--- results/org.jreleaser/jreleaser/1.6.0/oss-rebuild/reference/jreleaser-config-yaml-1.6.0-cyclonedx.json:jreleaser-config-yaml-1.6.0-cyclonedx.json	2025-07-28 23:13:33.004808782 +0200
+++ results/org.jreleaser/jreleaser/1.6.0/oss-rebuild/rebuild/jreleaser-config-yaml-1.6.0-cyclonedx.json:jreleaser-config-yaml-1.6.0-cyclonedx.json	2025-07-28 23:13:34.204804785 +0200
@@ -1,10 +1,10 @@
 {
   "bomFormat" : "CycloneDX",
   "specVersion" : "1.4",
-  "serialNumber" : "urn:uuid:8252d6b7-f00e-4349-8671-6a76246a855b",
+  "serialNumber" : "urn:uuid:0186c181-1b2e-4441-aced-7fdac50cb365",
   "version" : 1,
   "metadata" : {
-    "timestamp" : "2023-04-29T10:07:05Z",
+    "timestamp" : "2025-07-11T06:29:32Z",
     "tools" : [
       {
         "vendor" : "CycloneDX",
@@ -23,260 +23,164 @@
   },
   "components" : [
     {
-      "group" : "org.jreleaser",
-      "name" : "jreleaser-model-api",
-      "version" : "1.6.0",
-      "hashes" : [
-        {
-          "alg" : "MD5",
-          "content" : "288354c621fdfef298e4e8cdc843e2c3"
-        },
-        {
-          "alg" : "SHA-1",
-          "content" : "54bcb05008c6f0b50433f8d0fe82e3a217317db1"
-        },
-        {
-          "alg" : "SHA-256",
-          "content" : "397e18c4fa02ba508e409a119866d4e78d64c6c76f5a4f22b3aefc027b662b9b"
-        },
-        {
-          "alg" : "SHA-512",
-          "content" : "67c4e2f9acb6db78c21cfd23d3411ce1e32b23690a1d5035a285b48cd9b996fd4c80b504d050e87a4a5604e6b56ca52878a464593f0bd8eea53059bcb263289f"
-        },
-        {
-          "alg" : "SHA-384",
-          "content" : "8f67be44af6f792c32f2b86d07738c52e5b742a650d010e8c0b5e60a62db627d5c695f23f24d814f232fc0246d03086c"
-        },
-        {
-          "alg" : "SHA3-384",
-          "content" : "1e5c3dffd4e3c545081904db6dcff892bd2f27285b4fa46a57cdd23c3fbb382ab06268e87d57212996387269b2c8b72f"
-        },
-        {
-          "alg" : "SHA3-256",
-          "content" : "d2b875e45846a0d17cf7f85d6289681ee42897519cdaca9625ffc56b1639909d"
-        },
-        {
-          "alg" : "SHA3-512",
-          "content" : "1a098f05c0735a7ed19cf374440818e9882b0288728f6658ce3709ac534c06cc7dc36ea4d7656a35281758d1ec09c31edf13a98d6680206a0c9fb1dff21ad04f"
-        }
-      ],
-      "licenses" : [ ],
-      "purl" : "pkg:maven/org.jreleaser/jreleaser-model-api@1.6.0?type=jar",
-      "modified" : false,
-      "type" : "library",
-      "bom-ref" : "pkg:maven/org.jreleaser/jreleaser-model-api@1.6.0?type=jar"
-    },
-    {
-      "group" : "org.apache.commons",
-      "name" : "commons-jexl3",
-      "version" : "3.3",
-      "description" : "JEXL is a library intended to facilitate the implementation of scripting features in applications and frameworks written in Java.",
+      "group" : "org.yaml",
+      "name" : "snakeyaml",
+      "version" : "1.33",
+      "description" : "YAML 1.1 parser and emitter for Java",
       "hashes" : [
         {
           "alg" : "MD5",
-          "content" : "3a332e3beb67b3a2a20bd0a950fc57c4"
+          "content" : "e0164a637c691c8cf01d29f90a709c02"
         },
         {
           "alg" : "SHA-1",
-          "content" : "c76b4cfa436c3e79e04806e62656b09968c388ba"
+          "content" : "2cd0a87ff7df953f810c344bdf2fe3340b954c69"
         },
         {
           "alg" : "SHA-256",
-          "content" : "07b0ff6c5a10ffb2e2c02da9e2c0e2e6702df44178cfb76881f69447fc386014"
+          "content" : "11ff459788f0a2d781f56a4a86d7e69202cebacd0273d5269c4ae9f02f3fd8f0"
         },
         {
           "alg" : "SHA-512",
-          "content" : "879111d1c3ad021ea3961e49161b3ff6ba251044ffef1ca4d36d880d9a09b1f395e17eef221a13274303f44e116204ae4b2a3ee3e931f117fc901e321d59b5c6"
+          "content" : "787b72aebb685689ab379ed8f238fc2f4175bb82d285909e39e7ff1ee1b9e64ad8878f4685dadde274f950b0dc77dca3082a52921c11094aa2a535672ae4f33c"
         },
         {
           "alg" : "SHA-384",
-          "content" : "7a268bf2c903be86813fcc7f06158abf79d558ee59ebf03470ebd06ca6e6d169beb1c3600e07c20c4f95fa7827fde841"
+          "content" : "9f0a0a35df2b339830b9e78294634ea894e7096e01709c82d965e24a9fa9ac6ee15edbbbf23368dcd57741de5bf23086"
         },
         {
           "alg" : "SHA3-384",
-          "content" : "1803d239f17f7eeee6edb69d38c4473319fd4eeeb684eda5c38b577a7aaf42965ce41d9082d515d5007be9a0b0712d81"
+          "content" : "91d8fd581d60be4090d3b522d8c119c12449cff2ce6c436d0e53977e1c9fea8686b2b360fb15f4c3507e4f243d7d6170"
         },
         {
           "alg" : "SHA3-256",
-          "content" : "01163da5e720b6d1f6bf8b6e9e398d26a1be92b3f18ef6089d218d54166b0c01"
+          "content" : "7dcf0429ecb923a66e00ec633bafeb297e3b90e1cc2be0f85443fd61367f355a"
         },
         {
           "alg" : "SHA3-512",
-          "content" : "8abdd72c14492340c05fd5d3555682a308ac00ac1b1e1e15ae38abc47f454f50db9e0727a49df72a50bf49f1447a6ca9dadc48b9ffd45a043bcbae9e5e050d3d"
+          "content" : "59b32910dddf63475893f7c830d58ca320cd6183704d80b8111cee7bb1674f97f5699c8ac52f905a5b9a20128b9e2b6a26a07490f217033c858d9c358bedcafc"
         }
       ],
       "licenses" : [
         {
           "license" : {
-            "id" : "Apache-2.0",
-            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
+            "id" : "Apache-2.0"
           }
         }
       ],
-      "purl" : "pkg:maven/org.apache.commons/commons-jexl3@3.3?type=jar",
+      "purl" : "pkg:maven/org.yaml/snakeyaml@1.33?type=jar",
       "modified" : false,
       "externalReferences" : [
         {
           "type" : "issue-tracker",
-          "url" : "https://issues.apache.org/jira/browse/JEXL"
+          "url" : "https://bitbucket.org/snakeyaml/snakeyaml/issues"
         },
         {
           "type" : "vcs",
-          "url" : "https://gitbox.apache.org/repos/asf/commons-jexl.git"
+          "url" : "https://bitbucket.org/snakeyaml/snakeyaml/src"
         }
       ],
       "type" : "library",
-      "bom-ref" : "pkg:maven/org.apache.commons/commons-jexl3@3.3?type=jar"
+      "bom-ref" : "pkg:maven/org.yaml/snakeyaml@1.33?type=jar"
     },
     {
-      "group" : "org.bouncycastle",
-      "name" : "bcpg-jdk15on",
-      "version" : "1.70",
-      "description" : "The Bouncy Castle Java API for handling the OpenPGP protocol. This jar contains the OpenPGP API for JDK 1.5 and up. The APIs can be used in conjunction with a JCE/JCA provider such as the one provided with the Bouncy Castle Cryptography APIs.",
+      "group" : "commons-codec",
+      "name" : "commons-codec",
+      "version" : "1.15",
+      "description" : "The Apache Commons Codec package contains simple encoder and decoders for various formats such as Base64 and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.",
       "hashes" : [
         {
           "alg" : "MD5",
-          "content" : "01ddc3aa0289346f4db19d95039cefdb"
+          "content" : "303baf002ce6d382198090aedd9d79a2"
         },
         {
           "alg" : "SHA-1",
-          "content" : "062f72ec06f31a6c31a3f3355fce0384b21126d7"
+          "content" : "49d94806b6e3dc933dacbd8acb0fdbab8ebd1e5d"
         },
         {
           "alg" : "SHA-256",
-          "content" : "4f08f4aa74048824151c98dd3e92e7165ac30659834404f08a8e843bdad32847"
+          "content" : "b3e9f6d63a790109bf0d056611fbed1cf69055826defeb9894a71369d246ed63"
         },
         {
           "alg" : "SHA-512",
-          "content" : "4e240b7811ef90c090e83a181dace41da487555e4136221861b0060f9af6d8b316f2dd0472f747adb98ca5372f46055456ef04bdc0c3992188ab13302922fce9"
+          "content" : "da30a716770795fce390e4dd340a8b728f220c6572383ffef55bd5839655d5611fcc06128b2144f6cdcb36f53072a12ec80b04afee787665e7ad0b6e888a6787"
         },
         {
           "alg" : "SHA-384",
-          "content" : "d89dec6226112d13cbea461d84740699770dd7d8ad3f67ab65e7b49fd08a096a948e54da2e6a681925c4320f410bba37"
+          "content" : "05d0506283716472175d44c2a4766523397bf8a007c18848f9c9a61718cc8aa437f9cb4b91771037ab29a960860b62a0"
         },
         {
           "alg" : "SHA3-384",
-          "content" : "5e8e8ca63cc550a8f50b627c4dd051f0eb5c31b99ff53dabd7d5f5d1ed98d0dc1d4963a09fc0db32f8e0ff769a2a6e65"
+          "content" : "12fad4ef78274b06f97b1243cea6f970088abde082d2de9377d915a34b44f7d7d67807c03e59c849b69f1544e2a9a1be"
         },
         {
           "alg" : "SHA3-256",
-          "content" : "77f28e7e22b3b3a8d7b667fb7f783847c4b11ee7208833636e09e8b38390fd51"
+          "content" : "87be248f33f241121f54aad61a9a460a79eabefbf1b5b0dd22aeb95b581f727e"
         },
         {
           "alg" : "SHA3-512",
-          "content" : "cb238dbb641c42c49b5801bdfa6432395e860c1a7485ba68e2d57887e3d22ff254718c6cbfa34c107bfb09d74e2f85c33b95f89dfa886e141a8247a0abf2b5c2"
+          "content" : "8c992c9c569ebaa0bf956a4c5b34fbf5e1ed1c212c2dd896fa216183ee0bcd341e96698af4b9cec7e8880762faa081a3d3a27f51349aa457cb8e373e4f57c788"
         }
       ],
       "licenses" : [
         {
           "license" : {
-            "name" : "Bouncy Castle Licence",
-            "url" : "https://www.bouncycastle.org/licence.html"
-          }
-        },
-        {
-          "license" : {
-            "id" : "Apache-1.1",
-            "url" : "http://apache.org/licenses/LICENSE-1.1"
+            "id" : "Apache-2.0"
           }
         }
       ],
-      "purl" : "pkg:maven/org.bouncycastle/bcpg-jdk15on@1.70?type=jar",
