--- results/org.jreleaser/jreleaser/1.6.0/oss-rebuild-improved-2/reference/jreleaser-logger-api-1.6.0-cyclonedx.xml:jreleaser-logger-api-1.6.0-cyclonedx.xml	2025-07-28 23:33:34.006649591 +0200
+++ results/org.jreleaser/jreleaser/1.6.0/oss-rebuild-improved-2/rebuild/jreleaser-logger-api-1.6.0-cyclonedx.xml:jreleaser-logger-api-1.6.0-cyclonedx.xml	2025-07-28 23:33:35.013646041 +0200
@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="UTF-8"?>
-<bom serialNumber="urn:uuid:5297aff9-aac6-490b-8525-36c98cdfccf4" version="1" xmlns="http://cyclonedx.org/schema/bom/1.4">
+<bom serialNumber="urn:uuid:404d2c44-6247-4fc6-bcae-b5aad50321a3" version="1" xmlns="http://cyclonedx.org/schema/bom/1.4">
   <metadata>
-    <timestamp>2023-04-29T10:07:57Z</timestamp>
+    <timestamp>2025-07-11T06:29:41Z</timestamp>
     <tools>
       <tool>
         <vendor>CycloneDX</vendor>
@@ -17,6 +17,29 @@
     </component>
   </metadata>
   <components>
+    <component type="library" bom-ref="pkg:maven/org.slf4j/jcl-over-slf4j@2.0.7?type=jar">
+      <group>org.slf4j</group>
+      <name>jcl-over-slf4j</name>
+      <version>2.0.7</version>
+      <description>JCL 1.2 implemented over SLF4J</description>
+      <hashes>
+        <hash alg="MD5">4e8d6cd31f7e6277280c95157ac7845a</hash>
+        <hash alg="SHA-1">f127fe5ee53404a8b3697cdd032dd1dd6a29dd77</hash>
+        <hash alg="SHA-256">41806757e1d26dae5d6db2ca7d4a5176eed2d6e709cd86564d4a11dab0601742</hash>
+        <hash alg="SHA-512">221b39b85145cf7c245acb7f2692a02b6c5816f8b1187a1a77942dd39de958c1b01ecd066682eb88244f87b2a47513d40b6c1e69ef49a43b2a07ba818f124e17</hash>
+        <hash alg="SHA-384">fa8d53b46cd3ddab0bd265d384a90c35efef6a02a7822aa6f79065cee68d78f6ad7c4d248dea7497af449845dc962730</hash>
+        <hash alg="SHA3-384">cf06cfeaba477f7738f089ba401fb841074681d1c7f465546cdf0e95751a8bf912493428876a7d9108eef83f637c6a1e</hash>
+        <hash alg="SHA3-256">efbad2de8683215936c56b3f8fd3492f1cc27c2ee77595a99c794e18777dec42</hash>
+        <hash alg="SHA3-512">2707d5513e49f6e3ea6dec96510d360cfc125dab164ae5d99a1dcbd628751640f625a70ed749dad66024ae9fd7725f1c6c7f76de7f5a6efc9d8208a9e01922f7</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <id>Apache-2.0</id>
+        </license>
+      </licenses>
+      <purl>pkg:maven/org.slf4j/jcl-over-slf4j@2.0.7?type=jar</purl>
+      <modified>false</modified>
+    </component>
     <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar">
       <group>org.slf4j</group>
       <name>slf4j-api</name>
@@ -41,29 +64,6 @@
       <purl>pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar</purl>
       <modified>false</modified>
     </component>
-    <component type="library" bom-ref="pkg:maven/org.slf4j/jcl-over-slf4j@2.0.7?type=jar">
-      <group>org.slf4j</group>
-      <name>jcl-over-slf4j</name>
-      <version>2.0.7</version>
-      <description>JCL 1.2 implemented over SLF4J</description>
-      <hashes>
-        <hash alg="MD5">4e8d6cd31f7e6277280c95157ac7845a</hash>
-        <hash alg="SHA-1">f127fe5ee53404a8b3697cdd032dd1dd6a29dd77</hash>
-        <hash alg="SHA-256">41806757e1d26dae5d6db2ca7d4a5176eed2d6e709cd86564d4a11dab0601742</hash>
-        <hash alg="SHA-512">221b39b85145cf7c245acb7f2692a02b6c5816f8b1187a1a77942dd39de958c1b01ecd066682eb88244f87b2a47513d40b6c1e69ef49a43b2a07ba818f124e17</hash>
-        <hash alg="SHA-384">fa8d53b46cd3ddab0bd265d384a90c35efef6a02a7822aa6f79065cee68d78f6ad7c4d248dea7497af449845dc962730</hash>
-        <hash alg="SHA3-384">cf06cfeaba477f7738f089ba401fb841074681d1c7f465546cdf0e95751a8bf912493428876a7d9108eef83f637c6a1e</hash>
-        <hash alg="SHA3-256">efbad2de8683215936c56b3f8fd3492f1cc27c2ee77595a99c794e18777dec42</hash>
-        <hash alg="SHA3-512">2707d5513e49f6e3ea6dec96510d360cfc125dab164ae5d99a1dcbd628751640f625a70ed749dad66024ae9fd7725f1c6c7f76de7f5a6efc9d8208a9e01922f7</hash>
-      </hashes>
-      <licenses>
-        <license>
-          <id>Apache-2.0</id>
-        </license>
-      </licenses>
-      <purl>pkg:maven/org.slf4j/jcl-over-slf4j@2.0.7?type=jar</purl>
-      <modified>false</modified>
-    </component>
   </components>
   <dependencies>
     <dependency ref="pkg:maven/org.slf4j/jcl-over-slf4j@2.0.7?type=jar">