<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:be130f47-9a52-4d2f-9509-5b4433129719" version="1" xmlns="http://cyclonedx.org/schema/bom/1.4">
  <metadata>
    <timestamp>2025-07-11T06:29:47Z</timestamp>
    <tools>
      <tool>
        <vendor>CycloneDX</vendor>
        <name>cyclonedx-gradle-plugin</name>
        <version>1.7.4</version>
      </tool>
    </tools>
    <component type="library" bom-ref="pkg:maven/org.jreleaser/jreleaser-signing-java-sdk@1.6.0?type=jar">
      <group>org.jreleaser</group>
      <name>jreleaser-signing-java-sdk</name>
      <version>1.6.0</version>
      <purl>pkg:maven/org.jreleaser/jreleaser-signing-java-sdk@1.6.0?type=jar</purl>
    </component>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/commons-codec/commons-codec@1.15?type=jar">
      <group>commons-codec</group>
      <name>commons-codec</name>
      <version>1.15</version>
      <description>The Apache Commons Codec package contains simple encoder and decoders for
     various formats such as Base64 and Hexadecimal.  In addition to these
     widely used encoders and decoders, the codec package also maintains a
     collection of phonetic encoding utilities.</description>
      <hashes>
        <hash alg="MD5">303baf002ce6d382198090aedd9d79a2</hash>
        <hash alg="SHA-1">49d94806b6e3dc933dacbd8acb0fdbab8ebd1e5d</hash>
        <hash alg="SHA-256">b3e9f6d63a790109bf0d056611fbed1cf69055826defeb9894a71369d246ed63</hash>
        <hash alg="SHA-512">da30a716770795fce390e4dd340a8b728f220c6572383ffef55bd5839655d5611fcc06128b2144f6cdcb36f53072a12ec80b04afee787665e7ad0b6e888a6787</hash>
        <hash alg="SHA-384">05d0506283716472175d44c2a4766523397bf8a007c18848f9c9a61718cc8aa437f9cb4b91771037ab29a960860b62a0</hash>
        <hash alg="SHA3-384">12fad4ef78274b06f97b1243cea6f970088abde082d2de9377d915a34b44f7d7d67807c03e59c849b69f1544e2a9a1be</hash>
        <hash alg="SHA3-256">87be248f33f241121f54aad61a9a460a79eabefbf1b5b0dd22aeb95b581f727e</hash>
        <hash alg="SHA3-512">8c992c9c569ebaa0bf956a4c5b34fbf5e1ed1c212c2dd896fa216183ee0bcd341e96698af4b9cec7e8880762faa081a3d3a27f51349aa457cb8e373e4f57c788</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-codec/commons-codec@1.15?type=jar</purl>
      <modified>false</modified>
      <externalReferences><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CODEC</url></reference><reference type="vcs"><url>https://github.com/apache/commons-codec</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.github.luben/zstd-jni@1.5.4-1?type=jar">
      <publisher>com.github.luben</publisher>
      <group>com.github.luben</group>
      <name>zstd-jni</name>
      <version>1.5.4-1</version>
      <description>JNI bindings for Zstd native library that provides fast and high compression lossless algorithm for Java and all JVM languages.</description>
      <hashes>
        <hash alg="MD5">e787241d6ec56aac451be8b0d920c85b</hash>
        <hash alg="SHA-1">291ccaacc039e41932de877303edb6af98a91c24</hash>
        <hash alg="SHA-256">f0469d891127dc5ae6bd2df93a5aa38c4d79bcd5f360fbb88c2785b52a572349</hash>
        <hash alg="SHA-512">368916f0057d69fa4ba3768f6f617291ce4083b89913e46c2daa68cc94c48b92e0ca626241486f34a4d154502eb77b19e82c16c68b341ecfc82ccc0520f8d4a9</hash>
        <hash alg="SHA-384">7e72184873689fa286d93d88f69f8baa24f818fcd61105a14332fbb5ed254363c0969afa98befd797a3762577bc77993</hash>
        <hash alg="SHA3-384">1302636797b291dbbe19f39bdeb66160c1317b395a0a9360ba93aeaa262de7ad8de7257e6a997a9c659fdf53b3367ee6</hash>
        <hash alg="SHA3-256">54505ed16257a55330bb44c76719a687251d2623fa5e50a192b54c5067573255</hash>