+      "purl" : "pkg:maven/commons-codec/commons-codec@1.15?type=jar",
       "modified" : false,
       "externalReferences" : [
         {
           "type" : "issue-tracker",
-          "url" : "https://github.com/bcgit/bc-java/issues"
+          "url" : "https://issues.apache.org/jira/browse/CODEC"
         },
         {
           "type" : "vcs",
-          "url" : "https://github.com/bcgit/bc-java"
-        }
-      ],
-      "type" : "library",
-      "bom-ref" : "pkg:maven/org.bouncycastle/bcpg-jdk15on@1.70?type=jar"
-    },
-    {
-      "group" : "org.jreleaser",
-      "name" : "jreleaser-command-java-sdk",
-      "version" : "1.6.0",
-      "hashes" : [
-        {
-          "alg" : "MD5",
-          "content" : "acbbfe01e59912d40bdaf2b516b8199d"
-        },
-        {
-          "alg" : "SHA-1",
-          "content" : "f922261945a1a25999d8b4c95326c38f15b167e8"
-        },
-        {
-          "alg" : "SHA-256",
-          "content" : "cc3bbe8d8a2cdcba73857752b9c2fbae3344c8597af7f37ac7cd0926b02d92ea"
-        },
-        {
-          "alg" : "SHA-512",
-          "content" : "d40f5671c80589711087a7dc5e4148ffee88ffacbca4db3a5360c0827e2ccc0e3fe80ed95e9c4b91d8c29617dbf6171a8a849a652e9b7a472e906692cd792498"
-        },
-        {
-          "alg" : "SHA-384",
-          "content" : "cc3b16425ab2505338e26c64b006157218391762d04cec9d4a9a2897ce33036a8cd6f6199b55c80e646bad434322c18c"
-        },
-        {
-          "alg" : "SHA3-384",
-          "content" : "09fe1086a3bbfda7fa50c320ab4c60b056ea2b37002f281bb413a17cc4f8846be4a9bcaf4b6f507a51af74474b189bd1"
-        },
-        {
-          "alg" : "SHA3-256",
-          "content" : "ef9ad8cd599799ffa70998131cfbaf2985c3070a8ff727becac8ceb5480ab900"
-        },
-        {
-          "alg" : "SHA3-512",
-          "content" : "a62c41fdaca8e1849d661ffded5af92bf09e43afc3497c5f923f5d7463756116dabef382cd8649a71473e9e938e698734b09e3d81153a852ff278876cd7ba8c9"
+          "url" : "https://github.com/apache/commons-codec"
         }
       ],
-      "licenses" : [ ],
-      "purl" : "pkg:maven/org.jreleaser/jreleaser-command-java-sdk@1.6.0?type=jar",
-      "modified" : false,
       "type" : "library",
-      "bom-ref" : "pkg:maven/org.jreleaser/jreleaser-command-java-sdk@1.6.0?type=jar"
+      "bom-ref" : "pkg:maven/commons-codec/commons-codec@1.15?type=jar"
     },
     {
-      "group" : "com.fasterxml.jackson.core",
-      "name" : "jackson-annotations",
-      "version" : "2.14.2",
-      "description" : "Core annotations used for value types, used by Jackson data binding package.",
+      "group" : "org.slf4j",
+      "name" : "jcl-over-slf4j",
+      "version" : "2.0.7",
+      "description" : "JCL 1.2 implemented over SLF4J",
       "hashes" : [
         {
           "alg" : "MD5",
-          "content" : "10d19982a8890f6eb37557af2f58e272"
+          "content" : "4e8d6cd31f7e6277280c95157ac7845a"
         },
         {
           "alg" : "SHA-1",
-          "content" : "a7aae9525864930723e3453ab799521fdfd9d873"
+          "content" : "f127fe5ee53404a8b3697cdd032dd1dd6a29dd77"
         },
         {
           "alg" : "SHA-256",
-          "content" : "2c6869d505cf60dc066734b7d50339f975bd3adc635e26a78abb71acb4473c0d"
+          "content" : "41806757e1d26dae5d6db2ca7d4a5176eed2d6e709cd86564d4a11dab0601742"
         },
         {
           "alg" : "SHA-512",
-          "content" : "a978384791bdc074df8039ffc95bb93f0f60d14d476861ee2a0ce208b33a991c486a07345cb80559252c3ff1dea14d3efb818c19bdc18435946dc8754d8e6ee3"
+          "content" : "221b39b85145cf7c245acb7f2692a02b6c5816f8b1187a1a77942dd39de958c1b01ecd066682eb88244f87b2a47513d40b6c1e69ef49a43b2a07ba818f124e17"
         },
         {
           "alg" : "SHA-384",
-          "content" : "d5111c69020666689414921ae4a8950f9fbdf86dec1360f6827beeee9ebd3f78db74e69c76e0becaba47eb34fdaaeb5a"
+          "content" : "fa8d53b46cd3ddab0bd265d384a90c35efef6a02a7822aa6f79065cee68d78f6ad7c4d248dea7497af449845dc962730"
         },
         {
           "alg" : "SHA3-384",
-          "content" : "53b1a8891482e16a7d8849251cb0dcd1aacf6aaa2161a73589d9742ad96763e384d426d04db762e56fc4536f4e719084"
+          "content" : "cf06cfeaba477f7738f089ba401fb841074681d1c7f465546cdf0e95751a8bf912493428876a7d9108eef83f637c6a1e"
         },
         {
           "alg" : "SHA3-256",
-          "content" : "14f7b3c51c96f7429f7c60a69e3b7e4f9f2207820141f197d56b57018ffd5640"
+          "content" : "efbad2de8683215936c56b3f8fd3492f1cc27c2ee77595a99c794e18777dec42"
         },
         {
           "alg" : "SHA3-512",
-          "content" : "75e4e4fb847fdacdd497cf6b340362581ab4091120ccf2ec32a273709d336af0f78c90ce12b2dd1d17354aa08583af0d3ded89bb415720f45f2d9c110d71dd7a"
+          "content" : "2707d5513e49f6e3ea6dec96510d360cfc125dab164ae5d99a1dcbd628751640f625a70ed749dad66024ae9fd7725f1c6c7f76de7f5a6efc9d8208a9e01922f7"
         }
       ],
       "licenses" : [
@@ -286,159 +190,96 @@
           }
         }
       ],
-      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.2?type=jar",
+      "purl" : "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.7?type=jar",
       "modified" : false,
-      "externalReferences" : [
-        {
-          "type" : "vcs",
-          "url" : "https://github.com/FasterXML/jackson-annotations"
-        }
-      ],
       "type" : "library",
-      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.2?type=jar"
+      "bom-ref" : "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.7?type=jar"
     },
     {
-      "group" : "commons-codec",
-      "name" : "commons-codec",
-      "version" : "1.15",
-      "description" : "The Apache Commons Codec package contains simple encoder and decoders for various formats such as Base64 and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.",
-      "hashes" : [
-        {
-          "alg" : "MD5",
-          "content" : "303baf002ce6d382198090aedd9d79a2"
-        },
-        {
-          "alg" : "SHA-1",
-          "content" : "49d94806b6e3dc933dacbd8acb0fdbab8ebd1e5d"
-        },
-        {
-          "alg" : "SHA-256",
-          "content" : "b3e9f6d63a790109bf0d056611fbed1cf69055826defeb9894a71369d246ed63"
-        },
-        {
-          "alg" : "SHA-512",
-          "content" : "da30a716770795fce390e4dd340a8b728f220c6572383ffef55bd5839655d5611fcc06128b2144f6cdcb36f53072a12ec80b04afee787665e7ad0b6e888a6787"
-        },
-        {
-          "alg" : "SHA-384",
-          "content" : "05d0506283716472175d44c2a4766523397bf8a007c18848f9c9a61718cc8aa437f9cb4b91771037ab29a960860b62a0"
-        },
-        {
-          "alg" : "SHA3-384",
-          "content" : "12fad4ef78274b06f97b1243cea6f970088abde082d2de9377d915a34b44f7d7d67807c03e59c849b69f1544e2a9a1be"
-        },
-        {
-          "alg" : "SHA3-256",
-          "content" : "87be248f33f241121f54aad61a9a460a79eabefbf1b5b0dd22aeb95b581f727e"
-        },
-        {
-          "alg" : "SHA3-512",
-          "content" : "8c992c9c569ebaa0bf956a4c5b34fbf5e1ed1c212c2dd896fa216183ee0bcd341e96698af4b9cec7e8880762faa081a3d3a27f51349aa457cb8e373e4f57c788"
-        }
-      ],
+      "group" : "org.jreleaser",
+      "name" : "jreleaser-tool-java-sdk",
+      "version" : "1.6.0",
+      "description" : "Java SDK for Tools",
       "licenses" : [
         {
           "license" : {
-            "id" : "Apache-2.0"
+            "id" : "Apache-2.0",
+            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
           }
         }
       ],
-      "purl" : "pkg:maven/commons-codec/commons-codec@1.15?type=jar",
+      "purl" : "pkg:maven/org.jreleaser/jreleaser-tool-java-sdk@1.6.0?type=jar",
       "modified" : false,
       "externalReferences" : [
         {
-          "type" : "issue-tracker",
-          "url" : "https://issues.apache.org/jira/browse/CODEC"
-        },
-        {
           "type" : "vcs",
-          "url" : "https://github.com/apache/commons-codec"
+          "url" : "https://github.com/jreleaser/jreleaser"
         }
       ],
       "type" : "library",
-      "bom-ref" : "pkg:maven/commons-codec/commons-codec@1.15?type=jar"
+      "bom-ref" : "pkg:maven/org.jreleaser/jreleaser-tool-java-sdk@1.6.0?type=jar"
     },
     {
       "group" : "org.jreleaser",
-      "name" : "jreleaser-logger-api",
+      "name" : "jreleaser-command-java-sdk",
       "version" : "1.6.0",
-      "hashes" : [
-        {
-          "alg" : "MD5",
-          "content" : "e7da806a3427ab10405584067d880ead"
-        },
-        {
-          "alg" : "SHA-1",
-          "content" : "92ae4e1826cf1d8321fcefd3f4ece0fa5cc4fc94"
-        },
-        {
-          "alg" : "SHA-256",
-          "content" : "372d4b6cee7af83429f9f054a69f73d38d6fb4c983b14ce97f2599791d59aee9"
-        },
-        {
-          "alg" : "SHA-512",
-          "content" : "c4f4edf49e18f475b7b44677497250cd93af45e302fb39306a94dc8f0ee1f783921967de3e1f1b7591f970a359080f43b24c1499a363280d904c2519d2e9bcb2"
-        },
-        {
-          "alg" : "SHA-384",
-          "content" : "fcdadd6f2e8af30a7761e98f5c717ab1b8f6f0a79825a711454c8c9cc9842cf8fe0f5917b5ea48603eb0ee5788ed7a8b"
-        },
-        {
-          "alg" : "SHA3-384",
-          "content" : "42a3e276d69efc85ce5798c5cd78ba1a910ef328169fb39a1a685eea5b98e9c3bf495124f56b518d553f1ca2e63d62f7"
