{"diffoscope-json-version": 1, "source1": "/input1", "source2": "/input2", "unified_diff": null, "details": [{"source1": "/input1", "source2": "/input2", "unified_diff": "@@ -1,11 +1,11 @@\n <?xml version=\"1.0\" encoding=\"utf-8\"?>\n-<bom xmlns=\"http://cyclonedx.org/schema/bom/1.4\" serialNumber=\"urn:uuid:f9d9a50c-9478-43f6-a3fa-dbebd7de1510\" version=\"1\">\n+<bom xmlns=\"http://cyclonedx.org/schema/bom/1.4\" serialNumber=\"urn:uuid:ec57d7e0-1d96-4189-9148-58f8aec110a4\" version=\"1\">\n   <metadata>\n-    <timestamp>2023-04-29T10:08:29Z</timestamp>\n+    <timestamp>2025-07-11T06:29:47Z</timestamp>\n     <tools>\n       <tool>\n         <vendor>CycloneDX</vendor>\n         <name>cyclonedx-gradle-plugin</name>\n         <version>1.7.4</version>\n       </tool>\n     </tools>\n@@ -13,454 +13,344 @@\n       <group>org.jreleaser</group>\n       <name>jreleaser-s3-java-sdk</name>\n       <version>1.6.0</version>\n       <purl>pkg:maven/org.jreleaser/jreleaser-s3-java-sdk@1.6.0?type=jar</purl>\n     </component>\n   </metadata>\n   <components>\n-    <component type=\"library\" bom-ref=\"pkg:maven/io.github.openfeign/feign-core@12.3?type=jar\">\n-      <group>io.github.openfeign</group>\n-      <name>feign-core</name>\n-      <version>12.3</version>\n-      <description>Feign Core</description>\n-      <hashes>\n-        <hash alg=\"MD5\">9e6e1ff8b68d2b6c1fc5bdc7ff208030</hash>\n-        <hash alg=\"SHA-1\">d280b09a17b63e69788fd3d8d215b7013ab48b16</hash>\n-        <hash alg=\"SHA-256\">939fbed2c2392a9633bc1d26f0ef9e934b059d1a9a9d4d966cedaf9075c546ec</hash>\n-        <hash alg=\"SHA-512\">8335901d8918747dc29d37a2ac630c6a78ea6ff04bfea77e6d8c74188e9e584142920996c45120caa86299486949a04e1ec1f1bef30229904360fcb5c5d4a1c4</hash>\n-        <hash alg=\"SHA-384\">dc7a0d10bdf2c3aeafba83ca7e41d21c3288f3df0b76e339788fcf7606381970b6429108dbf2d1212075d1feba040842</hash>\n-        <hash alg=\"SHA3-384\">2907938ea76735cde9b34676c6c8b04786f1595687f96734e7659768175cb7a525508f84c48d9b10b0b2f593158e1ed5</hash>\n-        <hash alg=\"SHA3-256\">474f6b0ab420bf63549ed123fff99b73fc881771c6a0c591e58dfb17adbe9899</hash>\n-        <hash alg=\"SHA3-512\">553a6dc1c3cf7facdb3b4e15be1d6d90259f1d36ce137db3a6e53a967ef4939aaa98c974b059c8f32dd42316bb7eee3b51910cf0fb172d0df9b8ff39d8cc722d</hash>\n-      </hashes>\n-      <licenses>\n-        <license>\n-          <id>Apache-2.0</id>\n-        </license>\n-      </licenses>\n-      <purl>pkg:maven/io.github.openfeign/feign-core@12.3?type=jar</purl>\n-      <modified>false</modified>\n-    </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/software.amazon.awssdk/json-utils@2.20.51?type=jar\">\n-      <group>software.amazon.awssdk</group>\n-      <name>json-utils</name>\n-      <version>2.20.51</version>\n-      <hashes>\n-        <hash alg=\"MD5\">daab6d8ae17e1a11973375f56728c903</hash>\n-        <hash alg=\"SHA-1\">380afef1a1b6fd38ba14456b61e8a6d6e1720a12</hash>\n-        <hash alg=\"SHA-256\">3ff5d2db051e02de62ef1b6a8aa00da79da7cf5c6eeff7c9d99f4aa564c6664a</hash>\n-        <hash alg=\"SHA-512\">ad5aaba55bc87044973b3ad30478783cb932f0014bee1bde4da536f2883cdc9598cec81a946d87d22ef77bb7855029abddb65ee0c51385f4c35d7974f874d693</hash>\n-        <hash alg=\"SHA-384\">e060fc0648a681d6a570cbaea0658ec7a4104e505c15c662fd1ee4881a49709b9b7ed881b911e04860f8a06e4a98c232</hash>\n-        <hash alg=\"SHA3-384\">05ed45fcd2a958b0f504e1e044dfbfec0a8c390360dffc870b712bfc5a286ca7457c0cc41abf1aa5efa73a1d06c7b905</hash>\n-        <hash alg=\"SHA3-256\">e9a3c93b55fa7ab5ebe4c23593ca981daad2f7712cf1af66d8327b89dd10ecf8</hash>\n-        <hash alg=\"SHA3-512\">b2cda2e9492b5d2f2f82cea6c94efcffe3e4c03a817885d2d456aa06f73e652ca34e433f97168e7335f8641df679f0661800115912f975170edd3c7e9f87e8e7</hash>\n-      </hashes>\n-      <licenses>\n-        <license>\n-          <id>Apache-2.0</id>\n-        </license>\n-      </licenses>\n-      <purl>pkg:maven/software.amazon.awssdk/json-utils@2.20.51?type=jar</purl>\n-      <modified>false</modified>\n-    </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/software.amazon.awssdk/annotations@2.20.51?type=jar\">\n-      <group>software.amazon.awssdk</group>\n-      <name>annotations</name>\n-      <version>2.20.51</version>\n+    <component type=\"library\" bom-ref=\"pkg:maven/commons-codec/commons-codec@1.15?type=jar\">\n+      <group>commons-codec</group>\n+      <name>commons-codec</name>\n+      <version>1.15</version>\n+      <description>The Apache Commons Codec package contains simple encoder and decoders for\n+     various formats such as Base64 and Hexadecimal.  In addition to these\n+     widely used encoders and decoders, the codec package also maintains a\n+     collection of phonetic encoding utilities.</description>\n       <hashes>\n-        <hash alg=\"MD5\">ae97e71d75206e01e31c40035b526530</hash>\n-        <hash alg=\"SHA-1\">8853a566050a2399151fd9eef221e0ad01f577f2</hash>\n-        <hash alg=\"SHA-256\">fb888f235b4b4874b709b0faf2389942dfeb52537facb10b2aad1a5d7b59a4f4</hash>\n-        <hash alg=\"SHA-512\">ef9414876b3137eff18ef33819903661f18dfdfc2d3409625fa5f115af410aef0434c8c272828758211e037cf3a4a1b2ca800d0a29418818af1929a2e1dff319</hash>\n-        <hash alg=\"SHA-384\">de026a3e857744c52616dafe26333d0ae81289cb064e00fea8bcf9af40e333e6d8e36b3520c7b09ab333af2b7b08b77a</hash>\n-        <hash alg=\"SHA3-384\">46054e5c10c6a26e5115a48fd7b32394734b0fe065368f8aa06aa997b9f6985b96f25171845ca33226a81f603e118018</hash>\n-        <hash alg=\"SHA3-256\">10e2eb2baec15986800000b92375d71fce07aed8a93257c1abf26b1b2c89c982</hash>\n-        <hash alg=\"SHA3-512\">c67bfa1183cee73fa9f7c3a323629d29b2ad96ef82a9df48a5b164cfe85237e279bccca2a5e6540d20ba722d31a3dfc241df50d9c5b7a5b08c5ff4ab2cb0635a</hash>\n+        <hash alg=\"MD5\">303baf002ce6d382198090aedd9d79a2</hash>\n+        <hash alg=\"SHA-1\">49d94806b6e3dc933dacbd8acb0fdbab8ebd1e5d</hash>\n+        <hash alg=\"SHA-256\">b3e9f6d63a790109bf0d056611fbed1cf69055826defeb9894a71369d246ed63</hash>\n+        <hash alg=\"SHA-512\">da30a716770795fce390e4dd340a8b728f220c6572383ffef55bd5839655d5611fcc06128b2144f6cdcb36f53072a12ec80b04afee787665e7ad0b6e888a6787</hash>\n+        <hash alg=\"SHA-384\">05d0506283716472175d44c2a4766523397bf8a007c18848f9c9a61718cc8aa437f9cb4b91771037ab29a960860b62a0</hash>\n+        <hash alg=\"SHA3-384\">12fad4ef78274b06f97b1243cea6f970088abde082d2de9377d915a34b44f7d7d67807c03e59c849b69f1544e2a9a1be</hash>\n+        <hash alg=\"SHA3-256\">87be248f33f241121f54aad61a9a460a79eabefbf1b5b0dd22aeb95b581f727e</hash>\n+        <hash alg=\"SHA3-512\">8c992c9c569ebaa0bf956a4c5b34fbf5e1ed1c212c2dd896fa216183ee0bcd341e96698af4b9cec7e8880762faa081a3d3a27f51349aa457cb8e373e4f57c788</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/software.amazon.awssdk/annotations@2.20.51?type=jar</purl>\n-      <modified>false</modified>\n-    </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-model-api@1.6.0?type=jar\">\n-      <group>org.jreleaser</group>\n-      <name>jreleaser-model-api</name>\n-      <version>1.6.0</version>\n-      <hashes>\n-        <hash alg=\"MD5\">288354c621fdfef298e4e8cdc843e2c3</hash>\n-        <hash alg=\"SHA-1\">54bcb05008c6f0b50433f8d0fe82e3a217317db1</hash>\n-        <hash alg=\"SHA-256\">397e18c4fa02ba508e409a119866d4e78d64c6c76f5a4f22b3aefc027b662b9b</hash>\n-        <hash alg=\"SHA-512\">67c4e2f9acb6db78c21cfd23d3411ce1e32b23690a1d5035a285b48cd9b996fd4c80b504d050e87a4a5604e6b56ca52878a464593f0bd8eea53059bcb263289f</hash>\n-        <hash alg=\"SHA-384\">8f67be44af6f792c32f2b86d07738c52e5b742a650d010e8c0b5e60a62db627d5c695f23f24d814f232fc0246d03086c</hash>\n-        <hash alg=\"SHA3-384\">1e5c3dffd4e3c545081904db6dcff892bd2f27285b4fa46a57cdd23c3fbb382ab06268e87d57212996387269b2c8b72f</hash>\n-        <hash alg=\"SHA3-256\">d2b875e45846a0d17cf7f85d6289681ee42897519cdaca9625ffc56b1639909d</hash>\n-        <hash alg=\"SHA3-512\">1a098f05c0735a7ed19cf374440818e9882b0288728f6658ce3709ac534c06cc7dc36ea4d7656a35281758d1ec09c31edf13a98d6680206a0c9fb1dff21ad04f</hash>\n-      </hashes>\n-      <licenses/>\n-      <purl>pkg:maven/org.jreleaser/jreleaser-model-api@1.6.0?type=jar</purl>\n+      <purl>pkg:maven/commons-codec/commons-codec@1.15?type=jar</purl>\n       <modified>false</modified>\n+      <externalReferences>\n+        <reference type=\"issue-tracker\">\n+          <url>https://issues.apache.org/jira/browse/CODEC</url>\n+        </reference>\n+        <reference type=\"vcs\">\n+          <url>https://github.com/apache/commons-codec</url>\n+        </reference>\n+      </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/software.amazon.awssdk/aws-query-protocol@2.20.51?type=jar\">\n-      <group>software.amazon.awssdk</group>\n-      <name>aws-query-protocol</name>\n-      <version>2.20.51</version>\n-      <description>The AWS SDK for Java - module holds the classes for AWS Query protocol</description>\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.slf4j/jcl-over-slf4j@2.0.7?type=jar\">\n+      <group>org.slf4j</group>\n+      <name>jcl-over-slf4j</name>\n+      <version>2.0.7</version>\n+      <description>JCL 1.2 implemented over SLF4J</description>\n       <hashes>\n-        <hash alg=\"MD5\">6794d6e8aad17bf7702af82372421eb9</hash>\n-        <hash alg=\"SHA-1\">7995d1f7684112e2e92a45395a15d7cc1af064a8</hash>\n-        <hash alg=\"SHA-256\">f47256e9af5b92c1d993e4179924da7a0d7a94f46e3d5e11211a4aac23de2f38</hash>\n-        <hash alg=\"SHA-512\">1a92031b06677f98712b98a1935ff100200f8f85c06cc2a10d50bc19c7071a33ef012af9daa4226778833aa920f61932a9f55fd0b9082543a5f15d20385ac563</hash>\n-        <hash alg=\"SHA-384\">bbe4c41051dd2792945bc3a1bad600b946937b51529911170f47d1c6472ff7f4dd52af1e15a1c86ee64d56b12599b654</hash>\n-        <hash alg=\"SHA3-384\">e1a687b8ee22aacf9449a68df1c6ab829b9278131a620c670d7e78cf42459d447615f828ff7e9ea59bee7769bf3cb77e</hash>\n-        <hash alg=\"SHA3-256\">6deabf009c9b593e6656563a045e0895f3616f4b713a24a6d23fb50ee3fd0b80</hash>\n-        <hash alg=\"SHA3-512\">6f0d9c5c501e02094d06f0310c27d930a156424b3ae6479a21bc7a1beb9c776b5cfdfb6e087ff360263bfd68a53b1568d7fe0ccb34e22aed47705f51fa4438f0</hash>\n+        <hash alg=\"MD5\">4e8d6cd31f7e6277280c95157ac7845a</hash>\n+        <hash alg=\"SHA-1\">f127fe5ee53404a8b3697cdd032dd1dd6a29dd77</hash>\n+        <hash alg=\"SHA-256\">41806757e1d26dae5d6db2ca7d4a5176eed2d6e709cd86564d4a11dab0601742</hash>\n+        <hash alg=\"SHA-512\">221b39b85145cf7c245acb7f2692a02b6c5816f8b1187a1a77942dd39de958c1b01ecd066682eb88244f87b2a47513d40b6c1e69ef49a43b2a07ba818f124e17</hash>\n+        <hash alg=\"SHA-384\">fa8d53b46cd3ddab0bd265d384a90c35efef6a02a7822aa6f79065cee68d78f6ad7c4d248dea7497af449845dc962730</hash>\n+        <hash alg=\"SHA3-384\">cf06cfeaba477f7738f089ba401fb841074681d1c7f465546cdf0e95751a8bf912493428876a7d9108eef83f637c6a1e</hash>\n+        <hash alg=\"SHA3-256\">efbad2de8683215936c56b3f8fd3492f1cc27c2ee77595a99c794e18777dec42</hash>\n+        <hash alg=\"SHA3-512\">2707d5513e49f6e3ea6dec96510d360cfc125dab164ae5d99a1dcbd628751640f625a70ed749dad66024ae9fd7725f1c6c7f76de7f5a6efc9d8208a9e01922f7</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/software.amazon.awssdk/aws-query-protocol@2.20.51?type=jar</purl>\n+      <purl>pkg:maven/org.slf4j/jcl-over-slf4j@2.0.7?type=jar</purl>\n       <modified>false</modified>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-git-java-sdk@1.6.0?type=jar\">\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-tool-java-sdk@1.6.0?type=jar\">\n       <group>org.jreleaser</group>\n-      <name>jreleaser-git-java-sdk</name>\n+      <name>jreleaser-tool-java-sdk</name>\n       <version>1.6.0</version>\n-      <hashes>\n-        <hash alg=\"MD5\">a82f264ee899604bfe6e634ec5a8818e</hash>\n-        <hash alg=\"SHA-1\">4c5ee97076b5bc0ae4474e6ac1ade64e60702a4f</hash>\n-        <hash alg=\"SHA-256\">ab59b4abd99100aae35f871d548c778a90f0e4aaad5d0eba94af15df688a5775</hash>\n-        <hash alg=\"SHA-512\">447286a510cd5b84f29275627ebf3bb6e930b6e150fa981c591f3266a354a46511a4a5d00cd13f95539541ed6e783641a9c9a4213c493cd7cf479780e427511f</hash>\n-        <hash alg=\"SHA-384\">f266e76c6698ecd59dcf197a55f09d8b567f9e8953e310bff7c0c617416df996ac53c5d9c4468b9b065f1816716ae3ea</hash>\n-        <hash alg=\"SHA3-384\">208684bb1093245f49be449e1a4966fadd1b4840b760aa0a89c861ae18820a63bc3f1b2d895c6e010849712394bb160e</hash>\n-        <hash alg=\"SHA3-256\">454d27e5726aae3f4a92c5da424f306eb159edf40da4da52619e9e878cb48b3a</hash>\n-        <hash alg=\"SHA3-512\">3a995062f0dfeaa46f17214c0c8179a3d8ad4ba71b4579448e16445e5661ba1102044e2d69fd9833b15b51620636f78aa8f9dec87fde449147f2185b5df5b3e6</hash>\n-      </hashes>\n-      <licenses/>\n-      <purl>pkg:maven/org.jreleaser/jreleaser-git-java-sdk@1.6.0?type=jar</purl>\n-      <modified>false</modified>\n-    </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.apache.commons/commons-jexl3@3.3?type=jar\">\n-      <group>org.apache.commons</group>\n-      <name>commons-jexl3</name>\n-      <version>3.3</version>\n-      <description>JEXL is a library intended to facilitate the implementation of scripting features in\n-        applications and frameworks written in Java.</description>\n-      <hashes>\n-        <hash alg=\"MD5\">3a332e3beb67b3a2a20bd0a950fc57c4</hash>\n-        <hash alg=\"SHA-1\">c76b4cfa436c3e79e04806e62656b09968c388ba</hash>\n-        <hash alg=\"SHA-256\">07b0ff6c5a10ffb2e2c02da9e2c0e2e6702df44178cfb76881f69447fc386014</hash>\n-        <hash alg=\"SHA-512\">879111d1c3ad021ea3961e49161b3ff6ba251044ffef1ca4d36d880d9a09b1f395e17eef221a13274303f44e116204ae4b2a3ee3e931f117fc901e321d59b5c6</hash>\n-        <hash alg=\"SHA-384\">7a268bf2c903be86813fcc7f06158abf79d558ee59ebf03470ebd06ca6e6d169beb1c3600e07c20c4f95fa7827fde841</hash>\n-        <hash alg=\"SHA3-384\">1803d239f17f7eeee6edb69d38c4473319fd4eeeb684eda5c38b577a7aaf42965ce41d9082d515d5007be9a0b0712d81</hash>\n-        <hash alg=\"SHA3-256\">01163da5e720b6d1f6bf8b6e9e398d26a1be92b3f18ef6089d218d54166b0c01</hash>\n-        <hash alg=\"SHA3-512\">8abdd72c14492340c05fd5d3555682a308ac00ac1b1e1e15ae38abc47f454f50db9e0727a49df72a50bf49f1447a6ca9dadc48b9ffd45a043bcbae9e5e050d3d</hash>\n-      </hashes>\n+      <description>Java SDK for Tools</description>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n           <url>https://www.apache.org/licenses/LICENSE-2.0</url>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/org.apache.commons/commons-jexl3@3.3?type=jar</purl>\n+      <purl>pkg:maven/org.jreleaser/jreleaser-tool-java-sdk@1.6.0?type=jar</purl>\n       <modified>false</modified>\n       <externalReferences>\n-        <reference type=\"issue-tracker\">\n-          <url>https://issues.apache.org/jira/browse/JEXL</url>\n-        </reference>\n         <reference type=\"vcs\">\n-          <url>https://gitbox.apache.org/repos/asf/commons-jexl.git</url>\n+          <url>https://github.com/jreleaser/jreleaser</url>\n         </reference>\n       </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.eclipse.jgit/org.eclipse.jgit@5.13.0.202109080827-r?type=jar\">\n-      <group>org.eclipse.jgit</group>\n-      <name>org.eclipse.jgit</name>\n-      <version>5.13.0.202109080827-r</version>\n-      <description>Repository access and algorithms</description>\n+    <component type=\"library\" bom-ref=\"pkg:maven/software.amazon.awssdk/arns@2.20.51?type=jar\">\n+      <group>software.amazon.awssdk</group>\n+      <name>arns</name>\n+      <version>2.20.51</version>\n+      <description>The AWS SDK for Java - Arns module holds the classes that are related to AWS ARN</description>\n       <hashes>\n-        <hash alg=\"MD5\">5a1f197785cb9c69d1241cb0f16937a2</hash>\n-        <hash alg=\"SHA-1\">32badd5adebd660424509344259ad3e409699ba2</hash>\n-        <hash alg=\"SHA-256\">dabf8369f0cdf8cf17b7f7da4bda9320c570bb754c88e0beb7b852812cf5cd25</hash>\n-        <hash alg=\"SHA-512\">768dbb3ba2649a7025338197b4703b414983e4608138719b0d69201f7f49e57e0454846b41b775b135b083f820824749da6121f20a812c4f155a97f09c9b15ac</hash>\n-        <hash alg=\"SHA-384\">deb24e724ace28ddbaf5e7a1fafaa449a49b97d3a5a53eb487a2ab90895f05684c48a839e3677643364ff965cc33af95</hash>\n-        <hash alg=\"SHA3-384\">e5aed5403b4c28624bc58be31601897555c94eb54e680f1ccb59992a643db24d0de465b7ae879b5ba29d56a132a87b69</hash>\n-        <hash alg=\"SHA3-256\">8ccc07758fbf1ac55028538890afe7d209c866ee019875ef15acfaea9ac7244f</hash>\n-        <hash alg=\"SHA3-512\">4725fff9b6067d70d4c82cbf549b16be521e839d5c8ecf605f9a71516ec78334e348cb2d3303afb7ba18ce464a68c1e195bb6fe673d9d4d6b8d75c84d0b4e101</hash>\n+        <hash alg=\"MD5\">8d826e61b6a82c3709cce4365d8e1d78</hash>\n+        <hash alg=\"SHA-1\">9305f0f4a9435df88bb5a35ec61aace0be0ce3c8</hash>\n+        <hash alg=\"SHA-256\">9885a1486c514fac5d44405fd0c9f1a2eb0eb62a5db669342058181e0f86edba</hash>\n+        <hash alg=\"SHA-512\">a4a7bc31322df09c81bcd9abea03cd0c8647ff69789bb06bc31284feab200ceeb65c41c2eea80c90056f1f54ac310e79d8dd1af892cae3ab80721bd34c3f9b0e</hash>\n+        <hash alg=\"SHA-384\">bbd8004e4d60a32794a6f9d779034d20a6b2c170117bd60e8f12dbd898d9216b41074624e66dee876ebf5c48845320b7</hash>\n+        <hash alg=\"SHA3-384\">8afbe17519ee08634c02adbae872d04c34e83325cd7319d3550e07cdd86fa8a5ff673adb392221e8eac777529cd85b31</hash>\n+        <hash alg=\"SHA3-256\">3fd520aafd89360244143e94b5b4e886cda217dbea4add63fa563b5d13482b8a</hash>\n+        <hash alg=\"SHA3-512\">3bd511652b05f6beaa7974a07b8630d6c2d3595ffa450aa2090d287adeaed87b4136a77702a6ae5d663c061902ae3e8c0846b6bb9ee4203d6a1a481b77191df4</hash>\n       </hashes>\n       <licenses>\n         <license>\n-          <id>BSD-3-Clause</id>\n+          <id>Apache-2.0</id>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/org.eclipse.jgit/org.eclipse.jgit@5.13.0.202109080827-r?type=jar</purl>\n+      <purl>pkg:maven/software.amazon.awssdk/arns@2.20.51?type=jar</purl>\n       <modified>false</modified>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.bouncycastle/bcpg-jdk15on@1.70?type=jar\">\n-      <group>org.bouncycastle</group>\n-      <name>bcpg-jdk15on</name>\n-      <version>1.70</version>\n-      <description>The Bouncy Castle Java API for handling the OpenPGP protocol. This jar contains the OpenPGP API for JDK 1.5 and up. The APIs can be used in conjunction with a JCE/JCA provider such as the one provided with the Bouncy Castle Cryptography APIs.