{"diffoscope-json-version": 1, "source1": "/input1", "source2": "/input2", "unified_diff": null, "details": [{"source1": "Pretty-printed", "source2": "Pretty-printed", "comments": ["Similarity: 0.8906700937950938%", "Differences: {\"'components'\": \"{0: {'group': 'commons-codec', 'name': 'commons-codec', 'version': '1.15', \"", " \"'description': 'The Apache Commons Codec package contains simple encoder and \"", " 'decoders for various formats such as Base64 and Hexadecimal. In addition to '", " 'these widely used encoders and decoders, the codec package also maintains a '", " \"collection of phonetic encoding utilities.', 'hashes': {0: {'content': \"", " \"'303baf002ce6d38219 [\u2026]"], "unified_diff": "@@ -1,333 +1,229 @@\n {\n \"bomFormat\": \"CycloneDX\",\n \"components\": [\n {\n- \"bom-ref\": \"pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar\",\n- \"description\": \"The slf4j API\",\n- \"group\": \"org.slf4j\",\n+ \"bom-ref\": \"pkg:maven/commons-codec/commons-codec@1.15?type=jar\",\n+ \"description\": \"The Apache Commons Codec package contains simple encoder and decoders for various formats such as Base64 and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.\",\n+ \"externalReferences\": [\n+ {\n+ \"type\": \"issue-tracker\",\n+ \"url\": \"https://issues.apache.org/jira/browse/CODEC\"\n+ },\n+ {\n+ \"type\": \"vcs\",\n+ \"url\": \"https://github.com/apache/commons-codec\"\n+ }\n+ ],\n+ \"group\": \"commons-codec\",\n \"hashes\": [\n {\n \"alg\": \"MD5\",\n- \"content\": \"403dffa46cdd2e3c82da19df4f394a4c\"\n+ \"content\": \"303baf002ce6d382198090aedd9d79a2\"\n },\n {\n \"alg\": \"SHA-1\",\n- \"content\": \"41eb7184ea9d556f23e18b5cb99cad1f8581fc00\"\n+ \"content\": \"49d94806b6e3dc933dacbd8acb0fdbab8ebd1e5d\"\n },\n {\n \"alg\": \"SHA-256\",\n- \"content\": \"5d6298b93a1905c32cda6478808ac14c2d4a47e91535e53c41f7feeb85d946f4\"\n+ \"content\": \"b3e9f6d63a790109bf0d056611fbed1cf69055826defeb9894a71369d246ed63\"\n },\n {\n \"alg\": \"SHA-512\",\n- \"content\": \"216d2cac27d501972c888f94dfa747d700b80d60813884b6ab4b12c6a3b17ed0c21a1d27e1aa4332c97c828f20039e3913d2763d7e1a3cef36ae4389a276e7a8\"\n+ \"content\": \"da30a716770795fce390e4dd340a8b728f220c6572383ffef55bd5839655d5611fcc06128b2144f6cdcb36f53072a12ec80b04afee787665e7ad0b6e888a6787\"\n },\n {\n \"alg\": \"SHA-384\",\n- \"content\": \"c25b39f418aa726ba8405dfd9b356131f89984e2ef5a55a724a2abf3b7c78443f671105835161d2414d602cf03da9f2d\"\n+ \"content\": \"05d0506283716472175d44c2a4766523397bf8a007c18848f9c9a61718cc8aa437f9cb4b91771037ab29a960860b62a0\"\n },\n {\n \"alg\": \"SHA3-384\",\n- \"content\": \"f33abfaac21badae6f85d3ebbc6c1204fd7fda3bb15173e763fa8cee95bce6a8270eec2c8f49343c66c8d2767bc317e1\"\n+ \"content\": \"12fad4ef78274b06f97b1243cea6f970088abde082d2de9377d915a34b44f7d7d67807c03e59c849b69f1544e2a9a1be\"\n },\n {\n \"alg\": \"SHA3-256\",\n- \"content\": \"6e00d4b264a2afc4ca4e98f716ecece66c32c626ca3f8c5d56b22092b6fe417b\"\n+ \"content\": \"87be248f33f241121f54aad61a9a460a79eabefbf1b5b0dd22aeb95b581f727e\"\n },\n {\n \"alg\": \"SHA3-512\",\n- \"content\": \"ad7b9142d370fc532a07cdd43881a129b012ff50e2bede3ac27d9bd31ec707bf2f45e82002fa59e962955cc38ab73cdd77713fca50cedc926c046f5617c1285b\"\n+ \"content\": \"8c992c9c569ebaa0bf956a4c5b34fbf5e1ed1c212c2dd896fa216183ee0bcd341e96698af4b9cec7e8880762faa081a3d3a27f51349aa457cb8e373e4f57c788\"\n }\n ],\n \"licenses\": [\n {\n \"license\": {\n- \"id\": \"MIT\",\n- \"url\": \"https://opensource.org/licenses/MIT\"\n+ \"id\": \"Apache-2.0\"\n }\n }\n ],\n \"modified\": false,\n- \"name\": \"slf4j-api\",\n- \"purl\": \"pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar\",\n- \"type\": \"library\",\n- \"version\": \"2.0.7\"\n- },\n- {\n- \"bom-ref\": \"pkg:maven/org.jreleaser/jreleaser-model-api@1.6.0?type=jar\",\n- \"group\": \"org.jreleaser\",\n- \"hashes\": [\n- {\n- \"alg\": \"MD5\",\n- \"content\": \"288354c621fdfef298e4e8cdc843e2c3\"\n- },\n- {\n- \"alg\": \"SHA-1\",\n- \"content\": \"54bcb05008c6f0b50433f8d0fe82e3a217317db1\"\n- },\n- {\n- \"alg\": \"SHA-256\",\n- \"content\": \"397e18c4fa02ba508e409a119866d4e78d64c6c76f5a4f22b3aefc027b662b9b\"\n- },\n- {\n- \"alg\": \"SHA-512\",\n- \"content\": \"67c4e2f9acb6db78c21cfd23d3411ce1e32b23690a1d5035a285b48cd9b996fd4c80b504d050e87a4a5604e6b56ca52878a464593f0bd8eea53059bcb263289f\"\n- },\n- {\n- \"alg\": \"SHA-384\",\n- \"content\": \"8f67be44af6f792c32f2b86d07738c52e5b742a650d010e8c0b5e60a62db627d5c695f23f24d814f232fc0246d03086c\"\n- },\n- {\n- \"alg\": \"SHA3-384\",\n- \"content\": \"1e5c3dffd4e3c545081904db6dcff892bd2f27285b4fa46a57cdd23c3fbb382ab06268e87d57212996387269b2c8b72f\"\n- },\n- {\n- \"alg\": \"SHA3-256\",\n- \"content\": \"d2b875e45846a0d17cf7f85d6289681ee42897519cdaca9625ffc56b1639909d\"\n- },\n- {\n- \"alg\": \"SHA3-512\",\n- \"content\": \"1a098f05c0735a7ed19cf374440818e9882b0288728f6658ce3709ac534c06cc7dc36ea4d7656a35281758d1ec09c31edf13a98d6680206a0c9fb1dff21ad04f\"\n- }\n- ],\n- \"licenses\": [],\n- \"modified\": false,\n- \"name\": \"jreleaser-model-api\",\n- \"purl\": \"pkg:maven/org.jreleaser/jreleaser-model-api@1.6.0?type=jar\",\n+ \"name\": \"commons-codec\",\n+ \"purl\": \"pkg:maven/commons-codec/commons-codec@1.15?type=jar\",\n \"type\": \"library\",\n- \"version\": \"1.6.0\"\n+ \"version\": \"1.15\"\n },\n {\n- \"bom-ref\": \"pkg:maven/org.tukaani/xz@1.9?type=jar\",\n- \"description\": \"XZ data compression\",\n- \"externalReferences\": [\n- {\n- \"type\": \"vcs\",\n- \"url\": \"https://git.tukaani.org/?p=xz-java.git\"\n- }\n- ],\n- \"group\": \"org.tukaani\",\n+ \"bom-ref\": \"pkg:maven/com.github.luben/zstd-jni@1.5.4-1?type=jar\",\n+ \"description\": \"JNI bindings for Zstd native library that provides fast and high compression lossless algorithm for Java and all JVM languages.