        <hash alg="SHA3-512">6e01cc9654c2d68c36a284e23c388267ac7013d534cceed0b6ab44679a6bbb6d03d4cfc52c967c4e76dbd5b8963c268e40d9890c927866ea00824821b0ecb82d</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-2-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.github.luben/zstd-jni@1.5.4-1?type=jar</purl>
      <modified>false</modified>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/jcl-over-slf4j@2.0.7?type=jar">
      <group>org.slf4j</group>
      <name>jcl-over-slf4j</name>
      <version>2.0.7</version>
      <description>JCL 1.2 implemented over SLF4J</description>
      <hashes>
        <hash alg="MD5">4e8d6cd31f7e6277280c95157ac7845a</hash>
        <hash alg="SHA-1">f127fe5ee53404a8b3697cdd032dd1dd6a29dd77</hash>
        <hash alg="SHA-256">41806757e1d26dae5d6db2ca7d4a5176eed2d6e709cd86564d4a11dab0601742</hash>
        <hash alg="SHA-512">221b39b85145cf7c245acb7f2692a02b6c5816f8b1187a1a77942dd39de958c1b01ecd066682eb88244f87b2a47513d40b6c1e69ef49a43b2a07ba818f124e17</hash>
        <hash alg="SHA-384">fa8d53b46cd3ddab0bd265d384a90c35efef6a02a7822aa6f79065cee68d78f6ad7c4d248dea7497af449845dc962730</hash>
        <hash alg="SHA3-384">cf06cfeaba477f7738f089ba401fb841074681d1c7f465546cdf0e95751a8bf912493428876a7d9108eef83f637c6a1e</hash>
        <hash alg="SHA3-256">efbad2de8683215936c56b3f8fd3492f1cc27c2ee77595a99c794e18777dec42</hash>
        <hash alg="SHA3-512">2707d5513e49f6e3ea6dec96510d360cfc125dab164ae5d99a1dcbd628751640f625a70ed749dad66024ae9fd7725f1c6c7f76de7f5a6efc9d8208a9e01922f7</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/jcl-over-slf4j@2.0.7?type=jar</purl>
      <modified>false</modified>
    </component>
    <component type="library" bom-ref="pkg:maven/org.jreleaser/jreleaser-logger-api@1.6.0?type=jar">
      <group>org.jreleaser</group>
      <name>jreleaser-logger-api</name>
      <version>1.6.0</version>
      <description>JReleaser logger API</description>
      <hashes>
        <hash alg="MD5">e7da806a3427ab10405584067d880ead</hash>
        <hash alg="SHA-1">92ae4e1826cf1d8321fcefd3f4ece0fa5cc4fc94</hash>
        <hash alg="SHA-256">372d4b6cee7af83429f9f054a69f73d38d6fb4c983b14ce97f2599791d59aee9</hash>
        <hash alg="SHA-512">c4f4edf49e18f475b7b44677497250cd93af45e302fb39306a94dc8f0ee1f783921967de3e1f1b7591f970a359080f43b24c1499a363280d904c2519d2e9bcb2</hash>
        <hash alg="SHA-384">fcdadd6f2e8af30a7761e98f5c717ab1b8f6f0a79825a711454c8c9cc9842cf8fe0f5917b5ea48603eb0ee5788ed7a8b</hash>
        <hash alg="SHA3-384">42a3e276d69efc85ce5798c5cd78ba1a910ef328169fb39a1a685eea5b98e9c3bf495124f56b518d553f1ca2e63d62f7</hash>
        <hash alg="SHA3-256">0fb4d06e278df39d6633d1a09ed01ad4f7788838668f2ebc097f919384cec97d</hash>
        <hash alg="SHA3-512">bb5a8b000955af1038d4d75c0fd8786561b3a2cf7bb804e09e42518a0bcc3e23ab01dd5236de4bdb58fd9b1a0e923982eb6cc6d0e450896bed9c86dfe808675d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.jreleaser/jreleaser-logger-api@1.6.0?type=jar</purl>
      <modified>false</modified>
      <externalReferences><reference type="vcs"><url>https://github.com/jreleaser/jreleaser</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.2?type=jar">
      <group>com.fasterxml.jackson.core</group>
      <name>jackson-annotations</name>
      <version>2.14.2</version>
      <description>Core annotations used for value types, used by Jackson data binding package.</description>
      <hashes>
        <hash alg="MD5">10d19982a8890f6eb37557af2f58e272</hash>
        <hash alg="SHA-1">a7aae9525864930723e3453ab799521fdfd9d873</hash>