</description>\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar\">\n+      <group>org.apache.httpcomponents</group>\n+      <name>httpclient</name>\n+      <version>4.5.13</version>\n+      <description>Apache HttpComponents Client</description>\n       <hashes>\n-        <hash alg=\"MD5\">01ddc3aa0289346f4db19d95039cefdb</hash>\n-        <hash alg=\"SHA-1\">062f72ec06f31a6c31a3f3355fce0384b21126d7</hash>\n-        <hash alg=\"SHA-256\">4f08f4aa74048824151c98dd3e92e7165ac30659834404f08a8e843bdad32847</hash>\n-        <hash alg=\"SHA-512\">4e240b7811ef90c090e83a181dace41da487555e4136221861b0060f9af6d8b316f2dd0472f747adb98ca5372f46055456ef04bdc0c3992188ab13302922fce9</hash>\n-        <hash alg=\"SHA-384\">d89dec6226112d13cbea461d84740699770dd7d8ad3f67ab65e7b49fd08a096a948e54da2e6a681925c4320f410bba37</hash>\n-        <hash alg=\"SHA3-384\">5e8e8ca63cc550a8f50b627c4dd051f0eb5c31b99ff53dabd7d5f5d1ed98d0dc1d4963a09fc0db32f8e0ff769a2a6e65</hash>\n-        <hash alg=\"SHA3-256\">77f28e7e22b3b3a8d7b667fb7f783847c4b11ee7208833636e09e8b38390fd51</hash>\n-        <hash alg=\"SHA3-512\">cb238dbb641c42c49b5801bdfa6432395e860c1a7485ba68e2d57887e3d22ff254718c6cbfa34c107bfb09d74e2f85c33b95f89dfa886e141a8247a0abf2b5c2</hash>\n+        <hash alg=\"MD5\">40d6b9075fbd28fa10292a45a0db9457</hash>\n+        <hash alg=\"SHA-1\">e5f6cae5ca7ecaac1ec2827a9e2d65ae2869cada</hash>\n+        <hash alg=\"SHA-256\">6fe9026a566c6a5001608cf3fc32196641f6c1e5e1986d1037ccdbd5f31ef743</hash>\n+        <hash alg=\"SHA-512\">3567739186e551f84cad3e4b6b270c5b8b19aba297675a96bcdff3663ff7d20d188611d21f675fe5ff1bfd7d8ca31362070910d7b92ab1b699872a120aa6f089</hash>\n+        <hash alg=\"SHA-384\">093ac3e2dde58e34aa70309c7305eb3c9b5be2509a9293f1672494da55479a86bd112e83326746dc7a32855472952b99</hash>\n+        <hash alg=\"SHA3-384\">cd6882e7868624164e460f2f3ea01466f863c0dcb902b031c656b57356f563be83b29530df41d88d634ed3d01fc9964d</hash>\n+        <hash alg=\"SHA3-256\">710b1d8d7dae0b8e4270756694ca9c83d64965f42d3b4170c609b14d47c2762c</hash>\n+        <hash alg=\"SHA3-512\">276fa6a6599dc89382d658115695cf4da6b0d39b34e9c349c17a5dbd64122eaee553bb9ed75c0378ec4a83be157c8aa39370662de3c9b8fd55ebc1dd608383e6</hash>\n       </hashes>\n       <licenses>\n         <license>\n-          <name>Bouncy Castle Licence</name>\n-          <url>https://www.bouncycastle.org/licence.html</url>\n-        </license>\n-        <license>\n-          <id>Apache-1.1</id>\n-          <url>http://apache.org/licenses/LICENSE-1.1</url>\n+          <id>Apache-2.0</id>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/org.bouncycastle/bcpg-jdk15on@1.70?type=jar</purl>\n+      <purl>pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar</purl>\n       <modified>false</modified>\n-      <externalReferences>\n-        <reference type=\"issue-tracker\">\n-          <url>https://github.com/bcgit/bc-java/issues</url>\n-        </reference>\n-        <reference type=\"vcs\">\n-          <url>https://github.com/bcgit/bc-java</url>\n-        </reference>\n-      </externalReferences>\n     </component>\n     <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-command-java-sdk@1.6.0?type=jar\">\n       <group>org.jreleaser</group>\n       <name>jreleaser-command-java-sdk</name>\n       <version>1.6.0</version>\n-      <hashes>\n-        <hash alg=\"MD5\">acbbfe01e59912d40bdaf2b516b8199d</hash>\n-        <hash alg=\"SHA-1\">f922261945a1a25999d8b4c95326c38f15b167e8</hash>\n-        <hash alg=\"SHA-256\">cc3bbe8d8a2cdcba73857752b9c2fbae3344c8597af7f37ac7cd0926b02d92ea</hash>\n-        <hash alg=\"SHA-512\">d40f5671c80589711087a7dc5e4148ffee88ffacbca4db3a5360c0827e2ccc0e3fe80ed95e9c4b91d8c29617dbf6171a8a849a652e9b7a472e906692cd792498</hash>\n-        <hash alg=\"SHA-384\">cc3b16425ab2505338e26c64b006157218391762d04cec9d4a9a2897ce33036a8cd6f6199b55c80e646bad434322c18c</hash>\n-        <hash alg=\"SHA3-384\">09fe1086a3bbfda7fa50c320ab4c60b056ea2b37002f281bb413a17cc4f8846be4a9bcaf4b6f507a51af74474b189bd1</hash>\n-        <hash alg=\"SHA3-256\">ef9ad8cd599799ffa70998131cfbaf2985c3070a8ff727becac8ceb5480ab900</hash>\n-        <hash alg=\"SHA3-512\">a62c41fdaca8e1849d661ffded5af92bf09e43afc3497c5f923f5d7463756116dabef382cd8649a71473e9e938e698734b09e3d81153a852ff278876cd7ba8c9</hash>\n-      </hashes>\n-      <licenses/>\n-      <purl>pkg:maven/org.jreleaser/jreleaser-command-java-sdk@1.6.0?type=jar</purl>\n-      <modified>false</modified>\n-    </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-java-sdk-commons@1.6.0?type=jar\">\n-      <group>org.jreleaser</group>\n-      <name>jreleaser-java-sdk-commons</name>\n-      <version>1.6.0</version>\n-      <hashes>\n-        <hash alg=\"MD5\">a616e3581e826bb4e01c9ec7978bc4d2</hash>\n-        <hash alg=\"SHA-1\">187c502ed479e9f83427cccfd7cd47242bd5f51d</hash>\n-        <hash alg=\"SHA-256\">8043134ad00433ee9cb395081ac9e0cc479328a1589b2b67c310cfd654245ebf</hash>\n-        <hash alg=\"SHA-512\">03ed834cedf5f6b85f8d98defe2790fa0ca2971c686b46dc7c8616d130034785a6969e144ba6aa5d6f4d9093ccf888a7e4995c87d7acf862ece913e9696c550a</hash>\n-        <hash alg=\"SHA-384\">7f0545affd13b0f4298d047137850aba201b93bcd58d6625510bac088c98661c6ce3b1edb38ac7f22d765d22365a47bc</hash>\n-        <hash alg=\"SHA3-384\">9b4346b3b735ed788ca5e79e7fa4709d1e8edc60e994297f6a3fccd34d591474ab7d895720639e0739605b10d6722e60</hash>\n-        <hash alg=\"SHA3-256\">574b9169bf34389e320331ab5cf3ff85c61cb36197acfb0feb040412313326ca</hash>\n-        <hash alg=\"SHA3-512\">c4f1d762db1498baf5f6268619915811f933433ff78388429e564a3c7d94ee89867648fe79d1718dabe74c7927be99152d3475e5547f5b0f4c5d1b53ce7f75d2</hash>\n-      </hashes>\n-      <licenses/>\n-      <purl>pkg:maven/org.jreleaser/jreleaser-java-sdk-commons@1.6.0?type=jar</purl>\n-      <modified>false</modified>\n-    </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.2?type=jar\">\n-      <group>com.fasterxml.jackson.core</group>\n-      <name>jackson-annotations</name>\n-      <version>2.14.2</version>\n-      <description>Core annotations used for value types, used by Jackson data binding package.</description>\n-      <hashes>\n-        <hash alg=\"MD5\">10d19982a8890f6eb37557af2f58e272</hash>\n-        <hash alg=\"SHA-1\">a7aae9525864930723e3453ab799521fdfd9d873</hash>\n-        <hash alg=\"SHA-256\">2c6869d505cf60dc066734b7d50339f975bd3adc635e26a78abb71acb4473c0d</hash>\n-        <hash alg=\"SHA-512\">a978384791bdc074df8039ffc95bb93f0f60d14d476861ee2a0ce208b33a991c486a07345cb80559252c3ff1dea14d3efb818c19bdc18435946dc8754d8e6ee3</hash>\n-        <hash alg=\"SHA-384\">d5111c69020666689414921ae4a8950f9fbdf86dec1360f6827beeee9ebd3f78db74e69c76e0becaba47eb34fdaaeb5a</hash>\n-        <hash alg=\"SHA3-384\">53b1a8891482e16a7d8849251cb0dcd1aacf6aaa2161a73589d9742ad96763e384d426d04db762e56fc4536f4e719084</hash>\n-        <hash alg=\"SHA3-256\">14f7b3c51c96f7429f7c60a69e3b7e4f9f2207820141f197d56b57018ffd5640</hash>\n-        <hash alg=\"SHA3-512\">75e4e4fb847fdacdd497cf6b340362581ab4091120ccf2ec32a273709d336af0f78c90ce12b2dd1d17354aa08583af0d3ded89bb415720f45f2d9c110d71dd7a</hash>\n-      </hashes>\n+      <description>JReleaser command SDK</description>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.2?type=jar</purl>\n+      <purl>pkg:maven/org.jreleaser/jreleaser-command-java-sdk@1.6.0?type=jar</purl>\n       <modified>false</modified>\n       <externalReferences>\n         <reference type=\"vcs\">\n-          <url>https://github.com/FasterXML/jackson-annotations</url>\n+          <url>https://github.com/jreleaser/jreleaser</url>\n         </reference>\n       </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/software.amazon.awssdk/protocol-core@2.20.51?type=jar\">\n+    <component type=\"library\" bom-ref=\"pkg:maven/software.amazon.awssdk/sdk-core@2.20.51?type=jar\">\n       <group>software.amazon.awssdk</group>\n-      <name>protocol-core</name>\n+      <name>sdk-core</name>\n       <version>2.20.51</version>\n-      <description>The AWS SDK for Java - module holds the core protocol classes</description>\n+      <description>The AWS SDK for Java - SDK Core runtime module holds the classes that are used by the individual service\n+        clients to interact with\n+        Amazon Web Services. Users need to depend on aws-java-sdk artifact for accessing individual client classes.</description>\n       <hashes>\n-        <hash alg=\"MD5\">3d0b4657b8d3be3a31000ffe35887b87</hash>\n-        <hash alg=\"SHA-1\">468ae64371ed038de20ff7dc0a390bc10df83b53</hash>\n-        <hash alg=\"SHA-256\">e250389e15ca5e9359982d506852f25f87f839a5e4db1d7127f2b3e85fff4d13</hash>\n-        <hash alg=\"SHA-512\">dc61e56b5608bedd5a5e1cf2bee29566b89a06e8523d19b3a8290eda59d261baa55d34525e922e52c93a6af6191eb526d1bf5ae2946cf3b2c12eb8bedf173549</hash>\n-        <hash alg=\"SHA-384\">356fceb1793b17cc9a4c3ddf4c4c0fb167a318c1f301f8dd78fc38802466b6ae6061abb6c526255360c93f0ac00ee867</hash>\n-        <hash alg=\"SHA3-384\">9eb4084ced509ca754d3c3018d137053c064dd593a339874c4e2bbb26d2d746d4a0f92268e1750af5856df5e61d5ed8b</hash>\n-        <hash alg=\"SHA3-256\">c403de7790b63e51b2c3b0df3e19687767157e99ed182c7b23a839ee4eec7165</hash>\n-        <hash alg=\"SHA3-512\">8e3d1d826376124f0530614cb28ea44723e7eb11c7ee8f44aa56b4c905eec7058a4e9dd2e40c541dfc814575facd612b9f5e28dbbf1c7c03f55b91f6d3721290</hash>\n+        <hash alg=\"MD5\">b7d192ccc4a7098ffbfb3a5241d560d8</hash>\n+        <hash alg=\"SHA-1\">e3f9e8708dd477b58253125f1d828deaeaf94d69</hash>\n+        <hash alg=\"SHA-256\">eee62acd22433ce285d8b735356c72355a8827f587933d969cf51dc5fcaa0140</hash>\n+        <hash alg=\"SHA-512\">285401aa6bbb998330bc97c109bb6c79fc329de23c9729742c48353156a6a3cd7d2c356a97ecc9f795dfa9be50762c6a5d76b92c13fcd06a34e5ea7cd959f065</hash>\n+        <hash alg=\"SHA-384\">50f7536e6d95d0c0596983b19c61cbd5ea359c265a527e87816399df0579bdcef3563a470324fa8602c7db97aa82340b</hash>\n+        <hash alg=\"SHA3-384\">f0487bd4188e85d07d502b82bf55043be4c88518163d315af85b2f91f50c6bff657e0c3b2fb9013513948b3cbe9ab2eb</hash>\n+        <hash alg=\"SHA3-256\">f7d6979f92addad31ef970812b1d9e49e1ad170aeec6d341598a4fe4d0897a4e</hash>\n+        <hash alg=\"SHA3-512\">88f5ffc890d90d9988e05f9a84f609894aa173e0d9e1ea0c908243c0ffbf97460dc643b2709793103cae1b2f098e87ef8cdda93003de1915763aa394b8800766</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/software.amazon.awssdk/protocol-core@2.20.51?type=jar</purl>\n+      <purl>pkg:maven/software.amazon.awssdk/sdk-core@2.20.51?type=jar</purl>\n       <modified>false</modified>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/software.amazon.awssdk/regions@2.20.51?type=jar\">\n-      <group>software.amazon.awssdk</group>\n-      <name>regions</name>\n-      <version>2.20.51</version>\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-utils@1.6.0?type=jar\">\n+      <group>org.jreleaser</group>\n+      <name>jreleaser-utils</name>\n+      <version>1.6.0</version>\n+      <description>JReleaser utility classes</description>\n       <hashes>\n-        <hash alg=\"MD5\">f87d7272055f055781679f6aae7df61a</hash>\n-        <hash alg=\"SHA-1\">a62a4122d49bc6f5fa9c3aea521dac03d13273dc</hash>\n-        <hash alg=\"SHA-256\">91b9cc0c22554bb7b8c69da48d8861b7ac1213b1977af5393bc56293c005f542</hash>\n-        <hash alg=\"SHA-512\">32ea2e890ebdac92a11f2276229ee244cbb209ab141e8e12327bd191b362ad6f6c40e317d18ef8d6dbed1efd4d506518b4de861be411e31d5e30a6f92b5b5b55</hash>\n-        <hash alg=\"SHA-384\">329e538463fe110b18a3fe1fe2e34eea2257be993dbdb2254f8833a7e3df3b30e35c8da3e01544e83868b543d813ac53</hash>\n-        <hash alg=\"SHA3-384\">433ddf50101f015923dd8e0fd35bcae05595651221e414f9f91cdda10d70738969d3e6c94d0f1fd47380e9c757bd754d</hash>\n-        <hash alg=\"SHA3-256\">e31cc79fcc3025aa48f9a32e80e5abd36b0fb1be2e297bc39dfb99f429443233</hash>\n-        <hash alg=\"SHA3-512\">0ef5edfa599efb2b569ad41d53d337e2eea8c79c38a37c8e0ff0d5a14f2b675281678e5cc5991748d5ad4868665974072bd89d6bae613cf8dc8f2f847248296a</hash>\n+        <hash alg=\"MD5\">ca784b5aa352b016a37b393e9e500325</hash>\n+        <hash alg=\"SHA-1\">b0dde5ebbe5a98e5fa90b101dca5ad56e92c49c8</hash>\n+        <hash alg=\"SHA-256\">02b038af2f098d6019b94f4f4e55b8f901d2b5b4a072b083b23e47bd6a3e23cd</hash>\n+        <hash alg=\"SHA-512\">9b5e03766473ee854f877182a758a4842a9566772405af73cd200388eeeb981712e6a3e57f4f2f14f09a912b0cad625a75c5441b57eaa238699beabf327dd56a</hash>\n+        <hash alg=\"SHA-384\">ebc800a8a0a6d19ac2bc922598f8913df5a5eb972dc46ba4eadec5034538c9c95866839670dbf92ca93b075dcb659a0c</hash>\n+        <hash alg=\"SHA3-384\">ed0ba35caf8b7d7dc67d7350617b6cbd54de336634fd5927f03768a89f74ede798ecf343964ef0484302ee262617756b</hash>\n+        <hash alg=\"SHA3-256\">b81154ce5c428820626ee1a99e7f9bbe63d4803f7f311744a26bb8331fb193cc</hash>\n+        <hash alg=\"SHA3-512\">b6429f8944cedd026f7b0c30328f8b5e2717493624cee82df48f7e69c8fe8a26b0542d447b1795c7fad7ff90affadcc087d69a576d69cbaccf3ccf1ca962be56</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/software.amazon.awssdk/regions@2.20.51?type=jar</purl>\n+      <purl>pkg:maven/org.jreleaser/jreleaser-utils@1.6.0?type=jar</purl>\n       <modified>false</modified>\n+      <externalReferences>\n+        <reference type=\"vcs\">\n+          <url>https://github.com/jreleaser/jreleaser</url>\n+        </reference>\n+      </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/software.amazon.awssdk/utils@2.20.51?type=jar\">\n-      <group>software.amazon.awssdk</group>\n-      <name>utils</name>\n-      <version>2.20.51</version>\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.apache.commons/commons-compress@1.22?type=jar\">\n+      <group>org.apache.commons</group>\n+      <name>commons-compress</name>\n+      <version>1.22</version>\n+      <description>Apache Commons Compress software defines an API for working with\n+compression and archive formats.  These include: bzip2, gzip, pack200,\n+lzma, xz, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4,\n+Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.</description>\n       <hashes>\n-        <hash alg=\"MD5\">c66858bba8fdc222d29f6b6d5f127894</hash>\n-        <hash alg=\"SHA-1\">295479c04f8db65535aba0f4b3e642304c09ade4</hash>\n-        <hash alg=\"SHA-256\">89282e9f885914cc3e4951bd46ba83f75c11d88554e19bbed47175c0cc10ac0c</hash>\n-        <hash alg=\"SHA-512\">348f54494d88f5c5123f7b177b1e7699a9ff6772db7c72139d5cce62cdbddb82d4022331857ed21b5a9d6aa7acd70468b166893a08ea30959ee9de781e50f887</hash>\n-        <hash alg=\"SHA-384\">7604765fcdbc2879ed8445af66d0dfcae508d834a53ffe6cf12546fa3703817d0425051bfc51014faeaf00d3c42f7181</hash>\n-        <hash alg=\"SHA3-384\">6a344e509536b26fa1ebbf2207e0194bb455d620d336fd10f7eda276376a39dd09d24f6ef06ba7f3cbf73e6918bb8174</hash>\n-        <hash alg=\"SHA3-256\">4fb56af6eadac87597f0d9f86bf4095caaf18102f625b410f0811bc63ed7208d</hash>\n-        <hash alg=\"SHA3-512\">cdb73cb9cf1537f7fc3305df7ffbaa1ebaaa9ae36f711e2609e0673fef190d17bd2d5e867cd7f73a4cf3dd3144e6156e6661974e6038c90493ffdeeca96eb39e</hash>\n+        <hash alg=\"MD5\">f1e4db16fee4291212d91409313a8086</hash>\n+        <hash alg=\"SHA-1\">691a8b4e6cf4248c3bc72c8b719337d5cb7359fa</hash>\n+        <hash alg=\"SHA-256\">53d04a0efc7223baecaa303bd5d298eb0600e6b82b4076f9cecd558b97ba760b</hash>\n+        <hash alg=\"SHA-512\">2d64fa6cd081fff5d73ee662a82f6186991fc13b4bdaee18b5f1bdcab06d9acb70e3713d18b296337791448251fbd6768bd84afaa817a10547652d0cfa885563</hash>\n+        <hash alg=\"SHA-384\">295d7f69d151abbd784e1c4d021c77ce43e129bb5bda0c55762b32d77c8607863383297674ec8a212ea3dfe4007b0044</hash>\n+        <hash alg=\"SHA3-384\">af04eb1b4647b1a041c5ee994c2c7a32556b5410b916fedb69905f166938baa43ba54fdc67084205794c02680d3c6349</hash>\n+        <hash alg=\"SHA3-256\">40f2960e82adfb171b0c5430271fdb0c0dae243aaf9b08021df54fd4d4a3a0b0</hash>\n+        <hash alg=\"SHA3-512\">f2c445f77bda3ef230a2b78ea88d86e48a7d6db36805f841d5cffe1f178842a161b2fda0b0d60162af210f18ed9c5bb9579c963291c26f715c1aa389d9a6785c</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/software.amazon.awssdk/utils@2.20.51?type=jar</purl>\n+      <purl>pkg:maven/org.apache.commons/commons-compress@1.22?type=jar</purl>\n       <modified>false</modified>\n+      <externalReferences>\n+        <reference type=\"issue-tracker\">\n+          <url>https://issues.apache.org/jira/browse/COMPRESS</url>\n+        </reference>\n+        <reference type=\"vcs\">\n+          <url>https://gitbox.apache.org/repos/asf?p=commons-compress.git</url>\n+        </reference>\n+      </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/com.github.luben/zstd-jni@1.5.4-1?type=jar\">\n-      <publisher>com.github.luben</publisher>\n-      <group>com.github.luben</group>\n-      <name>zstd-jni</name>\n-      <version>1.5.4-1</version>\n-      <description>JNI bindings for Zstd native library that provides fast and high compression lossless algorithm for Java and all JVM languages.</description>\n+    <component type=\"library\" bom-ref=\"pkg:maven/software.amazon.awssdk/metrics-spi@2.20.51?type=jar\">\n+      <group>software.amazon.awssdk</group>\n+      <name>metrics-spi</name>\n+      <version>2.20.51</version>\n+      <description>This is the base module for SDK metrics feature. It contains the interfaces used for metrics feature\n+        that are used by other modules in the library.