-        },
-        {
-          "alg" : "SHA3-256",
-          "content" : "0fb4d06e278df39d6633d1a09ed01ad4f7788838668f2ebc097f919384cec97d"
-        },
+      "description" : "JReleaser command SDK",
+      "licenses" : [
         {
-          "alg" : "SHA3-512",
-          "content" : "bb5a8b000955af1038d4d75c0fd8786561b3a2cf7bb804e09e42518a0bcc3e23ab01dd5236de4bdb58fd9b1a0e923982eb6cc6d0e450896bed9c86dfe808675d"
+          "license" : {
+            "id" : "Apache-2.0",
+            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
+          }
         }
       ],
-      "licenses" : [ ],
-      "purl" : "pkg:maven/org.jreleaser/jreleaser-logger-api@1.6.0?type=jar",
+      "purl" : "pkg:maven/org.jreleaser/jreleaser-command-java-sdk@1.6.0?type=jar",
       "modified" : false,
+      "externalReferences" : [
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/jreleaser/jreleaser"
+        }
+      ],
       "type" : "library",
-      "bom-ref" : "pkg:maven/org.jreleaser/jreleaser-logger-api@1.6.0?type=jar"
+      "bom-ref" : "pkg:maven/org.jreleaser/jreleaser-command-java-sdk@1.6.0?type=jar"
     },
     {
-      "group" : "com.github.sbaudoin",
-      "name" : "yamllint",
-      "version" : "1.5.0",
-      "description" : "YAML 1.1 linter",
+      "group" : "org.apache.commons",
+      "name" : "commons-compress",
+      "version" : "1.22",
+      "description" : "Apache Commons Compress software defines an API for working with compression and archive formats. These include: bzip2, gzip, pack200, lzma, xz, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.",
       "hashes" : [
         {
           "alg" : "MD5",
-          "content" : "bc2f934bd698696823f9ecc7677a20cd"
+          "content" : "f1e4db16fee4291212d91409313a8086"
         },
         {
           "alg" : "SHA-1",
-          "content" : "d3d53f3d461edd88fb8bfab89169122b29a62b4f"
+          "content" : "691a8b4e6cf4248c3bc72c8b719337d5cb7359fa"
         },
         {
           "alg" : "SHA-256",
-          "content" : "5bba1d3ce753620e290835d561c13b0411884cbf4bf1c35525d5ad26ef4d2391"
+          "content" : "53d04a0efc7223baecaa303bd5d298eb0600e6b82b4076f9cecd558b97ba760b"
         },
         {
           "alg" : "SHA-512",
-          "content" : "e8b42c4ba8250246f7f8cedb5a5787bfd453dfa9d71951f366e2b1d1e385ab5ef2bac0605aaedae5224d8fda12153fcd6983bfc4cb60448978c0f18c44136b05"
+          "content" : "2d64fa6cd081fff5d73ee662a82f6186991fc13b4bdaee18b5f1bdcab06d9acb70e3713d18b296337791448251fbd6768bd84afaa817a10547652d0cfa885563"
         },
         {
           "alg" : "SHA-384",
-          "content" : "161adc86a1301608ee5af9f51390217f670ad6edf2215ae382a35111476b08f0aa35d925cf9256f81818c236c1f9b2eb"
+          "content" : "295d7f69d151abbd784e1c4d021c77ce43e129bb5bda0c55762b32d77c8607863383297674ec8a212ea3dfe4007b0044"
         },
         {
           "alg" : "SHA3-384",
-          "content" : "89502cc5f7ee210448f4cc3c6e0cf61a1f31726b8e7f00f82aceab823dc2a0b66c17d76f0935c9fa213fc33d21fd918b"
+          "content" : "af04eb1b4647b1a041c5ee994c2c7a32556b5410b916fedb69905f166938baa43ba54fdc67084205794c02680d3c6349"
         },
         {
           "alg" : "SHA3-256",
-          "content" : "e7db7ae83b8f184b28cb61269786102a80a2b29bd44d50693504bc7468a1c4c5"
+          "content" : "40f2960e82adfb171b0c5430271fdb0c0dae243aaf9b08021df54fd4d4a3a0b0"
         },
         {
           "alg" : "SHA3-512",
-          "content" : "e8e018b4bcd6e56492c33225927ab828d7a725d56d08ce33f7193e11f53c961fdfaaadfb5d6745c3b6048787a9cb0ff6b8398a3925c5553710d387df7716d3aa"
+          "content" : "f2c445f77bda3ef230a2b78ea88d86e48a7d6db36805f841d5cffe1f178842a161b2fda0b0d60162af210f18ed9c5bb9579c963291c26f715c1aa389d9a6785c"
         }
       ],
       "licenses" : [
@@ -448,161 +289,168 @@
           }
         }
       ],
-      "purl" : "pkg:maven/com.github.sbaudoin/yamllint@1.5.0?type=jar",
+      "purl" : "pkg:maven/org.apache.commons/commons-compress@1.22?type=jar",
       "modified" : false,
       "externalReferences" : [
         {
           "type" : "issue-tracker",
-          "url" : "https://github.com/sbaudoin/yamllint/issues"
+          "url" : "https://issues.apache.org/jira/browse/COMPRESS"
         },
         {
           "type" : "vcs",
-          "url" : "https://github.com/sbaudoin/yamllint.git"
+          "url" : "https://gitbox.apache.org/repos/asf?p=commons-compress.git"
         }
       ],
       "type" : "library",
-      "bom-ref" : "pkg:maven/com.github.sbaudoin/yamllint@1.5.0?type=jar"
+      "bom-ref" : "pkg:maven/org.apache.commons/commons-compress@1.22?type=jar"
     },
     {
-      "publisher" : "com.github.luben",
-      "group" : "com.github.luben",
-      "name" : "zstd-jni",
-      "version" : "1.5.4-1",
-      "description" : "JNI bindings for Zstd native library that provides fast and high compression lossless algorithm for Java and all JVM languages.",
+      "group" : "org.slf4j",
+      "name" : "slf4j-api",
+      "version" : "2.0.7",
+      "description" : "The slf4j API",
       "hashes" : [
         {
           "alg" : "MD5",
-          "content" : "e787241d6ec56aac451be8b0d920c85b"
+          "content" : "403dffa46cdd2e3c82da19df4f394a4c"
         },
         {
           "alg" : "SHA-1",
-          "content" : "291ccaacc039e41932de877303edb6af98a91c24"
+          "content" : "41eb7184ea9d556f23e18b5cb99cad1f8581fc00"
         },
         {
           "alg" : "SHA-256",
-          "content" : "f0469d891127dc5ae6bd2df93a5aa38c4d79bcd5f360fbb88c2785b52a572349"
+          "content" : "5d6298b93a1905c32cda6478808ac14c2d4a47e91535e53c41f7feeb85d946f4"
         },
         {
           "alg" : "SHA-512",
-          "content" : "368916f0057d69fa4ba3768f6f617291ce4083b89913e46c2daa68cc94c48b92e0ca626241486f34a4d154502eb77b19e82c16c68b341ecfc82ccc0520f8d4a9"
+          "content" : "216d2cac27d501972c888f94dfa747d700b80d60813884b6ab4b12c6a3b17ed0c21a1d27e1aa4332c97c828f20039e3913d2763d7e1a3cef36ae4389a276e7a8"
         },
         {
           "alg" : "SHA-384",
-          "content" : "7e72184873689fa286d93d88f69f8baa24f818fcd61105a14332fbb5ed254363c0969afa98befd797a3762577bc77993"
+          "content" : "c25b39f418aa726ba8405dfd9b356131f89984e2ef5a55a724a2abf3b7c78443f671105835161d2414d602cf03da9f2d"
         },
         {
           "alg" : "SHA3-384",
-          "content" : "1302636797b291dbbe19f39bdeb66160c1317b395a0a9360ba93aeaa262de7ad8de7257e6a997a9c659fdf53b3367ee6"
+          "content" : "f33abfaac21badae6f85d3ebbc6c1204fd7fda3bb15173e763fa8cee95bce6a8270eec2c8f49343c66c8d2767bc317e1"
         },
         {
           "alg" : "SHA3-256",
-          "content" : "54505ed16257a55330bb44c76719a687251d2623fa5e50a192b54c5067573255"
+          "content" : "6e00d4b264a2afc4ca4e98f716ecece66c32c626ca3f8c5d56b22092b6fe417b"
         },
         {
           "alg" : "SHA3-512",
-          "content" : "6e01cc9654c2d68c36a284e23c388267ac7013d534cceed0b6ab44679a6bbb6d03d4cfc52c967c4e76dbd5b8963c268e40d9890c927866ea00824821b0ecb82d"
+          "content" : "ad7b9142d370fc532a07cdd43881a129b012ff50e2bede3ac27d9bd31ec707bf2f45e82002fa59e962955cc38ab73cdd77713fca50cedc926c046f5617c1285b"
         }
       ],
       "licenses" : [
         {
           "license" : {
-            "id" : "BSD-2-Clause"
+            "id" : "MIT",
+            "url" : "https://opensource.org/licenses/MIT"
           }
         }
       ],
-      "purl" : "pkg:maven/com.github.luben/zstd-jni@1.5.4-1?type=jar",
+      "purl" : "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar",
       "modified" : false,
       "type" : "library",
-      "bom-ref" : "pkg:maven/com.github.luben/zstd-jni@1.5.4-1?type=jar"
+      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar"
     },
     {
-      "group" : "org.slf4j",
-      "name" : "jcl-over-slf4j",
-      "version" : "2.0.7",
-      "description" : "JCL 1.2 implemented over SLF4J",
+      "group" : "com.github.spullara.mustache.java",
+      "name" : "compiler",
+      "version" : "0.9.10",
+      "description" : "Implementation of mustache.js for Java",
       "hashes" : [
         {
           "alg" : "MD5",
-          "content" : "4e8d6cd31f7e6277280c95157ac7845a"
+          "content" : "5638fc78a17d5063cc4b0d00f6e87491"
         },
         {
           "alg" : "SHA-1",
-          "content" : "f127fe5ee53404a8b3697cdd032dd1dd6a29dd77"
+          "content" : "6111ae24e3be9ecbd75f5fe908583fc14b4f0174"
         },
         {
           "alg" : "SHA-256",
-          "content" : "41806757e1d26dae5d6db2ca7d4a5176eed2d6e709cd86564d4a11dab0601742"
+          "content" : "2b5a9217811cb99846a473fa8e0d233eb33629347b7f44941f6c0fbd4cdf1038"
         },
         {
           "alg" : "SHA-512",
-          "content" : "221b39b85145cf7c245acb7f2692a02b6c5816f8b1187a1a77942dd39de958c1b01ecd066682eb88244f87b2a47513d40b6c1e69ef49a43b2a07ba818f124e17"
+          "content" : "2ccf3196af2b518c96df748a72a0122d033dc222e1fab3e12f3e2094146d44bec20bd1502390b59abf090cbdf5dd4d580084b07fb7241248b5b8da2605207559"
         },
         {
           "alg" : "SHA-384",
-          "content" : "fa8d53b46cd3ddab0bd265d384a90c35efef6a02a7822aa6f79065cee68d78f6ad7c4d248dea7497af449845dc962730"
