--- results/org.jreleaser/jreleaser/1.6.0/oss-rebuild/reference/jreleaser-artifactory-java-sdk-1.6.0-cyclonedx.xml:jreleaser-artifactory-java-sdk-1.6.0-cyclonedx.xml	2025-07-28 23:13:33.293807819 +0200
+++ results/org.jreleaser/jreleaser/1.6.0/oss-rebuild/rebuild/jreleaser-artifactory-java-sdk-1.6.0-cyclonedx.xml:jreleaser-artifactory-java-sdk-1.6.0-cyclonedx.xml	2025-07-28 23:13:34.301804462 +0200
@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="UTF-8"?>
-<bom serialNumber="urn:uuid:771f62c8-2b8c-4ed0-94e6-8c51e5e13586" version="1" xmlns="http://cyclonedx.org/schema/bom/1.4">
+<bom serialNumber="urn:uuid:353ce0d4-19d3-4fcd-a67b-dcb51eed2d86" version="1" xmlns="http://cyclonedx.org/schema/bom/1.4">
   <metadata>
-    <timestamp>2023-04-29T10:06:50Z</timestamp>
+    <timestamp>2025-07-11T06:29:32Z</timestamp>
     <tools>
       <tool>
         <vendor>CycloneDX</vendor>
@@ -17,80 +17,174 @@
     </component>
   </metadata>
   <components>
-    <component type="library" bom-ref="pkg:maven/io.github.openfeign/feign-core@12.3?type=jar">
-      <group>io.github.openfeign</group>
-      <name>feign-core</name>
-      <version>12.3</version>
-      <description>Feign Core</description>
+    <component type="library" bom-ref="pkg:maven/commons-codec/commons-codec@1.15?type=jar">
+      <group>commons-codec</group>
+      <name>commons-codec</name>
+      <version>1.15</version>
+      <description>The Apache Commons Codec package contains simple encoder and decoders for
+     various formats such as Base64 and Hexadecimal.  In addition to these
+     widely used encoders and decoders, the codec package also maintains a
+     collection of phonetic encoding utilities.</description>
       <hashes>
-        <hash alg="MD5">9e6e1ff8b68d2b6c1fc5bdc7ff208030</hash>
-        <hash alg="SHA-1">d280b09a17b63e69788fd3d8d215b7013ab48b16</hash>
-        <hash alg="SHA-256">939fbed2c2392a9633bc1d26f0ef9e934b059d1a9a9d4d966cedaf9075c546ec</hash>
-        <hash alg="SHA-512">8335901d8918747dc29d37a2ac630c6a78ea6ff04bfea77e6d8c74188e9e584142920996c45120caa86299486949a04e1ec1f1bef30229904360fcb5c5d4a1c4</hash>
-        <hash alg="SHA-384">dc7a0d10bdf2c3aeafba83ca7e41d21c3288f3df0b76e339788fcf7606381970b6429108dbf2d1212075d1feba040842</hash>
-        <hash alg="SHA3-384">2907938ea76735cde9b34676c6c8b04786f1595687f96734e7659768175cb7a525508f84c48d9b10b0b2f593158e1ed5</hash>
-        <hash alg="SHA3-256">474f6b0ab420bf63549ed123fff99b73fc881771c6a0c591e58dfb17adbe9899</hash>
-        <hash alg="SHA3-512">553a6dc1c3cf7facdb3b4e15be1d6d90259f1d36ce137db3a6e53a967ef4939aaa98c974b059c8f32dd42316bb7eee3b51910cf0fb172d0df9b8ff39d8cc722d</hash>
+        <hash alg="MD5">303baf002ce6d382198090aedd9d79a2</hash>
+        <hash alg="SHA-1">49d94806b6e3dc933dacbd8acb0fdbab8ebd1e5d</hash>
+        <hash alg="SHA-256">b3e9f6d63a790109bf0d056611fbed1cf69055826defeb9894a71369d246ed63</hash>
+        <hash alg="SHA-512">da30a716770795fce390e4dd340a8b728f220c6572383ffef55bd5839655d5611fcc06128b2144f6cdcb36f53072a12ec80b04afee787665e7ad0b6e888a6787</hash>
+        <hash alg="SHA-384">05d0506283716472175d44c2a4766523397bf8a007c18848f9c9a61718cc8aa437f9cb4b91771037ab29a960860b62a0</hash>
+        <hash alg="SHA3-384">12fad4ef78274b06f97b1243cea6f970088abde082d2de9377d915a34b44f7d7d67807c03e59c849b69f1544e2a9a1be</hash>
+        <hash alg="SHA3-256">87be248f33f241121f54aad61a9a460a79eabefbf1b5b0dd22aeb95b581f727e</hash>
+        <hash alg="SHA3-512">8c992c9c569ebaa0bf956a4c5b34fbf5e1ed1c212c2dd896fa216183ee0bcd341e96698af4b9cec7e8880762faa081a3d3a27f51349aa457cb8e373e4f57c788</hash>
       </hashes>
       <licenses>
         <license>
           <id>Apache-2.0</id>
         </license>
       </licenses>
-      <purl>pkg:maven/io.github.openfeign/feign-core@12.3?type=jar</purl>
+      <purl>pkg:maven/commons-codec/commons-codec@1.15?type=jar</purl>
       <modified>false</modified>
+      <externalReferences><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CODEC</url></reference><reference type="vcs"><url>https://github.com/apache/commons-codec</url></reference></externalReferences>
     </component>
-    <component type="library" bom-ref="pkg:maven/org.jreleaser/jreleaser-model-api@1.6.0?type=jar">
+    <component type="library" bom-ref="pkg:maven/org.slf4j/jcl-over-slf4j@2.0.7?type=jar">
+      <group>org.slf4j</group>
+      <name>jcl-over-slf4j</name>
+      <version>2.0.7</version>
+      <description>JCL 1.2 implemented over SLF4J</description>
+      <hashes>
+        <hash alg="MD5">4e8d6cd31f7e6277280c95157ac7845a</hash>
+        <hash alg="SHA-1">f127fe5ee53404a8b3697cdd032dd1dd6a29dd77</hash>
+        <hash alg="SHA-256">41806757e1d26dae5d6db2ca7d4a5176eed2d6e709cd86564d4a11dab0601742</hash>
+        <hash alg="SHA-512">221b39b85145cf7c245acb7f2692a02b6c5816f8b1187a1a77942dd39de958c1b01ecd066682eb88244f87b2a47513d40b6c1e69ef49a43b2a07ba818f124e17</hash>
+        <hash alg="SHA-384">fa8d53b46cd3ddab0bd265d384a90c35efef6a02a7822aa6f79065cee68d78f6ad7c4d248dea7497af449845dc962730</hash>
+        <hash alg="SHA3-384">cf06cfeaba477f7738f089ba401fb841074681d1c7f465546cdf0e95751a8bf912493428876a7d9108eef83f637c6a1e</hash>
+        <hash alg="SHA3-256">efbad2de8683215936c56b3f8fd3492f1cc27c2ee77595a99c794e18777dec42</hash>
+        <hash alg="SHA3-512">2707d5513e49f6e3ea6dec96510d360cfc125dab164ae5d99a1dcbd628751640f625a70ed749dad66024ae9fd7725f1c6c7f76de7f5a6efc9d8208a9e01922f7</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <id>Apache-2.0</id>
+        </license>
+      </licenses>
+      <purl>pkg:maven/org.slf4j/jcl-over-slf4j@2.0.7?type=jar</purl>
+      <modified>false</modified>
+    </component>
+    <component type="library" bom-ref="pkg:maven/org.jreleaser/jreleaser-tool-java-sdk@1.6.0?type=jar">
       <group>org.jreleaser</group>
-      <name>jreleaser-model-api</name>
+      <name>jreleaser-tool-java-sdk</name>
       <version>1.6.0</version>
+      <description>Java SDK for Tools</description>
+      <licenses>
+        <license>
+          <id>Apache-2.0</id>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+        </license>
+      </licenses>
+      <purl>pkg:maven/org.jreleaser/jreleaser-tool-java-sdk@1.6.0?type=jar</purl>
+      <modified>false</modified>
+      <externalReferences><reference type="vcs"><url>https://github.com/jreleaser/jreleaser</url></reference></externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar">
+      <group>org.apache.httpcomponents</group>
+      <name>httpclient</name>
+      <version>4.5.13</version>
+      <description>Apache HttpComponents Client</description>
       <hashes>
-        <hash alg="MD5">288354c621fdfef298e4e8cdc843e2c3</hash>
-        <hash alg="SHA-1">54bcb05008c6f0b50433f8d0fe82e3a217317db1</hash>
-        <hash alg="SHA-256">397e18c4fa02ba508e409a119866d4e78d64c6c76f5a4f22b3aefc027b662b9b</hash>
-        <hash alg="SHA-512">67c4e2f9acb6db78c21cfd23d3411ce1e32b23690a1d5035a285b48cd9b996fd4c80b504d050e87a4a5604e6b56ca52878a464593f0bd8eea53059bcb263289f</hash>
-        <hash alg="SHA-384">8f67be44af6f792c32f2b86d07738c52e5b742a650d010e8c0b5e60a62db627d5c695f23f24d814f232fc0246d03086c</hash>
-        <hash alg="SHA3-384">1e5c3dffd4e3c545081904db6dcff892bd2f27285b4fa46a57cdd23c3fbb382ab06268e87d57212996387269b2c8b72f</hash>
-        <hash alg="SHA3-256">d2b875e45846a0d17cf7f85d6289681ee42897519cdaca9625ffc56b1639909d</hash>
-        <hash alg="SHA3-512">1a098f05c0735a7ed19cf374440818e9882b0288728f6658ce3709ac534c06cc7dc36ea4d7656a35281758d1ec09c31edf13a98d6680206a0c9fb1dff21ad04f</hash>
+        <hash alg="MD5">40d6b9075fbd28fa10292a45a0db9457</hash>
+        <hash alg="SHA-1">e5f6cae5ca7ecaac1ec2827a9e2d65ae2869cada</hash>
+        <hash alg="SHA-256">6fe9026a566c6a5001608cf3fc32196641f6c1e5e1986d1037ccdbd5f31ef743</hash>
+        <hash alg="SHA-512">3567739186e551f84cad3e4b6b270c5b8b19aba297675a96bcdff3663ff7d20d188611d21f675fe5ff1bfd7d8ca31362070910d7b92ab1b699872a120aa6f089</hash>
+        <hash alg="SHA-384">093ac3e2dde58e34aa70309c7305eb3c9b5be2509a9293f1672494da55479a86bd112e83326746dc7a32855472952b99</hash>
+        <hash alg="SHA3-384">cd6882e7868624164e460f2f3ea01466f863c0dcb902b031c656b57356f563be83b29530df41d88d634ed3d01fc9964d</hash>
+        <hash alg="SHA3-256">710b1d8d7dae0b8e4270756694ca9c83d64965f42d3b4170c609b14d47c2762c</hash>
+        <hash alg="SHA3-512">276fa6a6599dc89382d658115695cf4da6b0d39b34e9c349c17a5dbd64122eaee553bb9ed75c0378ec4a83be157c8aa39370662de3c9b8fd55ebc1dd608383e6</hash>
       </hashes>
-      <licenses/>
-      <purl>pkg:maven/org.jreleaser/jreleaser-model-api@1.6.0?type=jar</purl>
+      <licenses>
+        <license>
+          <id>Apache-2.0</id>
+        </license>
+      </licenses>
+      <purl>pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar</purl>
       <modified>false</modified>
     </component>
-    <component type="library" bom-ref="pkg:maven/org.jreleaser/jreleaser-git-java-sdk@1.6.0?type=jar">
+    <component type="library" bom-ref="pkg:maven/org.jreleaser/jreleaser-command-java-sdk@1.6.0?type=jar">
       <group>org.jreleaser</group>
-      <name>jreleaser-git-java-sdk</name>
+      <name>jreleaser-command-java-sdk</name>
       <version>1.6.0</version>
+      <description>JReleaser command SDK</description>
+      <licenses>
+        <license>
+          <id>Apache-2.0</id>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+        </license>
+      </licenses>
+      <purl>pkg:maven/org.jreleaser/jreleaser-command-java-sdk@1.6.0?type=jar</purl>
+      <modified>false</modified>
+      <externalReferences><reference type="vcs"><url>https://github.com/jreleaser/jreleaser</url></reference></externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-compress@1.22?type=jar">
+      <group>org.apache.commons</group>
+      <name>commons-compress</name>
+      <version>1.22</version>
+      <description>Apache Commons Compress software defines an API for working with
+compression and archive formats.  These include: bzip2, gzip, pack200,
+lzma, xz, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4,
+Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.</description>
       <hashes>
-        <hash alg="MD5">a82f264ee899604bfe6e634ec5a8818e</hash>
-        <hash alg="SHA-1">4c5ee97076b5bc0ae4474e6ac1ade64e60702a4f</hash>
-        <hash alg="SHA-256">ab59b4abd99100aae35f871d548c778a90f0e4aaad5d0eba94af15df688a5775</hash>
-        <hash alg="SHA-512">447286a510cd5b84f29275627ebf3bb6e930b6e150fa981c591f3266a354a46511a4a5d00cd13f95539541ed6e783641a9c9a4213c493cd7cf479780e427511f</hash>
-        <hash alg="SHA-384">f266e76c6698ecd59dcf197a55f09d8b567f9e8953e310bff7c0c617416df996ac53c5d9c4468b9b065f1816716ae3ea</hash>
