--- results/org.jreleaser/jreleaser/1.6.0/oss-rebuild-improved-2/reference/jreleaser-ftp-java-sdk-1.6.0-cyclonedx.xml:jreleaser-ftp-java-sdk-1.6.0-cyclonedx.xml	2025-07-28 23:33:28.401669352 +0200
+++ results/org.jreleaser/jreleaser/1.6.0/oss-rebuild-improved-2/rebuild/jreleaser-ftp-java-sdk-1.6.0-cyclonedx.xml:jreleaser-ftp-java-sdk-1.6.0-cyclonedx.xml	2025-07-28 23:33:29.495665495 +0200
@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="UTF-8"?>
-<bom serialNumber="urn:uuid:86bfb619-61ab-4d3d-a45d-7f6782a8c3b2" version="1" xmlns="http://cyclonedx.org/schema/bom/1.4">
+<bom serialNumber="urn:uuid:c5c0938b-11d9-48c7-be3e-767990fb335b" version="1" xmlns="http://cyclonedx.org/schema/bom/1.4">
   <metadata>
-    <timestamp>2023-04-29T10:07:19Z</timestamp>
+    <timestamp>2025-07-11T06:29:32Z</timestamp>
     <tools>
       <tool>
         <vendor>CycloneDX</vendor>
@@ -17,203 +17,6 @@
     </component>
   </metadata>
   <components>
-    <component type="library" bom-ref="pkg:maven/io.github.openfeign/feign-core@12.3?type=jar">
-      <group>io.github.openfeign</group>
-      <name>feign-core</name>
-      <version>12.3</version>
-      <description>Feign Core</description>
-      <hashes>
-        <hash alg="MD5">9e6e1ff8b68d2b6c1fc5bdc7ff208030</hash>
-        <hash alg="SHA-1">d280b09a17b63e69788fd3d8d215b7013ab48b16</hash>
-        <hash alg="SHA-256">939fbed2c2392a9633bc1d26f0ef9e934b059d1a9a9d4d966cedaf9075c546ec</hash>
-        <hash alg="SHA-512">8335901d8918747dc29d37a2ac630c6a78ea6ff04bfea77e6d8c74188e9e584142920996c45120caa86299486949a04e1ec1f1bef30229904360fcb5c5d4a1c4</hash>
-        <hash alg="SHA-384">dc7a0d10bdf2c3aeafba83ca7e41d21c3288f3df0b76e339788fcf7606381970b6429108dbf2d1212075d1feba040842</hash>
-        <hash alg="SHA3-384">2907938ea76735cde9b34676c6c8b04786f1595687f96734e7659768175cb7a525508f84c48d9b10b0b2f593158e1ed5</hash>
-        <hash alg="SHA3-256">474f6b0ab420bf63549ed123fff99b73fc881771c6a0c591e58dfb17adbe9899</hash>
-        <hash alg="SHA3-512">553a6dc1c3cf7facdb3b4e15be1d6d90259f1d36ce137db3a6e53a967ef4939aaa98c974b059c8f32dd42316bb7eee3b51910cf0fb172d0df9b8ff39d8cc722d</hash>
-      </hashes>
-      <licenses>
-        <license>
-          <id>Apache-2.0</id>
-        </license>
-      </licenses>
-      <purl>pkg:maven/io.github.openfeign/feign-core@12.3?type=jar</purl>
-      <modified>false</modified>
-    </component>
-    <component type="library" bom-ref="pkg:maven/org.jreleaser/jreleaser-model-api@1.6.0?type=jar">
-      <group>org.jreleaser</group>
-      <name>jreleaser-model-api</name>
-      <version>1.6.0</version>
-      <hashes>
-        <hash alg="MD5">288354c621fdfef298e4e8cdc843e2c3</hash>
-        <hash alg="SHA-1">54bcb05008c6f0b50433f8d0fe82e3a217317db1</hash>
-        <hash alg="SHA-256">397e18c4fa02ba508e409a119866d4e78d64c6c76f5a4f22b3aefc027b662b9b</hash>
-        <hash alg="SHA-512">67c4e2f9acb6db78c21cfd23d3411ce1e32b23690a1d5035a285b48cd9b996fd4c80b504d050e87a4a5604e6b56ca52878a464593f0bd8eea53059bcb263289f</hash>
-        <hash alg="SHA-384">8f67be44af6f792c32f2b86d07738c52e5b742a650d010e8c0b5e60a62db627d5c695f23f24d814f232fc0246d03086c</hash>
-        <hash alg="SHA3-384">1e5c3dffd4e3c545081904db6dcff892bd2f27285b4fa46a57cdd23c3fbb382ab06268e87d57212996387269b2c8b72f</hash>
-        <hash alg="SHA3-256">d2b875e45846a0d17cf7f85d6289681ee42897519cdaca9625ffc56b1639909d</hash>
-        <hash alg="SHA3-512">1a098f05c0735a7ed19cf374440818e9882b0288728f6658ce3709ac534c06cc7dc36ea4d7656a35281758d1ec09c31edf13a98d6680206a0c9fb1dff21ad04f</hash>
-      </hashes>
-      <licenses/>
-      <purl>pkg:maven/org.jreleaser/jreleaser-model-api@1.6.0?type=jar</purl>
-      <modified>false</modified>
-    </component>
-    <component type="library" bom-ref="pkg:maven/org.jreleaser/jreleaser-git-java-sdk@1.6.0?type=jar">
-      <group>org.jreleaser</group>
-      <name>jreleaser-git-java-sdk</name>
-      <version>1.6.0</version>
-      <hashes>
-        <hash alg="MD5">a82f264ee899604bfe6e634ec5a8818e</hash>
-        <hash alg="SHA-1">4c5ee97076b5bc0ae4474e6ac1ade64e60702a4f</hash>
-        <hash alg="SHA-256">ab59b4abd99100aae35f871d548c778a90f0e4aaad5d0eba94af15df688a5775</hash>
-        <hash alg="SHA-512">447286a510cd5b84f29275627ebf3bb6e930b6e150fa981c591f3266a354a46511a4a5d00cd13f95539541ed6e783641a9c9a4213c493cd7cf479780e427511f</hash>
-        <hash alg="SHA-384">f266e76c6698ecd59dcf197a55f09d8b567f9e8953e310bff7c0c617416df996ac53c5d9c4468b9b065f1816716ae3ea</hash>
-        <hash alg="SHA3-384">208684bb1093245f49be449e1a4966fadd1b4840b760aa0a89c861ae18820a63bc3f1b2d895c6e010849712394bb160e</hash>
-        <hash alg="SHA3-256">454d27e5726aae3f4a92c5da424f306eb159edf40da4da52619e9e878cb48b3a</hash>
-        <hash alg="SHA3-512">3a995062f0dfeaa46f17214c0c8179a3d8ad4ba71b4579448e16445e5661ba1102044e2d69fd9833b15b51620636f78aa8f9dec87fde449147f2185b5df5b3e6</hash>
-      </hashes>
-      <licenses/>
-      <purl>pkg:maven/org.jreleaser/jreleaser-git-java-sdk@1.6.0?type=jar</purl>
-      <modified>false</modified>
-    </component>
-    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-jexl3@3.3?type=jar">
-      <group>org.apache.commons</group>
-      <name>commons-jexl3</name>
-      <version>3.3</version>
-      <description>JEXL is a library intended to facilitate the implementation of scripting features in
-        applications and frameworks written in Java.</description>
-      <hashes>
-        <hash alg="MD5">3a332e3beb67b3a2a20bd0a950fc57c4</hash>
-        <hash alg="SHA-1">c76b4cfa436c3e79e04806e62656b09968c388ba</hash>
-        <hash alg="SHA-256">07b0ff6c5a10ffb2e2c02da9e2c0e2e6702df44178cfb76881f69447fc386014</hash>
-        <hash alg="SHA-512">879111d1c3ad021ea3961e49161b3ff6ba251044ffef1ca4d36d880d9a09b1f395e17eef221a13274303f44e116204ae4b2a3ee3e931f117fc901e321d59b5c6</hash>
-        <hash alg="SHA-384">7a268bf2c903be86813fcc7f06158abf79d558ee59ebf03470ebd06ca6e6d169beb1c3600e07c20c4f95fa7827fde841</hash>
-        <hash alg="SHA3-384">1803d239f17f7eeee6edb69d38c4473319fd4eeeb684eda5c38b577a7aaf42965ce41d9082d515d5007be9a0b0712d81</hash>
-        <hash alg="SHA3-256">01163da5e720b6d1f6bf8b6e9e398d26a1be92b3f18ef6089d218d54166b0c01</hash>
-        <hash alg="SHA3-512">8abdd72c14492340c05fd5d3555682a308ac00ac1b1e1e15ae38abc47f454f50db9e0727a49df72a50bf49f1447a6ca9dadc48b9ffd45a043bcbae9e5e050d3d</hash>
-      </hashes>
-      <licenses>
-        <license>
-          <id>Apache-2.0</id>
-          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
-        </license>
-      </licenses>
-      <purl>pkg:maven/org.apache.commons/commons-jexl3@3.3?type=jar</purl>
-      <modified>false</modified>
-      <externalReferences><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/JEXL</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf/commons-jexl.git</url></reference></externalReferences>
-    </component>
-    <component type="library" bom-ref="pkg:maven/org.eclipse.jgit/org.eclipse.jgit@5.13.0.202109080827-r?type=jar">
-      <group>org.eclipse.jgit</group>
-      <name>org.eclipse.jgit</name>
-      <version>5.13.0.202109080827-r</version>
-      <description>Repository access and algorithms</description>
-      <hashes>
-        <hash alg="MD5">5a1f197785cb9c69d1241cb0f16937a2</hash>
-        <hash alg="SHA-1">32badd5adebd660424509344259ad3e409699ba2</hash>
-        <hash alg="SHA-256">dabf8369f0cdf8cf17b7f7da4bda9320c570bb754c88e0beb7b852812cf5cd25</hash>
-        <hash alg="SHA-512">768dbb3ba2649a7025338197b4703b414983e4608138719b0d69201f7f49e57e0454846b41b775b135b083f820824749da6121f20a812c4f155a97f09c9b15ac</hash>
-        <hash alg="SHA-384">deb24e724ace28ddbaf5e7a1fafaa449a49b97d3a5a53eb487a2ab90895f05684c48a839e3677643364ff965cc33af95</hash>
-        <hash alg="SHA3-384">e5aed5403b4c28624bc58be31601897555c94eb54e680f1ccb59992a643db24d0de465b7ae879b5ba29d56a132a87b69</hash>
-        <hash alg="SHA3-256">8ccc07758fbf1ac55028538890afe7d209c866ee019875ef15acfaea9ac7244f</hash>
-        <hash alg="SHA3-512">4725fff9b6067d70d4c82cbf549b16be521e839d5c8ecf605f9a71516ec78334e348cb2d3303afb7ba18ce464a68c1e195bb6fe673d9d4d6b8d75c84d0b4e101</hash>
-      </hashes>
-      <licenses>
-        <license>
-          <id>BSD-3-Clause</id>
-        </license>
-      </licenses>
-      <purl>pkg:maven/org.eclipse.jgit/org.eclipse.jgit@5.13.0.202109080827-r?type=jar</purl>
-      <modified>false</modified>
-    </component>
-    <component type="library" bom-ref="pkg:maven/org.bouncycastle/bcpg-jdk15on@1.70?type=jar">
-      <group>org.bouncycastle</group>
-      <name>bcpg-jdk15on</name>
-      <version>1.70</version>
-      <description>The Bouncy Castle Java API for handling the OpenPGP protocol. This jar contains the OpenPGP API for JDK 1.5 and up. The APIs can be used in conjunction with a JCE/JCA provider such as the one provided with the Bouncy Castle Cryptography APIs.</description>
-      <hashes>
-        <hash alg="MD5">01ddc3aa0289346f4db19d95039cefdb</hash>
-        <hash alg="SHA-1">062f72ec06f31a6c31a3f3355fce0384b21126d7</hash>
-        <hash alg="SHA-256">4f08f4aa74048824151c98dd3e92e7165ac30659834404f08a8e843bdad32847</hash>
-        <hash alg="SHA-512">4e240b7811ef90c090e83a181dace41da487555e4136221861b0060f9af6d8b316f2dd0472f747adb98ca5372f46055456ef04bdc0c3992188ab13302922fce9</hash>
-        <hash alg="SHA-384">d89dec6226112d13cbea461d84740699770dd7d8ad3f67ab65e7b49fd08a096a948e54da2e6a681925c4320f410bba37</hash>
-        <hash alg="SHA3-384">5e8e8ca63cc550a8f50b627c4dd051f0eb5c31b99ff53dabd7d5f5d1ed98d0dc1d4963a09fc0db32f8e0ff769a2a6e65</hash>
-        <hash alg="SHA3-256">77f28e7e22b3b3a8d7b667fb7f783847c4b11ee7208833636e09e8b38390fd51</hash>
-        <hash alg="SHA3-512">cb238dbb641c42c49b5801bdfa6432395e860c1a7485ba68e2d57887e3d22ff254718c6cbfa34c107bfb09d74e2f85c33b95f89dfa886e141a8247a0abf2b5c2</hash>
-      </hashes>
-      <licenses>
-        <license>
-          <name>Bouncy Castle Licence</name>
-          <url>https://www.bouncycastle.org/licence.html</url>
-        </license>
-        <license>
-          <id>Apache-1.1</id>
-          <url>http://apache.org/licenses/LICENSE-1.1</url>
-        </license>
-      </licenses>
-      <purl>pkg:maven/org.bouncycastle/bcpg-jdk15on@1.70?type=jar</purl>
-      <modified>false</modified>
-      <externalReferences><reference type="issue-tracker"><url>https://github.com/bcgit/bc-java/issues</url></reference><reference type="vcs"><url>https://github.com/bcgit/bc-java</url></reference></externalReferences>
-    </component>
-    <component type="library" bom-ref="pkg:maven/org.jreleaser/jreleaser-command-java-sdk@1.6.0?type=jar">
-      <group>org.jreleaser</group>
-      <name>jreleaser-command-java-sdk</name>
-      <version>1.6.0</version>
-      <hashes>
-        <hash alg="MD5">acbbfe01e59912d40bdaf2b516b8199d</hash>
-        <hash alg="SHA-1">f922261945a1a25999d8b4c95326c38f15b167e8</hash>
-        <hash alg="SHA-256">cc3bbe8d8a2cdcba73857752b9c2fbae3344c8597af7f37ac7cd0926b02d92ea</hash>
-        <hash alg="SHA-512">d40f5671c80589711087a7dc5e4148ffee88ffacbca4db3a5360c0827e2ccc0e3fe80ed95e9c4b91d8c29617dbf6171a8a849a652e9b7a472e906692cd792498</hash>
-        <hash alg="SHA-384">cc3b16425ab2505338e26c64b006157218391762d04cec9d4a9a2897ce33036a8cd6f6199b55c80e646bad434322c18c</hash>