</description>\n       <hashes>\n-        <hash alg=\"MD5\">e787241d6ec56aac451be8b0d920c85b</hash>\n-        <hash alg=\"SHA-1\">291ccaacc039e41932de877303edb6af98a91c24</hash>\n-        <hash alg=\"SHA-256\">f0469d891127dc5ae6bd2df93a5aa38c4d79bcd5f360fbb88c2785b52a572349</hash>\n-        <hash alg=\"SHA-512\">368916f0057d69fa4ba3768f6f617291ce4083b89913e46c2daa68cc94c48b92e0ca626241486f34a4d154502eb77b19e82c16c68b341ecfc82ccc0520f8d4a9</hash>\n-        <hash alg=\"SHA-384\">7e72184873689fa286d93d88f69f8baa24f818fcd61105a14332fbb5ed254363c0969afa98befd797a3762577bc77993</hash>\n-        <hash alg=\"SHA3-384\">1302636797b291dbbe19f39bdeb66160c1317b395a0a9360ba93aeaa262de7ad8de7257e6a997a9c659fdf53b3367ee6</hash>\n-        <hash alg=\"SHA3-256\">54505ed16257a55330bb44c76719a687251d2623fa5e50a192b54c5067573255</hash>\n-        <hash alg=\"SHA3-512\">6e01cc9654c2d68c36a284e23c388267ac7013d534cceed0b6ab44679a6bbb6d03d4cfc52c967c4e76dbd5b8963c268e40d9890c927866ea00824821b0ecb82d</hash>\n+        <hash alg=\"MD5\">6d4145875ba12db8f7e3dac57e9ec0fb</hash>\n+        <hash alg=\"SHA-1\">b878ceda314f2bb0820afcf7eca3c5bfa7a16a37</hash>\n+        <hash alg=\"SHA-256\">ffa8629a48d23b175def8de4ef73026f399dad55345f7c56fa6772f2c2089dc7</hash>\n+        <hash alg=\"SHA-512\">bcc1aa5a3930ecc6e2568e240fd48dee8525666dc60e22de99c075dbe931d191f77cd47fd8ebcda7db2e8b3c0d64492f28d01d949a36b504cd345d8f0d1e04d3</hash>\n+        <hash alg=\"SHA-384\">f0065e7b61fa109e8785e7cd22173e362fa6253ae7eb482802b968faa9e7f0d660fe9eb684c719852087e057878bd8fc</hash>\n+        <hash alg=\"SHA3-384\">8c7cca3f3a754f4f5057f073eb525a50c339d8dec1c867ca0c8d0b4afe037ed63fb86b530812b786a74d0ee9605fe02a</hash>\n+        <hash alg=\"SHA3-256\">24844edfd3c2bc025d03d3d7d77c7fe8599210b5945e3e417d137f0edb81ebee</hash>\n+        <hash alg=\"SHA3-512\">5a42a47951ed5c05fbd1276794c23cc863746b01ea0ee6e85897eca401392b0bca77b8d284b53e68a3bd5df618f7d3637a0a7e2387c501f98db6bbd5f17546e6</hash>\n       </hashes>\n       <licenses>\n         <license>\n-          <id>BSD-2-Clause</id>\n+          <id>Apache-2.0</id>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/com.github.luben/zstd-jni@1.5.4-1?type=jar</purl>\n+      <purl>pkg:maven/software.amazon.awssdk/metrics-spi@2.20.51?type=jar</purl>\n       <modified>false</modified>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/io.github.openfeign.form/feign-form@3.8.0?type=jar\">\n-      <group>io.github.openfeign.form</group>\n-      <name>feign-form</name>\n-      <version>3.8.0</version>\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.reactivestreams/reactive-streams@1.0.3?type=jar\">\n+      <group>org.reactivestreams</group>\n+      <name>reactive-streams</name>\n+      <version>1.0.3</version>\n+      <description>A Protocol for Asynchronous Non-Blocking Data Sequence</description>\n       <hashes>\n-        <hash alg=\"MD5\">ab48cdaa9aecefe5e938873ba2db3bb0</hash>\n-        <hash alg=\"SHA-1\">3083889996b18443c275a352d3ab4bc6c8321598</hash>\n-        <hash alg=\"SHA-256\">b21d37321b390995c90b5dbb4ff0c33f09d1cc7768207cc0da910ad20bf58961</hash>\n-        <hash alg=\"SHA-512\">3a1718c21e4caffcd5f686d2cde011b2f72a026d03caa03b876ad6e7c8c40b7bd59189eed6efa0654bf988a438775ef2c429fae497d502c1806c8c4d9d474c2e</hash>\n-        <hash alg=\"SHA-384\">02b96ee7cb8c67cdfe63422247035cbb003b7423a82756714d36de926118ac5e96c407fd324090c851962c63f7d4fd6f</hash>\n-        <hash alg=\"SHA3-384\">0d63a4c22216be6259584b62d3753a86220ea181a002641cda45de153501272fd79b7064d21bdee0ecd8129194fd7c3e</hash>\n-        <hash alg=\"SHA3-256\">ffc2832df09d0edf0251c5e6def39b6c36fd2c02c55ad29f0e63e3160cb709e1</hash>\n-        <hash alg=\"SHA3-512\">c2013da332e97e32962ee34459c5834b04ab2f6598960cb06e4f247a2683ced3fac3919d15151be4dae083c74911c7ead1906faabfc8a7cb6245fcd7138ef0df</hash>\n+        <hash alg=\"MD5\">69122b098fff1c6b1bf2cd3b355e7e03</hash>\n+        <hash alg=\"SHA-1\">d9fb7a7926ffa635b3dcaa5049fb2bfa25b3e7d0</hash>\n+        <hash alg=\"SHA-256\">1dee0481072d19c929b623e155e14d2f6085dc011529a0a0dbefc84cf571d865</hash>\n+        <hash alg=\"SHA-512\">aafc86186d82b4f3bd44ef7f955978481172eab267d208aa80b24f8ca218bd902d69b587fcae2fe44a888b7a9f81fc5a209e837958307fdc0ee815248f7065f9</hash>\n+        <hash alg=\"SHA-384\">dde10163531896f3b60261795a977cea1d0114514e8fc95f1ac4b6f34789c4b78c4c83ead210901a2edb3cae9f113ed4</hash>\n+        <hash alg=\"SHA3-384\">4f9e101774f39c8ebcb2ccd3f2fe996a1f99bd879fa34ac9ba319e824752f6bdc6159d242497d38587d7191bba796e3a</hash>\n+        <hash alg=\"SHA3-256\">45c5459f651963c5797e32c87e3b8456238229f9f9e64f543eb21d6a6b7a812e</hash>\n+        <hash alg=\"SHA3-512\">9edc79ccfd2edabe1339ad79a10137cd0f1614671f976d6a8a603428b8e5179c9a6afbf4f9fcd44e6e3795be5c487cc5aa97a1d3e6d9a3e88a62d3f4de60a2ab</hash>\n       </hashes>\n       <licenses>\n         <license>\n-          <id>Apache-2.0</id>\n+          <id>CC0-1.0</id>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/io.github.openfeign.form/feign-form@3.8.0?type=jar</purl>\n+      <purl>pkg:maven/org.reactivestreams/reactive-streams@1.0.3?type=jar</purl>\n       <modified>false</modified>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/software.amazon.awssdk/auth@2.20.51?type=jar\">\n-      <group>software.amazon.awssdk</group>\n-      <name>auth</name>\n-      <version>2.20.51</version>\n-      <description>The AWS SDK for Java - Auth module holds the classes that are used for authentication with AWS services</description>\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar\">\n+      <group>org.apache.httpcomponents</group>\n+      <name>httpcore</name>\n+      <version>4.4.16</version>\n+      <description>Apache HttpComponents Core (blocking I/O)</description>\n       <hashes>\n-        <hash alg=\"MD5\">7eeb2fd8646413078f9d4293ce141dc9</hash>\n-        <hash alg=\"SHA-1\">0cbc50040e2108a7dfcee1a7c54a1b7724aac5d2</hash>\n-        <hash alg=\"SHA-256\">2dc6383205e0787117ba5fe3eb882f7f70d07210a1c41881697d5871fd9740e8</hash>\n-        <hash alg=\"SHA-512\">ee92470920a88d1b4a4bbc4a419fb901281b2a397e3c48aa8f8b6d424df86d9b18fb42ee2acba06d606b4e74a14bdc6666a9420756f9e06298d9dcf8d2cd7418</hash>\n-        <hash alg=\"SHA-384\">f39c508f04250b447a1dde6f249d45752b51fd34ace007a6cee006189a827ac2a6d28a47e4b43ee8f7d683135105af3c</hash>\n-        <hash alg=\"SHA3-384\">d9a669123cdfee1dd620894d4e1518c52fdddd6980312a58db38d0f177d81369c33e59d1bcc83e34cc962c2a17cbc0da</hash>\n-        <hash alg=\"SHA3-256\">e63b21952ed1dec5ea41a67f2c739af17f62634a81575770fc07b71d0e994b55</hash>\n-        <hash alg=\"SHA3-512\">3832c4342ae4e811cb2ce9c0182fadf3e7096cb936af1e6e77b47ed404900ba123a09a0c54d2f62f9ca25c9955909e9ed7ce47a6d49691af2923f9aa1425efd5</hash>\n+        <hash alg=\"MD5\">28d2cd9bf8789fd2ec774fb88436ebd1</hash>\n+        <hash alg=\"SHA-1\">51cf043c87253c9f58b539c9f7e44c8894223850</hash>\n+        <hash alg=\"SHA-256\">6c9b3dd142a09dc468e23ad39aad6f75a0f2b85125104469f026e52a474e464f</hash>\n+        <hash alg=\"SHA-512\">168026436a6bcf5e96c0c59606638abbdc30de4b405ae55afde70fdf2895e267a3d48bba6bdadc5a89f38e31da3d9a9dc91e1cab7ea76f5e04322cf1ec63b838</hash>\n+        <hash alg=\"SHA-384\">ba9ceaee1a37ca3201d6a1315ecb0327b495489efd0baa155c219c475df8d3eb69fe77ab0026563db406497626da6562</hash>\n+        <hash alg=\"SHA3-384\">b9dc44dcc7cc86d5036f26d54c4003a2d72808ae7b07a0808bb53505c6d4281b5ad213eb1f3d0fef1113dec57cb0dfe1</hash>\n+        <hash alg=\"SHA3-256\">fd8ab51846476c6c18822151c9ec07b39a9633010b5d20ea937fc6910407bc64</hash>\n+        <hash alg=\"SHA3-512\">b42fa528242981a9d70e4f68ab75a24292df5112c44c21b6f18cb9201ce747885ba1d4dc69bc3d14d0da46a6c2638f937c11bc45749abeb55dc89ddada90cdda</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/software.amazon.awssdk/auth@2.20.51?type=jar</purl>\n+      <purl>pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar</purl>\n       <modified>false</modified>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/io.github.openfeign/feign-httpclient@12.3?type=jar\">\n-      <group>io.github.openfeign</group>\n-      <name>feign-httpclient</name>\n-      <version>12.3</version>\n-      <description>Feign Apache HttpClient</description>\n+    <component type=\"library\" bom-ref=\"pkg:maven/commons-io/commons-io@2.11.0?type=jar\">\n+      <group>commons-io</group>\n+      <name>commons-io</name>\n+      <version>2.11.0</version>\n+      <description>The Apache Commons IO library contains utility classes, stream implementations, file filters,\n+file comparators, endian transformation classes, and much more.</description>\n       <hashes>\n-        <hash alg=\"MD5\">4ec31fa7f187c15f9967c7ffcf714449</hash>\n-        <hash alg=\"SHA-1\">0ea51fdb4797c3ab62e1f8a726d4e02cf522dba2</hash>\n-        <hash alg=\"SHA-256\">3a2833e18cc868bff19d6320f22054f96995dc073ed27edfeb2d83996d2ef37c</hash>\n-        <hash alg=\"SHA-512\">3440afa129150c035670cd098e6eba6f676afc82db2db53a10b20621e30658b411d820652e4668dab5ca615f599a41a06dc826378b5e783f88f26c2cddfce8ed</hash>\n-        <hash alg=\"SHA-384\">b8dc38126b28fb486d459e23ae61a34073f16f0ef7ec37f49636919d0fd5a8d86354d76314462dba94efd4f613db92ef</hash>\n-        <hash alg=\"SHA3-384\">7c4161078011223122067406e5ad6efedfcf45c71d6e081f37e3fba1c73578c748d5a5e60d372a5fa7159ec7737e71bb</hash>\n-        <hash alg=\"SHA3-256\">b6d851642b9a5628dbe3cab5706c9d434f1d59ec881cd5cdf6fae84f644eb7c1</hash>\n-        <hash alg=\"SHA3-512\">9b3b7edc25efc7345a9cc7b2fe0eccefd57fa40d62e6a85b4a698827b9c34ff568236d591f6d5645de7eb275be2b10aee80f42881f6068f0b1c38f274faf4c5f</hash>\n+        <hash alg=\"MD5\">3b4b7ccfaeceeac240b804839ee1a1ca</hash>\n+        <hash alg=\"SHA-1\">a2503f302b11ebde7ebc3df41daebe0e4eea3689</hash>\n+        <hash alg=\"SHA-256\">961b2f6d87dbacc5d54abf45ab7a6e2495f89b75598962d8c723cea9bc210908</hash>\n+        <hash alg=\"SHA-512\">5bd78eed456ede30119319c5bed8e3e4c443b6fd7bdb3a7a5686647bd83094d0c3e2832a7575cfb60e4ef25f08106b93476939d3adcfecf5533cc030b3039e10</hash>\n+        <hash alg=\"SHA-384\">114f1e324d90ad887c177876d410f5787a8e8da6c48d4b2862d365802c0efded3a88cb24046976bf6276cadad3712f0f</hash>\n+        <hash alg=\"SHA3-384\">80288c03ad4d80d69f91d056ffc5570d49a9c76bf54ad2dff0121ecde26a560df76d05156f281f5c6db2a38ff07a873d</hash>\n+        <hash alg=\"SHA3-256\">5adfb5ccaf5f21a549422f426118a9542673926fcd18c68390cf813e791dcf6c</hash>\n+        <hash alg=\"SHA3-512\">7573f47f0babb53cefdc7c2309a0b982d800139064537b0797da442853d081010ad7c3c74a500598a0f800639a5d540eca21963ea652c68613907059bd4278c2</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/io.github.openfeign/feign-httpclient@12.3?type=jar</purl>\n+      <purl>pkg:maven/commons-io/commons-io@2.11.0?type=jar</purl>\n       <modified>false</modified>\n+      <externalReferences>\n+        <reference type=\"issue-tracker\">\n+          <url>https://issues.apache.org/jira/browse/IO</url>\n+        </reference>\n+        <reference type=\"vcs\">\n+          <url>https://gitbox.apache.org/repos/asf?p=commons-io.git</url>\n+        </reference>\n+      </externalReferences>\n     </component>\n     <component type=\"library\" bom-ref=\"pkg:maven/org.tukaani/xz@1.9?type=jar\">\n       <group>org.tukaani</group>\n       <name>xz</name>\n       <version>1.9</version>\n       <description>XZ data compression</description>\n       <hashes>\n@@ -482,175 +372,141 @@\n       <modified>false</modified>\n       <externalReferences>\n         <reference type=\"vcs\">\n           <url>https://git.tukaani.org/?p=xz-java.git</url>\n         </reference>\n       </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-model-impl@1.6.0?type=jar\">\n-      <group>org.jreleaser</group>\n-      <name>jreleaser-model-impl</name>\n-      <version>1.6.0</version>\n-      <hashes>\n-        <hash alg=\"MD5\">d2760fed3ab0f395c3ec08c3f7493d52</hash>\n-        <hash alg=\"SHA-1\">37f35b86cc5bcdf8c7d306d97884c2d89fa742d5</hash>\n-        <hash alg=\"SHA-256\">284a61227c9f031b6b6928bfef76eeea45c97e6053b7a1190e3dd64c0effd8df</hash>\n-        <hash alg=\"SHA-512\">81899b65d3eb10b0dac885ee17b45822d12d5746141876ef2573b0afaec13c92187ebf8a6c446ce002f25f8bc3d40f1a88e1c8c548bd35a556efc86d9f5ed809</hash>\n-        <hash alg=\"SHA-384\">c961c3d7d900e27341988545b53d9bc8f89275e700799e41b56dc43444173e1bf962e00f96026de0fee5894594d40d6f</hash>\n-        <hash alg=\"SHA3-384\">984a6c6ab7487eeb35b3aa8d87754d4dd55bdcbcce9239bd0ec17b1ca63e1a66e4f34767476bd5b79e0998477ccc7c35</hash>\n-        <hash alg=\"SHA3-256\">a5b874d301532774b825877e6d29045492c60e20a00d55d096e0a3b371885a41</hash>\n-        <hash alg=\"SHA3-512\">83babeb5dc661f2a4f4082872615c1c70719c66ac3f2071f367a82d1b7e44390121d4e59ace75f0fdbc66f5277c306242ee491de2268d49bc5c9da4247b260e9</hash>\n-      </hashes>\n-      <licenses/>\n-      <purl>pkg:maven/org.jreleaser/jreleaser-model-impl@1.6.0?type=jar</purl>\n-      <modified>false</modified>\n-    </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/software.amazon.awssdk/apache-client@2.20.51?type=jar\">\n+    <component type=\"library\" bom-ref=\"pkg:maven/software.amazon.awssdk/aws-core@2.20.51?type=jar\">\n       <group>software.amazon.awssdk</group>\n-      <name>apache-client</name>\n+      <name>aws-core</name>\n       <version>2.20.51</version>\n+      <description>The AWS SDK for Java - Core runtime module holds the classes that are used by the individual service\n+        clients to interact with\n+        Amazon Web Services. Users need to depend on aws-java-sdk artifact for accessing individual client classes.</description>\n       <hashes>\n-        <hash alg=\"MD5\">883a34bacf829210ba8399ff6107698e</hash>\n-        <hash alg=\"SHA-1\">965650dfa90875767e69a56d41ae56f658b77b84</hash>\n-        <hash alg=\"SHA-256\">5b45a7336811c00346a6ac53b9a034e121c9a86739405457e803dbba546b3089</hash>\n-        <hash alg=\"SHA-512\">8a0739ff68f09a778e54b40b813d4c7507e4523913210aa3cc7196db07a0253952ccce4964ccddb9b332e9fed2b99ddd8170ae030104c00f879caa604b28b964</hash>\n-        <hash alg=\"SHA-384\">b98baedb6fd915a51ecf76e08103d2f9b48dcfc4c46d70fb1bea7dec010b57bed5091838614266f8d85c7bcb1694d90e</hash>\n-        <hash alg=\"SHA3-384\">9513030fc7eb334a1f1a90a5109c35c282823864c550ba8d9fa8edb9c097a834edc7c53faed3cb5dfe4b3b7a323daab9</hash>\n-        <hash alg=\"SHA3-256\">faedd3e1307755149f42000bbfb70cbea89c9f7b057aebe1edfb2968f1930606</hash>\n-        <hash alg=\"SHA3-512\">c32001445e7fb6dcf1442941c087253387bb0058bbf78fce710af7538bb86e4fc47a30c4e6a8b1035f53249a52deeefe2507439555c9bee74eadb93db6516e31</hash>\n+        <hash alg=\"MD5\">9f1facc51eaf0f96979038c8fa2b556a</hash>\n+        <hash alg=\"SHA-1\">637aa646f46cb19da5b5b0e7cff07ca36389b5aa</hash>\n+        <hash alg=\"SHA-256\">60e54a6305c7d7de1c5473b9a32da33e1b517ef77afb9ef9cba2407afda93b9f</hash>\n+        <hash alg=\"SHA-512\">be86cccfb7bc6207928af7369fb89b657eaad6797cdf3bd0191bee5f27a695cb35016944985826012a2712f3b6ef7e2dfdb1399bf752c7ab783b466a54588fa2</hash>\n+        <hash alg=\"SHA-384\">ba6fcf12fa29fe797202efc2f5e0b3fefe3fced71bda349867bd65b647c637db4fb4ef1f7b496f136d47bbfff4285cb3</hash>\n+        <hash alg=\"SHA3-384\">3e9c9d488660989bd06dbeb4d01914078d8ff109f3342a4518d5ff8de78ca546381cb1bf550eb7d3ed96984a5ba98c3b</hash>\n+        <hash alg=\"SHA3-256\">8ecb8982c24f5eed018da2a44e2ee1db25bcb522c08502a958dc47b39d3e7e58</hash>\n+        <hash alg=\"SHA3-512\">2da6b8f8baf2f1c20742f924923bd535d38ac8628537cee69672db31b21988aaede39680aaf0d6504d5b285a81ca38c55419192411164b6c799b45ab8f52d4a1</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/software.amazon.awssdk/apache-client@2.20.51?type=jar</purl>\n+      <purl>pkg:maven/software.amazon.awssdk/aws-core@2.20.51?type=jar</purl>\n       <modified>false</modified>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.apache.commons/commons-compress@1.22?type=jar\">\n-      <group>org.apache.commons</group>\n-      <name>commons-compress</name>\n-      <version>1.22</version>\n-      <description>Apache Commons Compress software defines an API for working with\n-compression and archive formats.  These include: bzip2, gzip, pack200,\n-lzma, xz, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4,\n-Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.</description>\n+    <component type=\"library\" bom-ref=\"pkg:maven/com.github.luben/zstd-jni@1.5.4-1?type=jar\">\n+      <publisher>com.github.luben</publisher>\n+      <group>com.github.luben</group>\n+      <name>zstd-jni</name>\n+      <version>1.5.4-1</version>\n+      <description>JNI bindings for Zstd native library that provides fast and high compression lossless algorithm for Java and all JVM languages.</description>\n       <hashes>\n-        <hash alg=\"MD5\">f1e4db16fee4291212d91409313a8086</hash>\n-        <hash alg=\"SHA-1\">691a8b4e6cf4248c3bc72c8b719337d5cb7359fa</hash>\n-        <hash alg=\"SHA-256\">53d04a0efc7223baecaa303bd5d298eb0600e6b82b4076f9cecd558b97ba760b</hash>\n-        <hash alg=\"SHA-512\">2d64fa6cd081fff5d73ee662a82f6186991fc13b4bdaee18b5f1bdcab06d9acb70e3713d18b296337791448251fbd6768bd84afaa817a10547652d0cfa885563</hash>\n-        <hash alg=\"SHA-384\">295d7f69d151abbd784e1c4d021c77ce43e129bb5bda0c55762b32d77c8607863383297674ec8a212ea3dfe4007b0044</hash>\n-        <hash alg=\"SHA3-384\">af04eb1b4647b1a041c5ee994c2c7a32556b5410b916fedb69905f166938baa43ba54fdc67084205794c02680d3c6349</hash>\n-        <hash alg=\"SHA3-256\">40f2960e82adfb171b0c5430271fdb0c0dae243aaf9b08021df54fd4d4a3a0b0</hash>\n-        <hash alg=\"SHA3-512\">f2c445f77bda3ef230a2b78ea88d86e48a7d6db36805f841d5cffe1f178842a161b2fda0b0d60162af210f18ed9c5bb9579c963291c26f715c1aa389d9a6785c</hash>\n+        <hash alg=\"MD5\">e787241d6ec56aac451be8b0d920c85b</hash>\n+        <hash alg=\"SHA-1\">291ccaacc039e41932de877303edb6af98a91c24</hash>\n+        <hash alg=\"SHA-256\">f0469d891127dc5ae6bd2df93a5aa38c4d79bcd5f360fbb88c2785b52a572349</hash>\n+        <hash alg=\"SHA-512\">368916f0057d69fa4ba3768f6f617291ce4083b89913e46c2daa68cc94c48b92e0ca626241486f34a4d154502eb77b19e82c16c68b341ecfc82ccc0520f8d4a9</hash>\n+        <hash alg=\"SHA-384\">7e72184873689fa286d93d88f69f8baa24f818fcd61105a14332fbb5ed254363c0969afa98befd797a3762577bc77993</hash>\n+        <hash alg=\"SHA3-384\">1302636797b291dbbe19f39bdeb66160c1317b395a0a9360ba93aeaa262de7ad8de7257e6a997a9c659fdf53b3367ee6</hash>\n+        <hash alg=\"SHA3-256\">54505ed16257a55330bb44c76719a687251d2623fa5e50a192b54c5067573255</hash>\n+        <hash alg=\"SHA3-512\">6e01cc9654c2d68c36a284e23c388267ac7013d534cceed0b6ab44679a6bbb6d03d4cfc52c967c4e76dbd5b8963c268e40d9890c927866ea00824821b0ecb82d</hash>\n       </hashes>\n       <licenses>\n         <license>\n-          <id>Apache-2.0</id>\n+          <id>BSD-2-Clause</id>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/org.apache.commons/commons-compress@1.22?type=jar</purl>\n+      <purl>pkg:maven/com.github.luben/zstd-jni@1.5.4-1?type=jar</purl>\n       <modified>false</modified>\n-      <externalReferences>\n-        <reference type=\"issue-tracker\">\n-          <url>https://issues.apache.org/jira/browse/COMPRESS</url>\n-        </reference>\n-        <reference type=\"vcs\">\n-          <url>https://gitbox.apache.org/repos/asf?p=commons-compress.git</url>\n-        </reference>\n-      </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.apache.tika/tika-core@2.7.0?type=jar\">\n-      <publisher>The Apache Software Foundation</publisher>\n-      <group>org.apache.tika</group>\n-      <name>tika-core</name>\n-      <version>2.7.0</version>\n-      <description>This is the core Apache Tika\u2122 toolkit library from which all other modules inherit functionality. It\n-    also\n-    includes the core facades for the Tika API.