+          "content" : "0204e77a4a64701af5000df6601f4f4c23cb5e53dd39a1325615d4f942cd2c91d04bbac20348ae49731f586282165c33"
         },
         {
           "alg" : "SHA3-384",
-          "content" : "cf06cfeaba477f7738f089ba401fb841074681d1c7f465546cdf0e95751a8bf912493428876a7d9108eef83f637c6a1e"
+          "content" : "0960da7175835484471f485d481499f8b65f134ff4f1629618560adaa5a08caa897fbefcea190f93106ee9e3273381b2"
         },
         {
           "alg" : "SHA3-256",
-          "content" : "efbad2de8683215936c56b3f8fd3492f1cc27c2ee77595a99c794e18777dec42"
+          "content" : "cfb7e640392ef590069e6b1d059dc20b8fcff984a4b267b3969fcf50ed0edd4f"
         },
         {
           "alg" : "SHA3-512",
-          "content" : "2707d5513e49f6e3ea6dec96510d360cfc125dab164ae5d99a1dcbd628751640f625a70ed749dad66024ae9fd7725f1c6c7f76de7f5a6efc9d8208a9e01922f7"
+          "content" : "db3dad3809879bca835a04da890fd86dbc58ba6637c72f07d02e39d13645ebb6c640b7fecc18a779e58946072078bdf114b91445026a32dd6501b5d1c6e7d933"
         }
       ],
       "licenses" : [
         {
           "license" : {
-            "id" : "Apache-2.0"
+            "id" : "Apache-2.0",
+            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
           }
         }
       ],
-      "purl" : "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.7?type=jar",
+      "purl" : "pkg:maven/com.github.spullara.mustache.java/compiler@0.9.10?type=jar",
       "modified" : false,
+      "externalReferences" : [
+        {
+          "type" : "vcs",
+          "url" : "http://github.com/spullara/mustache.java"
+        }
+      ],
       "type" : "library",
-      "bom-ref" : "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.7?type=jar"
+      "bom-ref" : "pkg:maven/com.github.spullara.mustache.java/compiler@0.9.10?type=jar"
     },
     {
       "group" : "com.fasterxml.jackson.core",
-      "name" : "jackson-core",
+      "name" : "jackson-databind",
       "version" : "2.14.2",
-      "description" : "Core Jackson processing abstractions (aka Streaming API), implementation for JSON",
+      "description" : "General data-binding functionality for Jackson: works on core streaming API",
       "hashes" : [
         {
           "alg" : "MD5",
-          "content" : "6ee422ee4c481b2d5aacb2b5e36a7dc0"
+          "content" : "c1b12dd14734cd1986132bf55042dd7e"
         },
         {
           "alg" : "SHA-1",
-          "content" : "f804090e6399ce0cf78242db086017512dd71fcc"
+          "content" : "01e71fddbc80bb86f71a6345ac1e8ab8a00e7134"
         },
         {
           "alg" : "SHA-256",
-          "content" : "b5d37a77c88277b97e3593c8740925216c06df8e4172bbde058528df04ad3e7a"
+          "content" : "501d3abce4d18dcc381058ec593c5b94477906bba6efbac14dae40a642f77424"
         },
         {
           "alg" : "SHA-512",
-          "content" : "208953cf72691b3bab1ca2f9a045cccd3d75c46c90099ba884fbf16bc3e45045e5cd014d2c68c96e8a8826f87a5f0e18cb34b35e7ef03348953869c21e197367"
+          "content" : "85473a29d23292f49092af9e7a7a63993206847c53b3e71f3c67245d68f7b19cc7c341e0ece409eb5e96602df98a848e957d8691fdd2c5fcddd807df9078255e"
         },
         {
           "alg" : "SHA-384",
-          "content" : "e806595862c5fcdae801d9845befc1d12c97e6036ee839d34590dbd785a422d5832cf4fc5c7ee6e1a5ee7a59f37740f0"
+          "content" : "5c54d6c497cb329c3424a30319bf657ea222349eadc5ae74c30e8dc1525d7b60b7785f4d20370267b03343dd738cc13e"
         },
         {
           "alg" : "SHA3-384",
-          "content" : "4fa59f572f2e100e2eba6fc664a3b9f804fabd911a552cb40805f39e624a9c04246b679cf4b017bb782c8272877f49d2"
+          "content" : "98ff0b2a4dfc1faf319d4b0d38376c3c7a58b65d071db293232eed810adf2e525fecee3be45c99b41e20cf6a3a8ebef9"
         },
         {
           "alg" : "SHA3-256",
-          "content" : "cef17d3a539cbf798cfb0bfa9faffa2b7baff3670b50743e91ee58b4c60b59f1"
+          "content" : "2dba45f78a0d37402083975e18dbb3201705faf7e533c3e9721b9364c2a1ab0f"
         },
         {
           "alg" : "SHA3-512",
-          "content" : "fceeed5cb8fe4335d88282d15657762a4728483275a7ff45f50b9fe6a999757ccb37c415d001eb6250226f98f5c576b1b36a83e601fb393cfd34a811c2df5d00"
+          "content" : "76ef73198269cfd0922f4ae86c8b7e6a9cd1b96ee55da43ebfe57dd34365cc1c5c5630fadf79e46156a52b6b96b7d1f694f5e4f5c4f6a3d3ebb31c927e414435"
         }
       ],
       "licenses" : [
@@ -612,68 +460,77 @@
           }
         }
       ],
-      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.2?type=jar",
+      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.2?type=jar",
       "modified" : false,
       "externalReferences" : [
         {
           "type" : "vcs",
-          "url" : "https://github.com/FasterXML/jackson-core"
+          "url" : "https://github.com/FasterXML/jackson-databind"
         }
       ],
       "type" : "library",
-      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.2?type=jar"
+      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.2?type=jar"
     },
     {
-      "group" : "org.slf4j",
-      "name" : "slf4j-api",
-      "version" : "2.0.7",
-      "description" : "The slf4j API",
+      "group" : "commons-io",
+      "name" : "commons-io",
+      "version" : "2.11.0",
+      "description" : "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.",
       "hashes" : [
         {
           "alg" : "MD5",
-          "content" : "403dffa46cdd2e3c82da19df4f394a4c"
+          "content" : "3b4b7ccfaeceeac240b804839ee1a1ca"
         },
         {
           "alg" : "SHA-1",
-          "content" : "41eb7184ea9d556f23e18b5cb99cad1f8581fc00"
+          "content" : "a2503f302b11ebde7ebc3df41daebe0e4eea3689"
         },
         {
           "alg" : "SHA-256",
-          "content" : "5d6298b93a1905c32cda6478808ac14c2d4a47e91535e53c41f7feeb85d946f4"
+          "content" : "961b2f6d87dbacc5d54abf45ab7a6e2495f89b75598962d8c723cea9bc210908"
         },
         {
           "alg" : "SHA-512",
-          "content" : "216d2cac27d501972c888f94dfa747d700b80d60813884b6ab4b12c6a3b17ed0c21a1d27e1aa4332c97c828f20039e3913d2763d7e1a3cef36ae4389a276e7a8"
+          "content" : "5bd78eed456ede30119319c5bed8e3e4c443b6fd7bdb3a7a5686647bd83094d0c3e2832a7575cfb60e4ef25f08106b93476939d3adcfecf5533cc030b3039e10"
         },
         {
           "alg" : "SHA-384",
-          "content" : "c25b39f418aa726ba8405dfd9b356131f89984e2ef5a55a724a2abf3b7c78443f671105835161d2414d602cf03da9f2d"
+          "content" : "114f1e324d90ad887c177876d410f5787a8e8da6c48d4b2862d365802c0efded3a88cb24046976bf6276cadad3712f0f"
         },
         {
           "alg" : "SHA3-384",
-          "content" : "f33abfaac21badae6f85d3ebbc6c1204fd7fda3bb15173e763fa8cee95bce6a8270eec2c8f49343c66c8d2767bc317e1"
+          "content" : "80288c03ad4d80d69f91d056ffc5570d49a9c76bf54ad2dff0121ecde26a560df76d05156f281f5c6db2a38ff07a873d"
         },
         {
           "alg" : "SHA3-256",
-          "content" : "6e00d4b264a2afc4ca4e98f716ecece66c32c626ca3f8c5d56b22092b6fe417b"
+          "content" : "5adfb5ccaf5f21a549422f426118a9542673926fcd18c68390cf813e791dcf6c"
         },
         {
           "alg" : "SHA3-512",
-          "content" : "ad7b9142d370fc532a07cdd43881a129b012ff50e2bede3ac27d9bd31ec707bf2f45e82002fa59e962955cc38ab73cdd77713fca50cedc926c046f5617c1285b"
+          "content" : "7573f47f0babb53cefdc7c2309a0b982d800139064537b0797da442853d081010ad7c3c74a500598a0f800639a5d540eca21963ea652c68613907059bd4278c2"
         }
       ],
       "licenses" : [
         {
           "license" : {
-            "id" : "MIT",
-            "url" : "https://opensource.org/licenses/MIT"
+            "id" : "Apache-2.0"
           }
         }
       ],
-      "purl" : "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar",
+      "purl" : "pkg:maven/commons-io/commons-io@2.11.0?type=jar",
       "modified" : false,
+      "externalReferences" : [
+        {
+          "type" : "issue-tracker",
+          "url" : "https://issues.apache.org/jira/browse/IO"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://gitbox.apache.org/repos/asf?p=commons-io.git"
+        }
+      ],
       "type" : "library",
-      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar"
+      "bom-ref" : "pkg:maven/commons-io/commons-io@2.11.0?type=jar"
     },
     {
       "group" : "org.tukaani",
@@ -733,147 +590,166 @@
       "bom-ref" : "pkg:maven/org.tukaani/xz@1.9?type=jar"
     },
     {
-      "group" : "org.jreleaser",
-      "name" : "jreleaser-model-impl",
-      "version" : "1.6.0",
+      "group" : "org.apache.commons",
+      "name" : "commons-jexl3",
+      "version" : "3.3",
+      "description" : "JEXL is a library intended to facilitate the implementation of scripting features in applications and frameworks written in Java.",
       "hashes" : [
         {
           "alg" : "MD5",
-          "content" : "d2760fed3ab0f395c3ec08c3f7493d52"
+          "content" : "3a332e3beb67b3a2a20bd0a950fc57c4"
         },
         {
           "alg" : "SHA-1",
-          "content" : "37f35b86cc5bcdf8c7d306d97884c2d89fa742d5"
+          "content" : "c76b4cfa436c3e79e04806e62656b09968c388ba"
         },
         {
           "alg" : "SHA-256",
-          "content" : "284a61227c9f031b6b6928bfef76eeea45c97e6053b7a1190e3dd64c0effd8df"