-        <hash alg="SHA3-384">09fe1086a3bbfda7fa50c320ab4c60b056ea2b37002f281bb413a17cc4f8846be4a9bcaf4b6f507a51af74474b189bd1</hash>
-        <hash alg="SHA3-256">ef9ad8cd599799ffa70998131cfbaf2985c3070a8ff727becac8ceb5480ab900</hash>
-        <hash alg="SHA3-512">a62c41fdaca8e1849d661ffded5af92bf09e43afc3497c5f923f5d7463756116dabef382cd8649a71473e9e938e698734b09e3d81153a852ff278876cd7ba8c9</hash>
-      </hashes>
-      <licenses/>
-      <purl>pkg:maven/org.jreleaser/jreleaser-command-java-sdk@1.6.0?type=jar</purl>
-      <modified>false</modified>
-    </component>
-    <component type="library" bom-ref="pkg:maven/org.jreleaser/jreleaser-java-sdk-commons@1.6.0?type=jar">
-      <group>org.jreleaser</group>
-      <name>jreleaser-java-sdk-commons</name>
-      <version>1.6.0</version>
-      <hashes>
-        <hash alg="MD5">a616e3581e826bb4e01c9ec7978bc4d2</hash>
-        <hash alg="SHA-1">187c502ed479e9f83427cccfd7cd47242bd5f51d</hash>
-        <hash alg="SHA-256">8043134ad00433ee9cb395081ac9e0cc479328a1589b2b67c310cfd654245ebf</hash>
-        <hash alg="SHA-512">03ed834cedf5f6b85f8d98defe2790fa0ca2971c686b46dc7c8616d130034785a6969e144ba6aa5d6f4d9093ccf888a7e4995c87d7acf862ece913e9696c550a</hash>
-        <hash alg="SHA-384">7f0545affd13b0f4298d047137850aba201b93bcd58d6625510bac088c98661c6ce3b1edb38ac7f22d765d22365a47bc</hash>
-        <hash alg="SHA3-384">9b4346b3b735ed788ca5e79e7fa4709d1e8edc60e994297f6a3fccd34d591474ab7d895720639e0739605b10d6722e60</hash>
-        <hash alg="SHA3-256">574b9169bf34389e320331ab5cf3ff85c61cb36197acfb0feb040412313326ca</hash>
-        <hash alg="SHA3-512">c4f1d762db1498baf5f6268619915811f933433ff78388429e564a3c7d94ee89867648fe79d1718dabe74c7927be99152d3475e5547f5b0f4c5d1b53ce7f75d2</hash>
-      </hashes>
-      <licenses/>
-      <purl>pkg:maven/org.jreleaser/jreleaser-java-sdk-commons@1.6.0?type=jar</purl>
-      <modified>false</modified>
-    </component>
-    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.2?type=jar">
-      <group>com.fasterxml.jackson.core</group>
-      <name>jackson-annotations</name>
-      <version>2.14.2</version>
-      <description>Core annotations used for value types, used by Jackson data binding package.</description>
-      <hashes>
-        <hash alg="MD5">10d19982a8890f6eb37557af2f58e272</hash>
-        <hash alg="SHA-1">a7aae9525864930723e3453ab799521fdfd9d873</hash>
-        <hash alg="SHA-256">2c6869d505cf60dc066734b7d50339f975bd3adc635e26a78abb71acb4473c0d</hash>
-        <hash alg="SHA-512">a978384791bdc074df8039ffc95bb93f0f60d14d476861ee2a0ce208b33a991c486a07345cb80559252c3ff1dea14d3efb818c19bdc18435946dc8754d8e6ee3</hash>
-        <hash alg="SHA-384">d5111c69020666689414921ae4a8950f9fbdf86dec1360f6827beeee9ebd3f78db74e69c76e0becaba47eb34fdaaeb5a</hash>
-        <hash alg="SHA3-384">53b1a8891482e16a7d8849251cb0dcd1aacf6aaa2161a73589d9742ad96763e384d426d04db762e56fc4536f4e719084</hash>
-        <hash alg="SHA3-256">14f7b3c51c96f7429f7c60a69e3b7e4f9f2207820141f197d56b57018ffd5640</hash>
-        <hash alg="SHA3-512">75e4e4fb847fdacdd497cf6b340362581ab4091120ccf2ec32a273709d336af0f78c90ce12b2dd1d17354aa08583af0d3ded89bb415720f45f2d9c110d71dd7a</hash>
-      </hashes>
-      <licenses>
-        <license>
-          <id>Apache-2.0</id>
-        </license>
-      </licenses>
-      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.2?type=jar</purl>
-      <modified>false</modified>
-      <externalReferences><reference type="vcs"><url>https://github.com/FasterXML/jackson-annotations</url></reference></externalReferences>
-    </component>
     <component type="library" bom-ref="pkg:maven/commons-codec/commons-codec@1.15?type=jar">
       <group>commons-codec</group>
       <name>commons-codec</name>
@@ -241,47 +44,30 @@
       <modified>false</modified>
       <externalReferences><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CODEC</url></reference><reference type="vcs"><url>https://github.com/apache/commons-codec</url></reference></externalReferences>
     </component>
-    <component type="library" bom-ref="pkg:maven/org.jreleaser/jreleaser-logger-api@1.6.0?type=jar">
-      <group>org.jreleaser</group>
-      <name>jreleaser-logger-api</name>
-      <version>1.6.0</version>
-      <hashes>
-        <hash alg="MD5">e7da806a3427ab10405584067d880ead</hash>
-        <hash alg="SHA-1">92ae4e1826cf1d8321fcefd3f4ece0fa5cc4fc94</hash>
-        <hash alg="SHA-256">372d4b6cee7af83429f9f054a69f73d38d6fb4c983b14ce97f2599791d59aee9</hash>
-        <hash alg="SHA-512">c4f4edf49e18f475b7b44677497250cd93af45e302fb39306a94dc8f0ee1f783921967de3e1f1b7591f970a359080f43b24c1499a363280d904c2519d2e9bcb2</hash>
-        <hash alg="SHA-384">fcdadd6f2e8af30a7761e98f5c717ab1b8f6f0a79825a711454c8c9cc9842cf8fe0f5917b5ea48603eb0ee5788ed7a8b</hash>
-        <hash alg="SHA3-384">42a3e276d69efc85ce5798c5cd78ba1a910ef328169fb39a1a685eea5b98e9c3bf495124f56b518d553f1ca2e63d62f7</hash>
-        <hash alg="SHA3-256">0fb4d06e278df39d6633d1a09ed01ad4f7788838668f2ebc097f919384cec97d</hash>
-        <hash alg="SHA3-512">bb5a8b000955af1038d4d75c0fd8786561b3a2cf7bb804e09e42518a0bcc3e23ab01dd5236de4bdb58fd9b1a0e923982eb6cc6d0e450896bed9c86dfe808675d</hash>
-      </hashes>
-      <licenses/>
-      <purl>pkg:maven/org.jreleaser/jreleaser-logger-api@1.6.0?type=jar</purl>
-      <modified>false</modified>
-    </component>
-    <component type="library" bom-ref="pkg:maven/com.github.luben/zstd-jni@1.5.4-1?type=jar">
-      <publisher>com.github.luben</publisher>
-      <group>com.github.luben</group>
-      <name>zstd-jni</name>
-      <version>1.5.4-1</version>
-      <description>JNI bindings for Zstd native library that provides fast and high compression lossless algorithm for Java and all JVM languages.</description>
+    <component type="library" bom-ref="pkg:maven/commons-net/commons-net@3.9.0?type=jar">
+      <group>commons-net</group>
+      <name>commons-net</name>
+      <version>3.9.0</version>
+      <description>Apache Commons Net library contains a collection of network utilities and protocol implementations.
+Supported protocols include: Echo, Finger, FTP, NNTP, NTP, POP3(S), SMTP(S), Telnet, Whois</description>
       <hashes>
-        <hash alg="MD5">e787241d6ec56aac451be8b0d920c85b</hash>
-        <hash alg="SHA-1">291ccaacc039e41932de877303edb6af98a91c24</hash>
-        <hash alg="SHA-256">f0469d891127dc5ae6bd2df93a5aa38c4d79bcd5f360fbb88c2785b52a572349</hash>
-        <hash alg="SHA-512">368916f0057d69fa4ba3768f6f617291ce4083b89913e46c2daa68cc94c48b92e0ca626241486f34a4d154502eb77b19e82c16c68b341ecfc82ccc0520f8d4a9</hash>
-        <hash alg="SHA-384">7e72184873689fa286d93d88f69f8baa24f818fcd61105a14332fbb5ed254363c0969afa98befd797a3762577bc77993</hash>
-        <hash alg="SHA3-384">1302636797b291dbbe19f39bdeb66160c1317b395a0a9360ba93aeaa262de7ad8de7257e6a997a9c659fdf53b3367ee6</hash>
-        <hash alg="SHA3-256">54505ed16257a55330bb44c76719a687251d2623fa5e50a192b54c5067573255</hash>
-        <hash alg="SHA3-512">6e01cc9654c2d68c36a284e23c388267ac7013d534cceed0b6ab44679a6bbb6d03d4cfc52c967c4e76dbd5b8963c268e40d9890c927866ea00824821b0ecb82d</hash>
+        <hash alg="MD5">5254d7c277c30a378518e99b9d1d3522</hash>
+        <hash alg="SHA-1">5a4e26802e0a5a42938f987976b55dae4a6cc636</hash>
+        <hash alg="SHA-256">e3c1566f821b84489308cd933f57e8c00dd8714dc96b898bef844386510d3461</hash>
+        <hash alg="SHA-512">c76a5e586ef9d7314683580442f9ecef3a3c32f85c0539cc62944d5d4471d1ab06f2e9f5a28f444a9add41541ecc6b6f639e4bf1961b2a29515bffe4d591e17d</hash>
+        <hash alg="SHA-384">081d2a7131a5b0000b8d6723b079326c530c814a1fc504e60ba6aab527ce8844896b782c424097c3d33310bfe3934026</hash>
+        <hash alg="SHA3-384">1c3da6c243b6855b95ba625b40a2f0e9ea8c091f5f92735f4f9a620034ce6887ccc1507a483c521ae5aeb07bfc4e4141</hash>
+        <hash alg="SHA3-256">c7f780c0cd1e1ae7758235b9adf5893c6c503dbaad1bbab96c2804f7e74861d7</hash>
+        <hash alg="SHA3-512">2346ea5a81ee59eb0f3ed47db11351652e94ce39c4d6ec8f04704d81f51fa0573772625a651f8db665ee3d80cfcbe7ae3decdf753c6e82cceaf80af1b2a250f6</hash>
       </hashes>
       <licenses>
         <license>
-          <id>BSD-2-Clause</id>
+          <id>Apache-2.0</id>
         </license>
       </licenses>
-      <purl>pkg:maven/com.github.luben/zstd-jni@1.5.4-1?type=jar</purl>
+      <purl>pkg:maven/commons-net/commons-net@3.9.0?type=jar</purl>
       <modified>false</modified>
+      <externalReferences><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/NET</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf/commons-net</url></reference></externalReferences>
     </component>
     <component type="library" bom-ref="pkg:maven/org.slf4j/jcl-over-slf4j@2.0.7?type=jar">
       <group>org.slf4j</group>
@@ -306,74 +92,85 @@
       <purl>pkg:maven/org.slf4j/jcl-over-slf4j@2.0.7?type=jar</purl>
       <modified>false</modified>
     </component>
-    <component type="library" bom-ref="pkg:maven/io.github.openfeign.form/feign-form@3.8.0?type=jar">
-      <group>io.github.openfeign.form</group>
-      <name>feign-form</name>
-      <version>3.8.0</version>
-      <hashes>
-        <hash alg="MD5">ab48cdaa9aecefe5e938873ba2db3bb0</hash>
-        <hash alg="SHA-1">3083889996b18443c275a352d3ab4bc6c8321598</hash>
-        <hash alg="SHA-256">b21d37321b390995c90b5dbb4ff0c33f09d1cc7768207cc0da910ad20bf58961</hash>
-        <hash alg="SHA-512">3a1718c21e4caffcd5f686d2cde011b2f72a026d03caa03b876ad6e7c8c40b7bd59189eed6efa0654bf988a438775ef2c429fae497d502c1806c8c4d9d474c2e</hash>
-        <hash alg="SHA-384">02b96ee7cb8c67cdfe63422247035cbb003b7423a82756714d36de926118ac5e96c407fd324090c851962c63f7d4fd6f</hash>
-        <hash alg="SHA3-384">0d63a4c22216be6259584b62d3753a86220ea181a002641cda45de153501272fd79b7064d21bdee0ecd8129194fd7c3e</hash>
-        <hash alg="SHA3-256">ffc2832df09d0edf0251c5e6def39b6c36fd2c02c55ad29f0e63e3160cb709e1</hash>
-        <hash alg="SHA3-512">c2013da332e97e32962ee34459c5834b04ab2f6598960cb06e4f247a2683ced3fac3919d15151be4dae083c74911c7ead1906faabfc8a7cb6245fcd7138ef0df</hash>
-      </hashes>
+    <component type="library" bom-ref="pkg:maven/org.jreleaser/jreleaser-tool-java-sdk@1.6.0?type=jar">
+      <group>org.jreleaser</group>
+      <name>jreleaser-tool-java-sdk</name>
+      <version>1.6.0</version>
+      <description>Java SDK for Tools</description>
       <licenses>
         <license>
           <id>Apache-2.0</id>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
         </license>
       </licenses>
-      <purl>pkg:maven/io.github.openfeign.form/feign-form@3.8.0?type=jar</purl>
+      <purl>pkg:maven/org.jreleaser/jreleaser-tool-java-sdk@1.6.0?type=jar</purl>
       <modified>false</modified>
+      <externalReferences><reference type="vcs"><url>https://github.com/jreleaser/jreleaser</url></reference></externalReferences>
     </component>
-    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.2?type=jar">
-      <group>com.fasterxml.jackson.core</group>
-      <name>jackson-core</name>
-      <version>2.14.2</version>
-      <description>Core Jackson processing abstractions (aka Streaming API), implementation for JSON</description>
+    <component type="library" bom-ref="pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar">
+      <group>org.apache.httpcomponents</group>
+      <name>httpclient</name>
+      <version>4.5.13</version>
