{"diffoscope-json-version": 1, "source1": "/input1", "source2": "/input2", "unified_diff": null, "details": [{"source1": "Pretty-printed", "source2": "Pretty-printed", "comments": ["Similarity: 0.8887123398487036%", "Differences: {\"'components'\": \"{0: {'group': 'commons-codec', 'name': 'commons-codec', 'version': '1.15', \"", "                 \"'description': 'The Apache Commons Codec package contains simple encoder and \"", "                 'decoders for various formats such as Base64 and Hexadecimal. In addition to '", "                 'these widely used encoders and decoders, the codec package also maintains a '", "                 \"collection of phonetic encoding utilities.', 'hashes': {0: {'content': \"", "                 \"'303baf002ce6d38219 [\u2026]"], "unified_diff": "@@ -1,332 +1,206 @@\n {\n     \"bomFormat\": \"CycloneDX\",\n     \"components\": [\n         {\n-            \"bom-ref\": \"pkg:maven/io.github.openfeign/feign-core@12.3?type=jar\",\n-            \"description\": \"Feign Core\",\n-            \"group\": \"io.github.openfeign\",\n+            \"bom-ref\": \"pkg:maven/commons-codec/commons-codec@1.15?type=jar\",\n+            \"description\": \"The Apache Commons Codec package contains simple encoder and decoders for various formats such as Base64 and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.\",\n+            \"externalReferences\": [\n+                {\n+                    \"type\": \"issue-tracker\",\n+                    \"url\": \"https://issues.apache.org/jira/browse/CODEC\"\n+                },\n+                {\n+                    \"type\": \"vcs\",\n+                    \"url\": \"https://github.com/apache/commons-codec\"\n+                }\n+            ],\n+            \"group\": \"commons-codec\",\n             \"hashes\": [\n                 {\n                     \"alg\": \"MD5\",\n-                    \"content\": \"9e6e1ff8b68d2b6c1fc5bdc7ff208030\"\n+                    \"content\": \"303baf002ce6d382198090aedd9d79a2\"\n                 },\n                 {\n                     \"alg\": \"SHA-1\",\n-                    \"content\": \"d280b09a17b63e69788fd3d8d215b7013ab48b16\"\n+                    \"content\": \"49d94806b6e3dc933dacbd8acb0fdbab8ebd1e5d\"\n                 },\n                 {\n                     \"alg\": \"SHA-256\",\n-                    \"content\": \"939fbed2c2392a9633bc1d26f0ef9e934b059d1a9a9d4d966cedaf9075c546ec\"\n+                    \"content\": \"b3e9f6d63a790109bf0d056611fbed1cf69055826defeb9894a71369d246ed63\"\n                 },\n                 {\n                     \"alg\": \"SHA-512\",\n-                    \"content\": \"8335901d8918747dc29d37a2ac630c6a78ea6ff04bfea77e6d8c74188e9e584142920996c45120caa86299486949a04e1ec1f1bef30229904360fcb5c5d4a1c4\"\n+                    \"content\": \"da30a716770795fce390e4dd340a8b728f220c6572383ffef55bd5839655d5611fcc06128b2144f6cdcb36f53072a12ec80b04afee787665e7ad0b6e888a6787\"\n                 },\n                 {\n                     \"alg\": \"SHA-384\",\n-                    \"content\": \"dc7a0d10bdf2c3aeafba83ca7e41d21c3288f3df0b76e339788fcf7606381970b6429108dbf2d1212075d1feba040842\"\n+                    \"content\": \"05d0506283716472175d44c2a4766523397bf8a007c18848f9c9a61718cc8aa437f9cb4b91771037ab29a960860b62a0\"\n                 },\n                 {\n                     \"alg\": \"SHA3-384\",\n-                    \"content\": \"2907938ea76735cde9b34676c6c8b04786f1595687f96734e7659768175cb7a525508f84c48d9b10b0b2f593158e1ed5\"\n+                    \"content\": \"12fad4ef78274b06f97b1243cea6f970088abde082d2de9377d915a34b44f7d7d67807c03e59c849b69f1544e2a9a1be\"\n                 },\n                 {\n                     \"alg\": \"SHA3-256\",\n-                    \"content\": \"474f6b0ab420bf63549ed123fff99b73fc881771c6a0c591e58dfb17adbe9899\"\n+                    \"content\": \"87be248f33f241121f54aad61a9a460a79eabefbf1b5b0dd22aeb95b581f727e\"\n                 },\n                 {\n                     \"alg\": \"SHA3-512\",\n-                    \"content\": \"553a6dc1c3cf7facdb3b4e15be1d6d90259f1d36ce137db3a6e53a967ef4939aaa98c974b059c8f32dd42316bb7eee3b51910cf0fb172d0df9b8ff39d8cc722d\"\n+                    \"content\": \"8c992c9c569ebaa0bf956a4c5b34fbf5e1ed1c212c2dd896fa216183ee0bcd341e96698af4b9cec7e8880762faa081a3d3a27f51349aa457cb8e373e4f57c788\"\n                 }\n             ],\n             \"licenses\": [\n                 {\n                     \"license\": {\n                         \"id\": \"Apache-2.0\"\n                     }\n                 }\n             ],\n             \"modified\": false,\n-            \"name\": \"feign-core\",\n-            \"purl\": \"pkg:maven/io.github.openfeign/feign-core@12.3?type=jar\",\n+            \"name\": \"commons-codec\",\n+            \"purl\": \"pkg:maven/commons-codec/commons-codec@1.15?type=jar\",\n             \"type\": \"library\",\n-            \"version\": \"12.3\"\n+            \"version\": \"1.15\"\n         },\n         {\n-            \"bom-ref\": \"pkg:maven/org.jreleaser/jreleaser-model-api@1.6.0?type=jar\",\n-            \"group\": \"org.jreleaser\",\n+            \"bom-ref\": \"pkg:maven/org.slf4j/jcl-over-slf4j@2.0.7?type=jar\",\n+            \"description\": \"JCL 1.2 implemented over SLF4J\",\n+            \"group\": \"org.slf4j\",\n             \"hashes\": [\n                 {\n                     \"alg\": \"MD5\",\n-                    \"content\": \"288354c621fdfef298e4e8cdc843e2c3\"\n+                    \"content\": \"4e8d6cd31f7e6277280c95157ac7845a\"\n                 },\n                 {\n                     \"alg\": \"SHA-1\",\n-                    \"content\": \"54bcb05008c6f0b50433f8d0fe82e3a217317db1\"\n+                    \"content\": \"f127fe5ee53404a8b3697cdd032dd1dd6a29dd77\"\n                 },\n                 {\n                     \"alg\": \"SHA-256\",\n-                    \"content\": \"397e18c4fa02ba508e409a119866d4e78d64c6c76f5a4f22b3aefc027b662b9b\"\n+                    \"content\": \"41806757e1d26dae5d6db2ca7d4a5176eed2d6e709cd86564d4a11dab0601742\"\n                 },\n                 {\n                     \"alg\": \"SHA-512\",\n-                    \"content\": \"67c4e2f9acb6db78c21cfd23d3411ce1e32b23690a1d5035a285b48cd9b996fd4c80b504d050e87a4a5604e6b56ca52878a464593f0bd8eea53059bcb263289f\"\n+                    \"content\": \"221b39b85145cf7c245acb7f2692a02b6c5816f8b1187a1a77942dd39de958c1b01ecd066682eb88244f87b2a47513d40b6c1e69ef49a43b2a07ba818f124e17\"\n                 },\n                 {\n                     \"alg\": \"SHA-384\",\n-                    \"content\": \"8f67be44af6f792c32f2b86d07738c52e5b742a650d010e8c0b5e60a62db627d5c695f23f24d814f232fc0246d03086c\"\n+                    \"content\": \"fa8d53b46cd3ddab0bd265d384a90c35efef6a02a7822aa6f79065cee68d78f6ad7c4d248dea7497af449845dc962730\"\n                 },\n                 {\n                     \"alg\": \"SHA3-384\",\n-                    \"content\": \"1e5c3dffd4e3c545081904db6dcff892bd2f27285b4fa46a57cdd23c3fbb382ab06268e87d57212996387269b2c8b72f\"\n+                    \"content\": \"cf06cfeaba477f7738f089ba401fb841074681d1c7f465546cdf0e95751a8bf912493428876a7d9108eef83f637c6a1e\"\n                 },\n                 {\n                     \"alg\": \"SHA3-256\",\n-                    \"content\": \"d2b875e45846a0d17cf7f85d6289681ee42897519cdaca9625ffc56b1639909d\"\n+                    \"content\": \"efbad2de8683215936c56b3f8fd3492f1cc27c2ee77595a99c794e18777dec42\"\n                 },\n                 {\n                     \"alg\": \"SHA3-512\",\n-                    \"content\": \"1a098f05c0735a7ed19cf374440818e9882b0288728f6658ce3709ac534c06cc7dc36ea4d7656a35281758d1ec09c31edf13a98d6680206a0c9fb1dff21ad04f\"\n+                    \"content\": \"2707d5513e49f6e3ea6dec96510d360cfc125dab164ae5d99a1dcbd628751640f625a70ed749dad66024ae9fd7725f1c6c7f76de7f5a6efc9d8208a9e01922f7\"\n                 }\n             ],\n-            \"licenses\": [],\n-            \"modified\": false,\n-            \"name\": \"jreleaser-model-api\",\n-            \"purl\": \"pkg:maven/org.jreleaser/jreleaser-model-api@1.6.0?type=jar\",\n-            \"type\": \"library\",\n-            \"version\": \"1.6.0\"\n-        },\n-        {\n-            \"bom-ref\": \"pkg:maven/org.jreleaser/jreleaser-git-java-sdk@1.6.0?type=jar\",\n-            \"group\": \"org.jreleaser\",\n-            \"hashes\": [\n-                {\n-                    \"alg\": \"MD5\",\n-                    \"content\": \"a82f264ee899604bfe6e634ec5a8818e\"\n-                },\n-                {\n-                    \"alg\": \"SHA-1\",\n-                    \"content\": \"4c5ee97076b5bc0ae4474e6ac1ade64e60702a4f\"\n-                },\n-                {\n-                    \"alg\": \"SHA-256\",\n-                    \"content\": \"ab59b4abd99100aae35f871d548c778a90f0e4aaad5d0eba94af15df688a5775\"\n-                },\n-                {\n-                    \"alg\": \"SHA-512\",\n-                    \"content\": \"447286a510cd5b84f29275627ebf3bb6e930b6e150fa981c591f3266a354a46511a4a5d00cd13f95539541ed6e783641a9c9a4213c493cd7cf479780e427511f\"\n-                },\n-                {\n-                    \"alg\": \"SHA-384\",\n-                    \"content\": \"f266e76c6698ecd59dcf197a55f09d8b567f9e8953e310bff7c0c617416df996ac53c5d9c4468b9b065f1816716ae3ea\"\n-                },\n-                {\n-                    \"alg\": \"SHA3-384\",\n-                    \"content\": \"208684bb1093245f49be449e1a4966fadd1b4840b760aa0a89c861ae18820a63bc3f1b2d895c6e010849712394bb160e\"\n-                },\n-                {\n-                    \"alg\": \"SHA3-256\",\n-                    \"content\": \"454d27e5726aae3f4a92c5da424f306eb159edf40da4da52619e9e878cb48b3a\"\n-                },\n+            \"licenses\": [\n                 {\n-                    \"alg\": \"SHA3-512\",\n-                    \"content\": \"3a995062f0dfeaa46f17214c0c8179a3d8ad4ba71b4579448e16445e5661ba1102044e2d69fd9833b15b51620636f78aa8f9dec87fde449147f2185b5df5b3e6\"\n+                    \"license\": {\n+                        \"id\": \"Apache-2.0\"\n+                    }\n                 }\n             ],\n-            \"licenses\": [],\n             \"modified\": false,\n-            \"name\": \"jreleaser-git-java-sdk\",\n-            \"purl\": \"pkg:maven/org.jreleaser/jreleaser-git-java-sdk@1.6.0?type=jar\",\n+            \"name\": \"jcl-over-slf4j\",\n+            \"purl\": \"pkg:maven/org.slf4j/jcl-over-slf4j@2.0.7?type=jar\",\n             \"type\": \"library\",\n-            \"version\": \"1.6.0\"\n+            \"version\": \"2.0.7\"\n         },\n         {\n-            \"bom-ref\": \"pkg:maven/org.apache.commons/commons-jexl3@3.3?type=jar\",\n-            \"description\": \"JEXL is a library intended to facilitate the implementation of scripting features in applications and frameworks written in Java.\",\n+            \"bom-ref\": \"pkg:maven/org.jreleaser/jreleaser-tool-java-sdk@1.6.0?type=jar\",\n+            \"description\": \"Java SDK for Tools\",\n             \"externalReferences\": [\n                 {\n-                    \"type\": \"issue-tracker\",\n-                    \"url\": \"https://issues.apache.org/jira/browse/JEXL\"\n-                },\n-                {\n                     \"type\": \"vcs\",\n-                    \"url\": \"https://gitbox.apache.org/repos/asf/commons-jexl.git\"\n-                }\n-            ],\n-            \"group\": \"org.apache.commons\",\n-            \"hashes\": [\n-                {\n-                    \"alg\": \"MD5\",\n-                    \"content\": \"3a332e3beb67b3a2a20bd0a950fc57c4\"\n-                },\n-                {\n-                    \"alg\": \"SHA-1\",\n-                    \"content\": \"c76b4cfa436c3e79e04806e62656b09968c388ba\"\n-                },\n-                {\n-                    \"alg\": \"SHA-256\",\n-                    \"content\": \"07b0ff6c5a10ffb2e2c02da9e2c0e2e6702df44178cfb76881f69447fc386014\"\n-                },\n-                {\n-                    \"alg\": \"SHA-512\",\n-                    \"content\": \"879111d1c3ad021ea3961e49161b3ff6ba251044ffef1ca4d36d880d9a09b1f395e17eef221a13274303f44e116204ae4b2a3ee3e931f117fc901e321d59b5c6\"\n-                },\n-                {\n-                    \"alg\": \"SHA-384\",\n-                    \"content\": \"7a268bf2c903be86813fcc7f06158abf79d558ee59ebf03470ebd06ca6e6d169beb1c3600e07c20c4f95fa7827fde841\"\n-                },\n-                {\n-                    \"alg\": \"SHA3-384\",\n-                    \"content\": \"1803d239f17f7eeee6edb69d38c4473319fd4eeeb684eda5c38b577a7aaf42965ce41d9082d515d5007be9a0b0712d81\"\n-                },\n-                {\n-                    \"alg\": \"SHA3-256\",\n-                    \"content\": \"01163da5e720b6d1f6bf8b6e9e398d26a1be92b3f18ef6089d218d54166b0c01\"\n-                },\n-                {\n-                    \"alg\": \"SHA3-512\",\n-                    \"content\": \"8abdd72c14492340c05fd5d3555682a308ac00ac1b1e1e15ae38abc47f454f50db9e0727a49df72a50bf49f1447a6ca9dadc48b9ffd45a043bcbae9e5e050d3d\"\n+                    \"url\": \"https://github.com/jreleaser/jreleaser\"\n                 }\n             ],\n+            \"group\": \"org.jreleaser\",\n             \"licenses\": [\n                 {\n                     \"license\": {\n                         \"id\": \"Apache-2.0\",\n                         \"url\": \"https://www.apache.org/licenses/LICENSE-2.0\"\n                     }\n                 }\n             ],\n             \"modified\": false,\n-            \"name\": \"commons-jexl3\",\n-            \"purl\": \"pkg:maven/org.apache.commons/commons-jexl3@3.3?type=jar\",\n+            \"name\": \"jreleaser-tool-java-sdk\",\n+            \"purl\": \"pkg:maven/org.jreleaser/jreleaser-tool-java-sdk@1.6.0?type=jar\",\n             \"type\": \"library\",\n-            \"version\": \"3.3\"\n+            \"version\": \"1.6.0\"\n         },\n         {\n-            \"bom-ref\": \"pkg:maven/org.eclipse.jgit/org.eclipse.jgit@5.13.0.202109080827-r?type=jar\",\n-            \"description\": \"Repository access and algorithms\",\n-            \"group\": \"org.eclipse.jgit\",\n+            \"bom-ref\": \"pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar\",\n+            \"description\": \"Apache HttpComponents Client\",\n+            \"group\": \"org.apache.httpcomponents\",\n             \"hashes\": [\n                 {\n                     \"alg\": \"MD5\",\n-                    \"content\": \"5a1f197785cb9c69d1241cb0f16937a2\"\n+                    \"content\": \"40d6b9075fbd28fa10292a45a0db9457\"\n                 },\n                 {\n                     \"alg\": \"SHA-1\",\n-                    \"content\": \"32badd5adebd660424509344259ad3e409699ba2\"\n+                    \"content\": \"e5f6cae5ca7ecaac1ec2827a9e2d65ae2869cada\"\n                 },\n                 {\n                     \"alg\": \"SHA-256\",\n-                    \"content\": \"dabf8369f0cdf8cf17b7f7da4bda9320c570bb754c88e0beb7b852812cf5cd25\"\n+                    \"content\": \"6fe9026a566c6a5001608cf3fc32196641f6c1e5e1986d1037ccdbd5f31ef743\"\n                 },\n                 {\n                     \"alg\": \"SHA-512\",\n-                    \"content\": \"768dbb3ba2649a7025338197b4703b414983e4608138719b0d69201f7f49e57e0454846b41b775b135b083f820824749da6121f20a812c4f155a97f09c9b15ac\"\n+                    \"content\": \"3567739186e551f84cad3e4b6b270c5b8b19aba297675a96bcdff3663ff7d20d188611d21f675fe5ff1bfd7d8ca31362070910d7b92ab1b699872a120aa6f089\"\n                 },\n                 {\n                     \"alg\": \"SHA-384\",\n-                    \"content\": \"deb24e724ace28ddbaf5e7a1fafaa449a49b97d3a5a53eb487a2ab90895f05684c48a839e3677643364ff965cc33af95\"\n+                    \"content\": \"093ac3e2dde58e34aa70309c7305eb3c9b5be2509a9293f1672494da55479a86bd112e83326746dc7a32855472952b99\"\n                 },\n                 {\n                     \"alg\": \"SHA3-384\",\n-                    \"content\": \"e5aed5403b4c28624bc58be31601897555c94eb54e680f1ccb59992a643db24d0de465b7ae879b5ba29d56a132a87b69\"\n+                    \"content\": \"cd6882e7868624164e460f2f3ea01466f863c0dcb902b031c656b57356f563be83b29530df41d88d634ed3d01fc9964d\"\n                 },\n                 {\n                     \"alg\": \"SHA3-256\",\n-                    \"content\": \"8ccc07758fbf1ac55028538890afe7d209c866ee019875ef15acfaea9ac7244f\"\n+                    \"content\": \"710b1d8d7dae0b8e4270756694ca9c83d64965f42d3b4170c609b14d47c2762c\"\n                 },\n                 {\n                     \"alg\": \"SHA3-512\",\n-                    \"content\": \"4725fff9b6067d70d4c82cbf549b16be521e839d5c8ecf605f9a71516ec78334e348cb2d3303afb7ba18ce464a68c1e195bb6fe673d9d4d6b8d75c84d0b4e101\"\n+                    \"content\": \"276fa6a6599dc89382d658115695cf4da6b0d39b34e9c349c17a5dbd64122eaee553bb9ed75c0378ec4a83be157c8aa39370662de3c9b8fd55ebc1dd608383e6\"\n                 }\n             ],\n             \"licenses\": [\n                 {\n                     \"license\": {\n-                        \"id\": \"BSD-3-Clause\"\n+                        \"id\": \"Apache-2.0\"\n                     }\n                 }\n             ],\n             \"modified\": false,\n-            \"name\": \"org.eclipse.jgit\",\n-            \"purl\": \"pkg:maven/org.eclipse.jgit/org.eclipse.jgit@5.13.0.202109080827-r?type=jar\",\n+            \"name\": \"httpclient\",\n+            \"purl\": \"pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar\",\n             \"type\": \"library\",\n-            \"version\": \"5.13.0.202109080827-r\"\n+            \"version\": \"4.5.13\"\n         },\n         {\n-            \"bom-ref\": \"pkg:maven/org.bouncycastle/bcpg-jdk15on@1.70?type=jar\",\n-            \"description\": \"The Bouncy Castle Java API for handling the OpenPGP protocol. This jar contains the OpenPGP API for JDK 1.5 and up. The APIs can be used in conjunction with a JCE/JCA provider such as the one provided with the Bouncy Castle Cryptography APIs.