+          "content" : "07b0ff6c5a10ffb2e2c02da9e2c0e2e6702df44178cfb76881f69447fc386014"
         },
         {
           "alg" : "SHA-512",
-          "content" : "81899b65d3eb10b0dac885ee17b45822d12d5746141876ef2573b0afaec13c92187ebf8a6c446ce002f25f8bc3d40f1a88e1c8c548bd35a556efc86d9f5ed809"
+          "content" : "879111d1c3ad021ea3961e49161b3ff6ba251044ffef1ca4d36d880d9a09b1f395e17eef221a13274303f44e116204ae4b2a3ee3e931f117fc901e321d59b5c6"
         },
         {
           "alg" : "SHA-384",
-          "content" : "c961c3d7d900e27341988545b53d9bc8f89275e700799e41b56dc43444173e1bf962e00f96026de0fee5894594d40d6f"
+          "content" : "7a268bf2c903be86813fcc7f06158abf79d558ee59ebf03470ebd06ca6e6d169beb1c3600e07c20c4f95fa7827fde841"
         },
         {
           "alg" : "SHA3-384",
-          "content" : "984a6c6ab7487eeb35b3aa8d87754d4dd55bdcbcce9239bd0ec17b1ca63e1a66e4f34767476bd5b79e0998477ccc7c35"
+          "content" : "1803d239f17f7eeee6edb69d38c4473319fd4eeeb684eda5c38b577a7aaf42965ce41d9082d515d5007be9a0b0712d81"
         },
         {
           "alg" : "SHA3-256",
-          "content" : "a5b874d301532774b825877e6d29045492c60e20a00d55d096e0a3b371885a41"
+          "content" : "01163da5e720b6d1f6bf8b6e9e398d26a1be92b3f18ef6089d218d54166b0c01"
         },
         {
           "alg" : "SHA3-512",
-          "content" : "83babeb5dc661f2a4f4082872615c1c70719c66ac3f2071f367a82d1b7e44390121d4e59ace75f0fdbc66f5277c306242ee491de2268d49bc5c9da4247b260e9"
+          "content" : "8abdd72c14492340c05fd5d3555682a308ac00ac1b1e1e15ae38abc47f454f50db9e0727a49df72a50bf49f1447a6ca9dadc48b9ffd45a043bcbae9e5e050d3d"
         }
       ],
-      "licenses" : [ ],
-      "purl" : "pkg:maven/org.jreleaser/jreleaser-model-impl@1.6.0?type=jar",
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "Apache-2.0",
+            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.apache.commons/commons-jexl3@3.3?type=jar",
       "modified" : false,
+      "externalReferences" : [
+        {
+          "type" : "issue-tracker",
+          "url" : "https://issues.apache.org/jira/browse/JEXL"
+        },
+        {
+          "type" : "vcs",
+          "url" : "https://gitbox.apache.org/repos/asf/commons-jexl.git"
+        }
+      ],
       "type" : "library",
-      "bom-ref" : "pkg:maven/org.jreleaser/jreleaser-model-impl@1.6.0?type=jar"
+      "bom-ref" : "pkg:maven/org.apache.commons/commons-jexl3@3.3?type=jar"
     },
     {
-      "group" : "org.apache.commons",
-      "name" : "commons-compress",
-      "version" : "1.22",
-      "description" : "Apache Commons Compress software defines an API for working with compression and archive formats. These include: bzip2, gzip, pack200, lzma, xz, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.",
+      "group" : "org.bouncycastle",
+      "name" : "bcprov-jdk15on",
+      "version" : "1.70",
+      "description" : "The Bouncy Castle Crypto package is a Java implementation of cryptographic algorithms. This jar contains JCE provider and lightweight API for the Bouncy Castle Cryptography APIs for JDK 1.5 and up.",
       "hashes" : [
         {
           "alg" : "MD5",
-          "content" : "f1e4db16fee4291212d91409313a8086"
+          "content" : "1809d0449a6374279c01fdd3be26cd92"
         },
         {
           "alg" : "SHA-1",
-          "content" : "691a8b4e6cf4248c3bc72c8b719337d5cb7359fa"
+          "content" : "4636a0d01f74acaf28082fb62b317f1080118371"
         },
         {
           "alg" : "SHA-256",
-          "content" : "53d04a0efc7223baecaa303bd5d298eb0600e6b82b4076f9cecd558b97ba760b"
+          "content" : "8f3c20e3e2d565d26f33e8d4857a37d0d7f8ac39b62a7026496fcab1bdac30d4"
         },
         {
           "alg" : "SHA-512",
-          "content" : "2d64fa6cd081fff5d73ee662a82f6186991fc13b4bdaee18b5f1bdcab06d9acb70e3713d18b296337791448251fbd6768bd84afaa817a10547652d0cfa885563"
+          "content" : "7dccfc636ee4df1487615818cfa99c69941081df95e8ef1eaf4bca165594dff9547e3774fd70de3418abace77d2c45889f70bcd2e6823f8539f359e68eaf36d1"
         },
         {
           "alg" : "SHA-384",
-          "content" : "295d7f69d151abbd784e1c4d021c77ce43e129bb5bda0c55762b32d77c8607863383297674ec8a212ea3dfe4007b0044"
+          "content" : "a0b35d204cd962f1d246fa94b6e8b0fcee1a7c3f37b7e87cda742f2124a25b48794ce11a903ea8d12009c86227b6808d"
         },
         {
           "alg" : "SHA3-384",
-          "content" : "af04eb1b4647b1a041c5ee994c2c7a32556b5410b916fedb69905f166938baa43ba54fdc67084205794c02680d3c6349"
+          "content" : "980d81d3d9906764bbf2ae9b3b364ea58628b485ce1dc3d06734e10495d79f2be2e7cc7df61ac88cd67c1104c7af9393"
         },
         {
           "alg" : "SHA3-256",
-          "content" : "40f2960e82adfb171b0c5430271fdb0c0dae243aaf9b08021df54fd4d4a3a0b0"
+          "content" : "10a3572e42d29f609721d795116e3e5d0f6f03efef84bb979ce72e26908d242b"
         },
         {
           "alg" : "SHA3-512",
-          "content" : "f2c445f77bda3ef230a2b78ea88d86e48a7d6db36805f841d5cffe1f178842a161b2fda0b0d60162af210f18ed9c5bb9579c963291c26f715c1aa389d9a6785c"
+          "content" : "a0761cb6deeb86c94b96850c72c0a0eaf516ca849f4b8268f9f60c9ed2a6730e692c15098d47e617da294e931113c6cbcaddec8957c9f029fa595b5f14ff35ac"
         }
       ],
       "licenses" : [
         {
           "license" : {
-            "id" : "Apache-2.0"
+            "name" : "Bouncy Castle Licence",
+            "url" : "https://www.bouncycastle.org/licence.html"
           }
         }
       ],
-      "purl" : "pkg:maven/org.apache.commons/commons-compress@1.22?type=jar",
+      "purl" : "pkg:maven/org.bouncycastle/bcprov-jdk15on@1.70?type=jar",
       "modified" : false,
       "externalReferences" : [
         {
           "type" : "issue-tracker",
-          "url" : "https://issues.apache.org/jira/browse/COMPRESS"
+          "url" : "https://github.com/bcgit/bc-java/issues"
         },
         {
           "type" : "vcs",
-          "url" : "https://gitbox.apache.org/repos/asf?p=commons-compress.git"
+          "url" : "https://github.com/bcgit/bc-java"
         }
       ],
       "type" : "library",
-      "bom-ref" : "pkg:maven/org.apache.commons/commons-compress@1.22?type=jar"
+      "bom-ref" : "pkg:maven/org.bouncycastle/bcprov-jdk15on@1.70?type=jar"
     },
     {
-      "group" : "org.yaml",
-      "name" : "snakeyaml",
-      "version" : "1.33",
-      "description" : "YAML 1.1 parser and emitter for Java",
+      "group" : "com.fasterxml.jackson.dataformat",
+      "name" : "jackson-dataformat-yaml",
+      "version" : "2.14.2",
+      "description" : "Support for reading and writing YAML-encoded data via Jackson abstractions.",
       "hashes" : [
         {
           "alg" : "MD5",
-          "content" : "e0164a637c691c8cf01d29f90a709c02"
+          "content" : "cb29e74cb2c1981985a8214774bde05e"
         },
         {
           "alg" : "SHA-1",
-          "content" : "2cd0a87ff7df953f810c344bdf2fe3340b954c69"
+          "content" : "cc9a25c1f4212562dcb2fa33dd8ae179ba0e6a4e"
         },
         {
           "alg" : "SHA-256",
-          "content" : "11ff459788f0a2d781f56a4a86d7e69202cebacd0273d5269c4ae9f02f3fd8f0"
+          "content" : "5c3a0a71d0339529c80ae771497b20fdc0fa7cb67c772f99af5935927560006a"
         },
         {
           "alg" : "SHA-512",
-          "content" : "787b72aebb685689ab379ed8f238fc2f4175bb82d285909e39e7ff1ee1b9e64ad8878f4685dadde274f950b0dc77dca3082a52921c11094aa2a535672ae4f33c"
+          "content" : "f3232b7d5e4b466660a1fd7c0725dd1f24ef9e9192edd05fa698bc641c9f81142e8f1b11de0d0fd2ce3ff21267d3899d6287923dbd130177e3da50dbc222d6c4"
         },
         {
           "alg" : "SHA-384",
-          "content" : "9f0a0a35df2b339830b9e78294634ea894e7096e01709c82d965e24a9fa9ac6ee15edbbbf23368dcd57741de5bf23086"
+          "content" : "3c08ebd6f40201af59117f2efa262c4280dd614cf02cdeff1145a33cf435b3685a9609cca9dd4c033ea3ce169b815d96"
         },
         {
           "alg" : "SHA3-384",
-          "content" : "91d8fd581d60be4090d3b522d8c119c12449cff2ce6c436d0e53977e1c9fea8686b2b360fb15f4c3507e4f243d7d6170"
+          "content" : "d76663872641a9823592b1cf70989eb8f862bed5455e81591008f0a5b46ee8337bf2be78f433a99aa1842287fcaa20c5"
         },
         {
           "alg" : "SHA3-256",
-          "content" : "7dcf0429ecb923a66e00ec633bafeb297e3b90e1cc2be0f85443fd61367f355a"
+          "content" : "79385b1c7e23deba396f2194855b44bc942037ab9cff6a31444508373ecf345c"
         },
         {
           "alg" : "SHA3-512",
-          "content" : "59b32910dddf63475893f7c830d58ca320cd6183704d80b8111cee7bb1674f97f5699c8ac52f905a5b9a20128b9e2b6a26a07490f217033c858d9c358bedcafc"
+          "content" : "323ef61d6433df558b595558d6d629fc6f48af7eb1de6db0382cb3d2cdf7b429e6a41a2b927d0298ea2f234fbc87a8c39a7a9a03901857cb79da1c53114d986f"
         }
       ],
       "licenses" : [
@@ -883,102 +759,124 @@
           }
         }
       ],
-      "purl" : "pkg:maven/org.yaml/snakeyaml@1.33?type=jar",
+      "purl" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.14.2?type=jar",
       "modified" : false,
-      "externalReferences" : [
+      "type" : "library",
+      "bom-ref" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.14.2?type=jar"
+    },
+    {
+      "group" : "org.jreleaser",
+      "name" : "jreleaser-model-impl",