+      <description>Apache HttpComponents Client</description>
       <hashes>
-        <hash alg="MD5">6ee422ee4c481b2d5aacb2b5e36a7dc0</hash>
-        <hash alg="SHA-1">f804090e6399ce0cf78242db086017512dd71fcc</hash>
-        <hash alg="SHA-256">b5d37a77c88277b97e3593c8740925216c06df8e4172bbde058528df04ad3e7a</hash>
-        <hash alg="SHA-512">208953cf72691b3bab1ca2f9a045cccd3d75c46c90099ba884fbf16bc3e45045e5cd014d2c68c96e8a8826f87a5f0e18cb34b35e7ef03348953869c21e197367</hash>
-        <hash alg="SHA-384">e806595862c5fcdae801d9845befc1d12c97e6036ee839d34590dbd785a422d5832cf4fc5c7ee6e1a5ee7a59f37740f0</hash>
-        <hash alg="SHA3-384">4fa59f572f2e100e2eba6fc664a3b9f804fabd911a552cb40805f39e624a9c04246b679cf4b017bb782c8272877f49d2</hash>
-        <hash alg="SHA3-256">cef17d3a539cbf798cfb0bfa9faffa2b7baff3670b50743e91ee58b4c60b59f1</hash>
-        <hash alg="SHA3-512">fceeed5cb8fe4335d88282d15657762a4728483275a7ff45f50b9fe6a999757ccb37c415d001eb6250226f98f5c576b1b36a83e601fb393cfd34a811c2df5d00</hash>
+        <hash alg="MD5">40d6b9075fbd28fa10292a45a0db9457</hash>
+        <hash alg="SHA-1">e5f6cae5ca7ecaac1ec2827a9e2d65ae2869cada</hash>
+        <hash alg="SHA-256">6fe9026a566c6a5001608cf3fc32196641f6c1e5e1986d1037ccdbd5f31ef743</hash>
+        <hash alg="SHA-512">3567739186e551f84cad3e4b6b270c5b8b19aba297675a96bcdff3663ff7d20d188611d21f675fe5ff1bfd7d8ca31362070910d7b92ab1b699872a120aa6f089</hash>
+        <hash alg="SHA-384">093ac3e2dde58e34aa70309c7305eb3c9b5be2509a9293f1672494da55479a86bd112e83326746dc7a32855472952b99</hash>
+        <hash alg="SHA3-384">cd6882e7868624164e460f2f3ea01466f863c0dcb902b031c656b57356f563be83b29530df41d88d634ed3d01fc9964d</hash>
+        <hash alg="SHA3-256">710b1d8d7dae0b8e4270756694ca9c83d64965f42d3b4170c609b14d47c2762c</hash>
+        <hash alg="SHA3-512">276fa6a6599dc89382d658115695cf4da6b0d39b34e9c349c17a5dbd64122eaee553bb9ed75c0378ec4a83be157c8aa39370662de3c9b8fd55ebc1dd608383e6</hash>
       </hashes>
       <licenses>
         <license>
           <id>Apache-2.0</id>
         </license>
       </licenses>
-      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.2?type=jar</purl>
+      <purl>pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar</purl>
       <modified>false</modified>
-      <externalReferences><reference type="vcs"><url>https://github.com/FasterXML/jackson-core</url></reference></externalReferences>
     </component>
-    <component type="library" bom-ref="pkg:maven/io.github.openfeign/feign-httpclient@12.3?type=jar">
-      <group>io.github.openfeign</group>
-      <name>feign-httpclient</name>
-      <version>12.3</version>
-      <description>Feign Apache HttpClient</description>
+    <component type="library" bom-ref="pkg:maven/org.jreleaser/jreleaser-command-java-sdk@1.6.0?type=jar">
+      <group>org.jreleaser</group>
+      <name>jreleaser-command-java-sdk</name>
+      <version>1.6.0</version>
+      <description>JReleaser command SDK</description>
+      <licenses>
+        <license>
+          <id>Apache-2.0</id>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+        </license>
+      </licenses>
+      <purl>pkg:maven/org.jreleaser/jreleaser-command-java-sdk@1.6.0?type=jar</purl>
+      <modified>false</modified>
+      <externalReferences><reference type="vcs"><url>https://github.com/jreleaser/jreleaser</url></reference></externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-compress@1.22?type=jar">
+      <group>org.apache.commons</group>
+      <name>commons-compress</name>
+      <version>1.22</version>
+      <description>Apache Commons Compress software defines an API for working with
+compression and archive formats.  These include: bzip2, gzip, pack200,
+lzma, xz, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4,
+Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.</description>
       <hashes>
-        <hash alg="MD5">4ec31fa7f187c15f9967c7ffcf714449</hash>
-        <hash alg="SHA-1">0ea51fdb4797c3ab62e1f8a726d4e02cf522dba2</hash>
-        <hash alg="SHA-256">3a2833e18cc868bff19d6320f22054f96995dc073ed27edfeb2d83996d2ef37c</hash>
-        <hash alg="SHA-512">3440afa129150c035670cd098e6eba6f676afc82db2db53a10b20621e30658b411d820652e4668dab5ca615f599a41a06dc826378b5e783f88f26c2cddfce8ed</hash>
-        <hash alg="SHA-384">b8dc38126b28fb486d459e23ae61a34073f16f0ef7ec37f49636919d0fd5a8d86354d76314462dba94efd4f613db92ef</hash>
-        <hash alg="SHA3-384">7c4161078011223122067406e5ad6efedfcf45c71d6e081f37e3fba1c73578c748d5a5e60d372a5fa7159ec7737e71bb</hash>
-        <hash alg="SHA3-256">b6d851642b9a5628dbe3cab5706c9d434f1d59ec881cd5cdf6fae84f644eb7c1</hash>
-        <hash alg="SHA3-512">9b3b7edc25efc7345a9cc7b2fe0eccefd57fa40d62e6a85b4a698827b9c34ff568236d591f6d5645de7eb275be2b10aee80f42881f6068f0b1c38f274faf4c5f</hash>
+        <hash alg="MD5">f1e4db16fee4291212d91409313a8086</hash>
+        <hash alg="SHA-1">691a8b4e6cf4248c3bc72c8b719337d5cb7359fa</hash>
+        <hash alg="SHA-256">53d04a0efc7223baecaa303bd5d298eb0600e6b82b4076f9cecd558b97ba760b</hash>
+        <hash alg="SHA-512">2d64fa6cd081fff5d73ee662a82f6186991fc13b4bdaee18b5f1bdcab06d9acb70e3713d18b296337791448251fbd6768bd84afaa817a10547652d0cfa885563</hash>
+        <hash alg="SHA-384">295d7f69d151abbd784e1c4d021c77ce43e129bb5bda0c55762b32d77c8607863383297674ec8a212ea3dfe4007b0044</hash>
+        <hash alg="SHA3-384">af04eb1b4647b1a041c5ee994c2c7a32556b5410b916fedb69905f166938baa43ba54fdc67084205794c02680d3c6349</hash>
+        <hash alg="SHA3-256">40f2960e82adfb171b0c5430271fdb0c0dae243aaf9b08021df54fd4d4a3a0b0</hash>
+        <hash alg="SHA3-512">f2c445f77bda3ef230a2b78ea88d86e48a7d6db36805f841d5cffe1f178842a161b2fda0b0d60162af210f18ed9c5bb9579c963291c26f715c1aa389d9a6785c</hash>
       </hashes>
       <licenses>
         <license>
           <id>Apache-2.0</id>
         </license>
       </licenses>
-      <purl>pkg:maven/io.github.openfeign/feign-httpclient@12.3?type=jar</purl>
+      <purl>pkg:maven/org.apache.commons/commons-compress@1.22?type=jar</purl>
       <modified>false</modified>
+      <externalReferences><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/COMPRESS</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-compress.git</url></reference></externalReferences>
     </component>
     <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar">
       <group>org.slf4j</group>
@@ -399,145 +196,178 @@
       <purl>pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar</purl>
       <modified>false</modified>
     </component>
-    <component type="library" bom-ref="pkg:maven/org.tukaani/xz@1.9?type=jar">
-      <group>org.tukaani</group>
-      <name>xz</name>
-      <version>1.9</version>
-      <description>XZ data compression</description>
+    <component type="library" bom-ref="pkg:maven/com.github.spullara.mustache.java/compiler@0.9.10?type=jar">
+      <group>com.github.spullara.mustache.java</group>
+      <name>compiler</name>
+      <version>0.9.10</version>
+      <description>Implementation of mustache.js for Java</description>
       <hashes>
-        <hash alg="MD5">57c2fbfeb55e307ccae52e5322082e02</hash>
-        <hash alg="SHA-1">1ea4bec1a921180164852c65006d928617bd2caf</hash>
-        <hash alg="SHA-256">211b306cfc44f8f96df3a0a3ddaf75ba8c5289eed77d60d72f889bb855f535e5</hash>
-        <hash alg="SHA-512">a4362db234d4e83683e90f5baf90c82107450cc4404acab96e3fab14b8a3d4588a19722171d32f27d18463682a6994cad9af0b1065c954e3a77ea7bdcf586bac</hash>
-        <hash alg="SHA-384">aa30349b094723369908369a18e2cb5beb5b7ca0b24b4d56c2f5725fae152220f6526466672b22bfec939e2e0622a01d</hash>
-        <hash alg="SHA3-384">b3e1fee7784188df5e1931c9e8137ac0e20e63f66f93e7f938a448fc0b3adb4be5205c7a5f1835007e233fee2696fc2c</hash>
-        <hash alg="SHA3-256">92eff603ed0aab557e1a45e17a74e80d8ec656b5f137197b23c429c903fa448f</hash>
-        <hash alg="SHA3-512">b290f92958f8cd91705331d8411140c23957ab8b568fbe19a70f4f1dc97eddc13d3a200df28a02ab5911ce18f546c33f720878be0f727edac839a6e63ee66ece</hash>
+        <hash alg="MD5">5638fc78a17d5063cc4b0d00f6e87491</hash>
+        <hash alg="SHA-1">6111ae24e3be9ecbd75f5fe908583fc14b4f0174</hash>
+        <hash alg="SHA-256">2b5a9217811cb99846a473fa8e0d233eb33629347b7f44941f6c0fbd4cdf1038</hash>
+        <hash alg="SHA-512">2ccf3196af2b518c96df748a72a0122d033dc222e1fab3e12f3e2094146d44bec20bd1502390b59abf090cbdf5dd4d580084b07fb7241248b5b8da2605207559</hash>
+        <hash alg="SHA-384">0204e77a4a64701af5000df6601f4f4c23cb5e53dd39a1325615d4f942cd2c91d04bbac20348ae49731f586282165c33</hash>
+        <hash alg="SHA3-384">0960da7175835484471f485d481499f8b65f134ff4f1629618560adaa5a08caa897fbefcea190f93106ee9e3273381b2</hash>
+        <hash alg="SHA3-256">cfb7e640392ef590069e6b1d059dc20b8fcff984a4b267b3969fcf50ed0edd4f</hash>
+        <hash alg="SHA3-512">db3dad3809879bca835a04da890fd86dbc58ba6637c72f07d02e39d13645ebb6c640b7fecc18a779e58946072078bdf114b91445026a32dd6501b5d1c6e7d933</hash>
       </hashes>
       <licenses>
         <license>
-          <name>Public Domain</name>
+          <id>Apache-2.0</id>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
         </license>
       </licenses>
-      <purl>pkg:maven/org.tukaani/xz@1.9?type=jar</purl>
+      <purl>pkg:maven/com.github.spullara.mustache.java/compiler@0.9.10?type=jar</purl>
       <modified>false</modified>
-      <externalReferences><reference type="vcs"><url>https://git.tukaani.org/?p=xz-java.git</url></reference></externalReferences>
+      <externalReferences><reference type="vcs"><url>http://github.com/spullara/mustache.java</url></reference></externalReferences>
     </component>
-    <component type="library" bom-ref="pkg:maven/org.jreleaser/jreleaser-model-impl@1.6.0?type=jar">
-      <group>org.jreleaser</group>
-      <name>jreleaser-model-impl</name>
-      <version>1.6.0</version>
+    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.2?type=jar">
+      <group>com.fasterxml.jackson.core</group>
+      <name>jackson-databind</name>
+      <version>2.14.2</version>
+      <description>General data-binding functionality for Jackson: works on core streaming API</description>
       <hashes>
-        <hash alg="MD5">d2760fed3ab0f395c3ec08c3f7493d52</hash>
-        <hash alg="SHA-1">37f35b86cc5bcdf8c7d306d97884c2d89fa742d5</hash>
-        <hash alg="SHA-256">284a61227c9f031b6b6928bfef76eeea45c97e6053b7a1190e3dd64c0effd8df</hash>
-        <hash alg="SHA-512">81899b65d3eb10b0dac885ee17b45822d12d5746141876ef2573b0afaec13c92187ebf8a6c446ce002f25f8bc3d40f1a88e1c8c548bd35a556efc86d9f5ed809</hash>
-        <hash alg="SHA-384">c961c3d7d900e27341988545b53d9bc8f89275e700799e41b56dc43444173e1bf962e00f96026de0fee5894594d40d6f</hash>
-        <hash alg="SHA3-384">984a6c6ab7487eeb35b3aa8d87754d4dd55bdcbcce9239bd0ec17b1ca63e1a66e4f34767476bd5b79e0998477ccc7c35</hash>
-        <hash alg="SHA3-256">a5b874d301532774b825877e6d29045492c60e20a00d55d096e0a3b371885a41</hash>
-        <hash alg="SHA3-512">83babeb5dc661f2a4f4082872615c1c70719c66ac3f2071f367a82d1b7e44390121d4e59ace75f0fdbc66f5277c306242ee491de2268d49bc5c9da4247b260e9</hash>
+        <hash alg="MD5">c1b12dd14734cd1986132bf55042dd7e</hash>
+        <hash alg="SHA-1">01e71fddbc80bb86f71a6345ac1e8ab8a00e7134</hash>
+        <hash alg="SHA-256">501d3abce4d18dcc381058ec593c5b94477906bba6efbac14dae40a642f77424</hash>