        <hash alg="SHA-256">2c6869d505cf60dc066734b7d50339f975bd3adc635e26a78abb71acb4473c0d</hash>
        <hash alg="SHA-512">a978384791bdc074df8039ffc95bb93f0f60d14d476861ee2a0ce208b33a991c486a07345cb80559252c3ff1dea14d3efb818c19bdc18435946dc8754d8e6ee3</hash>
        <hash alg="SHA-384">d5111c69020666689414921ae4a8950f9fbdf86dec1360f6827beeee9ebd3f78db74e69c76e0becaba47eb34fdaaeb5a</hash>
        <hash alg="SHA3-384">53b1a8891482e16a7d8849251cb0dcd1aacf6aaa2161a73589d9742ad96763e384d426d04db762e56fc4536f4e719084</hash>
        <hash alg="SHA3-256">14f7b3c51c96f7429f7c60a69e3b7e4f9f2207820141f197d56b57018ffd5640</hash>
        <hash alg="SHA3-512">75e4e4fb847fdacdd497cf6b340362581ab4091120ccf2ec32a273709d336af0f78c90ce12b2dd1d17354aa08583af0d3ded89bb415720f45f2d9c110d71dd7a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.2?type=jar</purl>
      <modified>false</modified>
      <externalReferences><reference type="vcs"><url>https://github.com/FasterXML/jackson-annotations</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.bouncycastle/bcpg-jdk15on@1.70?type=jar">
      <group>org.bouncycastle</group>
      <name>bcpg-jdk15on</name>
      <version>1.70</version>
      <description>The Bouncy Castle Java API for handling the OpenPGP protocol. This jar contains the OpenPGP API for JDK 1.5 and up. The APIs can be used in conjunction with a JCE/JCA provider such as the one provided with the Bouncy Castle Cryptography APIs.</description>
      <hashes>
        <hash alg="MD5">01ddc3aa0289346f4db19d95039cefdb</hash>
        <hash alg="SHA-1">062f72ec06f31a6c31a3f3355fce0384b21126d7</hash>
        <hash alg="SHA-256">4f08f4aa74048824151c98dd3e92e7165ac30659834404f08a8e843bdad32847</hash>
        <hash alg="SHA-512">4e240b7811ef90c090e83a181dace41da487555e4136221861b0060f9af6d8b316f2dd0472f747adb98ca5372f46055456ef04bdc0c3992188ab13302922fce9</hash>
        <hash alg="SHA-384">d89dec6226112d13cbea461d84740699770dd7d8ad3f67ab65e7b49fd08a096a948e54da2e6a681925c4320f410bba37</hash>
        <hash alg="SHA3-384">5e8e8ca63cc550a8f50b627c4dd051f0eb5c31b99ff53dabd7d5f5d1ed98d0dc1d4963a09fc0db32f8e0ff769a2a6e65</hash>
        <hash alg="SHA3-256">77f28e7e22b3b3a8d7b667fb7f783847c4b11ee7208833636e09e8b38390fd51</hash>
        <hash alg="SHA3-512">cb238dbb641c42c49b5801bdfa6432395e860c1a7485ba68e2d57887e3d22ff254718c6cbfa34c107bfb09d74e2f85c33b95f89dfa886e141a8247a0abf2b5c2</hash>
      </hashes>
      <licenses>
        <license>
          <name>Bouncy Castle Licence</name>
          <url>https://www.bouncycastle.org/licence.html</url>
        </license>
        <license>
          <id>Apache-1.1</id>
          <url>http://apache.org/licenses/LICENSE-1.1</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.bouncycastle/bcpg-jdk15on@1.70?type=jar</purl>
      <modified>false</modified>
      <externalReferences><reference type="issue-tracker"><url>https://github.com/bcgit/bc-java/issues</url></reference><reference type="vcs"><url>https://github.com/bcgit/bc-java</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.jreleaser/jreleaser-tool-java-sdk@1.6.0?type=jar">
      <group>org.jreleaser</group>
      <name>jreleaser-tool-java-sdk</name>
      <version>1.6.0</version>
      <description>Java SDK for Tools</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.jreleaser/jreleaser-tool-java-sdk@1.6.0?type=jar</purl>
      <modified>false</modified>
      <externalReferences><reference type="vcs"><url>https://github.com/jreleaser/jreleaser</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.jreleaser/jreleaser-command-java-sdk@1.6.0?type=jar">