\",\n+            \"bom-ref\": \"pkg:maven/org.jreleaser/jreleaser-command-java-sdk@1.6.0?type=jar\",\n+            \"description\": \"JReleaser command SDK\",\n             \"externalReferences\": [\n                 {\n-                    \"type\": \"issue-tracker\",\n-                    \"url\": \"https://github.com/bcgit/bc-java/issues\"\n-                },\n-                {\n                     \"type\": \"vcs\",\n-                    \"url\": \"https://github.com/bcgit/bc-java\"\n-                }\n-            ],\n-            \"group\": \"org.bouncycastle\",\n-            \"hashes\": [\n-                {\n-                    \"alg\": \"MD5\",\n-                    \"content\": \"01ddc3aa0289346f4db19d95039cefdb\"\n-                },\n-                {\n-                    \"alg\": \"SHA-1\",\n-                    \"content\": \"062f72ec06f31a6c31a3f3355fce0384b21126d7\"\n-                },\n-                {\n-                    \"alg\": \"SHA-256\",\n-                    \"content\": \"4f08f4aa74048824151c98dd3e92e7165ac30659834404f08a8e843bdad32847\"\n-                },\n-                {\n-                    \"alg\": \"SHA-512\",\n-                    \"content\": \"4e240b7811ef90c090e83a181dace41da487555e4136221861b0060f9af6d8b316f2dd0472f747adb98ca5372f46055456ef04bdc0c3992188ab13302922fce9\"\n-                },\n-                {\n-                    \"alg\": \"SHA-384\",\n-                    \"content\": \"d89dec6226112d13cbea461d84740699770dd7d8ad3f67ab65e7b49fd08a096a948e54da2e6a681925c4320f410bba37\"\n-                },\n-                {\n-                    \"alg\": \"SHA3-384\",\n-                    \"content\": \"5e8e8ca63cc550a8f50b627c4dd051f0eb5c31b99ff53dabd7d5f5d1ed98d0dc1d4963a09fc0db32f8e0ff769a2a6e65\"\n-                },\n-                {\n-                    \"alg\": \"SHA3-256\",\n-                    \"content\": \"77f28e7e22b3b3a8d7b667fb7f783847c4b11ee7208833636e09e8b38390fd51\"\n-                },\n-                {\n-                    \"alg\": \"SHA3-512\",\n-                    \"content\": \"cb238dbb641c42c49b5801bdfa6432395e860c1a7485ba68e2d57887e3d22ff254718c6cbfa34c107bfb09d74e2f85c33b95f89dfa886e141a8247a0abf2b5c2\"\n+                    \"url\": \"https://github.com/jreleaser/jreleaser\"\n                 }\n             ],\n-            \"licenses\": [\n-                {\n-                    \"license\": {\n-                        \"name\": \"Bouncy Castle Licence\",\n-                        \"url\": \"https://www.bouncycastle.org/licence.html\"\n-                    }\n-                },\n-                {\n-                    \"license\": {\n-                        \"id\": \"Apache-1.1\",\n-                        \"url\": \"http://apache.org/licenses/LICENSE-1.1\"\n-                    }\n-                }\n-            ],\n-            \"modified\": false,\n-            \"name\": \"bcpg-jdk15on\",\n-            \"purl\": \"pkg:maven/org.bouncycastle/bcpg-jdk15on@1.70?type=jar\",\n-            \"type\": \"library\",\n-            \"version\": \"1.70\"\n-        },\n-        {\n-            \"bom-ref\": \"pkg:maven/org.jreleaser/jreleaser-command-java-sdk@1.6.0?type=jar\",\n             \"group\": \"org.jreleaser\",\n             \"hashes\": [\n                 {\n                     \"alg\": \"MD5\",\n                     \"content\": \"acbbfe01e59912d40bdaf2b516b8199d\"\n                 },\n                 {\n@@ -354,539 +228,544 @@\n                     \"content\": \"ef9ad8cd599799ffa70998131cfbaf2985c3070a8ff727becac8ceb5480ab900\"\n                 },\n                 {\n                     \"alg\": \"SHA3-512\",\n                     \"content\": \"a62c41fdaca8e1849d661ffded5af92bf09e43afc3497c5f923f5d7463756116dabef382cd8649a71473e9e938e698734b09e3d81153a852ff278876cd7ba8c9\"\n                 }\n             ],\n-            \"licenses\": [],\n-            \"modified\": false,\n-            \"name\": \"jreleaser-command-java-sdk\",\n-            \"purl\": \"pkg:maven/org.jreleaser/jreleaser-command-java-sdk@1.6.0?type=jar\",\n-            \"type\": \"library\",\n-            \"version\": \"1.6.0\"\n-        },\n-        {\n-            \"bom-ref\": \"pkg:maven/org.jreleaser/jreleaser-java-sdk-commons@1.6.0?type=jar\",\n-            \"group\": \"org.jreleaser\",\n-            \"hashes\": [\n-                {\n-                    \"alg\": \"MD5\",\n-                    \"content\": \"a616e3581e826bb4e01c9ec7978bc4d2\"\n-                },\n-                {\n-                    \"alg\": \"SHA-1\",\n-                    \"content\": \"187c502ed479e9f83427cccfd7cd47242bd5f51d\"\n-                },\n-                {\n-                    \"alg\": \"SHA-256\",\n-                    \"content\": \"8043134ad00433ee9cb395081ac9e0cc479328a1589b2b67c310cfd654245ebf\"\n-                },\n-                {\n-                    \"alg\": \"SHA-512\",\n-                    \"content\": \"03ed834cedf5f6b85f8d98defe2790fa0ca2971c686b46dc7c8616d130034785a6969e144ba6aa5d6f4d9093ccf888a7e4995c87d7acf862ece913e9696c550a\"\n-                },\n-                {\n-                    \"alg\": \"SHA-384\",\n-                    \"content\": \"7f0545affd13b0f4298d047137850aba201b93bcd58d6625510bac088c98661c6ce3b1edb38ac7f22d765d22365a47bc\"\n-                },\n-                {\n-                    \"alg\": \"SHA3-384\",\n-                    \"content\": \"9b4346b3b735ed788ca5e79e7fa4709d1e8edc60e994297f6a3fccd34d591474ab7d895720639e0739605b10d6722e60\"\n-                },\n-                {\n-                    \"alg\": \"SHA3-256\",\n-                    \"content\": \"574b9169bf34389e320331ab5cf3ff85c61cb36197acfb0feb040412313326ca\"\n-                },\n+            \"licenses\": [\n                 {\n-                    \"alg\": \"SHA3-512\",\n-                    \"content\": \"c4f1d762db1498baf5f6268619915811f933433ff78388429e564a3c7d94ee89867648fe79d1718dabe74c7927be99152d3475e5547f5b0f4c5d1b53ce7f75d2\"\n+                    \"license\": {\n+                        \"id\": \"Apache-2.0\",\n+                        \"url\": \"https://www.apache.org/licenses/LICENSE-2.0\"\n+                    }\n                 }\n             ],\n-            \"licenses\": [],\n             \"modified\": false,\n-            \"name\": \"jreleaser-java-sdk-commons\",\n-            \"purl\": \"pkg:maven/org.jreleaser/jreleaser-java-sdk-commons@1.6.0?type=jar\",\n+            \"name\": \"jreleaser-command-java-sdk\",\n+            \"purl\": \"pkg:maven/org.jreleaser/jreleaser-command-java-sdk@1.6.0?type=jar\",\n             \"type\": \"library\",\n             \"version\": \"1.6.0\"\n         },\n         {\n-            \"bom-ref\": \"pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.2?type=jar\",\n-            \"description\": \"Core annotations used for value types, used by Jackson data binding package.\",\n+            \"bom-ref\": \"pkg:maven/org.jreleaser/jreleaser-utils@1.6.0?type=jar\",\n+            \"description\": \"JReleaser utility classes\",\n             \"externalReferences\": [\n                 {\n                     \"type\": \"vcs\",\n-                    \"url\": \"https://github.com/FasterXML/jackson-annotations\"\n+                    \"url\": \"https://github.com/jreleaser/jreleaser\"\n                 }\n             ],\n-            \"group\": \"com.fasterxml.jackson.core\",\n+            \"group\": \"org.jreleaser\",\n             \"hashes\": [\n                 {\n                     \"alg\": \"MD5\",\n-                    \"content\": \"10d19982a8890f6eb37557af2f58e272\"\n+                    \"content\": \"ca784b5aa352b016a37b393e9e500325\"\n                 },\n                 {\n                     \"alg\": \"SHA-1\",\n-                    \"content\": \"a7aae9525864930723e3453ab799521fdfd9d873\"\n+                    \"content\": \"b0dde5ebbe5a98e5fa90b101dca5ad56e92c49c8\"\n                 },\n                 {\n                     \"alg\": \"SHA-256\",\n-                    \"content\": \"2c6869d505cf60dc066734b7d50339f975bd3adc635e26a78abb71acb4473c0d\"\n+                    \"content\": \"02b038af2f098d6019b94f4f4e55b8f901d2b5b4a072b083b23e47bd6a3e23cd\"\n                 },\n                 {\n                     \"alg\": \"SHA-512\",\n-                    \"content\": \"a978384791bdc074df8039ffc95bb93f0f60d14d476861ee2a0ce208b33a991c486a07345cb80559252c3ff1dea14d3efb818c19bdc18435946dc8754d8e6ee3\"\n+                    \"content\": \"9b5e03766473ee854f877182a758a4842a9566772405af73cd200388eeeb981712e6a3e57f4f2f14f09a912b0cad625a75c5441b57eaa238699beabf327dd56a\"\n                 },\n                 {\n                     \"alg\": \"SHA-384\",\n-                    \"content\": \"d5111c69020666689414921ae4a8950f9fbdf86dec1360f6827beeee9ebd3f78db74e69c76e0becaba47eb34fdaaeb5a\"\n+                    \"content\": \"ebc800a8a0a6d19ac2bc922598f8913df5a5eb972dc46ba4eadec5034538c9c95866839670dbf92ca93b075dcb659a0c\"\n                 },\n                 {\n                     \"alg\": \"SHA3-384\",\n-                    \"content\": \"53b1a8891482e16a7d8849251cb0dcd1aacf6aaa2161a73589d9742ad96763e384d426d04db762e56fc4536f4e719084\"\n+                    \"content\": \"ed0ba35caf8b7d7dc67d7350617b6cbd54de336634fd5927f03768a89f74ede798ecf343964ef0484302ee262617756b\"\n                 },\n                 {\n                     \"alg\": \"SHA3-256\",\n-                    \"content\": \"14f7b3c51c96f7429f7c60a69e3b7e4f9f2207820141f197d56b57018ffd5640\"\n+                    \"content\": \"b81154ce5c428820626ee1a99e7f9bbe63d4803f7f311744a26bb8331fb193cc\"\n                 },\n                 {\n                     \"alg\": \"SHA3-512\",\n-                    \"content\": \"75e4e4fb847fdacdd497cf6b340362581ab4091120ccf2ec32a273709d336af0f78c90ce12b2dd1d17354aa08583af0d3ded89bb415720f45f2d9c110d71dd7a\"\n+                    \"content\": \"b6429f8944cedd026f7b0c30328f8b5e2717493624cee82df48f7e69c8fe8a26b0542d447b1795c7fad7ff90affadcc087d69a576d69cbaccf3ccf1ca962be56\"\n                 }\n             ],\n             \"licenses\": [\n                 {\n                     \"license\": {\n-                        \"id\": \"Apache-2.0\"\n+                        \"id\": \"Apache-2.0\",\n+                        \"url\": \"https://www.apache.org/licenses/LICENSE-2.0\"\n                     }\n                 }\n             ],\n             \"modified\": false,\n-            \"name\": \"jackson-annotations\",\n-            \"purl\": \"pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.2?type=jar\",\n+            \"name\": \"jreleaser-utils\",\n+            \"purl\": \"pkg:maven/org.jreleaser/jreleaser-utils@1.6.0?type=jar\",\n             \"type\": \"library\",\n-            \"version\": \"2.14.2\"\n+            \"version\": \"1.6.0\"\n         },\n         {\n-            \"bom-ref\": \"pkg:maven/commons-codec/commons-codec@1.15?type=jar\",\n-            \"description\": \"The Apache Commons Codec package contains simple encoder and decoders for various formats such as Base64 and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.\",\n+            \"bom-ref\": \"pkg:maven/org.apache.commons/commons-compress@1.22?type=jar\",\n+            \"description\": \"Apache Commons Compress software defines an API for working with compression and archive formats. These include: bzip2, gzip, pack200, lzma, xz, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.