-        <hash alg="SHA3-384">208684bb1093245f49be449e1a4966fadd1b4840b760aa0a89c861ae18820a63bc3f1b2d895c6e010849712394bb160e</hash>
-        <hash alg="SHA3-256">454d27e5726aae3f4a92c5da424f306eb159edf40da4da52619e9e878cb48b3a</hash>
-        <hash alg="SHA3-512">3a995062f0dfeaa46f17214c0c8179a3d8ad4ba71b4579448e16445e5661ba1102044e2d69fd9833b15b51620636f78aa8f9dec87fde449147f2185b5df5b3e6</hash>
+        <hash alg="MD5">f1e4db16fee4291212d91409313a8086</hash>
+        <hash alg="SHA-1">691a8b4e6cf4248c3bc72c8b719337d5cb7359fa</hash>
+        <hash alg="SHA-256">53d04a0efc7223baecaa303bd5d298eb0600e6b82b4076f9cecd558b97ba760b</hash>
+        <hash alg="SHA-512">2d64fa6cd081fff5d73ee662a82f6186991fc13b4bdaee18b5f1bdcab06d9acb70e3713d18b296337791448251fbd6768bd84afaa817a10547652d0cfa885563</hash>
+        <hash alg="SHA-384">295d7f69d151abbd784e1c4d021c77ce43e129bb5bda0c55762b32d77c8607863383297674ec8a212ea3dfe4007b0044</hash>
+        <hash alg="SHA3-384">af04eb1b4647b1a041c5ee994c2c7a32556b5410b916fedb69905f166938baa43ba54fdc67084205794c02680d3c6349</hash>
+        <hash alg="SHA3-256">40f2960e82adfb171b0c5430271fdb0c0dae243aaf9b08021df54fd4d4a3a0b0</hash>
+        <hash alg="SHA3-512">f2c445f77bda3ef230a2b78ea88d86e48a7d6db36805f841d5cffe1f178842a161b2fda0b0d60162af210f18ed9c5bb9579c963291c26f715c1aa389d9a6785c</hash>
       </hashes>
-      <licenses/>
-      <purl>pkg:maven/org.jreleaser/jreleaser-git-java-sdk@1.6.0?type=jar</purl>
+      <licenses>
+        <license>
+          <id>Apache-2.0</id>
+        </license>
+      </licenses>
+      <purl>pkg:maven/org.apache.commons/commons-compress@1.22?type=jar</purl>
       <modified>false</modified>
+      <externalReferences><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/COMPRESS</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-compress.git</url></reference></externalReferences>
     </component>
-    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-jexl3@3.3?type=jar">
-      <group>org.apache.commons</group>
-      <name>commons-jexl3</name>
-      <version>3.3</version>
-      <description>JEXL is a library intended to facilitate the implementation of scripting features in
-        applications and frameworks written in Java.</description>
+    <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar">
+      <group>org.slf4j</group>
+      <name>slf4j-api</name>
+      <version>2.0.7</version>
+      <description>The slf4j API</description>
       <hashes>
-        <hash alg="MD5">3a332e3beb67b3a2a20bd0a950fc57c4</hash>
-        <hash alg="SHA-1">c76b4cfa436c3e79e04806e62656b09968c388ba</hash>
-        <hash alg="SHA-256">07b0ff6c5a10ffb2e2c02da9e2c0e2e6702df44178cfb76881f69447fc386014</hash>
-        <hash alg="SHA-512">879111d1c3ad021ea3961e49161b3ff6ba251044ffef1ca4d36d880d9a09b1f395e17eef221a13274303f44e116204ae4b2a3ee3e931f117fc901e321d59b5c6</hash>
-        <hash alg="SHA-384">7a268bf2c903be86813fcc7f06158abf79d558ee59ebf03470ebd06ca6e6d169beb1c3600e07c20c4f95fa7827fde841</hash>
-        <hash alg="SHA3-384">1803d239f17f7eeee6edb69d38c4473319fd4eeeb684eda5c38b577a7aaf42965ce41d9082d515d5007be9a0b0712d81</hash>
-        <hash alg="SHA3-256">01163da5e720b6d1f6bf8b6e9e398d26a1be92b3f18ef6089d218d54166b0c01</hash>
-        <hash alg="SHA3-512">8abdd72c14492340c05fd5d3555682a308ac00ac1b1e1e15ae38abc47f454f50db9e0727a49df72a50bf49f1447a6ca9dadc48b9ffd45a043bcbae9e5e050d3d</hash>
+        <hash alg="MD5">403dffa46cdd2e3c82da19df4f394a4c</hash>
+        <hash alg="SHA-1">41eb7184ea9d556f23e18b5cb99cad1f8581fc00</hash>
+        <hash alg="SHA-256">5d6298b93a1905c32cda6478808ac14c2d4a47e91535e53c41f7feeb85d946f4</hash>
+        <hash alg="SHA-512">216d2cac27d501972c888f94dfa747d700b80d60813884b6ab4b12c6a3b17ed0c21a1d27e1aa4332c97c828f20039e3913d2763d7e1a3cef36ae4389a276e7a8</hash>
+        <hash alg="SHA-384">c25b39f418aa726ba8405dfd9b356131f89984e2ef5a55a724a2abf3b7c78443f671105835161d2414d602cf03da9f2d</hash>
+        <hash alg="SHA3-384">f33abfaac21badae6f85d3ebbc6c1204fd7fda3bb15173e763fa8cee95bce6a8270eec2c8f49343c66c8d2767bc317e1</hash>
+        <hash alg="SHA3-256">6e00d4b264a2afc4ca4e98f716ecece66c32c626ca3f8c5d56b22092b6fe417b</hash>
+        <hash alg="SHA3-512">ad7b9142d370fc532a07cdd43881a129b012ff50e2bede3ac27d9bd31ec707bf2f45e82002fa59e962955cc38ab73cdd77713fca50cedc926c046f5617c1285b</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <id>MIT</id>
+          <url>https://opensource.org/licenses/MIT</url>
+        </license>
+      </licenses>
+      <purl>pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar</purl>
+      <modified>false</modified>
+    </component>
+    <component type="library" bom-ref="pkg:maven/com.github.spullara.mustache.java/compiler@0.9.10?type=jar">
+      <group>com.github.spullara.mustache.java</group>
+      <name>compiler</name>
+      <version>0.9.10</version>
+      <description>Implementation of mustache.js for Java</description>
+      <hashes>
+        <hash alg="MD5">5638fc78a17d5063cc4b0d00f6e87491</hash>
+        <hash alg="SHA-1">6111ae24e3be9ecbd75f5fe908583fc14b4f0174</hash>
+        <hash alg="SHA-256">2b5a9217811cb99846a473fa8e0d233eb33629347b7f44941f6c0fbd4cdf1038</hash>
+        <hash alg="SHA-512">2ccf3196af2b518c96df748a72a0122d033dc222e1fab3e12f3e2094146d44bec20bd1502390b59abf090cbdf5dd4d580084b07fb7241248b5b8da2605207559</hash>
+        <hash alg="SHA-384">0204e77a4a64701af5000df6601f4f4c23cb5e53dd39a1325615d4f942cd2c91d04bbac20348ae49731f586282165c33</hash>
+        <hash alg="SHA3-384">0960da7175835484471f485d481499f8b65f134ff4f1629618560adaa5a08caa897fbefcea190f93106ee9e3273381b2</hash>
+        <hash alg="SHA3-256">cfb7e640392ef590069e6b1d059dc20b8fcff984a4b267b3969fcf50ed0edd4f</hash>
+        <hash alg="SHA3-512">db3dad3809879bca835a04da890fd86dbc58ba6637c72f07d02e39d13645ebb6c640b7fecc18a779e58946072078bdf114b91445026a32dd6501b5d1c6e7d933</hash>
       </hashes>
       <licenses>
         <license>
@@ -98,166 +192,225 @@
           <url>https://www.apache.org/licenses/LICENSE-2.0</url>
         </license>
       </licenses>
-      <purl>pkg:maven/org.apache.commons/commons-jexl3@3.3?type=jar</purl>
+      <purl>pkg:maven/com.github.spullara.mustache.java/compiler@0.9.10?type=jar</purl>
       <modified>false</modified>
-      <externalReferences><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/JEXL</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf/commons-jexl.git</url></reference></externalReferences>
+      <externalReferences><reference type="vcs"><url>http://github.com/spullara/mustache.java</url></reference></externalReferences>
     </component>
-    <component type="library" bom-ref="pkg:maven/org.eclipse.jgit/org.eclipse.jgit@5.13.0.202109080827-r?type=jar">
-      <group>org.eclipse.jgit</group>
-      <name>org.eclipse.jgit</name>
-      <version>5.13.0.202109080827-r</version>
-      <description>Repository access and algorithms</description>
+    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.2?type=jar">
+      <group>com.fasterxml.jackson.core</group>
+      <name>jackson-databind</name>
+      <version>2.14.2</version>
+      <description>General data-binding functionality for Jackson: works on core streaming API</description>
       <hashes>
-        <hash alg="MD5">5a1f197785cb9c69d1241cb0f16937a2</hash>
-        <hash alg="SHA-1">32badd5adebd660424509344259ad3e409699ba2</hash>
-        <hash alg="SHA-256">dabf8369f0cdf8cf17b7f7da4bda9320c570bb754c88e0beb7b852812cf5cd25</hash>
-        <hash alg="SHA-512">768dbb3ba2649a7025338197b4703b414983e4608138719b0d69201f7f49e57e0454846b41b775b135b083f820824749da6121f20a812c4f155a97f09c9b15ac</hash>
-        <hash alg="SHA-384">deb24e724ace28ddbaf5e7a1fafaa449a49b97d3a5a53eb487a2ab90895f05684c48a839e3677643364ff965cc33af95</hash>
-        <hash alg="SHA3-384">e5aed5403b4c28624bc58be31601897555c94eb54e680f1ccb59992a643db24d0de465b7ae879b5ba29d56a132a87b69</hash>
-        <hash alg="SHA3-256">8ccc07758fbf1ac55028538890afe7d209c866ee019875ef15acfaea9ac7244f</hash>
-        <hash alg="SHA3-512">4725fff9b6067d70d4c82cbf549b16be521e839d5c8ecf605f9a71516ec78334e348cb2d3303afb7ba18ce464a68c1e195bb6fe673d9d4d6b8d75c84d0b4e101</hash>
+        <hash alg="MD5">c1b12dd14734cd1986132bf55042dd7e</hash>
+        <hash alg="SHA-1">01e71fddbc80bb86f71a6345ac1e8ab8a00e7134</hash>
+        <hash alg="SHA-256">501d3abce4d18dcc381058ec593c5b94477906bba6efbac14dae40a642f77424</hash>
+        <hash alg="SHA-512">85473a29d23292f49092af9e7a7a63993206847c53b3e71f3c67245d68f7b19cc7c341e0ece409eb5e96602df98a848e957d8691fdd2c5fcddd807df9078255e</hash>
+        <hash alg="SHA-384">5c54d6c497cb329c3424a30319bf657ea222349eadc5ae74c30e8dc1525d7b60b7785f4d20370267b03343dd738cc13e</hash>
+        <hash alg="SHA3-384">98ff0b2a4dfc1faf319d4b0d38376c3c7a58b65d071db293232eed810adf2e525fecee3be45c99b41e20cf6a3a8ebef9</hash>
+        <hash alg="SHA3-256">2dba45f78a0d37402083975e18dbb3201705faf7e533c3e9721b9364c2a1ab0f</hash>
+        <hash alg="SHA3-512">76ef73198269cfd0922f4ae86c8b7e6a9cd1b96ee55da43ebfe57dd34365cc1c5c5630fadf79e46156a52b6b96b7d1f694f5e4f5c4f6a3d3ebb31c927e414435</hash>
       </hashes>
       <licenses>
         <license>
-          <id>BSD-3-Clause</id>
+          <id>Apache-2.0</id>
         </license>
       </licenses>
-      <purl>pkg:maven/org.eclipse.jgit/org.eclipse.jgit@5.13.0.202109080827-r?type=jar</purl>
+      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.2?type=jar</purl>
       <modified>false</modified>
+      <externalReferences><reference type="vcs"><url>https://github.com/FasterXML/jackson-databind</url></reference></externalReferences>
     </component>
-    <component type="library" bom-ref="pkg:maven/org.bouncycastle/bcpg-jdk15on@1.70?type=jar">
-      <group>org.bouncycastle</group>
-      <name>bcpg-jdk15on</name>
-      <version>1.70</version>
-      <description>The Bouncy Castle Java API for handling the OpenPGP protocol. This jar contains the OpenPGP API for JDK 1.5 and up. The APIs can be used in conjunction with a JCE/JCA provider such as the one provided with the Bouncy Castle Cryptography APIs.</description>
+    <component type="library" bom-ref="pkg:maven/com.googlecode.javaewah/JavaEWAH@1.2.3?type=jar">
+      <group>com.googlecode.javaewah</group>
+      <name>JavaEWAH</name>
+      <version>1.2.3</version>
+      <description>The bit array data structure is implemented in Java as the BitSet class. Unfortunately, this fails to scale without compression.
+  JavaEWAH is a word-aligned compressed variant of the Java bitset class. It uses a 64-bit run-length encoding (RLE) compression scheme.