</description>\n+    <component type=\"library\" bom-ref=\"pkg:maven/software.amazon.awssdk/endpoints-spi@2.20.51?type=jar\">\n+      <group>software.amazon.awssdk</group>\n+      <name>endpoints-spi</name>\n+      <version>2.20.51</version>\n       <hashes>\n-        <hash alg=\"MD5\">42b3dd0d4679ec6bafd848b6c0cb3035</hash>\n-        <hash alg=\"SHA-1\">e9e8f1a7dc833e633fb2c717e8fa811e3e9dbf4a</hash>\n-        <hash alg=\"SHA-256\">2603961edec8bcee014d2c360e5a9a0cdbf10aa8e6e95cf67abe190c837bb054</hash>\n-        <hash alg=\"SHA-512\">1d0a07cd55db3bdd6d3d169f0747e920491936a7401af45e5f14f10400f3addd93918f8efb80445c0cf9d91803571877d7d4e1429440ab6ae8c49ec36a77e103</hash>\n-        <hash alg=\"SHA-384\">c3e7ad76e7abdaa27d28416e101110eab481f0f72cd0053de9030a0220549c1f346314116e04665ee70cdeba5fcbc5f8</hash>\n-        <hash alg=\"SHA3-384\">97b801fbde8b9b84c13aea4dd087cbb333e7cba52737d7f5c54f4ea46516d80677d363a2063de9cc014773da2bc5c4a5</hash>\n-        <hash alg=\"SHA3-256\">45ce7c3c2ea1ef9b7785a42604a0ec75444a9bd55b0687307e5a874d51f29547</hash>\n-        <hash alg=\"SHA3-512\">bd45003a2aa326c195e847199cda6aa52f5498cacf6faaab99b95826b4812da9590c29a80c0a3811c27403cc52a8e79a38c4770ce4063b7e013566b7e794af98</hash>\n+        <hash alg=\"MD5\">e1c1ab036273e2ffbaf2fbaa6ba42569</hash>\n+        <hash alg=\"SHA-1\">f5d8db7fb745e169955d079d59155b5c949f11aa</hash>\n+        <hash alg=\"SHA-256\">f7970cd35978921717df84a8633e92e28c4d2a3825b73bf5958f12008a59cac3</hash>\n+        <hash alg=\"SHA-512\">896f2d6d5669386e07f9c29834674c0579db755881ff02be82cb70579b68c3563a407e905983d76f2869f07a3a58cf1825e54febc6bb1855af1e37e4b5e53f58</hash>\n+        <hash alg=\"SHA-384\">f9db3630272c7b02c8c0f52d69b5e88cd1227f497975fa29865ac7cfc2eea5f50dc6a0a618681c0642215c2e371e9426</hash>\n+        <hash alg=\"SHA3-384\">bfc03e263e0c5cb37e958edcecd9b339957b938acb8ee24b34d4e322fc4eca77078b1fa0257f24e91b412e5ae4fcc01a</hash>\n+        <hash alg=\"SHA3-256\">64f13930a29cea4833e87b53d0a680ff730b7d5686a59d97e9014ce411be04fd</hash>\n+        <hash alg=\"SHA3-512\">043c51cea16acc5f13f33651a81e9d27cfe82d2ee0db63efe854c9da217b0b65740712d32948e26f1e205cfa50bb793d570d95e25e7b373fc59e42a1df344325</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n-          <url>https://www.apache.org/licenses/LICENSE-2.0</url>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/org.apache.tika/tika-core@2.7.0?type=jar</purl>\n+      <purl>pkg:maven/software.amazon.awssdk/endpoints-spi@2.20.51?type=jar</purl>\n       <modified>false</modified>\n-      <externalReferences>\n-        <reference type=\"website\">\n-          <url>http://www.apache.org</url>\n-        </reference>\n-        <reference type=\"build-system\">\n-          <url>https://builds.apache.org/job/Tika-trunk/</url>\n-        </reference>\n-        <reference type=\"issue-tracker\">\n-          <url>https://issues.apache.org/jira/browse/TIKA</url>\n-        </reference>\n-      </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.2?type=jar\">\n+    <component type=\"library\" bom-ref=\"pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.2?type=jar\">\n       <group>com.fasterxml.jackson.core</group>\n-      <name>jackson-databind</name>\n+      <name>jackson-annotations</name>\n       <version>2.14.2</version>\n-      <description>General data-binding functionality for Jackson: works on core streaming API</description>\n+      <description>Core annotations used for value types, used by Jackson data binding package.</description>\n       <hashes>\n-        <hash alg=\"MD5\">c1b12dd14734cd1986132bf55042dd7e</hash>\n-        <hash alg=\"SHA-1\">01e71fddbc80bb86f71a6345ac1e8ab8a00e7134</hash>\n-        <hash alg=\"SHA-256\">501d3abce4d18dcc381058ec593c5b94477906bba6efbac14dae40a642f77424</hash>\n-        <hash alg=\"SHA-512\">85473a29d23292f49092af9e7a7a63993206847c53b3e71f3c67245d68f7b19cc7c341e0ece409eb5e96602df98a848e957d8691fdd2c5fcddd807df9078255e</hash>\n-        <hash alg=\"SHA-384\">5c54d6c497cb329c3424a30319bf657ea222349eadc5ae74c30e8dc1525d7b60b7785f4d20370267b03343dd738cc13e</hash>\n-        <hash alg=\"SHA3-384\">98ff0b2a4dfc1faf319d4b0d38376c3c7a58b65d071db293232eed810adf2e525fecee3be45c99b41e20cf6a3a8ebef9</hash>\n-        <hash alg=\"SHA3-256\">2dba45f78a0d37402083975e18dbb3201705faf7e533c3e9721b9364c2a1ab0f</hash>\n-        <hash alg=\"SHA3-512\">76ef73198269cfd0922f4ae86c8b7e6a9cd1b96ee55da43ebfe57dd34365cc1c5c5630fadf79e46156a52b6b96b7d1f694f5e4f5c4f6a3d3ebb31c927e414435</hash>\n+        <hash alg=\"MD5\">10d19982a8890f6eb37557af2f58e272</hash>\n+        <hash alg=\"SHA-1\">a7aae9525864930723e3453ab799521fdfd9d873</hash>\n+        <hash alg=\"SHA-256\">2c6869d505cf60dc066734b7d50339f975bd3adc635e26a78abb71acb4473c0d</hash>\n+        <hash alg=\"SHA-512\">a978384791bdc074df8039ffc95bb93f0f60d14d476861ee2a0ce208b33a991c486a07345cb80559252c3ff1dea14d3efb818c19bdc18435946dc8754d8e6ee3</hash>\n+        <hash alg=\"SHA-384\">d5111c69020666689414921ae4a8950f9fbdf86dec1360f6827beeee9ebd3f78db74e69c76e0becaba47eb34fdaaeb5a</hash>\n+        <hash alg=\"SHA3-384\">53b1a8891482e16a7d8849251cb0dcd1aacf6aaa2161a73589d9742ad96763e384d426d04db762e56fc4536f4e719084</hash>\n+        <hash alg=\"SHA3-256\">14f7b3c51c96f7429f7c60a69e3b7e4f9f2207820141f197d56b57018ffd5640</hash>\n+        <hash alg=\"SHA3-512\">75e4e4fb847fdacdd497cf6b340362581ab4091120ccf2ec32a273709d336af0f78c90ce12b2dd1d17354aa08583af0d3ded89bb415720f45f2d9c110d71dd7a</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.2?type=jar</purl>\n+      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.2?type=jar</purl>\n       <modified>false</modified>\n       <externalReferences>\n         <reference type=\"vcs\">\n-          <url>https://github.com/FasterXML/jackson-databind</url>\n+          <url>https://github.com/FasterXML/jackson-annotations</url>\n         </reference>\n       </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/software.amazon.awssdk/http-client-spi@2.20.51?type=jar\">\n-      <group>software.amazon.awssdk</group>\n-      <name>http-client-spi</name>\n-      <version>2.20.51</version>\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-logger-api@1.6.0?type=jar\">\n+      <group>org.jreleaser</group>\n+      <name>jreleaser-logger-api</name>\n+      <version>1.6.0</version>\n+      <description>JReleaser logger API</description>\n       <hashes>\n-        <hash alg=\"MD5\">5f1d20ac43c278682cba7bee5f0a40fc</hash>\n-        <hash alg=\"SHA-1\">3e05bdeea9ff32bdc4a82583190b217480f40554</hash>\n-        <hash alg=\"SHA-256\">ee5c9e32d35fb3a858e4c33e164a33ca12e1546a2a0230b892b57ecb3228f112</hash>\n-        <hash alg=\"SHA-512\">0bd388536c765fa3e230cce24da4721affafa16c86bb0af0025aa1cbbb3dca03db961e092a5973119dae569ac5d58f71e9b616bc189667b82c757ab19471f8f1</hash>\n-        <hash alg=\"SHA-384\">33f1f9a1d838fe71dcde06d31e38257967f21829d6479218bad757749ea5b19c1d52f4104611e9c8a03842888d25eafb</hash>\n-        <hash alg=\"SHA3-384\">e3f45e8daf0b3bf4ad4741113cc46868cb5347bc9c6e96e0f689fe24e27e7c1ec122d924ea93c5d1244db7abcbd2a0a1</hash>\n-        <hash alg=\"SHA3-256\">942ac8bf3fcae5f32c95ad1072a89847df7af3c22c61fdbe97a3b4415c59c08f</hash>\n-        <hash alg=\"SHA3-512\">3a29a471c2487d017c6758a5d049da8119615c04b0fef608f73d59d433a20b7c139cc15913249211cd2fbdcb892d8866dc4719d6b7d7000ea5222f3c66c3634d</hash>\n+        <hash alg=\"MD5\">e7da806a3427ab10405584067d880ead</hash>\n+        <hash alg=\"SHA-1\">92ae4e1826cf1d8321fcefd3f4ece0fa5cc4fc94</hash>\n+        <hash alg=\"SHA-256\">372d4b6cee7af83429f9f054a69f73d38d6fb4c983b14ce97f2599791d59aee9</hash>\n+        <hash alg=\"SHA-512\">c4f4edf49e18f475b7b44677497250cd93af45e302fb39306a94dc8f0ee1f783921967de3e1f1b7591f970a359080f43b24c1499a363280d904c2519d2e9bcb2</hash>\n+        <hash alg=\"SHA-384\">fcdadd6f2e8af30a7761e98f5c717ab1b8f6f0a79825a711454c8c9cc9842cf8fe0f5917b5ea48603eb0ee5788ed7a8b</hash>\n+        <hash alg=\"SHA3-384\">42a3e276d69efc85ce5798c5cd78ba1a910ef328169fb39a1a685eea5b98e9c3bf495124f56b518d553f1ca2e63d62f7</hash>\n+        <hash alg=\"SHA3-256\">0fb4d06e278df39d6633d1a09ed01ad4f7788838668f2ebc097f919384cec97d</hash>\n+        <hash alg=\"SHA3-512\">bb5a8b000955af1038d4d75c0fd8786561b3a2cf7bb804e09e42518a0bcc3e23ab01dd5236de4bdb58fd9b1a0e923982eb6cc6d0e450896bed9c86dfe808675d</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/software.amazon.awssdk/http-client-spi@2.20.51?type=jar</purl>\n+      <purl>pkg:maven/org.jreleaser/jreleaser-logger-api@1.6.0?type=jar</purl>\n       <modified>false</modified>\n+      <externalReferences>\n+        <reference type=\"vcs\">\n+          <url>https://github.com/jreleaser/jreleaser</url>\n+        </reference>\n+      </externalReferences>\n     </component>\n     <component type=\"library\" bom-ref=\"pkg:maven/software.amazon.awssdk/s3@2.20.51?type=jar\">\n       <group>software.amazon.awssdk</group>\n       <name>s3</name>\n       <version>2.20.51</version>\n       <description>The AWS Java SDK for Amazon S3 module holds the client classes that are used for communicating with\n         Amazon Simple Storage Service</description>\n@@ -668,380 +524,312 @@\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/software.amazon.awssdk/s3@2.20.51?type=jar</purl>\n       <modified>false</modified>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/commons-io/commons-io@2.11.0?type=jar\">\n-      <group>commons-io</group>\n-      <name>commons-io</name>\n-      <version>2.11.0</version>\n-      <description>The Apache Commons IO library contains utility classes, stream implementations, file filters,\n-file comparators, endian transformation classes, and much more.</description>\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.bouncycastle/bcpg-jdk15on@1.70?type=jar\">\n+      <group>org.bouncycastle</group>\n+      <name>bcpg-jdk15on</name>\n+      <version>1.70</version>\n+      <description>The Bouncy Castle Java API for handling the OpenPGP protocol. This jar contains the OpenPGP API for JDK 1.5 and up. The APIs can be used in conjunction with a JCE/JCA provider such as the one provided with the Bouncy Castle Cryptography APIs.</description>\n       <hashes>\n-        <hash alg=\"MD5\">3b4b7ccfaeceeac240b804839ee1a1ca</hash>\n-        <hash alg=\"SHA-1\">a2503f302b11ebde7ebc3df41daebe0e4eea3689</hash>\n-        <hash alg=\"SHA-256\">961b2f6d87dbacc5d54abf45ab7a6e2495f89b75598962d8c723cea9bc210908</hash>\n-        <hash alg=\"SHA-512\">5bd78eed456ede30119319c5bed8e3e4c443b6fd7bdb3a7a5686647bd83094d0c3e2832a7575cfb60e4ef25f08106b93476939d3adcfecf5533cc030b3039e10</hash>\n-        <hash alg=\"SHA-384\">114f1e324d90ad887c177876d410f5787a8e8da6c48d4b2862d365802c0efded3a88cb24046976bf6276cadad3712f0f</hash>\n-        <hash alg=\"SHA3-384\">80288c03ad4d80d69f91d056ffc5570d49a9c76bf54ad2dff0121ecde26a560df76d05156f281f5c6db2a38ff07a873d</hash>\n-        <hash alg=\"SHA3-256\">5adfb5ccaf5f21a549422f426118a9542673926fcd18c68390cf813e791dcf6c</hash>\n-        <hash alg=\"SHA3-512\">7573f47f0babb53cefdc7c2309a0b982d800139064537b0797da442853d081010ad7c3c74a500598a0f800639a5d540eca21963ea652c68613907059bd4278c2</hash>\n+        <hash alg=\"MD5\">01ddc3aa0289346f4db19d95039cefdb</hash>\n+        <hash alg=\"SHA-1\">062f72ec06f31a6c31a3f3355fce0384b21126d7</hash>\n+        <hash alg=\"SHA-256\">4f08f4aa74048824151c98dd3e92e7165ac30659834404f08a8e843bdad32847</hash>\n+        <hash alg=\"SHA-512\">4e240b7811ef90c090e83a181dace41da487555e4136221861b0060f9af6d8b316f2dd0472f747adb98ca5372f46055456ef04bdc0c3992188ab13302922fce9</hash>\n+        <hash alg=\"SHA-384\">d89dec6226112d13cbea461d84740699770dd7d8ad3f67ab65e7b49fd08a096a948e54da2e6a681925c4320f410bba37</hash>\n+        <hash alg=\"SHA3-384\">5e8e8ca63cc550a8f50b627c4dd051f0eb5c31b99ff53dabd7d5f5d1ed98d0dc1d4963a09fc0db32f8e0ff769a2a6e65</hash>\n+        <hash alg=\"SHA3-256\">77f28e7e22b3b3a8d7b667fb7f783847c4b11ee7208833636e09e8b38390fd51</hash>\n+        <hash alg=\"SHA3-512\">cb238dbb641c42c49b5801bdfa6432395e860c1a7485ba68e2d57887e3d22ff254718c6cbfa34c107bfb09d74e2f85c33b95f89dfa886e141a8247a0abf2b5c2</hash>\n       </hashes>\n       <licenses>\n         <license>\n-          <id>Apache-2.0</id>\n+          <name>Bouncy Castle Licence</name>\n+          <url>https://www.bouncycastle.org/licence.html</url>\n+        </license>\n+        <license>\n+          <id>Apache-1.1</id>\n+          <url>http://apache.org/licenses/LICENSE-1.1</url>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/commons-io/commons-io@2.11.0?type=jar</purl>\n+      <purl>pkg:maven/org.bouncycastle/bcpg-jdk15on@1.70?type=jar</purl>\n       <modified>false</modified>\n       <externalReferences>\n         <reference type=\"issue-tracker\">\n-          <url>https://issues.apache.org/jira/browse/IO</url>\n+          <url>https://github.com/bcgit/bc-java/issues</url>\n         </reference>\n         <reference type=\"vcs\">\n-          <url>https://gitbox.apache.org/repos/asf?p=commons-io.git</url>\n+          <url>https://github.com/bcgit/bc-java</url>\n         </reference>\n       </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/software.amazon.eventstream/eventstream@1.0.1?type=jar\">\n-      <group>software.amazon.eventstream</group>\n-      <name>eventstream</name>\n-      <version>1.0.1</version>\n-      <description>The AWS Event Stream decoder library.</description>\n+    <component type=\"library\" bom-ref=\"pkg:maven/software.amazon.awssdk/apache-client@2.20.51?type=jar\">\n+      <group>software.amazon.awssdk</group>\n+      <name>apache-client</name>\n+      <version>2.20.51</version>\n       <hashes>\n-        <hash alg=\"MD5\">864488626f50477cfd786d1c80e3b39e</hash>\n-        <hash alg=\"SHA-1\">6ff8649dffc5190366ada897ba8525a836297784</hash>\n-        <hash alg=\"SHA-256\">0c37d8e696117f02c302191b8110b0d0eb20fa412fce34c3a269ec73c16ce822</hash>\n-        <hash alg=\"SHA-512\">461c7b63b3d39247af4073608e346b93d32502322136024868be3f7e40e71f348c3bef2450757b5dc8594ffd596f7af03ed69e4a383000bed8ac2a9e3f0cbe5d</hash>\n-        <hash alg=\"SHA-384\">38defa89452920fee5613df7225999b74d7c8fbe4e04f0b89f7aa3c525e7819eb91f8415b302726042aa4adf76e4d2ce</hash>\n-        <hash alg=\"SHA3-384\">74995e25809e85fc00526cc04011cf88edc059e7318f845a6fdefe67aba5942cf31a32024afe0adb1271f5d456d051ea</hash>\n-        <hash alg=\"SHA3-256\">83aa0539d3de0d287d3e87a276ab2f83ea610db994addabb98fc3dbbd50fa418</hash>\n-        <hash alg=\"SHA3-512\">8ea6782a037f40db3cef732528e376c50064faa7f9cb689604201842d003daabb8b8ff069a8d80ab0d28e19a69a7c2d3db8233c5618275152f425c18aae0dcfa</hash>\n+        <hash alg=\"MD5\">883a34bacf829210ba8399ff6107698e</hash>\n+        <hash alg=\"SHA-1\">965650dfa90875767e69a56d41ae56f658b77b84</hash>\n+        <hash alg=\"SHA-256\">5b45a7336811c00346a6ac53b9a034e121c9a86739405457e803dbba546b3089</hash>\n+        <hash alg=\"SHA-512\">8a0739ff68f09a778e54b40b813d4c7507e4523913210aa3cc7196db07a0253952ccce4964ccddb9b332e9fed2b99ddd8170ae030104c00f879caa604b28b964</hash>\n+        <hash alg=\"SHA-384\">b98baedb6fd915a51ecf76e08103d2f9b48dcfc4c46d70fb1bea7dec010b57bed5091838614266f8d85c7bcb1694d90e</hash>\n+        <hash alg=\"SHA3-384\">9513030fc7eb334a1f1a90a5109c35c282823864c550ba8d9fa8edb9c097a834edc7c53faed3cb5dfe4b3b7a323daab9</hash>\n+        <hash alg=\"SHA3-256\">faedd3e1307755149f42000bbfb70cbea89c9f7b057aebe1edfb2968f1930606</hash>\n+        <hash alg=\"SHA3-512\">c32001445e7fb6dcf1442941c087253387bb0058bbf78fce710af7538bb86e4fc47a30c4e6a8b1035f53249a52deeefe2507439555c9bee74eadb93db6516e31</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/software.amazon.eventstream/eventstream@1.0.1?type=jar</purl>\n+      <purl>pkg:maven/software.amazon.awssdk/apache-client@2.20.51?type=jar</purl>\n       <modified>false</modified>\n-      <externalReferences>\n-        <reference type=\"vcs\">\n-          <url>https://github.com/awslabs/aws-eventstream-java</url>\n-        </reference>\n-      </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-signing-java-sdk@1.6.0?type=jar\">\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-git-java-sdk@1.6.0?type=jar\">\n       <group>org.jreleaser</group>\n-      <name>jreleaser-signing-java-sdk</name>\n+      <name>jreleaser-git-java-sdk</name>\n       <version>1.6.0</version>\n-      <hashes>\n-        <hash alg=\"MD5\">2608fa713b1fa2a515ec2c83ec96a49c</hash>\n-        <hash alg=\"SHA-1\">f0de8990fee988060fe7721d389d6ba8aad481a4</hash>\n-        <hash alg=\"SHA-256\">ea0e35358f453eee98d0a4e921bfa6114c04afe52adb0c74bcc5200092971454</hash>\n-        <hash alg=\"SHA-512\">4d0146d43526b329139bb38edbe63f6f783ae99f5d2778c6c6af8851be458739afe31951bf8e54f85da7c6e5d5e7d4670b45917c6ffa855f578355a6359286a6</hash>\n-        <hash alg=\"SHA-384\">a29024fbd6fb57818b5800cb961a043d4d131e4c16d0b6965a4abd4ef275001bd607697195f562e6b3d4f36fac5847b0</hash>\n-        <hash alg=\"SHA3-384\">5b9e053c6b9a48483a7cdd898f37fc72275171348ed4433b9759e0a4f86edad6a26c84ed69eae8612811e17b806df60a</hash>\n-        <hash alg=\"SHA3-256\">477c36bff3a1ec95810622a43d43ea9b1c614c54306897d9c4ee66f2a349a9e9</hash>\n-        <hash alg=\"SHA3-512\">b6594d20048651c4982230202c5af186f064025bf80d21c87d4cacb3d1b466bc1e5c850fea374edf9c3c98fda734ea52284bd62bbd456aee903c705152d767da</hash>\n-      </hashes>\n-      <licenses/>\n-      <purl>pkg:maven/org.jreleaser/jreleaser-signing-java-sdk@1.6.0?type=jar</purl>\n-      <modified>false</modified>\n-    </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.reactivestreams/reactive-streams@1.0.3?type=jar\">\n-      <group>org.reactivestreams</group>\n-      <name>reactive-streams</name>\n-      <version>1.0.3</version>\n-      <description>A Protocol for Asynchronous Non-Blocking Data Sequence</description>\n-      <hashes>\n-        <hash alg=\"MD5\">69122b098fff1c6b1bf2cd3b355e7e03</hash>\n-        <hash alg=\"SHA-1\">d9fb7a7926ffa635b3dcaa5049fb2bfa25b3e7d0</hash>\n-        <hash alg=\"SHA-256\">1dee0481072d19c929b623e155e14d2f6085dc011529a0a0dbefc84cf571d865</hash>\n-        <hash alg=\"SHA-512\">aafc86186d82b4f3bd44ef7f955978481172eab267d208aa80b24f8ca218bd902d69b587fcae2fe44a888b7a9f81fc5a209e837958307fdc0ee815248f7065f9</hash>\n-        <hash alg=\"SHA-384\">dde10163531896f3b60261795a977cea1d0114514e8fc95f1ac4b6f34789c4b78c4c83ead210901a2edb3cae9f113ed4</hash>\n-        <hash alg=\"SHA3-384\">4f9e101774f39c8ebcb2ccd3f2fe996a1f99bd879fa34ac9ba319e824752f6bdc6159d242497d38587d7191bba796e3a</hash>\n-        <hash alg=\"SHA3-256\">45c5459f651963c5797e32c87e3b8456238229f9f9e64f543eb21d6a6b7a812e</hash>\n-        <hash alg=\"SHA3-512\">9edc79ccfd2edabe1339ad79a10137cd0f1614671f976d6a8a603428b8e5179c9a6afbf4f9fcd44e6e3795be5c487cc5aa97a1d3e6d9a3e88a62d3f4de60a2ab</hash>\n-      </hashes>\n+      <description>Java SDK for Git</description>\n       <licenses>\n         <license>\n-          <id>CC0-1.0</id>\n+          <id>Apache-2.0</id>\n+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/org.reactivestreams/reactive-streams@1.0.3?type=jar</purl>\n+      <purl>pkg:maven/org.jreleaser/jreleaser-git-java-sdk@1.6.0?type=jar</purl>\n       <modified>false</modified>\n+      <externalReferences>\n+        <reference type=\"vcs\">\n+          <url>https://github.com/jreleaser/jreleaser</url>\n+        </reference>\n+      </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/software.amazon.awssdk/sdk-core@2.20.51?type=jar\">\n-      <group>software.amazon.awssdk</group>\n-      <name>sdk-core</name>\n-      <version>2.20.51</version>\n-      <description>The AWS SDK for Java - SDK Core runtime module holds the classes that are used by the individual service\n-        clients to interact with\n-        Amazon Web Services. Users need to depend on aws-java-sdk artifact for accessing individual client classes.