\",\n             \"externalReferences\": [\n                 {\n                     \"type\": \"issue-tracker\",\n-                    \"url\": \"https://issues.apache.org/jira/browse/CODEC\"\n+                    \"url\": \"https://issues.apache.org/jira/browse/COMPRESS\"\n                 },\n                 {\n                     \"type\": \"vcs\",\n-                    \"url\": \"https://github.com/apache/commons-codec\"\n+                    \"url\": \"https://gitbox.apache.org/repos/asf?p=commons-compress.git\"\n                 }\n             ],\n-            \"group\": \"commons-codec\",\n+            \"group\": \"org.apache.commons\",\n             \"hashes\": [\n                 {\n                     \"alg\": \"MD5\",\n-                    \"content\": \"303baf002ce6d382198090aedd9d79a2\"\n+                    \"content\": \"f1e4db16fee4291212d91409313a8086\"\n                 },\n                 {\n                     \"alg\": \"SHA-1\",\n-                    \"content\": \"49d94806b6e3dc933dacbd8acb0fdbab8ebd1e5d\"\n+                    \"content\": \"691a8b4e6cf4248c3bc72c8b719337d5cb7359fa\"\n                 },\n                 {\n                     \"alg\": \"SHA-256\",\n-                    \"content\": \"b3e9f6d63a790109bf0d056611fbed1cf69055826defeb9894a71369d246ed63\"\n+                    \"content\": \"53d04a0efc7223baecaa303bd5d298eb0600e6b82b4076f9cecd558b97ba760b\"\n                 },\n                 {\n                     \"alg\": \"SHA-512\",\n-                    \"content\": \"da30a716770795fce390e4dd340a8b728f220c6572383ffef55bd5839655d5611fcc06128b2144f6cdcb36f53072a12ec80b04afee787665e7ad0b6e888a6787\"\n+                    \"content\": \"2d64fa6cd081fff5d73ee662a82f6186991fc13b4bdaee18b5f1bdcab06d9acb70e3713d18b296337791448251fbd6768bd84afaa817a10547652d0cfa885563\"\n                 },\n                 {\n                     \"alg\": \"SHA-384\",\n-                    \"content\": \"05d0506283716472175d44c2a4766523397bf8a007c18848f9c9a61718cc8aa437f9cb4b91771037ab29a960860b62a0\"\n+                    \"content\": \"295d7f69d151abbd784e1c4d021c77ce43e129bb5bda0c55762b32d77c8607863383297674ec8a212ea3dfe4007b0044\"\n                 },\n                 {\n                     \"alg\": \"SHA3-384\",\n-                    \"content\": \"12fad4ef78274b06f97b1243cea6f970088abde082d2de9377d915a34b44f7d7d67807c03e59c849b69f1544e2a9a1be\"\n+                    \"content\": \"af04eb1b4647b1a041c5ee994c2c7a32556b5410b916fedb69905f166938baa43ba54fdc67084205794c02680d3c6349\"\n                 },\n                 {\n                     \"alg\": \"SHA3-256\",\n-                    \"content\": \"87be248f33f241121f54aad61a9a460a79eabefbf1b5b0dd22aeb95b581f727e\"\n+                    \"content\": \"40f2960e82adfb171b0c5430271fdb0c0dae243aaf9b08021df54fd4d4a3a0b0\"\n                 },\n                 {\n                     \"alg\": \"SHA3-512\",\n-                    \"content\": \"8c992c9c569ebaa0bf956a4c5b34fbf5e1ed1c212c2dd896fa216183ee0bcd341e96698af4b9cec7e8880762faa081a3d3a27f51349aa457cb8e373e4f57c788\"\n+                    \"content\": \"f2c445f77bda3ef230a2b78ea88d86e48a7d6db36805f841d5cffe1f178842a161b2fda0b0d60162af210f18ed9c5bb9579c963291c26f715c1aa389d9a6785c\"\n                 }\n             ],\n             \"licenses\": [\n                 {\n                     \"license\": {\n                         \"id\": \"Apache-2.0\"\n                     }\n                 }\n             ],\n             \"modified\": false,\n-            \"name\": \"commons-codec\",\n-            \"purl\": \"pkg:maven/commons-codec/commons-codec@1.15?type=jar\",\n+            \"name\": \"commons-compress\",\n+            \"purl\": \"pkg:maven/org.apache.commons/commons-compress@1.22?type=jar\",\n             \"type\": \"library\",\n-            \"version\": \"1.15\"\n+            \"version\": \"1.22\"\n         },\n         {\n-            \"bom-ref\": \"pkg:maven/org.jreleaser/jreleaser-logger-api@1.6.0?type=jar\",\n-            \"group\": \"org.jreleaser\",\n+            \"bom-ref\": \"pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar\",\n+            \"description\": \"The slf4j API\",\n+            \"group\": \"org.slf4j\",\n             \"hashes\": [\n                 {\n                     \"alg\": \"MD5\",\n-                    \"content\": \"e7da806a3427ab10405584067d880ead\"\n+                    \"content\": \"403dffa46cdd2e3c82da19df4f394a4c\"\n                 },\n                 {\n                     \"alg\": \"SHA-1\",\n-                    \"content\": \"92ae4e1826cf1d8321fcefd3f4ece0fa5cc4fc94\"\n+                    \"content\": \"41eb7184ea9d556f23e18b5cb99cad1f8581fc00\"\n                 },\n                 {\n                     \"alg\": \"SHA-256\",\n-                    \"content\": \"372d4b6cee7af83429f9f054a69f73d38d6fb4c983b14ce97f2599791d59aee9\"\n+                    \"content\": \"5d6298b93a1905c32cda6478808ac14c2d4a47e91535e53c41f7feeb85d946f4\"\n                 },\n                 {\n                     \"alg\": \"SHA-512\",\n-                    \"content\": \"c4f4edf49e18f475b7b44677497250cd93af45e302fb39306a94dc8f0ee1f783921967de3e1f1b7591f970a359080f43b24c1499a363280d904c2519d2e9bcb2\"\n+                    \"content\": \"216d2cac27d501972c888f94dfa747d700b80d60813884b6ab4b12c6a3b17ed0c21a1d27e1aa4332c97c828f20039e3913d2763d7e1a3cef36ae4389a276e7a8\"\n                 },\n                 {\n                     \"alg\": \"SHA-384\",\n-                    \"content\": \"fcdadd6f2e8af30a7761e98f5c717ab1b8f6f0a79825a711454c8c9cc9842cf8fe0f5917b5ea48603eb0ee5788ed7a8b\"\n+                    \"content\": \"c25b39f418aa726ba8405dfd9b356131f89984e2ef5a55a724a2abf3b7c78443f671105835161d2414d602cf03da9f2d\"\n                 },\n                 {\n                     \"alg\": \"SHA3-384\",\n-                    \"content\": \"42a3e276d69efc85ce5798c5cd78ba1a910ef328169fb39a1a685eea5b98e9c3bf495124f56b518d553f1ca2e63d62f7\"\n+                    \"content\": \"f33abfaac21badae6f85d3ebbc6c1204fd7fda3bb15173e763fa8cee95bce6a8270eec2c8f49343c66c8d2767bc317e1\"\n                 },\n                 {\n                     \"alg\": \"SHA3-256\",\n-                    \"content\": \"0fb4d06e278df39d6633d1a09ed01ad4f7788838668f2ebc097f919384cec97d\"\n+                    \"content\": \"6e00d4b264a2afc4ca4e98f716ecece66c32c626ca3f8c5d56b22092b6fe417b\"\n                 },\n                 {\n                     \"alg\": \"SHA3-512\",\n-                    \"content\": \"bb5a8b000955af1038d4d75c0fd8786561b3a2cf7bb804e09e42518a0bcc3e23ab01dd5236de4bdb58fd9b1a0e923982eb6cc6d0e450896bed9c86dfe808675d\"\n+                    \"content\": \"ad7b9142d370fc532a07cdd43881a129b012ff50e2bede3ac27d9bd31ec707bf2f45e82002fa59e962955cc38ab73cdd77713fca50cedc926c046f5617c1285b\"\n+                }\n+            ],\n+            \"licenses\": [\n+                {\n+                    \"license\": {\n+                        \"id\": \"MIT\",\n+                        \"url\": \"https://opensource.org/licenses/MIT\"\n+                    }\n                 }\n             ],\n-            \"licenses\": [],\n             \"modified\": false,\n-            \"name\": \"jreleaser-logger-api\",\n-            \"purl\": \"pkg:maven/org.jreleaser/jreleaser-logger-api@1.6.0?type=jar\",\n+            \"name\": \"slf4j-api\",\n+            \"purl\": \"pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar\",\n             \"type\": \"library\",\n-            \"version\": \"1.6.0\"\n+            \"version\": \"2.0.7\"\n         },\n         {\n-            \"bom-ref\": \"pkg:maven/com.github.luben/zstd-jni@1.5.4-1?type=jar\",\n-            \"description\": \"JNI bindings for Zstd native library that provides fast and high compression lossless algorithm for Java and all JVM languages.\",\n-            \"group\": \"com.github.luben\",\n+            \"bom-ref\": \"pkg:maven/com.github.spullara.mustache.java/compiler@0.9.10?type=jar\",\n+            \"description\": \"Implementation of mustache.js for Java\",\n+            \"externalReferences\": [\n+                {\n+                    \"type\": \"vcs\",\n+                    \"url\": \"http://github.com/spullara/mustache.java\"\n+                }\n+            ],\n+            \"group\": \"com.github.spullara.mustache.java\",\n             \"hashes\": [\n                 {\n                     \"alg\": \"MD5\",\n-                    \"content\": \"e787241d6ec56aac451be8b0d920c85b\"\n+                    \"content\": \"5638fc78a17d5063cc4b0d00f6e87491\"\n                 },\n                 {\n                     \"alg\": \"SHA-1\",\n-                    \"content\": \"291ccaacc039e41932de877303edb6af98a91c24\"\n+                    \"content\": \"6111ae24e3be9ecbd75f5fe908583fc14b4f0174\"\n                 },\n                 {\n                     \"alg\": \"SHA-256\",\n-                    \"content\": \"f0469d891127dc5ae6bd2df93a5aa38c4d79bcd5f360fbb88c2785b52a572349\"\n+                    \"content\": \"2b5a9217811cb99846a473fa8e0d233eb33629347b7f44941f6c0fbd4cdf1038\"\n                 },\n                 {\n                     \"alg\": \"SHA-512\",\n-                    \"content\": \"368916f0057d69fa4ba3768f6f617291ce4083b89913e46c2daa68cc94c48b92e0ca626241486f34a4d154502eb77b19e82c16c68b341ecfc82ccc0520f8d4a9\"\n+                    \"content\": \"2ccf3196af2b518c96df748a72a0122d033dc222e1fab3e12f3e2094146d44bec20bd1502390b59abf090cbdf5dd4d580084b07fb7241248b5b8da2605207559\"\n                 },\n                 {\n                     \"alg\": \"SHA-384\",\n-                    \"content\": \"7e72184873689fa286d93d88f69f8baa24f818fcd61105a14332fbb5ed254363c0969afa98befd797a3762577bc77993\"\n+                    \"content\": \"0204e77a4a64701af5000df6601f4f4c23cb5e53dd39a1325615d4f942cd2c91d04bbac20348ae49731f586282165c33\"\n                 },\n                 {\n                     \"alg\": \"SHA3-384\",\n-                    \"content\": \"1302636797b291dbbe19f39bdeb66160c1317b395a0a9360ba93aeaa262de7ad8de7257e6a997a9c659fdf53b3367ee6\"\n+                    \"content\": \"0960da7175835484471f485d481499f8b65f134ff4f1629618560adaa5a08caa897fbefcea190f93106ee9e3273381b2\"\n                 },\n                 {\n                     \"alg\": \"SHA3-256\",\n-                    \"content\": \"54505ed16257a55330bb44c76719a687251d2623fa5e50a192b54c5067573255\"\n+                    \"content\": \"cfb7e640392ef590069e6b1d059dc20b8fcff984a4b267b3969fcf50ed0edd4f\"\n                 },\n                 {\n                     \"alg\": \"SHA3-512\",\n-                    \"content\": \"6e01cc9654c2d68c36a284e23c388267ac7013d534cceed0b6ab44679a6bbb6d03d4cfc52c967c4e76dbd5b8963c268e40d9890c927866ea00824821b0ecb82d\"\n+                    \"content\": \"db3dad3809879bca835a04da890fd86dbc58ba6637c72f07d02e39d13645ebb6c640b7fecc18a779e58946072078bdf114b91445026a32dd6501b5d1c6e7d933\"\n                 }\n             ],\n             \"licenses\": [\n                 {\n                     \"license\": {\n-                        \"id\": \"BSD-2-Clause\"\n+                        \"id\": \"Apache-2.0\",\n+                        \"url\": \"https://www.apache.org/licenses/LICENSE-2.0\"\n                     }\n                 }\n             ],\n             \"modified\": false,\n-            \"name\": \"zstd-jni\",\n-            \"publisher\": \"com.github.luben\",\n-            \"purl\": \"pkg:maven/com.github.luben/zstd-jni@1.5.4-1?type=jar\",\n+            \"name\": \"compiler\",\n+            \"purl\": \"pkg:maven/com.github.spullara.mustache.java/compiler@0.9.10?type=jar\",\n             \"type\": \"library\",\n-            \"version\": \"1.5.4-1\"\n+            \"version\": \"0.9.10\"\n         },\n         {\n-            \"bom-ref\": \"pkg:maven/org.slf4j/jcl-over-slf4j@2.0.7?type=jar\",\n-            \"description\": \"JCL 1.2 implemented over SLF4J\",\n-            \"group\": \"org.slf4j\",\n+            \"bom-ref\": \"pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.2?type=jar\",\n+            \"description\": \"General data-binding functionality for Jackson: works on core streaming API\",\n+            \"externalReferences\": [\n+                {\n+                    \"type\": \"vcs\",\n+                    \"url\": \"https://github.com/FasterXML/jackson-databind\"\n+                }\n+            ],\n+            \"group\": \"com.fasterxml.jackson.core\",\n             \"hashes\": [\n                 {\n                     \"alg\": \"MD5\",\n-                    \"content\": \"4e8d6cd31f7e6277280c95157ac7845a\"\n+                    \"content\": \"c1b12dd14734cd1986132bf55042dd7e\"\n                 },\n                 {\n                     \"alg\": \"SHA-1\",\n-                    \"content\": \"f127fe5ee53404a8b3697cdd032dd1dd6a29dd77\"\n+                    \"content\": \"01e71fddbc80bb86f71a6345ac1e8ab8a00e7134\"\n                 },\n                 {\n                     \"alg\": \"SHA-256\",\n-                    \"content\": \"41806757e1d26dae5d6db2ca7d4a5176eed2d6e709cd86564d4a11dab0601742\"\n+                    \"content\": \"501d3abce4d18dcc381058ec593c5b94477906bba6efbac14dae40a642f77424\"\n                 },\n                 {\n                     \"alg\": \"SHA-512\",\n-                    \"content\": \"221b39b85145cf7c245acb7f2692a02b6c5816f8b1187a1a77942dd39de958c1b01ecd066682eb88244f87b2a47513d40b6c1e69ef49a43b2a07ba818f124e17\"\n+                    \"content\": \"85473a29d23292f49092af9e7a7a63993206847c53b3e71f3c67245d68f7b19cc7c341e0ece409eb5e96602df98a848e957d8691fdd2c5fcddd807df9078255e\"\n                 },\n                 {\n                     \"alg\": \"SHA-384\",\n-                    \"content\": \"fa8d53b46cd3ddab0bd265d384a90c35efef6a02a7822aa6f79065cee68d78f6ad7c4d248dea7497af449845dc962730\"\n+                    \"content\": \"5c54d6c497cb329c3424a30319bf657ea222349eadc5ae74c30e8dc1525d7b60b7785f4d20370267b03343dd738cc13e\"\n                 },\n                 {\n                     \"alg\": \"SHA3-384\",\n-                    \"content\": \"cf06cfeaba477f7738f089ba401fb841074681d1c7f465546cdf0e95751a8bf912493428876a7d9108eef83f637c6a1e\"\n+                    \"content\": \"98ff0b2a4dfc1faf319d4b0d38376c3c7a58b65d071db293232eed810adf2e525fecee3be45c99b41e20cf6a3a8ebef9\"\n                 },\n                 {\n                     \"alg\": \"SHA3-256\",\n-                    \"content\": \"efbad2de8683215936c56b3f8fd3492f1cc27c2ee77595a99c794e18777dec42\"\n+                    \"content\": \"2dba45f78a0d37402083975e18dbb3201705faf7e533c3e9721b9364c2a1ab0f\"\n                 },\n                 {\n                     \"alg\": \"SHA3-512\",\n-                    \"content\": \"2707d5513e49f6e3ea6dec96510d360cfc125dab164ae5d99a1dcbd628751640f625a70ed749dad66024ae9fd7725f1c6c7f76de7f5a6efc9d8208a9e01922f7\"\n+                    \"content\": \"76ef73198269cfd0922f4ae86c8b7e6a9cd1b96ee55da43ebfe57dd34365cc1c5c5630fadf79e46156a52b6b96b7d1f694f5e4f5c4f6a3d3ebb31c927e414435\"\n                 }\n             ],\n             \"licenses\": [\n                 {\n                     \"license\": {\n                         \"id\": \"Apache-2.0\"\n                     }\n                 }\n             ],\n             \"modified\": false,\n-            \"name\": \"jcl-over-slf4j\",\n-            \"purl\": \"pkg:maven/org.slf4j/jcl-over-slf4j@2.0.7?type=jar\",\n+            \"name\": \"jackson-databind\",\n+            \"purl\": \"pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.2?type=jar\",\n             \"type\": \"library\",\n-            \"version\": \"2.0.7\"\n+            \"version\": \"2.14.2\"\n         },\n         {\n-            \"bom-ref\": \"pkg:maven/io.github.openfeign.form/feign-form@3.8.0?type=jar\",\n-            \"group\": \"io.github.openfeign.form\",\n+            \"bom-ref\": \"pkg:maven/com.googlecode.javaewah/JavaEWAH@1.2.3?type=jar\",\n+            \"description\": \"The bit array data structure is implemented in Java as the BitSet class. Unfortunately, this fails to scale without compression. JavaEWAH is a word-aligned compressed variant of the Java bitset class. It uses a 64-bit run-length encoding (RLE) compression scheme. The goal of word-aligned compression is not to achieve the best compression, but rather to improve query processing time. Hence, we try to save CPU cycles, maybe at the expense of storage. However, the EWAH scheme we implemented is always more efficient storage-wise than an uncompressed bitmap (implemented in Java as the BitSet class). Unlike some alternatives, javaewah does not rely on a patented scheme.