      <group>org.jreleaser</group>
      <name>jreleaser-command-java-sdk</name>
      <version>1.6.0</version>
      <description>JReleaser command SDK</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.jreleaser/jreleaser-command-java-sdk@1.6.0?type=jar</purl>
      <modified>false</modified>
      <externalReferences><reference type="vcs"><url>https://github.com/jreleaser/jreleaser</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.jreleaser/jreleaser-model-api@1.6.0?type=jar">
      <group>org.jreleaser</group>
      <name>jreleaser-model-api</name>
      <version>1.6.0</version>
      <description>JReleaser Model API</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.jreleaser/jreleaser-model-api@1.6.0?type=jar</purl>
      <modified>false</modified>
      <externalReferences><reference type="vcs"><url>https://github.com/jreleaser/jreleaser</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.jreleaser/jreleaser-utils@1.6.0?type=jar">
      <group>org.jreleaser</group>
      <name>jreleaser-utils</name>
      <version>1.6.0</version>
      <description>JReleaser utility classes</description>
      <hashes>
        <hash alg="MD5">ca784b5aa352b016a37b393e9e500325</hash>
        <hash alg="SHA-1">b0dde5ebbe5a98e5fa90b101dca5ad56e92c49c8</hash>
        <hash alg="SHA-256">02b038af2f098d6019b94f4f4e55b8f901d2b5b4a072b083b23e47bd6a3e23cd</hash>
        <hash alg="SHA-512">9b5e03766473ee854f877182a758a4842a9566772405af73cd200388eeeb981712e6a3e57f4f2f14f09a912b0cad625a75c5441b57eaa238699beabf327dd56a</hash>
        <hash alg="SHA-384">ebc800a8a0a6d19ac2bc922598f8913df5a5eb972dc46ba4eadec5034538c9c95866839670dbf92ca93b075dcb659a0c</hash>
        <hash alg="SHA3-384">ed0ba35caf8b7d7dc67d7350617b6cbd54de336634fd5927f03768a89f74ede798ecf343964ef0484302ee262617756b</hash>
        <hash alg="SHA3-256">b81154ce5c428820626ee1a99e7f9bbe63d4803f7f311744a26bb8331fb193cc</hash>
        <hash alg="SHA3-512">b6429f8944cedd026f7b0c30328f8b5e2717493624cee82df48f7e69c8fe8a26b0542d447b1795c7fad7ff90affadcc087d69a576d69cbaccf3ccf1ca962be56</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.jreleaser/jreleaser-utils@1.6.0?type=jar</purl>
      <modified>false</modified>
      <externalReferences><reference type="vcs"><url>https://github.com/jreleaser/jreleaser</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-compress@1.22?type=jar">
      <group>org.apache.commons</group>
      <name>commons-compress</name>
      <version>1.22</version>
      <description>Apache Commons Compress software defines an API for working with
compression and archive formats.  These include: bzip2, gzip, pack200,
lzma, xz, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4,
Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.</description>
      <hashes>
        <hash alg="MD5">f1e4db16fee4291212d91409313a8086</hash>
        <hash alg="SHA-1">691a8b4e6cf4248c3bc72c8b719337d5cb7359fa</hash>
        <hash alg="SHA-256">53d04a0efc7223baecaa303bd5d298eb0600e6b82b4076f9cecd558b97ba760b</hash>
        <hash alg="SHA-512">2d64fa6cd081fff5d73ee662a82f6186991fc13b4bdaee18b5f1bdcab06d9acb70e3713d18b296337791448251fbd6768bd84afaa817a10547652d0cfa885563</hash>
        <hash alg="SHA-384">295d7f69d151abbd784e1c4d021c77ce43e129bb5bda0c55762b32d77c8607863383297674ec8a212ea3dfe4007b0044</hash>
        <hash alg="SHA3-384">af04eb1b4647b1a041c5ee994c2c7a32556b5410b916fedb69905f166938baa43ba54fdc67084205794c02680d3c6349</hash>
        <hash alg="SHA3-256">40f2960e82adfb171b0c5430271fdb0c0dae243aaf9b08021df54fd4d4a3a0b0</hash>