+        <hash alg="SHA-512">85473a29d23292f49092af9e7a7a63993206847c53b3e71f3c67245d68f7b19cc7c341e0ece409eb5e96602df98a848e957d8691fdd2c5fcddd807df9078255e</hash>
+        <hash alg="SHA-384">5c54d6c497cb329c3424a30319bf657ea222349eadc5ae74c30e8dc1525d7b60b7785f4d20370267b03343dd738cc13e</hash>
+        <hash alg="SHA3-384">98ff0b2a4dfc1faf319d4b0d38376c3c7a58b65d071db293232eed810adf2e525fecee3be45c99b41e20cf6a3a8ebef9</hash>
+        <hash alg="SHA3-256">2dba45f78a0d37402083975e18dbb3201705faf7e533c3e9721b9364c2a1ab0f</hash>
+        <hash alg="SHA3-512">76ef73198269cfd0922f4ae86c8b7e6a9cd1b96ee55da43ebfe57dd34365cc1c5c5630fadf79e46156a52b6b96b7d1f694f5e4f5c4f6a3d3ebb31c927e414435</hash>
       </hashes>
-      <licenses/>
-      <purl>pkg:maven/org.jreleaser/jreleaser-model-impl@1.6.0?type=jar</purl>
+      <licenses>
+        <license>
+          <id>Apache-2.0</id>
+        </license>
+      </licenses>
+      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.2?type=jar</purl>
       <modified>false</modified>
+      <externalReferences><reference type="vcs"><url>https://github.com/FasterXML/jackson-databind</url></reference></externalReferences>
     </component>
-    <component type="library" bom-ref="pkg:maven/io.github.openfeign/feign-jackson@12.3?type=jar">
-      <group>io.github.openfeign</group>
-      <name>feign-jackson</name>
-      <version>12.3</version>
-      <description>Feign Jackson</description>
+    <component type="library" bom-ref="pkg:maven/com.googlecode.javaewah/JavaEWAH@1.2.3?type=jar">
+      <group>com.googlecode.javaewah</group>
+      <name>JavaEWAH</name>
+      <version>1.2.3</version>
+      <description>The bit array data structure is implemented in Java as the BitSet class. Unfortunately, this fails to scale without compression.
+  JavaEWAH is a word-aligned compressed variant of the Java bitset class. It uses a 64-bit run-length encoding (RLE) compression scheme.
+  The goal of word-aligned compression is not to achieve the best compression, but rather to improve query processing time. Hence, we try to save CPU cycles, maybe at the expense of storage. However, the EWAH scheme we implemented is always more efficient storage-wise than an uncompressed bitmap (implemented in Java as the BitSet class). Unlike some alternatives, javaewah does not rely on a patented scheme.</description>
       <hashes>
-        <hash alg="MD5">8bbba5bba4c26edb1b5c89e1a4912c22</hash>
-        <hash alg="SHA-1">583c0ce0354e6ed81d998d5b8f1786ade1e9f2c4</hash>
-        <hash alg="SHA-256">1dfc43d604693ce51ef3935f27dbfecd2d65636699a088eee32ff37cc50ea479</hash>
-        <hash alg="SHA-512">8ea71fae9a2a4ad9d06f27e21e078001e1a29761af85e81b91bf2a38e4dd8841184a12fdf467915c234d080aa28484452fe45b9bc0a381ce23d8366b03be1395</hash>
-        <hash alg="SHA-384">03553ac35a79266a150940fc62d3da7a389b47825102d91392f37b719da94af2d2355c2592d2b68604bf84248c73baf9</hash>
-        <hash alg="SHA3-384">986284d22c0bbb7abfbc1762447a44d0919c266002d6925c4ca75040f3950a3d943a71dedf2f72592e6a185218c498a9</hash>
-        <hash alg="SHA3-256">60242fd373d71575ffcb8a4f866b27d291b6acecf83be67e6ff51a13559dc016</hash>
-        <hash alg="SHA3-512">b7e0392fc793f19b3daf64c7e7b875fb2e4ec7ba2f1681d51c14c5c9efd5991817766753e62999a76bad83c624601f9f5a55304c4e06d2e3cd88ec4c609a1ede</hash>
+        <hash alg="MD5">8fdeda28c1fb10e67b3d79f86bef5e61</hash>
+        <hash alg="SHA-1">13a27c856e0c8808cee9a64032c58eee11c3adc9</hash>
+        <hash alg="SHA-256">d65226949713c4c61a784f41c51167e7b0316f93764398ebba9e4336b3d954c2</hash>
+        <hash alg="SHA-512">48cd9df9252c58e9ffe4583e68607944bcdf2ad7a3be7b4317467f503c4f56cdbde358ca7c4f34fa620d01615072a42f3a572fc4f1237e266310b7508e79bcac</hash>
+        <hash alg="SHA-384">d1fd074f21b8a54a07d3f4579376d7c3ab72f24814ebc9ba92344e9da4721e9bfa3cda3a599137e4ddf2395a3c5b88e4</hash>
+        <hash alg="SHA3-384">a553864f196f73c139a104170ab79e780046fb5f322072c5494a6590361021f875afd7168f858b0531b61918ab49b94e</hash>
+        <hash alg="SHA3-256">bab97f3f893af36c36218a151b0c3fece27d47f358cc19e1ca9c22d77942bb76</hash>
+        <hash alg="SHA3-512">be817b93c7093d44ec8dded565d7e5651772ce38e9c72283c05191b33d0ecb2798cd385395f553500446573ac49dccc21f4ba3067d71eb89e03daa384d0193be</hash>
       </hashes>
       <licenses>
         <license>
           <id>Apache-2.0</id>
         </license>
       </licenses>
-      <purl>pkg:maven/io.github.openfeign/feign-jackson@12.3?type=jar</purl>
+      <purl>pkg:maven/com.googlecode.javaewah/JavaEWAH@1.2.3?type=jar</purl>
       <modified>false</modified>
+      <externalReferences><reference type="issue-tracker"><url>https://github.com/lemire/javaewah/issues</url></reference><reference type="vcs"><url>scm:git:git@github.com:lemire/javaewah.git</url></reference></externalReferences>
     </component>
-    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-compress@1.22?type=jar">
-      <group>org.apache.commons</group>
-      <name>commons-compress</name>
-      <version>1.22</version>
-      <description>Apache Commons Compress software defines an API for working with
-compression and archive formats.  These include: bzip2, gzip, pack200,
-lzma, xz, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4,
-Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.</description>
+    <component type="library" bom-ref="pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar">
+      <group>org.apache.httpcomponents</group>
+      <name>httpcore</name>
+      <version>4.4.16</version>
+      <description>Apache HttpComponents Core (blocking I/O)</description>
       <hashes>
-        <hash alg="MD5">f1e4db16fee4291212d91409313a8086</hash>
-        <hash alg="SHA-1">691a8b4e6cf4248c3bc72c8b719337d5cb7359fa</hash>
-        <hash alg="SHA-256">53d04a0efc7223baecaa303bd5d298eb0600e6b82b4076f9cecd558b97ba760b</hash>
-        <hash alg="SHA-512">2d64fa6cd081fff5d73ee662a82f6186991fc13b4bdaee18b5f1bdcab06d9acb70e3713d18b296337791448251fbd6768bd84afaa817a10547652d0cfa885563</hash>
-        <hash alg="SHA-384">295d7f69d151abbd784e1c4d021c77ce43e129bb5bda0c55762b32d77c8607863383297674ec8a212ea3dfe4007b0044</hash>
-        <hash alg="SHA3-384">af04eb1b4647b1a041c5ee994c2c7a32556b5410b916fedb69905f166938baa43ba54fdc67084205794c02680d3c6349</hash>
-        <hash alg="SHA3-256">40f2960e82adfb171b0c5430271fdb0c0dae243aaf9b08021df54fd4d4a3a0b0</hash>
-        <hash alg="SHA3-512">f2c445f77bda3ef230a2b78ea88d86e48a7d6db36805f841d5cffe1f178842a161b2fda0b0d60162af210f18ed9c5bb9579c963291c26f715c1aa389d9a6785c</hash>
+        <hash alg="MD5">28d2cd9bf8789fd2ec774fb88436ebd1</hash>
+        <hash alg="SHA-1">51cf043c87253c9f58b539c9f7e44c8894223850</hash>
+        <hash alg="SHA-256">6c9b3dd142a09dc468e23ad39aad6f75a0f2b85125104469f026e52a474e464f</hash>
+        <hash alg="SHA-512">168026436a6bcf5e96c0c59606638abbdc30de4b405ae55afde70fdf2895e267a3d48bba6bdadc5a89f38e31da3d9a9dc91e1cab7ea76f5e04322cf1ec63b838</hash>
+        <hash alg="SHA-384">ba9ceaee1a37ca3201d6a1315ecb0327b495489efd0baa155c219c475df8d3eb69fe77ab0026563db406497626da6562</hash>
+        <hash alg="SHA3-384">b9dc44dcc7cc86d5036f26d54c4003a2d72808ae7b07a0808bb53505c6d4281b5ad213eb1f3d0fef1113dec57cb0dfe1</hash>
+        <hash alg="SHA3-256">fd8ab51846476c6c18822151c9ec07b39a9633010b5d20ea937fc6910407bc64</hash>
+        <hash alg="SHA3-512">b42fa528242981a9d70e4f68ab75a24292df5112c44c21b6f18cb9201ce747885ba1d4dc69bc3d14d0da46a6c2638f937c11bc45749abeb55dc89ddada90cdda</hash>
       </hashes>
       <licenses>
         <license>
           <id>Apache-2.0</id>
         </license>
       </licenses>
-      <purl>pkg:maven/org.apache.commons/commons-compress@1.22?type=jar</purl>
+      <purl>pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar</purl>
       <modified>false</modified>
-      <externalReferences><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/COMPRESS</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-compress.git</url></reference></externalReferences>
     </component>
-    <component type="library" bom-ref="pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar">
-      <group>org.apache.httpcomponents</group>
-      <name>httpclient</name>
-      <version>4.5.13</version>
-      <description>Apache HttpComponents Client</description>
+    <component type="library" bom-ref="pkg:maven/commons-io/commons-io@2.11.0?type=jar">
+      <group>commons-io</group>
+      <name>commons-io</name>
+      <version>2.11.0</version>
+      <description>The Apache Commons IO library contains utility classes, stream implementations, file filters,
+file comparators, endian transformation classes, and much more.</description>
       <hashes>
-        <hash alg="MD5">40d6b9075fbd28fa10292a45a0db9457</hash>
-        <hash alg="SHA-1">e5f6cae5ca7ecaac1ec2827a9e2d65ae2869cada</hash>
-        <hash alg="SHA-256">6fe9026a566c6a5001608cf3fc32196641f6c1e5e1986d1037ccdbd5f31ef743</hash>
-        <hash alg="SHA-512">3567739186e551f84cad3e4b6b270c5b8b19aba297675a96bcdff3663ff7d20d188611d21f675fe5ff1bfd7d8ca31362070910d7b92ab1b699872a120aa6f089</hash>
-        <hash alg="SHA-384">093ac3e2dde58e34aa70309c7305eb3c9b5be2509a9293f1672494da55479a86bd112e83326746dc7a32855472952b99</hash>
-        <hash alg="SHA3-384">cd6882e7868624164e460f2f3ea01466f863c0dcb902b031c656b57356f563be83b29530df41d88d634ed3d01fc9964d</hash>
-        <hash alg="SHA3-256">710b1d8d7dae0b8e4270756694ca9c83d64965f42d3b4170c609b14d47c2762c</hash>
-        <hash alg="SHA3-512">276fa6a6599dc89382d658115695cf4da6b0d39b34e9c349c17a5dbd64122eaee553bb9ed75c0378ec4a83be157c8aa39370662de3c9b8fd55ebc1dd608383e6</hash>
+        <hash alg="MD5">3b4b7ccfaeceeac240b804839ee1a1ca</hash>
+        <hash alg="SHA-1">a2503f302b11ebde7ebc3df41daebe0e4eea3689</hash>
+        <hash alg="SHA-256">961b2f6d87dbacc5d54abf45ab7a6e2495f89b75598962d8c723cea9bc210908</hash>
+        <hash alg="SHA-512">5bd78eed456ede30119319c5bed8e3e4c443b6fd7bdb3a7a5686647bd83094d0c3e2832a7575cfb60e4ef25f08106b93476939d3adcfecf5533cc030b3039e10</hash>
+        <hash alg="SHA-384">114f1e324d90ad887c177876d410f5787a8e8da6c48d4b2862d365802c0efded3a88cb24046976bf6276cadad3712f0f</hash>
+        <hash alg="SHA3-384">80288c03ad4d80d69f91d056ffc5570d49a9c76bf54ad2dff0121ecde26a560df76d05156f281f5c6db2a38ff07a873d</hash>
+        <hash alg="SHA3-256">5adfb5ccaf5f21a549422f426118a9542673926fcd18c68390cf813e791dcf6c</hash>
+        <hash alg="SHA3-512">7573f47f0babb53cefdc7c2309a0b982d800139064537b0797da442853d081010ad7c3c74a500598a0f800639a5d540eca21963ea652c68613907059bd4278c2</hash>
       </hashes>
       <licenses>
         <license>
           <id>Apache-2.0</id>
         </license>
       </licenses>
-      <purl>pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar</purl>
+      <purl>pkg:maven/commons-io/commons-io@2.11.0?type=jar</purl>
       <modified>false</modified>
+      <externalReferences><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/IO</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-io.git</url></reference></externalReferences>
     </component>
-    <component type="library" bom-ref="pkg:maven/commons-net/commons-net@3.9.0?type=jar">
-      <group>commons-net</group>
-      <name>commons-net</name>
-      <version>3.9.0</version>
-      <description>Apache Commons Net library contains a collection of network utilities and protocol implementations.