\",\n+            \"externalReferences\": [\n+                {\n+                    \"type\": \"issue-tracker\",\n+                    \"url\": \"https://github.com/lemire/javaewah/issues\"\n+                },\n+                {\n+                    \"type\": \"vcs\",\n+                    \"url\": \"scm:git:git@github.com:lemire/javaewah.git\"\n+                }\n+            ],\n+            \"group\": \"com.googlecode.javaewah\",\n             \"hashes\": [\n                 {\n                     \"alg\": \"MD5\",\n-                    \"content\": \"ab48cdaa9aecefe5e938873ba2db3bb0\"\n+                    \"content\": \"8fdeda28c1fb10e67b3d79f86bef5e61\"\n                 },\n                 {\n                     \"alg\": \"SHA-1\",\n-                    \"content\": \"3083889996b18443c275a352d3ab4bc6c8321598\"\n+                    \"content\": \"13a27c856e0c8808cee9a64032c58eee11c3adc9\"\n                 },\n                 {\n                     \"alg\": \"SHA-256\",\n-                    \"content\": \"b21d37321b390995c90b5dbb4ff0c33f09d1cc7768207cc0da910ad20bf58961\"\n+                    \"content\": \"d65226949713c4c61a784f41c51167e7b0316f93764398ebba9e4336b3d954c2\"\n                 },\n                 {\n                     \"alg\": \"SHA-512\",\n-                    \"content\": \"3a1718c21e4caffcd5f686d2cde011b2f72a026d03caa03b876ad6e7c8c40b7bd59189eed6efa0654bf988a438775ef2c429fae497d502c1806c8c4d9d474c2e\"\n+                    \"content\": \"48cd9df9252c58e9ffe4583e68607944bcdf2ad7a3be7b4317467f503c4f56cdbde358ca7c4f34fa620d01615072a42f3a572fc4f1237e266310b7508e79bcac\"\n                 },\n                 {\n                     \"alg\": \"SHA-384\",\n-                    \"content\": \"02b96ee7cb8c67cdfe63422247035cbb003b7423a82756714d36de926118ac5e96c407fd324090c851962c63f7d4fd6f\"\n+                    \"content\": \"d1fd074f21b8a54a07d3f4579376d7c3ab72f24814ebc9ba92344e9da4721e9bfa3cda3a599137e4ddf2395a3c5b88e4\"\n                 },\n                 {\n                     \"alg\": \"SHA3-384\",\n-                    \"content\": \"0d63a4c22216be6259584b62d3753a86220ea181a002641cda45de153501272fd79b7064d21bdee0ecd8129194fd7c3e\"\n+                    \"content\": \"a553864f196f73c139a104170ab79e780046fb5f322072c5494a6590361021f875afd7168f858b0531b61918ab49b94e\"\n                 },\n                 {\n                     \"alg\": \"SHA3-256\",\n-                    \"content\": \"ffc2832df09d0edf0251c5e6def39b6c36fd2c02c55ad29f0e63e3160cb709e1\"\n+                    \"content\": \"bab97f3f893af36c36218a151b0c3fece27d47f358cc19e1ca9c22d77942bb76\"\n                 },\n                 {\n                     \"alg\": \"SHA3-512\",\n-                    \"content\": \"c2013da332e97e32962ee34459c5834b04ab2f6598960cb06e4f247a2683ced3fac3919d15151be4dae083c74911c7ead1906faabfc8a7cb6245fcd7138ef0df\"\n+                    \"content\": \"be817b93c7093d44ec8dded565d7e5651772ce38e9c72283c05191b33d0ecb2798cd385395f553500446573ac49dccc21f4ba3067d71eb89e03daa384d0193be\"\n                 }\n             ],\n             \"licenses\": [\n                 {\n                     \"license\": {\n                         \"id\": \"Apache-2.0\"\n                     }\n                 }\n             ],\n             \"modified\": false,\n-            \"name\": \"feign-form\",\n-            \"purl\": \"pkg:maven/io.github.openfeign.form/feign-form@3.8.0?type=jar\",\n+            \"name\": \"JavaEWAH\",\n+            \"purl\": \"pkg:maven/com.googlecode.javaewah/JavaEWAH@1.2.3?type=jar\",\n             \"type\": \"library\",\n-            \"version\": \"3.8.0\"\n+            \"version\": \"1.2.3\"\n         },\n         {\n-            \"bom-ref\": \"pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.2?type=jar\",\n-            \"description\": \"Core Jackson processing abstractions (aka Streaming API), implementation for JSON\",\n-            \"externalReferences\": [\n-                {\n-                    \"type\": \"vcs\",\n-                    \"url\": \"https://github.com/FasterXML/jackson-core\"\n-                }\n-            ],\n-            \"group\": \"com.fasterxml.jackson.core\",\n+            \"bom-ref\": \"pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar\",\n+            \"description\": \"Apache HttpComponents Core (blocking I/O)\",\n+            \"group\": \"org.apache.httpcomponents\",\n             \"hashes\": [\n                 {\n                     \"alg\": \"MD5\",\n-                    \"content\": \"6ee422ee4c481b2d5aacb2b5e36a7dc0\"\n+                    \"content\": \"28d2cd9bf8789fd2ec774fb88436ebd1\"\n                 },\n                 {\n                     \"alg\": \"SHA-1\",\n-                    \"content\": \"f804090e6399ce0cf78242db086017512dd71fcc\"\n+                    \"content\": \"51cf043c87253c9f58b539c9f7e44c8894223850\"\n                 },\n                 {\n                     \"alg\": \"SHA-256\",\n-                    \"content\": \"b5d37a77c88277b97e3593c8740925216c06df8e4172bbde058528df04ad3e7a\"\n+                    \"content\": \"6c9b3dd142a09dc468e23ad39aad6f75a0f2b85125104469f026e52a474e464f\"\n                 },\n                 {\n                     \"alg\": \"SHA-512\",\n-                    \"content\": \"208953cf72691b3bab1ca2f9a045cccd3d75c46c90099ba884fbf16bc3e45045e5cd014d2c68c96e8a8826f87a5f0e18cb34b35e7ef03348953869c21e197367\"\n+                    \"content\": \"168026436a6bcf5e96c0c59606638abbdc30de4b405ae55afde70fdf2895e267a3d48bba6bdadc5a89f38e31da3d9a9dc91e1cab7ea76f5e04322cf1ec63b838\"\n                 },\n                 {\n                     \"alg\": \"SHA-384\",\n-                    \"content\": \"e806595862c5fcdae801d9845befc1d12c97e6036ee839d34590dbd785a422d5832cf4fc5c7ee6e1a5ee7a59f37740f0\"\n+                    \"content\": \"ba9ceaee1a37ca3201d6a1315ecb0327b495489efd0baa155c219c475df8d3eb69fe77ab0026563db406497626da6562\"\n                 },\n                 {\n                     \"alg\": \"SHA3-384\",\n-                    \"content\": \"4fa59f572f2e100e2eba6fc664a3b9f804fabd911a552cb40805f39e624a9c04246b679cf4b017bb782c8272877f49d2\"\n+                    \"content\": \"b9dc44dcc7cc86d5036f26d54c4003a2d72808ae7b07a0808bb53505c6d4281b5ad213eb1f3d0fef1113dec57cb0dfe1\"\n                 },\n                 {\n                     \"alg\": \"SHA3-256\",\n-                    \"content\": \"cef17d3a539cbf798cfb0bfa9faffa2b7baff3670b50743e91ee58b4c60b59f1\"\n+                    \"content\": \"fd8ab51846476c6c18822151c9ec07b39a9633010b5d20ea937fc6910407bc64\"\n                 },\n                 {\n                     \"alg\": \"SHA3-512\",\n-                    \"content\": \"fceeed5cb8fe4335d88282d15657762a4728483275a7ff45f50b9fe6a999757ccb37c415d001eb6250226f98f5c576b1b36a83e601fb393cfd34a811c2df5d00\"\n+                    \"content\": \"b42fa528242981a9d70e4f68ab75a24292df5112c44c21b6f18cb9201ce747885ba1d4dc69bc3d14d0da46a6c2638f937c11bc45749abeb55dc89ddada90cdda\"\n                 }\n             ],\n             \"licenses\": [\n                 {\n                     \"license\": {\n                         \"id\": \"Apache-2.0\"\n                     }\n                 }\n             ],\n             \"modified\": false,\n-            \"name\": \"jackson-core\",\n-            \"purl\": \"pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.2?type=jar\",\n+            \"name\": \"httpcore\",\n+            \"purl\": \"pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar\",\n             \"type\": \"library\",\n-            \"version\": \"2.14.2\"\n+            \"version\": \"4.4.16\"\n         },\n         {\n-            \"bom-ref\": \"pkg:maven/io.github.openfeign/feign-httpclient@12.3?type=jar\",\n-            \"description\": \"Feign Apache HttpClient\",\n-            \"group\": \"io.github.openfeign\",\n+            \"bom-ref\": \"pkg:maven/commons-io/commons-io@2.11.0?type=jar\",\n+            \"description\": \"The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.\",\n+            \"externalReferences\": [\n+                {\n+                    \"type\": \"issue-tracker\",\n+                    \"url\": \"https://issues.apache.org/jira/browse/IO\"\n+                },\n+                {\n+                    \"type\": \"vcs\",\n+                    \"url\": \"https://gitbox.apache.org/repos/asf?p=commons-io.git\"\n+                }\n+            ],\n+            \"group\": \"commons-io\",\n             \"hashes\": [\n                 {\n                     \"alg\": \"MD5\",\n-                    \"content\": \"4ec31fa7f187c15f9967c7ffcf714449\"\n+                    \"content\": \"3b4b7ccfaeceeac240b804839ee1a1ca\"\n                 },\n                 {\n                     \"alg\": \"SHA-1\",\n-                    \"content\": \"0ea51fdb4797c3ab62e1f8a726d4e02cf522dba2\"\n+                    \"content\": \"a2503f302b11ebde7ebc3df41daebe0e4eea3689\"\n                 },\n                 {\n                     \"alg\": \"SHA-256\",\n-                    \"content\": \"3a2833e18cc868bff19d6320f22054f96995dc073ed27edfeb2d83996d2ef37c\"\n+                    \"content\": \"961b2f6d87dbacc5d54abf45ab7a6e2495f89b75598962d8c723cea9bc210908\"\n                 },\n                 {\n                     \"alg\": \"SHA-512\",\n-                    \"content\": \"3440afa129150c035670cd098e6eba6f676afc82db2db53a10b20621e30658b411d820652e4668dab5ca615f599a41a06dc826378b5e783f88f26c2cddfce8ed\"\n+                    \"content\": \"5bd78eed456ede30119319c5bed8e3e4c443b6fd7bdb3a7a5686647bd83094d0c3e2832a7575cfb60e4ef25f08106b93476939d3adcfecf5533cc030b3039e10\"\n                 },\n                 {\n                     \"alg\": \"SHA-384\",\n-                    \"content\": \"b8dc38126b28fb486d459e23ae61a34073f16f0ef7ec37f49636919d0fd5a8d86354d76314462dba94efd4f613db92ef\"\n+                    \"content\": \"114f1e324d90ad887c177876d410f5787a8e8da6c48d4b2862d365802c0efded3a88cb24046976bf6276cadad3712f0f\"\n                 },\n                 {\n                     \"alg\": \"SHA3-384\",\n-                    \"content\": \"7c4161078011223122067406e5ad6efedfcf45c71d6e081f37e3fba1c73578c748d5a5e60d372a5fa7159ec7737e71bb\"\n+                    \"content\": \"80288c03ad4d80d69f91d056ffc5570d49a9c76bf54ad2dff0121ecde26a560df76d05156f281f5c6db2a38ff07a873d\"\n                 },\n                 {\n                     \"alg\": \"SHA3-256\",\n-                    \"content\": \"b6d851642b9a5628dbe3cab5706c9d434f1d59ec881cd5cdf6fae84f644eb7c1\"\n+                    \"content\": \"5adfb5ccaf5f21a549422f426118a9542673926fcd18c68390cf813e791dcf6c\"\n                 },\n                 {\n                     \"alg\": \"SHA3-512\",\n-                    \"content\": \"9b3b7edc25efc7345a9cc7b2fe0eccefd57fa40d62e6a85b4a698827b9c34ff568236d591f6d5645de7eb275be2b10aee80f42881f6068f0b1c38f274faf4c5f\"\n+                    \"content\": \"7573f47f0babb53cefdc7c2309a0b982d800139064537b0797da442853d081010ad7c3c74a500598a0f800639a5d540eca21963ea652c68613907059bd4278c2\"\n                 }\n             ],\n             \"licenses\": [\n                 {\n                     \"license\": {\n                         \"id\": \"Apache-2.0\"\n                     }\n                 }\n             ],\n             \"modified\": false,\n-            \"name\": \"feign-httpclient\",\n-            \"purl\": \"pkg:maven/io.github.openfeign/feign-httpclient@12.3?type=jar\",\n+            \"name\": \"commons-io\",\n+            \"purl\": \"pkg:maven/commons-io/commons-io@2.11.0?type=jar\",\n             \"type\": \"library\",\n-            \"version\": \"12.3\"\n+            \"version\": \"2.11.0\"\n         },\n         {\n-            \"bom-ref\": \"pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar\",\n-            \"description\": \"The slf4j API\",\n-            \"group\": \"org.slf4j\",\n+            \"bom-ref\": \"pkg:maven/org.jreleaser/jreleaser-resource-bundle@1.6.0?type=jar\",\n+            \"description\": \"JReleaser resource bundle\",\n+            \"externalReferences\": [\n+                {\n+                    \"type\": \"vcs\",\n+                    \"url\": \"https://github.com/jreleaser/jreleaser\"\n+                }\n+            ],\n+            \"group\": \"org.jreleaser\",\n             \"hashes\": [\n                 {\n                     \"alg\": \"MD5\",\n-                    \"content\": \"403dffa46cdd2e3c82da19df4f394a4c\"\n+                    \"content\": \"8419930ec5e42489dad5e26749a994eb\"\n                 },\n                 {\n                     \"alg\": \"SHA-1\",\n-                    \"content\": \"41eb7184ea9d556f23e18b5cb99cad1f8581fc00\"\n+                    \"content\": \"050aba092fa794e0cb91158de894a97aff581356\"\n                 },\n                 {\n                     \"alg\": \"SHA-256\",\n-                    \"content\": \"5d6298b93a1905c32cda6478808ac14c2d4a47e91535e53c41f7feeb85d946f4\"\n+                    \"content\": \"38434b31fac439399aa37018fa69302a9d1b04be6efb7b23d53d18615e1f4f2b\"\n                 },\n                 {\n                     \"alg\": \"SHA-512\",\n-                    \"content\": \"216d2cac27d501972c888f94dfa747d700b80d60813884b6ab4b12c6a3b17ed0c21a1d27e1aa4332c97c828f20039e3913d2763d7e1a3cef36ae4389a276e7a8\"\n+                    \"content\": \"c77c476e972e17b25de3aecf75d71482535d68cdc5e4bf556f5d4cab17345b9318d47fa42c9da671769f9bcf7f549efde70b64eff5cb189c805bb406fd705cb8\"\n                 },\n                 {\n                     \"alg\": \"SHA-384\",\n-                    \"content\": \"c25b39f418aa726ba8405dfd9b356131f89984e2ef5a55a724a2abf3b7c78443f671105835161d2414d602cf03da9f2d\"\n+                    \"content\": \"b1d8f56681f39c638806e669447d9600507946448b528060d98afc2123c637980ba5609aba4b357c83acd772bfbdb73e\"\n                 },\n                 {\n                     \"alg\": \"SHA3-384\",\n-                    \"content\": \"f33abfaac21badae6f85d3ebbc6c1204fd7fda3bb15173e763fa8cee95bce6a8270eec2c8f49343c66c8d2767bc317e1\"\n+                    \"content\": \"74a52a9891c520a0f90ffbab33da0219cd787bbe309ae8eca303de00c6041692554e8d650a6a3925e057322bd00700ff\"\n                 },\n                 {\n                     \"alg\": \"SHA3-256\",\n-                    \"content\": \"6e00d4b264a2afc4ca4e98f716ecece66c32c626ca3f8c5d56b22092b6fe417b\"\n+                    \"content\": \"304bae90a7c53e6ad711e54bb8847c3eedc0e18cac03bffa14729918cb59efce\"\n                 },\n                 {\n                     \"alg\": \"SHA3-512\",\n-                    \"content\": \"ad7b9142d370fc532a07cdd43881a129b012ff50e2bede3ac27d9bd31ec707bf2f45e82002fa59e962955cc38ab73cdd77713fca50cedc926c046f5617c1285b\"\n+                    \"content\": \"16a31cb40ed20dcaa5d34cb6aa2b81325f285b7feb5dda2486206496449fd548ef51117b38a8074a4a106fba9836de72232762dff60f535cd76f5848860c2f6c\"\n                 }\n             ],\n             \"licenses\": [\n                 {\n                     \"license\": {\n-                        \"id\": \"MIT\",\n-                        \"url\": \"https://opensource.org/licenses/MIT\"\n+                        \"id\": \"Apache-2.0\",\n+                        \"url\": \"https://www.apache.org/licenses/LICENSE-2.0\"\n                     }\n                 }\n             ],\n             \"modified\": false,\n-            \"name\": \"slf4j-api\",\n-            \"purl\": \"pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar\",\n+            \"name\": \"jreleaser-resource-bundle\",\n+            \"purl\": \"pkg:maven/org.jreleaser/jreleaser-resource-bundle@1.6.0?type=jar\",\n             \"type\": \"library\",\n-            \"version\": \"2.0.7\"\n+            \"version\": \"1.6.0\"\n         },\n         {\n             \"bom-ref\": \"pkg:maven/org.tukaani/xz@1.9?type=jar\",\n             \"description\": \"XZ data compression\",\n             \"externalReferences\": [\n                 {\n                     \"type\": \"vcs\",\n@@ -938,812 +817,903 @@\n             \"modified\": false,\n             \"name\": \"xz\",\n             \"purl\": \"pkg:maven/org.tukaani/xz@1.9?type=jar\",\n             \"type\": \"library\",\n             \"version\": \"1.9\"\n         },\n         {\n-            \"bom-ref\": \"pkg:maven/org.jreleaser/jreleaser-model-impl@1.6.0?type=jar\",\n-            \"group\": \"org.jreleaser\",\n-            \"hashes\": [\n-                {\n-                    \"alg\": \"MD5\",\n-                    \"content\": \"d2760fed3ab0f395c3ec08c3f7493d52\"\n-                },\n-                {\n-                    \"alg\": \"SHA-1\",\n-                    \"content\": \"37f35b86cc5bcdf8c7d306d97884c2d89fa742d5\"\n-                },\n-                {\n-                    \"alg\": \"SHA-256\",\n-                    \"content\": \"284a61227c9f031b6b6928bfef76eeea45c97e6053b7a1190e3dd64c0effd8df\"\n-                },\n-                {\n-                    \"alg\": \"SHA-512\",\n-                    \"content\": \"81899b65d3eb10b0dac885ee17b45822d12d5746141876ef2573b0afaec13c92187ebf8a6c446ce002f25f8bc3d40f1a88e1c8c548bd35a556efc86d9f5ed809\"\n-                },\n-                {\n-                    \"alg\": \"SHA-384\",\n-                    \"content\": \"c961c3d7d900e27341988545b53d9bc8f89275e700799e41b56dc43444173e1bf962e00f96026de0fee5894594d40d6f\"\n-                },\n-                {\n-                    \"alg\": \"SHA3-384\",\n-                    \"content\": \"984a6c6ab7487eeb35b3aa8d87754d4dd55bdcbcce9239bd0ec17b1ca63e1a66e4f34767476bd5b79e0998477ccc7c35\"\n-                },\n+            \"bom-ref\": \"pkg:maven/org.apache.commons/commons-jexl3@3.3?type=jar\",\n+            \"description\": \"JEXL is a library intended to facilitate the implementation of scripting features in applications and frameworks written in Java.