--- results/org.jreleaser/jreleaser/1.6.0/oss-rebuild-improved-2/reference/jreleaser-logger-api-1.6.0-cyclonedx.json:jreleaser-logger-api-1.6.0-cyclonedx.json	2025-07-28 23:33:24.055684673 +0200
+++ results/org.jreleaser/jreleaser/1.6.0/oss-rebuild-improved-2/rebuild/jreleaser-logger-api-1.6.0-cyclonedx.json:jreleaser-logger-api-1.6.0-cyclonedx.json	2025-07-28 23:33:25.454679741 +0200
@@ -1,10 +1,10 @@
 {
   "bomFormat" : "CycloneDX",
   "specVersion" : "1.4",
-  "serialNumber" : "urn:uuid:5297aff9-aac6-490b-8525-36c98cdfccf4",
+  "serialNumber" : "urn:uuid:404d2c44-6247-4fc6-bcae-b5aad50321a3",
   "version" : 1,
   "metadata" : {
-    "timestamp" : "2023-04-29T10:07:57Z",
+    "timestamp" : "2025-07-11T06:29:41Z",
     "tools" : [
       {
         "vendor" : "CycloneDX",
@@ -24,106 +24,106 @@
   "components" : [
     {
       "group" : "org.slf4j",
-      "name" : "slf4j-api",
+      "name" : "jcl-over-slf4j",
       "version" : "2.0.7",
-      "description" : "The slf4j API",
+      "description" : "JCL 1.2 implemented over SLF4J",
       "hashes" : [
         {
           "alg" : "MD5",
-          "content" : "403dffa46cdd2e3c82da19df4f394a4c"
+          "content" : "4e8d6cd31f7e6277280c95157ac7845a"
         },
         {
           "alg" : "SHA-1",
-          "content" : "41eb7184ea9d556f23e18b5cb99cad1f8581fc00"
+          "content" : "f127fe5ee53404a8b3697cdd032dd1dd6a29dd77"
         },
         {
           "alg" : "SHA-256",
-          "content" : "5d6298b93a1905c32cda6478808ac14c2d4a47e91535e53c41f7feeb85d946f4"
+          "content" : "41806757e1d26dae5d6db2ca7d4a5176eed2d6e709cd86564d4a11dab0601742"
         },
         {
           "alg" : "SHA-512",
-          "content" : "216d2cac27d501972c888f94dfa747d700b80d60813884b6ab4b12c6a3b17ed0c21a1d27e1aa4332c97c828f20039e3913d2763d7e1a3cef36ae4389a276e7a8"
+          "content" : "221b39b85145cf7c245acb7f2692a02b6c5816f8b1187a1a77942dd39de958c1b01ecd066682eb88244f87b2a47513d40b6c1e69ef49a43b2a07ba818f124e17"
         },
         {
           "alg" : "SHA-384",
-          "content" : "c25b39f418aa726ba8405dfd9b356131f89984e2ef5a55a724a2abf3b7c78443f671105835161d2414d602cf03da9f2d"
+          "content" : "fa8d53b46cd3ddab0bd265d384a90c35efef6a02a7822aa6f79065cee68d78f6ad7c4d248dea7497af449845dc962730"
         },
         {
           "alg" : "SHA3-384",
-          "content" : "f33abfaac21badae6f85d3ebbc6c1204fd7fda3bb15173e763fa8cee95bce6a8270eec2c8f49343c66c8d2767bc317e1"
+          "content" : "cf06cfeaba477f7738f089ba401fb841074681d1c7f465546cdf0e95751a8bf912493428876a7d9108eef83f637c6a1e"
         },
         {
           "alg" : "SHA3-256",
-          "content" : "6e00d4b264a2afc4ca4e98f716ecece66c32c626ca3f8c5d56b22092b6fe417b"
+          "content" : "efbad2de8683215936c56b3f8fd3492f1cc27c2ee77595a99c794e18777dec42"
         },
         {
           "alg" : "SHA3-512",
-          "content" : "ad7b9142d370fc532a07cdd43881a129b012ff50e2bede3ac27d9bd31ec707bf2f45e82002fa59e962955cc38ab73cdd77713fca50cedc926c046f5617c1285b"
+          "content" : "2707d5513e49f6e3ea6dec96510d360cfc125dab164ae5d99a1dcbd628751640f625a70ed749dad66024ae9fd7725f1c6c7f76de7f5a6efc9d8208a9e01922f7"
         }
       ],
       "licenses" : [
         {
           "license" : {
-            "id" : "MIT",
-            "url" : "https://opensource.org/licenses/MIT"
+            "id" : "Apache-2.0"