-Supported protocols include: Echo, Finger, FTP, NNTP, NTP, POP3(S), SMTP(S), Telnet, Whois</description>
+    <component type="library" bom-ref="pkg:maven/org.tukaani/xz@1.9?type=jar">
+      <group>org.tukaani</group>
+      <name>xz</name>
+      <version>1.9</version>
+      <description>XZ data compression</description>
       <hashes>
-        <hash alg="MD5">5254d7c277c30a378518e99b9d1d3522</hash>
-        <hash alg="SHA-1">5a4e26802e0a5a42938f987976b55dae4a6cc636</hash>
-        <hash alg="SHA-256">e3c1566f821b84489308cd933f57e8c00dd8714dc96b898bef844386510d3461</hash>
-        <hash alg="SHA-512">c76a5e586ef9d7314683580442f9ecef3a3c32f85c0539cc62944d5d4471d1ab06f2e9f5a28f444a9add41541ecc6b6f639e4bf1961b2a29515bffe4d591e17d</hash>
-        <hash alg="SHA-384">081d2a7131a5b0000b8d6723b079326c530c814a1fc504e60ba6aab527ce8844896b782c424097c3d33310bfe3934026</hash>
-        <hash alg="SHA3-384">1c3da6c243b6855b95ba625b40a2f0e9ea8c091f5f92735f4f9a620034ce6887ccc1507a483c521ae5aeb07bfc4e4141</hash>
-        <hash alg="SHA3-256">c7f780c0cd1e1ae7758235b9adf5893c6c503dbaad1bbab96c2804f7e74861d7</hash>
-        <hash alg="SHA3-512">2346ea5a81ee59eb0f3ed47db11351652e94ce39c4d6ec8f04704d81f51fa0573772625a651f8db665ee3d80cfcbe7ae3decdf753c6e82cceaf80af1b2a250f6</hash>
+        <hash alg="MD5">57c2fbfeb55e307ccae52e5322082e02</hash>
+        <hash alg="SHA-1">1ea4bec1a921180164852c65006d928617bd2caf</hash>
+        <hash alg="SHA-256">211b306cfc44f8f96df3a0a3ddaf75ba8c5289eed77d60d72f889bb855f535e5</hash>
+        <hash alg="SHA-512">a4362db234d4e83683e90f5baf90c82107450cc4404acab96e3fab14b8a3d4588a19722171d32f27d18463682a6994cad9af0b1065c954e3a77ea7bdcf586bac</hash>
+        <hash alg="SHA-384">aa30349b094723369908369a18e2cb5beb5b7ca0b24b4d56c2f5725fae152220f6526466672b22bfec939e2e0622a01d</hash>
+        <hash alg="SHA3-384">b3e1fee7784188df5e1931c9e8137ac0e20e63f66f93e7f938a448fc0b3adb4be5205c7a5f1835007e233fee2696fc2c</hash>
+        <hash alg="SHA3-256">92eff603ed0aab557e1a45e17a74e80d8ec656b5f137197b23c429c903fa448f</hash>
+        <hash alg="SHA3-512">b290f92958f8cd91705331d8411140c23957ab8b568fbe19a70f4f1dc97eddc13d3a200df28a02ab5911ce18f546c33f720878be0f727edac839a6e63ee66ece</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <name>Public Domain</name>
+        </license>
+      </licenses>
+      <purl>pkg:maven/org.tukaani/xz@1.9?type=jar</purl>
+      <modified>false</modified>
+      <externalReferences><reference type="vcs"><url>https://git.tukaani.org/?p=xz-java.git</url></reference></externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-jexl3@3.3?type=jar">
+      <group>org.apache.commons</group>
+      <name>commons-jexl3</name>
+      <version>3.3</version>
+      <description>JEXL is a library intended to facilitate the implementation of scripting features in
+        applications and frameworks written in Java.</description>
+      <hashes>
+        <hash alg="MD5">3a332e3beb67b3a2a20bd0a950fc57c4</hash>
+        <hash alg="SHA-1">c76b4cfa436c3e79e04806e62656b09968c388ba</hash>
+        <hash alg="SHA-256">07b0ff6c5a10ffb2e2c02da9e2c0e2e6702df44178cfb76881f69447fc386014</hash>
+        <hash alg="SHA-512">879111d1c3ad021ea3961e49161b3ff6ba251044ffef1ca4d36d880d9a09b1f395e17eef221a13274303f44e116204ae4b2a3ee3e931f117fc901e321d59b5c6</hash>
+        <hash alg="SHA-384">7a268bf2c903be86813fcc7f06158abf79d558ee59ebf03470ebd06ca6e6d169beb1c3600e07c20c4f95fa7827fde841</hash>
+        <hash alg="SHA3-384">1803d239f17f7eeee6edb69d38c4473319fd4eeeb684eda5c38b577a7aaf42965ce41d9082d515d5007be9a0b0712d81</hash>
+        <hash alg="SHA3-256">01163da5e720b6d1f6bf8b6e9e398d26a1be92b3f18ef6089d218d54166b0c01</hash>
+        <hash alg="SHA3-512">8abdd72c14492340c05fd5d3555682a308ac00ac1b1e1e15ae38abc47f454f50db9e0727a49df72a50bf49f1447a6ca9dadc48b9ffd45a043bcbae9e5e050d3d</hash>
       </hashes>
       <licenses>
         <license>
           <id>Apache-2.0</id>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
         </license>
       </licenses>
-      <purl>pkg:maven/commons-net/commons-net@3.9.0?type=jar</purl>
+      <purl>pkg:maven/org.apache.commons/commons-jexl3@3.3?type=jar</purl>
       <modified>false</modified>
-      <externalReferences><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/NET</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf/commons-net</url></reference></externalReferences>
+      <externalReferences><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/JEXL</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf/commons-jexl.git</url></reference></externalReferences>
     </component>
     <component type="library" bom-ref="pkg:maven/org.apache.tika/tika-core@2.7.0?type=jar">
       <publisher>The Apache Software Foundation</publisher>
@@ -567,226 +397,366 @@
       <modified>false</modified>
       <externalReferences><reference type="website"><url>http://www.apache.org</url></reference><reference type="build-system"><url>https://builds.apache.org/job/Tika-trunk/</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/TIKA</url></reference></externalReferences>
     </component>
-    <component type="library" bom-ref="pkg:maven/org.jreleaser/jreleaser-tool-java-sdk@1.6.0?type=jar">
-      <group>org.jreleaser</group>
-      <name>jreleaser-tool-java-sdk</name>
-      <version>1.6.0</version>
+    <component type="library" bom-ref="pkg:maven/org.bouncycastle/bcprov-jdk15on@1.70?type=jar">
+      <group>org.bouncycastle</group>
+      <name>bcprov-jdk15on</name>
+      <version>1.70</version>
+      <description>The Bouncy Castle Crypto package is a Java implementation of cryptographic algorithms. This jar contains JCE provider and lightweight API for the Bouncy Castle Cryptography APIs for JDK 1.5 and up.</description>
       <hashes>
-        <hash alg="MD5">abfd7ce4581351b44b505c26c1367955</hash>
-        <hash alg="SHA-1">ef1e1b370a0a24a202089f732598f82ce91c74f2</hash>
-        <hash alg="SHA-256">a4bcf1548d74752460e28bd3ab7e43b779b5a8f446285b8e7643dd83983f5b7f</hash>
-        <hash alg="SHA-512">e14548ab617020cac195b98b2b6bf04043cf409ef395783e8c2c38441c761f38dd34b4858d4d7e26d2c69fde233ccaa102f180d3ff547efc29e475d0c38b7b40</hash>
-        <hash alg="SHA-384">85953ec5ec2714df877d6012db03c5d88a971dcb35cfc43c197570e8e2b010c1c292e228e4fe8c7f93418e11868b8654</hash>
-        <hash alg="SHA3-384">cb294f21ab1d8a8c8f488e2f60b456e66985b55dbb5ecc56646b57fc6fbb9e36aa69801bdb6c1ea5825288baab329183</hash>
-        <hash alg="SHA3-256">cf8c1f78e8630a84e28269970a18752616d82aec3a5d9297459244fb4d52980a</hash>
-        <hash alg="SHA3-512">bd42233ee963b74dd472abde6801b8140f3ec1b08e503e486bd7c8ef7575e65a72f0bd8a3ca996adbc832d4df6be8e2b500a425b77dfdfd80e57818af84a79c2</hash>
+        <hash alg="MD5">1809d0449a6374279c01fdd3be26cd92</hash>
+        <hash alg="SHA-1">4636a0d01f74acaf28082fb62b317f1080118371</hash>
+        <hash alg="SHA-256">8f3c20e3e2d565d26f33e8d4857a37d0d7f8ac39b62a7026496fcab1bdac30d4</hash>
+        <hash alg="SHA-512">7dccfc636ee4df1487615818cfa99c69941081df95e8ef1eaf4bca165594dff9547e3774fd70de3418abace77d2c45889f70bcd2e6823f8539f359e68eaf36d1</hash>
+        <hash alg="SHA-384">a0b35d204cd962f1d246fa94b6e8b0fcee1a7c3f37b7e87cda742f2124a25b48794ce11a903ea8d12009c86227b6808d</hash>
+        <hash alg="SHA3-384">980d81d3d9906764bbf2ae9b3b364ea58628b485ce1dc3d06734e10495d79f2be2e7cc7df61ac88cd67c1104c7af9393</hash>
+        <hash alg="SHA3-256">10a3572e42d29f609721d795116e3e5d0f6f03efef84bb979ce72e26908d242b</hash>
+        <hash alg="SHA3-512">a0761cb6deeb86c94b96850c72c0a0eaf516ca849f4b8268f9f60c9ed2a6730e692c15098d47e617da294e931113c6cbcaddec8957c9f029fa595b5f14ff35ac</hash>
       </hashes>
-      <licenses/>
-      <purl>pkg:maven/org.jreleaser/jreleaser-tool-java-sdk@1.6.0?type=jar</purl>
+      <licenses>
+        <license>
+          <name>Bouncy Castle Licence</name>
+          <url>https://www.bouncycastle.org/licence.html</url>
+        </license>
+      </licenses>
+      <purl>pkg:maven/org.bouncycastle/bcprov-jdk15on@1.70?type=jar</purl>
       <modified>false</modified>
+      <externalReferences><reference type="issue-tracker"><url>https://github.com/bcgit/bc-java/issues</url></reference><reference type="vcs"><url>https://github.com/bcgit/bc-java</url></reference></externalReferences>
     </component>
-    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.2?type=jar">
-      <group>com.fasterxml.jackson.core</group>
-      <name>jackson-databind</name>
-      <version>2.14.2</version>
-      <description>General data-binding functionality for Jackson: works on core streaming API</description>
-      <hashes>
-        <hash alg="MD5">c1b12dd14734cd1986132bf55042dd7e</hash>
-        <hash alg="SHA-1">01e71fddbc80bb86f71a6345ac1e8ab8a00e7134</hash>
-        <hash alg="SHA-256">501d3abce4d18dcc381058ec593c5b94477906bba6efbac14dae40a642f77424</hash>
-        <hash alg="SHA-512">85473a29d23292f49092af9e7a7a63993206847c53b3e71f3c67245d68f7b19cc7c341e0ece409eb5e96602df98a848e957d8691fdd2c5fcddd807df9078255e</hash>
-        <hash alg="SHA-384">5c54d6c497cb329c3424a30319bf657ea222349eadc5ae74c30e8dc1525d7b60b7785f4d20370267b03343dd738cc13e</hash>
-        <hash alg="SHA3-384">98ff0b2a4dfc1faf319d4b0d38376c3c7a58b65d071db293232eed810adf2e525fecee3be45c99b41e20cf6a3a8ebef9</hash>
-        <hash alg="SHA3-256">2dba45f78a0d37402083975e18dbb3201705faf7e533c3e9721b9364c2a1ab0f</hash>
-        <hash alg="SHA3-512">76ef73198269cfd0922f4ae86c8b7e6a9cd1b96ee55da43ebfe57dd34365cc1c5c5630fadf79e46156a52b6b96b7d1f694f5e4f5c4f6a3d3ebb31c927e414435</hash>
-      </hashes>
+    <component type="library" bom-ref="pkg:maven/org.jreleaser/jreleaser-model-impl@1.6.0?type=jar">
+      <group>org.jreleaser</group>
+      <name>jreleaser-model-impl</name>
+      <version>1.6.0</version>
+      <description>JReleaser Model implementation</description>
       <licenses>
         <license>
           <id>Apache-2.0</id>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
         </license>
       </licenses>
-      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.2?type=jar</purl>
+      <purl>pkg:maven/org.jreleaser/jreleaser-model-impl@1.6.0?type=jar</purl>
       <modified>false</modified>