\",\n+ \"group\": \"com.github.luben\",\n \"hashes\": [\n {\n \"alg\": \"MD5\",\n- \"content\": \"57c2fbfeb55e307ccae52e5322082e02\"\n+ \"content\": \"e787241d6ec56aac451be8b0d920c85b\"\n },\n {\n \"alg\": \"SHA-1\",\n- \"content\": \"1ea4bec1a921180164852c65006d928617bd2caf\"\n+ \"content\": \"291ccaacc039e41932de877303edb6af98a91c24\"\n },\n {\n \"alg\": \"SHA-256\",\n- \"content\": \"211b306cfc44f8f96df3a0a3ddaf75ba8c5289eed77d60d72f889bb855f535e5\"\n+ \"content\": \"f0469d891127dc5ae6bd2df93a5aa38c4d79bcd5f360fbb88c2785b52a572349\"\n },\n {\n \"alg\": \"SHA-512\",\n- \"content\": \"a4362db234d4e83683e90f5baf90c82107450cc4404acab96e3fab14b8a3d4588a19722171d32f27d18463682a6994cad9af0b1065c954e3a77ea7bdcf586bac\"\n+ \"content\": \"368916f0057d69fa4ba3768f6f617291ce4083b89913e46c2daa68cc94c48b92e0ca626241486f34a4d154502eb77b19e82c16c68b341ecfc82ccc0520f8d4a9\"\n },\n {\n \"alg\": \"SHA-384\",\n- \"content\": \"aa30349b094723369908369a18e2cb5beb5b7ca0b24b4d56c2f5725fae152220f6526466672b22bfec939e2e0622a01d\"\n+ \"content\": \"7e72184873689fa286d93d88f69f8baa24f818fcd61105a14332fbb5ed254363c0969afa98befd797a3762577bc77993\"\n },\n {\n \"alg\": \"SHA3-384\",\n- \"content\": \"b3e1fee7784188df5e1931c9e8137ac0e20e63f66f93e7f938a448fc0b3adb4be5205c7a5f1835007e233fee2696fc2c\"\n+ \"content\": \"1302636797b291dbbe19f39bdeb66160c1317b395a0a9360ba93aeaa262de7ad8de7257e6a997a9c659fdf53b3367ee6\"\n },\n {\n \"alg\": \"SHA3-256\",\n- \"content\": \"92eff603ed0aab557e1a45e17a74e80d8ec656b5f137197b23c429c903fa448f\"\n+ \"content\": \"54505ed16257a55330bb44c76719a687251d2623fa5e50a192b54c5067573255\"\n },\n {\n \"alg\": \"SHA3-512\",\n- \"content\": \"b290f92958f8cd91705331d8411140c23957ab8b568fbe19a70f4f1dc97eddc13d3a200df28a02ab5911ce18f546c33f720878be0f727edac839a6e63ee66ece\"\n+ \"content\": \"6e01cc9654c2d68c36a284e23c388267ac7013d534cceed0b6ab44679a6bbb6d03d4cfc52c967c4e76dbd5b8963c268e40d9890c927866ea00824821b0ecb82d\"\n }\n ],\n \"licenses\": [\n {\n \"license\": {\n- \"name\": \"Public Domain\"\n+ \"id\": \"BSD-2-Clause\"\n }\n }\n ],\n \"modified\": false,\n- \"name\": \"xz\",\n- \"purl\": \"pkg:maven/org.tukaani/xz@1.9?type=jar\",\n+ \"name\": \"zstd-jni\",\n+ \"publisher\": \"com.github.luben\",\n+ \"purl\": \"pkg:maven/com.github.luben/zstd-jni@1.5.4-1?type=jar\",\n \"type\": \"library\",\n- \"version\": \"1.9\"\n+ \"version\": \"1.5.4-1\"\n },\n {\n- \"bom-ref\": \"pkg:maven/org.bouncycastle/bcpg-jdk15on@1.70?type=jar\",\n- \"description\": \"The Bouncy Castle Java API for handling the OpenPGP protocol. This jar contains the OpenPGP API for JDK 1.5 and up. The APIs can be used in conjunction with a JCE/JCA provider such as the one provided with the Bouncy Castle Cryptography APIs.\",\n- \"externalReferences\": [\n- {\n- \"type\": \"issue-tracker\",\n- \"url\": \"https://github.com/bcgit/bc-java/issues\"\n- },\n- {\n- \"type\": \"vcs\",\n- \"url\": \"https://github.com/bcgit/bc-java\"\n- }\n- ],\n- \"group\": \"org.bouncycastle\",\n+ \"bom-ref\": \"pkg:maven/org.slf4j/jcl-over-slf4j@2.0.7?type=jar\",\n+ \"description\": \"JCL 1.2 implemented over SLF4J\",\n+ \"group\": \"org.slf4j\",\n \"hashes\": [\n {\n \"alg\": \"MD5\",\n- \"content\": \"01ddc3aa0289346f4db19d95039cefdb\"\n+ \"content\": \"4e8d6cd31f7e6277280c95157ac7845a\"\n },\n {\n \"alg\": \"SHA-1\",\n- \"content\": \"062f72ec06f31a6c31a3f3355fce0384b21126d7\"\n+ \"content\": \"f127fe5ee53404a8b3697cdd032dd1dd6a29dd77\"\n },\n {\n \"alg\": \"SHA-256\",\n- \"content\": \"4f08f4aa74048824151c98dd3e92e7165ac30659834404f08a8e843bdad32847\"\n+ \"content\": \"41806757e1d26dae5d6db2ca7d4a5176eed2d6e709cd86564d4a11dab0601742\"\n },\n {\n \"alg\": \"SHA-512\",\n- \"content\": \"4e240b7811ef90c090e83a181dace41da487555e4136221861b0060f9af6d8b316f2dd0472f747adb98ca5372f46055456ef04bdc0c3992188ab13302922fce9\"\n+ \"content\": \"221b39b85145cf7c245acb7f2692a02b6c5816f8b1187a1a77942dd39de958c1b01ecd066682eb88244f87b2a47513d40b6c1e69ef49a43b2a07ba818f124e17\"\n },\n {\n \"alg\": \"SHA-384\",\n- \"content\": \"d89dec6226112d13cbea461d84740699770dd7d8ad3f67ab65e7b49fd08a096a948e54da2e6a681925c4320f410bba37\"\n+ \"content\": \"fa8d53b46cd3ddab0bd265d384a90c35efef6a02a7822aa6f79065cee68d78f6ad7c4d248dea7497af449845dc962730\"\n },\n {\n \"alg\": \"SHA3-384\",\n- \"content\": \"5e8e8ca63cc550a8f50b627c4dd051f0eb5c31b99ff53dabd7d5f5d1ed98d0dc1d4963a09fc0db32f8e0ff769a2a6e65\"\n+ \"content\": \"cf06cfeaba477f7738f089ba401fb841074681d1c7f465546cdf0e95751a8bf912493428876a7d9108eef83f637c6a1e\"\n },\n {\n \"alg\": \"SHA3-256\",\n- \"content\": \"77f28e7e22b3b3a8d7b667fb7f783847c4b11ee7208833636e09e8b38390fd51\"\n+ \"content\": \"efbad2de8683215936c56b3f8fd3492f1cc27c2ee77595a99c794e18777dec42\"\n },\n {\n \"alg\": \"SHA3-512\",\n- \"content\": \"cb238dbb641c42c49b5801bdfa6432395e860c1a7485ba68e2d57887e3d22ff254718c6cbfa34c107bfb09d74e2f85c33b95f89dfa886e141a8247a0abf2b5c2\"\n+ \"content\": \"2707d5513e49f6e3ea6dec96510d360cfc125dab164ae5d99a1dcbd628751640f625a70ed749dad66024ae9fd7725f1c6c7f76de7f5a6efc9d8208a9e01922f7\"\n }\n ],\n \"licenses\": [\n {\n \"license\": {\n- \"name\": \"Bouncy Castle Licence\",\n- \"url\": \"https://www.bouncycastle.org/licence.html\"\n- }\n- },\n- {\n- \"license\": {\n- \"id\": \"Apache-1.1\",\n- \"url\": \"http://apache.org/licenses/LICENSE-1.1\"\n+ \"id\": \"Apache-2.0\"\n }\n }\n ],\n \"modified\": false,\n- \"name\": \"bcpg-jdk15on\",\n- \"purl\": \"pkg:maven/org.bouncycastle/bcpg-jdk15on@1.70?type=jar\",\n+ \"name\": \"jcl-over-slf4j\",\n+ \"purl\": \"pkg:maven/org.slf4j/jcl-over-slf4j@2.0.7?type=jar\",\n \"type\": \"library\",\n- \"version\": \"1.70\"\n+ \"version\": \"2.0.7\"\n },\n {\n- \"bom-ref\": \"pkg:maven/org.apache.commons/commons-compress@1.22?type=jar\",\n- \"description\": \"Apache Commons Compress software defines an API for working with compression and archive formats. These include: bzip2, gzip, pack200, lzma, xz, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.