</description>\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.eclipse.jgit/org.eclipse.jgit@5.13.0.202109080827-r?type=jar\">\n+      <group>org.eclipse.jgit</group>\n+      <name>org.eclipse.jgit</name>\n+      <version>5.13.0.202109080827-r</version>\n+      <description>Repository access and algorithms</description>\n       <hashes>\n-        <hash alg=\"MD5\">b7d192ccc4a7098ffbfb3a5241d560d8</hash>\n-        <hash alg=\"SHA-1\">e3f9e8708dd477b58253125f1d828deaeaf94d69</hash>\n-        <hash alg=\"SHA-256\">eee62acd22433ce285d8b735356c72355a8827f587933d969cf51dc5fcaa0140</hash>\n-        <hash alg=\"SHA-512\">285401aa6bbb998330bc97c109bb6c79fc329de23c9729742c48353156a6a3cd7d2c356a97ecc9f795dfa9be50762c6a5d76b92c13fcd06a34e5ea7cd959f065</hash>\n-        <hash alg=\"SHA-384\">50f7536e6d95d0c0596983b19c61cbd5ea359c265a527e87816399df0579bdcef3563a470324fa8602c7db97aa82340b</hash>\n-        <hash alg=\"SHA3-384\">f0487bd4188e85d07d502b82bf55043be4c88518163d315af85b2f91f50c6bff657e0c3b2fb9013513948b3cbe9ab2eb</hash>\n-        <hash alg=\"SHA3-256\">f7d6979f92addad31ef970812b1d9e49e1ad170aeec6d341598a4fe4d0897a4e</hash>\n-        <hash alg=\"SHA3-512\">88f5ffc890d90d9988e05f9a84f609894aa173e0d9e1ea0c908243c0ffbf97460dc643b2709793103cae1b2f098e87ef8cdda93003de1915763aa394b8800766</hash>\n+        <hash alg=\"MD5\">5a1f197785cb9c69d1241cb0f16937a2</hash>\n+        <hash alg=\"SHA-1\">32badd5adebd660424509344259ad3e409699ba2</hash>\n+        <hash alg=\"SHA-256\">dabf8369f0cdf8cf17b7f7da4bda9320c570bb754c88e0beb7b852812cf5cd25</hash>\n+        <hash alg=\"SHA-512\">768dbb3ba2649a7025338197b4703b414983e4608138719b0d69201f7f49e57e0454846b41b775b135b083f820824749da6121f20a812c4f155a97f09c9b15ac</hash>\n+        <hash alg=\"SHA-384\">deb24e724ace28ddbaf5e7a1fafaa449a49b97d3a5a53eb487a2ab90895f05684c48a839e3677643364ff965cc33af95</hash>\n+        <hash alg=\"SHA3-384\">e5aed5403b4c28624bc58be31601897555c94eb54e680f1ccb59992a643db24d0de465b7ae879b5ba29d56a132a87b69</hash>\n+        <hash alg=\"SHA3-256\">8ccc07758fbf1ac55028538890afe7d209c866ee019875ef15acfaea9ac7244f</hash>\n+        <hash alg=\"SHA3-512\">4725fff9b6067d70d4c82cbf549b16be521e839d5c8ecf605f9a71516ec78334e348cb2d3303afb7ba18ce464a68c1e195bb6fe673d9d4d6b8d75c84d0b4e101</hash>\n       </hashes>\n       <licenses>\n         <license>\n-          <id>Apache-2.0</id>\n+          <id>BSD-3-Clause</id>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/software.amazon.awssdk/sdk-core@2.20.51?type=jar</purl>\n+      <purl>pkg:maven/org.eclipse.jgit/org.eclipse.jgit@5.13.0.202109080827-r?type=jar</purl>\n       <modified>false</modified>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/software.amazon.awssdk/arns@2.20.51?type=jar\">\n-      <group>software.amazon.awssdk</group>\n-      <name>arns</name>\n-      <version>2.20.51</version>\n-      <description>The AWS SDK for Java - Arns module holds the classes that are related to AWS ARN</description>\n+    <component type=\"library\" bom-ref=\"pkg:maven/io.github.openfeign/feign-core@12.3?type=jar\">\n+      <group>io.github.openfeign</group>\n+      <name>feign-core</name>\n+      <version>12.3</version>\n+      <description>Feign Core</description>\n       <hashes>\n-        <hash alg=\"MD5\">8d826e61b6a82c3709cce4365d8e1d78</hash>\n-        <hash alg=\"SHA-1\">9305f0f4a9435df88bb5a35ec61aace0be0ce3c8</hash>\n-        <hash alg=\"SHA-256\">9885a1486c514fac5d44405fd0c9f1a2eb0eb62a5db669342058181e0f86edba</hash>\n-        <hash alg=\"SHA-512\">a4a7bc31322df09c81bcd9abea03cd0c8647ff69789bb06bc31284feab200ceeb65c41c2eea80c90056f1f54ac310e79d8dd1af892cae3ab80721bd34c3f9b0e</hash>\n-        <hash alg=\"SHA-384\">bbd8004e4d60a32794a6f9d779034d20a6b2c170117bd60e8f12dbd898d9216b41074624e66dee876ebf5c48845320b7</hash>\n-        <hash alg=\"SHA3-384\">8afbe17519ee08634c02adbae872d04c34e83325cd7319d3550e07cdd86fa8a5ff673adb392221e8eac777529cd85b31</hash>\n-        <hash alg=\"SHA3-256\">3fd520aafd89360244143e94b5b4e886cda217dbea4add63fa563b5d13482b8a</hash>\n-        <hash alg=\"SHA3-512\">3bd511652b05f6beaa7974a07b8630d6c2d3595ffa450aa2090d287adeaed87b4136a77702a6ae5d663c061902ae3e8c0846b6bb9ee4203d6a1a481b77191df4</hash>\n+        <hash alg=\"MD5\">9e6e1ff8b68d2b6c1fc5bdc7ff208030</hash>\n+        <hash alg=\"SHA-1\">d280b09a17b63e69788fd3d8d215b7013ab48b16</hash>\n+        <hash alg=\"SHA-256\">939fbed2c2392a9633bc1d26f0ef9e934b059d1a9a9d4d966cedaf9075c546ec</hash>\n+        <hash alg=\"SHA-512\">8335901d8918747dc29d37a2ac630c6a78ea6ff04bfea77e6d8c74188e9e584142920996c45120caa86299486949a04e1ec1f1bef30229904360fcb5c5d4a1c4</hash>\n+        <hash alg=\"SHA-384\">dc7a0d10bdf2c3aeafba83ca7e41d21c3288f3df0b76e339788fcf7606381970b6429108dbf2d1212075d1feba040842</hash>\n+        <hash alg=\"SHA3-384\">2907938ea76735cde9b34676c6c8b04786f1595687f96734e7659768175cb7a525508f84c48d9b10b0b2f593158e1ed5</hash>\n+        <hash alg=\"SHA3-256\">474f6b0ab420bf63549ed123fff99b73fc881771c6a0c591e58dfb17adbe9899</hash>\n+        <hash alg=\"SHA3-512\">553a6dc1c3cf7facdb3b4e15be1d6d90259f1d36ce137db3a6e53a967ef4939aaa98c974b059c8f32dd42316bb7eee3b51910cf0fb172d0df9b8ff39d8cc722d</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/software.amazon.awssdk/arns@2.20.51?type=jar</purl>\n+      <purl>pkg:maven/io.github.openfeign/feign-core@12.3?type=jar</purl>\n       <modified>false</modified>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/commons-codec/commons-codec@1.15?type=jar\">\n-      <group>commons-codec</group>\n-      <name>commons-codec</name>\n-      <version>1.15</version>\n-      <description>The Apache Commons Codec package contains simple encoder and decoders for\n-     various formats such as Base64 and Hexadecimal.  In addition to these\n-     widely used encoders and decoders, the codec package also maintains a\n-     collection of phonetic encoding utilities.</description>\n+    <component type=\"library\" bom-ref=\"pkg:maven/software.amazon.awssdk/third-party-jackson-core@2.20.51?type=jar\">\n+      <group>software.amazon.awssdk</group>\n+      <name>third-party-jackson-core</name>\n+      <version>2.20.51</version>\n       <hashes>\n-        <hash alg=\"MD5\">303baf002ce6d382198090aedd9d79a2</hash>\n-        <hash alg=\"SHA-1\">49d94806b6e3dc933dacbd8acb0fdbab8ebd1e5d</hash>\n-        <hash alg=\"SHA-256\">b3e9f6d63a790109bf0d056611fbed1cf69055826defeb9894a71369d246ed63</hash>\n-        <hash alg=\"SHA-512\">da30a716770795fce390e4dd340a8b728f220c6572383ffef55bd5839655d5611fcc06128b2144f6cdcb36f53072a12ec80b04afee787665e7ad0b6e888a6787</hash>\n-        <hash alg=\"SHA-384\">05d0506283716472175d44c2a4766523397bf8a007c18848f9c9a61718cc8aa437f9cb4b91771037ab29a960860b62a0</hash>\n-        <hash alg=\"SHA3-384\">12fad4ef78274b06f97b1243cea6f970088abde082d2de9377d915a34b44f7d7d67807c03e59c849b69f1544e2a9a1be</hash>\n-        <hash alg=\"SHA3-256\">87be248f33f241121f54aad61a9a460a79eabefbf1b5b0dd22aeb95b581f727e</hash>\n-        <hash alg=\"SHA3-512\">8c992c9c569ebaa0bf956a4c5b34fbf5e1ed1c212c2dd896fa216183ee0bcd341e96698af4b9cec7e8880762faa081a3d3a27f51349aa457cb8e373e4f57c788</hash>\n+        <hash alg=\"MD5\">754edab759af7a3a0dff1f9d6632579a</hash>\n+        <hash alg=\"SHA-1\">796fd2170ee91bac97cf20804740f98347c3d473</hash>\n+        <hash alg=\"SHA-256\">ccc32bc095398cf037805757c7a4278b4728af98ca18768654b4f70078162343</hash>\n+        <hash alg=\"SHA-512\">34b307a8e2258943c27ecb098571de58858a88d2a357a53e5cc60eb3b8b1844a99339e0287d6dfee5cce257f6a96ccae8f6216ba7e05d1bb69a4a38ca9dd4f81</hash>\n+        <hash alg=\"SHA-384\">d541b577cf460ea23848cf703713bee974b441303676333ec7866beab226d1c808abcfc0c5f10250f46f43bf91ecc15e</hash>\n+        <hash alg=\"SHA3-384\">e328f959d2c37e9d7fcab6b7e08ebac97599d93b5f5b7e629a6ed7effa87a213faa76c639228c6b3ae5d8d2db74409c8</hash>\n+        <hash alg=\"SHA3-256\">726de46a6ea776769da2e0b620bf95267a735123d0847c638637f0da909201cd</hash>\n+        <hash alg=\"SHA3-512\">7369b6097922847dc77ffb7726e16e9f5764de312bd30aa499f1b2a19bfa006517dcdd9800753e3c8861c77fd90a40ebdf6b614da301ebb91377d9806e942f6f</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/commons-codec/commons-codec@1.15?type=jar</purl>\n+      <purl>pkg:maven/software.amazon.awssdk/third-party-jackson-core@2.20.51?type=jar</purl>\n       <modified>false</modified>\n-      <externalReferences>\n-        <reference type=\"issue-tracker\">\n-          <url>https://issues.apache.org/jira/browse/CODEC</url>\n-        </reference>\n-        <reference type=\"vcs\">\n-          <url>https://github.com/apache/commons-codec</url>\n-        </reference>\n-      </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/software.amazon.awssdk/aws-core@2.20.51?type=jar\">\n+    <component type=\"library\" bom-ref=\"pkg:maven/software.amazon.awssdk/auth@2.20.51?type=jar\">\n       <group>software.amazon.awssdk</group>\n-      <name>aws-core</name>\n+      <name>auth</name>\n       <version>2.20.51</version>\n-      <description>The AWS SDK for Java - Core runtime module holds the classes that are used by the individual service\n-        clients to interact with\n-        Amazon Web Services. Users need to depend on aws-java-sdk artifact for accessing individual client classes.</description>\n+      <description>The AWS SDK for Java - Auth module holds the classes that are used for authentication with AWS services</description>\n       <hashes>\n-        <hash alg=\"MD5\">9f1facc51eaf0f96979038c8fa2b556a</hash>\n-        <hash alg=\"SHA-1\">637aa646f46cb19da5b5b0e7cff07ca36389b5aa</hash>\n-        <hash alg=\"SHA-256\">60e54a6305c7d7de1c5473b9a32da33e1b517ef77afb9ef9cba2407afda93b9f</hash>\n-        <hash alg=\"SHA-512\">be86cccfb7bc6207928af7369fb89b657eaad6797cdf3bd0191bee5f27a695cb35016944985826012a2712f3b6ef7e2dfdb1399bf752c7ab783b466a54588fa2</hash>\n-        <hash alg=\"SHA-384\">ba6fcf12fa29fe797202efc2f5e0b3fefe3fced71bda349867bd65b647c637db4fb4ef1f7b496f136d47bbfff4285cb3</hash>\n-        <hash alg=\"SHA3-384\">3e9c9d488660989bd06dbeb4d01914078d8ff109f3342a4518d5ff8de78ca546381cb1bf550eb7d3ed96984a5ba98c3b</hash>\n-        <hash alg=\"SHA3-256\">8ecb8982c24f5eed018da2a44e2ee1db25bcb522c08502a958dc47b39d3e7e58</hash>\n-        <hash alg=\"SHA3-512\">2da6b8f8baf2f1c20742f924923bd535d38ac8628537cee69672db31b21988aaede39680aaf0d6504d5b285a81ca38c55419192411164b6c799b45ab8f52d4a1</hash>\n+        <hash alg=\"MD5\">7eeb2fd8646413078f9d4293ce141dc9</hash>\n+        <hash alg=\"SHA-1\">0cbc50040e2108a7dfcee1a7c54a1b7724aac5d2</hash>\n+        <hash alg=\"SHA-256\">2dc6383205e0787117ba5fe3eb882f7f70d07210a1c41881697d5871fd9740e8</hash>\n+        <hash alg=\"SHA-512\">ee92470920a88d1b4a4bbc4a419fb901281b2a397e3c48aa8f8b6d424df86d9b18fb42ee2acba06d606b4e74a14bdc6666a9420756f9e06298d9dcf8d2cd7418</hash>\n+        <hash alg=\"SHA-384\">f39c508f04250b447a1dde6f249d45752b51fd34ace007a6cee006189a827ac2a6d28a47e4b43ee8f7d683135105af3c</hash>\n+        <hash alg=\"SHA3-384\">d9a669123cdfee1dd620894d4e1518c52fdddd6980312a58db38d0f177d81369c33e59d1bcc83e34cc962c2a17cbc0da</hash>\n+        <hash alg=\"SHA3-256\">e63b21952ed1dec5ea41a67f2c739af17f62634a81575770fc07b71d0e994b55</hash>\n+        <hash alg=\"SHA3-512\">3832c4342ae4e811cb2ce9c0182fadf3e7096cb936af1e6e77b47ed404900ba123a09a0c54d2f62f9ca25c9955909e9ed7ce47a6d49691af2923f9aa1425efd5</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/software.amazon.awssdk/aws-core@2.20.51?type=jar</purl>\n+      <purl>pkg:maven/software.amazon.awssdk/auth@2.20.51?type=jar</purl>\n       <modified>false</modified>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-logger-api@1.6.0?type=jar\">\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-signing-java-sdk@1.6.0?type=jar\">\n       <group>org.jreleaser</group>\n-      <name>jreleaser-logger-api</name>\n+      <name>jreleaser-signing-java-sdk</name>\n       <version>1.6.0</version>\n-      <hashes>\n-        <hash alg=\"MD5\">e7da806a3427ab10405584067d880ead</hash>\n-        <hash alg=\"SHA-1\">92ae4e1826cf1d8321fcefd3f4ece0fa5cc4fc94</hash>\n-        <hash alg=\"SHA-256\">372d4b6cee7af83429f9f054a69f73d38d6fb4c983b14ce97f2599791d59aee9</hash>\n-        <hash alg=\"SHA-512\">c4f4edf49e18f475b7b44677497250cd93af45e302fb39306a94dc8f0ee1f783921967de3e1f1b7591f970a359080f43b24c1499a363280d904c2519d2e9bcb2</hash>\n-        <hash alg=\"SHA-384\">fcdadd6f2e8af30a7761e98f5c717ab1b8f6f0a79825a711454c8c9cc9842cf8fe0f5917b5ea48603eb0ee5788ed7a8b</hash>\n-        <hash alg=\"SHA3-384\">42a3e276d69efc85ce5798c5cd78ba1a910ef328169fb39a1a685eea5b98e9c3bf495124f56b518d553f1ca2e63d62f7</hash>\n-        <hash alg=\"SHA3-256\">0fb4d06e278df39d6633d1a09ed01ad4f7788838668f2ebc097f919384cec97d</hash>\n-        <hash alg=\"SHA3-512\">bb5a8b000955af1038d4d75c0fd8786561b3a2cf7bb804e09e42518a0bcc3e23ab01dd5236de4bdb58fd9b1a0e923982eb6cc6d0e450896bed9c86dfe808675d</hash>\n-      </hashes>\n-      <licenses/>\n-      <purl>pkg:maven/org.jreleaser/jreleaser-logger-api@1.6.0?type=jar</purl>\n-      <modified>false</modified>\n-    </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/software.amazon.awssdk/endpoints-spi@2.20.51?type=jar\">\n-      <group>software.amazon.awssdk</group>\n-      <name>endpoints-spi</name>\n-      <version>2.20.51</version>\n-      <hashes>\n-        <hash alg=\"MD5\">e1c1ab036273e2ffbaf2fbaa6ba42569</hash>\n-        <hash alg=\"SHA-1\">f5d8db7fb745e169955d079d59155b5c949f11aa</hash>\n-        <hash alg=\"SHA-256\">f7970cd35978921717df84a8633e92e28c4d2a3825b73bf5958f12008a59cac3</hash>\n-        <hash alg=\"SHA-512\">896f2d6d5669386e07f9c29834674c0579db755881ff02be82cb70579b68c3563a407e905983d76f2869f07a3a58cf1825e54febc6bb1855af1e37e4b5e53f58</hash>\n-        <hash alg=\"SHA-384\">f9db3630272c7b02c8c0f52d69b5e88cd1227f497975fa29865ac7cfc2eea5f50dc6a0a618681c0642215c2e371e9426</hash>\n-        <hash alg=\"SHA3-384\">bfc03e263e0c5cb37e958edcecd9b339957b938acb8ee24b34d4e322fc4eca77078b1fa0257f24e91b412e5ae4fcc01a</hash>\n-        <hash alg=\"SHA3-256\">64f13930a29cea4833e87b53d0a680ff730b7d5686a59d97e9014ce411be04fd</hash>\n-        <hash alg=\"SHA3-512\">043c51cea16acc5f13f33651a81e9d27cfe82d2ee0db63efe854c9da217b0b65740712d32948e26f1e205cfa50bb793d570d95e25e7b373fc59e42a1df344325</hash>\n-      </hashes>\n+      <description>JReleaser signing Java SDK</description>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/software.amazon.awssdk/endpoints-spi@2.20.51?type=jar</purl>\n+      <purl>pkg:maven/org.jreleaser/jreleaser-signing-java-sdk@1.6.0?type=jar</purl>\n       <modified>false</modified>\n+      <externalReferences>\n+        <reference type=\"vcs\">\n+          <url>https://github.com/jreleaser/jreleaser</url>\n+        </reference>\n+      </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/software.amazon.awssdk/crt-core@2.20.51?type=jar\">\n+    <component type=\"library\" bom-ref=\"pkg:maven/software.amazon.awssdk/utils@2.20.51?type=jar\">\n       <group>software.amazon.awssdk</group>\n-      <name>crt-core</name>\n+      <name>utils</name>\n       <version>2.20.51</version>\n-      <description>The AWS SDK for Java - AWS CRT Core holds common types that are built on the AWS Common Runtime</description>\n       <hashes>\n-        <hash alg=\"MD5\">4cfe5bc24966d0650fe2be7569a05fc2</hash>\n-        <hash alg=\"SHA-1\">3ac703f55178aafa2fe047cf919401e3f13fea78</hash>\n-        <hash alg=\"SHA-256\">006109b066f3083dea57bb862e8cb2c2093aa5482978ebf58b7632fc43b6c264</hash>\n-        <hash alg=\"SHA-512\">f3a6c54a16c2051b285fe0834f5fa70c39935e8fb7b3ab9efc8ea60ad7750c6bd704389f98928caa312c126114627de956672ee2ff132e0d7ab9ccbcd560c468</hash>\n-        <hash alg=\"SHA-384\">71edae6ec7151293bb0612327de823179ac1c361606698b2a8225ee3af4632f630f36b80b18cd363b62e7fc24d5cdbc0</hash>\n-        <hash alg=\"SHA3-384\">8161c020c37cd8e946cb0d53364fe78ab0b2828acd13f49594a909ccba33f832587b3b7f90d23158fc21fb23534ce2a0</hash>\n-        <hash alg=\"SHA3-256\">ea3bd58b5d11f28b1de5c8a9a00964d998799e934076451f32a7fdbc1fb6b1ca</hash>\n-        <hash alg=\"SHA3-512\">83dd80c1208db834cd4af29485bbbd9d828ebe4b961c5b35bf6047fef9d893debb16b6c712ed2897200bc49ced858c622e5d9ee374ac5213d837b583d6326282</hash>\n+        <hash alg=\"MD5\">c66858bba8fdc222d29f6b6d5f127894</hash>\n+        <hash alg=\"SHA-1\">295479c04f8db65535aba0f4b3e642304c09ade4</hash>\n+        <hash alg=\"SHA-256\">89282e9f885914cc3e4951bd46ba83f75c11d88554e19bbed47175c0cc10ac0c</hash>\n+        <hash alg=\"SHA-512\">348f54494d88f5c5123f7b177b1e7699a9ff6772db7c72139d5cce62cdbddb82d4022331857ed21b5a9d6aa7acd70468b166893a08ea30959ee9de781e50f887</hash>\n+        <hash alg=\"SHA-384\">7604765fcdbc2879ed8445af66d0dfcae508d834a53ffe6cf12546fa3703817d0425051bfc51014faeaf00d3c42f7181</hash>\n+        <hash alg=\"SHA3-384\">6a344e509536b26fa1ebbf2207e0194bb455d620d336fd10f7eda276376a39dd09d24f6ef06ba7f3cbf73e6918bb8174</hash>\n+        <hash alg=\"SHA3-256\">4fb56af6eadac87597f0d9f86bf4095caaf18102f625b410f0811bc63ed7208d</hash>\n+        <hash alg=\"SHA3-512\">cdb73cb9cf1537f7fc3305df7ffbaa1ebaaa9ae36f711e2609e0673fef190d17bd2d5e867cd7f73a4cf3dd3144e6156e6661974e6038c90493ffdeeca96eb39e</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/software.amazon.awssdk/crt-core@2.20.51?type=jar</purl>\n+      <purl>pkg:maven/software.amazon.awssdk/utils@2.20.51?type=jar</purl>\n       <modified>false</modified>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.slf4j/jcl-over-slf4j@2.0.7?type=jar\">\n-      <group>org.slf4j</group>\n-      <name>jcl-over-slf4j</name>\n-      <version>2.0.7</version>\n-      <description>JCL 1.2 implemented over SLF4J</description>\n+    <component type=\"library\" bom-ref=\"pkg:maven/software.amazon.awssdk/protocol-core@2.20.51?type=jar\">\n+      <group>software.amazon.awssdk</group>\n+      <name>protocol-core</name>\n+      <version>2.20.51</version>\n+      <description>The AWS SDK for Java - module holds the core protocol classes</description>\n       <hashes>\n-        <hash alg=\"MD5\">4e8d6cd31f7e6277280c95157ac7845a</hash>\n-        <hash alg=\"SHA-1\">f127fe5ee53404a8b3697cdd032dd1dd6a29dd77</hash>\n-        <hash alg=\"SHA-256\">41806757e1d26dae5d6db2ca7d4a5176eed2d6e709cd86564d4a11dab0601742</hash>\n-        <hash alg=\"SHA-512\">221b39b85145cf7c245acb7f2692a02b6c5816f8b1187a1a77942dd39de958c1b01ecd066682eb88244f87b2a47513d40b6c1e69ef49a43b2a07ba818f124e17</hash>\n-        <hash alg=\"SHA-384\">fa8d53b46cd3ddab0bd265d384a90c35efef6a02a7822aa6f79065cee68d78f6ad7c4d248dea7497af449845dc962730</hash>\n-        <hash alg=\"SHA3-384\">cf06cfeaba477f7738f089ba401fb841074681d1c7f465546cdf0e95751a8bf912493428876a7d9108eef83f637c6a1e</hash>\n-        <hash alg=\"SHA3-256\">efbad2de8683215936c56b3f8fd3492f1cc27c2ee77595a99c794e18777dec42</hash>\n-        <hash alg=\"SHA3-512\">2707d5513e49f6e3ea6dec96510d360cfc125dab164ae5d99a1dcbd628751640f625a70ed749dad66024ae9fd7725f1c6c7f76de7f5a6efc9d8208a9e01922f7</hash>\n+        <hash alg=\"MD5\">3d0b4657b8d3be3a31000ffe35887b87</hash>\n+        <hash alg=\"SHA-1\">468ae64371ed038de20ff7dc0a390bc10df83b53</hash>\n+        <hash alg=\"SHA-256\">e250389e15ca5e9359982d506852f25f87f839a5e4db1d7127f2b3e85fff4d13</hash>\n+        <hash alg=\"SHA-512\">dc61e56b5608bedd5a5e1cf2bee29566b89a06e8523d19b3a8290eda59d261baa55d34525e922e52c93a6af6191eb526d1bf5ae2946cf3b2c12eb8bedf173549</hash>\n+        <hash alg=\"SHA-384\">356fceb1793b17cc9a4c3ddf4c4c0fb167a318c1f301f8dd78fc38802466b6ae6061abb6c526255360c93f0ac00ee867</hash>\n+        <hash alg=\"SHA3-384\">9eb4084ced509ca754d3c3018d137053c064dd593a339874c4e2bbb26d2d746d4a0f92268e1750af5856df5e61d5ed8b</hash>\n+        <hash alg=\"SHA3-256\">c403de7790b63e51b2c3b0df3e19687767157e99ed182c7b23a839ee4eec7165</hash>\n+        <hash alg=\"SHA3-512\">8e3d1d826376124f0530614cb28ea44723e7eb11c7ee8f44aa56b4c905eec7058a4e9dd2e40c541dfc814575facd612b9f5e28dbbf1c7c03f55b91f6d3721290</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/org.slf4j/jcl-over-slf4j@2.0.7?type=jar</purl>\n+      <purl>pkg:maven/software.amazon.awssdk/protocol-core@2.20.51?type=jar</purl>\n       <modified>false</modified>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/software.amazon.awssdk/aws-xml-protocol@2.20.51?type=jar\">\n+    <component type=\"library\" bom-ref=\"pkg:maven/software.amazon.awssdk/regions@2.20.51?type=jar\">\n       <group>software.amazon.awssdk</group>\n-      <name>aws-xml-protocol</name>\n+      <name>regions</name>\n       <version>2.20.51</version>\n-      <description>The AWS SDK for Java - module holds the classes for AWS Xml protocol</description>\n       <hashes>\n-        <hash alg=\"MD5\">be387d57689357c6412edacc0ed7b918</hash>\n-        <hash alg=\"SHA-1\">8036f7d4821c5232b8dd0254a11b75a873878e71</hash>\n-        <hash alg=\"SHA-256\">05d3c0576b0abac13044a0a9088626f2c5a809d7829c239ee03da66d8475d277</hash>\n-        <hash alg=\"SHA-512\">62c00d21ba56575d4f73a3be511803ab8993862d6d58aeda5c9906ca6b4817b64f60e5d22227aa895b44cd9e87639c9bde6b2d5676e2f111825ebe3534a46c6b</hash>\n-        <hash alg=\"SHA-384\">148778757f5c2d60530f91df3338b0ab2d9c311fcb86c2036e4f39bf0cd46e1989f2fbe5ea5f4948d2e9ff5fc3385c09</hash>\n-        <hash alg=\"SHA3-384\">0e45c6bc2039f2ca6ed7b935352f686152fca5273b853f3592cbcda0952fdc26b2e562fd0416f761793d8d5fffdd084f</hash>\n-        <hash alg=\"SHA3-256\">e8736cad1e5ae6e7da24c9f90e413e317724893049af4e353f6f1daec5aa4422</hash>\n-        <hash alg=\"SHA3-512\">b394fc53985672621c467aadda64a44da58eab4a2a14bb47be2e5143b4dd9d85db346db34dbdbd7141991b7ad749644e32fbccff3d402d0585fc166f778b9537</hash>\n+        <hash alg=\"MD5\">f87d7272055f055781679f6aae7df61a</hash>\n+        <hash alg=\"SHA-1\">a62a4122d49bc6f5fa9c3aea521dac03d13273dc</hash>\n+        <hash alg=\"SHA-256\">91b9cc0c22554bb7b8c69da48d8861b7ac1213b1977af5393bc56293c005f542</hash>\n+        <hash alg=\"SHA-512\">32ea2e890ebdac92a11f2276229ee244cbb209ab141e8e12327bd191b362ad6f6c40e317d18ef8d6dbed1efd4d506518b4de861be411e31d5e30a6f92b5b5b55</hash>\n+        <hash alg=\"SHA-384\">329e538463fe110b18a3fe1fe2e34eea2257be993dbdb2254f8833a7e3df3b30e35c8da3e01544e83868b543d813ac53</hash>\n+        <hash alg=\"SHA3-384\">433ddf50101f015923dd8e0fd35bcae05595651221e414f9f91cdda10d70738969d3e6c94d0f1fd47380e9c757bd754d</hash>\n+        <hash alg=\"SHA3-256\">e31cc79fcc3025aa48f9a32e80e5abd36b0fb1be2e297bc39dfb99f429443233</hash>\n+        <hash alg=\"SHA3-512\">0ef5edfa599efb2b569ad41d53d337e2eea8c79c38a37c8e0ff0d5a14f2b675281678e5cc5991748d5ad4868665974072bd89d6bae613cf8dc8f2f847248296a</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/software.amazon.awssdk/aws-xml-protocol@2.20.51?type=jar</purl>\n+      <purl>pkg:maven/software.amazon.awssdk/regions@2.20.51?type=jar</purl>\n       <modified>false</modified>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/software.amazon.awssdk/third-party-jackson-core@2.20.51?type=jar\">\n+    <component type=\"library\" bom-ref=\"pkg:maven/software.amazon.awssdk/http-client-spi@2.20.51?type=jar\">\n       <group>software.amazon.awssdk</group>\n-      <name>third-party-jackson-core</name>\n+      <name>http-client-spi</name>\n       <version>2.20.51</version>\n       <hashes>\n-        <hash alg=\"MD5\">754edab759af7a3a0dff1f9d6632579a</hash>\n-        <hash alg=\"SHA-1\">796fd2170ee91bac97cf20804740f98347c3d473</hash>\n-        <hash alg=\"SHA-256\">ccc32bc095398cf037805757c7a4278b4728af98ca18768654b4f70078162343</hash>\n-        <hash alg=\"SHA-512\">34b307a8e2258943c27ecb098571de58858a88d2a357a53e5cc60eb3b8b1844a99339e0287d6dfee5cce257f6a96ccae8f6216ba7e05d1bb69a4a38ca9dd4f81</hash>\n-        <hash alg=\"SHA-384\">d541b577cf460ea23848cf703713bee974b441303676333ec7866beab226d1c808abcfc0c5f10250f46f43bf91ecc15e</hash>\n-        <hash alg=\"SHA3-384\">e328f959d2c37e9d7fcab6b7e08ebac97599d93b5f5b7e629a6ed7effa87a213faa76c639228c6b3ae5d8d2db74409c8</hash>\n-        <hash alg=\"SHA3-256\">726de46a6ea776769da2e0b620bf95267a735123d0847c638637f0da909201cd</hash>\n-        <hash alg=\"SHA3-512\">7369b6097922847dc77ffb7726e16e9f5764de312bd30aa499f1b2a19bfa006517dcdd9800753e3c8861c77fd90a40ebdf6b614da301ebb91377d9806e942f6f</hash>\n+        <hash alg=\"MD5\">5f1d20ac43c278682cba7bee5f0a40fc</hash>\n+        <hash alg=\"SHA-1\">3e05bdeea9ff32bdc4a82583190b217480f40554</hash>\n+        <hash alg=\"SHA-256\">ee5c9e32d35fb3a858e4c33e164a33ca12e1546a2a0230b892b57ecb3228f112</hash>\n+        <hash alg=\"SHA-512\">0bd388536c765fa3e230cce24da4721affafa16c86bb0af0025aa1cbbb3dca03db961e092a5973119dae569ac5d58f71e9b616bc189667b82c757ab19471f8f1</hash>\n+        <hash alg=\"SHA-384\">33f1f9a1d838fe71dcde06d31e38257967f21829d6479218bad757749ea5b19c1d52f4104611e9c8a03842888d25eafb</hash>\n+        <hash alg=\"SHA3-384\">e3f45e8daf0b3bf4ad4741113cc46868cb5347bc9c6e96e0f689fe24e27e7c1ec122d924ea93c5d1244db7abcbd2a0a1</hash>\n+        <hash alg=\"SHA3-256\">942ac8bf3fcae5f32c95ad1072a89847df7af3c22c61fdbe97a3b4415c59c08f</hash>\n+        <hash alg=\"SHA3-512\">3a29a471c2487d017c6758a5d049da8119615c04b0fef608f73d59d433a20b7c139cc15913249211cd2fbdcb892d8866dc4719d6b7d7000ea5222f3c66c3634d</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/software.amazon.awssdk/third-party-jackson-core@2.20.51?type=jar</purl>\n+      <purl>pkg:maven/software.amazon.awssdk/http-client-spi@2.20.51?type=jar</purl>\n       <modified>false</modified>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.2?type=jar\">\n-      <group>com.fasterxml.jackson.core</group>\n-      <name>jackson-core</name>\n-      <version>2.14.2</version>\n-      <description>Core Jackson processing abstractions (aka Streaming API), implementation for JSON</description>\n+    <component type=\"library\" bom-ref=\"pkg:maven/software.amazon.awssdk/aws-query-protocol@2.20.51?type=jar\">\n+      <group>software.amazon.awssdk</group>\n+      <name>aws-query-protocol</name>\n+      <version>2.20.51</version>\n+      <description>The AWS SDK for Java - module holds the classes for AWS Query protocol</description>\n       <hashes>\n-        <hash alg=\"MD5\">6ee422ee4c481b2d5aacb2b5e36a7dc0</hash>\n-        <hash alg=\"SHA-1\">f804090e6399ce0cf78242db086017512dd71fcc</hash>\n-        <hash alg=\"SHA-256\">b5d37a77c88277b97e3593c8740925216c06df8e4172bbde058528df04ad3e7a</hash>\n-        <hash alg=\"SHA-512\">208953cf72691b3bab1ca2f9a045cccd3d75c46c90099ba884fbf16bc3e45045e5cd014d2c68c96e8a8826f87a5f0e18cb34b35e7ef03348953869c21e197367</hash>\n-        <hash alg=\"SHA-384\">e806595862c5fcdae801d9845befc1d12c97e6036ee839d34590dbd785a422d5832cf4fc5c7ee6e1a5ee7a59f37740f0</hash>\n-        <hash alg=\"SHA3-384\">4fa59f572f2e100e2eba6fc664a3b9f804fabd911a552cb40805f39e624a9c04246b679cf4b017bb782c8272877f49d2</hash>\n-        <hash alg=\"SHA3-256\">cef17d3a539cbf798cfb0bfa9faffa2b7baff3670b50743e91ee58b4c60b59f1</hash>\n-        <hash alg=\"SHA3-512\">fceeed5cb8fe4335d88282d15657762a4728483275a7ff45f50b9fe6a999757ccb37c415d001eb6250226f98f5c576b1b36a83e601fb393cfd34a811c2df5d00</hash>\n+        <hash alg=\"MD5\">6794d6e8aad17bf7702af82372421eb9</hash>\n+        <hash alg=\"SHA-1\">7995d1f7684112e2e92a45395a15d7cc1af064a8</hash>\n+        <hash alg=\"SHA-256\">f47256e9af5b92c1d993e4179924da7a0d7a94f46e3d5e11211a4aac23de2f38</hash>\n+        <hash alg=\"SHA-512\">1a92031b06677f98712b98a1935ff100200f8f85c06cc2a10d50bc19c7071a33ef012af9daa4226778833aa920f61932a9f55fd0b9082543a5f15d20385ac563</hash>\n+        <hash alg=\"SHA-384\">bbe4c41051dd2792945bc3a1bad600b946937b51529911170f47d1c6472ff7f4dd52af1e15a1c86ee64d56b12599b654</hash>\n+        <hash alg=\"SHA3-384\">e1a687b8ee22aacf9449a68df1c6ab829b9278131a620c670d7e78cf42459d447615f828ff7e9ea59bee7769bf3cb77e</hash>\n+        <hash alg=\"SHA3-256\">6deabf009c9b593e6656563a045e0895f3616f4b713a24a6d23fb50ee3fd0b80</hash>\n+        <hash alg=\"SHA3-512\">6f0d9c5c501e02094d06f0310c27d930a156424b3ae6479a21bc7a1beb9c776b5cfdfb6e087ff360263bfd68a53b1568d7fe0ccb34e22aed47705f51fa4438f0</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.2?type=jar</purl>\n+      <purl>pkg:maven/software.amazon.awssdk/aws-query-protocol@2.20.51?type=jar</purl>\n       <modified>false</modified>\n-      <externalReferences>\n-        <reference type=\"vcs\">\n-          <url>https://github.com/FasterXML/jackson-core</url>\n-        </reference>\n-      </externalReferences>\n     </component>\n     <component type=\"library\" bom-ref=\"pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar\">\n       <group>org.slf4j</group>\n       <name>slf4j-api</name>\n       <version>2.0.7</version>\n       <description>The slf4j API</description>\n       <hashes>\n@@ -1059,168 +847,274 @@\n           <id>MIT</id>\n           <url>https://opensource.org/licenses/MIT</url>\n         </license>\n       </licenses>\n       <purl>pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar</purl>\n       <modified>false</modified>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/software.amazon.awssdk/profiles@2.20.51?type=jar\">\n-      <group>software.amazon.awssdk</group>\n-      <name>profiles</name>\n-      <version>2.20.51</version>\n-      <description>Profile module allows loading information from AWS configuration and credentials files.</description>\n+    <component type=\"library\" bom-ref=\"pkg:maven/software.amazon.eventstream/eventstream@1.0.1?type=jar\">\n+      <group>software.amazon.eventstream</group>\n+      <name>eventstream</name>\n+      <version>1.0.1</version>\n+      <description>The AWS Event Stream decoder library.</description>\n       <hashes>\n-        <hash alg=\"MD5\">f45574632db6f8bd3569e6f964ad7e11</hash>\n-        <hash alg=\"SHA-1\">3b1737f5f9d57b20f6982e4a12c069fc990afc20</hash>\n-        <hash alg=\"SHA-256\">1066653a1f695d965ea55800b27cc8e191315731de73ee8b3baa46a8047d0df8</hash>\n-        <hash alg=\"SHA-512\">7e34222ec60c0a9918ac6348e4b54b7f964e35f26416294df553fbdc424d38b2f777abb7498f11b261d8526eb86cf048e5695c9cbecc9f9058e83d51669ae7cb</hash>\n-        <hash alg=\"SHA-384\">d8cb4c2bdc51621c5370148e5fb810b6db796de698965cb140d0a2f57a5adc40afd650ed2ac5dc6c5f701d8dae5cbf0f</hash>\n-        <hash alg=\"SHA3-384\">44dcdf67fa96dcf92193b0d34bb1ea0ac71e44d1c3a2e87a7402b3ee6518afda08abd53d7dc440c9a6f3b3abe65ac1ac</hash>\n-        <hash alg=\"SHA3-256\">5a84e699501b049593fa8c8db89c4037a8f368376a4e4e084eeb8b5ba0fd1327</hash>\n-        <hash alg=\"SHA3-512\">67e2fef5e5c2d10e93abd4bc972d38df9cffc8f5250ed5d006fa1b37aaffae1c7f2acc3d7e9d7f7e9c5cbe30be99a5e922ddf630025b37f82fca0c8a613f75ad</hash>\n+        <hash alg=\"MD5\">864488626f50477cfd786d1c80e3b39e</hash>\n+        <hash alg=\"SHA-1\">6ff8649dffc5190366ada897ba8525a836297784</hash>\n+        <hash alg=\"SHA-256\">0c37d8e696117f02c302191b8110b0d0eb20fa412fce34c3a269ec73c16ce822</hash>\n+        <hash alg=\"SHA-512\">461c7b63b3d39247af4073608e346b93d32502322136024868be3f7e40e71f348c3bef2450757b5dc8594ffd596f7af03ed69e4a383000bed8ac2a9e3f0cbe5d</hash>\n+        <hash alg=\"SHA-384\">38defa89452920fee5613df7225999b74d7c8fbe4e04f0b89f7aa3c525e7819eb91f8415b302726042aa4adf76e4d2ce</hash>\n+        <hash alg=\"SHA3-384\">74995e25809e85fc00526cc04011cf88edc059e7318f845a6fdefe67aba5942cf31a32024afe0adb1271f5d456d051ea</hash>\n+        <hash alg=\"SHA3-256\">83aa0539d3de0d287d3e87a276ab2f83ea610db994addabb98fc3dbbd50fa418</hash>\n+        <hash alg=\"SHA3-512\">8ea6782a037f40db3cef732528e376c50064faa7f9cb689604201842d003daabb8b8ff069a8d80ab0d28e19a69a7c2d3db8233c5618275152f425c18aae0dcfa</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/software.amazon.awssdk/profiles@2.20.51?type=jar</purl>\n+      <purl>pkg:maven/software.amazon.eventstream/eventstream@1.0.1?type=jar</purl>\n       <modified>false</modified>\n+      <externalReferences>\n+        <reference type=\"vcs\">\n+          <url>https://github.com/awslabs/aws-eventstream-java</url>\n+        </reference>\n+      </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/io.github.openfeign/feign-jackson@12.3?type=jar\">\n-      <group>io.github.openfeign</group>\n-      <name>feign-jackson</name>\n-      <version>12.3</version>\n-      <description>Feign Jackson</description>\n+    <component type=\"library\" bom-ref=\"pkg:maven/com.github.spullara.mustache.java/compiler@0.9.10?type=jar\">\n+      <group>com.github.spullara.mustache.java</group>\n+      <name>compiler</name>\n+      <version>0.9.10</version>\n+      <description>Implementation of mustache.js for Java</description>\n       <hashes>\n-        <hash alg=\"MD5\">8bbba5bba4c26edb1b5c89e1a4912c22</hash>\n-        <hash alg=\"SHA-1\">583c0ce0354e6ed81d998d5b8f1786ade1e9f2c4</hash>\n-        <hash alg=\"SHA-256\">1dfc43d604693ce51ef3935f27dbfecd2d65636699a088eee32ff37cc50ea479</hash>\n-        <hash alg=\"SHA-512\">8ea71fae9a2a4ad9d06f27e21e078001e1a29761af85e81b91bf2a38e4dd8841184a12fdf467915c234d080aa28484452fe45b9bc0a381ce23d8366b03be1395</hash>\n-        <hash alg=\"SHA-384\">03553ac35a79266a150940fc62d3da7a389b47825102d91392f37b719da94af2d2355c2592d2b68604bf84248c73baf9</hash>\n-        <hash alg=\"SHA3-384\">986284d22c0bbb7abfbc1762447a44d0919c266002d6925c4ca75040f3950a3d943a71dedf2f72592e6a185218c498a9</hash>\n-        <hash alg=\"SHA3-256\">60242fd373d71575ffcb8a4f866b27d291b6acecf83be67e6ff51a13559dc016</hash>\n-        <hash alg=\"SHA3-512\">b7e0392fc793f19b3daf64c7e7b875fb2e4ec7ba2f1681d51c14c5c9efd5991817766753e62999a76bad83c624601f9f5a55304c4e06d2e3cd88ec4c609a1ede</hash>\n+        <hash alg=\"MD5\">5638fc78a17d5063cc4b0d00f6e87491</hash>\n+        <hash alg=\"SHA-1\">6111ae24e3be9ecbd75f5fe908583fc14b4f0174</hash>\n+        <hash alg=\"SHA-256\">2b5a9217811cb99846a473fa8e0d233eb33629347b7f44941f6c0fbd4cdf1038</hash>\n+        <hash alg=\"SHA-512\">2ccf3196af2b518c96df748a72a0122d033dc222e1fab3e12f3e2094146d44bec20bd1502390b59abf090cbdf5dd4d580084b07fb7241248b5b8da2605207559</hash>\n+        <hash alg=\"SHA-384\">0204e77a4a64701af5000df6601f4f4c23cb5e53dd39a1325615d4f942cd2c91d04bbac20348ae49731f586282165c33</hash>\n+        <hash alg=\"SHA3-384\">0960da7175835484471f485d481499f8b65f134ff4f1629618560adaa5a08caa897fbefcea190f93106ee9e3273381b2</hash>\n+        <hash alg=\"SHA3-256\">cfb7e640392ef590069e6b1d059dc20b8fcff984a4b267b3969fcf50ed0edd4f</hash>\n+        <hash alg=\"SHA3-512\">db3dad3809879bca835a04da890fd86dbc58ba6637c72f07d02e39d13645ebb6c640b7fecc18a779e58946072078bdf114b91445026a32dd6501b5d1c6e7d933</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/io.github.openfeign/feign-jackson@12.3?type=jar</purl>\n+      <purl>pkg:maven/com.github.spullara.mustache.java/compiler@0.9.10?type=jar</purl>\n       <modified>false</modified>\n+      <externalReferences>\n+        <reference type=\"vcs\">\n+          <url>http://github.com/spullara/mustache.java</url>\n+        </reference>\n+      </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar\">\n-      <group>org.apache.httpcomponents</group>\n-      <name>httpclient</name>\n-      <version>4.5.13</version>\n-      <description>Apache HttpComponents Client</description>\n+    <component type=\"library\" bom-ref=\"pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.2?type=jar\">\n+      <group>com.fasterxml.jackson.core</group>\n+      <name>jackson-databind</name>\n+      <version>2.14.2</version>\n+      <description>General data-binding functionality for Jackson: works on core streaming API</description>\n       <hashes>\n-        <hash alg=\"MD5\">40d6b9075fbd28fa10292a45a0db9457</hash>\n-        <hash alg=\"SHA-1\">e5f6cae5ca7ecaac1ec2827a9e2d65ae2869cada</hash>\n-        <hash alg=\"SHA-256\">6fe9026a566c6a5001608cf3fc32196641f6c1e5e1986d1037ccdbd5f31ef743</hash>\n-        <hash alg=\"SHA-512\">3567739186e551f84cad3e4b6b270c5b8b19aba297675a96bcdff3663ff7d20d188611d21f675fe5ff1bfd7d8ca31362070910d7b92ab1b699872a120aa6f089</hash>\n-        <hash alg=\"SHA-384\">093ac3e2dde58e34aa70309c7305eb3c9b5be2509a9293f1672494da55479a86bd112e83326746dc7a32855472952b99</hash>\n-        <hash alg=\"SHA3-384\">cd6882e7868624164e460f2f3ea01466f863c0dcb902b031c656b57356f563be83b29530df41d88d634ed3d01fc9964d</hash>\n-        <hash alg=\"SHA3-256\">710b1d8d7dae0b8e4270756694ca9c83d64965f42d3b4170c609b14d47c2762c</hash>\n-        <hash alg=\"SHA3-512\">276fa6a6599dc89382d658115695cf4da6b0d39b34e9c349c17a5dbd64122eaee553bb9ed75c0378ec4a83be157c8aa39370662de3c9b8fd55ebc1dd608383e6</hash>\n+        <hash alg=\"MD5\">c1b12dd14734cd1986132bf55042dd7e</hash>\n+        <hash alg=\"SHA-1\">01e71fddbc80bb86f71a6345ac1e8ab8a00e7134</hash>\n+        <hash alg=\"SHA-256\">501d3abce4d18dcc381058ec593c5b94477906bba6efbac14dae40a642f77424</hash>\n+        <hash alg=\"SHA-512\">85473a29d23292f49092af9e7a7a63993206847c53b3e71f3c67245d68f7b19cc7c341e0ece409eb5e96602df98a848e957d8691fdd2c5fcddd807df9078255e</hash>\n+        <hash alg=\"SHA-384\">5c54d6c497cb329c3424a30319bf657ea222349eadc5ae74c30e8dc1525d7b60b7785f4d20370267b03343dd738cc13e</hash>\n+        <hash alg=\"SHA3-384\">98ff0b2a4dfc1faf319d4b0d38376c3c7a58b65d071db293232eed810adf2e525fecee3be45c99b41e20cf6a3a8ebef9</hash>\n+        <hash alg=\"SHA3-256\">2dba45f78a0d37402083975e18dbb3201705faf7e533c3e9721b9364c2a1ab0f</hash>\n+        <hash alg=\"SHA3-512\">76ef73198269cfd0922f4ae86c8b7e6a9cd1b96ee55da43ebfe57dd34365cc1c5c5630fadf79e46156a52b6b96b7d1f694f5e4f5c4f6a3d3ebb31c927e414435</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar</purl>\n+      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.2?type=jar</purl>\n       <modified>false</modified>\n+      <externalReferences>\n+        <reference type=\"vcs\">\n+          <url>https://github.com/FasterXML/jackson-databind</url>\n+        </reference>\n+      </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-tool-java-sdk@1.6.0?type=jar\">\n-      <group>org.jreleaser</group>\n-      <name>jreleaser-tool-java-sdk</name>\n-      <version>1.6.0</version>\n+    <component type=\"library\" bom-ref=\"pkg:maven/com.googlecode.javaewah/JavaEWAH@1.2.3?type=jar\">\n+      <group>com.googlecode.javaewah</group>\n+      <name>JavaEWAH</name>\n+      <version>1.2.3</version>\n+      <description>The bit array data structure is implemented in Java as the BitSet class. Unfortunately, this fails to scale without compression.\n+  JavaEWAH is a word-aligned compressed variant of the Java bitset class. It uses a 64-bit run-length encoding (RLE) compression scheme.\n+  The goal of word-aligned compression is not to achieve the best compression, but rather to improve query processing time. Hence, we try to save CPU cycles, maybe at the expense of storage. However, the EWAH scheme we implemented is always more efficient storage-wise than an uncompressed bitmap (implemented in Java as the BitSet class). Unlike some alternatives, javaewah does not rely on a patented scheme.</description>\n       <hashes>\n-        <hash alg=\"MD5\">abfd7ce4581351b44b505c26c1367955</hash>\n-        <hash alg=\"SHA-1\">ef1e1b370a0a24a202089f732598f82ce91c74f2</hash>\n-        <hash alg=\"SHA-256\">a4bcf1548d74752460e28bd3ab7e43b779b5a8f446285b8e7643dd83983f5b7f</hash>\n-        <hash alg=\"SHA-512\">e14548ab617020cac195b98b2b6bf04043cf409ef395783e8c2c38441c761f38dd34b4858d4d7e26d2c69fde233ccaa102f180d3ff547efc29e475d0c38b7b40</hash>\n-        <hash alg=\"SHA-384\">85953ec5ec2714df877d6012db03c5d88a971dcb35cfc43c197570e8e2b010c1c292e228e4fe8c7f93418e11868b8654</hash>\n-        <hash alg=\"SHA3-384\">cb294f21ab1d8a8c8f488e2f60b456e66985b55dbb5ecc56646b57fc6fbb9e36aa69801bdb6c1ea5825288baab329183</hash>\n-        <hash alg=\"SHA3-256\">cf8c1f78e8630a84e28269970a18752616d82aec3a5d9297459244fb4d52980a</hash>\n-        <hash alg=\"SHA3-512\">bd42233ee963b74dd472abde6801b8140f3ec1b08e503e486bd7c8ef7575e65a72f0bd8a3ca996adbc832d4df6be8e2b500a425b77dfdfd80e57818af84a79c2</hash>\n+        <hash alg=\"MD5\">8fdeda28c1fb10e67b3d79f86bef5e61</hash>\n+        <hash alg=\"SHA-1\">13a27c856e0c8808cee9a64032c58eee11c3adc9</hash>\n+        <hash alg=\"SHA-256\">d65226949713c4c61a784f41c51167e7b0316f93764398ebba9e4336b3d954c2</hash>\n+        <hash alg=\"SHA-512\">48cd9df9252c58e9ffe4583e68607944bcdf2ad7a3be7b4317467f503c4f56cdbde358ca7c4f34fa620d01615072a42f3a572fc4f1237e266310b7508e79bcac</hash>\n+        <hash alg=\"SHA-384\">d1fd074f21b8a54a07d3f4579376d7c3ab72f24814ebc9ba92344e9da4721e9bfa3cda3a599137e4ddf2395a3c5b88e4</hash>\n+        <hash alg=\"SHA3-384\">a553864f196f73c139a104170ab79e780046fb5f322072c5494a6590361021f875afd7168f858b0531b61918ab49b94e</hash>\n+        <hash alg=\"SHA3-256\">bab97f3f893af36c36218a151b0c3fece27d47f358cc19e1ca9c22d77942bb76</hash>\n+        <hash alg=\"SHA3-512\">be817b93c7093d44ec8dded565d7e5651772ce38e9c72283c05191b33d0ecb2798cd385395f553500446573ac49dccc21f4ba3067d71eb89e03daa384d0193be</hash>\n       </hashes>\n-      <licenses/>\n-      <purl>pkg:maven/org.jreleaser/jreleaser-tool-java-sdk@1.6.0?type=jar</purl>\n+      <licenses>\n+        <license>\n+          <id>Apache-2.0</id>\n+        </license>\n+      </licenses>\n+      <purl>pkg:maven/com.googlecode.javaewah/JavaEWAH@1.2.3?type=jar</purl>\n       <modified>false</modified>\n+      <externalReferences>\n+        <reference type=\"issue-tracker\">\n+          <url>https://github.com/lemire/javaewah/issues</url>\n+        </reference>\n+        <reference type=\"vcs\">\n+          <url>scm:git:git@github.com:lemire/javaewah.git</url>\n+        </reference>\n+      </externalReferences>\n     </component>\n     <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-resource-bundle@1.6.0?type=jar\">\n       <group>org.jreleaser</group>\n       <name>jreleaser-resource-bundle</name>\n       <version>1.6.0</version>\n+      <description>JReleaser resource bundle</description>\n       <hashes>\n         <hash alg=\"MD5\">8419930ec5e42489dad5e26749a994eb</hash>\n         <hash alg=\"SHA-1\">050aba092fa794e0cb91158de894a97aff581356</hash>\n         <hash alg=\"SHA-256\">38434b31fac439399aa37018fa69302a9d1b04be6efb7b23d53d18615e1f4f2b</hash>\n         <hash alg=\"SHA-512\">c77c476e972e17b25de3aecf75d71482535d68cdc5e4bf556f5d4cab17345b9318d47fa42c9da671769f9bcf7f549efde70b64eff5cb189c805bb406fd705cb8</hash>\n         <hash alg=\"SHA-384\">b1d8f56681f39c638806e669447d9600507946448b528060d98afc2123c637980ba5609aba4b357c83acd772bfbdb73e</hash>\n         <hash alg=\"SHA3-384\">74a52a9891c520a0f90ffbab33da0219cd787bbe309ae8eca303de00c6041692554e8d650a6a3925e057322bd00700ff</hash>\n         <hash alg=\"SHA3-256\">304bae90a7c53e6ad711e54bb8847c3eedc0e18cac03bffa14729918cb59efce</hash>\n         <hash alg=\"SHA3-512\">16a31cb40ed20dcaa5d34cb6aa2b81325f285b7feb5dda2486206496449fd548ef51117b38a8074a4a106fba9836de72232762dff60f535cd76f5848860c2f6c</hash>\n       </hashes>\n-      <licenses/>\n+      <licenses>\n+        <license>\n+          <id>Apache-2.0</id>\n+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>\n+        </license>\n+      </licenses>\n       <purl>pkg:maven/org.jreleaser/jreleaser-resource-bundle@1.6.0?type=jar</purl>\n       <modified>false</modified>\n+      <externalReferences>\n+        <reference type=\"vcs\">\n+          <url>https://github.com/jreleaser/jreleaser</url>\n+        </reference>\n+      </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/com.googlecode.javaewah/JavaEWAH@1.2.3?type=jar\">\n-      <group>com.googlecode.javaewah</group>\n-      <name>JavaEWAH</name>\n-      <version>1.2.3</version>\n-      <description>The bit array data structure is implemented in Java as the BitSet class. Unfortunately, this fails to scale without compression.\n-  JavaEWAH is a word-aligned compressed variant of the Java bitset class. It uses a 64-bit run-length encoding (RLE) compression scheme.\n-  The goal of word-aligned compression is not to achieve the best compression, but rather to improve query processing time. Hence, we try to save CPU cycles, maybe at the expense of storage. However, the EWAH scheme we implemented is always more efficient storage-wise than an uncompressed bitmap (implemented in Java as the BitSet class). Unlike some alternatives, javaewah does not rely on a patented scheme.</description>\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.apache.commons/commons-jexl3@3.3?type=jar\">\n+      <group>org.apache.commons</group>\n+      <name>commons-jexl3</name>\n+      <version>3.3</version>\n+      <description>JEXL is a library intended to facilitate the implementation of scripting features in\n+        applications and frameworks written in Java.</description>\n       <hashes>\n-        <hash alg=\"MD5\">8fdeda28c1fb10e67b3d79f86bef5e61</hash>\n-        <hash alg=\"SHA-1\">13a27c856e0c8808cee9a64032c58eee11c3adc9</hash>\n-        <hash alg=\"SHA-256\">d65226949713c4c61a784f41c51167e7b0316f93764398ebba9e4336b3d954c2</hash>\n-        <hash alg=\"SHA-512\">48cd9df9252c58e9ffe4583e68607944bcdf2ad7a3be7b4317467f503c4f56cdbde358ca7c4f34fa620d01615072a42f3a572fc4f1237e266310b7508e79bcac</hash>\n-        <hash alg=\"SHA-384\">d1fd074f21b8a54a07d3f4579376d7c3ab72f24814ebc9ba92344e9da4721e9bfa3cda3a599137e4ddf2395a3c5b88e4</hash>\n-        <hash alg=\"SHA3-384\">a553864f196f73c139a104170ab79e780046fb5f322072c5494a6590361021f875afd7168f858b0531b61918ab49b94e</hash>\n-        <hash alg=\"SHA3-256\">bab97f3f893af36c36218a151b0c3fece27d47f358cc19e1ca9c22d77942bb76</hash>\n-        <hash alg=\"SHA3-512\">be817b93c7093d44ec8dded565d7e5651772ce38e9c72283c05191b33d0ecb2798cd385395f553500446573ac49dccc21f4ba3067d71eb89e03daa384d0193be</hash>\n+        <hash alg=\"MD5\">3a332e3beb67b3a2a20bd0a950fc57c4</hash>\n+        <hash alg=\"SHA-1\">c76b4cfa436c3e79e04806e62656b09968c388ba</hash>\n+        <hash alg=\"SHA-256\">07b0ff6c5a10ffb2e2c02da9e2c0e2e6702df44178cfb76881f69447fc386014</hash>\n+        <hash alg=\"SHA-512\">879111d1c3ad021ea3961e49161b3ff6ba251044ffef1ca4d36d880d9a09b1f395e17eef221a13274303f44e116204ae4b2a3ee3e931f117fc901e321d59b5c6</hash>\n+        <hash alg=\"SHA-384\">7a268bf2c903be86813fcc7f06158abf79d558ee59ebf03470ebd06ca6e6d169beb1c3600e07c20c4f95fa7827fde841</hash>\n+        <hash alg=\"SHA3-384\">1803d239f17f7eeee6edb69d38c4473319fd4eeeb684eda5c38b577a7aaf42965ce41d9082d515d5007be9a0b0712d81</hash>\n+        <hash alg=\"SHA3-256\">01163da5e720b6d1f6bf8b6e9e398d26a1be92b3f18ef6089d218d54166b0c01</hash>\n+        <hash alg=\"SHA3-512\">8abdd72c14492340c05fd5d3555682a308ac00ac1b1e1e15ae38abc47f454f50db9e0727a49df72a50bf49f1447a6ca9dadc48b9ffd45a043bcbae9e5e050d3d</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/com.googlecode.javaewah/JavaEWAH@1.2.3?type=jar</purl>\n+      <purl>pkg:maven/org.apache.commons/commons-jexl3@3.3?type=jar</purl>\n       <modified>false</modified>\n       <externalReferences>\n         <reference type=\"issue-tracker\">\n-          <url>https://github.com/lemire/javaewah/issues</url>\n+          <url>https://issues.apache.org/jira/browse/JEXL</url>\n         </reference>\n         <reference type=\"vcs\">\n-          <url>scm:git:git@github.com:lemire/javaewah.git</url>\n+          <url>https://gitbox.apache.org/repos/asf/commons-jexl.git</url>\n         </reference>\n       </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-utils@1.6.0?type=jar\">\n-      <group>org.jreleaser</group>\n-      <name>jreleaser-utils</name>\n-      <version>1.6.0</version>\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.apache.tika/tika-core@2.7.0?type=jar\">\n+      <publisher>The Apache Software Foundation</publisher>\n+      <group>org.apache.tika</group>\n+      <name>tika-core</name>\n+      <version>2.7.0</version>\n+      <description>This is the core Apache Tika\u2122 toolkit library from which all other modules inherit functionality. It\n+    also\n+    includes the core facades for the Tika API.</description>\n       <hashes>\n-        <hash alg=\"MD5\">ca784b5aa352b016a37b393e9e500325</hash>\n-        <hash alg=\"SHA-1\">b0dde5ebbe5a98e5fa90b101dca5ad56e92c49c8</hash>\n-        <hash alg=\"SHA-256\">02b038af2f098d6019b94f4f4e55b8f901d2b5b4a072b083b23e47bd6a3e23cd</hash>\n-        <hash alg=\"SHA-512\">9b5e03766473ee854f877182a758a4842a9566772405af73cd200388eeeb981712e6a3e57f4f2f14f09a912b0cad625a75c5441b57eaa238699beabf327dd56a</hash>\n-        <hash alg=\"SHA-384\">ebc800a8a0a6d19ac2bc922598f8913df5a5eb972dc46ba4eadec5034538c9c95866839670dbf92ca93b075dcb659a0c</hash>\n-        <hash alg=\"SHA3-384\">ed0ba35caf8b7d7dc67d7350617b6cbd54de336634fd5927f03768a89f74ede798ecf343964ef0484302ee262617756b</hash>\n-        <hash alg=\"SHA3-256\">b81154ce5c428820626ee1a99e7f9bbe63d4803f7f311744a26bb8331fb193cc</hash>\n-        <hash alg=\"SHA3-512\">b6429f8944cedd026f7b0c30328f8b5e2717493624cee82df48f7e69c8fe8a26b0542d447b1795c7fad7ff90affadcc087d69a576d69cbaccf3ccf1ca962be56</hash>\n+        <hash alg=\"MD5\">42b3dd0d4679ec6bafd848b6c0cb3035</hash>\n+        <hash alg=\"SHA-1\">e9e8f1a7dc833e633fb2c717e8fa811e3e9dbf4a</hash>\n+        <hash alg=\"SHA-256\">2603961edec8bcee014d2c360e5a9a0cdbf10aa8e6e95cf67abe190c837bb054</hash>\n+        <hash alg=\"SHA-512\">1d0a07cd55db3bdd6d3d169f0747e920491936a7401af45e5f14f10400f3addd93918f8efb80445c0cf9d91803571877d7d4e1429440ab6ae8c49ec36a77e103</hash>\n+        <hash alg=\"SHA-384\">c3e7ad76e7abdaa27d28416e101110eab481f0f72cd0053de9030a0220549c1f346314116e04665ee70cdeba5fcbc5f8</hash>\n+        <hash alg=\"SHA3-384\">97b801fbde8b9b84c13aea4dd087cbb333e7cba52737d7f5c54f4ea46516d80677d363a2063de9cc014773da2bc5c4a5</hash>\n+        <hash alg=\"SHA3-256\">45ce7c3c2ea1ef9b7785a42604a0ec75444a9bd55b0687307e5a874d51f29547</hash>\n+        <hash alg=\"SHA3-512\">bd45003a2aa326c195e847199cda6aa52f5498cacf6faaab99b95826b4812da9590c29a80c0a3811c27403cc52a8e79a38c4770ce4063b7e013566b7e794af98</hash>\n       </hashes>\n-      <licenses/>\n-      <purl>pkg:maven/org.jreleaser/jreleaser-utils@1.6.0?type=jar</purl>\n+      <licenses>\n+        <license>\n+          <id>Apache-2.0</id>\n+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>\n+        </license>\n+      </licenses>\n+      <purl>pkg:maven/org.apache.tika/tika-core@2.7.0?type=jar</purl>\n+      <modified>false</modified>\n+      <externalReferences>\n+        <reference type=\"website\">\n+          <url>http://www.apache.org</url>\n+        </reference>\n+        <reference type=\"build-system\">\n+          <url>https://builds.apache.org/job/Tika-trunk/</url>\n+        </reference>\n+        <reference type=\"issue-tracker\">\n+          <url>https://issues.apache.org/jira/browse/TIKA</url>\n+        </reference>\n+      </externalReferences>\n+    </component>\n+    <component type=\"library\" bom-ref=\"pkg:maven/software.amazon.awssdk/json-utils@2.20.51?type=jar\">\n+      <group>software.amazon.awssdk</group>\n+      <name>json-utils</name>\n+      <version>2.20.51</version>\n+      <hashes>\n+        <hash alg=\"MD5\">daab6d8ae17e1a11973375f56728c903</hash>\n+        <hash alg=\"SHA-1\">380afef1a1b6fd38ba14456b61e8a6d6e1720a12</hash>\n+        <hash alg=\"SHA-256\">3ff5d2db051e02de62ef1b6a8aa00da79da7cf5c6eeff7c9d99f4aa564c6664a</hash>\n+        <hash alg=\"SHA-512\">ad5aaba55bc87044973b3ad30478783cb932f0014bee1bde4da536f2883cdc9598cec81a946d87d22ef77bb7855029abddb65ee0c51385f4c35d7974f874d693</hash>\n+        <hash alg=\"SHA-384\">e060fc0648a681d6a570cbaea0658ec7a4104e505c15c662fd1ee4881a49709b9b7ed881b911e04860f8a06e4a98c232</hash>\n+        <hash alg=\"SHA3-384\">05ed45fcd2a958b0f504e1e044dfbfec0a8c390360dffc870b712bfc5a286ca7457c0cc41abf1aa5efa73a1d06c7b905</hash>\n+        <hash alg=\"SHA3-256\">e9a3c93b55fa7ab5ebe4c23593ca981daad2f7712cf1af66d8327b89dd10ecf8</hash>\n+        <hash alg=\"SHA3-512\">b2cda2e9492b5d2f2f82cea6c94efcffe3e4c03a817885d2d456aa06f73e652ca34e433f97168e7335f8641df679f0661800115912f975170edd3c7e9f87e8e7</hash>\n+      </hashes>\n+      <licenses>\n+        <license>\n+          <id>Apache-2.0</id>\n+        </license>\n+      </licenses>\n+      <purl>pkg:maven/software.amazon.awssdk/json-utils@2.20.51?type=jar</purl>\n+      <modified>false</modified>\n+    </component>\n+    <component type=\"library\" bom-ref=\"pkg:maven/software.amazon.awssdk/annotations@2.20.51?type=jar\">\n+      <group>software.amazon.awssdk</group>\n+      <name>annotations</name>\n+      <version>2.20.51</version>\n+      <hashes>\n+        <hash alg=\"MD5\">ae97e71d75206e01e31c40035b526530</hash>\n+        <hash alg=\"SHA-1\">8853a566050a2399151fd9eef221e0ad01f577f2</hash>\n+        <hash alg=\"SHA-256\">fb888f235b4b4874b709b0faf2389942dfeb52537facb10b2aad1a5d7b59a4f4</hash>\n+        <hash alg=\"SHA-512\">ef9414876b3137eff18ef33819903661f18dfdfc2d3409625fa5f115af410aef0434c8c272828758211e037cf3a4a1b2ca800d0a29418818af1929a2e1dff319</hash>\n+        <hash alg=\"SHA-384\">de026a3e857744c52616dafe26333d0ae81289cb064e00fea8bcf9af40e333e6d8e36b3520c7b09ab333af2b7b08b77a</hash>\n+        <hash alg=\"SHA3-384\">46054e5c10c6a26e5115a48fd7b32394734b0fe065368f8aa06aa997b9f6985b96f25171845ca33226a81f603e118018</hash>\n+        <hash alg=\"SHA3-256\">10e2eb2baec15986800000b92375d71fce07aed8a93257c1abf26b1b2c89c982</hash>\n+        <hash alg=\"SHA3-512\">c67bfa1183cee73fa9f7c3a323629d29b2ad96ef82a9df48a5b164cfe85237e279bccca2a5e6540d20ba722d31a3dfc241df50d9c5b7a5b08c5ff4ab2cb0635a</hash>\n+      </hashes>\n+      <licenses>\n+        <license>\n+          <id>Apache-2.0</id>\n+        </license>\n+      </licenses>\n+      <purl>pkg:maven/software.amazon.awssdk/annotations@2.20.51?type=jar</purl>\n       <modified>false</modified>\n     </component>\n     <component type=\"library\" bom-ref=\"pkg:maven/org.bouncycastle/bcprov-jdk15on@1.70?type=jar\">\n       <group>org.bouncycastle</group>\n       <name>bcprov-jdk15on</name>\n       <version>1.70</version>\n       <description>The Bouncy Castle Crypto package is a Java implementation of cryptographic algorithms. This jar contains JCE provider and lightweight API for the Bouncy Castle Cryptography APIs for JDK 1.5 and up.