version>\n-      <description>General data-binding functionality for Jackson: works on core streaming API</description>\n+      <description>Support for reading and writing YAML-encoded data via Jackson abstractions.</description>\n       <hashes>\n-        <hash alg=\"MD5\">c1b12dd14734cd1986132bf55042dd7e</hash>\n-        <hash alg=\"SHA-1\">01e71fddbc80bb86f71a6345ac1e8ab8a00e7134</hash>\n-        <hash alg=\"SHA-256\">501d3abce4d18dcc381058ec593c5b94477906bba6efbac14dae40a642f77424</hash>\n-        <hash alg=\"SHA-512\">85473a29d23292f49092af9e7a7a63993206847c53b3e71f3c67245d68f7b19cc7c341e0ece409eb5e96602df98a848e957d8691fdd2c5fcddd807df9078255e</hash>\n-        <hash alg=\"SHA-384\">5c54d6c497cb329c3424a30319bf657ea222349eadc5ae74c30e8dc1525d7b60b7785f4d20370267b03343dd738cc13e</hash>\n-        <hash alg=\"SHA3-384\">98ff0b2a4dfc1faf319d4b0d38376c3c7a58b65d071db293232eed810adf2e525fecee3be45c99b41e20cf6a3a8ebef9</hash>\n-        <hash alg=\"SHA3-256\">2dba45f78a0d37402083975e18dbb3201705faf7e533c3e9721b9364c2a1ab0f</hash>\n-        <hash alg=\"SHA3-512\">76ef73198269cfd0922f4ae86c8b7e6a9cd1b96ee55da43ebfe57dd34365cc1c5c5630fadf79e46156a52b6b96b7d1f694f5e4f5c4f6a3d3ebb31c927e414435</hash>\n+        <hash alg=\"MD5\">cb29e74cb2c1981985a8214774bde05e</hash>\n+        <hash alg=\"SHA-1\">cc9a25c1f4212562dcb2fa33dd8ae179ba0e6a4e</hash>\n+        <hash alg=\"SHA-256\">5c3a0a71d0339529c80ae771497b20fdc0fa7cb67c772f99af5935927560006a</hash>\n+        <hash alg=\"SHA-512\">f3232b7d5e4b466660a1fd7c0725dd1f24ef9e9192edd05fa698bc641c9f81142e8f1b11de0d0fd2ce3ff21267d3899d6287923dbd130177e3da50dbc222d6c4</hash>\n+        <hash alg=\"SHA-384\">3c08ebd6f40201af59117f2efa262c4280dd614cf02cdeff1145a33cf435b3685a9609cca9dd4c033ea3ce169b815d96</hash>\n+        <hash alg=\"SHA3-384\">d76663872641a9823592b1cf70989eb8f862bed5455e81591008f0a5b46ee8337bf2be78f433a99aa1842287fcaa20c5</hash>\n+        <hash alg=\"SHA3-256\">79385b1c7e23deba396f2194855b44bc942037ab9cff6a31444508373ecf345c</hash>\n+        <hash alg=\"SHA3-512\">323ef61d6433df558b595558d6d629fc6f48af7eb1de6db0382cb3d2cdf7b429e6a41a2b927d0298ea2f234fbc87a8c39a7a9a03901857cb79da1c53114d986f</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.2?type=jar</purl>\n+      <purl>pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.14.2?type=jar</purl>\n       <modified>false</modified>\n-      <externalReferences>\n-        <reference type=\"vcs\">\n-          <url>https://github.com/FasterXML/jackson-databind</url>\n-        </reference>\n-      </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/software.amazon.awssdk/http-client-spi@2.20.51?type=jar\">\n+    <component type=\"library\" bom-ref=\"pkg:maven/software.amazon.awssdk/aws-core@2.20.51?type=jar\">\n       <group>software.amazon.awssdk</group>\n-      <name>http-client-spi</name>\n+      <name>aws-core</name>\n       <version>2.20.51</version>\n+      <description>The AWS SDK for Java - Core runtime module holds the classes that are used by the individual service\n+        clients to interact with\n+        Amazon Web Services. Users need to depend on aws-java-sdk artifact for accessing individual client classes.</description>\n       <hashes>\n-        <hash alg=\"MD5\">5f1d20ac43c278682cba7bee5f0a40fc</hash>\n-        <hash alg=\"SHA-1\">3e05bdeea9ff32bdc4a82583190b217480f40554</hash>\n-        <hash alg=\"SHA-256\">ee5c9e32d35fb3a858e4c33e164a33ca12e1546a2a0230b892b57ecb3228f112</hash>\n-        <hash alg=\"SHA-512\">0bd388536c765fa3e230cce24da4721affafa16c86bb0af0025aa1cbbb3dca03db961e092a5973119dae569ac5d58f71e9b616bc189667b82c757ab19471f8f1</hash>\n-        <hash alg=\"SHA-384\">33f1f9a1d838fe71dcde06d31e38257967f21829d6479218bad757749ea5b19c1d52f4104611e9c8a03842888d25eafb</hash>\n-        <hash alg=\"SHA3-384\">e3f45e8daf0b3bf4ad4741113cc46868cb5347bc9c6e96e0f689fe24e27e7c1ec122d924ea93c5d1244db7abcbd2a0a1</hash>\n-        <hash alg=\"SHA3-256\">942ac8bf3fcae5f32c95ad1072a89847df7af3c22c61fdbe97a3b4415c59c08f</hash>\n-        <hash alg=\"SHA3-512\">3a29a471c2487d017c6758a5d049da8119615c04b0fef608f73d59d433a20b7c139cc15913249211cd2fbdcb892d8866dc4719d6b7d7000ea5222f3c66c3634d</hash>\n+        <hash alg=\"MD5\">9f1facc51eaf0f96979038c8fa2b556a</hash>\n+        <hash alg=\"SHA-1\">637aa646f46cb19da5b5b0e7cff07ca36389b5aa</hash>\n+        <hash alg=\"SHA-256\">60e54a6305c7d7de1c5473b9a32da33e1b517ef77afb9ef9cba2407afda93b9f</hash>\n+        <hash alg=\"SHA-512\">be86cccfb7bc6207928af7369fb89b657eaad6797cdf3bd0191bee5f27a695cb35016944985826012a2712f3b6ef7e2dfdb1399bf752c7ab783b466a54588fa2</hash>\n+        <hash alg=\"SHA-384\">ba6fcf12fa29fe797202efc2f5e0b3fefe3fced71bda349867bd65b647c637db4fb4ef1f7b496f136d47bbfff4285cb3</hash>\n+        <hash alg=\"SHA3-384\">3e9c9d488660989bd06dbeb4d01914078d8ff109f3342a4518d5ff8de78ca546381cb1bf550eb7d3ed96984a5ba98c3b</hash>\n+        <hash alg=\"SHA3-256\">8ecb8982c24f5eed018da2a44e2ee1db25bcb522c08502a958dc47b39d3e7e58</hash>\n+        <hash alg=\"SHA3-512\">2da6b8f8baf2f1c20742f924923bd535d38ac8628537cee69672db31b21988aaede39680aaf0d6504d5b285a81ca38c55419192411164b6c799b45ab8f52d4a1</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/software.amazon.awssdk/http-client-spi@2.20.51?type=jar</purl>\n-      <modified>false</modified>\n-    </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-config-json@1.6.0?type=jar\">\n-      <group>org.jreleaser</group>\n-      <name>jreleaser-config-json</name>\n-      <version>1.6.0</version>\n-      <hashes>\n-        <hash alg=\"MD5\">a40f40c22ff81180be7e2933ffaa9f73</hash>\n-        <hash alg=\"SHA-1\">7c3ddc3bc0af0b0b81001e5f13d2cf00c8a23939</hash>\n-        <hash alg=\"SHA-256\">7ba4873b58c9dab7b51cb44e9dd986f2fd3460be1e1b98f60cdb7c07b8d0ab13</hash>\n-        <hash alg=\"SHA-512\">4507e8f0ded1328c1f6c601be7a5a1743d82438f99ae7c0b1a0cc808edbc3b7cb645bed82b34e3fe982bebe1f26ea5f0e584ee2c1bdc56475fc797f9f96edfc3</hash>\n-        <hash alg=\"SHA-384\">2481bf8c286186e27806abb001715818b8a8b85b450085404ff68b7937ca8980dd7e83a973fe892855ffd9b0e6d2c422</hash>\n-        <hash alg=\"SHA3-384\">ea25cbc46d39bde2b888dc5a86e078adbd334aa2721467956c083be11b96e04004571c5e2618100a015e49200a3f18b6</hash>\n-        <hash alg=\"SHA3-256\">0bec7c5a49f077a1a337a515cc76d18e559ac228fef6a02e6d2edcedd625cad3</hash>\n-        <hash alg=\"SHA3-512\">59be244b437a163f5c2c3ffe6bd708c3b9ab2bec0a1b9b2829f40243ab8fe1722786ba1965058be81aa20aa38f3cd8f5e8bf790d238808fefc03944801fdd1da</hash>\n-      </hashes>\n-      <licenses/>\n-      <purl>pkg:maven/org.jreleaser/jreleaser-config-json@1.6.0?type=jar</purl>\n+      <purl>pkg:maven/software.amazon.awssdk/aws-core@2.20.51?type=jar</purl>\n       <modified>false</modified>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/software.amazon.awssdk/s3@2.20.51?type=jar\">\n-      <group>software.amazon.awssdk</group>\n-      <name>s3</name>\n-      <version>2.20.51</version>\n-      <description>The AWS Java SDK for Amazon S3 module holds the client classes that are used for communicating with\n-        Amazon Simple Storage Service</description>\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.codehaus.plexus/plexus-utils@3.4.1?type=jar\">\n+      <group>org.codehaus.plexus</group>\n+      <name>plexus-utils</name>\n+      <version>3.4.1</version>\n+      <description>A collection of various utility classes to ease working with strings, files, command lines, XML and\n+    more.</description>\n       <hashes>\n-        <hash alg=\"MD5\">3f92ae28a80e69056a3465f86863199c</hash>\n-        <hash alg=\"SHA-1\">68debde84b845008b8ca0f64e9408c37eca54c42</hash>\n-        <hash alg=\"SHA-256\">4658b68812cf02bd326c729166cf92ef0b698328f5bb4de237c7fb264611fb6f</hash>\n-        <hash alg=\"SHA-512\">6ece0717fc7c478c77b396971635d40cb7a7702fc6b9416f9a116d312a5deda5bcdce49355b34a16ad7e4ed7126eeb74ad65926e08746cda8ffd7f9db7324f9e</hash>\n-        <hash alg=\"SHA-384\">87d741cac3856d0935741ab4d885e6f286332e802d27643f95edf1d73b9dfe861ddda47a61535615ed5e9e0b1eb4abab</hash>\n-        <hash alg=\"SHA3-384\">4806d052ba98ab2b7cc2e933a7c0a34af77997cec417fa428eb2a1d9e70522b6a0e46ee585592d1b8f07d65c3f438855</hash>\n-        <hash alg=\"SHA3-256\">b8ad134833a4ce41ad110c76644f01ddfb347f0b43b865a68793fc2f98f01397</hash>\n-        <hash alg=\"SHA3-512\">e02c5e58ead816ea0aa74c1836a2f8feeaafbe9e2ebbd21bbd51ac208f20211f10800f9d809339a2d6a46c355a9826cc75e94d05672b38252b76d0d178266e92</hash>\n+        <hash alg=\"MD5\">c155c4135ef7ba134659bf1af31c5156</hash>\n+        <hash alg=\"SHA-1\">4de9992988c534efd668bfcca0480ebe13e0c0eb</hash>\n+        <hash alg=\"SHA-256\">52d85e04b3918722af11d12855b4a8257df96a0e76c8f4e3852e6faa851f357b</hash>\n+        <hash alg=\"SHA-512\">0668d413520a713d9279123eccae3b5e9bc79f41dd8da3b3a1ba79b7b60086c009639d91d84df230e490192fe63b10390f3901478c69bfd452a1280364d24876</hash>\n+        <hash alg=\"SHA-384\">cefd95e956f79c103c95f15d8a5b914b7158dfdf1bb1d7a1cb1eb4f89ab47f841f5fbc3f1cd9380bb57252a036cb63ee</hash>\n+        <hash alg=\"SHA3-384\">26aa374d12efd70c423a45794427f3ca297a20663b2297ef806e7f2bd57bb9e885da1222e1c557a80fb2a012cef5de52</hash>\n+        <hash alg=\"SHA3-256\">6ec121dba759799e676e53ab9b57d379907c6fb8f844177f63c21b7324011dc3</hash>\n+        <hash alg=\"SHA3-512\">3ba2485a1471edd0e43819277db828573ba2299599dd273bbb09ae4453343bc8e32672adc3b7a4eb523edd64aed8a50427f5b7a968870c152e7859f2c6bcbf34</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/software.amazon.awssdk/s3@2.20.51?type=jar</purl>\n+      <purl>pkg:maven/org.codehaus.plexus/plexus-utils@3.4.1?type=jar</purl>\n       <modified>false</modified>\n+      <externalReferences>\n+        <reference type=\"issue-tracker\">\n+          <url>http://github.com/codehaus-plexus/plexus-utils/issues</url>\n+        </reference>\n+        <reference type=\"vcs\">\n+          <url>http://github.com/codehaus-plexus/plexus-utils</url>\n+        </reference>\n+      </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-ftp-java-sdk@1.6.0?type=jar\">\n-      <group>org.jreleaser</group>\n-      <name>jreleaser-ftp-java-sdk</name>\n-      <version>1.6.0</version>\n+    <component type=\"library\" bom-ref=\"pkg:maven/com.github.luben/zstd-jni@1.5.4-1?type=jar\">\n+      <publisher>com.github.luben</publisher>\n+      <group>com.github.luben</group>\n+      <name>zstd-jni</name>\n+      <version>1.5.4-1</version>\n+      <description>JNI bindings for Zstd native library that provides fast and high compression lossless algorithm for Java and all JVM languages.</description>\n       <hashes>\n-        <hash alg=\"MD5\">2fac4212b110e237f1cf5103eca5c827</hash>\n-        <hash alg=\"SHA-1\">b737a2eb9497434e15feb6e0b9d22474eeedfa53</hash>\n-        <hash alg=\"SHA-256\">753d1cc4aee98b15c2ac124dc29dbf585c4837c76e0a6a892cadfa23ecfa6f8f</hash>\n-        <hash alg=\"SHA-512\">535ab5b17fec0fd7ee33461178cf957bc17da6a9674920f667c14abeea9196f7cf0603d45e9acefd3d637b44cd51fc8b1cfb19b09964e66c2ed068dd56bca1c9</hash>\n-        <hash alg=\"SHA-384\">9cb377b6190b6c8d4ff53db826a371c68d507739259022f04283204071c350ad691247a595b11948b32ecc847f90ca77</hash>\n-        <hash alg=\"SHA3-384\">e29e51805ff737174f596424447758ddf11cce76628c5f525a53d9295c087431b3e2203ceb17c96f3f6d1dd38f75c194</hash>\n-        <hash alg=\"SHA3-256\">96f7a72b53344731cf7c4c582e0ae8f3800cbb4c35584ad6c8b34b2db8e0c250</hash>\n-        <hash alg=\"SHA3-512\">3ec6ada584bd063225440db13919df282e155d0141cacbb193fa39a7b65f77810354088f8524b3415cad9eeb010e8ce1bee340f63da80d8c57e5944300b3d868</hash>\n+        <hash alg=\"MD5\">e787241d6ec56aac451be8b0d920c85b</hash>\n+        <hash alg=\"SHA-1\">291ccaacc039e41932de877303edb6af98a91c24</hash>\n+        <hash alg=\"SHA-256\">f0469d891127dc5ae6bd2df93a5aa38c4d79bcd5f360fbb88c2785b52a572349</hash>\n+        <hash alg=\"SHA-512\">368916f0057d69fa4ba3768f6f617291ce4083b89913e46c2daa68cc94c48b92e0ca626241486f34a4d154502eb77b19e82c16c68b341ecfc82ccc0520f8d4a9</hash>\n+        <hash alg=\"SHA-384\">7e72184873689fa286d93d88f69f8baa24f818fcd61105a14332fbb5ed254363c0969afa98befd797a3762577bc77993</hash>\n+        <hash alg=\"SHA3-384\">1302636797b291dbbe19f39bdeb66160c1317b395a0a9360ba93aeaa262de7ad8de7257e6a997a9c659fdf53b3367ee6</hash>\n+        <hash alg=\"SHA3-256\">54505ed16257a55330bb44c76719a687251d2623fa5e50a192b54c5067573255</hash>\n+        <hash alg=\"SHA3-512\">6e01cc9654c2d68c36a284e23c388267ac7013d534cceed0b6ab44679a6bbb6d03d4cfc52c967c4e76dbd5b8963c268e40d9890c927866ea00824821b0ecb82d</hash>\n       </hashes>\n-      <licenses/>\n-      <purl>pkg:maven/org.jreleaser/jreleaser-ftp-java-sdk@1.6.0?type=jar</purl>\n+      <licenses>\n+        <license>\n+          <id>BSD-2-Clause</id>\n+        </license>\n+      </licenses>\n+      <purl>pkg:maven/com.github.luben/zstd-jni@1.5.4-1?type=jar</purl>\n       <modified>false</modified>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-opencollective-java-sdk@1.6.0?type=jar\">\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-logger-api@1.6.0?type=jar\">\n       <group>org.jreleaser</group>\n-      <name>jreleaser-opencollective-java-sdk</name>\n+      <name>jreleaser-logger-api</name>\n       <version>1.6.0</version>\n+      <description>JReleaser logger API</description>\n       <hashes>\n-        <hash alg=\"MD5\">466b16d229b4e8361e9a36f6ab8da609</hash>\n-        <hash alg=\"SHA-1\">71ce038207eccd87aca49b8948bacd43d48ba203</hash>\n-        <hash alg=\"SHA-256\">c78bc45230562181ba289d97c9fc10fa67424916660a5d33f17f3b8c12bde996</hash>\n-        <hash alg=\"SHA-512\">aa55551218011a390520ab10745ae957003cbb51794605bbb85884c2bdad46c6d654cd0c6b5d318bb2c2993129ae61564f494526904a4bfacbf15453a8492c23</hash>\n-        <hash alg=\"SHA-384\">4bdd6b2e1ce04952366ce4af20473e2f0ccafba20cd0ab46162f2c90e028bd371783d99e7cc8546251f25dd62801bf4d</hash>\n-        <hash alg=\"SHA3-384\">cf77cf7a51d2726b98cc21eee8aef58abd9d9bcccd262480122e4acc22930ee2215b65dd9b9a412f89865c3e25c81066</hash>\n-        <hash alg=\"SHA3-256\">8d01d1d7fc0bb8f496e7b0d62fa1dd906643bd3c735f24ff2fea4f177995c055</hash>\n-        <hash alg=\"SHA3-512\">4b5c09ef181762ac69899f289ac41007a3dfeb4b5efd36a22b05c621b58df27d0a5994209fbe777c19f8a3406cbedb4e0b047c3bf772e7132ca0f4b663047a0a</hash>\n-      </hashes>\n-      <licenses/>\n-      <purl>pkg:maven/org.jreleaser/jreleaser-opencollective-java-sdk@1.6.0?type=jar</purl>\n-      <modified>false</modified>\n-    </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/software.amazon.eventstream/eventstream@1.0.1?type=jar\">\n-      <group>software.amazon.eventstream</group>\n-      <name>eventstream</name>\n-      <version>1.0.1</version>\n-      <description>The AWS Event Stream decoder library.