        <hash alg="SHA3-512">f2c445f77bda3ef230a2b78ea88d86e48a7d6db36805f841d5cffe1f178842a161b2fda0b0d60162af210f18ed9c5bb9579c963291c26f715c1aa389d9a6785c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-compress@1.22?type=jar</purl>
      <modified>false</modified>
      <externalReferences><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/COMPRESS</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-compress.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar">
      <group>org.slf4j</group>
      <name>slf4j-api</name>
      <version>2.0.7</version>
      <description>The slf4j API</description>
      <hashes>
        <hash alg="MD5">403dffa46cdd2e3c82da19df4f394a4c</hash>
        <hash alg="SHA-1">41eb7184ea9d556f23e18b5cb99cad1f8581fc00</hash>
        <hash alg="SHA-256">5d6298b93a1905c32cda6478808ac14c2d4a47e91535e53c41f7feeb85d946f4</hash>
        <hash alg="SHA-512">216d2cac27d501972c888f94dfa747d700b80d60813884b6ab4b12c6a3b17ed0c21a1d27e1aa4332c97c828f20039e3913d2763d7e1a3cef36ae4389a276e7a8</hash>
        <hash alg="SHA-384">c25b39f418aa726ba8405dfd9b356131f89984e2ef5a55a724a2abf3b7c78443f671105835161d2414d602cf03da9f2d</hash>
        <hash alg="SHA3-384">f33abfaac21badae6f85d3ebbc6c1204fd7fda3bb15173e763fa8cee95bce6a8270eec2c8f49343c66c8d2767bc317e1</hash>
        <hash alg="SHA3-256">6e00d4b264a2afc4ca4e98f716ecece66c32c626ca3f8c5d56b22092b6fe417b</hash>
        <hash alg="SHA3-512">ad7b9142d370fc532a07cdd43881a129b012ff50e2bede3ac27d9bd31ec707bf2f45e82002fa59e962955cc38ab73cdd77713fca50cedc926c046f5617c1285b</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar</purl>
      <modified>false</modified>
    </component>
    <component type="library" bom-ref="pkg:maven/com.github.spullara.mustache.java/compiler@0.9.10?type=jar">
      <group>com.github.spullara.mustache.java</group>
      <name>compiler</name>
      <version>0.9.10</version>
      <description>Implementation of mustache.js for Java</description>
      <hashes>
        <hash alg="MD5">5638fc78a17d5063cc4b0d00f6e87491</hash>
        <hash alg="SHA-1">6111ae24e3be9ecbd75f5fe908583fc14b4f0174</hash>
        <hash alg="SHA-256">2b5a9217811cb99846a473fa8e0d233eb33629347b7f44941f6c0fbd4cdf1038</hash>
        <hash alg="SHA-512">2ccf3196af2b518c96df748a72a0122d033dc222e1fab3e12f3e2094146d44bec20bd1502390b59abf090cbdf5dd4d580084b07fb7241248b5b8da2605207559</hash>
        <hash alg="SHA-384">0204e77a4a64701af5000df6601f4f4c23cb5e53dd39a1325615d4f942cd2c91d04bbac20348ae49731f586282165c33</hash>
        <hash alg="SHA3-384">0960da7175835484471f485d481499f8b65f134ff4f1629618560adaa5a08caa897fbefcea190f93106ee9e3273381b2</hash>
        <hash alg="SHA3-256">cfb7e640392ef590069e6b1d059dc20b8fcff984a4b267b3969fcf50ed0edd4f</hash>
        <hash alg="SHA3-512">db3dad3809879bca835a04da890fd86dbc58ba6637c72f07d02e39d13645ebb6c640b7fecc18a779e58946072078bdf114b91445026a32dd6501b5d1c6e7d933</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/com.github.spullara.mustache.java/compiler@0.9.10?type=jar</purl>
      <modified>false</modified>
      <externalReferences><reference type="vcs"><url>http://github.com/spullara/mustache.java</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.2?type=jar">
      <group>com.fasterxml.jackson.core</group>
      <name>jackson-databind</name>
      <version>2.14.2</version>
      <description>General data-binding functionality for Jackson: works on core streaming API</description>
      <hashes>
        <hash alg="MD5">c1b12dd14734cd1986132bf55042dd7e</hash>
        <hash alg="SHA-1">01e71fddbc80bb86f71a6345ac1e8ab8a00e7134</hash>
        <hash alg="SHA-256">501d3abce4d18dcc381058ec593c5b94477906bba6efbac14dae40a642f77424</hash>