</description>\n@@ -1247,89 +1141,235 @@\n           <url>https://github.com/bcgit/bc-java/issues</url>\n         </reference>\n         <reference type=\"vcs\">\n           <url>https://github.com/bcgit/bc-java</url>\n         </reference>\n       </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/com.github.spullara.mustache.java/compiler@0.9.10?type=jar\">\n-      <group>com.github.spullara.mustache.java</group>\n-      <name>compiler</name>\n-      <version>0.9.10</version>\n-      <description>Implementation of mustache.js for Java</description>\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-model-impl@1.6.0?type=jar\">\n+      <group>org.jreleaser</group>\n+      <name>jreleaser-model-impl</name>\n+      <version>1.6.0</version>\n+      <description>JReleaser Model implementation</description>\n+      <licenses>\n+        <license>\n+          <id>Apache-2.0</id>\n+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>\n+        </license>\n+      </licenses>\n+      <purl>pkg:maven/org.jreleaser/jreleaser-model-impl@1.6.0?type=jar</purl>\n+      <modified>false</modified>\n+      <externalReferences>\n+        <reference type=\"vcs\">\n+          <url>https://github.com/jreleaser/jreleaser</url>\n+        </reference>\n+      </externalReferences>\n+    </component>\n+    <component type=\"library\" bom-ref=\"pkg:maven/software.amazon.awssdk/crt-core@2.20.51?type=jar\">\n+      <group>software.amazon.awssdk</group>\n+      <name>crt-core</name>\n+      <version>2.20.51</version>\n+      <description>The AWS SDK for Java - AWS CRT Core holds common types that are built on the AWS Common Runtime</description>\n       <hashes>\n-        <hash alg=\"MD5\">5638fc78a17d5063cc4b0d00f6e87491</hash>\n-        <hash alg=\"SHA-1\">6111ae24e3be9ecbd75f5fe908583fc14b4f0174</hash>\n-        <hash alg=\"SHA-256\">2b5a9217811cb99846a473fa8e0d233eb33629347b7f44941f6c0fbd4cdf1038</hash>\n-        <hash alg=\"SHA-512\">2ccf3196af2b518c96df748a72a0122d033dc222e1fab3e12f3e2094146d44bec20bd1502390b59abf090cbdf5dd4d580084b07fb7241248b5b8da2605207559</hash>\n-        <hash alg=\"SHA-384\">0204e77a4a64701af5000df6601f4f4c23cb5e53dd39a1325615d4f942cd2c91d04bbac20348ae49731f586282165c33</hash>\n-        <hash alg=\"SHA3-384\">0960da7175835484471f485d481499f8b65f134ff4f1629618560adaa5a08caa897fbefcea190f93106ee9e3273381b2</hash>\n-        <hash alg=\"SHA3-256\">cfb7e640392ef590069e6b1d059dc20b8fcff984a4b267b3969fcf50ed0edd4f</hash>\n-        <hash alg=\"SHA3-512\">db3dad3809879bca835a04da890fd86dbc58ba6637c72f07d02e39d13645ebb6c640b7fecc18a779e58946072078bdf114b91445026a32dd6501b5d1c6e7d933</hash>\n+        <hash alg=\"MD5\">4cfe5bc24966d0650fe2be7569a05fc2</hash>\n+        <hash alg=\"SHA-1\">3ac703f55178aafa2fe047cf919401e3f13fea78</hash>\n+        <hash alg=\"SHA-256\">006109b066f3083dea57bb862e8cb2c2093aa5482978ebf58b7632fc43b6c264</hash>\n+        <hash alg=\"SHA-512\">f3a6c54a16c2051b285fe0834f5fa70c39935e8fb7b3ab9efc8ea60ad7750c6bd704389f98928caa312c126114627de956672ee2ff132e0d7ab9ccbcd560c468</hash>\n+        <hash alg=\"SHA-384\">71edae6ec7151293bb0612327de823179ac1c361606698b2a8225ee3af4632f630f36b80b18cd363b62e7fc24d5cdbc0</hash>\n+        <hash alg=\"SHA3-384\">8161c020c37cd8e946cb0d53364fe78ab0b2828acd13f49594a909ccba33f832587b3b7f90d23158fc21fb23534ce2a0</hash>\n+        <hash alg=\"SHA3-256\">ea3bd58b5d11f28b1de5c8a9a00964d998799e934076451f32a7fdbc1fb6b1ca</hash>\n+        <hash alg=\"SHA3-512\">83dd80c1208db834cd4af29485bbbd9d828ebe4b961c5b35bf6047fef9d893debb16b6c712ed2897200bc49ced858c622e5d9ee374ac5213d837b583d6326282</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n+        </license>\n+      </licenses>\n+      <purl>pkg:maven/software.amazon.awssdk/crt-core@2.20.51?type=jar</purl>\n+      <modified>false</modified>\n+    </component>\n+    <component type=\"library\" bom-ref=\"pkg:maven/io.github.openfeign.form/feign-form@3.8.0?type=jar\">\n+      <group>io.github.openfeign.form</group>\n+      <name>feign-form</name>\n+      <version>3.8.0</version>\n+      <hashes>\n+        <hash alg=\"MD5\">ab48cdaa9aecefe5e938873ba2db3bb0</hash>\n+        <hash alg=\"SHA-1\">3083889996b18443c275a352d3ab4bc6c8321598</hash>\n+        <hash alg=\"SHA-256\">b21d37321b390995c90b5dbb4ff0c33f09d1cc7768207cc0da910ad20bf58961</hash>\n+        <hash alg=\"SHA-512\">3a1718c21e4caffcd5f686d2cde011b2f72a026d03caa03b876ad6e7c8c40b7bd59189eed6efa0654bf988a438775ef2c429fae497d502c1806c8c4d9d474c2e</hash>\n+        <hash alg=\"SHA-384\">02b96ee7cb8c67cdfe63422247035cbb003b7423a82756714d36de926118ac5e96c407fd324090c851962c63f7d4fd6f</hash>\n+        <hash alg=\"SHA3-384\">0d63a4c22216be6259584b62d3753a86220ea181a002641cda45de153501272fd79b7064d21bdee0ecd8129194fd7c3e</hash>\n+        <hash alg=\"SHA3-256\">ffc2832df09d0edf0251c5e6def39b6c36fd2c02c55ad29f0e63e3160cb709e1</hash>\n+        <hash alg=\"SHA3-512\">c2013da332e97e32962ee34459c5834b04ab2f6598960cb06e4f247a2683ced3fac3919d15151be4dae083c74911c7ead1906faabfc8a7cb6245fcd7138ef0df</hash>\n+      </hashes>\n+      <licenses>\n+        <license>\n+          <id>Apache-2.0</id>\n+        </license>\n+      </licenses>\n+      <purl>pkg:maven/io.github.openfeign.form/feign-form@3.8.0?type=jar</purl>\n+      <modified>false</modified>\n+    </component>\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-java-sdk-commons@1.6.0?type=jar\">\n+      <group>org.jreleaser</group>\n+      <name>jreleaser-java-sdk-commons</name>\n+      <version>1.6.0</version>\n+      <description>Utilities for Java SDKs</description>\n+      <licenses>\n+        <license>\n+          <id>Apache-2.0</id>\n           <url>https://www.apache.org/licenses/LICENSE-2.0</url>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/com.github.spullara.mustache.java/compiler@0.9.10?type=jar</purl>\n+      <purl>pkg:maven/org.jreleaser/jreleaser-java-sdk-commons@1.6.0?type=jar</purl>\n       <modified>false</modified>\n       <externalReferences>\n         <reference type=\"vcs\">\n-          <url>http://github.com/spullara/mustache.java</url>\n+          <url>https://github.com/jreleaser/jreleaser</url>\n         </reference>\n       </externalReferences>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar\">\n-      <group>org.apache.httpcomponents</group>\n-      <name>httpcore</name>\n-      <version>4.4.16</version>\n-      <description>Apache HttpComponents Core (blocking I/O)</description>\n+    <component type=\"library\" bom-ref=\"pkg:maven/io.github.openfeign/feign-jackson@12.3?type=jar\">\n+      <group>io.github.openfeign</group>\n+      <name>feign-jackson</name>\n+      <version>12.3</version>\n+      <description>Feign Jackson</description>\n       <hashes>\n-        <hash alg=\"MD5\">28d2cd9bf8789fd2ec774fb88436ebd1</hash>\n-        <hash alg=\"SHA-1\">51cf043c87253c9f58b539c9f7e44c8894223850</hash>\n-        <hash alg=\"SHA-256\">6c9b3dd142a09dc468e23ad39aad6f75a0f2b85125104469f026e52a474e464f</hash>\n-        <hash alg=\"SHA-512\">168026436a6bcf5e96c0c59606638abbdc30de4b405ae55afde70fdf2895e267a3d48bba6bdadc5a89f38e31da3d9a9dc91e1cab7ea76f5e04322cf1ec63b838</hash>\n-        <hash alg=\"SHA-384\">ba9ceaee1a37ca3201d6a1315ecb0327b495489efd0baa155c219c475df8d3eb69fe77ab0026563db406497626da6562</hash>\n-        <hash alg=\"SHA3-384\">b9dc44dcc7cc86d5036f26d54c4003a2d72808ae7b07a0808bb53505c6d4281b5ad213eb1f3d0fef1113dec57cb0dfe1</hash>\n-        <hash alg=\"SHA3-256\">fd8ab51846476c6c18822151c9ec07b39a9633010b5d20ea937fc6910407bc64</hash>\n-        <hash alg=\"SHA3-512\">b42fa528242981a9d70e4f68ab75a24292df5112c44c21b6f18cb9201ce747885ba1d4dc69bc3d14d0da46a6c2638f937c11bc45749abeb55dc89ddada90cdda</hash>\n+        <hash alg=\"MD5\">8bbba5bba4c26edb1b5c89e1a4912c22</hash>\n+        <hash alg=\"SHA-1\">583c0ce0354e6ed81d998d5b8f1786ade1e9f2c4</hash>\n+        <hash alg=\"SHA-256\">1dfc43d604693ce51ef3935f27dbfecd2d65636699a088eee32ff37cc50ea479</hash>\n+        <hash alg=\"SHA-512\">8ea71fae9a2a4ad9d06f27e21e078001e1a29761af85e81b91bf2a38e4dd8841184a12fdf467915c234d080aa28484452fe45b9bc0a381ce23d8366b03be1395</hash>\n+        <hash alg=\"SHA-384\">03553ac35a79266a150940fc62d3da7a389b47825102d91392f37b719da94af2d2355c2592d2b68604bf84248c73baf9</hash>\n+        <hash alg=\"SHA3-384\">986284d22c0bbb7abfbc1762447a44d0919c266002d6925c4ca75040f3950a3d943a71dedf2f72592e6a185218c498a9</hash>\n+        <hash alg=\"SHA3-256\">60242fd373d71575ffcb8a4f866b27d291b6acecf83be67e6ff51a13559dc016</hash>\n+        <hash alg=\"SHA3-512\">b7e0392fc793f19b3daf64c7e7b875fb2e4ec7ba2f1681d51c14c5c9efd5991817766753e62999a76bad83c624601f9f5a55304c4e06d2e3cd88ec4c609a1ede</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar</purl>\n+      <purl>pkg:maven/io.github.openfeign/feign-jackson@12.3?type=jar</purl>\n       <modified>false</modified>\n     </component>\n-    <component type=\"library\" bom-ref=\"pkg:maven/software.amazon.awssdk/metrics-spi@2.20.51?type=jar\">\n+    <component type=\"library\" bom-ref=\"pkg:maven/org.jreleaser/jreleaser-model-api@1.6.0?type=jar\">\n+      <group>org.jreleaser</group>\n+      <name>jreleaser-model-api</name>\n+      <version>1.6.0</version>\n+      <description>JReleaser Model API</description>\n+      <licenses>\n+        <license>\n+          <id>Apache-2.0</id>\n+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>\n+        </license>\n+      </licenses>\n+      <purl>pkg:maven/org.jreleaser/jreleaser-model-api@1.6.0?type=jar</purl>\n+      <modified>false</modified>\n+      <externalReferences>\n+        <reference type=\"vcs\">\n+          <url>https://github.com/jreleaser/jreleaser</url>\n+        </reference>\n+      </externalReferences>\n+    </component>\n+    <component type=\"library\" bom-ref=\"pkg:maven/software.amazon.awssdk/profiles@2.20.51?type=jar\">\n       <group>software.amazon.awssdk</group>\n-      <name>metrics-spi</name>\n+      <name>profiles</name>\n       <version>2.20.51</version>\n-      <description>This is the base module for SDK metrics feature. It contains the interfaces used for metrics feature\n-        that are used by other modules in the library.</description>\n+      <description>Profile module allows loading information from AWS configuration and credentials files.</description>\n       <hashes>\n-        <hash alg=\"MD5\">6d4145875ba12db8f7e3dac57e9ec0fb</hash>\n-        <hash alg=\"SHA-1\">b878ceda314f2bb0820afcf7eca3c5bfa7a16a37</hash>\n-        <hash alg=\"SHA-256\">ffa8629a48d23b175def8de4ef73026f399dad55345f7c56fa6772f2c2089dc7</hash>\n-        <hash alg=\"SHA-512\">bcc1aa5a3930ecc6e2568e240fd48dee8525666dc60e22de99c075dbe931d191f77cd47fd8ebcda7db2e8b3c0d64492f28d01d949a36b504cd345d8f0d1e04d3</hash>\n-        <hash alg=\"SHA-384\">f0065e7b61fa109e8785e7cd22173e362fa6253ae7eb482802b968faa9e7f0d660fe9eb684c719852087e057878bd8fc</hash>\n-        <hash alg=\"SHA3-384\">8c7cca3f3a754f4f5057f073eb525a50c339d8dec1c867ca0c8d0b4afe037ed63fb86b530812b786a74d0ee9605fe02a</hash>\n-        <hash alg=\"SHA3-256\">24844edfd3c2bc025d03d3d7d77c7fe8599210b5945e3e417d137f0edb81ebee</hash>\n-        <hash alg=\"SHA3-512\">5a42a47951ed5c05fbd1276794c23cc863746b01ea0ee6e85897eca401392b0bca77b8d284b53e68a3bd5df618f7d3637a0a7e2387c501f98db6bbd5f17546e6</hash>\n+        <hash alg=\"MD5\">f45574632db6f8bd3569e6f964ad7e11</hash>\n+        <hash alg=\"SHA-1\">3b1737f5f9d57b20f6982e4a12c069fc990afc20</hash>\n+        <hash alg=\"SHA-256\">1066653a1f695d965ea55800b27cc8e191315731de73ee8b3baa46a8047d0df8</hash>\n+        <hash alg=\"SHA-512\">7e34222ec60c0a9918ac6348e4b54b7f964e35f26416294df553fbdc424d38b2f777abb7498f11b261d8526eb86cf048e5695c9cbecc9f9058e83d51669ae7cb</hash>\n+        <hash alg=\"SHA-384\">d8cb4c2bdc51621c5370148e5fb810b6db796de698965cb140d0a2f57a5adc40afd650ed2ac5dc6c5f701d8dae5cbf0f</hash>\n+        <hash alg=\"SHA3-384\">44dcdf67fa96dcf92193b0d34bb1ea0ac71e44d1c3a2e87a7402b3ee6518afda08abd53d7dc440c9a6f3b3abe65ac1ac</hash>\n+        <hash alg=\"SHA3-256\">5a84e699501b049593fa8c8db89c4037a8f368376a4e4e084eeb8b5ba0fd1327</hash>\n+        <hash alg=\"SHA3-512\">67e2fef5e5c2d10e93abd4bc972d38df9cffc8f5250ed5d006fa1b37aaffae1c7f2acc3d7e9d7f7e9c5cbe30be99a5e922ddf630025b37f82fca0c8a613f75ad</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n-      <purl>pkg:maven/software.amazon.awssdk/metrics-spi@2.20.51?type=jar</purl>\n+      <purl>pkg:maven/software.amazon.awssdk/profiles@2.20.51?type=jar</purl>\n+      <modified>false</modified>\n+    </component>\n+    <component type=\"library\" bom-ref=\"pkg:maven/software.amazon.awssdk/aws-xml-protocol@2.20.51?type=jar\">\n+      <group>software.amazon.awssdk</group>\n+      <name>aws-xml-protocol</name>\n+      <version>2.20.51</version>\n+      <description>The AWS SDK for Java - module holds the classes for AWS Xml protocol</description>\n+      <hashes>\n+        <hash alg=\"MD5\">be387d57689357c6412edacc0ed7b918</hash>\n+        <hash alg=\"SHA-1\">8036f7d4821c5232b8dd0254a11b75a873878e71</hash>\n+        <hash alg=\"SHA-256\">05d3c0576b0abac13044a0a9088626f2c5a809d7829c239ee03da66d8475d277</hash>\n+        <hash alg=\"SHA-512\">62c00d21ba56575d4f73a3be511803ab8993862d6d58aeda5c9906ca6b4817b64f60e5d22227aa895b44cd9e87639c9bde6b2d5676e2f111825ebe3534a46c6b</hash>\n+        <hash alg=\"SHA-384\">148778757f5c2d60530f91df3338b0ab2d9c311fcb86c2036e4f39bf0cd46e1989f2fbe5ea5f4948d2e9ff5fc3385c09</hash>\n+        <hash alg=\"SHA3-384\">0e45c6bc2039f2ca6ed7b935352f686152fca5273b853f3592cbcda0952fdc26b2e562fd0416f761793d8d5fffdd084f</hash>\n+        <hash alg=\"SHA3-256\">e8736cad1e5ae6e7da24c9f90e413e317724893049af4e353f6f1daec5aa4422</hash>\n+        <hash alg=\"SHA3-512\">b394fc53985672621c467aadda64a44da58eab4a2a14bb47be2e5143b4dd9d85db346db34dbdbd7141991b7ad749644e32fbccff3d402d0585fc166f778b9537</hash>\n+      </hashes>\n+      <licenses>\n+        <license>\n+          <id>Apache-2.0</id>\n+        </license>\n+      </licenses>\n+      <purl>pkg:maven/software.amazon.awssdk/aws-xml-protocol@2.20.51?type=jar</purl>\n+      <modified>false</modified>\n+    </component>\n+    <component type=\"library\" bom-ref=\"pkg:maven/io.github.openfeign/feign-httpclient@12.3?type=jar\">\n+      <group>io.github.openfeign</group>\n+      <name>feign-httpclient</name>\n+      <version>12.3</version>\n+      <description>Feign Apache HttpClient</description>\n+      <hashes>\n+        <hash alg=\"MD5\">4ec31fa7f187c15f9967c7ffcf714449</hash>\n+        <hash alg=\"SHA-1\">0ea51fdb4797c3ab62e1f8a726d4e02cf522dba2</hash>\n+        <hash alg=\"SHA-256\">3a2833e18cc868bff19d6320f22054f96995dc073ed27edfeb2d83996d2ef37c</hash>\n+        <hash alg=\"SHA-512\">3440afa129150c035670cd098e6eba6f676afc82db2db53a10b20621e30658b411d820652e4668dab5ca615f599a41a06dc826378b5e783f88f26c2cddfce8ed</hash>\n+        <hash alg=\"SHA-384\">b8dc38126b28fb486d459e23ae61a34073f16f0ef7ec37f49636919d0fd5a8d86354d76314462dba94efd4f613db92ef</hash>\n+        <hash alg=\"SHA3-384\">7c4161078011223122067406e5ad6efedfcf45c71d6e081f37e3fba1c73578c748d5a5e60d372a5fa7159ec7737e71bb</hash>\n+        <hash alg=\"SHA3-256\">b6d851642b9a5628dbe3cab5706c9d434f1d59ec881cd5cdf6fae84f644eb7c1</hash>\n+        <hash alg=\"SHA3-512\">9b3b7edc25efc7345a9cc7b2fe0eccefd57fa40d62e6a85b4a698827b9c34ff568236d591f6d5645de7eb275be2b10aee80f42881f6068f0b1c38f274faf4c5f</hash>\n+      </hashes>\n+      <licenses>\n+        <license>\n+          <id>Apache-2.0</id>\n+        </license>\n+      </licenses>\n+      <purl>pkg:maven/io.github.openfeign/feign-httpclient@12.3?type=jar</purl>\n+      <modified>false</modified>\n+    </component>\n+    <component type=\"library\" bom-ref=\"pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.2?type=jar\">\n+      <group>com.fasterxml.jackson.core</group>\n+      <name>jackson-core</name>\n+      <version>2.14.2</version>\n+      <description>Core Jackson processing abstractions (aka Streaming API), implementation for JSON</description>\n+      <hashes>\n+        <hash alg=\"MD5\">6ee422ee4c481b2d5aacb2b5e36a7dc0</hash>\n+        <hash alg=\"SHA-1\">f804090e6399ce0cf78242db086017512dd71fcc</hash>\n+        <hash alg=\"SHA-256\">b5d37a77c88277b97e3593c8740925216c06df8e4172bbde058528df04ad3e7a</hash>\n+        <hash alg=\"SHA-512\">208953cf72691b3bab1ca2f9a045cccd3d75c46c90099ba884fbf16bc3e45045e5cd014d2c68c96e8a8826f87a5f0e18cb34b35e7ef03348953869c21e197367</hash>\n+        <hash alg=\"SHA-384\">e806595862c5fcdae801d9845befc1d12c97e6036ee839d34590dbd785a422d5832cf4fc5c7ee6e1a5ee7a59f37740f0</hash>\n+        <hash alg=\"SHA3-384\">4fa59f572f2e100e2eba6fc664a3b9f804fabd911a552cb40805f39e624a9c04246b679cf4b017bb782c8272877f49d2</hash>\n+        <hash alg=\"SHA3-256\">cef17d3a539cbf798cfb0bfa9faffa2b7baff3670b50743e91ee58b4c60b59f1</hash>\n+        <hash alg=\"SHA3-512\">fceeed5cb8fe4335d88282d15657762a4728483275a7ff45f50b9fe6a999757ccb37c415d001eb6250226f98f5c576b1b36a83e601fb393cfd34a811c2df5d00</hash>\n+      </hashes>\n+      <licenses>\n+        <license>\n+          <id>Apache-2.0</id>\n+        </license>\n+      </licenses>\n+      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.2?type=jar</purl>\n       <modified>false</modified>\n+      <externalReferences>\n+        <reference type=\"vcs\">\n+          <url>https://github.com/FasterXML/jackson-core</url>\n+        </reference>\n+      </externalReferences>\n     </component>\n   </components>\n   <dependencies>\n     <dependency ref=\"pkg:maven/software.amazon.awssdk/auth@2.20.51?type=jar\">\n       <dependency ref=\"pkg:maven/software.amazon.awssdk/regions@2.20.51?type=jar\"/>\n       <dependency ref=\"pkg:maven/software.amazon.awssdk/sdk-core@2.20.51?type=jar\"/>\n       <dependency ref=\"pkg:maven/software.amazon.awssdk/http-client-spi@2.20.51?type=jar\"/>\n"}]}