-      <externalReferences><reference type="vcs"><url>https://github.com/FasterXML/jackson-databind</url></reference></externalReferences>
+      <externalReferences><reference type="vcs"><url>https://github.com/jreleaser/jreleaser</url></reference></externalReferences>
     </component>
-    <component type="library" bom-ref="pkg:maven/org.jreleaser/jreleaser-resource-bundle@1.6.0?type=jar">
-      <group>org.jreleaser</group>
-      <name>jreleaser-resource-bundle</name>
-      <version>1.6.0</version>
+    <component type="library" bom-ref="pkg:maven/com.github.luben/zstd-jni@1.5.4-1?type=jar">
+      <publisher>com.github.luben</publisher>
+      <group>com.github.luben</group>
+      <name>zstd-jni</name>
+      <version>1.5.4-1</version>
+      <description>JNI bindings for Zstd native library that provides fast and high compression lossless algorithm for Java and all JVM languages.</description>
       <hashes>
-        <hash alg="MD5">8419930ec5e42489dad5e26749a994eb</hash>
-        <hash alg="SHA-1">050aba092fa794e0cb91158de894a97aff581356</hash>
-        <hash alg="SHA-256">38434b31fac439399aa37018fa69302a9d1b04be6efb7b23d53d18615e1f4f2b</hash>
-        <hash alg="SHA-512">c77c476e972e17b25de3aecf75d71482535d68cdc5e4bf556f5d4cab17345b9318d47fa42c9da671769f9bcf7f549efde70b64eff5cb189c805bb406fd705cb8</hash>
-        <hash alg="SHA-384">b1d8f56681f39c638806e669447d9600507946448b528060d98afc2123c637980ba5609aba4b357c83acd772bfbdb73e</hash>
-        <hash alg="SHA3-384">74a52a9891c520a0f90ffbab33da0219cd787bbe309ae8eca303de00c6041692554e8d650a6a3925e057322bd00700ff</hash>
-        <hash alg="SHA3-256">304bae90a7c53e6ad711e54bb8847c3eedc0e18cac03bffa14729918cb59efce</hash>
-        <hash alg="SHA3-512">16a31cb40ed20dcaa5d34cb6aa2b81325f285b7feb5dda2486206496449fd548ef51117b38a8074a4a106fba9836de72232762dff60f535cd76f5848860c2f6c</hash>
+        <hash alg="MD5">e787241d6ec56aac451be8b0d920c85b</hash>
+        <hash alg="SHA-1">291ccaacc039e41932de877303edb6af98a91c24</hash>
+        <hash alg="SHA-256">f0469d891127dc5ae6bd2df93a5aa38c4d79bcd5f360fbb88c2785b52a572349</hash>
+        <hash alg="SHA-512">368916f0057d69fa4ba3768f6f617291ce4083b89913e46c2daa68cc94c48b92e0ca626241486f34a4d154502eb77b19e82c16c68b341ecfc82ccc0520f8d4a9</hash>
+        <hash alg="SHA-384">7e72184873689fa286d93d88f69f8baa24f818fcd61105a14332fbb5ed254363c0969afa98befd797a3762577bc77993</hash>
+        <hash alg="SHA3-384">1302636797b291dbbe19f39bdeb66160c1317b395a0a9360ba93aeaa262de7ad8de7257e6a997a9c659fdf53b3367ee6</hash>
+        <hash alg="SHA3-256">54505ed16257a55330bb44c76719a687251d2623fa5e50a192b54c5067573255</hash>
+        <hash alg="SHA3-512">6e01cc9654c2d68c36a284e23c388267ac7013d534cceed0b6ab44679a6bbb6d03d4cfc52c967c4e76dbd5b8963c268e40d9890c927866ea00824821b0ecb82d</hash>
       </hashes>
-      <licenses/>
-      <purl>pkg:maven/org.jreleaser/jreleaser-resource-bundle@1.6.0?type=jar</purl>
+      <licenses>
+        <license>
+          <id>BSD-2-Clause</id>
+        </license>
+      </licenses>
+      <purl>pkg:maven/com.github.luben/zstd-jni@1.5.4-1?type=jar</purl>
       <modified>false</modified>
     </component>
-    <component type="library" bom-ref="pkg:maven/com.googlecode.javaewah/JavaEWAH@1.2.3?type=jar">
-      <group>com.googlecode.javaewah</group>
-      <name>JavaEWAH</name>
-      <version>1.2.3</version>
-      <description>The bit array data structure is implemented in Java as the BitSet class. Unfortunately, this fails to scale without compression.
-  JavaEWAH is a word-aligned compressed variant of the Java bitset class. It uses a 64-bit run-length encoding (RLE) compression scheme.
-  The goal of word-aligned compression is not to achieve the best compression, but rather to improve query processing time. Hence, we try to save CPU cycles, maybe at the expense of storage. However, the EWAH scheme we implemented is always more efficient storage-wise than an uncompressed bitmap (implemented in Java as the BitSet class). Unlike some alternatives, javaewah does not rely on a patented scheme.</description>
+    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.2?type=jar">
+      <group>com.fasterxml.jackson.core</group>
+      <name>jackson-annotations</name>
+      <version>2.14.2</version>
+      <description>Core annotations used for value types, used by Jackson data binding package.</description>
       <hashes>
-        <hash alg="MD5">8fdeda28c1fb10e67b3d79f86bef5e61</hash>
-        <hash alg="SHA-1">13a27c856e0c8808cee9a64032c58eee11c3adc9</hash>
-        <hash alg="SHA-256">d65226949713c4c61a784f41c51167e7b0316f93764398ebba9e4336b3d954c2</hash>
-        <hash alg="SHA-512">48cd9df9252c58e9ffe4583e68607944bcdf2ad7a3be7b4317467f503c4f56cdbde358ca7c4f34fa620d01615072a42f3a572fc4f1237e266310b7508e79bcac</hash>
-        <hash alg="SHA-384">d1fd074f21b8a54a07d3f4579376d7c3ab72f24814ebc9ba92344e9da4721e9bfa3cda3a599137e4ddf2395a3c5b88e4</hash>
-        <hash alg="SHA3-384">a553864f196f73c139a104170ab79e780046fb5f322072c5494a6590361021f875afd7168f858b0531b61918ab49b94e</hash>
-        <hash alg="SHA3-256">bab97f3f893af36c36218a151b0c3fece27d47f358cc19e1ca9c22d77942bb76</hash>
-        <hash alg="SHA3-512">be817b93c7093d44ec8dded565d7e5651772ce38e9c72283c05191b33d0ecb2798cd385395f553500446573ac49dccc21f4ba3067d71eb89e03daa384d0193be</hash>
+        <hash alg="MD5">10d19982a8890f6eb37557af2f58e272</hash>
+        <hash alg="SHA-1">a7aae9525864930723e3453ab799521fdfd9d873</hash>
+        <hash alg="SHA-256">2c6869d505cf60dc066734b7d50339f975bd3adc635e26a78abb71acb4473c0d</hash>
+        <hash alg="SHA-512">a978384791bdc074df8039ffc95bb93f0f60d14d476861ee2a0ce208b33a991c486a07345cb80559252c3ff1dea14d3efb818c19bdc18435946dc8754d8e6ee3</hash>
+        <hash alg="SHA-384">d5111c69020666689414921ae4a8950f9fbdf86dec1360f6827beeee9ebd3f78db74e69c76e0becaba47eb34fdaaeb5a</hash>
+        <hash alg="SHA3-384">53b1a8891482e16a7d8849251cb0dcd1aacf6aaa2161a73589d9742ad96763e384d426d04db762e56fc4536f4e719084</hash>
+        <hash alg="SHA3-256">14f7b3c51c96f7429f7c60a69e3b7e4f9f2207820141f197d56b57018ffd5640</hash>
+        <hash alg="SHA3-512">75e4e4fb847fdacdd497cf6b340362581ab4091120ccf2ec32a273709d336af0f78c90ce12b2dd1d17354aa08583af0d3ded89bb415720f45f2d9c110d71dd7a</hash>
       </hashes>
       <licenses>
         <license>
           <id>Apache-2.0</id>
         </license>
       </licenses>
-      <purl>pkg:maven/com.googlecode.javaewah/JavaEWAH@1.2.3?type=jar</purl>
+      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.2?type=jar</purl>
       <modified>false</modified>
-      <externalReferences><reference type="issue-tracker"><url>https://github.com/lemire/javaewah/issues</url></reference><reference type="vcs"><url>scm:git:git@github.com:lemire/javaewah.git</url></reference></externalReferences>
+      <externalReferences><reference type="vcs"><url>https://github.com/FasterXML/jackson-annotations</url></reference></externalReferences>
     </component>
-    <component type="library" bom-ref="pkg:maven/commons-io/commons-io@2.11.0?type=jar">
-      <group>commons-io</group>
-      <name>commons-io</name>
-      <version>2.11.0</version>
-      <description>The Apache Commons IO library contains utility classes, stream implementations, file filters,
-file comparators, endian transformation classes, and much more.</description>
+    <component type="library" bom-ref="pkg:maven/io.github.openfeign.form/feign-form@3.8.0?type=jar">
+      <group>io.github.openfeign.form</group>
+      <name>feign-form</name>
+      <version>3.8.0</version>
       <hashes>
-        <hash alg="MD5">3b4b7ccfaeceeac240b804839ee1a1ca</hash>
-        <hash alg="SHA-1">a2503f302b11ebde7ebc3df41daebe0e4eea3689</hash>
-        <hash alg="SHA-256">961b2f6d87dbacc5d54abf45ab7a6e2495f89b75598962d8c723cea9bc210908</hash>
-        <hash alg="SHA-512">5bd78eed456ede30119319c5bed8e3e4c443b6fd7bdb3a7a5686647bd83094d0c3e2832a7575cfb60e4ef25f08106b93476939d3adcfecf5533cc030b3039e10</hash>
-        <hash alg="SHA-384">114f1e324d90ad887c177876d410f5787a8e8da6c48d4b2862d365802c0efded3a88cb24046976bf6276cadad3712f0f</hash>
-        <hash alg="SHA3-384">80288c03ad4d80d69f91d056ffc5570d49a9c76bf54ad2dff0121ecde26a560df76d05156f281f5c6db2a38ff07a873d</hash>
-        <hash alg="SHA3-256">5adfb5ccaf5f21a549422f426118a9542673926fcd18c68390cf813e791dcf6c</hash>
-        <hash alg="SHA3-512">7573f47f0babb53cefdc7c2309a0b982d800139064537b0797da442853d081010ad7c3c74a500598a0f800639a5d540eca21963ea652c68613907059bd4278c2</hash>
+        <hash alg="MD5">ab48cdaa9aecefe5e938873ba2db3bb0</hash>
+        <hash alg="SHA-1">3083889996b18443c275a352d3ab4bc6c8321598</hash>
+        <hash alg="SHA-256">b21d37321b390995c90b5dbb4ff0c33f09d1cc7768207cc0da910ad20bf58961</hash>
+        <hash alg="SHA-512">3a1718c21e4caffcd5f686d2cde011b2f72a026d03caa03b876ad6e7c8c40b7bd59189eed6efa0654bf988a438775ef2c429fae497d502c1806c8c4d9d474c2e</hash>
+        <hash alg="SHA-384">02b96ee7cb8c67cdfe63422247035cbb003b7423a82756714d36de926118ac5e96c407fd324090c851962c63f7d4fd6f</hash>
+        <hash alg="SHA3-384">0d63a4c22216be6259584b62d3753a86220ea181a002641cda45de153501272fd79b7064d21bdee0ecd8129194fd7c3e</hash>
+        <hash alg="SHA3-256">ffc2832df09d0edf0251c5e6def39b6c36fd2c02c55ad29f0e63e3160cb709e1</hash>
+        <hash alg="SHA3-512">c2013da332e97e32962ee34459c5834b04ab2f6598960cb06e4f247a2683ced3fac3919d15151be4dae083c74911c7ead1906faabfc8a7cb6245fcd7138ef0df</hash>
       </hashes>
       <licenses>
         <license>
           <id>Apache-2.0</id>
         </license>
       </licenses>
-      <purl>pkg:maven/commons-io/commons-io@2.11.0?type=jar</purl>
+      <purl>pkg:maven/io.github.openfeign.form/feign-form@3.8.0?type=jar</purl>
       <modified>false</modified>
-      <externalReferences><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/IO</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-io.git</url></reference></externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:maven/org.jreleaser/jreleaser-logger-api@1.6.0?type=jar">
+      <group>org.jreleaser</group>
+      <name>jreleaser-logger-api</name>
+      <version>1.6.0</version>
+      <description>JReleaser logger API</description>
+      <licenses>
+        <license>
+          <id>Apache-2.0</id>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+        </license>