</description>\n-      <hashes>\n-        <hash alg=\"MD5\">864488626f50477cfd786d1c80e3b39e</hash>\n-        <hash alg=\"SHA-1\">6ff8649dffc5190366ada897ba8525a836297784</hash>\n-        <hash alg=\"SHA-256\">0c37d8e696117f02c302191b8110b0d0eb20fa412fce34c3a269ec73c16ce822</hash>\n-        <hash alg=\"SHA-512\">461c7b63b3d39247af4073608e346b93d32502322136024868be3f7e40e71f348c3bef2450757b5dc8594ffd596f7af03ed69e4a383000bed8ac2a9e3f0cbe5d</hash>\n-        <hash alg=\"SHA-384\">38defa89452920fee5613df7225999b74d7c8fbe4e04f0b89f7aa3c525e7819eb91f8415b302726042aa4adf76e4d2ce</hash>\n-        <hash alg=\"SHA3-384\">74995e25809e85fc00526cc04011cf88edc059e7318f845a6fdefe67aba5942cf31a32024afe0adb1271f5d456d051ea</hash>\n-        <hash alg=\"SHA3-256\">83aa0539d3de0d287d3e87a276ab2f83ea610db994addabb98fc3dbbd50fa418</hash>\n-        <hash alg=\"SHA3-512\">8ea6782a037f40db3cef732528e376c50064faa7f9cb689604201842d003daabb8b8ff069a8d80ab0d28e19a69a7c2d3db8233c5618275152f425c18aae0dcfa</hash>\n+        <hash alg=\"MD5\">e7da806a3427ab10405584067d880ead</hash>\n+        <hash alg=\"SHA-1\">92ae4e1826cf1d8321fcefd3f4ece0fa5cc4fc94</hash>\n+        <hash alg=\"SHA-256\">372d4b6cee7af83429f9f054a69f73d38d6fb4c983b14ce97f2599791d59aee9</hash>\n+        <hash alg=\"SHA-512\">c4f4edf49e18f475b7b44677497250cd93af45e302fb39306a94dc8f0ee1f783921967de3e1f1b7591f970a359080f43b24c1499a363280d904c2519d2e9bcb2</hash>\n+        <hash alg=\"SHA-384\">fcdadd6f2e8af30a7761e98f5c717ab1b8f6f0a79825a711454c8c9cc9842cf8fe0f5917b5ea48603eb0ee5788ed7a8b</hash>\n+        <hash alg=\"SHA3-384\">42a3e276d69efc85ce5798c5cd78ba1a910ef328169fb39a1a685eea5b98e9c3bf495124f56b518d553f1ca2e63d62f7</hash>\n+        <hash alg=\"SHA3-256\">0fb4d06e278df39d6633d1a09ed01ad4f7788838668f2ebc097f919384cec97d</hash>\n+        <hash alg=\"SHA3-512\">bb5a8b000955af1038d4d75c0fd8786561b3a2cf7bb804e09e42518a0bcc3e23ab01dd5236de4bdb58fd9b1a0e923982eb6cc6d0e450896bed9c86dfe808675d</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/software.amazon.eventstream/eventstream@1.0.1?type=jar</purl>\n+      <purl>pkg:maven/org.jreleaser/jreleaser-logger-api@1.6.0?type=jar</purl>\n       <modified>false</modified>\n       <externalReferences>\n         <reference type=\"vcs\">\n-          <url>https://github.com/awslabs/aws-eventstream-java</url>\n+          <url>https://github.com/jreleaser/jreleaser</url>\n         </reference>\n       </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-github-java-sdk@1.6.0?type=jar\">\n-      <group>org.jreleaser</group>\n-      <name>jreleaser-github-java-sdk</name>\n-      <version>1.6.0</version>\n-      <hashes>\n-        <hash alg=\"MD5\">e5ca5c914fb23b63f5caa3a3c9e0d9a1</hash>\n-        <hash alg=\"SHA-1\">639a13a30ba795b6e31e5180ef0d4ac894b0e78c</hash>\n-        <hash alg=\"SHA-256\">6d8a6c819336e8f2d6495cb63b32b16f977ac8286b781e21f35c54b768ab9be5</hash>\n-        <hash alg=\"SHA-512\">7ee316823a65634d29db53ec21c1d1efe4b4d67ae7c6ad280f5d835e63e45d0891ec87a45396a5439283afaec6a243402bf06929c6d356d714e1a3d127f52eac</hash>\n-        <hash alg=\"SHA-384\">206777b3ac8df89abb23c4a02791280c2ebbe80e1af2a934fcb548f3412f6b3788acbcec64c6b6841210d1feb36962ad</hash>\n-        <hash alg=\"SHA3-384\">20fb2a39435abe0f990e2c877a85bacf6d84be80e7677aef1e7000cef64ff1b74f3642d864390e4520e8c226a976ae93</hash>\n-        <hash alg=\"SHA3-256\">b2f9ba964269cfa8e6b21a6f26c5ab1bbb9921d88b96623933a238f252d0d16a</hash>\n-        <hash alg=\"SHA3-512\">73318ba125239f566c030a7674be075c4b27219a6cbbf68597f8267c6d2b2052efd6438584ec0562c290c74ba6d1b21385830dd97dffa0ee3b8419462528c294</hash>\n-      </hashes>\n-      <licenses/>\n-      <purl>pkg:maven/org.jreleaser/jreleaser-github-java-sdk@1.6.0?type=jar</purl>\n-      <modified>false</modified>\n-    </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-smtp-java-sdk@1.6.0?type=jar\">\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-mastodon-java-sdk@1.6.0?type=jar\">\n       <group>org.jreleaser</group>\n-      <name>jreleaser-smtp-java-sdk</name>\n+      <name>jreleaser-mastodon-java-sdk</name>\n       <version>1.6.0</version>\n-      <hashes>\n-        <hash alg=\"MD5\">783c47a55bb0bb46cb3197ea70359ab1</hash>\n-        <hash alg=\"SHA-1\">a23ccdcd85debf4f5e28ab96b58a569994665eab</hash>\n-        <hash alg=\"SHA-256\">676aeb1c07707675452fa57faf838c59ef28d3c4b673c62bda1c6c8c08416ff5</hash>\n-        <hash alg=\"SHA-512\">851e9a41e95e652d57b25c1924b13bbce9261054699d404f26263621412c1b82fc8c9cf8e2400459e05e1f24a80dce05b0366cd45ba8fe3d84235f239b92d7db</hash>\n-        <hash alg=\"SHA-384\">6a1f80e531a4def28b1f977fe1c700acdf8d470d2979d085cf4f5d206389bc8269940c221dee5be48db9feddfd1261c3</hash>\n-        <hash alg=\"SHA3-384\">f1a22042e1f71ac3d3d959975ed6b91e6b34d263e3e0f9a79741e928288ce474f3bccf40ed5844390148138f09c69baa</hash>\n-        <hash alg=\"SHA3-256\">92f285303c2ef6ceb5a0d5ada1cbf452e567c72e11f006657c5f2cd7769dfb2e</hash>\n-        <hash alg=\"SHA3-512\">a21dfa0a23f9cdfd3e2a897dfe1d077c0a0896337c4cf53b93e6df7099d8e53efbab42de6833922bdc71ed558086299d9a68fa1fe7000f5b21ee609ce7075769</hash>\n-      </hashes>\n-      <licenses/>\n-      <purl>pkg:maven/org.jreleaser/jreleaser-smtp-java-sdk@1.6.0?type=jar</purl>\n+      <description>Java SDK for Mastodon</description>\n+      <licenses>\n+        <license>\n+          <id>Apache-2.0</id>\n+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>\n+        </license>\n+      </licenses>\n+      <purl>pkg:maven/org.jreleaser/jreleaser-mastodon-java-sdk@1.6.0?type=jar</purl>\n       <modified>false</modified>\n+      <externalReferences>\n+        <reference type=\"vcs\">\n+          <url>https://github.com/jreleaser/jreleaser</url>\n+        </reference>\n+      </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-gitter-java-sdk@1.6.0?type=jar\">\n-      <group>org.jreleaser</group>\n-      <name>jreleaser-gitter-java-sdk</name>\n-      <version>1.6.0</version>\n+    <component type=\"library\" bom-ref=\"pkg:maven/software.amazon.awssdk/s3@2.20.51?type=jar\">\n+      <group>software.amazon.awssdk</group>\n+      <name>s3</name>\n+      <version>2.20.51</version>\n+      <description>The AWS Java SDK for Amazon S3 module holds the client classes that are used for communicating with\n+        Amazon Simple Storage Service</description>\n       <hashes>\n-        <hash alg=\"MD5\">e2944628bd6ecfe72fcb2bd93ca54f7b</hash>\n-        <hash alg=\"SHA-1\">9239dcabf8e4986b7a2ed901d99ca441768c73ce</hash>\n-        <hash alg=\"SHA-256\">133011fc24d3c53542d099f4eb3adccb2bd1d2fd5f4271914c1bd64431fce922</hash>\n-        <hash alg=\"SHA-512\">bbbff6588b066711308bf13e4ec4d373fe002bf9a1ef9cde9bfb0314870e2c0b99c7776966daa74e7f5961028a96d35c2952112883c30d4e262a2581ae7dd821</hash>\n-        <hash alg=\"SHA-384\">70e24632929dfe029d20f697a31ff1ece285f762265093b387da45598810a08fc5d056ba0febe7b98bea3a9f91fa7134</hash>\n-        <hash alg=\"SHA3-384\">de00a645025deb33dfffa7a66ea74e62f9f6e50104af3dcfa3e02c54d7838f3491f271bf87c6548462b3a779499d0cfd</hash>\n-        <hash alg=\"SHA3-256\">4501e84919888b632f571ff3460f4fe466346a394ffe1e9a76cd2fc6ba9b640f</hash>\n-        <hash alg=\"SHA3-512\">b281cea4feec506e310524abf3b2523fcbb7c53543e8e8c1db69765a0a8eeb5908deb1290ea589cd485201171a3a440b1f94a505db4d9b5d96edffaf6ff5b85a</hash>\n+        <hash alg=\"MD5\">3f92ae28a80e69056a3465f86863199c</hash>\n+        <hash alg=\"SHA-1\">68debde84b845008b8ca0f64e9408c37eca54c42</hash>\n+        <hash alg=\"SHA-256\">4658b68812cf02bd326c729166cf92ef0b698328f5bb4de237c7fb264611fb6f</hash>\n+        <hash alg=\"SHA-512\">6ece0717fc7c478c77b396971635d40cb7a7702fc6b9416f9a116d312a5deda5bcdce49355b34a16ad7e4ed7126eeb74ad65926e08746cda8ffd7f9db7324f9e</hash>\n+        <hash alg=\"SHA-384\">87d741cac3856d0935741ab4d885e6f286332e802d27643f95edf1d73b9dfe861ddda47a61535615ed5e9e0b1eb4abab</hash>\n+        <hash alg=\"SHA3-384\">4806d052ba98ab2b7cc2e933a7c0a34af77997cec417fa428eb2a1d9e70522b6a0e46ee585592d1b8f07d65c3f438855</hash>\n+        <hash alg=\"SHA3-256\">b8ad134833a4ce41ad110c76644f01ddfb347f0b43b865a68793fc2f98f01397</hash>\n+        <hash alg=\"SHA3-512\">e02c5e58ead816ea0aa74c1836a2f8feeaafbe9e2ebbd21bbd51ac208f20211f10800f9d809339a2d6a46c355a9826cc75e94d05672b38252b76d0d178266e92</hash>\n       </hashes>\n-      <licenses/>\n-      <purl>pkg:maven/org.jreleaser/jreleaser-gitter-java-sdk@1.6.0?type=jar</purl>\n+      <licenses>\n+        <license>\n+          <id>Apache-2.0</id>\n+        </license>\n+      </licenses>\n+      <purl>pkg:maven/software.amazon.awssdk/s3@2.20.51?type=jar</purl>\n       <modified>false</modified>\n     </component>\n     <component type=\"library\" bom-ref=\"pkg:maven/org.jsoup/jsoup@1.15.4?type=jar\">\n       <publisher>Jonathan Hedley</publisher>\n       <group>org.jsoup</group>\n       <name>jsoup</name>\n       <version>1.15.4</version>\n@@ -2270,86 +2145,35 @@\n           <url>https://github.com/jhy/jsoup/issues</url>\n         </reference>\n         <reference type=\"vcs\">\n           <url>https://github.com/jhy/jsoup</url>\n         </reference>\n       </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-s3-java-sdk@1.6.0?type=jar\">\n-      <group>org.jreleaser</group>\n-      <name>jreleaser-s3-java-sdk</name>\n-      <version>1.6.0</version>\n-      <hashes>\n-        <hash alg=\"MD5\">f1eb34d6288f9d0fc6fc3a3284ad1ea2</hash>\n-        <hash alg=\"SHA-1\">edc446a812b8b8068352d1a03e27db6879231d63</hash>\n-        <hash alg=\"SHA-256\">6f0c814aa80b8593adb76fd5a1b5cf4e189e7793429fd219fb4e6c089aa3da25</hash>\n-        <hash alg=\"SHA-512\">e9529706461f01e9f0b691fe5aed62291550982eb8321488bad4d09f71df8525fcfd304fa5c28314b98b3ecb29a10baa7d302eb3f09d566debe2855c32dccd43</hash>\n-        <hash alg=\"SHA-384\">82e7a7f42913d9480d3c68b76fa8b467a202c403e0f43405f2b49803b76a296b50c34163b0a4a9041de1b833a9144389</hash>\n-        <hash alg=\"SHA3-384\">6411a7070658bb608190737d68e164f45ac64669b626edd034415a71324763e5e6011d1820d19b246547f5c2f9811805</hash>\n-        <hash alg=\"SHA3-256\">6d2b77a72dab30d1beb6a5fad40c520e78f938727b8ffe965e791aa67fcbd386</hash>\n-        <hash alg=\"SHA3-512\">d4672917824342a2b5e2817eb5d6dcd78b65af1e9e5d485e3e17407a00b919cc221b59bb66ba9640d86fce2c87e6151746bee7af63a90ff53f8174da95a046f0</hash>\n-      </hashes>\n-      <licenses/>\n-      <purl>pkg:maven/org.jreleaser/jreleaser-s3-java-sdk@1.6.0?type=jar</purl>\n-      <modified>false</modified>\n-    </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/software.amazon.awssdk/arns@2.20.51?type=jar\">\n-      <group>software.amazon.awssdk</group>\n-      <name>arns</name>\n-      <version>2.20.51</version>\n-      <description>The AWS SDK for Java - Arns module holds the classes that are related to AWS ARN</description>\n-      <hashes>\n-        <hash alg=\"MD5\">8d826e61b6a82c3709cce4365d8e1d78</hash>\n-        <hash alg=\"SHA-1\">9305f0f4a9435df88bb5a35ec61aace0be0ce3c8</hash>\n-        <hash alg=\"SHA-256\">9885a1486c514fac5d44405fd0c9f1a2eb0eb62a5db669342058181e0f86edba</hash>\n-        <hash alg=\"SHA-512\">a4a7bc31322df09c81bcd9abea03cd0c8647ff69789bb06bc31284feab200ceeb65c41c2eea80c90056f1f54ac310e79d8dd1af892cae3ab80721bd34c3f9b0e</hash>\n-        <hash alg=\"SHA-384\">bbd8004e4d60a32794a6f9d779034d20a6b2c170117bd60e8f12dbd898d9216b41074624e66dee876ebf5c48845320b7</hash>\n-        <hash alg=\"SHA3-384\">8afbe17519ee08634c02adbae872d04c34e83325cd7319d3550e07cdd86fa8a5ff673adb392221e8eac777529cd85b31</hash>\n-        <hash alg=\"SHA3-256\">3fd520aafd89360244143e94b5b4e886cda217dbea4add63fa563b5d13482b8a</hash>\n-        <hash alg=\"SHA3-512\">3bd511652b05f6beaa7974a07b8630d6c2d3595ffa450aa2090d287adeaed87b4136a77702a6ae5d663c061902ae3e8c0846b6bb9ee4203d6a1a481b77191df4</hash>\n-      </hashes>\n-      <licenses>\n-        <license>\n-          <id>Apache-2.0</id>\n-        </license>\n-      </licenses>\n-      <purl>pkg:maven/software.amazon.awssdk/arns@2.20.51?type=jar</purl>\n-      <modified>false</modified>\n-    </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.bouncycastle/bcpkix-jdk15on@1.70?type=jar\">\n-      <group>org.bouncycastle</group>\n-      <name>bcpkix-jdk15on</name>\n-      <version>1.70</version>\n-      <description>The Bouncy Castle Java APIs for CMS, PKCS, EAC, TSP, CMP, CRMF, OCSP, and certificate generation. This jar contains APIs for JDK 1.5 and up. The APIs can be used in conjunction with a JCE/JCA provider such as the one provided with the Bouncy Castle Cryptography APIs.