+      "version" : "1.6.0",
+      "description" : "JReleaser Model implementation",
+      "licenses" : [
         {
-          "type" : "issue-tracker",
-          "url" : "https://bitbucket.org/snakeyaml/snakeyaml/issues"
-        },
+          "license" : {
+            "id" : "Apache-2.0",
+            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.jreleaser/jreleaser-model-impl@1.6.0?type=jar",
+      "modified" : false,
+      "externalReferences" : [
         {
           "type" : "vcs",
-          "url" : "https://bitbucket.org/snakeyaml/snakeyaml/src"
+          "url" : "https://github.com/jreleaser/jreleaser"
         }
       ],
       "type" : "library",
-      "bom-ref" : "pkg:maven/org.yaml/snakeyaml@1.33?type=jar"
+      "bom-ref" : "pkg:maven/org.jreleaser/jreleaser-model-impl@1.6.0?type=jar"
     },
     {
-      "group" : "org.jreleaser",
-      "name" : "jreleaser-tool-java-sdk",
-      "version" : "1.6.0",
+      "publisher" : "com.github.luben",
+      "group" : "com.github.luben",
+      "name" : "zstd-jni",
+      "version" : "1.5.4-1",
+      "description" : "JNI bindings for Zstd native library that provides fast and high compression lossless algorithm for Java and all JVM languages.",
       "hashes" : [
         {
           "alg" : "MD5",
-          "content" : "abfd7ce4581351b44b505c26c1367955"
+          "content" : "e787241d6ec56aac451be8b0d920c85b"
         },
         {
           "alg" : "SHA-1",
-          "content" : "ef1e1b370a0a24a202089f732598f82ce91c74f2"
+          "content" : "291ccaacc039e41932de877303edb6af98a91c24"
         },
         {
           "alg" : "SHA-256",
-          "content" : "a4bcf1548d74752460e28bd3ab7e43b779b5a8f446285b8e7643dd83983f5b7f"
+          "content" : "f0469d891127dc5ae6bd2df93a5aa38c4d79bcd5f360fbb88c2785b52a572349"
         },
         {
           "alg" : "SHA-512",
-          "content" : "e14548ab617020cac195b98b2b6bf04043cf409ef395783e8c2c38441c761f38dd34b4858d4d7e26d2c69fde233ccaa102f180d3ff547efc29e475d0c38b7b40"
+          "content" : "368916f0057d69fa4ba3768f6f617291ce4083b89913e46c2daa68cc94c48b92e0ca626241486f34a4d154502eb77b19e82c16c68b341ecfc82ccc0520f8d4a9"
         },
         {
           "alg" : "SHA-384",
-          "content" : "85953ec5ec2714df877d6012db03c5d88a971dcb35cfc43c197570e8e2b010c1c292e228e4fe8c7f93418e11868b8654"
+          "content" : "7e72184873689fa286d93d88f69f8baa24f818fcd61105a14332fbb5ed254363c0969afa98befd797a3762577bc77993"
         },
         {
           "alg" : "SHA3-384",
-          "content" : "cb294f21ab1d8a8c8f488e2f60b456e66985b55dbb5ecc56646b57fc6fbb9e36aa69801bdb6c1ea5825288baab329183"
+          "content" : "1302636797b291dbbe19f39bdeb66160c1317b395a0a9360ba93aeaa262de7ad8de7257e6a997a9c659fdf53b3367ee6"
         },
         {
           "alg" : "SHA3-256",
-          "content" : "cf8c1f78e8630a84e28269970a18752616d82aec3a5d9297459244fb4d52980a"
+          "content" : "54505ed16257a55330bb44c76719a687251d2623fa5e50a192b54c5067573255"
         },
         {
           "alg" : "SHA3-512",
-          "content" : "bd42233ee963b74dd472abde6801b8140f3ec1b08e503e486bd7c8ef7575e65a72f0bd8a3ca996adbc832d4df6be8e2b500a425b77dfdfd80e57818af84a79c2"
+          "content" : "6e01cc9654c2d68c36a284e23c388267ac7013d534cceed0b6ab44679a6bbb6d03d4cfc52c967c4e76dbd5b8963c268e40d9890c927866ea00824821b0ecb82d"
         }
       ],
-      "licenses" : [ ],
-      "purl" : "pkg:maven/org.jreleaser/jreleaser-tool-java-sdk@1.6.0?type=jar",
+      "licenses" : [
+        {
+          "license" : {
+            "id" : "BSD-2-Clause"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/com.github.luben/zstd-jni@1.5.4-1?type=jar",
       "modified" : false,
       "type" : "library",
-      "bom-ref" : "pkg:maven/org.jreleaser/jreleaser-tool-java-sdk@1.6.0?type=jar"
+      "bom-ref" : "pkg:maven/com.github.luben/zstd-jni@1.5.4-1?type=jar"
     },
     {
       "group" : "com.fasterxml.jackson.core",
-      "name" : "jackson-databind",
+      "name" : "jackson-annotations",
       "version" : "2.14.2",
-      "description" : "General data-binding functionality for Jackson: works on core streaming API",
+      "description" : "Core annotations used for value types, used by Jackson data binding package.",
       "hashes" : [
         {
           "alg" : "MD5",
-          "content" : "c1b12dd14734cd1986132bf55042dd7e"
+          "content" : "10d19982a8890f6eb37557af2f58e272"
         },
         {
           "alg" : "SHA-1",
-          "content" : "01e71fddbc80bb86f71a6345ac1e8ab8a00e7134"
+          "content" : "a7aae9525864930723e3453ab799521fdfd9d873"
         },
         {
           "alg" : "SHA-256",
-          "content" : "501d3abce4d18dcc381058ec593c5b94477906bba6efbac14dae40a642f77424"
+          "content" : "2c6869d505cf60dc066734b7d50339f975bd3adc635e26a78abb71acb4473c0d"
         },
         {
           "alg" : "SHA-512",
-          "content" : "85473a29d23292f49092af9e7a7a63993206847c53b3e71f3c67245d68f7b19cc7c341e0ece409eb5e96602df98a848e957d8691fdd2c5fcddd807df9078255e"
+          "content" : "a978384791bdc074df8039ffc95bb93f0f60d14d476861ee2a0ce208b33a991c486a07345cb80559252c3ff1dea14d3efb818c19bdc18435946dc8754d8e6ee3"
         },
         {
           "alg" : "SHA-384",
-          "content" : "5c54d6c497cb329c3424a30319bf657ea222349eadc5ae74c30e8dc1525d7b60b7785f4d20370267b03343dd738cc13e"
+          "content" : "d5111c69020666689414921ae4a8950f9fbdf86dec1360f6827beeee9ebd3f78db74e69c76e0becaba47eb34fdaaeb5a"
         },
         {
           "alg" : "SHA3-384",
-          "content" : "98ff0b2a4dfc1faf319d4b0d38376c3c7a58b65d071db293232eed810adf2e525fecee3be45c99b41e20cf6a3a8ebef9"
+          "content" : "53b1a8891482e16a7d8849251cb0dcd1aacf6aaa2161a73589d9742ad96763e384d426d04db762e56fc4536f4e719084"
         },
         {
           "alg" : "SHA3-256",
-          "content" : "2dba45f78a0d37402083975e18dbb3201705faf7e533c3e9721b9364c2a1ab0f"
+          "content" : "14f7b3c51c96f7429f7c60a69e3b7e4f9f2207820141f197d56b57018ffd5640"
         },
         {
           "alg" : "SHA3-512",
-          "content" : "76ef73198269cfd0922f4ae86c8b7e6a9cd1b96ee55da43ebfe57dd34365cc1c5c5630fadf79e46156a52b6b96b7d1f694f5e4f5c4f6a3d3ebb31c927e414435"
+          "content" : "75e4e4fb847fdacdd497cf6b340362581ab4091120ccf2ec32a273709d336af0f78c90ce12b2dd1d17354aa08583af0d3ded89bb415720f45f2d9c110d71dd7a"
         }
       ],
       "licenses" : [
@@ -988,380 +886,322 @@
           }
         }
       ],
-      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.2?type=jar",
+      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.2?type=jar",
       "modified" : false,
       "externalReferences" : [
         {
           "type" : "vcs",
-          "url" : "https://github.com/FasterXML/jackson-databind"
+          "url" : "https://github.com/FasterXML/jackson-annotations"
         }
       ],
       "type" : "library",
-      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.2?type=jar"
+      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.2?type=jar"
     },
     {
       "group" : "org.jreleaser",
-      "name" : "jreleaser-resource-bundle",
+      "name" : "jreleaser-logger-api",
       "version" : "1.6.0",
-      "hashes" : [
-        {
-          "alg" : "MD5",
-          "content" : "8419930ec5e42489dad5e26749a994eb"
-        },
-        {
-          "alg" : "SHA-1",
-          "content" : "050aba092fa794e0cb91158de894a97aff581356"
-        },
-        {
-          "alg" : "SHA-256",
-          "content" : "38434b31fac439399aa37018fa69302a9d1b04be6efb7b23d53d18615e1f4f2b"
-        },
-        {
-          "alg" : "SHA-512",
-          "content" : "c77c476e972e17b25de3aecf75d71482535d68cdc5e4bf556f5d4cab17345b9318d47fa42c9da671769f9bcf7f549efde70b64eff5cb189c805bb406fd705cb8"
-        },
-        {
-          "alg" : "SHA-384",
-          "content" : "b1d8f56681f39c638806e669447d9600507946448b528060d98afc2123c637980ba5609aba4b357c83acd772bfbdb73e"
-        },
+      "description" : "JReleaser logger API",
+      "licenses" : [
         {
-          "alg" : "SHA3-384",
-          "content" : "74a52a9891c520a0f90ffbab33da0219cd787bbe309ae8eca303de00c6041692554e8d650a6a3925e057322bd00700ff"
-        },
+          "license" : {
+            "id" : "Apache-2.0",
+            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.jreleaser/jreleaser-logger-api@1.6.0?type=jar",
+      "modified" : false,
+      "externalReferences" : [
         {
-          "alg" : "SHA3-256",
-          "content" : "304bae90a7c53e6ad711e54bb8847c3eedc0e18cac03bffa14729918cb59efce"
-        },
+          "type" : "vcs",
+          "url" : "https://github.com/jreleaser/jreleaser"
+        }
+      ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.jreleaser/jreleaser-logger-api@1.6.0?type=jar"
+    },
+    {
+      "group" : "org.jreleaser",
+      "name" : "jreleaser-utils",
+      "version" : "1.6.0",
+      "description" : "JReleaser utility classes",
+      "licenses" : [
         {
-          "alg" : "SHA3-512",
-          "content" : "16a31cb40ed20dcaa5d34cb6aa2b81325f285b7feb5dda2486206496449fd548ef51117b38a8074a4a106fba9836de72232762dff60f535cd76f5848860c2f6c"
+          "license" : {
+            "id" : "Apache-2.0",