+  The goal of word-aligned compression is not to achieve the best compression, but rather to improve query processing time. Hence, we try to save CPU cycles, maybe at the expense of storage. However, the EWAH scheme we implemented is always more efficient storage-wise than an uncompressed bitmap (implemented in Java as the BitSet class). Unlike some alternatives, javaewah does not rely on a patented scheme.</description>
       <hashes>
-        <hash alg="MD5">01ddc3aa0289346f4db19d95039cefdb</hash>
-        <hash alg="SHA-1">062f72ec06f31a6c31a3f3355fce0384b21126d7</hash>
-        <hash alg="SHA-256">4f08f4aa74048824151c98dd3e92e7165ac30659834404f08a8e843bdad32847</hash>
-        <hash alg="SHA-512">4e240b7811ef90c090e83a181dace41da487555e4136221861b0060f9af6d8b316f2dd0472f747adb98ca5372f46055456ef04bdc0c3992188ab13302922fce9</hash>
-        <hash alg="SHA-384">d89dec6226112d13cbea461d84740699770dd7d8ad3f67ab65e7b49fd08a096a948e54da2e6a681925c4320f410bba37</hash>
-        <hash alg="SHA3-384">5e8e8ca63cc550a8f50b627c4dd051f0eb5c31b99ff53dabd7d5f5d1ed98d0dc1d4963a09fc0db32f8e0ff769a2a6e65</hash>
-        <hash alg="SHA3-256">77f28e7e22b3b3a8d7b667fb7f783847c4b11ee7208833636e09e8b38390fd51</hash>
-        <hash alg="SHA3-512">cb238dbb641c42c49b5801bdfa6432395e860c1a7485ba68e2d57887e3d22ff254718c6cbfa34c107bfb09d74e2f85c33b95f89dfa886e141a8247a0abf2b5c2</hash>
+        <hash alg="MD5">8fdeda28c1fb10e67b3d79f86bef5e61</hash>
+        <hash alg="SHA-1">13a27c856e0c8808cee9a64032c58eee11c3adc9</hash>
+        <hash alg="SHA-256">d65226949713c4c61a784f41c51167e7b0316f93764398ebba9e4336b3d954c2</hash>
+        <hash alg="SHA-512">48cd9df9252c58e9ffe4583e68607944bcdf2ad7a3be7b4317467f503c4f56cdbde358ca7c4f34fa620d01615072a42f3a572fc4f1237e266310b7508e79bcac</hash>
+        <hash alg="SHA-384">d1fd074f21b8a54a07d3f4579376d7c3ab72f24814ebc9ba92344e9da4721e9bfa3cda3a599137e4ddf2395a3c5b88e4</hash>
+        <hash alg="SHA3-384">a553864f196f73c139a104170ab79e780046fb5f322072c5494a6590361021f875afd7168f858b0531b61918ab49b94e</hash>
+        <hash alg="SHA3-256">bab97f3f893af36c36218a151b0c3fece27d47f358cc19e1ca9c22d77942bb76</hash>
+        <hash alg="SHA3-512">be817b93c7093d44ec8dded565d7e5651772ce38e9c72283c05191b33d0ecb2798cd385395f553500446573ac49dccc21f4ba3067d71eb89e03daa384d0193be</hash>
       </hashes>
       <licenses>
         <license>
-          <name>Bouncy Castle Licence</name>
-          <url>https://www.bouncycastle.org/licence.html</url>
+          <id>Apache-2.0</id>
         </license>
+      </licenses>
+      <purl>pkg:maven/com.googlecode.javaewah/JavaEWAH@1.2.3?type=jar</purl>
+      <modified>false</modified>
+      <externalReferences><reference type="issue-tracker"><url>https://github.com/lemire/javaewah/issues</url></reference><reference type="vcs"><url>scm:git:git@github.com:lemire/javaewah.git</url></reference></externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar">
+      <group>org.apache.httpcomponents</group>
+      <name>httpcore</name>
+      <version>4.4.16</version>
+      <description>Apache HttpComponents Core (blocking I/O)</description>
+      <hashes>
+        <hash alg="MD5">28d2cd9bf8789fd2ec774fb88436ebd1</hash>
+        <hash alg="SHA-1">51cf043c87253c9f58b539c9f7e44c8894223850</hash>
+        <hash alg="SHA-256">6c9b3dd142a09dc468e23ad39aad6f75a0f2b85125104469f026e52a474e464f</hash>
+        <hash alg="SHA-512">168026436a6bcf5e96c0c59606638abbdc30de4b405ae55afde70fdf2895e267a3d48bba6bdadc5a89f38e31da3d9a9dc91e1cab7ea76f5e04322cf1ec63b838</hash>
+        <hash alg="SHA-384">ba9ceaee1a37ca3201d6a1315ecb0327b495489efd0baa155c219c475df8d3eb69fe77ab0026563db406497626da6562</hash>
+        <hash alg="SHA3-384">b9dc44dcc7cc86d5036f26d54c4003a2d72808ae7b07a0808bb53505c6d4281b5ad213eb1f3d0fef1113dec57cb0dfe1</hash>
+        <hash alg="SHA3-256">fd8ab51846476c6c18822151c9ec07b39a9633010b5d20ea937fc6910407bc64</hash>
+        <hash alg="SHA3-512">b42fa528242981a9d70e4f68ab75a24292df5112c44c21b6f18cb9201ce747885ba1d4dc69bc3d14d0da46a6c2638f937c11bc45749abeb55dc89ddada90cdda</hash>
+      </hashes>
+      <licenses>
         <license>
-          <id>Apache-1.1</id>
-          <url>http://apache.org/licenses/LICENSE-1.1</url>
+          <id>Apache-2.0</id>
         </license>
       </licenses>
-      <purl>pkg:maven/org.bouncycastle/bcpg-jdk15on@1.70?type=jar</purl>
+      <purl>pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar</purl>
       <modified>false</modified>
-      <externalReferences><reference type="issue-tracker"><url>https://github.com/bcgit/bc-java/issues</url></reference><reference type="vcs"><url>https://github.com/bcgit/bc-java</url></reference></externalReferences>
     </component>
-    <component type="library" bom-ref="pkg:maven/org.jreleaser/jreleaser-command-java-sdk@1.6.0?type=jar">
-      <group>org.jreleaser</group>
-      <name>jreleaser-command-java-sdk</name>
-      <version>1.6.0</version>
+    <component type="library" bom-ref="pkg:maven/commons-io/commons-io@2.11.0?type=jar">
+      <group>commons-io</group>
+      <name>commons-io</name>
+      <version>2.11.0</version>
+      <description>The Apache Commons IO library contains utility classes, stream implementations, file filters,
+file comparators, endian transformation classes, and much more.</description>
       <hashes>
-        <hash alg="MD5">acbbfe01e59912d40bdaf2b516b8199d</hash>
-        <hash alg="SHA-1">f922261945a1a25999d8b4c95326c38f15b167e8</hash>
-        <hash alg="SHA-256">cc3bbe8d8a2cdcba73857752b9c2fbae3344c8597af7f37ac7cd0926b02d92ea</hash>
-        <hash alg="SHA-512">d40f5671c80589711087a7dc5e4148ffee88ffacbca4db3a5360c0827e2ccc0e3fe80ed95e9c4b91d8c29617dbf6171a8a849a652e9b7a472e906692cd792498</hash>
-        <hash alg="SHA-384">cc3b16425ab2505338e26c64b006157218391762d04cec9d4a9a2897ce33036a8cd6f6199b55c80e646bad434322c18c</hash>
-        <hash alg="SHA3-384">09fe1086a3bbfda7fa50c320ab4c60b056ea2b37002f281bb413a17cc4f8846be4a9bcaf4b6f507a51af74474b189bd1</hash>
-        <hash alg="SHA3-256">ef9ad8cd599799ffa70998131cfbaf2985c3070a8ff727becac8ceb5480ab900</hash>
-        <hash alg="SHA3-512">a62c41fdaca8e1849d661ffded5af92bf09e43afc3497c5f923f5d7463756116dabef382cd8649a71473e9e938e698734b09e3d81153a852ff278876cd7ba8c9</hash>
+        <hash alg="MD5">3b4b7ccfaeceeac240b804839ee1a1ca</hash>
+        <hash alg="SHA-1">a2503f302b11ebde7ebc3df41daebe0e4eea3689</hash>
+        <hash alg="SHA-256">961b2f6d87dbacc5d54abf45ab7a6e2495f89b75598962d8c723cea9bc210908</hash>
+        <hash alg="SHA-512">5bd78eed456ede30119319c5bed8e3e4c443b6fd7bdb3a7a5686647bd83094d0c3e2832a7575cfb60e4ef25f08106b93476939d3adcfecf5533cc030b3039e10</hash>
+        <hash alg="SHA-384">114f1e324d90ad887c177876d410f5787a8e8da6c48d4b2862d365802c0efded3a88cb24046976bf6276cadad3712f0f</hash>
+        <hash alg="SHA3-384">80288c03ad4d80d69f91d056ffc5570d49a9c76bf54ad2dff0121ecde26a560df76d05156f281f5c6db2a38ff07a873d</hash>
+        <hash alg="SHA3-256">5adfb5ccaf5f21a549422f426118a9542673926fcd18c68390cf813e791dcf6c</hash>
+        <hash alg="SHA3-512">7573f47f0babb53cefdc7c2309a0b982d800139064537b0797da442853d081010ad7c3c74a500598a0f800639a5d540eca21963ea652c68613907059bd4278c2</hash>
       </hashes>
-      <licenses/>
-      <purl>pkg:maven/org.jreleaser/jreleaser-command-java-sdk@1.6.0?type=jar</purl>
+      <licenses>
+        <license>
+          <id>Apache-2.0</id>
+        </license>
+      </licenses>
+      <purl>pkg:maven/commons-io/commons-io@2.11.0?type=jar</purl>
       <modified>false</modified>
+      <externalReferences><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/IO</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-io.git</url></reference></externalReferences>
     </component>
-    <component type="library" bom-ref="pkg:maven/org.jreleaser/jreleaser-java-sdk-commons@1.6.0?type=jar">
-      <group>org.jreleaser</group>
-      <name>jreleaser-java-sdk-commons</name>
-      <version>1.6.0</version>
+    <component type="library" bom-ref="pkg:maven/org.tukaani/xz@1.9?type=jar">
+      <group>org.tukaani</group>
+      <name>xz</name>
+      <version>1.9</version>
+      <description>XZ data compression</description>
       <hashes>
-        <hash alg="MD5">a616e3581e826bb4e01c9ec7978bc4d2</hash>
-        <hash alg="SHA-1">187c502ed479e9f83427cccfd7cd47242bd5f51d</hash>
-        <hash alg="SHA-256">8043134ad00433ee9cb395081ac9e0cc479328a1589b2b67c310cfd654245ebf</hash>
-        <hash alg="SHA-512">03ed834cedf5f6b85f8d98defe2790fa0ca2971c686b46dc7c8616d130034785a6969e144ba6aa5d6f4d9093ccf888a7e4995c87d7acf862ece913e9696c550a</hash>
-        <hash alg="SHA-384">7f0545affd13b0f4298d047137850aba201b93bcd58d6625510bac088c98661c6ce3b1edb38ac7f22d765d22365a47bc</hash>
-        <hash alg="SHA3-384">9b4346b3b735ed788ca5e79e7fa4709d1e8edc60e994297f6a3fccd34d591474ab7d895720639e0739605b10d6722e60</hash>
-        <hash alg="SHA3-256">574b9169bf34389e320331ab5cf3ff85c61cb36197acfb0feb040412313326ca</hash>
-        <hash alg="SHA3-512">c4f1d762db1498baf5f6268619915811f933433ff78388429e564a3c7d94ee89867648fe79d1718dabe74c7927be99152d3475e5547f5b0f4c5d1b53ce7f75d2</hash>
+        <hash alg="MD5">57c2fbfeb55e307ccae52e5322082e02</hash>
+        <hash alg="SHA-1">1ea4bec1a921180164852c65006d928617bd2caf</hash>
+        <hash alg="SHA-256">211b306cfc44f8f96df3a0a3ddaf75ba8c5289eed77d60d72f889bb855f535e5</hash>
+        <hash alg="SHA-512">a4362db234d4e83683e90f5baf90c82107450cc4404acab96e3fab14b8a3d4588a19722171d32f27d18463682a6994cad9af0b1065c954e3a77ea7bdcf586bac</hash>
+        <hash alg="SHA-384">aa30349b094723369908369a18e2cb5beb5b7ca0b24b4d56c2f5725fae152220f6526466672b22bfec939e2e0622a01d</hash>
+        <hash alg="SHA3-384">b3e1fee7784188df5e1931c9e8137ac0e20e63f66f93e7f938a448fc0b3adb4be5205c7a5f1835007e233fee2696fc2c</hash>
+        <hash alg="SHA3-256">92eff603ed0aab557e1a45e17a74e80d8ec656b5f137197b23c429c903fa448f</hash>
+        <hash alg="SHA3-512">b290f92958f8cd91705331d8411140c23957ab8b568fbe19a70f4f1dc97eddc13d3a200df28a02ab5911ce18f546c33f720878be0f727edac839a6e63ee66ece</hash>
       </hashes>
-      <licenses/>
-      <purl>pkg:maven/org.jreleaser/jreleaser-java-sdk-commons@1.6.0?type=jar</purl>
+      <licenses>
+        <license>
+          <name>Public Domain</name>
+        </license>
+      </licenses>
+      <purl>pkg:maven/org.tukaani/xz@1.9?type=jar</purl>
       <modified>false</modified>
+      <externalReferences><reference type="vcs"><url>https://git.tukaani.org/?p=xz-java.git</url></reference></externalReferences>
     </component>
-    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.2?type=jar">
-      <group>com.fasterxml.jackson.core</group>
-      <name>jackson-annotations</name>
-      <version>2.14.2</version>
-      <description>Core annotations used for value types, used by Jackson data binding package.</description>