        <hash alg="SHA-512">85473a29d23292f49092af9e7a7a63993206847c53b3e71f3c67245d68f7b19cc7c341e0ece409eb5e96602df98a848e957d8691fdd2c5fcddd807df9078255e</hash>
        <hash alg="SHA-384">5c54d6c497cb329c3424a30319bf657ea222349eadc5ae74c30e8dc1525d7b60b7785f4d20370267b03343dd738cc13e</hash>
        <hash alg="SHA3-384">98ff0b2a4dfc1faf319d4b0d38376c3c7a58b65d071db293232eed810adf2e525fecee3be45c99b41e20cf6a3a8ebef9</hash>
        <hash alg="SHA3-256">2dba45f78a0d37402083975e18dbb3201705faf7e533c3e9721b9364c2a1ab0f</hash>
        <hash alg="SHA3-512">76ef73198269cfd0922f4ae86c8b7e6a9cd1b96ee55da43ebfe57dd34365cc1c5c5630fadf79e46156a52b6b96b7d1f694f5e4f5c4f6a3d3ebb31c927e414435</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.2?type=jar</purl>
      <modified>false</modified>
      <externalReferences><reference type="vcs"><url>https://github.com/FasterXML/jackson-databind</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.jreleaser/jreleaser-resource-bundle@1.6.0?type=jar">
      <group>org.jreleaser</group>
      <name>jreleaser-resource-bundle</name>
      <version>1.6.0</version>
      <description>JReleaser resource bundle</description>
      <hashes>
        <hash alg="MD5">8419930ec5e42489dad5e26749a994eb</hash>
        <hash alg="SHA-1">050aba092fa794e0cb91158de894a97aff581356</hash>
        <hash alg="SHA-256">38434b31fac439399aa37018fa69302a9d1b04be6efb7b23d53d18615e1f4f2b</hash>
        <hash alg="SHA-512">c77c476e972e17b25de3aecf75d71482535d68cdc5e4bf556f5d4cab17345b9318d47fa42c9da671769f9bcf7f549efde70b64eff5cb189c805bb406fd705cb8</hash>
        <hash alg="SHA-384">b1d8f56681f39c638806e669447d9600507946448b528060d98afc2123c637980ba5609aba4b357c83acd772bfbdb73e</hash>
        <hash alg="SHA3-384">74a52a9891c520a0f90ffbab33da0219cd787bbe309ae8eca303de00c6041692554e8d650a6a3925e057322bd00700ff</hash>
        <hash alg="SHA3-256">304bae90a7c53e6ad711e54bb8847c3eedc0e18cac03bffa14729918cb59efce</hash>
        <hash alg="SHA3-512">16a31cb40ed20dcaa5d34cb6aa2b81325f285b7feb5dda2486206496449fd548ef51117b38a8074a4a106fba9836de72232762dff60f535cd76f5848860c2f6c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.jreleaser/jreleaser-resource-bundle@1.6.0?type=jar</purl>
      <modified>false</modified>
      <externalReferences><reference type="vcs"><url>https://github.com/jreleaser/jreleaser</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.tukaani/xz@1.9?type=jar">
      <group>org.tukaani</group>
      <name>xz</name>
      <version>1.9</version>
      <description>XZ data compression</description>
      <hashes>
        <hash alg="MD5">57c2fbfeb55e307ccae52e5322082e02</hash>
        <hash alg="SHA-1">1ea4bec1a921180164852c65006d928617bd2caf</hash>
        <hash alg="SHA-256">211b306cfc44f8f96df3a0a3ddaf75ba8c5289eed77d60d72f889bb855f535e5</hash>
        <hash alg="SHA-512">a4362db234d4e83683e90f5baf90c82107450cc4404acab96e3fab14b8a3d4588a19722171d32f27d18463682a6994cad9af0b1065c954e3a77ea7bdcf586bac</hash>
        <hash alg="SHA-384">aa30349b094723369908369a18e2cb5beb5b7ca0b24b4d56c2f5725fae152220f6526466672b22bfec939e2e0622a01d</hash>
        <hash alg="SHA3-384">b3e1fee7784188df5e1931c9e8137ac0e20e63f66f93e7f938a448fc0b3adb4be5205c7a5f1835007e233fee2696fc2c</hash>
        <hash alg="SHA3-256">92eff603ed0aab557e1a45e17a74e80d8ec656b5f137197b23c429c903fa448f</hash>
        <hash alg="SHA3-512">b290f92958f8cd91705331d8411140c23957ab8b568fbe19a70f4f1dc97eddc13d3a200df28a02ab5911ce18f546c33f720878be0f727edac839a6e63ee66ece</hash>
      </hashes>
      <licenses>
        <license>