+      </licenses>
+      <purl>pkg:maven/org.jreleaser/jreleaser-logger-api@1.6.0?type=jar</purl>
+      <modified>false</modified>
+      <externalReferences><reference type="vcs"><url>https://github.com/jreleaser/jreleaser</url></reference></externalReferences>
     </component>
     <component type="library" bom-ref="pkg:maven/org.jreleaser/jreleaser-utils@1.6.0?type=jar">
       <group>org.jreleaser</group>
       <name>jreleaser-utils</name>
       <version>1.6.0</version>
-      <hashes>
-        <hash alg="MD5">ca784b5aa352b016a37b393e9e500325</hash>
-        <hash alg="SHA-1">b0dde5ebbe5a98e5fa90b101dca5ad56e92c49c8</hash>
-        <hash alg="SHA-256">02b038af2f098d6019b94f4f4e55b8f901d2b5b4a072b083b23e47bd6a3e23cd</hash>
-        <hash alg="SHA-512">9b5e03766473ee854f877182a758a4842a9566772405af73cd200388eeeb981712e6a3e57f4f2f14f09a912b0cad625a75c5441b57eaa238699beabf327dd56a</hash>
-        <hash alg="SHA-384">ebc800a8a0a6d19ac2bc922598f8913df5a5eb972dc46ba4eadec5034538c9c95866839670dbf92ca93b075dcb659a0c</hash>
-        <hash alg="SHA3-384">ed0ba35caf8b7d7dc67d7350617b6cbd54de336634fd5927f03768a89f74ede798ecf343964ef0484302ee262617756b</hash>
-        <hash alg="SHA3-256">b81154ce5c428820626ee1a99e7f9bbe63d4803f7f311744a26bb8331fb193cc</hash>
-        <hash alg="SHA3-512">b6429f8944cedd026f7b0c30328f8b5e2717493624cee82df48f7e69c8fe8a26b0542d447b1795c7fad7ff90affadcc087d69a576d69cbaccf3ccf1ca962be56</hash>
-      </hashes>
-      <licenses/>
+      <description>JReleaser utility classes</description>
+      <licenses>
+        <license>
+          <id>Apache-2.0</id>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+        </license>
+      </licenses>
       <purl>pkg:maven/org.jreleaser/jreleaser-utils@1.6.0?type=jar</purl>
       <modified>false</modified>
+      <externalReferences><reference type="vcs"><url>https://github.com/jreleaser/jreleaser</url></reference></externalReferences>
     </component>
-    <component type="library" bom-ref="pkg:maven/org.bouncycastle/bcprov-jdk15on@1.70?type=jar">
+    <component type="library" bom-ref="pkg:maven/org.bouncycastle/bcpg-jdk15on@1.70?type=jar">
       <group>org.bouncycastle</group>
-      <name>bcprov-jdk15on</name>
+      <name>bcpg-jdk15on</name>
       <version>1.70</version>
-      <description>The Bouncy Castle Crypto package is a Java implementation of cryptographic algorithms. This jar contains JCE provider and lightweight API for the Bouncy Castle Cryptography APIs for JDK 1.5 and up.</description>
+      <description>The Bouncy Castle Java API for handling the OpenPGP protocol. This jar contains the OpenPGP API for JDK 1.5 and up. The APIs can be used in conjunction with a JCE/JCA provider such as the one provided with the Bouncy Castle Cryptography APIs.</description>
       <hashes>
-        <hash alg="MD5">1809d0449a6374279c01fdd3be26cd92</hash>
-        <hash alg="SHA-1">4636a0d01f74acaf28082fb62b317f1080118371</hash>
-        <hash alg="SHA-256">8f3c20e3e2d565d26f33e8d4857a37d0d7f8ac39b62a7026496fcab1bdac30d4</hash>
-        <hash alg="SHA-512">7dccfc636ee4df1487615818cfa99c69941081df95e8ef1eaf4bca165594dff9547e3774fd70de3418abace77d2c45889f70bcd2e6823f8539f359e68eaf36d1</hash>
-        <hash alg="SHA-384">a0b35d204cd962f1d246fa94b6e8b0fcee1a7c3f37b7e87cda742f2124a25b48794ce11a903ea8d12009c86227b6808d</hash>
-        <hash alg="SHA3-384">980d81d3d9906764bbf2ae9b3b364ea58628b485ce1dc3d06734e10495d79f2be2e7cc7df61ac88cd67c1104c7af9393</hash>
-        <hash alg="SHA3-256">10a3572e42d29f609721d795116e3e5d0f6f03efef84bb979ce72e26908d242b</hash>
-        <hash alg="SHA3-512">a0761cb6deeb86c94b96850c72c0a0eaf516ca849f4b8268f9f60c9ed2a6730e692c15098d47e617da294e931113c6cbcaddec8957c9f029fa595b5f14ff35ac</hash>
+        <hash alg="MD5">01ddc3aa0289346f4db19d95039cefdb</hash>
+        <hash alg="SHA-1">062f72ec06f31a6c31a3f3355fce0384b21126d7</hash>
+        <hash alg="SHA-256">4f08f4aa74048824151c98dd3e92e7165ac30659834404f08a8e843bdad32847</hash>
+        <hash alg="SHA-512">4e240b7811ef90c090e83a181dace41da487555e4136221861b0060f9af6d8b316f2dd0472f747adb98ca5372f46055456ef04bdc0c3992188ab13302922fce9</hash>
+        <hash alg="SHA-384">d89dec6226112d13cbea461d84740699770dd7d8ad3f67ab65e7b49fd08a096a948e54da2e6a681925c4320f410bba37</hash>
+        <hash alg="SHA3-384">5e8e8ca63cc550a8f50b627c4dd051f0eb5c31b99ff53dabd7d5f5d1ed98d0dc1d4963a09fc0db32f8e0ff769a2a6e65</hash>
+        <hash alg="SHA3-256">77f28e7e22b3b3a8d7b667fb7f783847c4b11ee7208833636e09e8b38390fd51</hash>
+        <hash alg="SHA3-512">cb238dbb641c42c49b5801bdfa6432395e860c1a7485ba68e2d57887e3d22ff254718c6cbfa34c107bfb09d74e2f85c33b95f89dfa886e141a8247a0abf2b5c2</hash>
       </hashes>
       <licenses>
         <license>
           <name>Bouncy Castle Licence</name>
           <url>https://www.bouncycastle.org/licence.html</url>
         </license>
+        <license>
+          <id>Apache-1.1</id>
+          <url>http://apache.org/licenses/LICENSE-1.1</url>
+        </license>
       </licenses>
-      <purl>pkg:maven/org.bouncycastle/bcprov-jdk15on@1.70?type=jar</purl>
+      <purl>pkg:maven/org.bouncycastle/bcpg-jdk15on@1.70?type=jar</purl>
       <modified>false</modified>
       <externalReferences><reference type="issue-tracker"><url>https://github.com/bcgit/bc-java/issues</url></reference><reference type="vcs"><url>https://github.com/bcgit/bc-java</url></reference></externalReferences>
     </component>
-    <component type="library" bom-ref="pkg:maven/org.jreleaser/jreleaser-signing-java-sdk@1.6.0?type=jar">
+    <component type="library" bom-ref="pkg:maven/org.jreleaser/jreleaser-java-sdk-commons@1.6.0?type=jar">
       <group>org.jreleaser</group>
-      <name>jreleaser-signing-java-sdk</name>
+      <name>jreleaser-java-sdk-commons</name>
       <version>1.6.0</version>
+      <description>Utilities for Java SDKs</description>
+      <licenses>
+        <license>
+          <id>Apache-2.0</id>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+        </license>
+      </licenses>
+      <purl>pkg:maven/org.jreleaser/jreleaser-java-sdk-commons@1.6.0?type=jar</purl>
+      <modified>false</modified>
+      <externalReferences><reference type="vcs"><url>https://github.com/jreleaser/jreleaser</url></reference></externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:maven/io.github.openfeign/feign-jackson@12.3?type=jar">
+      <group>io.github.openfeign</group>
+      <name>feign-jackson</name>
+      <version>12.3</version>
+      <description>Feign Jackson</description>
       <hashes>
-        <hash alg="MD5">2608fa713b1fa2a515ec2c83ec96a49c</hash>
-        <hash alg="SHA-1">f0de8990fee988060fe7721d389d6ba8aad481a4</hash>
-        <hash alg="SHA-256">ea0e35358f453eee98d0a4e921bfa6114c04afe52adb0c74bcc5200092971454</hash>
-        <hash alg="SHA-512">4d0146d43526b329139bb38edbe63f6f783ae99f5d2778c6c6af8851be458739afe31951bf8e54f85da7c6e5d5e7d4670b45917c6ffa855f578355a6359286a6</hash>
-        <hash alg="SHA-384">a29024fbd6fb57818b5800cb961a043d4d131e4c16d0b6965a4abd4ef275001bd607697195f562e6b3d4f36fac5847b0</hash>
-        <hash alg="SHA3-384">5b9e053c6b9a48483a7cdd898f37fc72275171348ed4433b9759e0a4f86edad6a26c84ed69eae8612811e17b806df60a</hash>
-        <hash alg="SHA3-256">477c36bff3a1ec95810622a43d43ea9b1c614c54306897d9c4ee66f2a349a9e9</hash>
-        <hash alg="SHA3-512">b6594d20048651c4982230202c5af186f064025bf80d21c87d4cacb3d1b466bc1e5c850fea374edf9c3c98fda734ea52284bd62bbd456aee903c705152d767da</hash>
+        <hash alg="MD5">8bbba5bba4c26edb1b5c89e1a4912c22</hash>
+        <hash alg="SHA-1">583c0ce0354e6ed81d998d5b8f1786ade1e9f2c4</hash>
+        <hash alg="SHA-256">1dfc43d604693ce51ef3935f27dbfecd2d65636699a088eee32ff37cc50ea479</hash>
+        <hash alg="SHA-512">8ea71fae9a2a4ad9d06f27e21e078001e1a29761af85e81b91bf2a38e4dd8841184a12fdf467915c234d080aa28484452fe45b9bc0a381ce23d8366b03be1395</hash>
+        <hash alg="SHA-384">03553ac35a79266a150940fc62d3da7a389b47825102d91392f37b719da94af2d2355c2592d2b68604bf84248c73baf9</hash>
+        <hash alg="SHA3-384">986284d22c0bbb7abfbc1762447a44d0919c266002d6925c4ca75040f3950a3d943a71dedf2f72592e6a185218c498a9</hash>
+        <hash alg="SHA3-256">60242fd373d71575ffcb8a4f866b27d291b6acecf83be67e6ff51a13559dc016</hash>
+        <hash alg="SHA3-512">b7e0392fc793f19b3daf64c7e7b875fb2e4ec7ba2f1681d51c14c5c9efd5991817766753e62999a76bad83c624601f9f5a55304c4e06d2e3cd88ec4c609a1ede</hash>
       </hashes>
-      <licenses/>
-      <purl>pkg:maven/org.jreleaser/jreleaser-signing-java-sdk@1.6.0?type=jar</purl>
+      <licenses>
+        <license>
+          <id>Apache-2.0</id>
+        </license>
+      </licenses>
+      <purl>pkg:maven/io.github.openfeign/feign-jackson@12.3?type=jar</purl>
       <modified>false</modified>
     </component>
-    <component type="library" bom-ref="pkg:maven/com.github.spullara.mustache.java/compiler@0.9.10?type=jar">
-      <group>com.github.spullara.mustache.java</group>
-      <name>compiler</name>
-      <version>0.9.10</version>
-      <description>Implementation of mustache.js for Java</description>
+    <component type="library" bom-ref="pkg:maven/org.jreleaser/jreleaser-git-java-sdk@1.6.0?type=jar">
+      <group>org.jreleaser</group>
+      <name>jreleaser-git-java-sdk</name>
+      <version>1.6.0</version>
+      <description>Java SDK for Git</description>
+      <licenses>
+        <license>
+          <id>Apache-2.0</id>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+        </license>
+      </licenses>
+      <purl>pkg:maven/org.jreleaser/jreleaser-git-java-sdk@1.6.0?type=jar</purl>
+      <modified>false</modified>
+      <externalReferences><reference type="vcs"><url>https://github.com/jreleaser/jreleaser</url></reference></externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:maven/org.jreleaser/jreleaser-model-api@1.6.0?type=jar">
+      <group>org.jreleaser</group>
+      <name>jreleaser-model-api</name>
+      <version>1.6.0</version>
+      <description>JReleaser Model API</description>
+      <licenses>
+        <license>
+          <id>Apache-2.0</id>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+        </license>
+      </licenses>
+      <purl>pkg:maven/org.jreleaser/jreleaser-model-api@1.6.0?type=jar</purl>