\",\n+            \"externalReferences\": [\n                 {\n-                    \"alg\": \"SHA3-256\",\n-                    \"content\": \"a5b874d301532774b825877e6d29045492c60e20a00d55d096e0a3b371885a41\"\n+                    \"type\": \"issue-tracker\",\n+                    \"url\": \"https://issues.apache.org/jira/browse/JEXL\"\n                 },\n                 {\n-                    \"alg\": \"SHA3-512\",\n-                    \"content\": \"83babeb5dc661f2a4f4082872615c1c70719c66ac3f2071f367a82d1b7e44390121d4e59ace75f0fdbc66f5277c306242ee491de2268d49bc5c9da4247b260e9\"\n+                    \"type\": \"vcs\",\n+                    \"url\": \"https://gitbox.apache.org/repos/asf/commons-jexl.git\"\n                 }\n             ],\n-            \"licenses\": [],\n-            \"modified\": false,\n-            \"name\": \"jreleaser-model-impl\",\n-            \"purl\": \"pkg:maven/org.jreleaser/jreleaser-model-impl@1.6.0?type=jar\",\n-            \"type\": \"library\",\n-            \"version\": \"1.6.0\"\n-        },\n-        {\n-            \"bom-ref\": \"pkg:maven/io.github.openfeign/feign-jackson@12.3?type=jar\",\n-            \"description\": \"Feign Jackson\",\n-            \"group\": \"io.github.openfeign\",\n+            \"group\": \"org.apache.commons\",\n             \"hashes\": [\n                 {\n                     \"alg\": \"MD5\",\n-                    \"content\": \"8bbba5bba4c26edb1b5c89e1a4912c22\"\n+                    \"content\": \"3a332e3beb67b3a2a20bd0a950fc57c4\"\n                 },\n                 {\n                     \"alg\": \"SHA-1\",\n-                    \"content\": \"583c0ce0354e6ed81d998d5b8f1786ade1e9f2c4\"\n+                    \"content\": \"c76b4cfa436c3e79e04806e62656b09968c388ba\"\n                 },\n                 {\n                     \"alg\": \"SHA-256\",\n-                    \"content\": \"1dfc43d604693ce51ef3935f27dbfecd2d65636699a088eee32ff37cc50ea479\"\n+                    \"content\": \"07b0ff6c5a10ffb2e2c02da9e2c0e2e6702df44178cfb76881f69447fc386014\"\n                 },\n                 {\n                     \"alg\": \"SHA-512\",\n-                    \"content\": \"8ea71fae9a2a4ad9d06f27e21e078001e1a29761af85e81b91bf2a38e4dd8841184a12fdf467915c234d080aa28484452fe45b9bc0a381ce23d8366b03be1395\"\n+                    \"content\": \"879111d1c3ad021ea3961e49161b3ff6ba251044ffef1ca4d36d880d9a09b1f395e17eef221a13274303f44e116204ae4b2a3ee3e931f117fc901e321d59b5c6\"\n                 },\n                 {\n                     \"alg\": \"SHA-384\",\n-                    \"content\": \"03553ac35a79266a150940fc62d3da7a389b47825102d91392f37b719da94af2d2355c2592d2b68604bf84248c73baf9\"\n+                    \"content\": \"7a268bf2c903be86813fcc7f06158abf79d558ee59ebf03470ebd06ca6e6d169beb1c3600e07c20c4f95fa7827fde841\"\n                 },\n                 {\n                     \"alg\": \"SHA3-384\",\n-                    \"content\": \"986284d22c0bbb7abfbc1762447a44d0919c266002d6925c4ca75040f3950a3d943a71dedf2f72592e6a185218c498a9\"\n+                    \"content\": \"1803d239f17f7eeee6edb69d38c4473319fd4eeeb684eda5c38b577a7aaf42965ce41d9082d515d5007be9a0b0712d81\"\n                 },\n                 {\n                     \"alg\": \"SHA3-256\",\n-                    \"content\": \"60242fd373d71575ffcb8a4f866b27d291b6acecf83be67e6ff51a13559dc016\"\n+                    \"content\": \"01163da5e720b6d1f6bf8b6e9e398d26a1be92b3f18ef6089d218d54166b0c01\"\n                 },\n                 {\n                     \"alg\": \"SHA3-512\",\n-                    \"content\": \"b7e0392fc793f19b3daf64c7e7b875fb2e4ec7ba2f1681d51c14c5c9efd5991817766753e62999a76bad83c624601f9f5a55304c4e06d2e3cd88ec4c609a1ede\"\n+                    \"content\": \"8abdd72c14492340c05fd5d3555682a308ac00ac1b1e1e15ae38abc47f454f50db9e0727a49df72a50bf49f1447a6ca9dadc48b9ffd45a043bcbae9e5e050d3d\"\n                 }\n             ],\n             \"licenses\": [\n                 {\n                     \"license\": {\n-                        \"id\": \"Apache-2.0\"\n+                        \"id\": \"Apache-2.0\",\n+                        \"url\": \"https://www.apache.org/licenses/LICENSE-2.0\"\n                     }\n                 }\n             ],\n             \"modified\": false,\n-            \"name\": \"feign-jackson\",\n-            \"purl\": \"pkg:maven/io.github.openfeign/feign-jackson@12.3?type=jar\",\n+            \"name\": \"commons-jexl3\",\n+            \"purl\": \"pkg:maven/org.apache.commons/commons-jexl3@3.3?type=jar\",\n             \"type\": \"library\",\n-            \"version\": \"12.3\"\n+            \"version\": \"3.3\"\n         },\n         {\n-            \"bom-ref\": \"pkg:maven/org.apache.commons/commons-compress@1.22?type=jar\",\n-            \"description\": \"Apache Commons Compress software defines an API for working with compression and archive formats. These include: bzip2, gzip, pack200, lzma, xz, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.\",\n+            \"bom-ref\": \"pkg:maven/org.apache.tika/tika-core@2.7.0?type=jar\",\n+            \"description\": \"This is the core Apache Tika\\u2122 toolkit library from which all other modules inherit functionality. It also includes the core facades for the Tika API.\",\n             \"externalReferences\": [\n                 {\n-                    \"type\": \"issue-tracker\",\n-                    \"url\": \"https://issues.apache.org/jira/browse/COMPRESS\"\n+                    \"type\": \"website\",\n+                    \"url\": \"http://www.apache.org\"\n                 },\n                 {\n-                    \"type\": \"vcs\",\n-                    \"url\": \"https://gitbox.apache.org/repos/asf?p=commons-compress.git\"\n+                    \"type\": \"build-system\",\n+                    \"url\": \"https://builds.apache.org/job/Tika-trunk/\"\n+                },\n+                {\n+                    \"type\": \"issue-tracker\",\n+                    \"url\": \"https://issues.apache.org/jira/browse/TIKA\"\n                 }\n             ],\n-            \"group\": \"org.apache.commons\",\n+            \"group\": \"org.apache.tika\",\n             \"hashes\": [\n                 {\n                     \"alg\": \"MD5\",\n-                    \"content\": \"f1e4db16fee4291212d91409313a8086\"\n+                    \"content\": \"42b3dd0d4679ec6bafd848b6c0cb3035\"\n                 },\n                 {\n                     \"alg\": \"SHA-1\",\n-                    \"content\": \"691a8b4e6cf4248c3bc72c8b719337d5cb7359fa\"\n+                    \"content\": \"e9e8f1a7dc833e633fb2c717e8fa811e3e9dbf4a\"\n                 },\n                 {\n                     \"alg\": \"SHA-256\",\n-                    \"content\": \"53d04a0efc7223baecaa303bd5d298eb0600e6b82b4076f9cecd558b97ba760b\"\n+                    \"content\": \"2603961edec8bcee014d2c360e5a9a0cdbf10aa8e6e95cf67abe190c837bb054\"\n                 },\n                 {\n                     \"alg\": \"SHA-512\",\n-                    \"content\": \"2d64fa6cd081fff5d73ee662a82f6186991fc13b4bdaee18b5f1bdcab06d9acb70e3713d18b296337791448251fbd6768bd84afaa817a10547652d0cfa885563\"\n+                    \"content\": \"1d0a07cd55db3bdd6d3d169f0747e920491936a7401af45e5f14f10400f3addd93918f8efb80445c0cf9d91803571877d7d4e1429440ab6ae8c49ec36a77e103\"\n                 },\n                 {\n                     \"alg\": \"SHA-384\",\n-                    \"content\": \"295d7f69d151abbd784e1c4d021c77ce43e129bb5bda0c55762b32d77c8607863383297674ec8a212ea3dfe4007b0044\"\n+                    \"content\": \"c3e7ad76e7abdaa27d28416e101110eab481f0f72cd0053de9030a0220549c1f346314116e04665ee70cdeba5fcbc5f8\"\n                 },\n                 {\n                     \"alg\": \"SHA3-384\",\n-                    \"content\": \"af04eb1b4647b1a041c5ee994c2c7a32556b5410b916fedb69905f166938baa43ba54fdc67084205794c02680d3c6349\"\n+                    \"content\": \"97b801fbde8b9b84c13aea4dd087cbb333e7cba52737d7f5c54f4ea46516d80677d363a2063de9cc014773da2bc5c4a5\"\n                 },\n                 {\n                     \"alg\": \"SHA3-256\",\n-                    \"content\": \"40f2960e82adfb171b0c5430271fdb0c0dae243aaf9b08021df54fd4d4a3a0b0\"\n+                    \"content\": \"45ce7c3c2ea1ef9b7785a42604a0ec75444a9bd55b0687307e5a874d51f29547\"\n                 },\n                 {\n                     \"alg\": \"SHA3-512\",\n-                    \"content\": \"f2c445f77bda3ef230a2b78ea88d86e48a7d6db36805f841d5cffe1f178842a161b2fda0b0d60162af210f18ed9c5bb9579c963291c26f715c1aa389d9a6785c\"\n+                    \"content\": \"bd45003a2aa326c195e847199cda6aa52f5498cacf6faaab99b95826b4812da9590c29a80c0a3811c27403cc52a8e79a38c4770ce4063b7e013566b7e794af98\"\n                 }\n             ],\n             \"licenses\": [\n                 {\n                     \"license\": {\n-                        \"id\": \"Apache-2.0\"\n+                        \"id\": \"Apache-2.0\",\n+                        \"url\": \"https://www.apache.org/licenses/LICENSE-2.0\"\n                     }\n                 }\n             ],\n             \"modified\": false,\n-            \"name\": \"commons-compress\",\n-            \"purl\": \"pkg:maven/org.apache.commons/commons-compress@1.22?type=jar\",\n+            \"name\": \"tika-core\",\n+            \"publisher\": \"The Apache Software Foundation\",\n+            \"purl\": \"pkg:maven/org.apache.tika/tika-core@2.7.0?type=jar\",\n             \"type\": \"library\",\n-            \"version\": \"1.22\"\n+            \"version\": \"2.7.0\"\n         },\n         {\n-            \"bom-ref\": \"pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar\",\n-            \"description\": \"Apache HttpComponents Client\",\n-            \"group\": \"org.apache.httpcomponents\",\n+            \"bom-ref\": \"pkg:maven/org.jreleaser/jreleaser-model-api@1.6.0?type=jar\",\n+            \"description\": \"JReleaser Model API\",\n+            \"externalReferences\": [\n+                {\n+                    \"type\": \"vcs\",\n+                    \"url\": \"https://github.com/jreleaser/jreleaser\"\n+                }\n+            ],\n+            \"group\": \"org.jreleaser\",\n             \"hashes\": [\n                 {\n                     \"alg\": \"MD5\",\n-                    \"content\": \"40d6b9075fbd28fa10292a45a0db9457\"\n+                    \"content\": \"288354c621fdfef298e4e8cdc843e2c3\"\n                 },\n                 {\n                     \"alg\": \"SHA-1\",\n-                    \"content\": \"e5f6cae5ca7ecaac1ec2827a9e2d65ae2869cada\"\n+                    \"content\": \"54bcb05008c6f0b50433f8d0fe82e3a217317db1\"\n                 },\n                 {\n                     \"alg\": \"SHA-256\",\n-                    \"content\": \"6fe9026a566c6a5001608cf3fc32196641f6c1e5e1986d1037ccdbd5f31ef743\"\n+                    \"content\": \"397e18c4fa02ba508e409a119866d4e78d64c6c76f5a4f22b3aefc027b662b9b\"\n                 },\n                 {\n                     \"alg\": \"SHA-512\",\n-                    \"content\": \"3567739186e551f84cad3e4b6b270c5b8b19aba297675a96bcdff3663ff7d20d188611d21f675fe5ff1bfd7d8ca31362070910d7b92ab1b699872a120aa6f089\"\n+                    \"content\": \"67c4e2f9acb6db78c21cfd23d3411ce1e32b23690a1d5035a285b48cd9b996fd4c80b504d050e87a4a5604e6b56ca52878a464593f0bd8eea53059bcb263289f\"\n                 },\n                 {\n                     \"alg\": \"SHA-384\",\n-                    \"content\": \"093ac3e2dde58e34aa70309c7305eb3c9b5be2509a9293f1672494da55479a86bd112e83326746dc7a32855472952b99\"\n+                    \"content\": \"8f67be44af6f792c32f2b86d07738c52e5b742a650d010e8c0b5e60a62db627d5c695f23f24d814f232fc0246d03086c\"\n                 },\n                 {\n                     \"alg\": \"SHA3-384\",\n-                    \"content\": \"cd6882e7868624164e460f2f3ea01466f863c0dcb902b031c656b57356f563be83b29530df41d88d634ed3d01fc9964d\"\n+                    \"content\": \"1e5c3dffd4e3c545081904db6dcff892bd2f27285b4fa46a57cdd23c3fbb382ab06268e87d57212996387269b2c8b72f\"\n                 },\n                 {\n                     \"alg\": \"SHA3-256\",\n-                    \"content\": \"710b1d8d7dae0b8e4270756694ca9c83d64965f42d3b4170c609b14d47c2762c\"\n+                    \"content\": \"d2b875e45846a0d17cf7f85d6289681ee42897519cdaca9625ffc56b1639909d\"\n                 },\n                 {\n                     \"alg\": \"SHA3-512\",\n-                    \"content\": \"276fa6a6599dc89382d658115695cf4da6b0d39b34e9c349c17a5dbd64122eaee553bb9ed75c0378ec4a83be157c8aa39370662de3c9b8fd55ebc1dd608383e6\"\n+                    \"content\": \"1a098f05c0735a7ed19cf374440818e9882b0288728f6658ce3709ac534c06cc7dc36ea4d7656a35281758d1ec09c31edf13a98d6680206a0c9fb1dff21ad04f\"\n                 }\n             ],\n             \"licenses\": [\n                 {\n                     \"license\": {\n-                        \"id\": \"Apache-2.0\"\n+                        \"id\": \"Apache-2.0\",\n+                        \"url\": \"https://www.apache.org/licenses/LICENSE-2.0\"\n                     }\n                 }\n             ],\n             \"modified\": false,\n-            \"name\": \"httpclient\",\n-            \"purl\": \"pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar\",\n+            \"name\": \"jreleaser-model-api\",\n+            \"purl\": \"pkg:maven/org.jreleaser/jreleaser-model-api@1.6.0?type=jar\",\n             \"type\": \"library\",\n-            \"version\": \"4.5.13\"\n+            \"version\": \"1.6.0\"\n         },\n         {\n-            \"bom-ref\": \"pkg:maven/org.apache.tika/tika-core@2.7.0?type=jar\",\n-            \"description\": \"This is the core Apache Tika\\u2122 toolkit library from which all other modules inherit functionality. It also includes the core facades for the Tika API.\",\n+            \"bom-ref\": \"pkg:maven/org.bouncycastle/bcprov-jdk15on@1.70?type=jar\",\n+            \"description\": \"The Bouncy Castle Crypto package is a Java implementation of cryptographic algorithms. This jar contains JCE provider and lightweight API for the Bouncy Castle Cryptography APIs for JDK 1.5 and up.