          <name>Public Domain</name>
        </license>
      </licenses>
      <purl>pkg:maven/org.tukaani/xz@1.9?type=jar</purl>
      <modified>false</modified>
      <externalReferences><reference type="vcs"><url>https://git.tukaani.org/?p=xz-java.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.bouncycastle/bcprov-jdk15on@1.70?type=jar">
      <group>org.bouncycastle</group>
      <name>bcprov-jdk15on</name>
      <version>1.70</version>
      <description>The Bouncy Castle Crypto package is a Java implementation of cryptographic algorithms. This jar contains JCE provider and lightweight API for the Bouncy Castle Cryptography APIs for JDK 1.5 and up.</description>
      <hashes>
        <hash alg="MD5">1809d0449a6374279c01fdd3be26cd92</hash>
        <hash alg="SHA-1">4636a0d01f74acaf28082fb62b317f1080118371</hash>
        <hash alg="SHA-256">8f3c20e3e2d565d26f33e8d4857a37d0d7f8ac39b62a7026496fcab1bdac30d4</hash>
        <hash alg="SHA-512">7dccfc636ee4df1487615818cfa99c69941081df95e8ef1eaf4bca165594dff9547e3774fd70de3418abace77d2c45889f70bcd2e6823f8539f359e68eaf36d1</hash>
        <hash alg="SHA-384">a0b35d204cd962f1d246fa94b6e8b0fcee1a7c3f37b7e87cda742f2124a25b48794ce11a903ea8d12009c86227b6808d</hash>
        <hash alg="SHA3-384">980d81d3d9906764bbf2ae9b3b364ea58628b485ce1dc3d06734e10495d79f2be2e7cc7df61ac88cd67c1104c7af9393</hash>
        <hash alg="SHA3-256">10a3572e42d29f609721d795116e3e5d0f6f03efef84bb979ce72e26908d242b</hash>
        <hash alg="SHA3-512">a0761cb6deeb86c94b96850c72c0a0eaf516ca849f4b8268f9f60c9ed2a6730e692c15098d47e617da294e931113c6cbcaddec8957c9f029fa595b5f14ff35ac</hash>
      </hashes>
      <licenses>
        <license>
          <name>Bouncy Castle Licence</name>
          <url>https://www.bouncycastle.org/licence.html</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.bouncycastle/bcprov-jdk15on@1.70?type=jar</purl>
      <modified>false</modified>
      <externalReferences><reference type="issue-tracker"><url>https://github.com/bcgit/bc-java/issues</url></reference><reference type="vcs"><url>https://github.com/bcgit/bc-java</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.2?type=jar">
      <group>com.fasterxml.jackson.core</group>
      <name>jackson-core</name>
      <version>2.14.2</version>
      <description>Core Jackson processing abstractions (aka Streaming API), implementation for JSON</description>
      <hashes>
        <hash alg="MD5">6ee422ee4c481b2d5aacb2b5e36a7dc0</hash>
        <hash alg="SHA-1">f804090e6399ce0cf78242db086017512dd71fcc</hash>
        <hash alg="SHA-256">b5d37a77c88277b97e3593c8740925216c06df8e4172bbde058528df04ad3e7a</hash>
        <hash alg="SHA-512">208953cf72691b3bab1ca2f9a045cccd3d75c46c90099ba884fbf16bc3e45045e5cd014d2c68c96e8a8826f87a5f0e18cb34b35e7ef03348953869c21e197367</hash>
        <hash alg="SHA-384">e806595862c5fcdae801d9845befc1d12c97e6036ee839d34590dbd785a422d5832cf4fc5c7ee6e1a5ee7a59f37740f0</hash>
        <hash alg="SHA3-384">4fa59f572f2e100e2eba6fc664a3b9f804fabd911a552cb40805f39e624a9c04246b679cf4b017bb782c8272877f49d2</hash>
        <hash alg="SHA3-256">cef17d3a539cbf798cfb0bfa9faffa2b7baff3670b50743e91ee58b4c60b59f1</hash>
        <hash alg="SHA3-512">fceeed5cb8fe4335d88282d15657762a4728483275a7ff45f50b9fe6a999757ccb37c415d001eb6250226f98f5c576b1b36a83e601fb393cfd34a811c2df5d00</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.2?type=jar</purl>
      <modified>false</modified>
      <externalReferences><reference type="vcs"><url>https://github.com/FasterXML/jackson-core</url></reference></externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/org.jreleaser/jreleaser-utils@1.6.0?type=jar">