+      <modified>false</modified>
+      <externalReferences><reference type="vcs"><url>https://github.com/jreleaser/jreleaser</url></reference></externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:maven/org.eclipse.jgit/org.eclipse.jgit@5.13.0.202109080827-r?type=jar">
+      <group>org.eclipse.jgit</group>
+      <name>org.eclipse.jgit</name>
+      <version>5.13.0.202109080827-r</version>
+      <description>Repository access and algorithms</description>
       <hashes>
-        <hash alg="MD5">5638fc78a17d5063cc4b0d00f6e87491</hash>
-        <hash alg="SHA-1">6111ae24e3be9ecbd75f5fe908583fc14b4f0174</hash>
-        <hash alg="SHA-256">2b5a9217811cb99846a473fa8e0d233eb33629347b7f44941f6c0fbd4cdf1038</hash>
-        <hash alg="SHA-512">2ccf3196af2b518c96df748a72a0122d033dc222e1fab3e12f3e2094146d44bec20bd1502390b59abf090cbdf5dd4d580084b07fb7241248b5b8da2605207559</hash>
-        <hash alg="SHA-384">0204e77a4a64701af5000df6601f4f4c23cb5e53dd39a1325615d4f942cd2c91d04bbac20348ae49731f586282165c33</hash>
-        <hash alg="SHA3-384">0960da7175835484471f485d481499f8b65f134ff4f1629618560adaa5a08caa897fbefcea190f93106ee9e3273381b2</hash>
-        <hash alg="SHA3-256">cfb7e640392ef590069e6b1d059dc20b8fcff984a4b267b3969fcf50ed0edd4f</hash>
-        <hash alg="SHA3-512">db3dad3809879bca835a04da890fd86dbc58ba6637c72f07d02e39d13645ebb6c640b7fecc18a779e58946072078bdf114b91445026a32dd6501b5d1c6e7d933</hash>
+        <hash alg="MD5">5a1f197785cb9c69d1241cb0f16937a2</hash>
+        <hash alg="SHA-1">32badd5adebd660424509344259ad3e409699ba2</hash>
+        <hash alg="SHA-256">dabf8369f0cdf8cf17b7f7da4bda9320c570bb754c88e0beb7b852812cf5cd25</hash>
+        <hash alg="SHA-512">768dbb3ba2649a7025338197b4703b414983e4608138719b0d69201f7f49e57e0454846b41b775b135b083f820824749da6121f20a812c4f155a97f09c9b15ac</hash>
+        <hash alg="SHA-384">deb24e724ace28ddbaf5e7a1fafaa449a49b97d3a5a53eb487a2ab90895f05684c48a839e3677643364ff965cc33af95</hash>
+        <hash alg="SHA3-384">e5aed5403b4c28624bc58be31601897555c94eb54e680f1ccb59992a643db24d0de465b7ae879b5ba29d56a132a87b69</hash>
+        <hash alg="SHA3-256">8ccc07758fbf1ac55028538890afe7d209c866ee019875ef15acfaea9ac7244f</hash>
+        <hash alg="SHA3-512">4725fff9b6067d70d4c82cbf549b16be521e839d5c8ecf605f9a71516ec78334e348cb2d3303afb7ba18ce464a68c1e195bb6fe673d9d4d6b8d75c84d0b4e101</hash>
       </hashes>
       <licenses>
         <license>
+          <id>BSD-3-Clause</id>
+        </license>
+      </licenses>
+      <purl>pkg:maven/org.eclipse.jgit/org.eclipse.jgit@5.13.0.202109080827-r?type=jar</purl>
+      <modified>false</modified>
+    </component>
+    <component type="library" bom-ref="pkg:maven/io.github.openfeign/feign-core@12.3?type=jar">
+      <group>io.github.openfeign</group>
+      <name>feign-core</name>
+      <version>12.3</version>
+      <description>Feign Core</description>
+      <hashes>
+        <hash alg="MD5">9e6e1ff8b68d2b6c1fc5bdc7ff208030</hash>
+        <hash alg="SHA-1">d280b09a17b63e69788fd3d8d215b7013ab48b16</hash>
+        <hash alg="SHA-256">939fbed2c2392a9633bc1d26f0ef9e934b059d1a9a9d4d966cedaf9075c546ec</hash>
+        <hash alg="SHA-512">8335901d8918747dc29d37a2ac630c6a78ea6ff04bfea77e6d8c74188e9e584142920996c45120caa86299486949a04e1ec1f1bef30229904360fcb5c5d4a1c4</hash>
+        <hash alg="SHA-384">dc7a0d10bdf2c3aeafba83ca7e41d21c3288f3df0b76e339788fcf7606381970b6429108dbf2d1212075d1feba040842</hash>
+        <hash alg="SHA3-384">2907938ea76735cde9b34676c6c8b04786f1595687f96734e7659768175cb7a525508f84c48d9b10b0b2f593158e1ed5</hash>
+        <hash alg="SHA3-256">474f6b0ab420bf63549ed123fff99b73fc881771c6a0c591e58dfb17adbe9899</hash>
+        <hash alg="SHA3-512">553a6dc1c3cf7facdb3b4e15be1d6d90259f1d36ce137db3a6e53a967ef4939aaa98c974b059c8f32dd42316bb7eee3b51910cf0fb172d0df9b8ff39d8cc722d</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <id>Apache-2.0</id>
+        </license>
+      </licenses>
+      <purl>pkg:maven/io.github.openfeign/feign-core@12.3?type=jar</purl>
+      <modified>false</modified>
+    </component>
+    <component type="library" bom-ref="pkg:maven/org.jreleaser/jreleaser-resource-bundle@1.6.0?type=jar">
+      <group>org.jreleaser</group>
+      <name>jreleaser-resource-bundle</name>
+      <version>1.6.0</version>
+      <description>JReleaser resource bundle</description>
+      <licenses>
+        <license>
           <id>Apache-2.0</id>
           <url>https://www.apache.org/licenses/LICENSE-2.0</url>
         </license>
       </licenses>
-      <purl>pkg:maven/com.github.spullara.mustache.java/compiler@0.9.10?type=jar</purl>
+      <purl>pkg:maven/org.jreleaser/jreleaser-resource-bundle@1.6.0?type=jar</purl>
       <modified>false</modified>
-      <externalReferences><reference type="vcs"><url>http://github.com/spullara/mustache.java</url></reference></externalReferences>
+      <externalReferences><reference type="vcs"><url>https://github.com/jreleaser/jreleaser</url></reference></externalReferences>
     </component>
-    <component type="library" bom-ref="pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar">
-      <group>org.apache.httpcomponents</group>
-      <name>httpcore</name>
-      <version>4.4.16</version>
-      <description>Apache HttpComponents Core (blocking I/O)</description>
+    <component type="library" bom-ref="pkg:maven/org.jreleaser/jreleaser-signing-java-sdk@1.6.0?type=jar">
+      <group>org.jreleaser</group>
+      <name>jreleaser-signing-java-sdk</name>
+      <version>1.6.0</version>
+      <description>JReleaser signing Java SDK</description>
+      <licenses>
+        <license>
+          <id>Apache-2.0</id>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+        </license>
+      </licenses>
+      <purl>pkg:maven/org.jreleaser/jreleaser-signing-java-sdk@1.6.0?type=jar</purl>
+      <modified>false</modified>
+      <externalReferences><reference type="vcs"><url>https://github.com/jreleaser/jreleaser</url></reference></externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:maven/io.github.openfeign/feign-httpclient@12.3?type=jar">
+      <group>io.github.openfeign</group>
+      <name>feign-httpclient</name>
+      <version>12.3</version>
+      <description>Feign Apache HttpClient</description>
       <hashes>
-        <hash alg="MD5">28d2cd9bf8789fd2ec774fb88436ebd1</hash>
-        <hash alg="SHA-1">51cf043c87253c9f58b539c9f7e44c8894223850</hash>
-        <hash alg="SHA-256">6c9b3dd142a09dc468e23ad39aad6f75a0f2b85125104469f026e52a474e464f</hash>
-        <hash alg="SHA-512">168026436a6bcf5e96c0c59606638abbdc30de4b405ae55afde70fdf2895e267a3d48bba6bdadc5a89f38e31da3d9a9dc91e1cab7ea76f5e04322cf1ec63b838</hash>
-        <hash alg="SHA-384">ba9ceaee1a37ca3201d6a1315ecb0327b495489efd0baa155c219c475df8d3eb69fe77ab0026563db406497626da6562</hash>
-        <hash alg="SHA3-384">b9dc44dcc7cc86d5036f26d54c4003a2d72808ae7b07a0808bb53505c6d4281b5ad213eb1f3d0fef1113dec57cb0dfe1</hash>
-        <hash alg="SHA3-256">fd8ab51846476c6c18822151c9ec07b39a9633010b5d20ea937fc6910407bc64</hash>
-        <hash alg="SHA3-512">b42fa528242981a9d70e4f68ab75a24292df5112c44c21b6f18cb9201ce747885ba1d4dc69bc3d14d0da46a6c2638f937c11bc45749abeb55dc89ddada90cdda</hash>
+        <hash alg="MD5">4ec31fa7f187c15f9967c7ffcf714449</hash>
+        <hash alg="SHA-1">0ea51fdb4797c3ab62e1f8a726d4e02cf522dba2</hash>
+        <hash alg="SHA-256">3a2833e18cc868bff19d6320f22054f96995dc073ed27edfeb2d83996d2ef37c</hash>
+        <hash alg="SHA-512">3440afa129150c035670cd098e6eba6f676afc82db2db53a10b20621e30658b411d820652e4668dab5ca615f599a41a06dc826378b5e783f88f26c2cddfce8ed</hash>
+        <hash alg="SHA-384">b8dc38126b28fb486d459e23ae61a34073f16f0ef7ec37f49636919d0fd5a8d86354d76314462dba94efd4f613db92ef</hash>
+        <hash alg="SHA3-384">7c4161078011223122067406e5ad6efedfcf45c71d6e081f37e3fba1c73578c748d5a5e60d372a5fa7159ec7737e71bb</hash>
+        <hash alg="SHA3-256">b6d851642b9a5628dbe3cab5706c9d434f1d59ec881cd5cdf6fae84f644eb7c1</hash>
+        <hash alg="SHA3-512">9b3b7edc25efc7345a9cc7b2fe0eccefd57fa40d62e6a85b4a698827b9c34ff568236d591f6d5645de7eb275be2b10aee80f42881f6068f0b1c38f274faf4c5f</hash>
       </hashes>
       <licenses>
         <license>
           <id>Apache-2.0</id>
         </license>
       </licenses>
-      <purl>pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar</purl>
+      <purl>pkg:maven/io.github.openfeign/feign-httpclient@12.3?type=jar</purl>
       <modified>false</modified>
     </component>
+    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.2?type=jar">
+      <group>com.fasterxml.jackson.core</group>
+      <name>jackson-core</name>
+      <version>2.14.2</version>
+      <description>Core Jackson processing abstractions (aka Streaming API), implementation for JSON</description>
+      <hashes>
+        <hash alg="MD5">6ee422ee4c481b2d5aacb2b5e36a7dc0</hash>
+        <hash alg="SHA-1">f804090e6399ce0cf78242db086017512dd71fcc</hash>
+        <hash alg="SHA-256">b5d37a77c88277b97e3593c8740925216c06df8e4172bbde058528df04ad3e7a</hash>
+        <hash alg="SHA-512">208953cf72691b3bab1ca2f9a045cccd3d75c46c90099ba884fbf16bc3e45045e5cd014d2c68c96e8a8826f87a5f0e18cb34b35e7ef03348953869c21e197367</hash>
+        <hash alg="SHA-384">e806595862c5fcdae801d9845befc1d12c97e6036ee839d34590dbd785a422d5832cf4fc5c7ee6e1a5ee7a59f37740f0</hash>
+        <hash alg="SHA3-384">4fa59f572f2e100e2eba6fc664a3b9f804fabd911a552cb40805f39e624a9c04246b679cf4b017bb782c8272877f49d2</hash>
+        <hash alg="SHA3-256">cef17d3a539cbf798cfb0bfa9faffa2b7baff3670b50743e91ee58b4c60b59f1</hash>
+        <hash alg="SHA3-512">fceeed5cb8fe4335d88282d15657762a4728483275a7ff45f50b9fe6a999757ccb37c415d001eb6250226f98f5c576b1b36a83e601fb393cfd34a811c2df5d00</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <id>Apache-2.0</id>
+        </license>
+      </licenses>
+      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.2?type=jar</purl>
+      <modified>false</modified>
+      <externalReferences><reference type="vcs"><url>https://github.com/FasterXML/jackson-core</url></reference></externalReferences>
+    </component>
   </components>
   <dependencies>
     <dependency ref="pkg:maven/org.jreleaser/jreleaser-git-java-sdk@1.6.0?type=jar">