+    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-jexl3@3.3?type=jar">
+      <group>org.apache.commons</group>
+      <name>commons-jexl3</name>
+      <version>3.3</version>
+      <description>JEXL is a library intended to facilitate the implementation of scripting features in
+        applications and frameworks written in Java.</description>
       <hashes>
-        <hash alg="MD5">10d19982a8890f6eb37557af2f58e272</hash>
-        <hash alg="SHA-1">a7aae9525864930723e3453ab799521fdfd9d873</hash>
-        <hash alg="SHA-256">2c6869d505cf60dc066734b7d50339f975bd3adc635e26a78abb71acb4473c0d</hash>
-        <hash alg="SHA-512">a978384791bdc074df8039ffc95bb93f0f60d14d476861ee2a0ce208b33a991c486a07345cb80559252c3ff1dea14d3efb818c19bdc18435946dc8754d8e6ee3</hash>
-        <hash alg="SHA-384">d5111c69020666689414921ae4a8950f9fbdf86dec1360f6827beeee9ebd3f78db74e69c76e0becaba47eb34fdaaeb5a</hash>
-        <hash alg="SHA3-384">53b1a8891482e16a7d8849251cb0dcd1aacf6aaa2161a73589d9742ad96763e384d426d04db762e56fc4536f4e719084</hash>
-        <hash alg="SHA3-256">14f7b3c51c96f7429f7c60a69e3b7e4f9f2207820141f197d56b57018ffd5640</hash>
-        <hash alg="SHA3-512">75e4e4fb847fdacdd497cf6b340362581ab4091120ccf2ec32a273709d336af0f78c90ce12b2dd1d17354aa08583af0d3ded89bb415720f45f2d9c110d71dd7a</hash>
+        <hash alg="MD5">3a332e3beb67b3a2a20bd0a950fc57c4</hash>
+        <hash alg="SHA-1">c76b4cfa436c3e79e04806e62656b09968c388ba</hash>
+        <hash alg="SHA-256">07b0ff6c5a10ffb2e2c02da9e2c0e2e6702df44178cfb76881f69447fc386014</hash>
+        <hash alg="SHA-512">879111d1c3ad021ea3961e49161b3ff6ba251044ffef1ca4d36d880d9a09b1f395e17eef221a13274303f44e116204ae4b2a3ee3e931f117fc901e321d59b5c6</hash>
+        <hash alg="SHA-384">7a268bf2c903be86813fcc7f06158abf79d558ee59ebf03470ebd06ca6e6d169beb1c3600e07c20c4f95fa7827fde841</hash>
+        <hash alg="SHA3-384">1803d239f17f7eeee6edb69d38c4473319fd4eeeb684eda5c38b577a7aaf42965ce41d9082d515d5007be9a0b0712d81</hash>
+        <hash alg="SHA3-256">01163da5e720b6d1f6bf8b6e9e398d26a1be92b3f18ef6089d218d54166b0c01</hash>
+        <hash alg="SHA3-512">8abdd72c14492340c05fd5d3555682a308ac00ac1b1e1e15ae38abc47f454f50db9e0727a49df72a50bf49f1447a6ca9dadc48b9ffd45a043bcbae9e5e050d3d</hash>
       </hashes>
       <licenses>
         <license>
           <id>Apache-2.0</id>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
         </license>
       </licenses>
-      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.2?type=jar</purl>
+      <purl>pkg:maven/org.apache.commons/commons-jexl3@3.3?type=jar</purl>
       <modified>false</modified>
-      <externalReferences><reference type="vcs"><url>https://github.com/FasterXML/jackson-annotations</url></reference></externalReferences>
+      <externalReferences><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/JEXL</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf/commons-jexl.git</url></reference></externalReferences>
     </component>
-    <component type="library" bom-ref="pkg:maven/commons-codec/commons-codec@1.15?type=jar">
-      <group>commons-codec</group>
-      <name>commons-codec</name>
-      <version>1.15</version>
-      <description>The Apache Commons Codec package contains simple encoder and decoders for
-     various formats such as Base64 and Hexadecimal.  In addition to these
-     widely used encoders and decoders, the codec package also maintains a
-     collection of phonetic encoding utilities.</description>
+    <component type="library" bom-ref="pkg:maven/org.apache.tika/tika-core@2.7.0?type=jar">
+      <publisher>The Apache Software Foundation</publisher>
+      <group>org.apache.tika</group>
+      <name>tika-core</name>
+      <version>2.7.0</version>
+      <description>This is the core Apache Tika™ toolkit library from which all other modules inherit functionality. It
+    also
+    includes the core facades for the Tika API.</description>
       <hashes>
-        <hash alg="MD5">303baf002ce6d382198090aedd9d79a2</hash>
-        <hash alg="SHA-1">49d94806b6e3dc933dacbd8acb0fdbab8ebd1e5d</hash>
-        <hash alg="SHA-256">b3e9f6d63a790109bf0d056611fbed1cf69055826defeb9894a71369d246ed63</hash>
-        <hash alg="SHA-512">da30a716770795fce390e4dd340a8b728f220c6572383ffef55bd5839655d5611fcc06128b2144f6cdcb36f53072a12ec80b04afee787665e7ad0b6e888a6787</hash>
-        <hash alg="SHA-384">05d0506283716472175d44c2a4766523397bf8a007c18848f9c9a61718cc8aa437f9cb4b91771037ab29a960860b62a0</hash>
-        <hash alg="SHA3-384">12fad4ef78274b06f97b1243cea6f970088abde082d2de9377d915a34b44f7d7d67807c03e59c849b69f1544e2a9a1be</hash>
-        <hash alg="SHA3-256">87be248f33f241121f54aad61a9a460a79eabefbf1b5b0dd22aeb95b581f727e</hash>
-        <hash alg="SHA3-512">8c992c9c569ebaa0bf956a4c5b34fbf5e1ed1c212c2dd896fa216183ee0bcd341e96698af4b9cec7e8880762faa081a3d3a27f51349aa457cb8e373e4f57c788</hash>
+        <hash alg="MD5">42b3dd0d4679ec6bafd848b6c0cb3035</hash>
+        <hash alg="SHA-1">e9e8f1a7dc833e633fb2c717e8fa811e3e9dbf4a</hash>
+        <hash alg="SHA-256">2603961edec8bcee014d2c360e5a9a0cdbf10aa8e6e95cf67abe190c837bb054</hash>
+        <hash alg="SHA-512">1d0a07cd55db3bdd6d3d169f0747e920491936a7401af45e5f14f10400f3addd93918f8efb80445c0cf9d91803571877d7d4e1429440ab6ae8c49ec36a77e103</hash>
+        <hash alg="SHA-384">c3e7ad76e7abdaa27d28416e101110eab481f0f72cd0053de9030a0220549c1f346314116e04665ee70cdeba5fcbc5f8</hash>
+        <hash alg="SHA3-384">97b801fbde8b9b84c13aea4dd087cbb333e7cba52737d7f5c54f4ea46516d80677d363a2063de9cc014773da2bc5c4a5</hash>
+        <hash alg="SHA3-256">45ce7c3c2ea1ef9b7785a42604a0ec75444a9bd55b0687307e5a874d51f29547</hash>
+        <hash alg="SHA3-512">bd45003a2aa326c195e847199cda6aa52f5498cacf6faaab99b95826b4812da9590c29a80c0a3811c27403cc52a8e79a38c4770ce4063b7e013566b7e794af98</hash>
       </hashes>
       <licenses>
         <license>
           <id>Apache-2.0</id>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
         </license>
       </licenses>
-      <purl>pkg:maven/commons-codec/commons-codec@1.15?type=jar</purl>
+      <purl>pkg:maven/org.apache.tika/tika-core@2.7.0?type=jar</purl>
       <modified>false</modified>
-      <externalReferences><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CODEC</url></reference><reference type="vcs"><url>https://github.com/apache/commons-codec</url></reference></externalReferences>
+      <externalReferences><reference type="website"><url>http://www.apache.org</url></reference><reference type="build-system"><url>https://builds.apache.org/job/Tika-trunk/</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/TIKA</url></reference></externalReferences>
     </component>
-    <component type="library" bom-ref="pkg:maven/org.jreleaser/jreleaser-logger-api@1.6.0?type=jar">
-      <group>org.jreleaser</group>
-      <name>jreleaser-logger-api</name>
-      <version>1.6.0</version>
+    <component type="library" bom-ref="pkg:maven/org.bouncycastle/bcprov-jdk15on@1.70?type=jar">
+      <group>org.bouncycastle</group>
+      <name>bcprov-jdk15on</name>
+      <version>1.70</version>
+      <description>The Bouncy Castle Crypto package is a Java implementation of cryptographic algorithms. This jar contains JCE provider and lightweight API for the Bouncy Castle Cryptography APIs for JDK 1.5 and up.</description>
       <hashes>
-        <hash alg="MD5">e7da806a3427ab10405584067d880ead</hash>
-        <hash alg="SHA-1">92ae4e1826cf1d8321fcefd3f4ece0fa5cc4fc94</hash>
-        <hash alg="SHA-256">372d4b6cee7af83429f9f054a69f73d38d6fb4c983b14ce97f2599791d59aee9</hash>
-        <hash alg="SHA-512">c4f4edf49e18f475b7b44677497250cd93af45e302fb39306a94dc8f0ee1f783921967de3e1f1b7591f970a359080f43b24c1499a363280d904c2519d2e9bcb2</hash>
-        <hash alg="SHA-384">fcdadd6f2e8af30a7761e98f5c717ab1b8f6f0a79825a711454c8c9cc9842cf8fe0f5917b5ea48603eb0ee5788ed7a8b</hash>
-        <hash alg="SHA3-384">42a3e276d69efc85ce5798c5cd78ba1a910ef328169fb39a1a685eea5b98e9c3bf495124f56b518d553f1ca2e63d62f7</hash>
-        <hash alg="SHA3-256">0fb4d06e278df39d6633d1a09ed01ad4f7788838668f2ebc097f919384cec97d</hash>
-        <hash alg="SHA3-512">bb5a8b000955af1038d4d75c0fd8786561b3a2cf7bb804e09e42518a0bcc3e23ab01dd5236de4bdb58fd9b1a0e923982eb6cc6d0e450896bed9c86dfe808675d</hash>
+        <hash alg="MD5">1809d0449a6374279c01fdd3be26cd92</hash>
+        <hash alg="SHA-1">4636a0d01f74acaf28082fb62b317f1080118371</hash>
+        <hash alg="SHA-256">8f3c20e3e2d565d26f33e8d4857a37d0d7f8ac39b62a7026496fcab1bdac30d4</hash>
+        <hash alg="SHA-512">7dccfc636ee4df1487615818cfa99c69941081df95e8ef1eaf4bca165594dff9547e3774fd70de3418abace77d2c45889f70bcd2e6823f8539f359e68eaf36d1</hash>
+        <hash alg="SHA-384">a0b35d204cd962f1d246fa94b6e8b0fcee1a7c3f37b7e87cda742f2124a25b48794ce11a903ea8d12009c86227b6808d</hash>
+        <hash alg="SHA3-384">980d81d3d9906764bbf2ae9b3b364ea58628b485ce1dc3d06734e10495d79f2be2e7cc7df61ac88cd67c1104c7af9393</hash>
+        <hash alg="SHA3-256">10a3572e42d29f609721d795116e3e5d0f6f03efef84bb979ce72e26908d242b</hash>
+        <hash alg="SHA3-512">a0761cb6deeb86c94b96850c72c0a0eaf516ca849f4b8268f9f60c9ed2a6730e692c15098d47e617da294e931113c6cbcaddec8957c9f029fa595b5f14ff35ac</hash>
       </hashes>
-      <licenses/>
-      <purl>pkg:maven/org.jreleaser/jreleaser-logger-api@1.6.0?type=jar</purl>
+      <licenses>
+        <license>
+          <name>Bouncy Castle Licence</name>
+          <url>https://www.bouncycastle.org/licence.html</url>
+        </license>
+      </licenses>
+      <purl>pkg:maven/org.bouncycastle/bcprov-jdk15on@1.70?type=jar</purl>
+      <modified>false</modified>
+      <externalReferences><reference type="issue-tracker"><url>https://github.com/bcgit/bc-java/issues</url></reference><reference type="vcs"><url>https://github.com/bcgit/bc-java</url></reference></externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:maven/org.jreleaser/jreleaser-model-impl@1.6.0?type=jar">
+      <group>org.jreleaser</group>
+      <name>jreleaser-model-impl</name>
+      <version>1.6.0</version>
+      <description>JReleaser Model implementation</description>
+      <licenses>
+        <license>
+          <id>Apache-2.0</id>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+        </license>
+      </licenses>
+      <purl>pkg:maven/org.jreleaser/jreleaser-model-impl@1.6.0?type=jar</purl>
       <modified>false</modified>
+      <externalReferences><reference type="vcs"><url>https://github.com/jreleaser/jreleaser</url></reference></externalReferences>
     </component>
     <component type="library" bom-ref="pkg:maven/com.github.luben/zstd-jni@1.5.4-1?type=jar">
       <publisher>com.github.luben</publisher>
@@ -283,28 +436,29 @@
       <purl>pkg:maven/com.github.luben/zstd-jni@1.5.4-1?type=jar</purl>
       <modified>false</modified>
     </component>