      <dependency ref="pkg:maven/org.bouncycastle/bcpg-jdk15on@1.70?type=jar"/>
      <dependency ref="pkg:maven/org.jreleaser/jreleaser-logger-api@1.6.0?type=jar"/>
      <dependency ref="pkg:maven/org.jreleaser/jreleaser-resource-bundle@1.6.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/jcl-over-slf4j@2.0.7?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.2?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.2?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.15?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-compress@1.22?type=jar"/>
      <dependency ref="pkg:maven/org.tukaani/xz@1.9?type=jar"/>
      <dependency ref="pkg:maven/com.github.luben/zstd-jni@1.5.4-1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.2?type=jar"/>
    <dependency ref="pkg:maven/org.tukaani/xz@1.9?type=jar"/>
    <dependency ref="pkg:maven/com.github.luben/zstd-jni@1.5.4-1?type=jar"/>
    <dependency ref="pkg:maven/org.jreleaser/jreleaser-signing-java-sdk@1.6.0?type=jar">
      <dependency ref="pkg:maven/org.jreleaser/jreleaser-command-java-sdk@1.6.0?type=jar"/>
      <dependency ref="pkg:maven/org.jreleaser/jreleaser-tool-java-sdk@1.6.0?type=jar"/>
      <dependency ref="pkg:maven/org.bouncycastle/bcpg-jdk15on@1.70?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.jreleaser/jreleaser-model-api@1.6.0?type=jar">
      <dependency ref="pkg:maven/org.jreleaser/jreleaser-utils@1.6.0?type=jar"/>
      <dependency ref="pkg:maven/org.jreleaser/jreleaser-logger-api@1.6.0?type=jar"/>
      <dependency ref="pkg:maven/org.jreleaser/jreleaser-resource-bundle@1.6.0?type=jar"/>
      <dependency ref="pkg:maven/com.github.spullara.mustache.java/compiler@0.9.10?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar"/>
    <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.2?type=jar">
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.2?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.jreleaser/jreleaser-logger-api@1.6.0?type=jar">
      <dependency ref="pkg:maven/org.slf4j/jcl-over-slf4j@2.0.7?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/commons-codec/commons-codec@1.15?type=jar"/>
    <dependency ref="pkg:maven/org.jreleaser/jreleaser-resource-bundle@1.6.0?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.commons/commons-compress@1.22?type=jar"/>
    <dependency ref="pkg:maven/org.slf4j/jcl-over-slf4j@2.0.7?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.bouncycastle/bcprov-jdk15on@1.70?type=jar"/>
    <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.2?type=jar"/>
    <dependency ref="pkg:maven/org.bouncycastle/bcpg-jdk15on@1.70?type=jar">
      <dependency ref="pkg:maven/org.bouncycastle/bcprov-jdk15on@1.70?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.jreleaser/jreleaser-tool-java-sdk@1.6.0?type=jar">
      <dependency ref="pkg:maven/org.jreleaser/jreleaser-command-java-sdk@1.6.0?type=jar"/>
      <dependency ref="pkg:maven/org.jreleaser/jreleaser-model-api@1.6.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.jreleaser/jreleaser-command-java-sdk@1.6.0?type=jar">
      <dependency ref="pkg:maven/org.jreleaser/jreleaser-model-api@1.6.0?type=jar"/>
      <dependency ref="pkg:maven/org.jreleaser/jreleaser-utils@1.6.0?type=jar"/>
      <dependency ref="pkg:maven/org.jreleaser/jreleaser-logger-api@1.6.0?type=jar"/>
      <dependency ref="pkg:maven/org.jreleaser/jreleaser-resource-bundle@1.6.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.github.spullara.mustache.java/compiler@0.9.10?type=jar"/>
  </dependencies>
</bom>