</description>\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.3.5?type=jar\">\n+      <group>org.eclipse.sisu</group>\n+      <name>org.eclipse.sisu.plexus</name>\n+      <version>0.3.5</version>\n       <hashes>\n-        <hash alg=\"MD5\">2c383f50d41937eae4fd32c35d8668cd</hash>\n-        <hash alg=\"SHA-1\">f81e5af49571a9d5a109a88f239a73ce87055417</hash>\n-        <hash alg=\"SHA-256\">e5b9cb821df57f70b0593358e89c0e8d7266515da9d088af6c646f63d433c07c</hash>\n-        <hash alg=\"SHA-512\">477001e9556cdbe7fe9eca0c35b3ce29cd6b4d9cd5e13d1f44e3da6433d56a18e23f3679603a23730d78a93bd401113b804562c8bacb1e745e7944127f7afa4c</hash>\n-        <hash alg=\"SHA-384\">249614fa138e4b405ad067f69ee538269ade5a517d8f47b6d69bfc8180ae48c019570540a47314f3b64060a6bca20682</hash>\n-        <hash alg=\"SHA3-384\">13d1354f83de80b89fa91ffc44a14b0aeee418367ec7dde95aaecd70f6d219e4ed1bbf102e099cdfe64737c06dafc199</hash>\n-        <hash alg=\"SHA3-256\">afc8204fb76d0ec343ba436eaeac7834156ee976a1e0b2bafd0075812451046a</hash>\n-        <hash alg=\"SHA3-512\">b55bcc09c9f9c87332160ce068ca349502d628c34b156ebb30a99d94f87606d59ccc62f8ded4a927d57ed9553d274b34a8f9b5602a5eefad66958f9eddbffa28</hash>\n+        <hash alg=\"MD5\">30c4a9fa2137698ed66c8542f1be196a</hash>\n+        <hash alg=\"SHA-1\">d71996bb2e536f966b3b70e647067fff3b73d32f</hash>\n+        <hash alg=\"SHA-256\">7e4c61096d70826f20f7a7d55c59a5528e7aa5ad247ee2dfe544e4dd25f6a784</hash>\n+        <hash alg=\"SHA-512\">38d7dbe023f9751cb5e30bf154e31696590317dc7b7f768811fe0f5940513fcea4665670cd47d0b72ded85453b10f7d129b0b7428b155a41c903c7b56c986e8d</hash>\n+        <hash alg=\"SHA-384\">2e943a72f0ca201d50ba90b4cf70c3c1f7b5ffc3bbfdee45875bc2f6f2e2a3a93acbba3a2f1e7ffb32b70e041633b6de</hash>\n+        <hash alg=\"SHA3-384\">a7b121732001b6f225b0687e7747993f48b3fc1d9a4325b4321a4c59adae36b49677193f5e31e3b1f11a6cd266e459f3</hash>\n+        <hash alg=\"SHA3-256\">b879a16dd84d8d4f39c1009029b3a3a55e18049c7910f77814a32ca088b56585</hash>\n+        <hash alg=\"SHA3-512\">8f8fbebd2a3024bcf6f2e27e8206e3f3c2b2673217c1220743b1869bf60341490db7d1877d9eaf3c452500690df98ccda11a19bda996b74a6ebedc37bc9bc554</hash>\n       </hashes>\n       <licenses>\n         <license>\n-          <name>Bouncy Castle Licence</name>\n-          <url>https://www.bouncycastle.org/licence.html</url>\n+          <id>EPL-1.0</id>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/org.bouncycastle/bcpkix-jdk15on@1.70?type=jar</purl>\n+      <purl>pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.3.5?type=jar</purl>\n       <modified>false</modified>\n-      <externalReferences>\n-        <reference type=\"issue-tracker\">\n-          <url>https://github.com/bcgit/bc-java/issues</url>\n-        </reference>\n-        <reference type=\"vcs\">\n-          <url>https://github.com/bcgit/bc-java</url>\n-        </reference>\n-      </externalReferences>\n     </component>\n     <component type=\"library\" bom-ref=\"pkg:maven/net.i2p.crypto/eddsa@0.3.0?type=jar\">\n       <group>net.i2p.crypto</group>\n       <name>eddsa</name>\n       <version>0.3.0</version>\n       <description>Implementation of EdDSA in Java</description>\n       <hashes>\n@@ -2371,545 +2195,784 @@\n       <modified>false</modified>\n       <externalReferences>\n         <reference type=\"vcs\">\n           <url>https://github.com/str4d/ed25519-java</url>\n         </reference>\n       </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.commonmark/commonmark@0.21.0?type=jar\">\n-      <group>org.commonmark</group>\n-      <name>commonmark</name>\n-      <version>0.21.0</version>\n-      <description>Core of commonmark-java (implementation of CommonMark for parsing markdown and rendering to HTML)</description>\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-git-java-sdk@1.6.0?type=jar\">\n+      <group>org.jreleaser</group>\n+      <name>jreleaser-git-java-sdk</name>\n+      <version>1.6.0</version>\n+      <description>Java SDK for Git</description>\n+      <licenses>\n+        <license>\n+          <id>Apache-2.0</id>\n+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>\n+        </license>\n+      </licenses>\n+      <purl>pkg:maven/org.jreleaser/jreleaser-git-java-sdk@1.6.0?type=jar</purl>\n+      <modified>false</modified>\n+      <externalReferences>\n+        <reference type=\"vcs\">\n+          <url>https://github.com/jreleaser/jreleaser</url>\n+        </reference>\n+      </externalReferences>\n+    </component>\n+    <component type=\"library\" bom-ref=\"pkg:maven/software.amazon.awssdk/apache-client@2.20.51?type=jar\">\n+      <group>software.amazon.awssdk</group>\n+      <name>apache-client</name>\n+      <version>2.20.51</version>\n       <hashes>\n-        <hash alg=\"MD5\">c0c0bf595a23b868d229b5f5806b0646</hash>\n-        <hash alg=\"SHA-1\">c98f0473b17c87fe4fa2fc62a7c6523a2fe018f0</hash>\n-        <hash alg=\"SHA-256\">81084a7035046fe306f0dbf16ef57a68d08ee5c97004ea867e62b5db46e98afb</hash>\n-        <hash alg=\"SHA-512\">24dd29b724943c3221873bea8886ad8926020dbd2e4fbf7d976b7616ad228808c8cf2639b277a093ed615f7ec93baf8c9a96ce5a1419023be2378ace0118893d</hash>\n-        <hash alg=\"SHA-384\">e212ed3dd01945e4c168c1b4fca9ce485dcff55aaf0734c472dcc58867c625d5b5a41af5fc24f5e348ddfed97bffc30d</hash>\n-        <hash alg=\"SHA3-384\">8e4efaf02b257beadc43e95e0cd62f9cad79eb7699e4d896f2dc1a54abf23f529be7a7f7c315c2fa4bc44e287dda2de7</hash>\n-        <hash alg=\"SHA3-256\">8bd31a3e49f971ab0eed8b9f88025a9718ee83941d33d2ab42acd71120583f25</hash>\n-        <hash alg=\"SHA3-512\">78fc1aa5a37db03e769b6bbf2919db977fd8d7edb71dab65d2df1914dfd9b186a6d85b35f2d3a627b72858abfd463f23622fb990cf4b58a41c812f909df327a8</hash>\n+        <hash alg=\"MD5\">883a34bacf829210ba8399ff6107698e</hash>\n+        <hash alg=\"SHA-1\">965650dfa90875767e69a56d41ae56f658b77b84</hash>\n+        <hash alg=\"SHA-256\">5b45a7336811c00346a6ac53b9a034e121c9a86739405457e803dbba546b3089</hash>\n+        <hash alg=\"SHA-512\">8a0739ff68f09a778e54b40b813d4c7507e4523913210aa3cc7196db07a0253952ccce4964ccddb9b332e9fed2b99ddd8170ae030104c00f879caa604b28b964</hash>\n+        <hash alg=\"SHA-384\">b98baedb6fd915a51ecf76e08103d2f9b48dcfc4c46d70fb1bea7dec010b57bed5091838614266f8d85c7bcb1694d90e</hash>\n+        <hash alg=\"SHA3-384\">9513030fc7eb334a1f1a90a5109c35c282823864c550ba8d9fa8edb9c097a834edc7c53faed3cb5dfe4b3b7a323daab9</hash>\n+        <hash alg=\"SHA3-256\">faedd3e1307755149f42000bbfb70cbea89c9f7b057aebe1edfb2968f1930606</hash>\n+        <hash alg=\"SHA3-512\">c32001445e7fb6dcf1442941c087253387bb0058bbf78fce710af7538bb86e4fc47a30c4e6a8b1035f53249a52deeefe2507439555c9bee74eadb93db6516e31</hash>\n       </hashes>\n       <licenses>\n         <license>\n-          <id>BSD-2-Clause</id>\n+          <id>Apache-2.0</id>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/org.commonmark/commonmark@0.21.0?type=jar</purl>\n+      <purl>pkg:maven/software.amazon.awssdk/apache-client@2.20.51?type=jar</purl>\n       <modified>false</modified>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.codehaus.plexus/plexus-utils@3.4.1?type=jar\">\n-      <group>org.codehaus.plexus</group>\n-      <name>plexus-utils</name>\n-      <version>3.4.1</version>\n-      <description>A collection of various utility classes to ease working with strings, files, command lines, XML and\n-    more.</description>\n+    <component type=\"library\" bom-ref=\"pkg:maven/com.hierynomus/sshj@0.35.0?type=jar\">\n+      <group>com.hierynomus</group>\n+      <name>sshj</name>\n+      <version>0.35.0</version>\n+      <description>SSHv2 library for Java</description>\n       <hashes>\n-        <hash alg=\"MD5\">c155c4135ef7ba134659bf1af31c5156</hash>\n-        <hash alg=\"SHA-1\">4de9992988c534efd668bfcca0480ebe13e0c0eb</hash>\n-        <hash alg=\"SHA-256\">52d85e04b3918722af11d12855b4a8257df96a0e76c8f4e3852e6faa851f357b</hash>\n-        <hash alg=\"SHA-512\">0668d413520a713d9279123eccae3b5e9bc79f41dd8da3b3a1ba79b7b60086c009639d91d84df230e490192fe63b10390f3901478c69bfd452a1280364d24876</hash>\n-        <hash alg=\"SHA-384\">cefd95e956f79c103c95f15d8a5b914b7158dfdf1bb1d7a1cb1eb4f89ab47f841f5fbc3f1cd9380bb57252a036cb63ee</hash>\n-        <hash alg=\"SHA3-384\">26aa374d12efd70c423a45794427f3ca297a20663b2297ef806e7f2bd57bb9e885da1222e1c557a80fb2a012cef5de52</hash>\n-        <hash alg=\"SHA3-256\">6ec121dba759799e676e53ab9b57d379907c6fb8f844177f63c21b7324011dc3</hash>\n-        <hash alg=\"SHA3-512\">3ba2485a1471edd0e43819277db828573ba2299599dd273bbb09ae4453343bc8e32672adc3b7a4eb523edd64aed8a50427f5b7a968870c152e7859f2c6bcbf34</hash>\n+        <hash alg=\"MD5\">369da8322a4df0efe61793376e76a52c</hash>\n+        <hash alg=\"SHA-1\">34ad7d7229fe4cd7dbc3c67fa2507d32f495bbe3</hash>\n+        <hash alg=\"SHA-256\">d3b3d71f3e834c7e52d022036c2e96c2b21c8ec7baa20270965c4d59e2e4d86e</hash>\n+        <hash alg=\"SHA-512\">de0a194cb0b2a41adbaa6626d0095642b2491a9d915ee0cdd80ceac93a228bdffe4e24e899bcbd45f6f37390c78f54d0772e7519ec64b9f896fc8c55fad8ff78</hash>\n+        <hash alg=\"SHA-384\">fac000303a06c976ae1cc6b2d2f61b181eea91f1723df7fdfe05bbc7157fe7bc8f5621d20bd519d21c298c61d0a71c17</hash>\n+        <hash alg=\"SHA3-384\">704ff94f71f3bcd02bd1d54e5d6da420a122e4150fcd27ad5358fcff7bab8c38f51bdf34db660c42c10d429a26a57d25</hash>\n+        <hash alg=\"SHA3-256\">13a63eb70bde9cb93b09c7de8d2ecc2039452253c7e7f780f2c839252b647fe3</hash>\n+        <hash alg=\"SHA3-512\">fbb9f088fdcc2d99205b092b02cfc855dc011f1cf73002eb08543a52e9f40f3ca150566195e76f9854bffbf12ba01f30b4f44cf10a8c9dee04bd06687a6b3a39</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/org.codehaus.plexus/plexus-utils@3.4.1?type=jar</purl>\n+      <purl>pkg:maven/com.hierynomus/sshj@0.35.0?type=jar</purl>\n       <modified>false</modified>\n       <externalReferences>\n         <reference type=\"issue-tracker\">\n-          <url>http://github.com/codehaus-plexus/plexus-utils/issues</url>\n+          <url>https://github.com/hierynomus/sshj/issues</url>\n         </reference>\n         <reference type=\"vcs\">\n-          <url>http://github.com/codehaus-plexus/plexus-utils</url>\n+          <url>https://github.com/hierynomus/sshj</url>\n         </reference>\n       </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/software.amazon.awssdk/endpoints-spi@2.20.51?type=jar\">\n-      <group>software.amazon.awssdk</group>\n-      <name>endpoints-spi</name>\n-      <version>2.20.51</version>\n-      <hashes>\n-        <hash alg=\"MD5\">e1c1ab036273e2ffbaf2fbaa6ba42569</hash>\n-        <hash alg=\"SHA-1\">f5d8db7fb745e169955d079d59155b5c949f11aa</hash>\n-        <hash alg=\"SHA-256\">f7970cd35978921717df84a8633e92e28c4d2a3825b73bf5958f12008a59cac3</hash>\n-        <hash alg=\"SHA-512\">896f2d6d5669386e07f9c29834674c0579db755881ff02be82cb70579b68c3563a407e905983d76f2869f07a3a58cf1825e54febc6bb1855af1e37e4b5e53f58</hash>\n-        <hash alg=\"SHA-384\">f9db3630272c7b02c8c0f52d69b5e88cd1227f497975fa29865ac7cfc2eea5f50dc6a0a618681c0642215c2e371e9426</hash>\n-        <hash alg=\"SHA3-384\">bfc03e263e0c5cb37e958edcecd9b339957b938acb8ee24b34d4e322fc4eca77078b1fa0257f24e91b412e5ae4fcc01a</hash>\n-        <hash alg=\"SHA3-256\">64f13930a29cea4833e87b53d0a680ff730b7d5686a59d97e9014ce411be04fd</hash>\n-        <hash alg=\"SHA3-512\">043c51cea16acc5f13f33651a81e9d27cfe82d2ee0db63efe854c9da217b0b65740712d32948e26f1e205cfa50bb793d570d95e25e7b373fc59e42a1df344325</hash>\n-      </hashes>\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-teams-java-sdk@1.6.0?type=jar\">\n+      <group>org.jreleaser</group>\n+      <name>jreleaser-teams-java-sdk</name>\n+      <version>1.6.0</version>\n+      <description>Java SDK for Microsoft Teams</description>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/software.amazon.awssdk/endpoints-spi@2.20.51?type=jar</purl>\n+      <purl>pkg:maven/org.jreleaser/jreleaser-teams-java-sdk@1.6.0?type=jar</purl>\n       <modified>false</modified>\n+      <externalReferences>\n+        <reference type=\"vcs\">\n+          <url>https://github.com/jreleaser/jreleaser</url>\n+        </reference>\n+      </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-nexus2-java-sdk@1.6.0?type=jar\">\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-slack-java-sdk@1.6.0?type=jar\">\n       <group>org.jreleaser</group>\n-      <name>jreleaser-nexus2-java-sdk</name>\n+      <name>jreleaser-slack-java-sdk</name>\n       <version>1.6.0</version>\n+      <description>Java SDK for Slack</description>\n+      <licenses>\n+        <license>\n+          <id>Apache-2.0</id>\n+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>\n+        </license>\n+      </licenses>\n+      <purl>pkg:maven/org.jreleaser/jreleaser-slack-java-sdk@1.6.0?type=jar</purl>\n+      <modified>false</modified>\n+      <externalReferences>\n+        <reference type=\"vcs\">\n+          <url>https://github.com/jreleaser/jreleaser</url>\n+        </reference>\n+      </externalReferences>\n+    </component>\n+    <component type=\"library\" bom-ref=\"pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.14.2?type=jar\">\n+      <group>com.fasterxml.jackson.dataformat</group>\n+      <name>jackson-dataformat-xml</name>\n+      <version>2.14.2</version>\n+      <description>Data format extension for Jackson to offer\n+alternative support for serializing POJOs as XML and deserializing XML as pojos.</description>\n       <hashes>\n-        <hash alg=\"MD5\">67712ff41a568ad60d7a7c3b6ccbe626</hash>\n-        <hash alg=\"SHA-1\">432c47ad74c6145b660cbf8f44a3d8d9f37745eb</hash>\n-        <hash alg=\"SHA-256\">7b279a26151b07177bd8eff3888e3ab2a85f5cc5812516d35388bb098faf95a8</hash>\n-        <hash alg=\"SHA-512\">83a95e232cefce85949791f701032c68f9e72825d4917e959ecb9bb191535f14a70f27fd4c784f249b9f447b4751cac465b2200eb951ce184ab956a1ee4a36d9</hash>\n-        <hash alg=\"SHA-384\">e926f57855ee00f2f89ccd5664ee36083bf89298ff7e4f8c1516c2b3e0eb27cf40c8d32ad87020d629de4afa24cbc176</hash>\n-        <hash alg=\"SHA3-384\">a9fc7f8487a69d6a566dd67155a5222ed1568cc4b1eae959c0f6d34e2002161f19d30542f7d2eb171a80152a4ef72093</hash>\n-        <hash alg=\"SHA3-256\">c0e753cb9496f13c5341788367e841f14f12fd4b4e99604668f0a867ae07b3c9</hash>\n-        <hash alg=\"SHA3-512\">8d93be6769f3cdaad253c1a72f672f1a8e98e4b91bcdd5d5637926308c4d968c1d4801a4547a63a5e852f652ff8056e21d6e0ccc13339bbbdac4c9deae7c8832</hash>\n+        <hash alg=\"MD5\">25e7b018ae4124380443b3640ee55a38</hash>\n+        <hash alg=\"SHA-1\">1c162dd3006c0b7608becd55af4639f2c7b5a79a</hash>\n+        <hash alg=\"SHA-256\">edbda6c775a36049cf0088b111ab958cca0dc70cb9326918d6cf153cb3fa426b</hash>\n+        <hash alg=\"SHA-512\">480465e29c123a8becc74799cc38ebb1951b7fa2ee6a05af76c26b7a245fbe0c8161438729f25f38eab0988520b5925872a4b4f068523a2801d76fe53bca0cb7</hash>\n+        <hash alg=\"SHA-384\">f587c3cd5dfc7f9a97d1943e1244eaa27adf767bb0abedc701f365baba02b856003a9bfd697ddf8d530fb7ac4bb8e290</hash>\n+        <hash alg=\"SHA3-384\">9b705359248dc866aecea82487219173c6c0edd32e57069f3d8575e3ce2fcec11fed88f415dff4c6a24f189b176d15a4</hash>\n+        <hash alg=\"SHA3-256\">10590531489767ad82852cfbc15790d1e2a8dcbf1528025d3714a7cd35551bea</hash>\n+        <hash alg=\"SHA3-512\">f22f8fa99e0a8c1ebca99876e9775ed9da8cf90b9d658feb91a802991074257980e7606a62b3daf325df59417da95d65eae206de4f1af451f6149f8b37c2f38c</hash>\n       </hashes>\n-      <licenses/>\n-      <purl>pkg:maven/org.jreleaser/jreleaser-nexus2-java-sdk@1.6.0?type=jar</purl>\n+      <licenses>\n+        <license>\n+          <id>Apache-2.0</id>\n+        </license>\n+      </licenses>\n+      <purl>pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.14.2?type=jar</purl>\n+      <modified>false</modified>\n+      <externalReferences>\n+        <reference type=\"vcs\">\n+          <url>http://github.com/FasterXML/jackson-dataformat-xml</url>\n+        </reference>\n+      </externalReferences>\n+    </component>\n+    <component type=\"library\" bom-ref=\"pkg:maven/javax.annotation/javax.annotation-api@1.2?type=jar\">\n+      <publisher>GlassFish Community</publisher>\n+      <group>javax.annotation</group>\n+      <name>javax.annotation-api</name>\n+      <version>1.2</version>\n+      <description>Common Annotations for the JavaTM Platform API</description>\n+      <hashes>\n+        <hash alg=\"MD5\">75fe320d2b3763bd6883ae1ede35e987</hash>\n+        <hash alg=\"SHA-1\">479c1e06db31c432330183f5cae684163f186146</hash>\n+        <hash alg=\"SHA-256\">5909b396ca3a2be10d0eea32c74ef78d816e1b4ead21de1d78de1f890d033e04</hash>\n+        <hash alg=\"SHA-512\">2453330b27a0822bba440c28b98ae1d83d60d97dfa2d040562dd5126b3548e0caa040fea3b886ac6feb0a858e6c1bc45b6c5472b180f1f14792e5ca33e355959</hash>\n+        <hash alg=\"SHA-384\">37a46eaa1d011969d28ff0daaecd67a560169b3ae70c40102331d85a71139ca07110169fe367f484735914ce5c6b86c0</hash>\n+        <hash alg=\"SHA3-384\">e2f8df1aad5867355fd1d3de2374d077e3ad885e6bddac3ce7c7bc72a34097e33bc5dfe960f839a7feb515bd5a92ffd1</hash>\n+        <hash alg=\"SHA3-256\">2e2acc7429faecd2e74c0c441209b1a5b0ccbc245ccd8391425c4b1e4b2fbc94</hash>\n+        <hash alg=\"SHA3-512\">9a28cb34c7761e695ccea04cc6df1e0f9cd18fef59bf50d5943ddc06802e616bc2bd55211e863c65f7f7661f963ba8ee9e569324642b87bc1703dc6f07cba5e3</hash>\n+      </hashes>\n+      <licenses>\n+        <expression>(CDDL-1.0 OR GPL-2.0-with-classpath-exception)</expression>\n+      </licenses>\n+      <purl>pkg:maven/javax.annotation/javax.annotation-api@1.2?type=jar</purl>\n       <modified>false</modified>\n+      <externalReferences>\n+        <reference type=\"website\">\n+          <url>https://glassfish.java.net</url>\n+        </reference>\n+        <reference type=\"issue-tracker\">\n+          <url>http://java.net/jira/browse/GLASSFISH</url>\n+        </reference>\n+        <reference type=\"vcs\">\n+          <url>http://java.net/projects/glassfish/sources/svn/show/tags/javax.annotation-api-1.2</url>\n+        </reference>\n+      </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/software.amazon.awssdk/crt-core@2.20.51?type=jar\">\n+    <component type=\"library\" bom-ref=\"pkg:maven/software.amazon.awssdk/third-party-jackson-core@2.20.51?type=jar\">\n       <group>software.amazon.awssdk</group>\n-      <name>crt-core</name>\n+      <name>third-party-jackson-core</name>\n       <version>2.20.51</version>\n-      <description>The AWS SDK for Java - AWS CRT Core holds common types that are built on the AWS Common Runtime</description>\n       <hashes>\n-        <hash alg=\"MD5\">4cfe5bc24966d0650fe2be7569a05fc2</hash>\n-        <hash alg=\"SHA-1\">3ac703f55178aafa2fe047cf919401e3f13fea78</hash>\n-        <hash alg=\"SHA-256\">006109b066f3083dea57bb862e8cb2c2093aa5482978ebf58b7632fc43b6c264</hash>\n-        <hash alg=\"SHA-512\">f3a6c54a16c2051b285fe0834f5fa70c39935e8fb7b3ab9efc8ea60ad7750c6bd704389f98928caa312c126114627de956672ee2ff132e0d7ab9ccbcd560c468</hash>\n-        <hash alg=\"SHA-384\">71edae6ec7151293bb0612327de823179ac1c361606698b2a8225ee3af4632f630f36b80b18cd363b62e7fc24d5cdbc0</hash>\n-        <hash alg=\"SHA3-384\">8161c020c37cd8e946cb0d53364fe78ab0b2828acd13f49594a909ccba33f832587b3b7f90d23158fc21fb23534ce2a0</hash>\n-        <hash alg=\"SHA3-256\">ea3bd58b5d11f28b1de5c8a9a00964d998799e934076451f32a7fdbc1fb6b1ca</hash>\n-        <hash alg=\"SHA3-512\">83dd80c1208db834cd4af29485bbbd9d828ebe4b961c5b35bf6047fef9d893debb16b6c712ed2897200bc49ced858c622e5d9ee374ac5213d837b583d6326282</hash>\n+        <hash alg=\"MD5\">754edab759af7a3a0dff1f9d6632579a</hash>\n+        <hash alg=\"SHA-1\">796fd2170ee91bac97cf20804740f98347c3d473</hash>\n+        <hash alg=\"SHA-256\">ccc32bc095398cf037805757c7a4278b4728af98ca18768654b4f70078162343</hash>\n+        <hash alg=\"SHA-512\">34b307a8e2258943c27ecb098571de58858a88d2a357a53e5cc60eb3b8b1844a99339e0287d6dfee5cce257f6a96ccae8f6216ba7e05d1bb69a4a38ca9dd4f81</hash>\n+        <hash alg=\"SHA-384\">d541b577cf460ea23848cf703713bee974b441303676333ec7866beab226d1c808abcfc0c5f10250f46f43bf91ecc15e</hash>\n+        <hash alg=\"SHA3-384\">e328f959d2c37e9d7fcab6b7e08ebac97599d93b5f5b7e629a6ed7effa87a213faa76c639228c6b3ae5d8d2db74409c8</hash>\n+        <hash alg=\"SHA3-256\">726de46a6ea776769da2e0b620bf95267a735123d0847c638637f0da909201cd</hash>\n+        <hash alg=\"SHA3-512\">7369b6097922847dc77ffb7726e16e9f5764de312bd30aa499f1b2a19bfa006517dcdd9800753e3c8861c77fd90a40ebdf6b614da301ebb91377d9806e942f6f</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/software.amazon.awssdk/crt-core@2.20.51?type=jar</purl>\n+      <purl>pkg:maven/software.amazon.awssdk/third-party-jackson-core@2.20.51?type=jar</purl>\n       <modified>false</modified>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/software.amazon.awssdk/aws-xml-protocol@2.20.51?type=jar\">\n+    <component type=\"library\" bom-ref=\"pkg:maven/software.amazon.awssdk/auth@2.20.51?type=jar\">\n       <group>software.amazon.awssdk</group>\n-      <name>aws-xml-protocol</name>\n+      <name>auth</name>\n       <version>2.20.51</version>\n-      <description>The AWS SDK for Java - module holds the classes for AWS Xml protocol</description>\n+      <description>The AWS SDK for Java - Auth module holds the classes that are used for authentication with AWS services</description>\n       <hashes>\n-        <hash alg=\"MD5\">be387d57689357c6412edacc0ed7b918</hash>\n-        <hash alg=\"SHA-1\">8036f7d4821c5232b8dd0254a11b75a873878e71</hash>\n-        <hash alg=\"SHA-256\">05d3c0576b0abac13044a0a9088626f2c5a809d7829c239ee03da66d8475d277</hash>\n-        <hash alg=\"SHA-512\">62c00d21ba56575d4f73a3be511803ab8993862d6d58aeda5c9906ca6b4817b64f60e5d22227aa895b44cd9e87639c9bde6b2d5676e2f111825ebe3534a46c6b</hash>\n-        <hash alg=\"SHA-384\">148778757f5c2d60530f91df3338b0ab2d9c311fcb86c2036e4f39bf0cd46e1989f2fbe5ea5f4948d2e9ff5fc3385c09</hash>\n-        <hash alg=\"SHA3-384\">0e45c6bc2039f2ca6ed7b935352f686152fca5273b853f3592cbcda0952fdc26b2e562fd0416f761793d8d5fffdd084f</hash>\n-        <hash alg=\"SHA3-256\">e8736cad1e5ae6e7da24c9f90e413e317724893049af4e353f6f1daec5aa4422</hash>\n-        <hash alg=\"SHA3-512\">b394fc53985672621c467aadda64a44da58eab4a2a14bb47be2e5143b4dd9d85db346db34dbdbd7141991b7ad749644e32fbccff3d402d0585fc166f778b9537</hash>\n+        <hash alg=\"MD5\">7eeb2fd8646413078f9d4293ce141dc9</hash>\n+        <hash alg=\"SHA-1\">0cbc50040e2108a7dfcee1a7c54a1b7724aac5d2</hash>\n+        <hash alg=\"SHA-256\">2dc6383205e0787117ba5fe3eb882f7f70d07210a1c41881697d5871fd9740e8</hash>\n+        <hash alg=\"SHA-512\">ee92470920a88d1b4a4bbc4a419fb901281b2a397e3c48aa8f8b6d424df86d9b18fb42ee2acba06d606b4e74a14bdc6666a9420756f9e06298d9dcf8d2cd7418</hash>\n+        <hash alg=\"SHA-384\">f39c508f04250b447a1dde6f249d45752b51fd34ace007a6cee006189a827ac2a6d28a47e4b43ee8f7d683135105af3c</hash>\n+        <hash alg=\"SHA3-384\">d9a669123cdfee1dd620894d4e1518c52fdddd6980312a58db38d0f177d81369c33e59d1bcc83e34cc962c2a17cbc0da</hash>\n+        <hash alg=\"SHA3-256\">e63b21952ed1dec5ea41a67f2c739af17f62634a81575770fc07b71d0e994b55</hash>\n+        <hash alg=\"SHA3-512\">3832c4342ae4e811cb2ce9c0182fadf3e7096cb936af1e6e77b47ed404900ba123a09a0c54d2f62f9ca25c9955909e9ed7ce47a6d49691af2923f9aa1425efd5</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/software.amazon.awssdk/aws-xml-protocol@2.20.51?type=jar</purl>\n+      <purl>pkg:maven/software.amazon.awssdk/auth@2.20.51?type=jar</purl>\n       <modified>false</modified>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/com.hierynomus/asn-one@0.6.0?type=jar\">\n-      <group>com.hierynomus</group>\n-      <name>asn-one</name>\n-      <version>0.6.0</version>\n-      <description>ASN.1 serialization and parsing library</description>\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-signing-java-sdk@1.6.0?type=jar\">\n+      <group>org.jreleaser</group>\n+      <name>jreleaser-signing-java-sdk</name>\n+      <version>1.6.0</version>\n+      <description>JReleaser signing Java SDK</description>\n+      <licenses>\n+        <license>\n+          <id>Apache-2.0</id>\n+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>\n+        </license>\n+      </licenses>\n+      <purl>pkg:maven/org.jreleaser/jreleaser-signing-java-sdk@1.6.0?type=jar</purl>\n+      <modified>false</modified>\n+      <externalReferences>\n+        <reference type=\"vcs\">\n+          <url>https://github.com/jreleaser/jreleaser</url>\n+        </reference>\n+      </externalReferences>\n+    </component>\n+    <component type=\"library\" bom-ref=\"pkg:maven/software.amazon.awssdk/utils@2.20.51?type=jar\">\n+      <group>software.amazon.awssdk</group>\n+      <name>utils</name>\n+      <version>2.20.51</version>\n       <hashes>\n-        <hash alg=\"MD5\">5012b14a62f3369439ee0eb62c7d34f9</hash>\n-        <hash alg=\"SHA-1\">7f6141541e0a4d3ae0b02c901c2c1e9a772eb3d7</hash>\n-        <hash alg=\"SHA-256\">e4f70fd92849b52240048b8ebace0c9a17d3bb7b9c882b3c7778cec3458495f5</hash>\n-        <hash alg=\"SHA-512\">475e4b7d9ccdb347039e1cd06aba7e4ae8c009e85781eefcc5ca00f692084c7f1bbff51f2d8f8ba6e00bc6d9dba3d0cf6c22a9df03c42e3f29722b69de1d2101</hash>\n-        <hash alg=\"SHA-384\">6dc0626cd44a83e7ff85064bd53e359530ffd97267deedc8071d78961a86855c1af3c64de33f8f694487376d3f34e8f9</hash>\n-        <hash alg=\"SHA3-384\">fd7dd266ed905efc29ffd3a60324ecf4ae7ff84ad2e7a610a844702630f414de760a76664f1e6d4c02f39beb6dea9169</hash>\n-        <hash alg=\"SHA3-256\">9dc9200a17356b8631862a1a6f16b164bc0678e2f3f5b3bd7b5d9c9a2242a0cf</hash>\n-        <hash alg=\"SHA3-512\">e47d0d8ff9c6bb77654e3ca694c6f221d343a8f16ff75da7fbd22d5437693df182339ed1ca01b178e2a16d58567388249278eba8bd8678662ef92397307ef3cf</hash>\n+        <hash alg=\"MD5\">c66858bba8fdc222d29f6b6d5f127894</hash>\n+        <hash alg=\"SHA-1\">295479c04f8db65535aba0f4b3e642304c09ade4</hash>\n+        <hash alg=\"SHA-256\">89282e9f885914cc3e4951bd46ba83f75c11d88554e19bbed47175c0cc10ac0c</hash>\n+        <hash alg=\"SHA-512\">348f54494d88f5c5123f7b177b1e7699a9ff6772db7c72139d5cce62cdbddb82d4022331857ed21b5a9d6aa7acd70468b166893a08ea30959ee9de781e50f887</hash>\n+        <hash alg=\"SHA-384\">7604765fcdbc2879ed8445af66d0dfcae508d834a53ffe6cf12546fa3703817d0425051bfc51014faeaf00d3c42f7181</hash>\n+        <hash alg=\"SHA3-384\">6a344e509536b26fa1ebbf2207e0194bb455d620d336fd10f7eda276376a39dd09d24f6ef06ba7f3cbf73e6918bb8174</hash>\n+        <hash alg=\"SHA3-256\">4fb56af6eadac87597f0d9f86bf4095caaf18102f625b410f0811bc63ed7208d</hash>\n+        <hash alg=\"SHA3-512\">cdb73cb9cf1537f7fc3305df7ffbaa1ebaaa9ae36f711e2609e0673fef190d17bd2d5e867cd7f73a4cf3dd3144e6156e6661974e6038c90493ffdeeca96eb39e</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/com.hierynomus/asn-one@0.6.0?type=jar</purl>\n+      <purl>pkg:maven/software.amazon.awssdk/utils@2.20.51?type=jar</purl>\n+      <modified>false</modified>\n+    </component>\n+    <component type=\"library\" bom-ref=\"pkg:maven/com.jcraft/jzlib@1.1.3?type=jar\">\n+      <publisher>jcraft</publisher>\n+      <group>com.jcraft</group>\n+      <name>jzlib</name>\n+      <version>1.1.3</version>\n+      <description>JZlib is a re-implementation of zlib in pure Java</description>\n+      <hashes>\n+        <hash alg=\"MD5\">386d3714fef534d21175d8885ae48bf7</hash>\n+        <hash alg=\"SHA-1\">c01428efa717624f7aabf4df319939dda9646b2d</hash>\n+        <hash alg=\"SHA-256\">89b1360f407381bf61fde411019d8cbd009ebb10cff715f3669017a031027560</hash>\n+        <hash alg=\"SHA-512\">339793df0001214aaadac2a5456c3cd54a0c09ba2c9e73cf13155adbfdf1c2a953f7336903e45e76a52ce6b48c5b7c78436667d7836e7354e02e85ba0908afd3</hash>\n+        <hash alg=\"SHA-384\">e0fe861e00a6136b1c97ae781ef56068b0e30c22a64ba4186b1703fd543878920e809f32756323f0fa68afc25f64653e</hash>\n+        <hash alg=\"SHA3-384\">48f4e07ed293214fedb6ed444886131225f20e591ab0ac8236f64498b2f9aae067d0cb92c8e100263e6e9ccad8074c52</hash>\n+        <hash alg=\"SHA3-256\">1a141fb006354f69bbf72a11e15c716be8260f7670ceff4ca764394e4473a91e</hash>\n+        <hash alg=\"SHA3-512\">90236a8e878a8838ddc5f3129a1a9ab84d0849702bc4b8ec02d6c5dc09271927359d7da1121f55f36c16bd7d371b6fc631d5439cdd93d9a30ab248dcd84d4618</hash>\n+      </hashes>\n+      <licenses>\n+        <license>\n+          <id>BSD-4-Clause</id>\n+        </license>\n+      </licenses>\n+      <purl>pkg:maven/com.jcraft/jzlib@1.1.3?type=jar</purl>\n       <modified>false</modified>\n       <externalReferences>\n-        <reference type=\"issue-tracker\">\n-          <url>https://github.com/hierynomus/asn-one/issues</url>\n+        <reference type=\"website\">\n+          <url>http://www.jcraft.com/</url>\n         </reference>\n         <reference type=\"vcs\">\n-          <url>https://github.com/hierynomus/asn-one</url>\n+          <url>git://github.com/ymnk/jzlib.git</url>\n         </reference>\n       </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-toml@2.14.2?type=jar\">\n-      <group>com.fasterxml.jackson.dataformat</group>\n-      <name>jackson-dataformat-toml</name>\n-      <version>2.14.2</version>\n-      <description>Support for reading and writing TOML-encoded data via Jackson abstractions.</description>\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.apache.maven/maven-artifact@3.8.7?type=jar\">\n+      <group>org.apache.maven</group>\n+      <name>maven-artifact</name>\n+      <version>3.8.7</version>\n       <hashes>\n-        <hash alg=\"MD5\">34b400b8afaeee54cd30949374bb79d3</hash>\n-        <hash alg=\"SHA-1\">c40f33f9f727b2fd0ecfcb596b114358fd1f08b0</hash>\n-        <hash alg=\"SHA-256\">ce99092b9c4216df5a66cdbc42cc28d78411afaff0a11cc0478b36a7e512a4fb</hash>\n-        <hash alg=\"SHA-512\">393fe13d02cbd785f21ecd20a28449a30c8252dcbd4ad94eba12c71224cb8134eec1b9b6e4c69cfc945e495d6e51038cae7f9c69af8f04c77ee51266407ccea7</hash>\n-        <hash alg=\"SHA-384\">0a418251651b41034c6814a3fc1c833b87aff085d53c04dd040f752ab50e41472fa942670dd7266f86afc4d4c7c753ce</hash>\n-        <hash alg=\"SHA3-384\">ea0eeb1f5de98175287e481fedc3b4e3d1d1aa6a994ec5caec0db9a2c838ba3106c812ffb09a9667caf386089bdc3e61</hash>\n-        <hash alg=\"SHA3-256\">4fb89845d771f6fd863d3829f85bb7931d6ae29339a5b0a7f25231fb68d0d415</hash>\n-        <hash alg=\"SHA3-512\">e2dc3d3303c659e23f3dab88936e2f4256dd76188839e4418fab22fd3fe6419a7b292493b745c42ecf606d94b33c59c72805ecb7d74970e0c25d097cd10be3af</hash>\n+        <hash alg=\"MD5\">4c2a8316eda726b35c9ae90b7c271dd4</hash>\n+        <hash alg=\"SHA-1\">4b820734b856682f99f6ad2de4f1f7dd4b82335f</hash>\n+        <hash alg=\"SHA-256\">23eb1c5c26f3d1b4694647b071beabfd96083191b006394707753af2ced8db01</hash>\n+        <hash alg=\"SHA-512\">2b892be25a88774d7aaf22db235e660abcdd041c0d685bd0c4e0b404a15301d61b3e06cd8dbede8f6a6293951f65a2235ee6cbb8d4a00fd5a7e33ab1655b2429</hash>\n+        <hash alg=\"SHA-384\">1abb1c8a0bd8bc1cbf5857cb9a3d30ff3e92d6fd720dff1ec0a5cb368027a2fbea61a4c1d10db255d51b9e5d1dedd73f</hash>\n+        <hash alg=\"SHA3-384\">5d183e617198c1e032352f476edbe4db0be3dc0c7efd36c3be281a4fb1cb813feed558e3d21f52d55479e791b72c63c7</hash>\n+        <hash alg=\"SHA3-256\">6deb8cba7a9c6b4d6cd314d681a3dfc1f02624e1e56699f760bfb1c6539dd9e1</hash>\n+        <hash alg=\"SHA3-512\">04220b96703beb3cac238e11e150303a420fe55004c9b05dc9e72ebb38e140eead6914211428175bdd1e0442ccdb2b66d9313869b6c54356c19531df7e4985fe</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-toml@2.14.2?type=jar</purl>\n+      <purl>pkg:maven/org.apache.maven/maven-artifact@3.8.7?type=jar</purl>\n       <modified>false</modified>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.2?type=jar\">\n-      <group>com.fasterxml.jackson.core</group>\n-      <name>jackson-core</name>\n-      <version>2.14.2</version>\n-      <description>Core Jackson processing abstractions (aka Streaming API), implementation for JSON</description>\n+    <component type=\"library\" bom-ref=\"pkg:maven/software.amazon.awssdk/regions@2.20.51?type=jar\">\n+      <group>software.amazon.awssdk</group>\n+      <name>regions</name>\n+      <version>2.20.51</version>\n       <hashes>\n-        <hash alg=\"MD5\">6ee422ee4c481b2d5aacb2b5e36a7dc0</hash>\n-        <hash alg=\"SHA-1\">f804090e6399ce0cf78242db086017512dd71fcc</hash>\n-        <hash alg=\"SHA-256\">b5d37a77c88277b97e3593c8740925216c06df8e4172bbde058528df04ad3e7a</hash>\n-        <hash alg=\"SHA-512\">208953cf72691b3bab1ca2f9a045cccd3d75c46c90099ba884fbf16bc3e45045e5cd014d2c68c96e8a8826f87a5f0e18cb34b35e7ef03348953869c21e197367</hash>\n-        <hash alg=\"SHA-384\">e806595862c5fcdae801d9845befc1d12c97e6036ee839d34590dbd785a422d5832cf4fc5c7ee6e1a5ee7a59f37740f0</hash>\n-        <hash alg=\"SHA3-384\">4fa59f572f2e100e2eba6fc664a3b9f804fabd911a552cb40805f39e624a9c04246b679cf4b017bb782c8272877f49d2</hash>\n-        <hash alg=\"SHA3-256\">cef17d3a539cbf798cfb0bfa9faffa2b7baff3670b50743e91ee58b4c60b59f1</hash>\n-        <hash alg=\"SHA3-512\">fceeed5cb8fe4335d88282d15657762a4728483275a7ff45f50b9fe6a999757ccb37c415d001eb6250226f98f5c576b1b36a83e601fb393cfd34a811c2df5d00</hash>\n+        <hash alg=\"MD5\">f87d7272055f055781679f6aae7df61a</hash>\n+        <hash alg=\"SHA-1\">a62a4122d49bc6f5fa9c3aea521dac03d13273dc</hash>\n+        <hash alg=\"SHA-256\">91b9cc0c22554bb7b8c69da48d8861b7ac1213b1977af5393bc56293c005f542</hash>\n+        <hash alg=\"SHA-512\">32ea2e890ebdac92a11f2276229ee244cbb209ab141e8e12327bd191b362ad6f6c40e317d18ef8d6dbed1efd4d506518b4de861be411e31d5e30a6f92b5b5b55</hash>\n+        <hash alg=\"SHA-384\">329e538463fe110b18a3fe1fe2e34eea2257be993dbdb2254f8833a7e3df3b30e35c8da3e01544e83868b543d813ac53</hash>\n+        <hash alg=\"SHA3-384\">433ddf50101f015923dd8e0fd35bcae05595651221e414f9f91cdda10d70738969d3e6c94d0f1fd47380e9c757bd754d</hash>\n+        <hash alg=\"SHA3-256\">e31cc79fcc3025aa48f9a32e80e5abd36b0fb1be2e297bc39dfb99f429443233</hash>\n+        <hash alg=\"SHA3-512\">0ef5edfa599efb2b569ad41d53d337e2eea8c79c38a37c8e0ff0d5a14f2b675281678e5cc5991748d5ad4868665974072bd89d6bae613cf8dc8f2f847248296a</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.2?type=jar</purl>\n+      <purl>pkg:maven/software.amazon.awssdk/regions@2.20.51?type=jar</purl>\n+      <modified>false</modified>\n+    </component>\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-templates@1.6.0?type=jar\">\n+      <group>org.jreleaser</group>\n+      <name>jreleaser-templates</name>\n+      <version>1.6.0</version>\n+      <description>JReleaser packager templates</description>\n+      <licenses>\n+        <license>\n+          <id>Apache-2.0</id>\n+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>\n+        </license>\n+      </licenses>\n+      <purl>pkg:maven/org.jreleaser/jreleaser-templates@1.6.0?type=jar</purl>\n       <modified>false</modified>\n       <externalReferences>\n         <reference type=\"vcs\">\n-          <url>https://github.com/FasterXML/jackson-core</url>\n+          <url>https://github.com/jreleaser/jreleaser</url>\n         </reference>\n       </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/com.hierynomus/sshj@0.35.0?type=jar\">\n-      <group>com.hierynomus</group>\n-      <name>sshj</name>\n-      <version>0.35.0</version>\n-      <description>SSHv2 library for Java</description>\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-github-java-sdk@1.6.0?type=jar\">\n+      <group>org.jreleaser</group>\n+      <name>jreleaser-github-java-sdk</name>\n+      <version>1.6.0</version>\n+      <description>Java SDK for GitHub</description>\n+      <licenses>\n+        <license>\n+          <id>Apache-2.0</id>\n+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>\n+        </license>\n+      </licenses>\n+      <purl>pkg:maven/org.jreleaser/jreleaser-github-java-sdk@1.6.0?type=jar</purl>\n+      <modified>false</modified>\n+      <externalReferences>\n+        <reference type=\"vcs\">\n+          <url>https://github.com/jreleaser/jreleaser</url>\n+        </reference>\n+      </externalReferences>\n+    </component>\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.apache.maven.shared/maven-shared-utils@3.3.4?type=jar\">\n+      <group>org.apache.maven.shared</group>\n+      <name>maven-shared-utils</name>\n+      <version>3.3.4</version>\n+      <description>Shared utilities for use by Maven core and plugins</description>\n       <hashes>\n-        <hash alg=\"MD5\">369da8322a4df0efe61793376e76a52c</hash>\n-        <hash alg=\"SHA-1\">34ad7d7229fe4cd7dbc3c67fa2507d32f495bbe3</hash>\n-        <hash alg=\"SHA-256\">d3b3d71f3e834c7e52d022036c2e96c2b21c8ec7baa20270965c4d59e2e4d86e</hash>\n-        <hash alg=\"SHA-512\">de0a194cb0b2a41adbaa6626d0095642b2491a9d915ee0cdd80ceac93a228bdffe4e24e899bcbd45f6f37390c78f54d0772e7519ec64b9f896fc8c55fad8ff78</hash>\n-        <hash alg=\"SHA-384\">fac000303a06c976ae1cc6b2d2f61b181eea91f1723df7fdfe05bbc7157fe7bc8f5621d20bd519d21c298c61d0a71c17</hash>\n-        <hash alg=\"SHA3-384\">704ff94f71f3bcd02bd1d54e5d6da420a122e4150fcd27ad5358fcff7bab8c38f51bdf34db660c42c10d429a26a57d25</hash>\n-        <hash alg=\"SHA3-256\">13a63eb70bde9cb93b09c7de8d2ecc2039452253c7e7f780f2c839252b647fe3</hash>\n-        <hash alg=\"SHA3-512\">fbb9f088fdcc2d99205b092b02cfc855dc011f1cf73002eb08543a52e9f40f3ca150566195e76f9854bffbf12ba01f30b4f44cf10a8c9dee04bd06687a6b3a39</hash>\n+        <hash alg=\"MD5\">908f2a0107ff330ac9b856356a0acaef</hash>\n+        <hash alg=\"SHA-1\">f87a61adb1e12a00dcc6cc6005a51e693aa7c4ac</hash>\n+        <hash alg=\"SHA-256\">7925d9c5a0e2040d24b8fae3f612eb399cbffe5838b33ba368777dc7bddf6dda</hash>\n+        <hash alg=\"SHA-512\">c6693f8a061de74ac59c61d185f5b130cb574405cfc37febb8e73806ea64eea822a4a75c24098fb49b7871373091543a6f4c526c0842589e528cacad40e5554a</hash>\n+        <hash alg=\"SHA-384\">bc5b42831ff598f42dda54738be004a619d60201a009b04cb3aaa0dc343d0e4fbc423b19739391eb7c33efcac3c08dd5</hash>\n+        <hash alg=\"SHA3-384\">385bebb35d7ea13d92ae6a5afa9257b184a1fcf40cba077a103c7a91d39a4d3e0180a475febdba73ac75949968e77186</hash>\n+        <hash alg=\"SHA3-256\">888fde30d4f9a9e1b7c4c5e4d61f9cf0499192e5bc1212538e2e3320688e44da</hash>\n+        <hash alg=\"SHA3-512\">40b55bb907452777443b8162d456bf1d48e02bfd9124062faed9c9bf51e0f522d40b02f4c24eb39f760469ad226570876f0de6afecd74903112ec794f0aa9a78</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/com.hierynomus/sshj@0.35.0?type=jar</purl>\n+      <purl>pkg:maven/org.apache.maven.shared/maven-shared-utils@3.3.4?type=jar</purl>\n       <modified>false</modified>\n       <externalReferences>\n+        <reference type=\"build-system\">\n+          <url>https://ci-builds.apache.org/job/Maven/job/maven-box/job/maven-shared-utils/</url>\n+        </reference>\n         <reference type=\"issue-tracker\">\n-          <url>https://github.com/hierynomus/sshj/issues</url>\n+          <url>https://issues.apache.org/jira/issues/?jql=project%20%3D%20MSHARED%20AND%20component%20%3D%20maven-shared-utils</url>\n         </reference>\n+      </externalReferences>\n+    </component>\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-discourse-java-sdk@1.6.0?type=jar\">\n+      <group>org.jreleaser</group>\n+      <name>jreleaser-discourse-java-sdk</name>\n+      <version>1.6.0</version>\n+      <description>Java SDK for Discourse</description>\n+      <licenses>\n+        <license>\n+          <id>Apache-2.0</id>\n+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>\n+        </license>\n+      </licenses>\n+      <purl>pkg:maven/org.jreleaser/jreleaser-discourse-java-sdk@1.6.0?type=jar</purl>\n+      <modified>false</modified>\n+      <externalReferences>\n         <reference type=\"vcs\">\n-          <url>https://github.com/hierynomus/sshj</url>\n+          <url>https://github.com/jreleaser/jreleaser</url>\n         </reference>\n       </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/software.amazon.awssdk/profiles@2.20.51?type=jar\">\n-      <group>software.amazon.awssdk</group>\n-      <name>profiles</name>\n-      <version>2.20.51</version>\n-      <description>Profile module allows loading information from AWS configuration and credentials files.</description>\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar\">\n+      <group>org.slf4j</group>\n+      <name>slf4j-api</name>\n+      <version>2.0.7</version>\n+      <description>The slf4j API</description>\n       <hashes>\n-        <hash alg=\"MD5\">f45574632db6f8bd3569e6f964ad7e11</hash>\n-        <hash alg=\"SHA-1\">3b1737f5f9d57b20f6982e4a12c069fc990afc20</hash>\n-        <hash alg=\"SHA-256\">1066653a1f695d965ea55800b27cc8e191315731de73ee8b3baa46a8047d0df8</hash>\n-        <hash alg=\"SHA-512\">7e34222ec60c0a9918ac6348e4b54b7f964e35f26416294df553fbdc424d38b2f777abb7498f11b261d8526eb86cf048e5695c9cbecc9f9058e83d51669ae7cb</hash>\n-        <hash alg=\"SHA-384\">d8cb4c2bdc51621c5370148e5fb810b6db796de698965cb140d0a2f57a5adc40afd650ed2ac5dc6c5f701d8dae5cbf0f</hash>\n-        <hash alg=\"SHA3-384\">44dcdf67fa96dcf92193b0d34bb1ea0ac71e44d1c3a2e87a7402b3ee6518afda08abd53d7dc440c9a6f3b3abe65ac1ac</hash>\n-        <hash alg=\"SHA3-256\">5a84e699501b049593fa8c8db89c4037a8f368376a4e4e084eeb8b5ba0fd1327</hash>\n-        <hash alg=\"SHA3-512\">67e2fef5e5c2d10e93abd4bc972d38df9cffc8f5250ed5d006fa1b37aaffae1c7f2acc3d7e9d7f7e9c5cbe30be99a5e922ddf630025b37f82fca0c8a613f75ad</hash>\n+        <hash alg=\"MD5\">403dffa46cdd2e3c82da19df4f394a4c</hash>\n+        <hash alg=\"SHA-1\">41eb7184ea9d556f23e18b5cb99cad1f8581fc00</hash>\n+        <hash alg=\"SHA-256\">5d6298b93a1905c32cda6478808ac14c2d4a47e91535e53c41f7feeb85d946f4</hash>\n+        <hash alg=\"SHA-512\">216d2cac27d501972c888f94dfa747d700b80d60813884b6ab4b12c6a3b17ed0c21a1d27e1aa4332c97c828f20039e3913d2763d7e1a3cef36ae4389a276e7a8</hash>\n+        <hash alg=\"SHA-384\">c25b39f418aa726ba8405dfd9b356131f89984e2ef5a55a724a2abf3b7c78443f671105835161d2414d602cf03da9f2d</hash>\n+        <hash alg=\"SHA3-384\">f33abfaac21badae6f85d3ebbc6c1204fd7fda3bb15173e763fa8cee95bce6a8270eec2c8f49343c66c8d2767bc317e1</hash>\n+        <hash alg=\"SHA3-256\">6e00d4b264a2afc4ca4e98f716ecece66c32c626ca3f8c5d56b22092b6fe417b</hash>\n+        <hash alg=\"SHA3-512\">ad7b9142d370fc532a07cdd43881a129b012ff50e2bede3ac27d9bd31ec707bf2f45e82002fa59e962955cc38ab73cdd77713fca50cedc926c046f5617c1285b</hash>\n       </hashes>\n       <licenses>\n         <license>\n-          <id>Apache-2.0</id>\n+          <id>MIT</id>\n+          <url>https://opensource.org/licenses/MIT</url>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/software.amazon.awssdk/profiles@2.20.51?type=jar</purl>\n+      <purl>pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar</purl>\n       <modified>false</modified>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/io.github.openfeign/feign-jackson@12.3?type=jar\">\n-      <group>io.github.openfeign</group>\n-      <name>feign-jackson</name>\n-      <version>12.3</version>\n-      <description>Feign Jackson</description>\n+    <component type=\"library\" bom-ref=\"pkg:maven/software.amazon.eventstream/eventstream@1.0.1?type=jar\">\n+      <group>software.amazon.eventstream</group>\n+      <name>eventstream</name>\n+      <version>1.0.1</version>\n+      <description>The AWS Event Stream decoder library.</description>\n       <hashes>\n-        <hash alg=\"MD5\">8bbba5bba4c26edb1b5c89e1a4912c22</hash>\n-        <hash alg=\"SHA-1\">583c0ce0354e6ed81d998d5b8f1786ade1e9f2c4</hash>\n-        <hash alg=\"SHA-256\">1dfc43d604693ce51ef3935f27dbfecd2d65636699a088eee32ff37cc50ea479</hash>\n-        <hash alg=\"SHA-512\">8ea71fae9a2a4ad9d06f27e21e078001e1a29761af85e81b91bf2a38e4dd8841184a12fdf467915c234d080aa28484452fe45b9bc0a381ce23d8366b03be1395</hash>\n-        <hash alg=\"SHA-384\">03553ac35a79266a150940fc62d3da7a389b47825102d91392f37b719da94af2d2355c2592d2b68604bf84248c73baf9</hash>\n-        <hash alg=\"SHA3-384\">986284d22c0bbb7abfbc1762447a44d0919c266002d6925c4ca75040f3950a3d943a71dedf2f72592e6a185218c498a9</hash>\n-        <hash alg=\"SHA3-256\">60242fd373d71575ffcb8a4f866b27d291b6acecf83be67e6ff51a13559dc016</hash>\n-        <hash alg=\"SHA3-512\">b7e0392fc793f19b3daf64c7e7b875fb2e4ec7ba2f1681d51c14c5c9efd5991817766753e62999a76bad83c624601f9f5a55304c4e06d2e3cd88ec4c609a1ede</hash>\n+        <hash alg=\"MD5\">864488626f50477cfd786d1c80e3b39e</hash>\n+        <hash alg=\"SHA-1\">6ff8649dffc5190366ada897ba8525a836297784</hash>\n+        <hash alg=\"SHA-256\">0c37d8e696117f02c302191b8110b0d0eb20fa412fce34c3a269ec73c16ce822</hash>\n+        <hash alg=\"SHA-512\">461c7b63b3d39247af4073608e346b93d32502322136024868be3f7e40e71f348c3bef2450757b5dc8594ffd596f7af03ed69e4a383000bed8ac2a9e3f0cbe5d</hash>\n+        <hash alg=\"SHA-384\">38defa89452920fee5613df7225999b74d7c8fbe4e04f0b89f7aa3c525e7819eb91f8415b302726042aa4adf76e4d2ce</hash>\n+        <hash alg=\"SHA3-384\">74995e25809e85fc00526cc04011cf88edc059e7318f845a6fdefe67aba5942cf31a32024afe0adb1271f5d456d051ea</hash>\n+        <hash alg=\"SHA3-256\">83aa0539d3de0d287d3e87a276ab2f83ea610db994addabb98fc3dbbd50fa418</hash>\n+        <hash alg=\"SHA3-512\">8ea6782a037f40db3cef732528e376c50064faa7f9cb689604201842d003daabb8b8ff069a8d80ab0d28e19a69a7c2d3db8233c5618275152f425c18aae0dcfa</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/io.github.openfeign/feign-jackson@12.3?type=jar</purl>\n+      <purl>pkg:maven/software.amazon.eventstream/eventstream@1.0.1?type=jar</purl>\n       <modified>false</modified>\n+      <externalReferences>\n+        <reference type=\"vcs\">\n+          <url>https://github.com/awslabs/aws-eventstream-java</url>\n+        </reference>\n+      </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-webhooks-java-sdk@1.6.0?type=jar\">\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-zulip-java-sdk@1.6.0?type=jar\">\n       <group>org.jreleaser</group>\n-      <name>jreleaser-webhooks-java-sdk</name>\n+      <name>jreleaser-zulip-java-sdk</name>\n       <version>1.6.0</version>\n-      <hashes>\n-        <hash alg=\"MD5\">f57f28ed21eca592af5df56d8270bcdb</hash>\n-        <hash alg=\"SHA-1\">5b492eb059bafbec89108ab86a7f2deaa5b9a976</hash>\n-        <hash alg=\"SHA-256\">6efa516483596a2d89d358da2d13070cecf6c8811473152d137de6af7f24b933</hash>\n-        <hash alg=\"SHA-512\">96d830d498e8be929060f2abb77e44c1906c8395a39d6ba855c4773b0c05dd4e79b4a166bf63a0424f84db99e612c176647fa0e18a8d8e8d4595fbefdda1d58c</hash>\n-        <hash alg=\"SHA-384\">25c4f0d99e610d6f28826bba6305199bfb1726aa7c874f86d6b45164d1e6504dd4be94b212e86616c55a5fb4d8da392d</hash>\n-        <hash alg=\"SHA3-384\">8bbe66311465f2f4dc36c49f0aa47ceaf180a61d5a6b533b466631fff16d7733d68e883c1f766bd23d7ca9a041cc4cd0</hash>\n-        <hash alg=\"SHA3-256\">c46e8ca6ca0c6dca95faa94eb869831f7afbac466352467d2821474037473db6</hash>\n-        <hash alg=\"SHA3-512\">a772358f29b4ab8c77bc466cf7c15e0082464b8ef6fca6d65fc9351bdcb287b6a93480537a2a014fe1efef52a199658027d7fa1e4ebbf1a147440fd2c9b4b730</hash>\n-      </hashes>\n-      <licenses/>\n-      <purl>pkg:maven/org.jreleaser/jreleaser-webhooks-java-sdk@1.6.0?type=jar</purl>\n+      <description>Java SDK for Zulip</description>\n+      <licenses>\n+        <license>\n+          <id>Apache-2.0</id>\n+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>\n+        </license>\n+      </licenses>\n+      <purl>pkg:maven/org.jreleaser/jreleaser-zulip-java-sdk@1.6.0?type=jar</purl>\n       <modified>false</modified>\n+      <externalReferences>\n+        <reference type=\"vcs\">\n+          <url>https://github.com/jreleaser/jreleaser</url>\n+        </reference>\n+      </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/com.github.victools/jsonschema-generator@4.31.0?type=jar\">\n-      <group>com.github.victools</group>\n-      <name>jsonschema-generator</name>\n-      <version>4.31.0</version>\n-      <description>Java JSON Schema Generator \u2013 creating a JSON Schema (Draft 6, Draft 7 or Draft 2019-09) from your Java classes</description>\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-config-toml@1.6.0?type=jar\">\n+      <group>org.jreleaser</group>\n+      <name>jreleaser-config-toml</name>\n+      <version>1.6.0</version>\n+      <description>JReleaser TOML config support</description>\n+      <licenses>\n+        <license>\n+          <id>Apache-2.0</id>\n+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>\n+        </license>\n+      </licenses>\n+      <purl>pkg:maven/org.jreleaser/jreleaser-config-toml@1.6.0?type=jar</purl>\n+      <modified>false</modified>\n+      <externalReferences>\n+        <reference type=\"vcs\">\n+          <url>https://github.com/jreleaser/jreleaser</url>\n+        </reference>\n+      </externalReferences>\n+    </component>\n+    <component type=\"library\" bom-ref=\"pkg:maven/com.googlecode.javaewah/JavaEWAH@1.2.3?type=jar\">\n+      <group>com.googlecode.javaewah</group>\n+      <name>JavaEWAH</name>\n+      <version>1.2.3</version>\n+      <description>The bit array data structure is implemented in Java as the BitSet class. Unfortunately, this fails to scale without compression.\n+  JavaEWAH is a word-aligned compressed variant of the Java bitset class. It uses a 64-bit run-length encoding (RLE) compression scheme.\n+  The goal of word-aligned compression is not to achieve the best compression, but rather to improve query processing time. Hence, we try to save CPU cycles, maybe at the expense of storage. However, the EWAH scheme we implemented is always more efficient storage-wise than an uncompressed bitmap (implemented in Java as the BitSet class). Unlike some alternatives, javaewah does not rely on a patented scheme.