-    <component type="library" bom-ref="pkg:maven/org.slf4j/jcl-over-slf4j@2.0.7?type=jar">
-      <group>org.slf4j</group>
-      <name>jcl-over-slf4j</name>
-      <version>2.0.7</version>
-      <description>JCL 1.2 implemented over SLF4J</description>
+    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.2?type=jar">
+      <group>com.fasterxml.jackson.core</group>
+      <name>jackson-annotations</name>
+      <version>2.14.2</version>
+      <description>Core annotations used for value types, used by Jackson data binding package.</description>
       <hashes>
-        <hash alg="MD5">4e8d6cd31f7e6277280c95157ac7845a</hash>
-        <hash alg="SHA-1">f127fe5ee53404a8b3697cdd032dd1dd6a29dd77</hash>
-        <hash alg="SHA-256">41806757e1d26dae5d6db2ca7d4a5176eed2d6e709cd86564d4a11dab0601742</hash>
-        <hash alg="SHA-512">221b39b85145cf7c245acb7f2692a02b6c5816f8b1187a1a77942dd39de958c1b01ecd066682eb88244f87b2a47513d40b6c1e69ef49a43b2a07ba818f124e17</hash>
-        <hash alg="SHA-384">fa8d53b46cd3ddab0bd265d384a90c35efef6a02a7822aa6f79065cee68d78f6ad7c4d248dea7497af449845dc962730</hash>
-        <hash alg="SHA3-384">cf06cfeaba477f7738f089ba401fb841074681d1c7f465546cdf0e95751a8bf912493428876a7d9108eef83f637c6a1e</hash>
-        <hash alg="SHA3-256">efbad2de8683215936c56b3f8fd3492f1cc27c2ee77595a99c794e18777dec42</hash>
-        <hash alg="SHA3-512">2707d5513e49f6e3ea6dec96510d360cfc125dab164ae5d99a1dcbd628751640f625a70ed749dad66024ae9fd7725f1c6c7f76de7f5a6efc9d8208a9e01922f7</hash>
+        <hash alg="MD5">10d19982a8890f6eb37557af2f58e272</hash>
+        <hash alg="SHA-1">a7aae9525864930723e3453ab799521fdfd9d873</hash>
+        <hash alg="SHA-256">2c6869d505cf60dc066734b7d50339f975bd3adc635e26a78abb71acb4473c0d</hash>
+        <hash alg="SHA-512">a978384791bdc074df8039ffc95bb93f0f60d14d476861ee2a0ce208b33a991c486a07345cb80559252c3ff1dea14d3efb818c19bdc18435946dc8754d8e6ee3</hash>
+        <hash alg="SHA-384">d5111c69020666689414921ae4a8950f9fbdf86dec1360f6827beeee9ebd3f78db74e69c76e0becaba47eb34fdaaeb5a</hash>
+        <hash alg="SHA3-384">53b1a8891482e16a7d8849251cb0dcd1aacf6aaa2161a73589d9742ad96763e384d426d04db762e56fc4536f4e719084</hash>
+        <hash alg="SHA3-256">14f7b3c51c96f7429f7c60a69e3b7e4f9f2207820141f197d56b57018ffd5640</hash>
+        <hash alg="SHA3-512">75e4e4fb847fdacdd497cf6b340362581ab4091120ccf2ec32a273709d336af0f78c90ce12b2dd1d17354aa08583af0d3ded89bb415720f45f2d9c110d71dd7a</hash>
       </hashes>
       <licenses>
         <license>
           <id>Apache-2.0</id>
         </license>
       </licenses>
-      <purl>pkg:maven/org.slf4j/jcl-over-slf4j@2.0.7?type=jar</purl>
+      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.2?type=jar</purl>
       <modified>false</modified>
+      <externalReferences><reference type="vcs"><url>https://github.com/FasterXML/jackson-annotations</url></reference></externalReferences>
     </component>
     <component type="library" bom-ref="pkg:maven/io.github.openfeign.form/feign-form@3.8.0?type=jar">
       <group>io.github.openfeign.form</group>
@@ -328,118 +482,79 @@
       <purl>pkg:maven/io.github.openfeign.form/feign-form@3.8.0?type=jar</purl>
       <modified>false</modified>
     </component>
-    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.2?type=jar">
-      <group>com.fasterxml.jackson.core</group>
-      <name>jackson-core</name>
-      <version>2.14.2</version>
-      <description>Core Jackson processing abstractions (aka Streaming API), implementation for JSON</description>
-      <hashes>
-        <hash alg="MD5">6ee422ee4c481b2d5aacb2b5e36a7dc0</hash>
-        <hash alg="SHA-1">f804090e6399ce0cf78242db086017512dd71fcc</hash>
-        <hash alg="SHA-256">b5d37a77c88277b97e3593c8740925216c06df8e4172bbde058528df04ad3e7a</hash>
-        <hash alg="SHA-512">208953cf72691b3bab1ca2f9a045cccd3d75c46c90099ba884fbf16bc3e45045e5cd014d2c68c96e8a8826f87a5f0e18cb34b35e7ef03348953869c21e197367</hash>
-        <hash alg="SHA-384">e806595862c5fcdae801d9845befc1d12c97e6036ee839d34590dbd785a422d5832cf4fc5c7ee6e1a5ee7a59f37740f0</hash>
-        <hash alg="SHA3-384">4fa59f572f2e100e2eba6fc664a3b9f804fabd911a552cb40805f39e624a9c04246b679cf4b017bb782c8272877f49d2</hash>
-        <hash alg="SHA3-256">cef17d3a539cbf798cfb0bfa9faffa2b7baff3670b50743e91ee58b4c60b59f1</hash>
-        <hash alg="SHA3-512">fceeed5cb8fe4335d88282d15657762a4728483275a7ff45f50b9fe6a999757ccb37c415d001eb6250226f98f5c576b1b36a83e601fb393cfd34a811c2df5d00</hash>
-      </hashes>
+    <component type="library" bom-ref="pkg:maven/org.jreleaser/jreleaser-logger-api@1.6.0?type=jar">
+      <group>org.jreleaser</group>
+      <name>jreleaser-logger-api</name>
+      <version>1.6.0</version>
+      <description>JReleaser logger API</description>
       <licenses>
         <license>
           <id>Apache-2.0</id>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
         </license>
       </licenses>
-      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.2?type=jar</purl>
+      <purl>pkg:maven/org.jreleaser/jreleaser-logger-api@1.6.0?type=jar</purl>
       <modified>false</modified>
-      <externalReferences><reference type="vcs"><url>https://github.com/FasterXML/jackson-core</url></reference></externalReferences>
+      <externalReferences><reference type="vcs"><url>https://github.com/jreleaser/jreleaser</url></reference></externalReferences>
     </component>
-    <component type="library" bom-ref="pkg:maven/io.github.openfeign/feign-httpclient@12.3?type=jar">
-      <group>io.github.openfeign</group>
-      <name>feign-httpclient</name>
-      <version>12.3</version>
-      <description>Feign Apache HttpClient</description>
-      <hashes>
-        <hash alg="MD5">4ec31fa7f187c15f9967c7ffcf714449</hash>
-        <hash alg="SHA-1">0ea51fdb4797c3ab62e1f8a726d4e02cf522dba2</hash>
-        <hash alg="SHA-256">3a2833e18cc868bff19d6320f22054f96995dc073ed27edfeb2d83996d2ef37c</hash>
-        <hash alg="SHA-512">3440afa129150c035670cd098e6eba6f676afc82db2db53a10b20621e30658b411d820652e4668dab5ca615f599a41a06dc826378b5e783f88f26c2cddfce8ed</hash>
-        <hash alg="SHA-384">b8dc38126b28fb486d459e23ae61a34073f16f0ef7ec37f49636919d0fd5a8d86354d76314462dba94efd4f613db92ef</hash>
-        <hash alg="SHA3-384">7c4161078011223122067406e5ad6efedfcf45c71d6e081f37e3fba1c73578c748d5a5e60d372a5fa7159ec7737e71bb</hash>
-        <hash alg="SHA3-256">b6d851642b9a5628dbe3cab5706c9d434f1d59ec881cd5cdf6fae84f644eb7c1</hash>
-        <hash alg="SHA3-512">9b3b7edc25efc7345a9cc7b2fe0eccefd57fa40d62e6a85b4a698827b9c34ff568236d591f6d5645de7eb275be2b10aee80f42881f6068f0b1c38f274faf4c5f</hash>
-      </hashes>
+    <component type="library" bom-ref="pkg:maven/org.jreleaser/jreleaser-utils@1.6.0?type=jar">
+      <group>org.jreleaser</group>
+      <name>jreleaser-utils</name>
+      <version>1.6.0</version>
+      <description>JReleaser utility classes</description>
       <licenses>
         <license>
           <id>Apache-2.0</id>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
         </license>
       </licenses>
-      <purl>pkg:maven/io.github.openfeign/feign-httpclient@12.3?type=jar</purl>
+      <purl>pkg:maven/org.jreleaser/jreleaser-utils@1.6.0?type=jar</purl>
       <modified>false</modified>
+      <externalReferences><reference type="vcs"><url>https://github.com/jreleaser/jreleaser</url></reference></externalReferences>
     </component>
-    <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar">
-      <group>org.slf4j</group>
-      <name>slf4j-api</name>
-      <version>2.0.7</version>
-      <description>The slf4j API</description>
+    <component type="library" bom-ref="pkg:maven/org.bouncycastle/bcpg-jdk15on@1.70?type=jar">
+      <group>org.bouncycastle</group>
+      <name>bcpg-jdk15on</name>
+      <version>1.70</version>
+      <description>The Bouncy Castle Java API for handling the OpenPGP protocol. This jar contains the OpenPGP API for JDK 1.5 and up. The APIs can be used in conjunction with a JCE/JCA provider such as the one provided with the Bouncy Castle Cryptography APIs.</description>
       <hashes>
-        <hash alg="MD5">403dffa46cdd2e3c82da19df4f394a4c</hash>
-        <hash alg="SHA-1">41eb7184ea9d556f23e18b5cb99cad1f8581fc00</hash>
-        <hash alg="SHA-256">5d6298b93a1905c32cda6478808ac14c2d4a47e91535e53c41f7feeb85d946f4</hash>
-        <hash alg="SHA-512">216d2cac27d501972c888f94dfa747d700b80d60813884b6ab4b12c6a3b17ed0c21a1d27e1aa4332c97c828f20039e3913d2763d7e1a3cef36ae4389a276e7a8</hash>
-        <hash alg="SHA-384">c25b39f418aa726ba8405dfd9b356131f89984e2ef5a55a724a2abf3b7c78443f671105835161d2414d602cf03da9f2d</hash>
-        <hash alg="SHA3-384">f33abfaac21badae6f85d3ebbc6c1204fd7fda3bb15173e763fa8cee95bce6a8270eec2c8f49343c66c8d2767bc317e1</hash>
-        <hash alg="SHA3-256">6e00d4b264a2afc4ca4e98f716ecece66c32c626ca3f8c5d56b22092b6fe417b</hash>
-        <hash alg="SHA3-512">ad7b9142d370fc532a07cdd43881a129b012ff50e2bede3ac27d9bd31ec707bf2f45e82002fa59e962955cc38ab73cdd77713fca50cedc926c046f5617c1285b</hash>
+        <hash alg="MD5">01ddc3aa0289346f4db19d95039cefdb</hash>
+        <hash alg="SHA-1">062f72ec06f31a6c31a3f3355fce0384b21126d7</hash>
+        <hash alg="SHA-256">4f08f4aa74048824151c98dd3e92e7165ac30659834404f08a8e843bdad32847</hash>
+        <hash alg="SHA-512">4e240b7811ef90c090e83a181dace41da487555e4136221861b0060f9af6d8b316f2dd0472f747adb98ca5372f46055456ef04bdc0c3992188ab13302922fce9</hash>
+        <hash alg="SHA-384">d89dec6226112d13cbea461d84740699770dd7d8ad3f67ab65e7b49fd08a096a948e54da2e6a681925c4320f410bba37</hash>
+        <hash alg="SHA3-384">5e8e8ca63cc550a8f50b627c4dd051f0eb5c31b99ff53dabd7d5f5d1ed98d0dc1d4963a09fc0db32f8e0ff769a2a6e65</hash>
+        <hash alg="SHA3-256">77f28e7e22b3b3a8d7b667fb7f783847c4b11ee7208833636e09e8b38390fd51</hash>
+        <hash alg="SHA3-512">cb238dbb641c42c49b5801bdfa6432395e860c1a7485ba68e2d57887e3d22ff254718c6cbfa34c107bfb09d74e2f85c33b95f89dfa886e141a8247a0abf2b5c2</hash>
       </hashes>
       <licenses>
         <license>
-          <id>MIT</id>
-          <url>https://opensource.org/licenses/MIT</url>
+          <name>Bouncy Castle Licence</name>
+          <url>https://www.bouncycastle.org/licence.html</url>
         </license>
-      </licenses>
-      <purl>pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar</purl>
-      <modified>false</modified>
-    </component>
-    <component type="library" bom-ref="pkg:maven/org.tukaani/xz@1.9?type=jar">
-      <group>org.tukaani</group>
-      <name>xz</name>
-      <version>1.9</version>
-      <description>XZ data compression</description>
-      <hashes>
-        <hash alg="MD5">57c2fbfeb55e307ccae52e5322082e02</hash>
-        <hash alg="SHA-1">1ea4bec1a921180164852c65006d928617bd2caf</hash>
-        <hash alg="SHA-256">211b306cfc44f8f96df3a0a3ddaf75ba8c5289eed77d60d72f889bb855f535e5</hash>