\",\n+ \"bom-ref\": \"pkg:maven/org.jreleaser/jreleaser-logger-api@1.6.0?type=jar\",\n+ \"description\": \"JReleaser logger API\",\n \"externalReferences\": [\n {\n- \"type\": \"issue-tracker\",\n- \"url\": \"https://issues.apache.org/jira/browse/COMPRESS\"\n- },\n- {\n \"type\": \"vcs\",\n- \"url\": \"https://gitbox.apache.org/repos/asf?p=commons-compress.git\"\n+ \"url\": \"https://github.com/jreleaser/jreleaser\"\n }\n ],\n- \"group\": \"org.apache.commons\",\n+ \"group\": \"org.jreleaser\",\n \"hashes\": [\n {\n \"alg\": \"MD5\",\n- \"content\": \"f1e4db16fee4291212d91409313a8086\"\n+ \"content\": \"e7da806a3427ab10405584067d880ead\"\n },\n {\n \"alg\": \"SHA-1\",\n- \"content\": \"691a8b4e6cf4248c3bc72c8b719337d5cb7359fa\"\n+ \"content\": \"92ae4e1826cf1d8321fcefd3f4ece0fa5cc4fc94\"\n },\n {\n \"alg\": \"SHA-256\",\n- \"content\": \"53d04a0efc7223baecaa303bd5d298eb0600e6b82b4076f9cecd558b97ba760b\"\n+ \"content\": \"372d4b6cee7af83429f9f054a69f73d38d6fb4c983b14ce97f2599791d59aee9\"\n },\n {\n \"alg\": \"SHA-512\",\n- \"content\": \"2d64fa6cd081fff5d73ee662a82f6186991fc13b4bdaee18b5f1bdcab06d9acb70e3713d18b296337791448251fbd6768bd84afaa817a10547652d0cfa885563\"\n+ \"content\": \"c4f4edf49e18f475b7b44677497250cd93af45e302fb39306a94dc8f0ee1f783921967de3e1f1b7591f970a359080f43b24c1499a363280d904c2519d2e9bcb2\"\n },\n {\n \"alg\": \"SHA-384\",\n- \"content\": \"295d7f69d151abbd784e1c4d021c77ce43e129bb5bda0c55762b32d77c8607863383297674ec8a212ea3dfe4007b0044\"\n+ \"content\": \"fcdadd6f2e8af30a7761e98f5c717ab1b8f6f0a79825a711454c8c9cc9842cf8fe0f5917b5ea48603eb0ee5788ed7a8b\"\n },\n {\n \"alg\": \"SHA3-384\",\n- \"content\": \"af04eb1b4647b1a041c5ee994c2c7a32556b5410b916fedb69905f166938baa43ba54fdc67084205794c02680d3c6349\"\n+ \"content\": \"42a3e276d69efc85ce5798c5cd78ba1a910ef328169fb39a1a685eea5b98e9c3bf495124f56b518d553f1ca2e63d62f7\"\n },\n {\n \"alg\": \"SHA3-256\",\n- \"content\": \"40f2960e82adfb171b0c5430271fdb0c0dae243aaf9b08021df54fd4d4a3a0b0\"\n+ \"content\": \"0fb4d06e278df39d6633d1a09ed01ad4f7788838668f2ebc097f919384cec97d\"\n },\n {\n \"alg\": \"SHA3-512\",\n- \"content\": \"f2c445f77bda3ef230a2b78ea88d86e48a7d6db36805f841d5cffe1f178842a161b2fda0b0d60162af210f18ed9c5bb9579c963291c26f715c1aa389d9a6785c\"\n+ \"content\": \"bb5a8b000955af1038d4d75c0fd8786561b3a2cf7bb804e09e42518a0bcc3e23ab01dd5236de4bdb58fd9b1a0e923982eb6cc6d0e450896bed9c86dfe808675d\"\n }\n ],\n \"licenses\": [\n {\n \"license\": {\n- \"id\": \"Apache-2.0\"\n+ \"id\": \"Apache-2.0\",\n+ \"url\": \"https://www.apache.org/licenses/LICENSE-2.0\"\n }\n }\n ],\n \"modified\": false,\n- \"name\": \"commons-compress\",\n- \"purl\": \"pkg:maven/org.apache.commons/commons-compress@1.22?type=jar\",\n- \"type\": \"library\",\n- \"version\": \"1.22\"\n- },\n- {\n- \"bom-ref\": \"pkg:maven/org.jreleaser/jreleaser-command-java-sdk@1.6.0?type=jar\",\n- \"group\": \"org.jreleaser\",\n- \"hashes\": [\n- {\n- \"alg\": \"MD5\",\n- \"content\": \"acbbfe01e59912d40bdaf2b516b8199d\"\n- },\n- {\n- \"alg\": \"SHA-1\",\n- \"content\": \"f922261945a1a25999d8b4c95326c38f15b167e8\"\n- },\n- {\n- \"alg\": \"SHA-256\",\n- \"content\": \"cc3bbe8d8a2cdcba73857752b9c2fbae3344c8597af7f37ac7cd0926b02d92ea\"\n- },\n- {\n- \"alg\": \"SHA-512\",\n- \"content\": \"d40f5671c80589711087a7dc5e4148ffee88ffacbca4db3a5360c0827e2ccc0e3fe80ed95e9c4b91d8c29617dbf6171a8a849a652e9b7a472e906692cd792498\"\n- },\n- {\n- \"alg\": \"SHA-384\",\n- \"content\": \"cc3b16425ab2505338e26c64b006157218391762d04cec9d4a9a2897ce33036a8cd6f6199b55c80e646bad434322c18c\"\n- },\n- {\n- \"alg\": \"SHA3-384\",\n- \"content\": \"09fe1086a3bbfda7fa50c320ab4c60b056ea2b37002f281bb413a17cc4f8846be4a9bcaf4b6f507a51af74474b189bd1\"\n- },\n- {\n- \"alg\": \"SHA3-256\",\n- \"content\": \"ef9ad8cd599799ffa70998131cfbaf2985c3070a8ff727becac8ceb5480ab900\"\n- },\n- {\n- \"alg\": \"SHA3-512\",\n- \"content\": \"a62c41fdaca8e1849d661ffded5af92bf09e43afc3497c5f923f5d7463756116dabef382cd8649a71473e9e938e698734b09e3d81153a852ff278876cd7ba8c9\"\n- }\n- ],\n- \"licenses\": [],\n- \"modified\": false,\n- \"name\": \"jreleaser-command-java-sdk\",\n- \"purl\": \"pkg:maven/org.jreleaser/jreleaser-command-java-sdk@1.6.0?type=jar\",\n+ \"name\": \"jreleaser-logger-api\",\n+ \"purl\": \"pkg:maven/org.jreleaser/jreleaser-logger-api@1.6.0?type=jar\",\n \"type\": \"library\",\n \"version\": \"1.6.0\"\n },\n {\n \"bom-ref\": \"pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.2?type=jar\",\n \"description\": \"Core annotations used for value types, used by Jackson data binding package.\",\n \"externalReferences\": [\n@@ -381,466 +277,553 @@\n \"modified\": false,\n \"name\": \"jackson-annotations\",\n \"purl\": \"pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.2?type=jar\",\n \"type\": \"library\",\n \"version\": \"2.14.2\"\n },\n {\n- \"bom-ref\": \"pkg:maven/commons-codec/commons-codec@1.15?type=jar\",\n- \"description\": \"The Apache Commons Codec package contains simple encoder and decoders for various formats such as Base64 and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.\",\n+ \"bom-ref\": \"pkg:maven/org.bouncycastle/bcpg-jdk15on@1.70?type=jar\",\n+ \"description\": \"The Bouncy Castle Java API for handling the OpenPGP protocol. This jar contains the OpenPGP API for JDK 1.5 and up. The APIs can be used in conjunction with a JCE/JCA provider such as the one provided with the Bouncy Castle Cryptography APIs.