\",\n             \"externalReferences\": [\n                 {\n-                    \"type\": \"website\",\n-                    \"url\": \"http://www.apache.org\"\n-                },\n-                {\n-                    \"type\": \"build-system\",\n-                    \"url\": \"https://builds.apache.org/job/Tika-trunk/\"\n+                    \"type\": \"issue-tracker\",\n+                    \"url\": \"https://github.com/bcgit/bc-java/issues\"\n                 },\n                 {\n-                    \"type\": \"issue-tracker\",\n-                    \"url\": \"https://issues.apache.org/jira/browse/TIKA\"\n+                    \"type\": \"vcs\",\n+                    \"url\": \"https://github.com/bcgit/bc-java\"\n                 }\n             ],\n-            \"group\": \"org.apache.tika\",\n+            \"group\": \"org.bouncycastle\",\n             \"hashes\": [\n                 {\n                     \"alg\": \"MD5\",\n-                    \"content\": \"42b3dd0d4679ec6bafd848b6c0cb3035\"\n+                    \"content\": \"1809d0449a6374279c01fdd3be26cd92\"\n                 },\n                 {\n                     \"alg\": \"SHA-1\",\n-                    \"content\": \"e9e8f1a7dc833e633fb2c717e8fa811e3e9dbf4a\"\n+                    \"content\": \"4636a0d01f74acaf28082fb62b317f1080118371\"\n                 },\n                 {\n                     \"alg\": \"SHA-256\",\n-                    \"content\": \"2603961edec8bcee014d2c360e5a9a0cdbf10aa8e6e95cf67abe190c837bb054\"\n+                    \"content\": \"8f3c20e3e2d565d26f33e8d4857a37d0d7f8ac39b62a7026496fcab1bdac30d4\"\n                 },\n                 {\n                     \"alg\": \"SHA-512\",\n-                    \"content\": \"1d0a07cd55db3bdd6d3d169f0747e920491936a7401af45e5f14f10400f3addd93918f8efb80445c0cf9d91803571877d7d4e1429440ab6ae8c49ec36a77e103\"\n+                    \"content\": \"7dccfc636ee4df1487615818cfa99c69941081df95e8ef1eaf4bca165594dff9547e3774fd70de3418abace77d2c45889f70bcd2e6823f8539f359e68eaf36d1\"\n                 },\n                 {\n                     \"alg\": \"SHA-384\",\n-                    \"content\": \"c3e7ad76e7abdaa27d28416e101110eab481f0f72cd0053de9030a0220549c1f346314116e04665ee70cdeba5fcbc5f8\"\n+                    \"content\": \"a0b35d204cd962f1d246fa94b6e8b0fcee1a7c3f37b7e87cda742f2124a25b48794ce11a903ea8d12009c86227b6808d\"\n                 },\n                 {\n                     \"alg\": \"SHA3-384\",\n-                    \"content\": \"97b801fbde8b9b84c13aea4dd087cbb333e7cba52737d7f5c54f4ea46516d80677d363a2063de9cc014773da2bc5c4a5\"\n+                    \"content\": \"980d81d3d9906764bbf2ae9b3b364ea58628b485ce1dc3d06734e10495d79f2be2e7cc7df61ac88cd67c1104c7af9393\"\n                 },\n                 {\n                     \"alg\": \"SHA3-256\",\n-                    \"content\": \"45ce7c3c2ea1ef9b7785a42604a0ec75444a9bd55b0687307e5a874d51f29547\"\n+                    \"content\": \"10a3572e42d29f609721d795116e3e5d0f6f03efef84bb979ce72e26908d242b\"\n                 },\n                 {\n                     \"alg\": \"SHA3-512\",\n-                    \"content\": \"bd45003a2aa326c195e847199cda6aa52f5498cacf6faaab99b95826b4812da9590c29a80c0a3811c27403cc52a8e79a38c4770ce4063b7e013566b7e794af98\"\n+                    \"content\": \"a0761cb6deeb86c94b96850c72c0a0eaf516ca849f4b8268f9f60c9ed2a6730e692c15098d47e617da294e931113c6cbcaddec8957c9f029fa595b5f14ff35ac\"\n                 }\n             ],\n             \"licenses\": [\n                 {\n                     \"license\": {\n+                        \"name\": \"Bouncy Castle Licence\",\n+                        \"url\": \"https://www.bouncycastle.org/licence.html\"\n+                    }\n+                }\n+            ],\n+            \"modified\": false,\n+            \"name\": \"bcprov-jdk15on\",\n+            \"purl\": \"pkg:maven/org.bouncycastle/bcprov-jdk15on@1.70?type=jar\",\n+            \"type\": \"library\",\n+            \"version\": \"1.70\"\n+        },\n+        {\n+            \"bom-ref\": \"pkg:maven/org.jreleaser/jreleaser-model-impl@1.6.0?type=jar\",\n+            \"description\": \"JReleaser Model implementation\",\n+            \"externalReferences\": [\n+                {\n+                    \"type\": \"vcs\",\n+                    \"url\": \"https://github.com/jreleaser/jreleaser\"\n+                }\n+            ],\n+            \"group\": \"org.jreleaser\",\n+            \"licenses\": [\n+                {\n+                    \"license\": {\n                         \"id\": \"Apache-2.0\",\n                         \"url\": \"https://www.apache.org/licenses/LICENSE-2.0\"\n                     }\n                 }\n             ],\n             \"modified\": false,\n-            \"name\": \"tika-core\",\n-            \"publisher\": \"The Apache Software Foundation\",\n-            \"purl\": \"pkg:maven/org.apache.tika/tika-core@2.7.0?type=jar\",\n+            \"name\": \"jreleaser-model-impl\",\n+            \"purl\": \"pkg:maven/org.jreleaser/jreleaser-model-impl@1.6.0?type=jar\",\n             \"type\": \"library\",\n-            \"version\": \"2.7.0\"\n+            \"version\": \"1.6.0\"\n         },\n         {\n-            \"bom-ref\": \"pkg:maven/org.jreleaser/jreleaser-tool-java-sdk@1.6.0?type=jar\",\n-            \"group\": \"org.jreleaser\",\n+            \"bom-ref\": \"pkg:maven/com.github.luben/zstd-jni@1.5.4-1?type=jar\",\n+            \"description\": \"JNI bindings for Zstd native library that provides fast and high compression lossless algorithm for Java and all JVM languages.\",\n+            \"group\": \"com.github.luben\",\n             \"hashes\": [\n                 {\n                     \"alg\": \"MD5\",\n-                    \"content\": \"abfd7ce4581351b44b505c26c1367955\"\n+                    \"content\": \"e787241d6ec56aac451be8b0d920c85b\"\n                 },\n                 {\n                     \"alg\": \"SHA-1\",\n-                    \"content\": \"ef1e1b370a0a24a202089f732598f82ce91c74f2\"\n+                    \"content\": \"291ccaacc039e41932de877303edb6af98a91c24\"\n                 },\n                 {\n                     \"alg\": \"SHA-256\",\n-                    \"content\": \"a4bcf1548d74752460e28bd3ab7e43b779b5a8f446285b8e7643dd83983f5b7f\"\n+                    \"content\": \"f0469d891127dc5ae6bd2df93a5aa38c4d79bcd5f360fbb88c2785b52a572349\"\n                 },\n                 {\n                     \"alg\": \"SHA-512\",\n-                    \"content\": \"e14548ab617020cac195b98b2b6bf04043cf409ef395783e8c2c38441c761f38dd34b4858d4d7e26d2c69fde233ccaa102f180d3ff547efc29e475d0c38b7b40\"\n+                    \"content\": \"368916f0057d69fa4ba3768f6f617291ce4083b89913e46c2daa68cc94c48b92e0ca626241486f34a4d154502eb77b19e82c16c68b341ecfc82ccc0520f8d4a9\"\n                 },\n                 {\n                     \"alg\": \"SHA-384\",\n-                    \"content\": \"85953ec5ec2714df877d6012db03c5d88a971dcb35cfc43c197570e8e2b010c1c292e228e4fe8c7f93418e11868b8654\"\n+                    \"content\": \"7e72184873689fa286d93d88f69f8baa24f818fcd61105a14332fbb5ed254363c0969afa98befd797a3762577bc77993\"\n                 },\n                 {\n                     \"alg\": \"SHA3-384\",\n-                    \"content\": \"cb294f21ab1d8a8c8f488e2f60b456e66985b55dbb5ecc56646b57fc6fbb9e36aa69801bdb6c1ea5825288baab329183\"\n+                    \"content\": \"1302636797b291dbbe19f39bdeb66160c1317b395a0a9360ba93aeaa262de7ad8de7257e6a997a9c659fdf53b3367ee6\"\n                 },\n                 {\n                     \"alg\": \"SHA3-256\",\n-                    \"content\": \"cf8c1f78e8630a84e28269970a18752616d82aec3a5d9297459244fb4d52980a\"\n+                    \"content\": \"54505ed16257a55330bb44c76719a687251d2623fa5e50a192b54c5067573255\"\n                 },\n                 {\n                     \"alg\": \"SHA3-512\",\n-                    \"content\": \"bd42233ee963b74dd472abde6801b8140f3ec1b08e503e486bd7c8ef7575e65a72f0bd8a3ca996adbc832d4df6be8e2b500a425b77dfdfd80e57818af84a79c2\"\n+                    \"content\": \"6e01cc9654c2d68c36a284e23c388267ac7013d534cceed0b6ab44679a6bbb6d03d4cfc52c967c4e76dbd5b8963c268e40d9890c927866ea00824821b0ecb82d\"\n+                }\n+            ],\n+            \"licenses\": [\n+                {\n+                    \"license\": {\n+                        \"id\": \"BSD-2-Clause\"\n+                    }\n                 }\n             ],\n-            \"licenses\": [],\n             \"modified\": false,\n-            \"name\": \"jreleaser-tool-java-sdk\",\n-            \"purl\": \"pkg:maven/org.jreleaser/jreleaser-tool-java-sdk@1.6.0?type=jar\",\n+            \"name\": \"zstd-jni\",\n+            \"publisher\": \"com.github.luben\",\n+            \"purl\": \"pkg:maven/com.github.luben/zstd-jni@1.5.4-1?type=jar\",\n             \"type\": \"library\",\n-            \"version\": \"1.6.0\"\n+            \"version\": \"1.5.4-1\"\n         },\n         {\n-            \"bom-ref\": \"pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.2?type=jar\",\n-            \"description\": \"General data-binding functionality for Jackson: works on core streaming API\",\n+            \"bom-ref\": \"pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.2?type=jar\",\n+            \"description\": \"Core annotations used for value types, used by Jackson data binding package.\",\n             \"externalReferences\": [\n                 {\n                     \"type\": \"vcs\",\n-                    \"url\": \"https://github.com/FasterXML/jackson-databind\"\n+                    \"url\": \"https://github.com/FasterXML/jackson-annotations\"\n                 }\n             ],\n             \"group\": \"com.fasterxml.jackson.core\",\n             \"hashes\": [\n                 {\n                     \"alg\": \"MD5\",\n-                    \"content\": \"c1b12dd14734cd1986132bf55042dd7e\"\n+                    \"content\": \"10d19982a8890f6eb37557af2f58e272\"\n                 },\n                 {\n                     \"alg\": \"SHA-1\",\n-                    \"content\": \"01e71fddbc80bb86f71a6345ac1e8ab8a00e7134\"\n+                    \"content\": \"a7aae9525864930723e3453ab799521fdfd9d873\"\n                 },\n                 {\n                     \"alg\": \"SHA-256\",\n-                    \"content\": \"501d3abce4d18dcc381058ec593c5b94477906bba6efbac14dae40a642f77424\"\n+                    \"content\": \"2c6869d505cf60dc066734b7d50339f975bd3adc635e26a78abb71acb4473c0d\"\n                 },\n                 {\n                     \"alg\": \"SHA-512\",\n-                    \"content\": \"85473a29d23292f49092af9e7a7a63993206847c53b3e71f3c67245d68f7b19cc7c341e0ece409eb5e96602df98a848e957d8691fdd2c5fcddd807df9078255e\"\n+                    \"content\": \"a978384791bdc074df8039ffc95bb93f0f60d14d476861ee2a0ce208b33a991c486a07345cb80559252c3ff1dea14d3efb818c19bdc18435946dc8754d8e6ee3\"\n                 },\n                 {\n                     \"alg\": \"SHA-384\",\n-                    \"content\": \"5c54d6c497cb329c3424a30319bf657ea222349eadc5ae74c30e8dc1525d7b60b7785f4d20370267b03343dd738cc13e\"\n+                    \"content\": \"d5111c69020666689414921ae4a8950f9fbdf86dec1360f6827beeee9ebd3f78db74e69c76e0becaba47eb34fdaaeb5a\"\n                 },\n                 {\n                     \"alg\": \"SHA3-384\",\n-                    \"content\": \"98ff0b2a4dfc1faf319d4b0d38376c3c7a58b65d071db293232eed810adf2e525fecee3be45c99b41e20cf6a3a8ebef9\"\n+                    \"content\": \"53b1a8891482e16a7d8849251cb0dcd1aacf6aaa2161a73589d9742ad96763e384d426d04db762e56fc4536f4e719084\"\n                 },\n                 {\n                     \"alg\": \"SHA3-256\",\n-                    \"content\": \"2dba45f78a0d37402083975e18dbb3201705faf7e533c3e9721b9364c2a1ab0f\"\n+                    \"content\": \"14f7b3c51c96f7429f7c60a69e3b7e4f9f2207820141f197d56b57018ffd5640\"\n                 },\n                 {\n                     \"alg\": \"SHA3-512\",\n-                    \"content\": \"76ef73198269cfd0922f4ae86c8b7e6a9cd1b96ee55da43ebfe57dd34365cc1c5c5630fadf79e46156a52b6b96b7d1f694f5e4f5c4f6a3d3ebb31c927e414435\"\n+                    \"content\": \"75e4e4fb847fdacdd497cf6b340362581ab4091120ccf2ec32a273709d336af0f78c90ce12b2dd1d17354aa08583af0d3ded89bb415720f45f2d9c110d71dd7a\"\n                 }\n             ],\n             \"licenses\": [\n                 {\n                     \"license\": {\n                         \"id\": \"Apache-2.0\"\n                     }\n                 }\n             ],\n             \"modified\": false,\n-            \"name\": \"jackson-databind\",\n-            \"purl\": \"pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.2?type=jar\",\n+            \"name\": \"jackson-annotations\",\n+            \"purl\": \"pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.2?type=jar\",\n             \"type\": \"library\",\n             \"version\": \"2.14.2\"\n         },\n         {\n-            \"bom-ref\": \"pkg:maven/org.jreleaser/jreleaser-resource-bundle@1.6.0?type=jar\",\n+            \"bom-ref\": \"pkg:maven/org.jreleaser/jreleaser-logger-api@1.6.0?type=jar\",\n+            \"description\": \"JReleaser logger API\",\n+            \"externalReferences\": [\n+                {\n+                    \"type\": \"vcs\",\n+                    \"url\": \"https://github.com/jreleaser/jreleaser\"\n+                }\n+            ],\n             \"group\": \"org.jreleaser\",\n             \"hashes\": [\n                 {\n                     \"alg\": \"MD5\",\n-                    \"content\": \"8419930ec5e42489dad5e26749a994eb\"\n+                    \"content\": \"e7da806a3427ab10405584067d880ead\"\n                 },\n                 {\n                     \"alg\": \"SHA-1\",\n-                    \"content\": \"050aba092fa794e0cb91158de894a97aff581356\"\n+                    \"content\": \"92ae4e1826cf1d8321fcefd3f4ece0fa5cc4fc94\"\n                 },\n                 {\n                     \"alg\": \"SHA-256\",\n-                    \"content\": \"38434b31fac439399aa37018fa69302a9d1b04be6efb7b23d53d18615e1f4f2b\"\n+                    \"content\": \"372d4b6cee7af83429f9f054a69f73d38d6fb4c983b14ce97f2599791d59aee9\"\n                 },\n                 {\n                     \"alg\": \"SHA-512\",\n-                    \"content\": \"c77c476e972e17b25de3aecf75d71482535d68cdc5e4bf556f5d4cab17345b9318d47fa42c9da671769f9bcf7f549efde70b64eff5cb189c805bb406fd705cb8\"\n+                    \"content\": \"c4f4edf49e18f475b7b44677497250cd93af45e302fb39306a94dc8f0ee1f783921967de3e1f1b7591f970a359080f43b24c1499a363280d904c2519d2e9bcb2\"\n                 },\n                 {\n                     \"alg\": \"SHA-384\",\n-                    \"content\": \"b1d8f56681f39c638806e669447d9600507946448b528060d98afc2123c637980ba5609aba4b357c83acd772bfbdb73e\"\n+                    \"content\": \"fcdadd6f2e8af30a7761e98f5c717ab1b8f6f0a79825a711454c8c9cc9842cf8fe0f5917b5ea48603eb0ee5788ed7a8b\"\n                 },\n                 {\n                     \"alg\": \"SHA3-384\",\n-                    \"content\": \"74a52a9891c520a0f90ffbab33da0219cd787bbe309ae8eca303de00c6041692554e8d650a6a3925e057322bd00700ff\"\n+                    \"content\": \"42a3e276d69efc85ce5798c5cd78ba1a910ef328169fb39a1a685eea5b98e9c3bf495124f56b518d553f1ca2e63d62f7\"\n                 },\n                 {\n                     \"alg\": \"SHA3-256\",\n-                    \"content\": \"304bae90a7c53e6ad711e54bb8847c3eedc0e18cac03bffa14729918cb59efce\"\n+                    \"content\": \"0fb4d06e278df39d6633d1a09ed01ad4f7788838668f2ebc097f919384cec97d\"\n                 },\n                 {\n                     \"alg\": \"SHA3-512\",\n-                    \"content\": \"16a31cb40ed20dcaa5d34cb6aa2b81325f285b7feb5dda2486206496449fd548ef51117b38a8074a4a106fba9836de72232762dff60f535cd76f5848860c2f6c\"\n+                    \"content\": \"bb5a8b000955af1038d4d75c0fd8786561b3a2cf7bb804e09e42518a0bcc3e23ab01dd5236de4bdb58fd9b1a0e923982eb6cc6d0e450896bed9c86dfe808675d\"\n+                }\n+            ],\n+            \"licenses\": [\n+                {\n+                    \"license\": {\n+                        \"id\": \"Apache-2.0\",\n+                        \"url\": \"https://www.apache.org/licenses/LICENSE-2.0\"\n+                    }\n                 }\n             ],\n-            \"licenses\": [],\n             \"modified\": false,\n-            \"name\": \"jreleaser-resource-bundle\",\n-            \"purl\": \"pkg:maven/org.jreleaser/jreleaser-resource-bundle@1.6.0?type=jar\",\n+            \"name\": \"jreleaser-logger-api\",\n+            \"purl\": \"pkg:maven/org.jreleaser/jreleaser-logger-api@1.6.0?type=jar\",\n             \"type\": \"library\",\n             \"version\": \"1.6.0\"\n         },\n         {\n-            \"bom-ref\": \"pkg:maven/com.googlecode.javaewah/JavaEWAH@1.2.3?type=jar\",\n-            \"description\": \"The bit array data structure is implemented in Java as the BitSet class. Unfortunately, this fails to scale without compression. JavaEWAH is a word-aligned compressed variant of the Java bitset class. It uses a 64-bit run-length encoding (RLE) compression scheme. The goal of word-aligned compression is not to achieve the best compression, but rather to improve query processing time. Hence, we try to save CPU cycles, maybe at the expense of storage. However, the EWAH scheme we implemented is always more efficient storage-wise than an uncompressed bitmap (implemented in Java as the BitSet class). Unlike some alternatives, javaewah does not rely on a patented scheme.