-        <hash alg="SHA-512">a4362db234d4e83683e90f5baf90c82107450cc4404acab96e3fab14b8a3d4588a19722171d32f27d18463682a6994cad9af0b1065c954e3a77ea7bdcf586bac</hash>
-        <hash alg="SHA-384">aa30349b094723369908369a18e2cb5beb5b7ca0b24b4d56c2f5725fae152220f6526466672b22bfec939e2e0622a01d</hash>
-        <hash alg="SHA3-384">b3e1fee7784188df5e1931c9e8137ac0e20e63f66f93e7f938a448fc0b3adb4be5205c7a5f1835007e233fee2696fc2c</hash>
-        <hash alg="SHA3-256">92eff603ed0aab557e1a45e17a74e80d8ec656b5f137197b23c429c903fa448f</hash>
-        <hash alg="SHA3-512">b290f92958f8cd91705331d8411140c23957ab8b568fbe19a70f4f1dc97eddc13d3a200df28a02ab5911ce18f546c33f720878be0f727edac839a6e63ee66ece</hash>
-      </hashes>
-      <licenses>
         <license>
-          <name>Public Domain</name>
+          <id>Apache-1.1</id>
+          <url>http://apache.org/licenses/LICENSE-1.1</url>
         </license>
       </licenses>
-      <purl>pkg:maven/org.tukaani/xz@1.9?type=jar</purl>
+      <purl>pkg:maven/org.bouncycastle/bcpg-jdk15on@1.70?type=jar</purl>
       <modified>false</modified>
-      <externalReferences><reference type="vcs"><url>https://git.tukaani.org/?p=xz-java.git</url></reference></externalReferences>
+      <externalReferences><reference type="issue-tracker"><url>https://github.com/bcgit/bc-java/issues</url></reference><reference type="vcs"><url>https://github.com/bcgit/bc-java</url></reference></externalReferences>
     </component>
-    <component type="library" bom-ref="pkg:maven/org.jreleaser/jreleaser-model-impl@1.6.0?type=jar">
+    <component type="library" bom-ref="pkg:maven/org.jreleaser/jreleaser-java-sdk-commons@1.6.0?type=jar">
       <group>org.jreleaser</group>
-      <name>jreleaser-model-impl</name>
+      <name>jreleaser-java-sdk-commons</name>
       <version>1.6.0</version>
-      <hashes>
-        <hash alg="MD5">d2760fed3ab0f395c3ec08c3f7493d52</hash>
-        <hash alg="SHA-1">37f35b86cc5bcdf8c7d306d97884c2d89fa742d5</hash>
-        <hash alg="SHA-256">284a61227c9f031b6b6928bfef76eeea45c97e6053b7a1190e3dd64c0effd8df</hash>
-        <hash alg="SHA-512">81899b65d3eb10b0dac885ee17b45822d12d5746141876ef2573b0afaec13c92187ebf8a6c446ce002f25f8bc3d40f1a88e1c8c548bd35a556efc86d9f5ed809</hash>
-        <hash alg="SHA-384">c961c3d7d900e27341988545b53d9bc8f89275e700799e41b56dc43444173e1bf962e00f96026de0fee5894594d40d6f</hash>
-        <hash alg="SHA3-384">984a6c6ab7487eeb35b3aa8d87754d4dd55bdcbcce9239bd0ec17b1ca63e1a66e4f34767476bd5b79e0998477ccc7c35</hash>
-        <hash alg="SHA3-256">a5b874d301532774b825877e6d29045492c60e20a00d55d096e0a3b371885a41</hash>
-        <hash alg="SHA3-512">83babeb5dc661f2a4f4082872615c1c70719c66ac3f2071f367a82d1b7e44390121d4e59ace75f0fdbc66f5277c306242ee491de2268d49bc5c9da4247b260e9</hash>
-      </hashes>
-      <licenses/>
-      <purl>pkg:maven/org.jreleaser/jreleaser-model-impl@1.6.0?type=jar</purl>
+      <description>Utilities for Java SDKs</description>
+      <licenses>
+        <license>
+          <id>Apache-2.0</id>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+        </license>
+      </licenses>
+      <purl>pkg:maven/org.jreleaser/jreleaser-java-sdk-commons@1.6.0?type=jar</purl>
       <modified>false</modified>
+      <externalReferences><reference type="vcs"><url>https://github.com/jreleaser/jreleaser</url></reference></externalReferences>
     </component>
     <component type="library" bom-ref="pkg:maven/io.github.openfeign/feign-jackson@12.3?type=jar">
       <group>io.github.openfeign</group>
@@ -464,303 +579,158 @@
       <purl>pkg:maven/io.github.openfeign/feign-jackson@12.3?type=jar</purl>
       <modified>false</modified>
     </component>
-    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-compress@1.22?type=jar">
-      <group>org.apache.commons</group>
-      <name>commons-compress</name>
-      <version>1.22</version>
-      <description>Apache Commons Compress software defines an API for working with
-compression and archive formats.  These include: bzip2, gzip, pack200,
-lzma, xz, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4,
-Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.</description>
-      <hashes>
-        <hash alg="MD5">f1e4db16fee4291212d91409313a8086</hash>
-        <hash alg="SHA-1">691a8b4e6cf4248c3bc72c8b719337d5cb7359fa</hash>
-        <hash alg="SHA-256">53d04a0efc7223baecaa303bd5d298eb0600e6b82b4076f9cecd558b97ba760b</hash>
-        <hash alg="SHA-512">2d64fa6cd081fff5d73ee662a82f6186991fc13b4bdaee18b5f1bdcab06d9acb70e3713d18b296337791448251fbd6768bd84afaa817a10547652d0cfa885563</hash>
-        <hash alg="SHA-384">295d7f69d151abbd784e1c4d021c77ce43e129bb5bda0c55762b32d77c8607863383297674ec8a212ea3dfe4007b0044</hash>
-        <hash alg="SHA3-384">af04eb1b4647b1a041c5ee994c2c7a32556b5410b916fedb69905f166938baa43ba54fdc67084205794c02680d3c6349</hash>
-        <hash alg="SHA3-256">40f2960e82adfb171b0c5430271fdb0c0dae243aaf9b08021df54fd4d4a3a0b0</hash>
-        <hash alg="SHA3-512">f2c445f77bda3ef230a2b78ea88d86e48a7d6db36805f841d5cffe1f178842a161b2fda0b0d60162af210f18ed9c5bb9579c963291c26f715c1aa389d9a6785c</hash>
-      </hashes>
+    <component type="library" bom-ref="pkg:maven/org.jreleaser/jreleaser-git-java-sdk@1.6.0?type=jar">
+      <group>org.jreleaser</group>
+      <name>jreleaser-git-java-sdk</name>
+      <version>1.6.0</version>
+      <description>Java SDK for Git</description>
       <licenses>
         <license>
           <id>Apache-2.0</id>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
         </license>
       </licenses>
-      <purl>pkg:maven/org.apache.commons/commons-compress@1.22?type=jar</purl>
+      <purl>pkg:maven/org.jreleaser/jreleaser-git-java-sdk@1.6.0?type=jar</purl>
       <modified>false</modified>
-      <externalReferences><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/COMPRESS</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-compress.git</url></reference></externalReferences>
+      <externalReferences><reference type="vcs"><url>https://github.com/jreleaser/jreleaser</url></reference></externalReferences>
     </component>
-    <component type="library" bom-ref="pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar">
-      <group>org.apache.httpcomponents</group>
-      <name>httpclient</name>
-      <version>4.5.13</version>
-      <description>Apache HttpComponents Client</description>
-      <hashes>
-        <hash alg="MD5">40d6b9075fbd28fa10292a45a0db9457</hash>
-        <hash alg="SHA-1">e5f6cae5ca7ecaac1ec2827a9e2d65ae2869cada</hash>
-        <hash alg="SHA-256">6fe9026a566c6a5001608cf3fc32196641f6c1e5e1986d1037ccdbd5f31ef743</hash>
-        <hash alg="SHA-512">3567739186e551f84cad3e4b6b270c5b8b19aba297675a96bcdff3663ff7d20d188611d21f675fe5ff1bfd7d8ca31362070910d7b92ab1b699872a120aa6f089</hash>
-        <hash alg="SHA-384">093ac3e2dde58e34aa70309c7305eb3c9b5be2509a9293f1672494da55479a86bd112e83326746dc7a32855472952b99</hash>
-        <hash alg="SHA3-384">cd6882e7868624164e460f2f3ea01466f863c0dcb902b031c656b57356f563be83b29530df41d88d634ed3d01fc9964d</hash>
-        <hash alg="SHA3-256">710b1d8d7dae0b8e4270756694ca9c83d64965f42d3b4170c609b14d47c2762c</hash>
-        <hash alg="SHA3-512">276fa6a6599dc89382d658115695cf4da6b0d39b34e9c349c17a5dbd64122eaee553bb9ed75c0378ec4a83be157c8aa39370662de3c9b8fd55ebc1dd608383e6</hash>
-      </hashes>
+    <component type="library" bom-ref="pkg:maven/org.jreleaser/jreleaser-model-api@1.6.0?type=jar">
+      <group>org.jreleaser</group>
+      <name>jreleaser-model-api</name>
+      <version>1.6.0</version>
+      <description>JReleaser Model API</description>
       <licenses>
         <license>
           <id>Apache-2.0</id>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
         </license>
       </licenses>
-      <purl>pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar</purl>
+      <purl>pkg:maven/org.jreleaser/jreleaser-model-api@1.6.0?type=jar</purl>
       <modified>false</modified>
+      <externalReferences><reference type="vcs"><url>https://github.com/jreleaser/jreleaser</url></reference></externalReferences>
     </component>
-    <component type="library" bom-ref="pkg:maven/org.apache.tika/tika-core@2.7.0?type=jar">
-      <publisher>The Apache Software Foundation</publisher>
-      <group>org.apache.tika</group>
-      <name>tika-core</name>
-      <version>2.7.0</version>
-      <description>This is the core Apache Tika™ toolkit library from which all other modules inherit functionality. It
-    also
-    includes the core facades for the Tika API.</description>
+    <component type="library" bom-ref="pkg:maven/org.eclipse.jgit/org.eclipse.jgit@5.13.0.202109080827-r?type=jar">
+      <group>org.eclipse.jgit</group>
+      <name>org.eclipse.jgit</name>
+      <version>5.13.0.202109080827-r</version>
+      <description>Repository access and algorithms</description>
       <hashes>
-        <hash alg="MD5">42b3dd0d4679ec6bafd848b6c0cb3035</hash>
-        <hash alg="SHA-1">e9e8f1a7dc833e633fb2c717e8fa811e3e9dbf4a</hash>
-        <hash alg="SHA-256">2603961edec8bcee014d2c360e5a9a0cdbf10aa8e6e95cf67abe190c837bb054</hash>
-        <hash alg="SHA-512">1d0a07cd55db3bdd6d3d169f0747e920491936a7401af45e5f14f10400f3addd93918f8efb80445c0cf9d91803571877d7d4e1429440ab6ae8c49ec36a77e103</hash>
-        <hash alg="SHA-384">c3e7ad76e7abdaa27d28416e101110eab481f0f72cd0053de9030a0220549c1f346314116e04665ee70cdeba5fcbc5f8</hash>
-        <hash alg="SHA3-384">97b801fbde8b9b84c13aea4dd087cbb333e7cba52737d7f5c54f4ea46516d80677d363a2063de9cc014773da2bc5c4a5</hash>
-        <hash alg="SHA3-256">45ce7c3c2ea1ef9b7785a42604a0ec75444a9bd55b0687307e5a874d51f29547</hash>
-        <hash alg="SHA3-512">bd45003a2aa326c195e847199cda6aa52f5498cacf6faaab99b95826b4812da9590c29a80c0a3811c27403cc52a8e79a38c4770ce4063b7e013566b7e794af98</hash>
+        <hash alg="MD5">5a1f197785cb9c69d1241cb0f16937a2</hash>
+        <hash alg="SHA-1">32badd5adebd660424509344259ad3e409699ba2</hash>
+        <hash alg="SHA-256">dabf8369f0cdf8cf17b7f7da4bda9320c570bb754c88e0beb7b852812cf5cd25</hash>
+        <hash alg="SHA-512">768dbb3ba2649a7025338197b4703b414983e4608138719b0d69201f7f49e57e0454846b41b775b135b083f820824749da6121f20a812c4f155a97f09c9b15ac</hash>
+        <hash alg="SHA-384">deb24e724ace28ddbaf5e7a1fafaa449a49b97d3a5a53eb487a2ab90895f05684c48a839e3677643364ff965cc33af95</hash>
+        <hash alg="SHA3-384">e5aed5403b4c28624bc58be31601897555c94eb54e680f1ccb59992a643db24d0de465b7ae879b5ba29d56a132a87b69</hash>
+        <hash alg="SHA3-256">8ccc07758fbf1ac55028538890afe7d209c866ee019875ef15acfaea9ac7244f</hash>
+        <hash alg="SHA3-512">4725fff9b6067d70d4c82cbf549b16be521e839d5c8ecf605f9a71516ec78334e348cb2d3303afb7ba18ce464a68c1e195bb6fe673d9d4d6b8d75c84d0b4e101</hash>
       </hashes>
       <licenses>
         <license>
-          <id>Apache-2.0</id>