\",\n \"externalReferences\": [\n {\n \"type\": \"issue-tracker\",\n- \"url\": \"https://issues.apache.org/jira/browse/CODEC\"\n+ \"url\": \"https://github.com/bcgit/bc-java/issues\"\n },\n {\n \"type\": \"vcs\",\n- \"url\": \"https://github.com/apache/commons-codec\"\n+ \"url\": \"https://github.com/bcgit/bc-java\"\n }\n ],\n- \"group\": \"commons-codec\",\n+ \"group\": \"org.bouncycastle\",\n \"hashes\": [\n {\n \"alg\": \"MD5\",\n- \"content\": \"303baf002ce6d382198090aedd9d79a2\"\n+ \"content\": \"01ddc3aa0289346f4db19d95039cefdb\"\n },\n {\n \"alg\": \"SHA-1\",\n- \"content\": \"49d94806b6e3dc933dacbd8acb0fdbab8ebd1e5d\"\n+ \"content\": \"062f72ec06f31a6c31a3f3355fce0384b21126d7\"\n },\n {\n \"alg\": \"SHA-256\",\n- \"content\": \"b3e9f6d63a790109bf0d056611fbed1cf69055826defeb9894a71369d246ed63\"\n+ \"content\": \"4f08f4aa74048824151c98dd3e92e7165ac30659834404f08a8e843bdad32847\"\n },\n {\n \"alg\": \"SHA-512\",\n- \"content\": \"da30a716770795fce390e4dd340a8b728f220c6572383ffef55bd5839655d5611fcc06128b2144f6cdcb36f53072a12ec80b04afee787665e7ad0b6e888a6787\"\n+ \"content\": \"4e240b7811ef90c090e83a181dace41da487555e4136221861b0060f9af6d8b316f2dd0472f747adb98ca5372f46055456ef04bdc0c3992188ab13302922fce9\"\n },\n {\n \"alg\": \"SHA-384\",\n- \"content\": \"05d0506283716472175d44c2a4766523397bf8a007c18848f9c9a61718cc8aa437f9cb4b91771037ab29a960860b62a0\"\n+ \"content\": \"d89dec6226112d13cbea461d84740699770dd7d8ad3f67ab65e7b49fd08a096a948e54da2e6a681925c4320f410bba37\"\n },\n {\n \"alg\": \"SHA3-384\",\n- \"content\": \"12fad4ef78274b06f97b1243cea6f970088abde082d2de9377d915a34b44f7d7d67807c03e59c849b69f1544e2a9a1be\"\n+ \"content\": \"5e8e8ca63cc550a8f50b627c4dd051f0eb5c31b99ff53dabd7d5f5d1ed98d0dc1d4963a09fc0db32f8e0ff769a2a6e65\"\n },\n {\n \"alg\": \"SHA3-256\",\n- \"content\": \"87be248f33f241121f54aad61a9a460a79eabefbf1b5b0dd22aeb95b581f727e\"\n+ \"content\": \"77f28e7e22b3b3a8d7b667fb7f783847c4b11ee7208833636e09e8b38390fd51\"\n },\n {\n \"alg\": \"SHA3-512\",\n- \"content\": \"8c992c9c569ebaa0bf956a4c5b34fbf5e1ed1c212c2dd896fa216183ee0bcd341e96698af4b9cec7e8880762faa081a3d3a27f51349aa457cb8e373e4f57c788\"\n+ \"content\": \"cb238dbb641c42c49b5801bdfa6432395e860c1a7485ba68e2d57887e3d22ff254718c6cbfa34c107bfb09d74e2f85c33b95f89dfa886e141a8247a0abf2b5c2\"\n }\n ],\n \"licenses\": [\n {\n \"license\": {\n- \"id\": \"Apache-2.0\"\n+ \"name\": \"Bouncy Castle Licence\",\n+ \"url\": \"https://www.bouncycastle.org/licence.html\"\n+ }\n+ },\n+ {\n+ \"license\": {\n+ \"id\": \"Apache-1.1\",\n+ \"url\": \"http://apache.org/licenses/LICENSE-1.1\"\n }\n }\n ],\n \"modified\": false,\n- \"name\": \"commons-codec\",\n- \"purl\": \"pkg:maven/commons-codec/commons-codec@1.15?type=jar\",\n+ \"name\": \"bcpg-jdk15on\",\n+ \"purl\": \"pkg:maven/org.bouncycastle/bcpg-jdk15on@1.70?type=jar\",\n \"type\": \"library\",\n- \"version\": \"1.15\"\n+ \"version\": \"1.70\"\n },\n {\n- \"bom-ref\": \"pkg:maven/org.jreleaser/jreleaser-logger-api@1.6.0?type=jar\",\n- \"group\": \"org.jreleaser\",\n- \"hashes\": [\n- {\n- \"alg\": \"MD5\",\n- \"content\": \"e7da806a3427ab10405584067d880ead\"\n- },\n- {\n- \"alg\": \"SHA-1\",\n- \"content\": \"92ae4e1826cf1d8321fcefd3f4ece0fa5cc4fc94\"\n- },\n+ \"bom-ref\": \"pkg:maven/org.jreleaser/jreleaser-tool-java-sdk@1.6.0?type=jar\",\n+ \"description\": \"Java SDK for Tools\",\n+ \"externalReferences\": [\n {\n- \"alg\": \"SHA-256\",\n- \"content\": \"372d4b6cee7af83429f9f054a69f73d38d6fb4c983b14ce97f2599791d59aee9\"\n- },\n+ \"type\": \"vcs\",\n+ \"url\": \"https://github.com/jreleaser/jreleaser\"\n+ }\n+ ],\n+ \"group\": \"org.jreleaser\",\n+ \"licenses\": [\n {\n- \"alg\": \"SHA-512\",\n- \"content\": \"c4f4edf49e18f475b7b44677497250cd93af45e302fb39306a94dc8f0ee1f783921967de3e1f1b7591f970a359080f43b24c1499a363280d904c2519d2e9bcb2\"\n- },\n+ \"license\": {\n+ \"id\": \"Apache-2.0\",\n+ \"url\": \"https://www.apache.org/licenses/LICENSE-2.0\"\n+ }\n+ }\n+ ],\n+ \"modified\": false,\n+ \"name\": \"jreleaser-tool-java-sdk\",\n+ \"purl\": \"pkg:maven/org.jreleaser/jreleaser-tool-java-sdk@1.6.0?type=jar\",\n+ \"type\": \"library\",\n+ \"version\": \"1.6.0\"\n+ },\n+ {\n+ \"bom-ref\": \"pkg:maven/org.jreleaser/jreleaser-command-java-sdk@1.6.0?type=jar\",\n+ \"description\": \"JReleaser command SDK\",\n+ \"externalReferences\": [\n {\n- \"alg\": \"SHA-384\",\n- \"content\": \"fcdadd6f2e8af30a7761e98f5c717ab1b8f6f0a79825a711454c8c9cc9842cf8fe0f5917b5ea48603eb0ee5788ed7a8b\"\n- },\n+ \"type\": \"vcs\",\n+ \"url\": \"https://github.com/jreleaser/jreleaser\"\n+ }\n+ ],\n+ \"group\": \"org.jreleaser\",\n+ \"licenses\": [\n {\n- \"alg\": \"SHA3-384\",\n- \"content\": \"42a3e276d69efc85ce5798c5cd78ba1a910ef328169fb39a1a685eea5b98e9c3bf495124f56b518d553f1ca2e63d62f7\"\n- },\n+ \"license\": {\n+ \"id\": \"Apache-2.0\",\n+ \"url\": \"https://www.apache.org/licenses/LICENSE-2.0\"\n+ }\n+ }\n+ ],\n+ \"modified\": false,\n+ \"name\": \"jreleaser-command-java-sdk\",\n+ \"purl\": \"pkg:maven/org.jreleaser/jreleaser-command-java-sdk@1.6.0?type=jar\",\n+ \"type\": \"library\",\n+ \"version\": \"1.6.0\"\n+ },\n+ {\n+ \"bom-ref\": \"pkg:maven/org.jreleaser/jreleaser-model-api@1.6.0?type=jar\",\n+ \"description\": \"JReleaser Model API\",\n+ \"externalReferences\": [\n {\n- \"alg\": \"SHA3-256\",\n- \"content\": \"0fb4d06e278df39d6633d1a09ed01ad4f7788838668f2ebc097f919384cec97d\"\n- },\n+ \"type\": \"vcs\",\n+ \"url\": \"https://github.com/jreleaser/jreleaser\"\n+ }\n+ ],\n+ \"group\": \"org.jreleaser\",\n+ \"licenses\": [\n {\n- \"alg\": \"SHA3-512\",\n- \"content\": \"bb5a8b000955af1038d4d75c0fd8786561b3a2cf7bb804e09e42518a0bcc3e23ab01dd5236de4bdb58fd9b1a0e923982eb6cc6d0e450896bed9c86dfe808675d\"\n+ \"license\": {\n+ \"id\": \"Apache-2.0\",\n+ \"url\": \"https://www.apache.org/licenses/LICENSE-2.0\"\n+ }\n }\n ],\n- \"licenses\": [],\n \"modified\": false,\n- \"name\": \"jreleaser-logger-api\",\n- \"purl\": \"pkg:maven/org.jreleaser/jreleaser-logger-api@1.6.0?type=jar\",\n+ \"name\": \"jreleaser-model-api\",\n+ \"purl\": \"pkg:maven/org.jreleaser/jreleaser-model-api@1.6.0?type=jar\",\n \"type\": \"library\",\n \"version\": \"1.6.0\"\n },\n {\n- \"bom-ref\": \"pkg:maven/org.jreleaser/jreleaser-tool-java-sdk@1.6.0?type=jar\",\n+ \"bom-ref\": \"pkg:maven/org.jreleaser/jreleaser-utils@1.6.0?type=jar\",\n+ \"description\": \"JReleaser utility classes\",\n+ \"externalReferences\": [\n+ {\n+ \"type\": \"vcs\",\n+ \"url\": \"https://github.com/jreleaser/jreleaser\"\n+ }\n+ ],\n \"group\": \"org.jreleaser\",\n \"hashes\": [\n {\n \"alg\": \"MD5\",\n- \"content\": \"abfd7ce4581351b44b505c26c1367955\"\n+ \"content\": \"ca784b5aa352b016a37b393e9e500325\"\n },\n {\n \"alg\": \"SHA-1\",\n- \"content\": \"ef1e1b370a0a24a202089f732598f82ce91c74f2\"\n+ \"content\": \"b0dde5ebbe5a98e5fa90b101dca5ad56e92c49c8\"\n },\n {\n \"alg\": \"SHA-256\",\n- \"content\": \"a4bcf1548d74752460e28bd3ab7e43b779b5a8f446285b8e7643dd83983f5b7f\"\n+ \"content\": \"02b038af2f098d6019b94f4f4e55b8f901d2b5b4a072b083b23e47bd6a3e23cd\"\n },\n {\n \"alg\": \"SHA-512\",\n- \"content\": \"e14548ab617020cac195b98b2b6bf04043cf409ef395783e8c2c38441c761f38dd34b4858d4d7e26d2c69fde233ccaa102f180d3ff547efc29e475d0c38b7b40\"\n+ \"content\": \"9b5e03766473ee854f877182a758a4842a9566772405af73cd200388eeeb981712e6a3e57f4f2f14f09a912b0cad625a75c5441b57eaa238699beabf327dd56a\"\n },\n {\n \"alg\": \"SHA-384\",\n- \"content\": \"85953ec5ec2714df877d6012db03c5d88a971dcb35cfc43c197570e8e2b010c1c292e228e4fe8c7f93418e11868b8654\"\n+ \"content\": \"ebc800a8a0a6d19ac2bc922598f8913df5a5eb972dc46ba4eadec5034538c9c95866839670dbf92ca93b075dcb659a0c\"\n },\n {\n \"alg\": \"SHA3-384\",\n- \"content\": \"cb294f21ab1d8a8c8f488e2f60b456e66985b55dbb5ecc56646b57fc6fbb9e36aa69801bdb6c1ea5825288baab329183\"\n+ \"content\": \"ed0ba35caf8b7d7dc67d7350617b6cbd54de336634fd5927f03768a89f74ede798ecf343964ef0484302ee262617756b\"\n },\n {\n \"alg\": \"SHA3-256\",\n- \"content\": \"cf8c1f78e8630a84e28269970a18752616d82aec3a5d9297459244fb4d52980a\"\n+ \"content\": \"b81154ce5c428820626ee1a99e7f9bbe63d4803f7f311744a26bb8331fb193cc\"\n },\n {\n \"alg\": \"SHA3-512\",\n- \"content\": \"bd42233ee963b74dd472abde6801b8140f3ec1b08e503e486bd7c8ef7575e65a72f0bd8a3ca996adbc832d4df6be8e2b500a425b77dfdfd80e57818af84a79c2\"\n+ \"content\": \"b6429f8944cedd026f7b0c30328f8b5e2717493624cee82df48f7e69c8fe8a26b0542d447b1795c7fad7ff90affadcc087d69a576d69cbaccf3ccf1ca962be56\"\n+ }\n+ ],\n+ \"licenses\": [\n+ {\n+ \"license\": {\n+ \"id\": \"Apache-2.0\",\n+ \"url\": \"https://www.apache.org/licenses/LICENSE-2.0\"\n+ }\n }\n ],\n- \"licenses\": [],\n \"modified\": false,\n- \"name\": \"jreleaser-tool-java-sdk\",\n- \"purl\": \"pkg:maven/org.jreleaser/jreleaser-tool-java-sdk@1.6.0?type=jar\",\n+ \"name\": \"jreleaser-utils\",\n+ \"purl\": \"pkg:maven/org.jreleaser/jreleaser-utils@1.6.0?type=jar\",\n \"type\": \"library\",\n \"version\": \"1.6.0\"\n },\n {\n- \"bom-ref\": \"pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.2?type=jar\",\n- \"description\": \"General data-binding functionality for Jackson: works on core streaming API\",\n+ \"bom-ref\": \"pkg:maven/org.apache.commons/commons-compress@1.22?type=jar\",\n+ \"description\": \"Apache Commons Compress software defines an API for working with compression and archive formats. These include: bzip2, gzip, pack200, lzma, xz, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.\",\n \"externalReferences\": [\n {\n+ \"type\": \"issue-tracker\",\n+ \"url\": \"https://issues.apache.org/jira/browse/COMPRESS\"\n+ },\n+ {\n \"type\": \"vcs\",\n- \"url\": \"https://github.com/FasterXML/jackson-databind\"\n+ \"url\": \"https://gitbox.apache.org/repos/asf?p=commons-compress.git\"\n }\n ],\n- \"group\": \"com.fasterxml.jackson.core\",\n+ \"group\": \"org.apache.commons\",\n \"hashes\": [\n {\n \"alg\": \"MD5\",\n- \"content\": \"c1b12dd14734cd1986132bf55042dd7e\"\n+ \"content\": \"f1e4db16fee4291212d91409313a8086\"\n },\n {\n \"alg\": \"SHA-1\",\n- \"content\": \"01e71fddbc80bb86f71a6345ac1e8ab8a00e7134\"\n+ \"content\": \"691a8b4e6cf4248c3bc72c8b719337d5cb7359fa\"\n },\n {\n \"alg\": \"SHA-256\",\n- \"content\": \"501d3abce4d18dcc381058ec593c5b94477906bba6efbac14dae40a642f77424\"\n+ \"content\": \"53d04a0efc7223baecaa303bd5d298eb0600e6b82b4076f9cecd558b97ba760b\"\n },\n {\n \"alg\": \"SHA-512\",\n- \"content\": \"85473a29d23292f49092af9e7a7a63993206847c53b3e71f3c67245d68f7b19cc7c341e0ece409eb5e96602df98a848e957d8691fdd2c5fcddd807df9078255e\"\n+ \"content\": \"2d64fa6cd081fff5d73ee662a82f6186991fc13b4bdaee18b5f1bdcab06d9acb70e3713d18b296337791448251fbd6768bd84afaa817a10547652d0cfa885563\"\n },\n {\n \"alg\": \"SHA-384\",\n- \"content\": \"5c54d6c497cb329c3424a30319bf657ea222349eadc5ae74c30e8dc1525d7b60b7785f4d20370267b03343dd738cc13e\"\n+ \"content\": \"295d7f69d151abbd784e1c4d021c77ce43e129bb5bda0c55762b32d77c8607863383297674ec8a212ea3dfe4007b0044\"\n },\n {\n \"alg\": \"SHA3-384\",\n- \"content\": \"98ff0b2a4dfc1faf319d4b0d38376c3c7a58b65d071db293232eed810adf2e525fecee3be45c99b41e20cf6a3a8ebef9\"\n+ \"content\": \"af04eb1b4647b1a041c5ee994c2c7a32556b5410b916fedb69905f166938baa43ba54fdc67084205794c02680d3c6349\"\n },\n {\n \"alg\": \"SHA3-256\",\n- \"content\": \"2dba45f78a0d37402083975e18dbb3201705faf7e533c3e9721b9364c2a1ab0f\"\n+ \"content\": \"40f2960e82adfb171b0c5430271fdb0c0dae243aaf9b08021df54fd4d4a3a0b0\"\n },\n {\n \"alg\": \"SHA3-512\",\n- \"content\": \"76ef73198269cfd0922f4ae86c8b7e6a9cd1b96ee55da43ebfe57dd34365cc1c5c5630fadf79e46156a52b6b96b7d1f694f5e4f5c4f6a3d3ebb31c927e414435\"\n+ \"content\": \"f2c445f77bda3ef230a2b78ea88d86e48a7d6db36805f841d5cffe1f178842a161b2fda0b0d60162af210f18ed9c5bb9579c963291c26f715c1aa389d9a6785c\"\n }\n ],\n \"licenses\": [\n {\n \"license\": {\n \"id\": \"Apache-2.0\"\n }\n }\n ],\n \"modified\": false,\n- \"name\": \"jackson-databind\",\n- \"purl\": \"pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.2?type=jar\",\n+ \"name\": \"commons-compress\",\n+ \"purl\": \"pkg:maven/org.apache.commons/commons-compress@1.22?type=jar\",\n \"type\": \"library\",\n- \"version\": \"2.14.2\"\n+ \"version\": \"1.22\"\n },\n {\n- \"bom-ref\": \"pkg:maven/com.github.luben/zstd-jni@1.5.4-1?type=jar\",\n- \"description\": \"JNI bindings for Zstd native library that provides fast and high compression lossless algorithm for Java and all JVM languages.