\",\n-            \"externalReferences\": [\n-                {\n-                    \"type\": \"issue-tracker\",\n-                    \"url\": \"https://github.com/lemire/javaewah/issues\"\n-                },\n-                {\n-                    \"type\": \"vcs\",\n-                    \"url\": \"scm:git:git@github.com:lemire/javaewah.git\"\n-                }\n-            ],\n-            \"group\": \"com.googlecode.javaewah\",\n+            \"bom-ref\": \"pkg:maven/io.github.openfeign.form/feign-form@3.8.0?type=jar\",\n+            \"group\": \"io.github.openfeign.form\",\n             \"hashes\": [\n                 {\n                     \"alg\": \"MD5\",\n-                    \"content\": \"8fdeda28c1fb10e67b3d79f86bef5e61\"\n+                    \"content\": \"ab48cdaa9aecefe5e938873ba2db3bb0\"\n                 },\n                 {\n                     \"alg\": \"SHA-1\",\n-                    \"content\": \"13a27c856e0c8808cee9a64032c58eee11c3adc9\"\n+                    \"content\": \"3083889996b18443c275a352d3ab4bc6c8321598\"\n                 },\n                 {\n                     \"alg\": \"SHA-256\",\n-                    \"content\": \"d65226949713c4c61a784f41c51167e7b0316f93764398ebba9e4336b3d954c2\"\n+                    \"content\": \"b21d37321b390995c90b5dbb4ff0c33f09d1cc7768207cc0da910ad20bf58961\"\n                 },\n                 {\n                     \"alg\": \"SHA-512\",\n-                    \"content\": \"48cd9df9252c58e9ffe4583e68607944bcdf2ad7a3be7b4317467f503c4f56cdbde358ca7c4f34fa620d01615072a42f3a572fc4f1237e266310b7508e79bcac\"\n+                    \"content\": \"3a1718c21e4caffcd5f686d2cde011b2f72a026d03caa03b876ad6e7c8c40b7bd59189eed6efa0654bf988a438775ef2c429fae497d502c1806c8c4d9d474c2e\"\n                 },\n                 {\n                     \"alg\": \"SHA-384\",\n-                    \"content\": \"d1fd074f21b8a54a07d3f4579376d7c3ab72f24814ebc9ba92344e9da4721e9bfa3cda3a599137e4ddf2395a3c5b88e4\"\n+                    \"content\": \"02b96ee7cb8c67cdfe63422247035cbb003b7423a82756714d36de926118ac5e96c407fd324090c851962c63f7d4fd6f\"\n                 },\n                 {\n                     \"alg\": \"SHA3-384\",\n-                    \"content\": \"a553864f196f73c139a104170ab79e780046fb5f322072c5494a6590361021f875afd7168f858b0531b61918ab49b94e\"\n+                    \"content\": \"0d63a4c22216be6259584b62d3753a86220ea181a002641cda45de153501272fd79b7064d21bdee0ecd8129194fd7c3e\"\n                 },\n                 {\n                     \"alg\": \"SHA3-256\",\n-                    \"content\": \"bab97f3f893af36c36218a151b0c3fece27d47f358cc19e1ca9c22d77942bb76\"\n+                    \"content\": \"ffc2832df09d0edf0251c5e6def39b6c36fd2c02c55ad29f0e63e3160cb709e1\"\n                 },\n                 {\n                     \"alg\": \"SHA3-512\",\n-                    \"content\": \"be817b93c7093d44ec8dded565d7e5651772ce38e9c72283c05191b33d0ecb2798cd385395f553500446573ac49dccc21f4ba3067d71eb89e03daa384d0193be\"\n+                    \"content\": \"c2013da332e97e32962ee34459c5834b04ab2f6598960cb06e4f247a2683ced3fac3919d15151be4dae083c74911c7ead1906faabfc8a7cb6245fcd7138ef0df\"\n                 }\n             ],\n             \"licenses\": [\n                 {\n                     \"license\": {\n                         \"id\": \"Apache-2.0\"\n                     }\n                 }\n             ],\n             \"modified\": false,\n-            \"name\": \"JavaEWAH\",\n-            \"purl\": \"pkg:maven/com.googlecode.javaewah/JavaEWAH@1.2.3?type=jar\",\n+            \"name\": \"feign-form\",\n+            \"purl\": \"pkg:maven/io.github.openfeign.form/feign-form@3.8.0?type=jar\",\n             \"type\": \"library\",\n-            \"version\": \"1.2.3\"\n+            \"version\": \"3.8.0\"\n         },\n         {\n-            \"bom-ref\": \"pkg:maven/commons-io/commons-io@2.11.0?type=jar\",\n-            \"description\": \"The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.\",\n+            \"bom-ref\": \"pkg:maven/org.bouncycastle/bcpg-jdk15on@1.70?type=jar\",\n+            \"description\": \"The Bouncy Castle Java API for handling the OpenPGP protocol. This jar contains the OpenPGP API for JDK 1.5 and up. The APIs can be used in conjunction with a JCE/JCA provider such as the one provided with the Bouncy Castle Cryptography APIs.\",\n             \"externalReferences\": [\n                 {\n                     \"type\": \"issue-tracker\",\n-                    \"url\": \"https://issues.apache.org/jira/browse/IO\"\n+                    \"url\": \"https://github.com/bcgit/bc-java/issues\"\n                 },\n                 {\n                     \"type\": \"vcs\",\n-                    \"url\": \"https://gitbox.apache.org/repos/asf?p=commons-io.git\"\n+                    \"url\": \"https://github.com/bcgit/bc-java\"\n                 }\n             ],\n-            \"group\": \"commons-io\",\n+            \"group\": \"org.bouncycastle\",\n             \"hashes\": [\n                 {\n                     \"alg\": \"MD5\",\n-                    \"content\": \"3b4b7ccfaeceeac240b804839ee1a1ca\"\n+                    \"content\": \"01ddc3aa0289346f4db19d95039cefdb\"\n                 },\n                 {\n                     \"alg\": \"SHA-1\",\n-                    \"content\": \"a2503f302b11ebde7ebc3df41daebe0e4eea3689\"\n+                    \"content\": \"062f72ec06f31a6c31a3f3355fce0384b21126d7\"\n                 },\n                 {\n                     \"alg\": \"SHA-256\",\n-                    \"content\": \"961b2f6d87dbacc5d54abf45ab7a6e2495f89b75598962d8c723cea9bc210908\"\n+                    \"content\": \"4f08f4aa74048824151c98dd3e92e7165ac30659834404f08a8e843bdad32847\"\n                 },\n                 {\n                     \"alg\": \"SHA-512\",\n-                    \"content\": \"5bd78eed456ede30119319c5bed8e3e4c443b6fd7bdb3a7a5686647bd83094d0c3e2832a7575cfb60e4ef25f08106b93476939d3adcfecf5533cc030b3039e10\"\n+                    \"content\": \"4e240b7811ef90c090e83a181dace41da487555e4136221861b0060f9af6d8b316f2dd0472f747adb98ca5372f46055456ef04bdc0c3992188ab13302922fce9\"\n                 },\n                 {\n                     \"alg\": \"SHA-384\",\n-                    \"content\": \"114f1e324d90ad887c177876d410f5787a8e8da6c48d4b2862d365802c0efded3a88cb24046976bf6276cadad3712f0f\"\n+                    \"content\": \"d89dec6226112d13cbea461d84740699770dd7d8ad3f67ab65e7b49fd08a096a948e54da2e6a681925c4320f410bba37\"\n                 },\n                 {\n                     \"alg\": \"SHA3-384\",\n-                    \"content\": \"80288c03ad4d80d69f91d056ffc5570d49a9c76bf54ad2dff0121ecde26a560df76d05156f281f5c6db2a38ff07a873d\"\n+                    \"content\": \"5e8e8ca63cc550a8f50b627c4dd051f0eb5c31b99ff53dabd7d5f5d1ed98d0dc1d4963a09fc0db32f8e0ff769a2a6e65\"\n                 },\n                 {\n                     \"alg\": \"SHA3-256\",\n-                    \"content\": \"5adfb5ccaf5f21a549422f426118a9542673926fcd18c68390cf813e791dcf6c\"\n+                    \"content\": \"77f28e7e22b3b3a8d7b667fb7f783847c4b11ee7208833636e09e8b38390fd51\"\n                 },\n                 {\n                     \"alg\": \"SHA3-512\",\n-                    \"content\": \"7573f47f0babb53cefdc7c2309a0b982d800139064537b0797da442853d081010ad7c3c74a500598a0f800639a5d540eca21963ea652c68613907059bd4278c2\"\n+                    \"content\": \"cb238dbb641c42c49b5801bdfa6432395e860c1a7485ba68e2d57887e3d22ff254718c6cbfa34c107bfb09d74e2f85c33b95f89dfa886e141a8247a0abf2b5c2\"\n                 }\n             ],\n             \"licenses\": [\n                 {\n                     \"license\": {\n-                        \"id\": \"Apache-2.0\"\n+                        \"name\": \"Bouncy Castle Licence\",\n+                        \"url\": \"https://www.bouncycastle.org/licence.html\"\n+                    }\n+                },\n+                {\n+                    \"license\": {\n+                        \"id\": \"Apache-1.1\",\n+                        \"url\": \"http://apache.org/licenses/LICENSE-1.1\"\n                     }\n                 }\n             ],\n             \"modified\": false,\n-            \"name\": \"commons-io\",\n-            \"purl\": \"pkg:maven/commons-io/commons-io@2.11.0?type=jar\",\n+            \"name\": \"bcpg-jdk15on\",\n+            \"purl\": \"pkg:maven/org.bouncycastle/bcpg-jdk15on@1.70?type=jar\",\n             \"type\": \"library\",\n-            \"version\": \"2.11.0\"\n+            \"version\": \"1.70\"\n         },\n         {\n-            \"bom-ref\": \"pkg:maven/org.jreleaser/jreleaser-utils@1.6.0?type=jar\",\n+            \"bom-ref\": \"pkg:maven/org.jreleaser/jreleaser-java-sdk-commons@1.6.0?type=jar\",\n+            \"description\": \"Utilities for Java SDKs\",\n+            \"externalReferences\": [\n+                {\n+                    \"type\": \"vcs\",\n+                    \"url\": \"https://github.com/jreleaser/jreleaser\"\n+                }\n+            ],\n             \"group\": \"org.jreleaser\",\n+            \"licenses\": [\n+                {\n+                    \"license\": {\n+                        \"id\": \"Apache-2.0\",\n+                        \"url\": \"https://www.apache.org/licenses/LICENSE-2.0\"\n+                    }\n+                }\n+            ],\n+            \"modified\": false,\n+            \"name\": \"jreleaser-java-sdk-commons\",\n+            \"purl\": \"pkg:maven/org.jreleaser/jreleaser-java-sdk-commons@1.6.0?type=jar\",\n+            \"type\": \"library\",\n+            \"version\": \"1.6.0\"\n+        },\n+        {\n+            \"bom-ref\": \"pkg:maven/io.github.openfeign/feign-jackson@12.3?type=jar\",\n+            \"description\": \"Feign Jackson\",\n+            \"group\": \"io.github.openfeign\",\n             \"hashes\": [\n                 {\n                     \"alg\": \"MD5\",\n-                    \"content\": \"ca784b5aa352b016a37b393e9e500325\"\n+                    \"content\": \"8bbba5bba4c26edb1b5c89e1a4912c22\"\n                 },\n                 {\n                     \"alg\": \"SHA-1\",\n-                    \"content\": \"b0dde5ebbe5a98e5fa90b101dca5ad56e92c49c8\"\n+                    \"content\": \"583c0ce0354e6ed81d998d5b8f1786ade1e9f2c4\"\n                 },\n                 {\n                     \"alg\": \"SHA-256\",\n-                    \"content\": \"02b038af2f098d6019b94f4f4e55b8f901d2b5b4a072b083b23e47bd6a3e23cd\"\n+                    \"content\": \"1dfc43d604693ce51ef3935f27dbfecd2d65636699a088eee32ff37cc50ea479\"\n                 },\n                 {\n                     \"alg\": \"SHA-512\",\n-                    \"content\": \"9b5e03766473ee854f877182a758a4842a9566772405af73cd200388eeeb981712e6a3e57f4f2f14f09a912b0cad625a75c5441b57eaa238699beabf327dd56a\"\n+                    \"content\": \"8ea71fae9a2a4ad9d06f27e21e078001e1a29761af85e81b91bf2a38e4dd8841184a12fdf467915c234d080aa28484452fe45b9bc0a381ce23d8366b03be1395\"\n                 },\n                 {\n                     \"alg\": \"SHA-384\",\n-                    \"content\": \"ebc800a8a0a6d19ac2bc922598f8913df5a5eb972dc46ba4eadec5034538c9c95866839670dbf92ca93b075dcb659a0c\"\n+                    \"content\": \"03553ac35a79266a150940fc62d3da7a389b47825102d91392f37b719da94af2d2355c2592d2b68604bf84248c73baf9\"\n                 },\n                 {\n                     \"alg\": \"SHA3-384\",\n-                    \"content\": \"ed0ba35caf8b7d7dc67d7350617b6cbd54de336634fd5927f03768a89f74ede798ecf343964ef0484302ee262617756b\"\n+                    \"content\": \"986284d22c0bbb7abfbc1762447a44d0919c266002d6925c4ca75040f3950a3d943a71dedf2f72592e6a185218c498a9\"\n                 },\n                 {\n                     \"alg\": \"SHA3-256\",\n-                    \"content\": \"b81154ce5c428820626ee1a99e7f9bbe63d4803f7f311744a26bb8331fb193cc\"\n+                    \"content\": \"60242fd373d71575ffcb8a4f866b27d291b6acecf83be67e6ff51a13559dc016\"\n                 },\n                 {\n                     \"alg\": \"SHA3-512\",\n-                    \"content\": \"b6429f8944cedd026f7b0c30328f8b5e2717493624cee82df48f7e69c8fe8a26b0542d447b1795c7fad7ff90affadcc087d69a576d69cbaccf3ccf1ca962be56\"\n+                    \"content\": \"b7e0392fc793f19b3daf64c7e7b875fb2e4ec7ba2f1681d51c14c5c9efd5991817766753e62999a76bad83c624601f9f5a55304c4e06d2e3cd88ec4c609a1ede\"\n+                }\n+            ],\n+            \"licenses\": [\n+                {\n+                    \"license\": {\n+                        \"id\": \"Apache-2.0\"\n+                    }\n                 }\n             ],\n-            \"licenses\": [],\n             \"modified\": false,\n-            \"name\": \"jreleaser-utils\",\n-            \"purl\": \"pkg:maven/org.jreleaser/jreleaser-utils@1.6.0?type=jar\",\n+            \"name\": \"feign-jackson\",\n+            \"purl\": \"pkg:maven/io.github.openfeign/feign-jackson@12.3?type=jar\",\n             \"type\": \"library\",\n-            \"version\": \"1.6.0\"\n+            \"version\": \"12.3\"\n         },\n         {\n-            \"bom-ref\": \"pkg:maven/org.bouncycastle/bcprov-jdk15on@1.70?type=jar\",\n-            \"description\": \"The Bouncy Castle Crypto package is a Java implementation of cryptographic algorithms. This jar contains JCE provider and lightweight API for the Bouncy Castle Cryptography APIs for JDK 1.5 and up.\",\n+            \"bom-ref\": \"pkg:maven/org.jreleaser/jreleaser-git-java-sdk@1.6.0?type=jar\",\n+            \"description\": \"Java SDK for Git\",\n             \"externalReferences\": [\n                 {\n-                    \"type\": \"issue-tracker\",\n-                    \"url\": \"https://github.com/bcgit/bc-java/issues\"\n-                },\n-                {\n                     \"type\": \"vcs\",\n-                    \"url\": \"https://github.com/bcgit/bc-java\"\n+                    \"url\": \"https://github.com/jreleaser/jreleaser\"\n                 }\n             ],\n-            \"group\": \"org.bouncycastle\",\n+            \"group\": \"org.jreleaser\",\n+            \"licenses\": [\n+                {\n+                    \"license\": {\n+                        \"id\": \"Apache-2.0\",\n+                        \"url\": \"https://www.apache.org/licenses/LICENSE-2.0\"\n+                    }\n+                }\n+            ],\n+            \"modified\": false,\n+            \"name\": \"jreleaser-git-java-sdk\",\n+            \"purl\": \"pkg:maven/org.jreleaser/jreleaser-git-java-sdk@1.6.0?type=jar\",\n+            \"type\": \"library\",\n+            \"version\": \"1.6.0\"\n+        },\n+        {\n+            \"bom-ref\": \"pkg:maven/org.eclipse.jgit/org.eclipse.jgit@5.13.0.202109080827-r?type=jar\",\n+            \"description\": \"Repository access and algorithms\",\n+            \"group\": \"org.eclipse.jgit\",\n             \"hashes\": [\n                 {\n                     \"alg\": \"MD5\",\n-                    \"content\": \"1809d0449a6374279c01fdd3be26cd92\"\n+                    \"content\": \"5a1f197785cb9c69d1241cb0f16937a2\"\n                 },\n                 {\n                     \"alg\": \"SHA-1\",\n-                    \"content\": \"4636a0d01f74acaf28082fb62b317f1080118371\"\n+                    \"content\": \"32badd5adebd660424509344259ad3e409699ba2\"\n                 },\n                 {\n                     \"alg\": \"SHA-256\",\n-                    \"content\": \"8f3c20e3e2d565d26f33e8d4857a37d0d7f8ac39b62a7026496fcab1bdac30d4\"\n+                    \"content\": \"dabf8369f0cdf8cf17b7f7da4bda9320c570bb754c88e0beb7b852812cf5cd25\"\n                 },\n                 {\n                     \"alg\": \"SHA-512\",\n-                    \"content\": \"7dccfc636ee4df1487615818cfa99c69941081df95e8ef1eaf4bca165594dff9547e3774fd70de3418abace77d2c45889f70bcd2e6823f8539f359e68eaf36d1\"\n+                    \"content\": \"768dbb3ba2649a7025338197b4703b414983e4608138719b0d69201f7f49e57e0454846b41b775b135b083f820824749da6121f20a812c4f155a97f09c9b15ac\"\n                 },\n                 {\n                     \"alg\": \"SHA-384\",\n-                    \"content\": \"a0b35d204cd962f1d246fa94b6e8b0fcee1a7c3f37b7e87cda742f2124a25b48794ce11a903ea8d12009c86227b6808d\"\n+                    \"content\": \"deb24e724ace28ddbaf5e7a1fafaa449a49b97d3a5a53eb487a2ab90895f05684c48a839e3677643364ff965cc33af95\"\n                 },\n                 {\n                     \"alg\": \"SHA3-384\",\n-                    \"content\": \"980d81d3d9906764bbf2ae9b3b364ea58628b485ce1dc3d06734e10495d79f2be2e7cc7df61ac88cd67c1104c7af9393\"\n+                    \"content\": \"e5aed5403b4c28624bc58be31601897555c94eb54e680f1ccb59992a643db24d0de465b7ae879b5ba29d56a132a87b69\"\n                 },\n                 {\n                     \"alg\": \"SHA3-256\",\n-                    \"content\": \"10a3572e42d29f609721d795116e3e5d0f6f03efef84bb979ce72e26908d242b\"\n+                    \"content\": \"8ccc07758fbf1ac55028538890afe7d209c866ee019875ef15acfaea9ac7244f\"\n                 },\n                 {\n                     \"alg\": \"SHA3-512\",\n-                    \"content\": \"a0761cb6deeb86c94b96850c72c0a0eaf516ca849f4b8268f9f60c9ed2a6730e692c15098d47e617da294e931113c6cbcaddec8957c9f029fa595b5f14ff35ac\"\n+                    \"content\": \"4725fff9b6067d70d4c82cbf549b16be521e839d5c8ecf605f9a71516ec78334e348cb2d3303afb7ba18ce464a68c1e195bb6fe673d9d4d6b8d75c84d0b4e101\"\n                 }\n             ],\n             \"licenses\": [\n                 {\n                     \"license\": {\n-                        \"name\": \"Bouncy Castle Licence\",\n-                        \"url\": \"https://www.bouncycastle.org/licence.html\"\n+                        \"id\": \"BSD-3-Clause\"\n                     }\n                 }\n             ],\n             \"modified\": false,\n-            \"name\": \"bcprov-jdk15on\",\n-            \"purl\": \"pkg:maven/org.bouncycastle/bcprov-jdk15on@1.70?type=jar\",\n+            \"name\": \"org.eclipse.jgit\",\n+            \"purl\": \"pkg:maven/org.eclipse.jgit/org.eclipse.jgit@5.13.0.202109080827-r?type=jar\",\n             \"type\": \"library\",\n-            \"version\": \"1.70\"\n+            \"version\": \"5.13.0.202109080827-r\"\n         },\n         {\n-            \"bom-ref\": \"pkg:maven/org.jreleaser/jreleaser-signing-java-sdk@1.6.0?type=jar\",\n-            \"group\": \"org.jreleaser\",\n+            \"bom-ref\": \"pkg:maven/io.github.openfeign/feign-core@12.3?type=jar\",\n+            \"description\": \"Feign Core\",\n+            \"group\": \"io.github.openfeign\",\n             \"hashes\": [\n                 {\n                     \"alg\": \"MD5\",\n-                    \"content\": \"2608fa713b1fa2a515ec2c83ec96a49c\"\n+                    \"content\": \"9e6e1ff8b68d2b6c1fc5bdc7ff208030\"\n                 },\n                 {\n                     \"alg\": \"SHA-1\",\n-                    \"content\": \"f0de8990fee988060fe7721d389d6ba8aad481a4\"\n+                    \"content\": \"d280b09a17b63e69788fd3d8d215b7013ab48b16\"\n                 },\n                 {\n                     \"alg\": \"SHA-256\",\n-                    \"content\": \"ea0e35358f453eee98d0a4e921bfa6114c04afe52adb0c74bcc5200092971454\"\n+                    \"content\": \"939fbed2c2392a9633bc1d26f0ef9e934b059d1a9a9d4d966cedaf9075c546ec\"\n                 },\n                 {\n                     \"alg\": \"SHA-512\",\n-                    \"content\": \"4d0146d43526b329139bb38edbe63f6f783ae99f5d2778c6c6af8851be458739afe31951bf8e54f85da7c6e5d5e7d4670b45917c6ffa855f578355a6359286a6\"\n+                    \"content\": \"8335901d8918747dc29d37a2ac630c6a78ea6ff04bfea77e6d8c74188e9e584142920996c45120caa86299486949a04e1ec1f1bef30229904360fcb5c5d4a1c4\"\n                 },\n                 {\n                     \"alg\": \"SHA-384\",\n-                    \"content\": \"a29024fbd6fb57818b5800cb961a043d4d131e4c16d0b6965a4abd4ef275001bd607697195f562e6b3d4f36fac5847b0\"\n+                    \"content\": \"dc7a0d10bdf2c3aeafba83ca7e41d21c3288f3df0b76e339788fcf7606381970b6429108dbf2d1212075d1feba040842\"\n                 },\n                 {\n                     \"alg\": \"SHA3-384\",\n-                    \"content\": \"5b9e053c6b9a48483a7cdd898f37fc72275171348ed4433b9759e0a4f86edad6a26c84ed69eae8612811e17b806df60a\"\n+                    \"content\": \"2907938ea76735cde9b34676c6c8b04786f1595687f96734e7659768175cb7a525508f84c48d9b10b0b2f593158e1ed5\"\n                 },\n                 {\n                     \"alg\": \"SHA3-256\",\n-                    \"content\": \"477c36bff3a1ec95810622a43d43ea9b1c614c54306897d9c4ee66f2a349a9e9\"\n+                    \"content\": \"474f6b0ab420bf63549ed123fff99b73fc881771c6a0c591e58dfb17adbe9899\"\n                 },\n                 {\n                     \"alg\": \"SHA3-512\",\n-                    \"content\": \"b6594d20048651c4982230202c5af186f064025bf80d21c87d4cacb3d1b466bc1e5c850fea374edf9c3c98fda734ea52284bd62bbd456aee903c705152d767da\"\n+                    \"content\": \"553a6dc1c3cf7facdb3b4e15be1d6d90259f1d36ce137db3a6e53a967ef4939aaa98c974b059c8f32dd42316bb7eee3b51910cf0fb172d0df9b8ff39d8cc722d\"\n+                }\n+            ],\n+            \"licenses\": [\n+                {\n+                    \"license\": {\n+                        \"id\": \"Apache-2.0\"\n+                    }\n                 }\n             ],\n-            \"licenses\": [],\n             \"modified\": false,\n-            \"name\": \"jreleaser-signing-java-sdk\",\n-            \"purl\": \"pkg:maven/org.jreleaser/jreleaser-signing-java-sdk@1.6.0?type=jar\",\n+            \"name\": \"feign-core\",\n+            \"purl\": \"pkg:maven/io.github.openfeign/feign-core@12.3?type=jar\",\n             \"type\": \"library\",\n-            \"version\": \"1.6.0\"\n+            \"version\": \"12.3\"\n         },\n         {\n-            \"bom-ref\": \"pkg:maven/com.github.spullara.mustache.java/compiler@0.9.10?type=jar\",\n-            \"description\": \"Implementation of mustache.js for Java\",\n+            \"bom-ref\": \"pkg:maven/org.jreleaser/jreleaser-signing-java-sdk@1.6.0?type=jar\",\n+            \"description\": \"JReleaser signing Java SDK\",\n             \"externalReferences\": [\n                 {\n                     \"type\": \"vcs\",\n-                    \"url\": \"http://github.com/spullara/mustache.java\"\n+                    \"url\": \"https://github.com/jreleaser/jreleaser\"\n                 }\n             ],\n-            \"group\": \"com.github.spullara.mustache.java\",\n+            \"group\": \"org.jreleaser\",\n+            \"licenses\": [\n+                {\n+                    \"license\": {\n+                        \"id\": \"Apache-2.0\",\n+                        \"url\": \"https://www.apache.org/licenses/LICENSE-2.0\"\n+                    }\n+                }\n+            ],\n+            \"modified\": false,\n+            \"name\": \"jreleaser-signing-java-sdk\",\n+            \"purl\": \"pkg:maven/org.jreleaser/jreleaser-signing-java-sdk@1.6.0?type=jar\",\n+            \"type\": \"library\",\n+            \"version\": \"1.6.0\"\n+        },\n+        {\n+            \"bom-ref\": \"pkg:maven/io.github.openfeign/feign-httpclient@12.3?type=jar\",\n+            \"description\": \"Feign Apache HttpClient\",\n+            \"group\": \"io.github.openfeign\",\n             \"hashes\": [\n                 {\n                     \"alg\": \"MD5\",\n-                    \"content\": \"5638fc78a17d5063cc4b0d00f6e87491\"\n+                    \"content\": \"4ec31fa7f187c15f9967c7ffcf714449\"\n                 },\n                 {\n                     \"alg\": \"SHA-1\",\n-                    \"content\": \"6111ae24e3be9ecbd75f5fe908583fc14b4f0174\"\n+                    \"content\": \"0ea51fdb4797c3ab62e1f8a726d4e02cf522dba2\"\n                 },\n                 {\n                     \"alg\": \"SHA-256\",\n-                    \"content\": \"2b5a9217811cb99846a473fa8e0d233eb33629347b7f44941f6c0fbd4cdf1038\"\n+                    \"content\": \"3a2833e18cc868bff19d6320f22054f96995dc073ed27edfeb2d83996d2ef37c\"\n                 },\n                 {\n                     \"alg\": \"SHA-512\",\n-                    \"content\": \"2ccf3196af2b518c96df748a72a0122d033dc222e1fab3e12f3e2094146d44bec20bd1502390b59abf090cbdf5dd4d580084b07fb7241248b5b8da2605207559\"\n+                    \"content\": \"3440afa129150c035670cd098e6eba6f676afc82db2db53a10b20621e30658b411d820652e4668dab5ca615f599a41a06dc826378b5e783f88f26c2cddfce8ed\"\n                 },\n                 {\n                     \"alg\": \"SHA-384\",\n-                    \"content\": \"0204e77a4a64701af5000df6601f4f4c23cb5e53dd39a1325615d4f942cd2c91d04bbac20348ae49731f586282165c33\"\n+                    \"content\": \"b8dc38126b28fb486d459e23ae61a34073f16f0ef7ec37f49636919d0fd5a8d86354d76314462dba94efd4f613db92ef\"\n                 },\n                 {\n                     \"alg\": \"SHA3-384\",\n-                    \"content\": \"0960da7175835484471f485d481499f8b65f134ff4f1629618560adaa5a08caa897fbefcea190f93106ee9e3273381b2\"\n+                    \"content\": \"7c4161078011223122067406e5ad6efedfcf45c71d6e081f37e3fba1c73578c748d5a5e60d372a5fa7159ec7737e71bb\"\n                 },\n                 {\n                     \"alg\": \"SHA3-256\",\n-                    \"content\": \"cfb7e640392ef590069e6b1d059dc20b8fcff984a4b267b3969fcf50ed0edd4f\"\n+                    \"content\": \"b6d851642b9a5628dbe3cab5706c9d434f1d59ec881cd5cdf6fae84f644eb7c1\"\n                 },\n                 {\n                     \"alg\": \"SHA3-512\",\n-                    \"content\": \"db3dad3809879bca835a04da890fd86dbc58ba6637c72f07d02e39d13645ebb6c640b7fecc18a779e58946072078bdf114b91445026a32dd6501b5d1c6e7d933\"\n+                    \"content\": \"9b3b7edc25efc7345a9cc7b2fe0eccefd57fa40d62e6a85b4a698827b9c34ff568236d591f6d5645de7eb275be2b10aee80f42881f6068f0b1c38f274faf4c5f\"\n                 }\n             ],\n             \"licenses\": [\n                 {\n                     \"license\": {\n-                        \"id\": \"Apache-2.0\",\n-                        \"url\": \"https://www.apache.org/licenses/LICENSE-2.0\"\n+                        \"id\": \"Apache-2.0\"\n                     }\n                 }\n             ],\n             \"modified\": false,\n-            \"name\": \"compiler\",\n-            \"purl\": \"pkg:maven/com.github.spullara.mustache.java/compiler@0.9.10?type=jar\",\n+            \"name\": \"feign-httpclient\",\n+            \"purl\": \"pkg:maven/io.github.openfeign/feign-httpclient@12.3?type=jar\",\n             \"type\": \"library\",\n-            \"version\": \"0.9.10\"\n+            \"version\": \"12.3\"\n         },\n         {\n-            \"bom-ref\": \"pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar\",\n-            \"description\": \"Apache HttpComponents Core (blocking I/O)\",\n-            \"group\": \"org.apache.httpcomponents\",\n+            \"bom-ref\": \"pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.2?type=jar\",\n+            \"description\": \"Core Jackson processing abstractions (aka Streaming API), implementation for JSON\",\n+            \"externalReferences\": [\n+                {\n+                    \"type\": \"vcs\",\n+                    \"url\": \"https://github.com/FasterXML/jackson-core\"\n+                }\n+            ],\n+            \"group\": \"com.fasterxml.jackson.core\",\n             \"hashes\": [\n                 {\n                     \"alg\": \"MD5\",\n-                    \"content\": \"28d2cd9bf8789fd2ec774fb88436ebd1\"\n+                    \"content\": \"6ee422ee4c481b2d5aacb2b5e36a7dc0\"\n                 },\n                 {\n                     \"alg\": \"SHA-1\",\n-                    \"content\": \"51cf043c87253c9f58b539c9f7e44c8894223850\"\n+                    \"content\": \"f804090e6399ce0cf78242db086017512dd71fcc\"\n                 },\n                 {\n                     \"alg\": \"SHA-256\",\n-                    \"content\": \"6c9b3dd142a09dc468e23ad39aad6f75a0f2b85125104469f026e52a474e464f\"\n+                    \"content\": \"b5d37a77c88277b97e3593c8740925216c06df8e4172bbde058528df04ad3e7a\"\n                 },\n                 {\n                     \"alg\": \"SHA-512\",\n-                    \"content\": \"168026436a6bcf5e96c0c59606638abbdc30de4b405ae55afde70fdf2895e267a3d48bba6bdadc5a89f38e31da3d9a9dc91e1cab7ea76f5e04322cf1ec63b838\"\n+                    \"content\": \"208953cf72691b3bab1ca2f9a045cccd3d75c46c90099ba884fbf16bc3e45045e5cd014d2c68c96e8a8826f87a5f0e18cb34b35e7ef03348953869c21e197367\"\n                 },\n                 {\n                     \"alg\": \"SHA-384\",\n-                    \"content\": \"ba9ceaee1a37ca3201d6a1315ecb0327b495489efd0baa155c219c475df8d3eb69fe77ab0026563db406497626da6562\"\n+                    \"content\": \"e806595862c5fcdae801d9845befc1d12c97e6036ee839d34590dbd785a422d5832cf4fc5c7ee6e1a5ee7a59f37740f0\"\n                 },\n                 {\n                     \"alg\": \"SHA3-384\",\n-                    \"content\": \"b9dc44dcc7cc86d5036f26d54c4003a2d72808ae7b07a0808bb53505c6d4281b5ad213eb1f3d0fef1113dec57cb0dfe1\"\n+                    \"content\": \"4fa59f572f2e100e2eba6fc664a3b9f804fabd911a552cb40805f39e624a9c04246b679cf4b017bb782c8272877f49d2\"\n                 },\n                 {\n                     \"alg\": \"SHA3-256\",\n-                    \"content\": \"fd8ab51846476c6c18822151c9ec07b39a9633010b5d20ea937fc6910407bc64\"\n+                    \"content\": \"cef17d3a539cbf798cfb0bfa9faffa2b7baff3670b50743e91ee58b4c60b59f1\"\n                 },\n                 {\n                     \"alg\": \"SHA3-512\",\n-                    \"content\": \"b42fa528242981a9d70e4f68ab75a24292df5112c44c21b6f18cb9201ce747885ba1d4dc69bc3d14d0da46a6c2638f937c11bc45749abeb55dc89ddada90cdda\"\n+                    \"content\": \"fceeed5cb8fe4335d88282d15657762a4728483275a7ff45f50b9fe6a999757ccb37c415d001eb6250226f98f5c576b1b36a83e601fb393cfd34a811c2df5d00\"\n                 }\n             ],\n             \"licenses\": [\n                 {\n                     \"license\": {\n                         \"id\": \"Apache-2.0\"\n                     }\n                 }\n             ],\n             \"modified\": false,\n-            \"name\": \"httpcore\",\n-            \"purl\": \"pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar\",\n+            \"name\": \"jackson-core\",\n+            \"purl\": \"pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.2?type=jar\",\n             \"type\": \"library\",\n-            \"version\": \"4.4.16\"\n+            \"version\": \"2.14.2\"\n         }\n     ],\n     \"dependencies\": [\n         {\n             \"dependsOn\": [\n                 \"pkg:maven/org.jreleaser/jreleaser-model-impl@1.6.0?type=jar\",\n                 \"pkg:maven/org.eclipse.jgit/org.eclipse.jgit@5.13.0.202109080827-r?type=jar\"\n@@ -1962,20 +1932,20 @@\n             \"bom-ref\": \"pkg:maven/org.jreleaser/jreleaser-zulip-java-sdk@1.6.0?type=jar\",\n             \"group\": \"org.jreleaser\",\n             \"name\": \"jreleaser-zulip-java-sdk\",\n             \"purl\": \"pkg:maven/org.jreleaser/jreleaser-zulip-java-sdk@1.6.0?type=jar\",\n             \"type\": \"library\",\n             \"version\": \"1.6.0\"\n         },\n-        \"timestamp\": \"2023-04-29T10:09:10Z\",\n+        \"timestamp\": \"2025-07-11T06:29:53Z\",\n         \"tools\": [\n             {\n                 \"name\": \"cyclonedx-gradle-plugin\",\n                 \"vendor\": \"CycloneDX\",\n                 \"version\": \"1.7.4\"\n             }\n         ]\n     },\n-    \"serialNumber\": \"urn:uuid:6c77687d-cae2-4496-a598-8f7e25d0a282\",\n+    \"serialNumber\": \"urn:uuid:259e1b80-0643-4422-b457-ca6785bdcecc\",\n     \"specVersion\": \"1.4\",\n     \"version\": 1\n }\n"}]}