-          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <id>BSD-3-Clause</id>
         </license>
       </licenses>
-      <purl>pkg:maven/org.apache.tika/tika-core@2.7.0?type=jar</purl>
-      <modified>false</modified>
-      <externalReferences><reference type="website"><url>http://www.apache.org</url></reference><reference type="build-system"><url>https://builds.apache.org/job/Tika-trunk/</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/TIKA</url></reference></externalReferences>
-    </component>
-    <component type="library" bom-ref="pkg:maven/org.jreleaser/jreleaser-tool-java-sdk@1.6.0?type=jar">
-      <group>org.jreleaser</group>
-      <name>jreleaser-tool-java-sdk</name>
-      <version>1.6.0</version>
-      <hashes>
-        <hash alg="MD5">abfd7ce4581351b44b505c26c1367955</hash>
-        <hash alg="SHA-1">ef1e1b370a0a24a202089f732598f82ce91c74f2</hash>
-        <hash alg="SHA-256">a4bcf1548d74752460e28bd3ab7e43b779b5a8f446285b8e7643dd83983f5b7f</hash>
-        <hash alg="SHA-512">e14548ab617020cac195b98b2b6bf04043cf409ef395783e8c2c38441c761f38dd34b4858d4d7e26d2c69fde233ccaa102f180d3ff547efc29e475d0c38b7b40</hash>
-        <hash alg="SHA-384">85953ec5ec2714df877d6012db03c5d88a971dcb35cfc43c197570e8e2b010c1c292e228e4fe8c7f93418e11868b8654</hash>
-        <hash alg="SHA3-384">cb294f21ab1d8a8c8f488e2f60b456e66985b55dbb5ecc56646b57fc6fbb9e36aa69801bdb6c1ea5825288baab329183</hash>
-        <hash alg="SHA3-256">cf8c1f78e8630a84e28269970a18752616d82aec3a5d9297459244fb4d52980a</hash>
-        <hash alg="SHA3-512">bd42233ee963b74dd472abde6801b8140f3ec1b08e503e486bd7c8ef7575e65a72f0bd8a3ca996adbc832d4df6be8e2b500a425b77dfdfd80e57818af84a79c2</hash>
-      </hashes>
-      <licenses/>
-      <purl>pkg:maven/org.jreleaser/jreleaser-tool-java-sdk@1.6.0?type=jar</purl>
+      <purl>pkg:maven/org.eclipse.jgit/org.eclipse.jgit@5.13.0.202109080827-r?type=jar</purl>
       <modified>false</modified>
     </component>
-    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.2?type=jar">
-      <group>com.fasterxml.jackson.core</group>
-      <name>jackson-databind</name>
-      <version>2.14.2</version>
-      <description>General data-binding functionality for Jackson: works on core streaming API</description>
+    <component type="library" bom-ref="pkg:maven/io.github.openfeign/feign-core@12.3?type=jar">
+      <group>io.github.openfeign</group>
+      <name>feign-core</name>
+      <version>12.3</version>
+      <description>Feign Core</description>
       <hashes>
-        <hash alg="MD5">c1b12dd14734cd1986132bf55042dd7e</hash>
-        <hash alg="SHA-1">01e71fddbc80bb86f71a6345ac1e8ab8a00e7134</hash>
-        <hash alg="SHA-256">501d3abce4d18dcc381058ec593c5b94477906bba6efbac14dae40a642f77424</hash>
-        <hash alg="SHA-512">85473a29d23292f49092af9e7a7a63993206847c53b3e71f3c67245d68f7b19cc7c341e0ece409eb5e96602df98a848e957d8691fdd2c5fcddd807df9078255e</hash>
-        <hash alg="SHA-384">5c54d6c497cb329c3424a30319bf657ea222349eadc5ae74c30e8dc1525d7b60b7785f4d20370267b03343dd738cc13e</hash>
-        <hash alg="SHA3-384">98ff0b2a4dfc1faf319d4b0d38376c3c7a58b65d071db293232eed810adf2e525fecee3be45c99b41e20cf6a3a8ebef9</hash>
-        <hash alg="SHA3-256">2dba45f78a0d37402083975e18dbb3201705faf7e533c3e9721b9364c2a1ab0f</hash>
-        <hash alg="SHA3-512">76ef73198269cfd0922f4ae86c8b7e6a9cd1b96ee55da43ebfe57dd34365cc1c5c5630fadf79e46156a52b6b96b7d1f694f5e4f5c4f6a3d3ebb31c927e414435</hash>
+        <hash alg="MD5">9e6e1ff8b68d2b6c1fc5bdc7ff208030</hash>
+        <hash alg="SHA-1">d280b09a17b63e69788fd3d8d215b7013ab48b16</hash>
+        <hash alg="SHA-256">939fbed2c2392a9633bc1d26f0ef9e934b059d1a9a9d4d966cedaf9075c546ec</hash>
+        <hash alg="SHA-512">8335901d8918747dc29d37a2ac630c6a78ea6ff04bfea77e6d8c74188e9e584142920996c45120caa86299486949a04e1ec1f1bef30229904360fcb5c5d4a1c4</hash>
+        <hash alg="SHA-384">dc7a0d10bdf2c3aeafba83ca7e41d21c3288f3df0b76e339788fcf7606381970b6429108dbf2d1212075d1feba040842</hash>
+        <hash alg="SHA3-384">2907938ea76735cde9b34676c6c8b04786f1595687f96734e7659768175cb7a525508f84c48d9b10b0b2f593158e1ed5</hash>
+        <hash alg="SHA3-256">474f6b0ab420bf63549ed123fff99b73fc881771c6a0c591e58dfb17adbe9899</hash>
+        <hash alg="SHA3-512">553a6dc1c3cf7facdb3b4e15be1d6d90259f1d36ce137db3a6e53a967ef4939aaa98c974b059c8f32dd42316bb7eee3b51910cf0fb172d0df9b8ff39d8cc722d</hash>
       </hashes>
       <licenses>
         <license>
           <id>Apache-2.0</id>
         </license>
       </licenses>
-      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.2?type=jar</purl>
+      <purl>pkg:maven/io.github.openfeign/feign-core@12.3?type=jar</purl>
       <modified>false</modified>
-      <externalReferences><reference type="vcs"><url>https://github.com/FasterXML/jackson-databind</url></reference></externalReferences>
     </component>
     <component type="library" bom-ref="pkg:maven/org.jreleaser/jreleaser-resource-bundle@1.6.0?type=jar">
       <group>org.jreleaser</group>
       <name>jreleaser-resource-bundle</name>
       <version>1.6.0</version>
-      <hashes>
-        <hash alg="MD5">8419930ec5e42489dad5e26749a994eb</hash>
-        <hash alg="SHA-1">050aba092fa794e0cb91158de894a97aff581356</hash>
-        <hash alg="SHA-256">38434b31fac439399aa37018fa69302a9d1b04be6efb7b23d53d18615e1f4f2b</hash>
-        <hash alg="SHA-512">c77c476e972e17b25de3aecf75d71482535d68cdc5e4bf556f5d4cab17345b9318d47fa42c9da671769f9bcf7f549efde70b64eff5cb189c805bb406fd705cb8</hash>
-        <hash alg="SHA-384">b1d8f56681f39c638806e669447d9600507946448b528060d98afc2123c637980ba5609aba4b357c83acd772bfbdb73e</hash>
-        <hash alg="SHA3-384">74a52a9891c520a0f90ffbab33da0219cd787bbe309ae8eca303de00c6041692554e8d650a6a3925e057322bd00700ff</hash>
-        <hash alg="SHA3-256">304bae90a7c53e6ad711e54bb8847c3eedc0e18cac03bffa14729918cb59efce</hash>
-        <hash alg="SHA3-512">16a31cb40ed20dcaa5d34cb6aa2b81325f285b7feb5dda2486206496449fd548ef51117b38a8074a4a106fba9836de72232762dff60f535cd76f5848860c2f6c</hash>
-      </hashes>
-      <licenses/>
-      <purl>pkg:maven/org.jreleaser/jreleaser-resource-bundle@1.6.0?type=jar</purl>
-      <modified>false</modified>
-    </component>
-    <component type="library" bom-ref="pkg:maven/com.googlecode.javaewah/JavaEWAH@1.2.3?type=jar">
-      <group>com.googlecode.javaewah</group>
-      <name>JavaEWAH</name>
-      <version>1.2.3</version>
-      <description>The bit array data structure is implemented in Java as the BitSet class. Unfortunately, this fails to scale without compression.
-  JavaEWAH is a word-aligned compressed variant of the Java bitset class. It uses a 64-bit run-length encoding (RLE) compression scheme.
-  The goal of word-aligned compression is not to achieve the best compression, but rather to improve query processing time. Hence, we try to save CPU cycles, maybe at the expense of storage. However, the EWAH scheme we implemented is always more efficient storage-wise than an uncompressed bitmap (implemented in Java as the BitSet class). Unlike some alternatives, javaewah does not rely on a patented scheme.</description>
-      <hashes>
-        <hash alg="MD5">8fdeda28c1fb10e67b3d79f86bef5e61</hash>
-        <hash alg="SHA-1">13a27c856e0c8808cee9a64032c58eee11c3adc9</hash>
-        <hash alg="SHA-256">d65226949713c4c61a784f41c51167e7b0316f93764398ebba9e4336b3d954c2</hash>
-        <hash alg="SHA-512">48cd9df9252c58e9ffe4583e68607944bcdf2ad7a3be7b4317467f503c4f56cdbde358ca7c4f34fa620d01615072a42f3a572fc4f1237e266310b7508e79bcac</hash>
-        <hash alg="SHA-384">d1fd074f21b8a54a07d3f4579376d7c3ab72f24814ebc9ba92344e9da4721e9bfa3cda3a599137e4ddf2395a3c5b88e4</hash>
-        <hash alg="SHA3-384">a553864f196f73c139a104170ab79e780046fb5f322072c5494a6590361021f875afd7168f858b0531b61918ab49b94e</hash>
-        <hash alg="SHA3-256">bab97f3f893af36c36218a151b0c3fece27d47f358cc19e1ca9c22d77942bb76</hash>
-        <hash alg="SHA3-512">be817b93c7093d44ec8dded565d7e5651772ce38e9c72283c05191b33d0ecb2798cd385395f553500446573ac49dccc21f4ba3067d71eb89e03daa384d0193be</hash>
-      </hashes>
-      <licenses>
-        <license>
-          <id>Apache-2.0</id>
-        </license>
-      </licenses>
-      <purl>pkg:maven/com.googlecode.javaewah/JavaEWAH@1.2.3?type=jar</purl>
-      <modified>false</modified>
-      <externalReferences><reference type="issue-tracker"><url>https://github.com/lemire/javaewah/issues</url></reference><reference type="vcs"><url>scm:git:git@github.com:lemire/javaewah.git</url></reference></externalReferences>
-    </component>
-    <component type="library" bom-ref="pkg:maven/commons-io/commons-io@2.11.0?type=jar">
-      <group>commons-io</group>
-      <name>commons-io</name>
-      <version>2.11.0</version>
-      <description>The Apache Commons IO library contains utility classes, stream implementations, file filters,
-file comparators, endian transformation classes, and much more.</description>
-      <hashes>
-        <hash alg="MD5">3b4b7ccfaeceeac240b804839ee1a1ca</hash>
-        <hash alg="SHA-1">a2503f302b11ebde7ebc3df41daebe0e4eea3689</hash>
-        <hash alg="SHA-256">961b2f6d87dbacc5d54abf45ab7a6e2495f89b75598962d8c723cea9bc210908</hash>
-        <hash alg="SHA-512">5bd78eed456ede30119319c5bed8e3e4c443b6fd7bdb3a7a5686647bd83094d0c3e2832a7575cfb60e4ef25f08106b93476939d3adcfecf5533cc030b3039e10</hash>
-        <hash alg="SHA-384">114f1e324d90ad887c177876d410f5787a8e8da6c48d4b2862d365802c0efded3a88cb24046976bf6276cadad3712f0f</hash>
-        <hash alg="SHA3-384">80288c03ad4d80d69f91d056ffc5570d49a9c76bf54ad2dff0121ecde26a560df76d05156f281f5c6db2a38ff07a873d</hash>
-        <hash alg="SHA3-256">5adfb5ccaf5f21a549422f426118a9542673926fcd18c68390cf813e791dcf6c</hash>
-        <hash alg="SHA3-512">7573f47f0babb53cefdc7c2309a0b982d800139064537b0797da442853d081010ad7c3c74a500598a0f800639a5d540eca21963ea652c68613907059bd4278c2</hash>
-      </hashes>
+      <description>JReleaser resource bundle</description>
       <licenses>
         <license>
           <id>Apache-2.0</id>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
         </license>
       </licenses>
-      <purl>pkg:maven/commons-io/commons-io@2.11.0?type=jar</purl>
+      <purl>pkg:maven/org.jreleaser/jreleaser-resource-bundle@1.6.0?type=jar</purl>
       <modified>false</modified>
-      <externalReferences><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/IO</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-io.git</url></reference></externalReferences>
+      <externalReferences><reference type="vcs"><url>https://github.com/jreleaser/jreleaser</url></reference></externalReferences>
     </component>
-    <component type="library" bom-ref="pkg:maven/org.jreleaser/jreleaser-utils@1.6.0?type=jar">
+    <component type="library" bom-ref="pkg:maven/org.jreleaser/jreleaser-signing-java-sdk@1.6.0?type=jar">