\",\n- \"group\": \"com.github.luben\",\n+ \"bom-ref\": \"pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar\",\n+ \"description\": \"The slf4j API\",\n+ \"group\": \"org.slf4j\",\n \"hashes\": [\n {\n \"alg\": \"MD5\",\n- \"content\": \"e787241d6ec56aac451be8b0d920c85b\"\n+ \"content\": \"403dffa46cdd2e3c82da19df4f394a4c\"\n },\n {\n \"alg\": \"SHA-1\",\n- \"content\": \"291ccaacc039e41932de877303edb6af98a91c24\"\n+ \"content\": \"41eb7184ea9d556f23e18b5cb99cad1f8581fc00\"\n },\n {\n \"alg\": \"SHA-256\",\n- \"content\": \"f0469d891127dc5ae6bd2df93a5aa38c4d79bcd5f360fbb88c2785b52a572349\"\n+ \"content\": \"5d6298b93a1905c32cda6478808ac14c2d4a47e91535e53c41f7feeb85d946f4\"\n },\n {\n \"alg\": \"SHA-512\",\n- \"content\": \"368916f0057d69fa4ba3768f6f617291ce4083b89913e46c2daa68cc94c48b92e0ca626241486f34a4d154502eb77b19e82c16c68b341ecfc82ccc0520f8d4a9\"\n+ \"content\": \"216d2cac27d501972c888f94dfa747d700b80d60813884b6ab4b12c6a3b17ed0c21a1d27e1aa4332c97c828f20039e3913d2763d7e1a3cef36ae4389a276e7a8\"\n },\n {\n \"alg\": \"SHA-384\",\n- \"content\": \"7e72184873689fa286d93d88f69f8baa24f818fcd61105a14332fbb5ed254363c0969afa98befd797a3762577bc77993\"\n+ \"content\": \"c25b39f418aa726ba8405dfd9b356131f89984e2ef5a55a724a2abf3b7c78443f671105835161d2414d602cf03da9f2d\"\n },\n {\n \"alg\": \"SHA3-384\",\n- \"content\": \"1302636797b291dbbe19f39bdeb66160c1317b395a0a9360ba93aeaa262de7ad8de7257e6a997a9c659fdf53b3367ee6\"\n+ \"content\": \"f33abfaac21badae6f85d3ebbc6c1204fd7fda3bb15173e763fa8cee95bce6a8270eec2c8f49343c66c8d2767bc317e1\"\n },\n {\n \"alg\": \"SHA3-256\",\n- \"content\": \"54505ed16257a55330bb44c76719a687251d2623fa5e50a192b54c5067573255\"\n+ \"content\": \"6e00d4b264a2afc4ca4e98f716ecece66c32c626ca3f8c5d56b22092b6fe417b\"\n },\n {\n \"alg\": \"SHA3-512\",\n- \"content\": \"6e01cc9654c2d68c36a284e23c388267ac7013d534cceed0b6ab44679a6bbb6d03d4cfc52c967c4e76dbd5b8963c268e40d9890c927866ea00824821b0ecb82d\"\n+ \"content\": \"ad7b9142d370fc532a07cdd43881a129b012ff50e2bede3ac27d9bd31ec707bf2f45e82002fa59e962955cc38ab73cdd77713fca50cedc926c046f5617c1285b\"\n }\n ],\n \"licenses\": [\n {\n \"license\": {\n- \"id\": \"BSD-2-Clause\"\n+ \"id\": \"MIT\",\n+ \"url\": \"https://opensource.org/licenses/MIT\"\n }\n }\n ],\n \"modified\": false,\n- \"name\": \"zstd-jni\",\n- \"publisher\": \"com.github.luben\",\n- \"purl\": \"pkg:maven/com.github.luben/zstd-jni@1.5.4-1?type=jar\",\n+ \"name\": \"slf4j-api\",\n+ \"purl\": \"pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar\",\n \"type\": \"library\",\n- \"version\": \"1.5.4-1\"\n+ \"version\": \"2.0.7\"\n },\n {\n- \"bom-ref\": \"pkg:maven/org.slf4j/jcl-over-slf4j@2.0.7?type=jar\",\n- \"description\": \"JCL 1.2 implemented over SLF4J\",\n- \"group\": \"org.slf4j\",\n+ \"bom-ref\": \"pkg:maven/com.github.spullara.mustache.java/compiler@0.9.10?type=jar\",\n+ \"description\": \"Implementation of mustache.js for Java\",\n+ \"externalReferences\": [\n+ {\n+ \"type\": \"vcs\",\n+ \"url\": \"http://github.com/spullara/mustache.java\"\n+ }\n+ ],\n+ \"group\": \"com.github.spullara.mustache.java\",\n \"hashes\": [\n {\n \"alg\": \"MD5\",\n- \"content\": \"4e8d6cd31f7e6277280c95157ac7845a\"\n+ \"content\": \"5638fc78a17d5063cc4b0d00f6e87491\"\n },\n {\n \"alg\": \"SHA-1\",\n- \"content\": \"f127fe5ee53404a8b3697cdd032dd1dd6a29dd77\"\n+ \"content\": \"6111ae24e3be9ecbd75f5fe908583fc14b4f0174\"\n },\n {\n \"alg\": \"SHA-256\",\n- \"content\": \"41806757e1d26dae5d6db2ca7d4a5176eed2d6e709cd86564d4a11dab0601742\"\n+ \"content\": \"2b5a9217811cb99846a473fa8e0d233eb33629347b7f44941f6c0fbd4cdf1038\"\n },\n {\n \"alg\": \"SHA-512\",\n- \"content\": \"221b39b85145cf7c245acb7f2692a02b6c5816f8b1187a1a77942dd39de958c1b01ecd066682eb88244f87b2a47513d40b6c1e69ef49a43b2a07ba818f124e17\"\n+ \"content\": \"2ccf3196af2b518c96df748a72a0122d033dc222e1fab3e12f3e2094146d44bec20bd1502390b59abf090cbdf5dd4d580084b07fb7241248b5b8da2605207559\"\n },\n {\n \"alg\": \"SHA-384\",\n- \"content\": \"fa8d53b46cd3ddab0bd265d384a90c35efef6a02a7822aa6f79065cee68d78f6ad7c4d248dea7497af449845dc962730\"\n+ \"content\": \"0204e77a4a64701af5000df6601f4f4c23cb5e53dd39a1325615d4f942cd2c91d04bbac20348ae49731f586282165c33\"\n },\n {\n \"alg\": \"SHA3-384\",\n- \"content\": \"cf06cfeaba477f7738f089ba401fb841074681d1c7f465546cdf0e95751a8bf912493428876a7d9108eef83f637c6a1e\"\n+ \"content\": \"0960da7175835484471f485d481499f8b65f134ff4f1629618560adaa5a08caa897fbefcea190f93106ee9e3273381b2\"\n },\n {\n \"alg\": \"SHA3-256\",\n- \"content\": \"efbad2de8683215936c56b3f8fd3492f1cc27c2ee77595a99c794e18777dec42\"\n+ \"content\": \"cfb7e640392ef590069e6b1d059dc20b8fcff984a4b267b3969fcf50ed0edd4f\"\n },\n {\n \"alg\": \"SHA3-512\",\n- \"content\": \"2707d5513e49f6e3ea6dec96510d360cfc125dab164ae5d99a1dcbd628751640f625a70ed749dad66024ae9fd7725f1c6c7f76de7f5a6efc9d8208a9e01922f7\"\n+ \"content\": \"db3dad3809879bca835a04da890fd86dbc58ba6637c72f07d02e39d13645ebb6c640b7fecc18a779e58946072078bdf114b91445026a32dd6501b5d1c6e7d933\"\n }\n ],\n \"licenses\": [\n {\n \"license\": {\n- \"id\": \"Apache-2.0\"\n+ \"id\": \"Apache-2.0\",\n+ \"url\": \"https://www.apache.org/licenses/LICENSE-2.0\"\n }\n }\n ],\n \"modified\": false,\n- \"name\": \"jcl-over-slf4j\",\n- \"purl\": \"pkg:maven/org.slf4j/jcl-over-slf4j@2.0.7?type=jar\",\n+ \"name\": \"compiler\",\n+ \"purl\": \"pkg:maven/com.github.spullara.mustache.java/compiler@0.9.10?type=jar\",\n \"type\": \"library\",\n- \"version\": \"2.0.7\"\n+ \"version\": \"0.9.10\"\n },\n {\n- \"bom-ref\": \"pkg:maven/org.jreleaser/jreleaser-resource-bundle@1.6.0?type=jar\",\n- \"group\": \"org.jreleaser\",\n+ \"bom-ref\": \"pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.2?type=jar\",\n+ \"description\": \"General data-binding functionality for Jackson: works on core streaming API\",\n+ \"externalReferences\": [\n+ {\n+ \"type\": \"vcs\",\n+ \"url\": \"https://github.com/FasterXML/jackson-databind\"\n+ }\n+ ],\n+ \"group\": \"com.fasterxml.jackson.core\",\n \"hashes\": [\n {\n \"alg\": \"MD5\",\n- \"content\": \"8419930ec5e42489dad5e26749a994eb\"\n+ \"content\": \"c1b12dd14734cd1986132bf55042dd7e\"\n },\n {\n \"alg\": \"SHA-1\",\n- \"content\": \"050aba092fa794e0cb91158de894a97aff581356\"\n+ \"content\": \"01e71fddbc80bb86f71a6345ac1e8ab8a00e7134\"\n },\n {\n \"alg\": \"SHA-256\",\n- \"content\": \"38434b31fac439399aa37018fa69302a9d1b04be6efb7b23d53d18615e1f4f2b\"\n+ \"content\": \"501d3abce4d18dcc381058ec593c5b94477906bba6efbac14dae40a642f77424\"\n },\n {\n \"alg\": \"SHA-512\",\n- \"content\": \"c77c476e972e17b25de3aecf75d71482535d68cdc5e4bf556f5d4cab17345b9318d47fa42c9da671769f9bcf7f549efde70b64eff5cb189c805bb406fd705cb8\"\n+ \"content\": \"85473a29d23292f49092af9e7a7a63993206847c53b3e71f3c67245d68f7b19cc7c341e0ece409eb5e96602df98a848e957d8691fdd2c5fcddd807df9078255e\"\n },\n {\n \"alg\": \"SHA-384\",\n- \"content\": \"b1d8f56681f39c638806e669447d9600507946448b528060d98afc2123c637980ba5609aba4b357c83acd772bfbdb73e\"\n+ \"content\": \"5c54d6c497cb329c3424a30319bf657ea222349eadc5ae74c30e8dc1525d7b60b7785f4d20370267b03343dd738cc13e\"\n },\n {\n \"alg\": \"SHA3-384\",\n- \"content\": \"74a52a9891c520a0f90ffbab33da0219cd787bbe309ae8eca303de00c6041692554e8d650a6a3925e057322bd00700ff\"\n+ \"content\": \"98ff0b2a4dfc1faf319d4b0d38376c3c7a58b65d071db293232eed810adf2e525fecee3be45c99b41e20cf6a3a8ebef9\"\n },\n {\n \"alg\": \"SHA3-256\",\n- \"content\": \"304bae90a7c53e6ad711e54bb8847c3eedc0e18cac03bffa14729918cb59efce\"\n+ \"content\": \"2dba45f78a0d37402083975e18dbb3201705faf7e533c3e9721b9364c2a1ab0f\"\n },\n {\n \"alg\": \"SHA3-512\",\n- \"content\": \"16a31cb40ed20dcaa5d34cb6aa2b81325f285b7feb5dda2486206496449fd548ef51117b38a8074a4a106fba9836de72232762dff60f535cd76f5848860c2f6c\"\n+ \"content\": \"76ef73198269cfd0922f4ae86c8b7e6a9cd1b96ee55da43ebfe57dd34365cc1c5c5630fadf79e46156a52b6b96b7d1f694f5e4f5c4f6a3d3ebb31c927e414435\"\n+ }\n+ ],\n+ \"licenses\": [\n+ {\n+ \"license\": {\n+ \"id\": \"Apache-2.0\"\n+ }\n }\n ],\n- \"licenses\": [],\n \"modified\": false,\n- \"name\": \"jreleaser-resource-bundle\",\n- \"purl\": \"pkg:maven/org.jreleaser/jreleaser-resource-bundle@1.6.0?type=jar\",\n+ \"name\": \"jackson-databind\",\n+ \"purl\": \"pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.2?type=jar\",\n \"type\": \"library\",\n- \"version\": \"1.6.0\"\n+ \"version\": \"2.14.2\"\n },\n {\n- \"bom-ref\": \"pkg:maven/org.jreleaser/jreleaser-utils@1.6.0?type=jar\",\n+ \"bom-ref\": \"pkg:maven/org.jreleaser/jreleaser-resource-bundle@1.6.0?type=jar\",\n+ \"description\": \"JReleaser resource bundle\",\n+ \"externalReferences\": [\n+ {\n+ \"type\": \"vcs\",\n+ \"url\": \"https://github.com/jreleaser/jreleaser\"\n+ }\n+ ],\n \"group\": \"org.jreleaser\",\n \"hashes\": [\n {\n \"alg\": \"MD5\",\n- \"content\": \"ca784b5aa352b016a37b393e9e500325\"\n+ \"content\": \"8419930ec5e42489dad5e26749a994eb\"\n },\n {\n \"alg\": \"SHA-1\",\n- \"content\": \"b0dde5ebbe5a98e5fa90b101dca5ad56e92c49c8\"\n+ \"content\": \"050aba092fa794e0cb91158de894a97aff581356\"\n },\n {\n \"alg\": \"SHA-256\",\n- \"content\": \"02b038af2f098d6019b94f4f4e55b8f901d2b5b4a072b083b23e47bd6a3e23cd\"\n+ \"content\": \"38434b31fac439399aa37018fa69302a9d1b04be6efb7b23d53d18615e1f4f2b\"\n },\n {\n \"alg\": \"SHA-512\",\n- \"content\": \"9b5e03766473ee854f877182a758a4842a9566772405af73cd200388eeeb981712e6a3e57f4f2f14f09a912b0cad625a75c5441b57eaa238699beabf327dd56a\"\n+ \"content\": \"c77c476e972e17b25de3aecf75d71482535d68cdc5e4bf556f5d4cab17345b9318d47fa42c9da671769f9bcf7f549efde70b64eff5cb189c805bb406fd705cb8\"\n },\n {\n \"alg\": \"SHA-384\",\n- \"content\": \"ebc800a8a0a6d19ac2bc922598f8913df5a5eb972dc46ba4eadec5034538c9c95866839670dbf92ca93b075dcb659a0c\"\n+ \"content\": \"b1d8f56681f39c638806e669447d9600507946448b528060d98afc2123c637980ba5609aba4b357c83acd772bfbdb73e\"\n },\n {\n \"alg\": \"SHA3-384\",\n- \"content\": \"ed0ba35caf8b7d7dc67d7350617b6cbd54de336634fd5927f03768a89f74ede798ecf343964ef0484302ee262617756b\"\n+ \"content\": \"74a52a9891c520a0f90ffbab33da0219cd787bbe309ae8eca303de00c6041692554e8d650a6a3925e057322bd00700ff\"\n },\n {\n \"alg\": \"SHA3-256\",\n- \"content\": \"b81154ce5c428820626ee1a99e7f9bbe63d4803f7f311744a26bb8331fb193cc\"\n+ \"content\": \"304bae90a7c53e6ad711e54bb8847c3eedc0e18cac03bffa14729918cb59efce\"\n },\n {\n \"alg\": \"SHA3-512\",\n- \"content\": \"b6429f8944cedd026f7b0c30328f8b5e2717493624cee82df48f7e69c8fe8a26b0542d447b1795c7fad7ff90affadcc087d69a576d69cbaccf3ccf1ca962be56\"\n+ \"content\": \"16a31cb40ed20dcaa5d34cb6aa2b81325f285b7feb5dda2486206496449fd548ef51117b38a8074a4a106fba9836de72232762dff60f535cd76f5848860c2f6c\"\n+ }\n+ ],\n+ \"licenses\": [\n+ {\n+ \"license\": {\n+ \"id\": \"Apache-2.0\",\n+ \"url\": \"https://www.apache.org/licenses/LICENSE-2.0\"\n+ }\n }\n ],\n- \"licenses\": [],\n \"modified\": false,\n- \"name\": \"jreleaser-utils\",\n- \"purl\": \"pkg:maven/org.jreleaser/jreleaser-utils@1.6.0?type=jar\",\n+ \"name\": \"jreleaser-resource-bundle\",\n+ \"purl\": \"pkg:maven/org.jreleaser/jreleaser-resource-bundle@1.6.0?type=jar\",\n \"type\": \"library\",\n \"version\": \"1.6.0\"\n },\n {\n- \"bom-ref\": \"pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.2?type=jar\",\n- \"description\": \"Core Jackson processing abstractions (aka Streaming API), implementation for JSON\",\n+ \"bom-ref\": \"pkg:maven/org.tukaani/xz@1.9?type=jar\",\n+ \"description\": \"XZ data compression\",\n \"externalReferences\": [\n {\n \"type\": \"vcs\",\n- \"url\": \"https://github.com/FasterXML/jackson-core\"\n+ \"url\": \"https://git.tukaani.org/?p=xz-java.git\"\n }\n ],\n- \"group\": \"com.fasterxml.jackson.core\",\n+ \"group\": \"org.tukaani\",\n \"hashes\": [\n {\n \"alg\": \"MD5\",\n- \"content\": \"6ee422ee4c481b2d5aacb2b5e36a7dc0\"\n+ \"content\": \"57c2fbfeb55e307ccae52e5322082e02\"\n },\n {\n \"alg\": \"SHA-1\",\n- \"content\": \"f804090e6399ce0cf78242db086017512dd71fcc\"\n+ \"content\": \"1ea4bec1a921180164852c65006d928617bd2caf\"\n },\n {\n \"alg\": \"SHA-256\",\n- \"content\": \"b5d37a77c88277b97e3593c8740925216c06df8e4172bbde058528df04ad3e7a\"\n+ \"content\": \"211b306cfc44f8f96df3a0a3ddaf75ba8c5289eed77d60d72f889bb855f535e5\"\n },\n {\n \"alg\": \"SHA-512\",\n- \"content\": \"208953cf72691b3bab1ca2f9a045cccd3d75c46c90099ba884fbf16bc3e45045e5cd014d2c68c96e8a8826f87a5f0e18cb34b35e7ef03348953869c21e197367\"\n+ \"content\": \"a4362db234d4e83683e90f5baf90c82107450cc4404acab96e3fab14b8a3d4588a19722171d32f27d18463682a6994cad9af0b1065c954e3a77ea7bdcf586bac\"\n },\n {\n \"alg\": \"SHA-384\",\n- \"content\": \"e806595862c5fcdae801d9845befc1d12c97e6036ee839d34590dbd785a422d5832cf4fc5c7ee6e1a5ee7a59f37740f0\"\n+ \"content\": \"aa30349b094723369908369a18e2cb5beb5b7ca0b24b4d56c2f5725fae152220f6526466672b22bfec939e2e0622a01d\"\n },\n {\n \"alg\": \"SHA3-384\",\n- \"content\": \"4fa59f572f2e100e2eba6fc664a3b9f804fabd911a552cb40805f39e624a9c04246b679cf4b017bb782c8272877f49d2\"\n+ \"content\": \"b3e1fee7784188df5e1931c9e8137ac0e20e63f66f93e7f938a448fc0b3adb4be5205c7a5f1835007e233fee2696fc2c\"\n },\n {\n \"alg\": \"SHA3-256\",\n- \"content\": \"cef17d3a539cbf798cfb0bfa9faffa2b7baff3670b50743e91ee58b4c60b59f1\"\n+ \"content\": \"92eff603ed0aab557e1a45e17a74e80d8ec656b5f137197b23c429c903fa448f\"\n },\n {\n \"alg\": \"SHA3-512\",\n- \"content\": \"fceeed5cb8fe4335d88282d15657762a4728483275a7ff45f50b9fe6a999757ccb37c415d001eb6250226f98f5c576b1b36a83e601fb393cfd34a811c2df5d00\"\n+ \"content\": \"b290f92958f8cd91705331d8411140c23957ab8b568fbe19a70f4f1dc97eddc13d3a200df28a02ab5911ce18f546c33f720878be0f727edac839a6e63ee66ece\"\n }\n ],\n \"licenses\": [\n {\n \"license\": {\n- \"id\": \"Apache-2.0\"\n+ \"name\": \"Public Domain\"\n }\n }\n ],\n \"modified\": false,\n- \"name\": \"jackson-core\",\n- \"purl\": \"pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.2?type=jar\",\n+ \"name\": \"xz\",\n+ \"purl\": \"pkg:maven/org.tukaani/xz@1.9?type=jar\",\n \"type\": \"library\",\n- \"version\": \"2.14.2\"\n+ \"version\": \"1.9\"\n },\n {\n \"bom-ref\": \"pkg:maven/org.bouncycastle/bcprov-jdk15on@1.70?type=jar\",\n \"description\": \"The Bouncy Castle Crypto package is a Java implementation of cryptographic algorithms. This jar contains JCE provider and lightweight API for the Bouncy Castle Cryptography APIs for JDK 1.5 and up.\",\n \"externalReferences\": [\n {\n \"type\": \"issue-tracker\",\n@@ -897,70 +880,69 @@\n \"modified\": false,\n \"name\": \"bcprov-jdk15on\",\n \"purl\": \"pkg:maven/org.bouncycastle/bcprov-jdk15on@1.70?type=jar\",\n \"type\": \"library\",\n \"version\": \"1.70\"\n },\n {\n- \"bom-ref\": \"pkg:maven/com.github.spullara.mustache.java/compiler@0.9.10?type=jar\",\n- \"description\": \"Implementation of mustache.js for Java\",\n+ \"bom-ref\": \"pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.2?type=jar\",\n+ \"description\": \"Core Jackson processing abstractions (aka Streaming API), implementation for JSON\",\n \"externalReferences\": [\n {\n \"type\": \"vcs\",\n- \"url\": \"http://github.com/spullara/mustache.java\"\n+ \"url\": \"https://github.com/FasterXML/jackson-core\"\n }\n ],\n- \"group\": \"com.github.spullara.mustache.java\",\n+ \"group\": \"com.fasterxml.jackson.core\",\n \"hashes\": [\n {\n \"alg\": \"MD5\",\n- \"content\": \"5638fc78a17d5063cc4b0d00f6e87491\"\n+ \"content\": \"6ee422ee4c481b2d5aacb2b5e36a7dc0\"\n },\n {\n \"alg\": \"SHA-1\",\n- \"content\": \"6111ae24e3be9ecbd75f5fe908583fc14b4f0174\"\n+ \"content\": \"f804090e6399ce0cf78242db086017512dd71fcc\"\n },\n {\n \"alg\": \"SHA-256\",\n- \"content\": \"2b5a9217811cb99846a473fa8e0d233eb33629347b7f44941f6c0fbd4cdf1038\"\n+ \"content\": \"b5d37a77c88277b97e3593c8740925216c06df8e4172bbde058528df04ad3e7a\"\n },\n {\n \"alg\": \"SHA-512\",\n- \"content\": \"2ccf3196af2b518c96df748a72a0122d033dc222e1fab3e12f3e2094146d44bec20bd1502390b59abf090cbdf5dd4d580084b07fb7241248b5b8da2605207559\"\n+ \"content\": \"208953cf72691b3bab1ca2f9a045cccd3d75c46c90099ba884fbf16bc3e45045e5cd014d2c68c96e8a8826f87a5f0e18cb34b35e7ef03348953869c21e197367\"\n },\n {\n \"alg\": \"SHA-384\",\n- \"content\": \"0204e77a4a64701af5000df6601f4f4c23cb5e53dd39a1325615d4f942cd2c91d04bbac20348ae49731f586282165c33\"\n+ \"content\": \"e806595862c5fcdae801d9845befc1d12c97e6036ee839d34590dbd785a422d5832cf4fc5c7ee6e1a5ee7a59f37740f0\"\n },\n {\n \"alg\": \"SHA3-384\",\n- \"content\": \"0960da7175835484471f485d481499f8b65f134ff4f1629618560adaa5a08caa897fbefcea190f93106ee9e3273381b2\"\n+ \"content\": \"4fa59f572f2e100e2eba6fc664a3b9f804fabd911a552cb40805f39e624a9c04246b679cf4b017bb782c8272877f49d2\"\n },\n {\n \"alg\": \"SHA3-256\",\n- \"content\": \"cfb7e640392ef590069e6b1d059dc20b8fcff984a4b267b3969fcf50ed0edd4f\"\n+ \"content\": \"cef17d3a539cbf798cfb0bfa9faffa2b7baff3670b50743e91ee58b4c60b59f1\"\n },\n {\n \"alg\": \"SHA3-512\",\n- \"content\": \"db3dad3809879bca835a04da890fd86dbc58ba6637c72f07d02e39d13645ebb6c640b7fecc18a779e58946072078bdf114b91445026a32dd6501b5d1c6e7d933\"\n+ \"content\": \"fceeed5cb8fe4335d88282d15657762a4728483275a7ff45f50b9fe6a999757ccb37c415d001eb6250226f98f5c576b1b36a83e601fb393cfd34a811c2df5d00\"\n }\n ],\n \"licenses\": [\n {\n \"license\": {\n- \"id\": \"Apache-2.0\",\n- \"url\": \"https://www.apache.org/licenses/LICENSE-2.0\"\n+ \"id\": \"Apache-2.0\"\n }\n }\n ],\n \"modified\": false,\n- \"name\": \"compiler\",\n- \"purl\": \"pkg:maven/com.github.spullara.mustache.java/compiler@0.9.10?type=jar\",\n+ \"name\": \"jackson-core\",\n+ \"purl\": \"pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.2?type=jar\",\n \"type\": \"library\",\n- \"version\": \"0.9.10\"\n+ \"version\": \"2.14.2\"\n }\n ],\n \"dependencies\": [\n {\n \"dependsOn\": [\n \"pkg:maven/org.bouncycastle/bcpg-jdk15on@1.70?type=jar\",\n \"pkg:maven/org.jreleaser/jreleaser-logger-api@1.6.0?type=jar\",\n@@ -1082,20 +1064,20 @@\n \"bom-ref\": \"pkg:maven/org.jreleaser/jreleaser-signing-java-sdk@1.6.0?type=jar\",\n \"group\": \"org.jreleaser\",\n \"name\": \"jreleaser-signing-java-sdk\",\n \"purl\": \"pkg:maven/org.jreleaser/jreleaser-signing-java-sdk@1.6.0?type=jar\",\n \"type\": \"library\",\n \"version\": \"1.6.0\"\n },\n- \"timestamp\": \"2023-04-29T10:08:34Z\",\n+ \"timestamp\": \"2025-07-11T06:29:47Z\",\n \"tools\": [\n {\n \"name\": \"cyclonedx-gradle-plugin\",\n \"vendor\": \"CycloneDX\",\n \"version\": \"1.7.4\"\n }\n ]\n },\n- \"serialNumber\": \"urn:uuid:a4d43807-929e-441f-a705-32b0c5129d3c\",\n+ \"serialNumber\": \"urn:uuid:be130f47-9a52-4d2f-9509-5b4433129719\",\n \"specVersion\": \"1.4\",\n \"version\": 1\n }\n"}]}