+            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
+          }
         }
       ],
-      "licenses" : [ ],
-      "purl" : "pkg:maven/org.jreleaser/jreleaser-resource-bundle@1.6.0?type=jar",
+      "purl" : "pkg:maven/org.jreleaser/jreleaser-utils@1.6.0?type=jar",
       "modified" : false,
+      "externalReferences" : [
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/jreleaser/jreleaser"
+        }
+      ],
       "type" : "library",
-      "bom-ref" : "pkg:maven/org.jreleaser/jreleaser-resource-bundle@1.6.0?type=jar"
+      "bom-ref" : "pkg:maven/org.jreleaser/jreleaser-utils@1.6.0?type=jar"
     },
     {
-      "group" : "commons-io",
-      "name" : "commons-io",
-      "version" : "2.11.0",
-      "description" : "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.",
+      "group" : "org.bouncycastle",
+      "name" : "bcpg-jdk15on",
+      "version" : "1.70",
+      "description" : "The Bouncy Castle Java API for handling the OpenPGP protocol. This jar contains the OpenPGP API for JDK 1.5 and up. The APIs can be used in conjunction with a JCE/JCA provider such as the one provided with the Bouncy Castle Cryptography APIs.",
       "hashes" : [
         {
           "alg" : "MD5",
-          "content" : "3b4b7ccfaeceeac240b804839ee1a1ca"
+          "content" : "01ddc3aa0289346f4db19d95039cefdb"
         },
         {
           "alg" : "SHA-1",
-          "content" : "a2503f302b11ebde7ebc3df41daebe0e4eea3689"
+          "content" : "062f72ec06f31a6c31a3f3355fce0384b21126d7"
         },
         {
           "alg" : "SHA-256",
-          "content" : "961b2f6d87dbacc5d54abf45ab7a6e2495f89b75598962d8c723cea9bc210908"
+          "content" : "4f08f4aa74048824151c98dd3e92e7165ac30659834404f08a8e843bdad32847"
         },
         {
           "alg" : "SHA-512",
-          "content" : "5bd78eed456ede30119319c5bed8e3e4c443b6fd7bdb3a7a5686647bd83094d0c3e2832a7575cfb60e4ef25f08106b93476939d3adcfecf5533cc030b3039e10"
+          "content" : "4e240b7811ef90c090e83a181dace41da487555e4136221861b0060f9af6d8b316f2dd0472f747adb98ca5372f46055456ef04bdc0c3992188ab13302922fce9"
         },
         {
           "alg" : "SHA-384",
-          "content" : "114f1e324d90ad887c177876d410f5787a8e8da6c48d4b2862d365802c0efded3a88cb24046976bf6276cadad3712f0f"
+          "content" : "d89dec6226112d13cbea461d84740699770dd7d8ad3f67ab65e7b49fd08a096a948e54da2e6a681925c4320f410bba37"
         },
         {
           "alg" : "SHA3-384",
-          "content" : "80288c03ad4d80d69f91d056ffc5570d49a9c76bf54ad2dff0121ecde26a560df76d05156f281f5c6db2a38ff07a873d"
+          "content" : "5e8e8ca63cc550a8f50b627c4dd051f0eb5c31b99ff53dabd7d5f5d1ed98d0dc1d4963a09fc0db32f8e0ff769a2a6e65"
         },
         {
           "alg" : "SHA3-256",
-          "content" : "5adfb5ccaf5f21a549422f426118a9542673926fcd18c68390cf813e791dcf6c"
+          "content" : "77f28e7e22b3b3a8d7b667fb7f783847c4b11ee7208833636e09e8b38390fd51"
         },
         {
           "alg" : "SHA3-512",
-          "content" : "7573f47f0babb53cefdc7c2309a0b982d800139064537b0797da442853d081010ad7c3c74a500598a0f800639a5d540eca21963ea652c68613907059bd4278c2"
+          "content" : "cb238dbb641c42c49b5801bdfa6432395e860c1a7485ba68e2d57887e3d22ff254718c6cbfa34c107bfb09d74e2f85c33b95f89dfa886e141a8247a0abf2b5c2"
         }
       ],
       "licenses" : [
         {
           "license" : {
-            "id" : "Apache-2.0"
+            "name" : "Bouncy Castle Licence",
+            "url" : "https://www.bouncycastle.org/licence.html"
+          }
+        },
+        {
+          "license" : {
+            "id" : "Apache-1.1",
+            "url" : "http://apache.org/licenses/LICENSE-1.1"
           }
         }
       ],
-      "purl" : "pkg:maven/commons-io/commons-io@2.11.0?type=jar",
+      "purl" : "pkg:maven/org.bouncycastle/bcpg-jdk15on@1.70?type=jar",
       "modified" : false,
       "externalReferences" : [
         {
           "type" : "issue-tracker",
-          "url" : "https://issues.apache.org/jira/browse/IO"
+          "url" : "https://github.com/bcgit/bc-java/issues"
         },
         {
           "type" : "vcs",
-          "url" : "https://gitbox.apache.org/repos/asf?p=commons-io.git"
+          "url" : "https://github.com/bcgit/bc-java"
         }
       ],
       "type" : "library",
-      "bom-ref" : "pkg:maven/commons-io/commons-io@2.11.0?type=jar"
+      "bom-ref" : "pkg:maven/org.bouncycastle/bcpg-jdk15on@1.70?type=jar"
     },
     {
       "group" : "org.jreleaser",
-      "name" : "jreleaser-utils",
+      "name" : "jreleaser-model-api",
       "version" : "1.6.0",
-      "hashes" : [
-        {
-          "alg" : "MD5",
-          "content" : "ca784b5aa352b016a37b393e9e500325"
-        },
-        {
-          "alg" : "SHA-1",
-          "content" : "b0dde5ebbe5a98e5fa90b101dca5ad56e92c49c8"
-        },
-        {
-          "alg" : "SHA-256",
-          "content" : "02b038af2f098d6019b94f4f4e55b8f901d2b5b4a072b083b23e47bd6a3e23cd"
-        },
-        {
-          "alg" : "SHA-512",
-          "content" : "9b5e03766473ee854f877182a758a4842a9566772405af73cd200388eeeb981712e6a3e57f4f2f14f09a912b0cad625a75c5441b57eaa238699beabf327dd56a"
-        },
-        {
-          "alg" : "SHA-384",
-          "content" : "ebc800a8a0a6d19ac2bc922598f8913df5a5eb972dc46ba4eadec5034538c9c95866839670dbf92ca93b075dcb659a0c"
-        },
-        {
-          "alg" : "SHA3-384",
-          "content" : "ed0ba35caf8b7d7dc67d7350617b6cbd54de336634fd5927f03768a89f74ede798ecf343964ef0484302ee262617756b"
-        },
-        {
-          "alg" : "SHA3-256",
-          "content" : "b81154ce5c428820626ee1a99e7f9bbe63d4803f7f311744a26bb8331fb193cc"
-        },
+      "description" : "JReleaser Model API",
+      "licenses" : [
         {
-          "alg" : "SHA3-512",
-          "content" : "b6429f8944cedd026f7b0c30328f8b5e2717493624cee82df48f7e69c8fe8a26b0542d447b1795c7fad7ff90affadcc087d69a576d69cbaccf3ccf1ca962be56"
+          "license" : {
+            "id" : "Apache-2.0",
+            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
+          }
         }
       ],
-      "licenses" : [ ],
-      "purl" : "pkg:maven/org.jreleaser/jreleaser-utils@1.6.0?type=jar",
+      "purl" : "pkg:maven/org.jreleaser/jreleaser-model-api@1.6.0?type=jar",
       "modified" : false,
+      "externalReferences" : [
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/jreleaser/jreleaser"
+        }
+      ],
       "type" : "library",
-      "bom-ref" : "pkg:maven/org.jreleaser/jreleaser-utils@1.6.0?type=jar"
+      "bom-ref" : "pkg:maven/org.jreleaser/jreleaser-model-api@1.6.0?type=jar"
     },
     {
-      "group" : "com.fasterxml.jackson.dataformat",
-      "name" : "jackson-dataformat-yaml",
-      "version" : "2.14.2",
-      "description" : "Support for reading and writing YAML-encoded data via Jackson abstractions.",
-      "hashes" : [
-        {
-          "alg" : "MD5",
-          "content" : "cb29e74cb2c1981985a8214774bde05e"
-        },
-        {
-          "alg" : "SHA-1",
-          "content" : "cc9a25c1f4212562dcb2fa33dd8ae179ba0e6a4e"
-        },
-        {
-          "alg" : "SHA-256",
-          "content" : "5c3a0a71d0339529c80ae771497b20fdc0fa7cb67c772f99af5935927560006a"
-        },
-        {
-          "alg" : "SHA-512",
-          "content" : "f3232b7d5e4b466660a1fd7c0725dd1f24ef9e9192edd05fa698bc641c9f81142e8f1b11de0d0fd2ce3ff21267d3899d6287923dbd130177e3da50dbc222d6c4"
-        },
-        {
-          "alg" : "SHA-384",
-          "content" : "3c08ebd6f40201af59117f2efa262c4280dd614cf02cdeff1145a33cf435b3685a9609cca9dd4c033ea3ce169b815d96"
-        },
-        {
-          "alg" : "SHA3-384",
-          "content" : "d76663872641a9823592b1cf70989eb8f862bed5455e81591008f0a5b46ee8337bf2be78f433a99aa1842287fcaa20c5"
-        },
+      "group" : "org.jreleaser",
+      "name" : "jreleaser-resource-bundle",
+      "version" : "1.6.0",
+      "description" : "JReleaser resource bundle",
+      "licenses" : [
         {
-          "alg" : "SHA3-256",
-          "content" : "79385b1c7e23deba396f2194855b44bc942037ab9cff6a31444508373ecf345c"
-        },
+          "license" : {
+            "id" : "Apache-2.0",
+            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
+          }
+        }
+      ],
+      "purl" : "pkg:maven/org.jreleaser/jreleaser-resource-bundle@1.6.0?type=jar",
+      "modified" : false,
+      "externalReferences" : [
         {
-          "alg" : "SHA3-512",
-          "content" : "323ef61d6433df558b595558d6d629fc6f48af7eb1de6db0382cb3d2cdf7b429e6a41a2b927d0298ea2f234fbc87a8c39a7a9a03901857cb79da1c53114d986f"
+          "type" : "vcs",
+          "url" : "https://github.com/jreleaser/jreleaser"
         }
       ],
+      "type" : "library",
+      "bom-ref" : "pkg:maven/org.jreleaser/jreleaser-resource-bundle@1.6.0?type=jar"
+    },
+    {
+      "group" : "org.jreleaser",
+      "name" : "jreleaser-signing-java-sdk",
+      "version" : "1.6.0",
+      "description" : "JReleaser signing Java SDK",
       "licenses" : [
         {
           "license" : {
-            "id" : "Apache-2.0"
+            "id" : "Apache-2.0",
+            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
           }