</description>\n       <hashes>\n-        <hash alg=\"MD5\">e50c4f33901852812669a6e8a75b5d44</hash>\n-        <hash alg=\"SHA-1\">f723d13688083684a38efabef8dfda23e8ca00eb</hash>\n-        <hash alg=\"SHA-256\">c67db2f37d2e6e300c40742a91929a04e56efe47671bb1c6418b3824ce0fa2d5</hash>\n-        <hash alg=\"SHA-512\">537045f43e2931ce6938a45d445b03647114615dea82f71c70eaf9db7d544883174d1c2c1cd1664f3141e85efcb15db0373113a8ba40bfb52ac21ccbbbee5bb1</hash>\n-        <hash alg=\"SHA-384\">8cb0fea856fd3373f8a2918bc8e86ccde0678bce1fdd4fe28c4531cd758e6aa55f8790904e1d95d5fe88828bcacab347</hash>\n-        <hash alg=\"SHA3-384\">ce102c6d8dca6d3b5eef5367830b65fe4971080ce353d423c6d8a814f84fbd65055d80b321f9d15b58849f930c3950c6</hash>\n-        <hash alg=\"SHA3-256\">d8ef3eaa176ae16d8d3bdba814ef9e648a76ce57b2607a1f314b8b402d6b2cbb</hash>\n-        <hash alg=\"SHA3-512\">9b2b338c5e31e4010d8772538db5ccffb768f6d4d63a258185efe7543127b293b875cb1fc107568c4a6a8e15a849414596b2566a21963197d2ab8080f9ed4577</hash>\n+        <hash alg=\"MD5\">8fdeda28c1fb10e67b3d79f86bef5e61</hash>\n+        <hash alg=\"SHA-1\">13a27c856e0c8808cee9a64032c58eee11c3adc9</hash>\n+        <hash alg=\"SHA-256\">d65226949713c4c61a784f41c51167e7b0316f93764398ebba9e4336b3d954c2</hash>\n+        <hash alg=\"SHA-512\">48cd9df9252c58e9ffe4583e68607944bcdf2ad7a3be7b4317467f503c4f56cdbde358ca7c4f34fa620d01615072a42f3a572fc4f1237e266310b7508e79bcac</hash>\n+        <hash alg=\"SHA-384\">d1fd074f21b8a54a07d3f4579376d7c3ab72f24814ebc9ba92344e9da4721e9bfa3cda3a599137e4ddf2395a3c5b88e4</hash>\n+        <hash alg=\"SHA3-384\">a553864f196f73c139a104170ab79e780046fb5f322072c5494a6590361021f875afd7168f858b0531b61918ab49b94e</hash>\n+        <hash alg=\"SHA3-256\">bab97f3f893af36c36218a151b0c3fece27d47f358cc19e1ca9c22d77942bb76</hash>\n+        <hash alg=\"SHA3-512\">be817b93c7093d44ec8dded565d7e5651772ce38e9c72283c05191b33d0ecb2798cd385395f553500446573ac49dccc21f4ba3067d71eb89e03daa384d0193be</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/com.github.victools/jsonschema-generator@4.31.0?type=jar</purl>\n+      <purl>pkg:maven/com.googlecode.javaewah/JavaEWAH@1.2.3?type=jar</purl>\n       <modified>false</modified>\n+      <externalReferences>\n+        <reference type=\"issue-tracker\">\n+          <url>https://github.com/lemire/javaewah/issues</url>\n+        </reference>\n+        <reference type=\"vcs\">\n+          <url>scm:git:git@github.com:lemire/javaewah.git</url>\n+        </reference>\n+      </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-templates@1.6.0?type=jar\">\n-      <group>org.jreleaser</group>\n-      <name>jreleaser-templates</name>\n-      <version>1.6.0</version>\n+    <component type=\"library\" bom-ref=\"pkg:maven/software.amazon.awssdk/json-utils@2.20.51?type=jar\">\n+      <group>software.amazon.awssdk</group>\n+      <name>json-utils</name>\n+      <version>2.20.51</version>\n       <hashes>\n-        <hash alg=\"MD5\">5ebeef207081bdf561f5cd1efd78a4be</hash>\n-        <hash alg=\"SHA-1\">900c392b8d748487157799cdc23661abc217ddb0</hash>\n-        <hash alg=\"SHA-256\">b20dceb54fafb72ba53b2c8199cf92231750fcab446e21671747130038bef8d2</hash>\n-        <hash alg=\"SHA-512\">6f85a11a3636d9ae720c3ab612094394e649d661ebb4cd59ff9e7412de54696de35e61d4cefb6abccb79360b0254123fd556a9deb9b70e5330c19134c612c905</hash>\n-        <hash alg=\"SHA-384\">a819233c7371c630fc2ae60c9c6648e6376af45a241079cb9dc35cbe9d37db956ecf913a80d401e7b1badc0f175ba9a0</hash>\n-        <hash alg=\"SHA3-384\">14f220cb51ea516f30bd336d863e5f422492b37aa303a52522d925a392178c08401b7aa19c0533f7ec183d7e7312c768</hash>\n-        <hash alg=\"SHA3-256\">ff4377b64d2e82c237151f1f10abc601f3af6015816f7812a790eef679bf2f29</hash>\n-        <hash alg=\"SHA3-512\">25933a914189f0860f98edeeeeb60d7e6f98d3a854b9b1dcf8a1e631ba5e75c87bc7d963ba8183a20c30c4e598d27276a9ccf27c4ea6c3763e5a2bcf47bb0329</hash>\n+        <hash alg=\"MD5\">daab6d8ae17e1a11973375f56728c903</hash>\n+        <hash alg=\"SHA-1\">380afef1a1b6fd38ba14456b61e8a6d6e1720a12</hash>\n+        <hash alg=\"SHA-256\">3ff5d2db051e02de62ef1b6a8aa00da79da7cf5c6eeff7c9d99f4aa564c6664a</hash>\n+        <hash alg=\"SHA-512\">ad5aaba55bc87044973b3ad30478783cb932f0014bee1bde4da536f2883cdc9598cec81a946d87d22ef77bb7855029abddb65ee0c51385f4c35d7974f874d693</hash>\n+        <hash alg=\"SHA-384\">e060fc0648a681d6a570cbaea0658ec7a4104e505c15c662fd1ee4881a49709b9b7ed881b911e04860f8a06e4a98c232</hash>\n+        <hash alg=\"SHA3-384\">05ed45fcd2a958b0f504e1e044dfbfec0a8c390360dffc870b712bfc5a286ca7457c0cc41abf1aa5efa73a1d06c7b905</hash>\n+        <hash alg=\"SHA3-256\">e9a3c93b55fa7ab5ebe4c23593ca981daad2f7712cf1af66d8327b89dd10ecf8</hash>\n+        <hash alg=\"SHA3-512\">b2cda2e9492b5d2f2f82cea6c94efcffe3e4c03a817885d2d456aa06f73e652ca34e433f97168e7335f8641df679f0661800115912f975170edd3c7e9f87e8e7</hash>\n       </hashes>\n-      <licenses/>\n-      <purl>pkg:maven/org.jreleaser/jreleaser-templates@1.6.0?type=jar</purl>\n+      <licenses>\n+        <license>\n+          <id>Apache-2.0</id>\n+        </license>\n+      </licenses>\n+      <purl>pkg:maven/software.amazon.awssdk/json-utils@2.20.51?type=jar</purl>\n       <modified>false</modified>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar\">\n-      <group>org.apache.httpcomponents</group>\n-      <name>httpclient</name>\n-      <version>4.5.13</version>\n-      <description>Apache HttpComponents Client</description>\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.bouncycastle/bcprov-jdk15on@1.70?type=jar\">\n+      <group>org.bouncycastle</group>\n+      <name>bcprov-jdk15on</name>\n+      <version>1.70</version>\n+      <description>The Bouncy Castle Crypto package is a Java implementation of cryptographic algorithms. This jar contains JCE provider and lightweight API for the Bouncy Castle Cryptography APIs for JDK 1.5 and up.</description>\n       <hashes>\n-        <hash alg=\"MD5\">40d6b9075fbd28fa10292a45a0db9457</hash>\n-        <hash alg=\"SHA-1\">e5f6cae5ca7ecaac1ec2827a9e2d65ae2869cada</hash>\n-        <hash alg=\"SHA-256\">6fe9026a566c6a5001608cf3fc32196641f6c1e5e1986d1037ccdbd5f31ef743</hash>\n-        <hash alg=\"SHA-512\">3567739186e551f84cad3e4b6b270c5b8b19aba297675a96bcdff3663ff7d20d188611d21f675fe5ff1bfd7d8ca31362070910d7b92ab1b699872a120aa6f089</hash>\n-        <hash alg=\"SHA-384\">093ac3e2dde58e34aa70309c7305eb3c9b5be2509a9293f1672494da55479a86bd112e83326746dc7a32855472952b99</hash>\n-        <hash alg=\"SHA3-384\">cd6882e7868624164e460f2f3ea01466f863c0dcb902b031c656b57356f563be83b29530df41d88d634ed3d01fc9964d</hash>\n-        <hash alg=\"SHA3-256\">710b1d8d7dae0b8e4270756694ca9c83d64965f42d3b4170c609b14d47c2762c</hash>\n-        <hash alg=\"SHA3-512\">276fa6a6599dc89382d658115695cf4da6b0d39b34e9c349c17a5dbd64122eaee553bb9ed75c0378ec4a83be157c8aa39370662de3c9b8fd55ebc1dd608383e6</hash>\n+        <hash alg=\"MD5\">1809d0449a6374279c01fdd3be26cd92</hash>\n+        <hash alg=\"SHA-1\">4636a0d01f74acaf28082fb62b317f1080118371</hash>\n+        <hash alg=\"SHA-256\">8f3c20e3e2d565d26f33e8d4857a37d0d7f8ac39b62a7026496fcab1bdac30d4</hash>\n+        <hash alg=\"SHA-512\">7dccfc636ee4df1487615818cfa99c69941081df95e8ef1eaf4bca165594dff9547e3774fd70de3418abace77d2c45889f70bcd2e6823f8539f359e68eaf36d1</hash>\n+        <hash alg=\"SHA-384\">a0b35d204cd962f1d246fa94b6e8b0fcee1a7c3f37b7e87cda742f2124a25b48794ce11a903ea8d12009c86227b6808d</hash>\n+        <hash alg=\"SHA3-384\">980d81d3d9906764bbf2ae9b3b364ea58628b485ce1dc3d06734e10495d79f2be2e7cc7df61ac88cd67c1104c7af9393</hash>\n+        <hash alg=\"SHA3-256\">10a3572e42d29f609721d795116e3e5d0f6f03efef84bb979ce72e26908d242b</hash>\n+        <hash alg=\"SHA3-512\">a0761cb6deeb86c94b96850c72c0a0eaf516ca849f4b8268f9f60c9ed2a6730e692c15098d47e617da294e931113c6cbcaddec8957c9f029fa595b5f14ff35ac</hash>\n       </hashes>\n       <licenses>\n         <license>\n-          <id>Apache-2.0</id>\n+          <name>Bouncy Castle Licence</name>\n+          <url>https://www.bouncycastle.org/licence.html</url>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar</purl>\n+      <purl>pkg:maven/org.bouncycastle/bcprov-jdk15on@1.70?type=jar</purl>\n       <modified>false</modified>\n+      <externalReferences>\n+        <reference type=\"issue-tracker\">\n+          <url>https://github.com/bcgit/bc-java/issues</url>\n+        </reference>\n+        <reference type=\"vcs\">\n+          <url>https://github.com/bcgit/bc-java</url>\n+        </reference>\n+      </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/com.github.victools/jsonschema-module-jackson@4.31.0?type=jar\">\n-      <group>com.github.victools</group>\n-      <name>jsonschema-module-jackson</name>\n-      <version>4.31.0</version>\n-      <description>Module for the jsonschema-generator \u2013 deriving JSON Schema attributes from jackson annotations</description>\n+    <component type=\"library\" bom-ref=\"pkg:maven/software.amazon.awssdk/annotations@2.20.51?type=jar\">\n+      <group>software.amazon.awssdk</group>\n+      <name>annotations</name>\n+      <version>2.20.51</version>\n       <hashes>\n-        <hash alg=\"MD5\">9f823bde30ac43fe6fd6992d70902efa</hash>\n-        <hash alg=\"SHA-1\">06adbda496c2473cb9da4c917c01feb0678b2a2a</hash>\n-        <hash alg=\"SHA-256\">3efaa123a3f320a592327d9e906222be87e61a4e0c8833201cebbf826d53bfe8</hash>\n-        <hash alg=\"SHA-512\">976d7bac35f28cbab854344b0aa27c0f3ad55e4c852ca676ded9f9d8c51c2b66f4ffe7c5576b37eb53a6eb348ddccd324fd06a799e43bd1d0e9556f6bd960744</hash>\n-        <hash alg=\"SHA-384\">f4ad447e5053e370e35fe07300ec1c6a82249cab63eca89dc11c53b2ad0a5230a764227e88e5518953688606ade3a39b</hash>\n-        <hash alg=\"SHA3-384\">42732b646312579aa2de6c8e984ba9c30de2a092c9f76998afa7c073557cf0032f5a2fe2a1c0449e4f520df1d593fd8c</hash>\n-        <hash alg=\"SHA3-256\">dbd1ffc75f5cb9fde3910a68aef8b8c6a6d293a829d977efc770222754799107</hash>\n-        <hash alg=\"SHA3-512\">dfb848dc76c452afd372fc98d30ff7931f3bcee14183a6e679ce718c6db3ed7b220b79f5a95166bac9ae45379e9caf2e6b0c4385a4da1f4e779cee96e8d8c2c1</hash>\n+        <hash alg=\"MD5\">ae97e71d75206e01e31c40035b526530</hash>\n+        <hash alg=\"SHA-1\">8853a566050a2399151fd9eef221e0ad01f577f2</hash>\n+        <hash alg=\"SHA-256\">fb888f235b4b4874b709b0faf2389942dfeb52537facb10b2aad1a5d7b59a4f4</hash>\n+        <hash alg=\"SHA-512\">ef9414876b3137eff18ef33819903661f18dfdfc2d3409625fa5f115af410aef0434c8c272828758211e037cf3a4a1b2ca800d0a29418818af1929a2e1dff319</hash>\n+        <hash alg=\"SHA-384\">de026a3e857744c52616dafe26333d0ae81289cb064e00fea8bcf9af40e333e6d8e36b3520c7b09ab333af2b7b08b77a</hash>\n+        <hash alg=\"SHA3-384\">46054e5c10c6a26e5115a48fd7b32394734b0fe065368f8aa06aa997b9f6985b96f25171845ca33226a81f603e118018</hash>\n+        <hash alg=\"SHA3-256\">10e2eb2baec15986800000b92375d71fce07aed8a93257c1abf26b1b2c89c982</hash>\n+        <hash alg=\"SHA3-512\">c67bfa1183cee73fa9f7c3a323629d29b2ad96ef82a9df48a5b164cfe85237e279bccca2a5e6540d20ba722d31a3dfc241df50d9c5b7a5b08c5ff4ab2cb0635a</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/com.github.victools/jsonschema-module-jackson@4.31.0?type=jar</purl>\n+      <purl>pkg:maven/software.amazon.awssdk/annotations@2.20.51?type=jar</purl>\n       <modified>false</modified>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-tool-java-sdk@1.6.0?type=jar\">\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-gitea-java-sdk@1.6.0?type=jar\">\n       <group>org.jreleaser</group>\n-      <name>jreleaser-tool-java-sdk</name>\n+      <name>jreleaser-gitea-java-sdk</name>\n       <version>1.6.0</version>\n-      <hashes>\n-        <hash alg=\"MD5\">abfd7ce4581351b44b505c26c1367955</hash>\n-        <hash alg=\"SHA-1\">ef1e1b370a0a24a202089f732598f82ce91c74f2</hash>\n-        <hash alg=\"SHA-256\">a4bcf1548d74752460e28bd3ab7e43b779b5a8f446285b8e7643dd83983f5b7f</hash>\n-        <hash alg=\"SHA-512\">e14548ab617020cac195b98b2b6bf04043cf409ef395783e8c2c38441c761f38dd34b4858d4d7e26d2c69fde233ccaa102f180d3ff547efc29e475d0c38b7b40</hash>\n-        <hash alg=\"SHA-384\">85953ec5ec2714df877d6012db03c5d88a971dcb35cfc43c197570e8e2b010c1c292e228e4fe8c7f93418e11868b8654</hash>\n-        <hash alg=\"SHA3-384\">cb294f21ab1d8a8c8f488e2f60b456e66985b55dbb5ecc56646b57fc6fbb9e36aa69801bdb6c1ea5825288baab329183</hash>\n-        <hash alg=\"SHA3-256\">cf8c1f78e8630a84e28269970a18752616d82aec3a5d9297459244fb4d52980a</hash>\n-        <hash alg=\"SHA3-512\">bd42233ee963b74dd472abde6801b8140f3ec1b08e503e486bd7c8ef7575e65a72f0bd8a3ca996adbc832d4df6be8e2b500a425b77dfdfd80e57818af84a79c2</hash>\n-      </hashes>\n-      <licenses/>\n-      <purl>pkg:maven/org.jreleaser/jreleaser-tool-java-sdk@1.6.0?type=jar</purl>\n+      <description>Java SDK for Gitea</description>\n+      <licenses>\n+        <license>\n+          <id>Apache-2.0</id>\n+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>\n+        </license>\n+      </licenses>\n+      <purl>pkg:maven/org.jreleaser/jreleaser-gitea-java-sdk@1.6.0?type=jar</purl>\n       <modified>false</modified>\n+      <externalReferences>\n+        <reference type=\"vcs\">\n+          <url>https://github.com/jreleaser/jreleaser</url>\n+        </reference>\n+      </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-teams-java-sdk@1.6.0?type=jar\">\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-utils@1.6.0?type=jar\">\n       <group>org.jreleaser</group>\n-      <name>jreleaser-teams-java-sdk</name>\n+      <name>jreleaser-utils</name>\n       <version>1.6.0</version>\n-      <hashes>\n-        <hash alg=\"MD5\">3da7725d7cd09adffadabc589898978b</hash>\n-        <hash alg=\"SHA-1\">082260c51ead72f14c3880f4554cad41f98f6fe1</hash>\n-        <hash alg=\"SHA-256\">907c37ffe9d68fc28c67287b36115e73740405d4a909a39dce1a2719f7329f91</hash>\n-        <hash alg=\"SHA-512\">30e9bf9efceb80cd55584fbf25a0eef5eebba15b16f462a37971de2498ed25ba5234fc09144877844385497ecb34280fa0f35c9f6af7cf90fe4dbe3e03857013</hash>\n-        <hash alg=\"SHA-384\">cb24661330bedeb67a8fd48d7faa64951b7f8e4e25200a291ea52cebdb679534551f280e25a3e2dcbdc4cd28cb8923b3</hash>\n-        <hash alg=\"SHA3-384\">55b848f5499e3ab9b5ebadb4262092a4427e8d61d2ce66c254c4651eb25954c98393c71dc56465daa811c5fcb3dc1e0e</hash>\n-        <hash alg=\"SHA3-256\">500241f17c41d22dc085580e0423244d1a6cd9a17dbb2c035b8f2a116c53e1aa</hash>\n-        <hash alg=\"SHA3-512\">102b1323e9191e561a1d640ef29684558a3944470582d5cb84eddb31dfe807bee8a528902da10b2c95706609aa0c6b8f596e616091fc29375f5f154e1c655789</hash>\n-      </hashes>\n-      <licenses/>\n-      <purl>pkg:maven/org.jreleaser/jreleaser-teams-java-sdk@1.6.0?type=jar</purl>\n+      <description>JReleaser utility classes</description>\n+      <licenses>\n+        <license>\n+          <id>Apache-2.0</id>\n+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>\n+        </license>\n+      </licenses>\n+      <purl>pkg:maven/org.jreleaser/jreleaser-utils@1.6.0?type=jar</purl>\n       <modified>false</modified>\n+      <externalReferences>\n+        <reference type=\"vcs\">\n+          <url>https://github.com/jreleaser/jreleaser</url>\n+        </reference>\n+      </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.14.2?type=jar\">\n-      <group>com.fasterxml.jackson.dataformat</group>\n-      <name>jackson-dataformat-yaml</name>\n-      <version>2.14.2</version>\n-      <description>Support for reading and writing YAML-encoded data via Jackson abstractions.</description>\n-      <hashes>\n-        <hash alg=\"MD5\">cb29e74cb2c1981985a8214774bde05e</hash>\n-        <hash alg=\"SHA-1\">cc9a25c1f4212562dcb2fa33dd8ae179ba0e6a4e</hash>\n-        <hash alg=\"SHA-256\">5c3a0a71d0339529c80ae771497b20fdc0fa7cb67c772f99af5935927560006a</hash>\n-        <hash alg=\"SHA-512\">f3232b7d5e4b466660a1fd7c0725dd1f24ef9e9192edd05fa698bc641c9f81142e8f1b11de0d0fd2ce3ff21267d3899d6287923dbd130177e3da50dbc222d6c4</hash>\n-        <hash alg=\"SHA-384\">3c08ebd6f40201af59117f2efa262c4280dd614cf02cdeff1145a33cf435b3685a9609cca9dd4c033ea3ce169b815d96</hash>\n-        <hash alg=\"SHA3-384\">d76663872641a9823592b1cf70989eb8f862bed5455e81591008f0a5b46ee8337bf2be78f433a99aa1842287fcaa20c5</hash>\n-        <hash alg=\"SHA3-256\">79385b1c7e23deba396f2194855b44bc942037ab9cff6a31444508373ecf345c</hash>\n-        <hash alg=\"SHA3-512\">323ef61d6433df558b595558d6d629fc6f48af7eb1de6db0382cb3d2cdf7b429e6a41a2b927d0298ea2f234fbc87a8c39a7a9a03901857cb79da1c53114d986f</hash>\n-      </hashes>\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-java-sdk-commons@1.6.0?type=jar\">\n+      <group>org.jreleaser</group>\n+      <name>jreleaser-java-sdk-commons</name>\n+      <version>1.6.0</version>\n+      <description>Utilities for Java SDKs</description>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.14.2?type=jar</purl>\n+      <purl>pkg:maven/org.jreleaser/jreleaser-java-sdk-commons@1.6.0?type=jar</purl>\n       <modified>false</modified>\n+      <externalReferences>\n+        <reference type=\"vcs\">\n+          <url>https://github.com/jreleaser/jreleaser</url>\n+        </reference>\n+      </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-genericgit-java-sdk@1.6.0?type=jar\">\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-discord-java-sdk@1.6.0?type=jar\">\n       <group>org.jreleaser</group>\n-      <name>jreleaser-genericgit-java-sdk</name>\n+      <name>jreleaser-discord-java-sdk</name>\n       <version>1.6.0</version>\n-      <hashes>\n-        <hash alg=\"MD5\">c7260397c5952bba754a173d5666c7b9</hash>\n-        <hash alg=\"SHA-1\">61840708fa3730432a7e226e98621ee0d8ab360f</hash>\n-        <hash alg=\"SHA-256\">e72bdc3f71684e764cd51b39a632a2215d3adff7a6bc4c9070472cf75cbcb4af</hash>\n-        <hash alg=\"SHA-512\">fa2f664845956c04500cc0a7d810526df6bf12bafb65b005f441d5e7085f71e6e54ffa362323b4e62598c110e586dbbd540dae847e0a18ef0981191296f9f2b8</hash>\n-        <hash alg=\"SHA-384\">49e4027693a317b82900df6f7e7e82d6dc1522157c4c47c1b5a57f223c750a6ffb623d2c2676815e3f95c6c8fc038d79</hash>\n-        <hash alg=\"SHA3-384\">019584c3a775661c4ec79de865ee3cd32dc0307610cb3ce6109656125e1e5900787adb2a490e8f9919474e3b482844bb</hash>\n-        <hash alg=\"SHA3-256\">f95d2e54c11c925fa065aa10206742899bb41d29fb376b32d67cd209fcc61854</hash>\n-        <hash alg=\"SHA3-512\">8889852c7c5fd93288e936c695bbb60b027521798de8ca821004701d9a3d64d05360945b44a4db21552ea9a5a33cf99de072d3498a3a20154c67c17b7175a814</hash>\n-      </hashes>\n-      <licenses/>\n-      <purl>pkg:maven/org.jreleaser/jreleaser-genericgit-java-sdk@1.6.0?type=jar</purl>\n+      <description>Java SDK for Discord</description>\n+      <licenses>\n+        <license>\n+          <id>Apache-2.0</id>\n+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>\n+        </license>\n+      </licenses>\n+      <purl>pkg:maven/org.jreleaser/jreleaser-discord-java-sdk@1.6.0?type=jar</purl>\n       <modified>false</modified>\n+      <externalReferences>\n+        <reference type=\"vcs\">\n+          <url>https://github.com/jreleaser/jreleaser</url>\n+        </reference>\n+      </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/com.github.spullara.mustache.java/compiler@0.9.10?type=jar\">\n-      <group>com.github.spullara.mustache.java</group>\n-      <name>compiler</name>\n-      <version>0.9.10</version>\n-      <description>Implementation of mustache.js for Java</description>\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar\">\n+      <group>org.apache.commons</group>\n+      <name>commons-lang3</name>\n+      <version>3.12.0</version>\n+      <description>Apache Commons Lang, a package of Java utility classes for the\n+  classes that are in java.lang's hierarchy, or are considered to be so\n+  standard as to justify existence in java.lang.</description>\n       <hashes>\n-        <hash alg=\"MD5\">5638fc78a17d5063cc4b0d00f6e87491</hash>\n-        <hash alg=\"SHA-1\">6111ae24e3be9ecbd75f5fe908583fc14b4f0174</hash>\n-        <hash alg=\"SHA-256\">2b5a9217811cb99846a473fa8e0d233eb33629347b7f44941f6c0fbd4cdf1038</hash>\n-        <hash alg=\"SHA-512\">2ccf3196af2b518c96df748a72a0122d033dc222e1fab3e12f3e2094146d44bec20bd1502390b59abf090cbdf5dd4d580084b07fb7241248b5b8da2605207559</hash>\n-        <hash alg=\"SHA-384\">0204e77a4a64701af5000df6601f4f4c23cb5e53dd39a1325615d4f942cd2c91d04bbac20348ae49731f586282165c33</hash>\n-        <hash alg=\"SHA3-384\">0960da7175835484471f485d481499f8b65f134ff4f1629618560adaa5a08caa897fbefcea190f93106ee9e3273381b2</hash>\n-        <hash alg=\"SHA3-256\">cfb7e640392ef590069e6b1d059dc20b8fcff984a4b267b3969fcf50ed0edd4f</hash>\n-        <hash alg=\"SHA3-512\">db3dad3809879bca835a04da890fd86dbc58ba6637c72f07d02e39d13645ebb6c640b7fecc18a779e58946072078bdf114b91445026a32dd6501b5d1c6e7d933</hash>\n+        <hash alg=\"MD5\">19fe50567358922bdad277959ea69545</hash>\n+        <hash alg=\"SHA-1\">c6842c86792ff03b9f1d1fe2aab8dc23aa6c6f0e</hash>\n+        <hash alg=\"SHA-256\">d919d904486c037f8d193412da0c92e22a9fa24230b9d67a57855c5c31c7e94e</hash>\n+        <hash alg=\"SHA-512\">fbdbc0943cb3498b0148e86a39b773f97c8e6013740f72dbc727faeabea402073e2cc8c4d68198e5fc6b08a13b7700236292e99d4785f2c9989f2e5fac11fd81</hash>\n+        <hash alg=\"SHA-384\">c34b8a0e0eba2168ad56fedeb7a1d710b6f1d3f1ce6aae99a4e0247bd120efbbadc8dcb2f731045b8a16e3efd30604dc</hash>\n+        <hash alg=\"SHA3-384\">8ad6ebe7754bf0caa8cda7e59c0e95360d76e06a7ad6aeec5637985519dbd1dd06e7eed04711039f36ec4c49de280def</hash>\n+        <hash alg=\"SHA3-256\">18ef639b2aeeb5aedffb18dbf20c79f33e300d99fb31b131689639cc470e6e4c</hash>\n+        <hash alg=\"SHA3-512\">fbea96114dcf4f31cfaaa99987be756ddda3a6c74f8c835461997df794d54b92da1f60fe5c3f1f2a43cb8c5f5db7f4048bef77c70993673c7a93f3660fffc8da</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n+        </license>\n+      </licenses>\n+      <purl>pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar</purl>\n+      <modified>false</modified>\n+      <externalReferences>\n+        <reference type=\"issue-tracker\">\n+          <url>https://issues.apache.org/jira/browse/LANG</url>\n+        </reference>\n+        <reference type=\"vcs\">\n+          <url>https://gitbox.apache.org/repos/asf?p=commons-lang.git</url>\n+        </reference>\n+      </externalReferences>\n+    </component>\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-nexus2-java-sdk@1.6.0?type=jar\">\n+      <group>org.jreleaser</group>\n+      <name>jreleaser-nexus2-java-sdk</name>\n+      <version>1.6.0</version>\n+      <description>Java SDK for Sonatype Nexus2</description>\n+      <licenses>\n+        <license>\n+          <id>Apache-2.0</id>\n           <url>https://www.apache.org/licenses/LICENSE-2.0</url>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/com.github.spullara.mustache.java/compiler@0.9.10?type=jar</purl>\n+      <purl>pkg:maven/org.jreleaser/jreleaser-nexus2-java-sdk@1.6.0?type=jar</purl>\n       <modified>false</modified>\n       <externalReferences>\n         <reference type=\"vcs\">\n-          <url>http://github.com/spullara/mustache.java</url>\n+          <url>https://github.com/jreleaser/jreleaser</url>\n         </reference>\n       </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/com.sun.activation/jakarta.activation@2.0.1?type=jar\">\n-      <group>com.sun.activation</group>\n-      <name>jakarta.activation</name>\n-      <version>2.0.1</version>\n+    <component type=\"library\" bom-ref=\"pkg:maven/io.github.openfeign/feign-httpclient@12.3?type=jar\">\n+      <group>io.github.openfeign</group>\n+      <name>feign-httpclient</name>\n+      <version>12.3</version>\n+      <description>Feign Apache HttpClient</description>\n       <hashes>\n-        <hash alg=\"MD5\">39228ac67f033514a0ccb3360ac461f3</hash>\n-        <hash alg=\"SHA-1\">828b80e886a52bb09fe41ff410b10b342f533ce1</hash>\n-        <hash alg=\"SHA-256\">b9e24b7dd6e07495562ea96531be3130c96dba4d78e1dfd88adbbdebf4332871</hash>\n-        <hash alg=\"SHA-512\">d1c214d2d6ecc61bba396d913c66c977418e74dfe96e5558951ccf99a60cfca6adfea3fc64b6e2d15f698e30dac870b8f6e8d7a22e0dff975f8dd83864714fc5</hash>\n-        <hash alg=\"SHA-384\">7481f94524b06ba81d12f5d9427dcd389d2c9130176567ff3e11c82fcfe605bf654116463b23d259573f3222b3414bcd</hash>\n-        <hash alg=\"SHA3-384\">0bcd7603bc9ff7cae8fb9d7c6547c012d88a5d6374a71670d58086dc597cd592f6686abccc63d095cb17cdafe4dba762</hash>\n-        <hash alg=\"SHA3-256\">47760a6311d1023c1384ebaea0c2eb35c8ecbb06e424fdefe935693088e2f88e</hash>\n-        <hash alg=\"SHA3-512\">f5d531480ed1cc9323281d1ca402d21ec71a7ad267372c95a8c8dcf0f1e6919d545085fe5c7b154c5594f26538873ee75459795e826c6acb3fa6c4629a7f983a</hash>\n+        <hash alg=\"MD5\">4ec31fa7f187c15f9967c7ffcf714449</hash>\n+        <hash alg=\"SHA-1\">0ea51fdb4797c3ab62e1f8a726d4e02cf522dba2</hash>\n+        <hash alg=\"SHA-256\">3a2833e18cc868bff19d6320f22054f96995dc073ed27edfeb2d83996d2ef37c</hash>\n+        <hash alg=\"SHA-512\">3440afa129150c035670cd098e6eba6f676afc82db2db53a10b20621e30658b411d820652e4668dab5ca615f599a41a06dc826378b5e783f88f26c2cddfce8ed</hash>\n+        <hash alg=\"SHA-384\">b8dc38126b28fb486d459e23ae61a34073f16f0ef7ec37f49636919d0fd5a8d86354d76314462dba94efd4f613db92ef</hash>\n+        <hash alg=\"SHA3-384\">7c4161078011223122067406e5ad6efedfcf45c71d6e081f37e3fba1c73578c748d5a5e60d372a5fa7159ec7737e71bb</hash>\n+        <hash alg=\"SHA3-256\">b6d851642b9a5628dbe3cab5706c9d434f1d59ec881cd5cdf6fae84f644eb7c1</hash>\n+        <hash alg=\"SHA3-512\">9b3b7edc25efc7345a9cc7b2fe0eccefd57fa40d62e6a85b4a698827b9c34ff568236d591f6d5645de7eb275be2b10aee80f42881f6068f0b1c38f274faf4c5f</hash>\n       </hashes>\n       <licenses>\n         <license>\n-          <id>BSD-3-Clause</id>\n+          <id>Apache-2.0</id>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/com.sun.activation/jakarta.activation@2.0.1?type=jar</purl>\n+      <purl>pkg:maven/io.github.openfeign/feign-httpclient@12.3?type=jar</purl>\n       <modified>false</modified>\n     </component>\n   </components>\n   <dependencies>\n     <dependency ref=\"pkg:maven/software.amazon.awssdk/json-utils@2.20.51?type=jar\">\n       <dependency ref=\"pkg:maven/software.amazon.awssdk/utils@2.20.51?type=jar\"/>\n       <dependency ref=\"pkg:maven/software.amazon.awssdk/annotations@2.20.51?type=jar\"/>\n"}]}