           }
         }
       ],
-      "purl" : "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar",
+      "purl" : "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.7?type=jar",
       "modified" : false,
       "type" : "library",
-      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar"
+      "bom-ref" : "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.7?type=jar"
     },
     {
       "group" : "org.slf4j",
-      "name" : "jcl-over-slf4j",
+      "name" : "slf4j-api",
       "version" : "2.0.7",
-      "description" : "JCL 1.2 implemented over SLF4J",
+      "description" : "The slf4j API",
       "hashes" : [
         {
           "alg" : "MD5",
-          "content" : "4e8d6cd31f7e6277280c95157ac7845a"
+          "content" : "403dffa46cdd2e3c82da19df4f394a4c"
         },
         {
           "alg" : "SHA-1",
-          "content" : "f127fe5ee53404a8b3697cdd032dd1dd6a29dd77"
+          "content" : "41eb7184ea9d556f23e18b5cb99cad1f8581fc00"
         },
         {
           "alg" : "SHA-256",
-          "content" : "41806757e1d26dae5d6db2ca7d4a5176eed2d6e709cd86564d4a11dab0601742"
+          "content" : "5d6298b93a1905c32cda6478808ac14c2d4a47e91535e53c41f7feeb85d946f4"
         },
         {
           "alg" : "SHA-512",
-          "content" : "221b39b85145cf7c245acb7f2692a02b6c5816f8b1187a1a77942dd39de958c1b01ecd066682eb88244f87b2a47513d40b6c1e69ef49a43b2a07ba818f124e17"
+          "content" : "216d2cac27d501972c888f94dfa747d700b80d60813884b6ab4b12c6a3b17ed0c21a1d27e1aa4332c97c828f20039e3913d2763d7e1a3cef36ae4389a276e7a8"
         },
         {
           "alg" : "SHA-384",
-          "content" : "fa8d53b46cd3ddab0bd265d384a90c35efef6a02a7822aa6f79065cee68d78f6ad7c4d248dea7497af449845dc962730"
+          "content" : "c25b39f418aa726ba8405dfd9b356131f89984e2ef5a55a724a2abf3b7c78443f671105835161d2414d602cf03da9f2d"
         },
         {
           "alg" : "SHA3-384",
-          "content" : "cf06cfeaba477f7738f089ba401fb841074681d1c7f465546cdf0e95751a8bf912493428876a7d9108eef83f637c6a1e"
+          "content" : "f33abfaac21badae6f85d3ebbc6c1204fd7fda3bb15173e763fa8cee95bce6a8270eec2c8f49343c66c8d2767bc317e1"
         },
         {
           "alg" : "SHA3-256",
-          "content" : "efbad2de8683215936c56b3f8fd3492f1cc27c2ee77595a99c794e18777dec42"
+          "content" : "6e00d4b264a2afc4ca4e98f716ecece66c32c626ca3f8c5d56b22092b6fe417b"
         },
         {
           "alg" : "SHA3-512",
-          "content" : "2707d5513e49f6e3ea6dec96510d360cfc125dab164ae5d99a1dcbd628751640f625a70ed749dad66024ae9fd7725f1c6c7f76de7f5a6efc9d8208a9e01922f7"
+          "content" : "ad7b9142d370fc532a07cdd43881a129b012ff50e2bede3ac27d9bd31ec707bf2f45e82002fa59e962955cc38ab73cdd77713fca50cedc926c046f5617c1285b"
         }
       ],
       "licenses" : [
         {
           "license" : {
-            "id" : "Apache-2.0"
+            "id" : "MIT",
+            "url" : "https://opensource.org/licenses/MIT"
           }
         }
       ],
-      "purl" : "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.7?type=jar",
+      "purl" : "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar",
       "modified" : false,
       "type" : "library",
-      "bom-ref" : "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.7?type=jar"
+      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar"
     }
   ],
   "dependencies" : [