         }
       ],
-      "purl" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.14.2?type=jar",
+      "purl" : "pkg:maven/org.jreleaser/jreleaser-signing-java-sdk@1.6.0?type=jar",
       "modified" : false,
+      "externalReferences" : [
+        {
+          "type" : "vcs",
+          "url" : "https://github.com/jreleaser/jreleaser"
+        }
+      ],
       "type" : "library",
-      "bom-ref" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.14.2?type=jar"
+      "bom-ref" : "pkg:maven/org.jreleaser/jreleaser-signing-java-sdk@1.6.0?type=jar"
     },
     {
-      "group" : "org.bouncycastle",
-      "name" : "bcprov-jdk15on",
-      "version" : "1.70",
-      "description" : "The Bouncy Castle Crypto package is a Java implementation of cryptographic algorithms. This jar contains JCE provider and lightweight API for the Bouncy Castle Cryptography APIs for JDK 1.5 and up.",
+      "group" : "com.github.sbaudoin",
+      "name" : "yamllint",
+      "version" : "1.5.0",
+      "description" : "YAML 1.1 linter",
       "hashes" : [
         {
           "alg" : "MD5",
-          "content" : "1809d0449a6374279c01fdd3be26cd92"
+          "content" : "bc2f934bd698696823f9ecc7677a20cd"
         },
         {
           "alg" : "SHA-1",
-          "content" : "4636a0d01f74acaf28082fb62b317f1080118371"
+          "content" : "d3d53f3d461edd88fb8bfab89169122b29a62b4f"
         },
         {
           "alg" : "SHA-256",
-          "content" : "8f3c20e3e2d565d26f33e8d4857a37d0d7f8ac39b62a7026496fcab1bdac30d4"
+          "content" : "5bba1d3ce753620e290835d561c13b0411884cbf4bf1c35525d5ad26ef4d2391"
         },
         {
           "alg" : "SHA-512",
-          "content" : "7dccfc636ee4df1487615818cfa99c69941081df95e8ef1eaf4bca165594dff9547e3774fd70de3418abace77d2c45889f70bcd2e6823f8539f359e68eaf36d1"
+          "content" : "e8b42c4ba8250246f7f8cedb5a5787bfd453dfa9d71951f366e2b1d1e385ab5ef2bac0605aaedae5224d8fda12153fcd6983bfc4cb60448978c0f18c44136b05"
         },
         {
           "alg" : "SHA-384",
-          "content" : "a0b35d204cd962f1d246fa94b6e8b0fcee1a7c3f37b7e87cda742f2124a25b48794ce11a903ea8d12009c86227b6808d"
+          "content" : "161adc86a1301608ee5af9f51390217f670ad6edf2215ae382a35111476b08f0aa35d925cf9256f81818c236c1f9b2eb"
         },
         {
           "alg" : "SHA3-384",
-          "content" : "980d81d3d9906764bbf2ae9b3b364ea58628b485ce1dc3d06734e10495d79f2be2e7cc7df61ac88cd67c1104c7af9393"
+          "content" : "89502cc5f7ee210448f4cc3c6e0cf61a1f31726b8e7f00f82aceab823dc2a0b66c17d76f0935c9fa213fc33d21fd918b"
         },
         {
           "alg" : "SHA3-256",
-          "content" : "10a3572e42d29f609721d795116e3e5d0f6f03efef84bb979ce72e26908d242b"
+          "content" : "e7db7ae83b8f184b28cb61269786102a80a2b29bd44d50693504bc7468a1c4c5"
         },
         {
           "alg" : "SHA3-512",
-          "content" : "a0761cb6deeb86c94b96850c72c0a0eaf516ca849f4b8268f9f60c9ed2a6730e692c15098d47e617da294e931113c6cbcaddec8957c9f029fa595b5f14ff35ac"
+          "content" : "e8e018b4bcd6e56492c33225927ab828d7a725d56d08ce33f7193e11f53c961fdfaaadfb5d6745c3b6048787a9cb0ff6b8398a3925c5553710d387df7716d3aa"
         }
       ],
       "licenses" : [
         {
           "license" : {
-            "name" : "Bouncy Castle Licence",
-            "url" : "https://www.bouncycastle.org/licence.html"
+            "id" : "Apache-2.0"
           }
         }
       ],
-      "purl" : "pkg:maven/org.bouncycastle/bcprov-jdk15on@1.70?type=jar",
+      "purl" : "pkg:maven/com.github.sbaudoin/yamllint@1.5.0?type=jar",
       "modified" : false,
       "externalReferences" : [
         {
           "type" : "issue-tracker",
-          "url" : "https://github.com/bcgit/bc-java/issues"
+          "url" : "https://github.com/sbaudoin/yamllint/issues"
         },
         {
           "type" : "vcs",
-          "url" : "https://github.com/bcgit/bc-java"
-        }
-      ],
-      "type" : "library",
-      "bom-ref" : "pkg:maven/org.bouncycastle/bcprov-jdk15on@1.70?type=jar"
-    },
-    {
-      "group" : "org.jreleaser",
-      "name" : "jreleaser-signing-java-sdk",
-      "version" : "1.6.0",
-      "hashes" : [
-        {
-          "alg" : "MD5",
-          "content" : "2608fa713b1fa2a515ec2c83ec96a49c"
-        },
-        {
-          "alg" : "SHA-1",
-          "content" : "f0de8990fee988060fe7721d389d6ba8aad481a4"
-        },
-        {
-          "alg" : "SHA-256",
-          "content" : "ea0e35358f453eee98d0a4e921bfa6114c04afe52adb0c74bcc5200092971454"
-        },
-        {
-          "alg" : "SHA-512",
-          "content" : "4d0146d43526b329139bb38edbe63f6f783ae99f5d2778c6c6af8851be458739afe31951bf8e54f85da7c6e5d5e7d4670b45917c6ffa855f578355a6359286a6"
-        },
-        {
-          "alg" : "SHA-384",
-          "content" : "a29024fbd6fb57818b5800cb961a043d4d131e4c16d0b6965a4abd4ef275001bd607697195f562e6b3d4f36fac5847b0"
-        },
-        {
-          "alg" : "SHA3-384",
-          "content" : "5b9e053c6b9a48483a7cdd898f37fc72275171348ed4433b9759e0a4f86edad6a26c84ed69eae8612811e17b806df60a"
-        },
-        {
-          "alg" : "SHA3-256",
-          "content" : "477c36bff3a1ec95810622a43d43ea9b1c614c54306897d9c4ee66f2a349a9e9"
-        },
-        {
-          "alg" : "SHA3-512",
-          "content" : "b6594d20048651c4982230202c5af186f064025bf80d21c87d4cacb3d1b466bc1e5c850fea374edf9c3c98fda734ea52284bd62bbd456aee903c705152d767da"
+          "url" : "https://github.com/sbaudoin/yamllint.git"
         }
       ],
-      "licenses" : [ ],
-      "purl" : "pkg:maven/org.jreleaser/jreleaser-signing-java-sdk@1.6.0?type=jar",
-      "modified" : false,
       "type" : "library",
-      "bom-ref" : "pkg:maven/org.jreleaser/jreleaser-signing-java-sdk@1.6.0?type=jar"
+      "bom-ref" : "pkg:maven/com.github.sbaudoin/yamllint@1.5.0?type=jar"
     },
     {
-      "group" : "com.github.spullara.mustache.java",
-      "name" : "compiler",
-      "version" : "0.9.10",
-      "description" : "Implementation of mustache.js for Java",
+      "group" : "com.fasterxml.jackson.core",
+      "name" : "jackson-core",
+      "version" : "2.14.2",
+      "description" : "Core Jackson processing abstractions (aka Streaming API), implementation for JSON",
       "hashes" : [
         {
           "alg" : "MD5",
-          "content" : "5638fc78a17d5063cc4b0d00f6e87491"
+          "content" : "6ee422ee4c481b2d5aacb2b5e36a7dc0"
         },
         {
           "alg" : "SHA-1",
-          "content" : "6111ae24e3be9ecbd75f5fe908583fc14b4f0174"
+          "content" : "f804090e6399ce0cf78242db086017512dd71fcc"
         },
         {
           "alg" : "SHA-256",
-          "content" : "2b5a9217811cb99846a473fa8e0d233eb33629347b7f44941f6c0fbd4cdf1038"
+          "content" : "b5d37a77c88277b97e3593c8740925216c06df8e4172bbde058528df04ad3e7a"
         },
         {
           "alg" : "SHA-512",
-          "content" : "2ccf3196af2b518c96df748a72a0122d033dc222e1fab3e12f3e2094146d44bec20bd1502390b59abf090cbdf5dd4d580084b07fb7241248b5b8da2605207559"
+          "content" : "208953cf72691b3bab1ca2f9a045cccd3d75c46c90099ba884fbf16bc3e45045e5cd014d2c68c96e8a8826f87a5f0e18cb34b35e7ef03348953869c21e197367"
         },
         {
           "alg" : "SHA-384",
-          "content" : "0204e77a4a64701af5000df6601f4f4c23cb5e53dd39a1325615d4f942cd2c91d04bbac20348ae49731f586282165c33"
+          "content" : "e806595862c5fcdae801d9845befc1d12c97e6036ee839d34590dbd785a422d5832cf4fc5c7ee6e1a5ee7a59f37740f0"
         },
         {
           "alg" : "SHA3-384",
-          "content" : "0960da7175835484471f485d481499f8b65f134ff4f1629618560adaa5a08caa897fbefcea190f93106ee9e3273381b2"
+          "content" : "4fa59f572f2e100e2eba6fc664a3b9f804fabd911a552cb40805f39e624a9c04246b679cf4b017bb782c8272877f49d2"
         },
         {
           "alg" : "SHA3-256",
-          "content" : "cfb7e640392ef590069e6b1d059dc20b8fcff984a4b267b3969fcf50ed0edd4f"
+          "content" : "cef17d3a539cbf798cfb0bfa9faffa2b7baff3670b50743e91ee58b4c60b59f1"
         },
         {
           "alg" : "SHA3-512",
-          "content" : "db3dad3809879bca835a04da890fd86dbc58ba6637c72f07d02e39d13645ebb6c640b7fecc18a779e58946072078bdf114b91445026a32dd6501b5d1c6e7d933"
+          "content" : "fceeed5cb8fe4335d88282d15657762a4728483275a7ff45f50b9fe6a999757ccb37c415d001eb6250226f98f5c576b1b36a83e601fb393cfd34a811c2df5d00"
         }
       ],
       "licenses" : [
         {
           "license" : {
-            "id" : "Apache-2.0",
-            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
+            "id" : "Apache-2.0"
           }
         }
       ],
-      "purl" : "pkg:maven/com.github.spullara.mustache.java/compiler@0.9.10?type=jar",
+      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.2?type=jar",
       "modified" : false,
       "externalReferences" : [
         {
           "type" : "vcs",
-          "url" : "http://github.com/spullara/mustache.java"
+          "url" : "https://github.com/FasterXML/jackson-core"
         }
       ],
       "type" : "library",
-      "bom-ref" : "pkg:maven/com.github.spullara.mustache.java/compiler@0.9.10?type=jar"
+      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.2?type=jar"
     }
   ],
   "dependencies" : [