       <group>org.jreleaser</group>
-      <name>jreleaser-utils</name>
+      <name>jreleaser-signing-java-sdk</name>
       <version>1.6.0</version>
-      <hashes>
-        <hash alg="MD5">ca784b5aa352b016a37b393e9e500325</hash>
-        <hash alg="SHA-1">b0dde5ebbe5a98e5fa90b101dca5ad56e92c49c8</hash>
-        <hash alg="SHA-256">02b038af2f098d6019b94f4f4e55b8f901d2b5b4a072b083b23e47bd6a3e23cd</hash>
-        <hash alg="SHA-512">9b5e03766473ee854f877182a758a4842a9566772405af73cd200388eeeb981712e6a3e57f4f2f14f09a912b0cad625a75c5441b57eaa238699beabf327dd56a</hash>
-        <hash alg="SHA-384">ebc800a8a0a6d19ac2bc922598f8913df5a5eb972dc46ba4eadec5034538c9c95866839670dbf92ca93b075dcb659a0c</hash>
-        <hash alg="SHA3-384">ed0ba35caf8b7d7dc67d7350617b6cbd54de336634fd5927f03768a89f74ede798ecf343964ef0484302ee262617756b</hash>
-        <hash alg="SHA3-256">b81154ce5c428820626ee1a99e7f9bbe63d4803f7f311744a26bb8331fb193cc</hash>
-        <hash alg="SHA3-512">b6429f8944cedd026f7b0c30328f8b5e2717493624cee82df48f7e69c8fe8a26b0542d447b1795c7fad7ff90affadcc087d69a576d69cbaccf3ccf1ca962be56</hash>
-      </hashes>
-      <licenses/>
-      <purl>pkg:maven/org.jreleaser/jreleaser-utils@1.6.0?type=jar</purl>
-      <modified>false</modified>
-    </component>
-    <component type="library" bom-ref="pkg:maven/org.bouncycastle/bcprov-jdk15on@1.70?type=jar">
-      <group>org.bouncycastle</group>
-      <name>bcprov-jdk15on</name>
-      <version>1.70</version>
-      <description>The Bouncy Castle Crypto package is a Java implementation of cryptographic algorithms. This jar contains JCE provider and lightweight API for the Bouncy Castle Cryptography APIs for JDK 1.5 and up.</description>
-      <hashes>
-        <hash alg="MD5">1809d0449a6374279c01fdd3be26cd92</hash>
-        <hash alg="SHA-1">4636a0d01f74acaf28082fb62b317f1080118371</hash>
-        <hash alg="SHA-256">8f3c20e3e2d565d26f33e8d4857a37d0d7f8ac39b62a7026496fcab1bdac30d4</hash>
-        <hash alg="SHA-512">7dccfc636ee4df1487615818cfa99c69941081df95e8ef1eaf4bca165594dff9547e3774fd70de3418abace77d2c45889f70bcd2e6823f8539f359e68eaf36d1</hash>
-        <hash alg="SHA-384">a0b35d204cd962f1d246fa94b6e8b0fcee1a7c3f37b7e87cda742f2124a25b48794ce11a903ea8d12009c86227b6808d</hash>
-        <hash alg="SHA3-384">980d81d3d9906764bbf2ae9b3b364ea58628b485ce1dc3d06734e10495d79f2be2e7cc7df61ac88cd67c1104c7af9393</hash>
-        <hash alg="SHA3-256">10a3572e42d29f609721d795116e3e5d0f6f03efef84bb979ce72e26908d242b</hash>
-        <hash alg="SHA3-512">a0761cb6deeb86c94b96850c72c0a0eaf516ca849f4b8268f9f60c9ed2a6730e692c15098d47e617da294e931113c6cbcaddec8957c9f029fa595b5f14ff35ac</hash>
-      </hashes>
+      <description>JReleaser signing Java SDK</description>
       <licenses>
         <license>
-          <name>Bouncy Castle Licence</name>
-          <url>https://www.bouncycastle.org/licence.html</url>
+          <id>Apache-2.0</id>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
         </license>
       </licenses>
-      <purl>pkg:maven/org.bouncycastle/bcprov-jdk15on@1.70?type=jar</purl>
-      <modified>false</modified>
-      <externalReferences><reference type="issue-tracker"><url>https://github.com/bcgit/bc-java/issues</url></reference><reference type="vcs"><url>https://github.com/bcgit/bc-java</url></reference></externalReferences>
-    </component>
-    <component type="library" bom-ref="pkg:maven/org.jreleaser/jreleaser-signing-java-sdk@1.6.0?type=jar">
-      <group>org.jreleaser</group>
-      <name>jreleaser-signing-java-sdk</name>
-      <version>1.6.0</version>
-      <hashes>
-        <hash alg="MD5">2608fa713b1fa2a515ec2c83ec96a49c</hash>
-        <hash alg="SHA-1">f0de8990fee988060fe7721d389d6ba8aad481a4</hash>
-        <hash alg="SHA-256">ea0e35358f453eee98d0a4e921bfa6114c04afe52adb0c74bcc5200092971454</hash>
-        <hash alg="SHA-512">4d0146d43526b329139bb38edbe63f6f783ae99f5d2778c6c6af8851be458739afe31951bf8e54f85da7c6e5d5e7d4670b45917c6ffa855f578355a6359286a6</hash>
-        <hash alg="SHA-384">a29024fbd6fb57818b5800cb961a043d4d131e4c16d0b6965a4abd4ef275001bd607697195f562e6b3d4f36fac5847b0</hash>
-        <hash alg="SHA3-384">5b9e053c6b9a48483a7cdd898f37fc72275171348ed4433b9759e0a4f86edad6a26c84ed69eae8612811e17b806df60a</hash>
-        <hash alg="SHA3-256">477c36bff3a1ec95810622a43d43ea9b1c614c54306897d9c4ee66f2a349a9e9</hash>
-        <hash alg="SHA3-512">b6594d20048651c4982230202c5af186f064025bf80d21c87d4cacb3d1b466bc1e5c850fea374edf9c3c98fda734ea52284bd62bbd456aee903c705152d767da</hash>
-      </hashes>
-      <licenses/>
       <purl>pkg:maven/org.jreleaser/jreleaser-signing-java-sdk@1.6.0?type=jar</purl>
       <modified>false</modified>
+      <externalReferences><reference type="vcs"><url>https://github.com/jreleaser/jreleaser</url></reference></externalReferences>
     </component>
-    <component type="library" bom-ref="pkg:maven/com.github.spullara.mustache.java/compiler@0.9.10?type=jar">
-      <group>com.github.spullara.mustache.java</group>
-      <name>compiler</name>
-      <version>0.9.10</version>
-      <description>Implementation of mustache.js for Java</description>
+    <component type="library" bom-ref="pkg:maven/io.github.openfeign/feign-httpclient@12.3?type=jar">
+      <group>io.github.openfeign</group>
+      <name>feign-httpclient</name>
+      <version>12.3</version>
+      <description>Feign Apache HttpClient</description>
       <hashes>
-        <hash alg="MD5">5638fc78a17d5063cc4b0d00f6e87491</hash>
-        <hash alg="SHA-1">6111ae24e3be9ecbd75f5fe908583fc14b4f0174</hash>
-        <hash alg="SHA-256">2b5a9217811cb99846a473fa8e0d233eb33629347b7f44941f6c0fbd4cdf1038</hash>
-        <hash alg="SHA-512">2ccf3196af2b518c96df748a72a0122d033dc222e1fab3e12f3e2094146d44bec20bd1502390b59abf090cbdf5dd4d580084b07fb7241248b5b8da2605207559</hash>
-        <hash alg="SHA-384">0204e77a4a64701af5000df6601f4f4c23cb5e53dd39a1325615d4f942cd2c91d04bbac20348ae49731f586282165c33</hash>
-        <hash alg="SHA3-384">0960da7175835484471f485d481499f8b65f134ff4f1629618560adaa5a08caa897fbefcea190f93106ee9e3273381b2</hash>
-        <hash alg="SHA3-256">cfb7e640392ef590069e6b1d059dc20b8fcff984a4b267b3969fcf50ed0edd4f</hash>
-        <hash alg="SHA3-512">db3dad3809879bca835a04da890fd86dbc58ba6637c72f07d02e39d13645ebb6c640b7fecc18a779e58946072078bdf114b91445026a32dd6501b5d1c6e7d933</hash>
+        <hash alg="MD5">4ec31fa7f187c15f9967c7ffcf714449</hash>
+        <hash alg="SHA-1">0ea51fdb4797c3ab62e1f8a726d4e02cf522dba2</hash>
+        <hash alg="SHA-256">3a2833e18cc868bff19d6320f22054f96995dc073ed27edfeb2d83996d2ef37c</hash>
+        <hash alg="SHA-512">3440afa129150c035670cd098e6eba6f676afc82db2db53a10b20621e30658b411d820652e4668dab5ca615f599a41a06dc826378b5e783f88f26c2cddfce8ed</hash>
+        <hash alg="SHA-384">b8dc38126b28fb486d459e23ae61a34073f16f0ef7ec37f49636919d0fd5a8d86354d76314462dba94efd4f613db92ef</hash>
+        <hash alg="SHA3-384">7c4161078011223122067406e5ad6efedfcf45c71d6e081f37e3fba1c73578c748d5a5e60d372a5fa7159ec7737e71bb</hash>
+        <hash alg="SHA3-256">b6d851642b9a5628dbe3cab5706c9d434f1d59ec881cd5cdf6fae84f644eb7c1</hash>
+        <hash alg="SHA3-512">9b3b7edc25efc7345a9cc7b2fe0eccefd57fa40d62e6a85b4a698827b9c34ff568236d591f6d5645de7eb275be2b10aee80f42881f6068f0b1c38f274faf4c5f</hash>
       </hashes>
       <licenses>
         <license>
           <id>Apache-2.0</id>
-          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
         </license>
       </licenses>
-      <purl>pkg:maven/com.github.spullara.mustache.java/compiler@0.9.10?type=jar</purl>
+      <purl>pkg:maven/io.github.openfeign/feign-httpclient@12.3?type=jar</purl>
       <modified>false</modified>
-      <externalReferences><reference type="vcs"><url>http://github.com/spullara/mustache.java</url></reference></externalReferences>
     </component>
-    <component type="library" bom-ref="pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar">
-      <group>org.apache.httpcomponents</group>
-      <name>httpcore</name>
-      <version>4.4.16</version>
-      <description>Apache HttpComponents Core (blocking I/O)</description>
+    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.2?type=jar">
+      <group>com.fasterxml.jackson.core</group>
+      <name>jackson-core</name>
+      <version>2.14.2</version>
+      <description>Core Jackson processing abstractions (aka Streaming API), implementation for JSON</description>
       <hashes>
-        <hash alg="MD5">28d2cd9bf8789fd2ec774fb88436ebd1</hash>
-        <hash alg="SHA-1">51cf043c87253c9f58b539c9f7e44c8894223850</hash>
-        <hash alg="SHA-256">6c9b3dd142a09dc468e23ad39aad6f75a0f2b85125104469f026e52a474e464f</hash>
-        <hash alg="SHA-512">168026436a6bcf5e96c0c59606638abbdc30de4b405ae55afde70fdf2895e267a3d48bba6bdadc5a89f38e31da3d9a9dc91e1cab7ea76f5e04322cf1ec63b838</hash>
-        <hash alg="SHA-384">ba9ceaee1a37ca3201d6a1315ecb0327b495489efd0baa155c219c475df8d3eb69fe77ab0026563db406497626da6562</hash>
-        <hash alg="SHA3-384">b9dc44dcc7cc86d5036f26d54c4003a2d72808ae7b07a0808bb53505c6d4281b5ad213eb1f3d0fef1113dec57cb0dfe1</hash>
-        <hash alg="SHA3-256">fd8ab51846476c6c18822151c9ec07b39a9633010b5d20ea937fc6910407bc64</hash>
-        <hash alg="SHA3-512">b42fa528242981a9d70e4f68ab75a24292df5112c44c21b6f18cb9201ce747885ba1d4dc69bc3d14d0da46a6c2638f937c11bc45749abeb55dc89ddada90cdda</hash>
+        <hash alg="MD5">6ee422ee4c481b2d5aacb2b5e36a7dc0</hash>
+        <hash alg="SHA-1">f804090e6399ce0cf78242db086017512dd71fcc</hash>
+        <hash alg="SHA-256">b5d37a77c88277b97e3593c8740925216c06df8e4172bbde058528df04ad3e7a</hash>
+        <hash alg="SHA-512">208953cf72691b3bab1ca2f9a045cccd3d75c46c90099ba884fbf16bc3e45045e5cd014d2c68c96e8a8826f87a5f0e18cb34b35e7ef03348953869c21e197367</hash>
+        <hash alg="SHA-384">e806595862c5fcdae801d9845befc1d12c97e6036ee839d34590dbd785a422d5832cf4fc5c7ee6e1a5ee7a59f37740f0</hash>
+        <hash alg="SHA3-384">4fa59f572f2e100e2eba6fc664a3b9f804fabd911a552cb40805f39e624a9c04246b679cf4b017bb782c8272877f49d2</hash>
+        <hash alg="SHA3-256">cef17d3a539cbf798cfb0bfa9faffa2b7baff3670b50743e91ee58b4c60b59f1</hash>
+        <hash alg="SHA3-512">fceeed5cb8fe4335d88282d15657762a4728483275a7ff45f50b9fe6a999757ccb37c415d001eb6250226f98f5c576b1b36a83e601fb393cfd34a811c2df5d00</hash>
       </hashes>
       <licenses>
         <license>
           <id>Apache-2.0</id>
         </license>
       </licenses>
-      <purl>pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar</purl>
+      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.2?type=jar</purl>
       <modified>false</modified>
+      <externalReferences><reference type="vcs"><url>https://github.com/FasterXML/jackson-core</url></reference></externalReferences>
     </component>
   </components>
   <dependencies>
