<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:0ed9b8b6-912e-356f-aeaf-b487e45f6ff5" version="1" xmlns="http://cyclonedx.org/schema/bom/1.6">
  <metadata>
    <timestamp>2025-08-15T10:09:47Z</timestamp>
    <lifecycles>
      <lifecycle>
        <phase>build</phase>
      </lifecycle>
    </lifecycles>
    <tools>
      <components>
        <component type="library">
          <author>OWASP Foundation</author>
          <group>org.cyclonedx</group>
          <name>cyclonedx-maven-plugin</name>
          <version>2.9.1</version>
          <description>CycloneDX Maven plugin</description>
          <hashes>
            <hash alg="MD5">9c7a565cf28cce58557d0c621c5ea4b1</hash>
            <hash alg="SHA-1">be882d5a22050bfa9d19090b1420c188617d0e1c</hash>
            <hash alg="SHA-256">698e0f37184a5b28c245c4065fd036dfce253b52f82fbb7113d81d36326cc249</hash>
            <hash alg="SHA-512">c0f0b11026858166f872a2eb54719492e5cecaa0bc9cd6b30b3ecb4a174eed220f4a1b5829d18d6734128e778d3cb3db7ffed177c92866133129cb29081814a0</hash>
            <hash alg="SHA-384">d80964707dfe5caca8c70521d5066f57589304c0a657e6fbc7c0614ea0fc7b3b3dbe7778361eee0f54ba111e9cb0ffcb</hash>
            <hash alg="SHA3-384">80bc3a275d9514bc457461ff52a72add8c7ecbbc01d8912efce57139016c544ee776981851be0a58fa977ab4221f703f</hash>
            <hash alg="SHA3-256">142317d6f245390f4fd2d0c100b16281b8dfc5c0c2cff86943bdcc97039cb699</hash>
            <hash alg="SHA3-512">af0fb9137c90b65d1a07f72e4d51ae509956cdb8800f35c961b037cdda1fe4a14ce3b496cef71ba85f1621affcfe29cd42704ae4191ff0b090a9602087c8997b</hash>
          </hashes>
        </component>
      </components>
    </tools>
    <component type="library" bom-ref="pkg:maven/com.evolveum.icf/dummy-resource@4.9.4?type=jar">
      <publisher>evolveum</publisher>
      <group>com.evolveum.icf</group>
      <name>dummy-resource</name>
      <version>4.9.4</version>
      <description>Main parent Maven module for all midPoint sub-modules.</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
        <license>
          <name>European Union Public License</name>
          <url>https://joinup.ec.europa.eu/collection/eupl/eupl-text-11-12</url>
        </license>
      </licenses>
      <purl>pkg:maven/com.evolveum.icf/dummy-resource@4.9.4?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://spring.io/projects/spring-boot/midpoint/icf-connectors/dummy-resource</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://nexus.evolveum.com/nexus/repository/releases/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://support.evolveum.com/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/Evolveum/midpoint.git/icf-connectors/dummy-resource</url>
        </reference>
      </externalReferences>
    </component>
    <properties>
      <property name="maven.goal">makeBom</property>
      <property name="maven.scopes">compile,provided,runtime,system</property>
    </properties>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/com.evolveum.commons/util@4.9.4?type=jar">
      <publisher>evolveum</publisher>
      <group>com.evolveum.commons</group>
      <name>util</name>
      <version>4.9.4</version>
      <description>Parent Maven project for all Prism Maven sub-projects (sub-modules).</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">4ab46a648a9163f6906863d370f66e98</hash>
        <hash alg="SHA-1">d95017c88ff4e2fd61514968a834badb9a986859</hash>
        <hash alg="SHA-256">8ee58f43851730106b30bc9694eec08c9694692360a41b06e6d830c0d1ab89ab</hash>
        <hash alg="SHA-512">dee9df164b87c07e63ffd6a158df5ad38099ea291a27330331fc418347ae3df1c20eff52edb338caf755949ac12cc8f09cdc1d8b034af15af9df2ee138464e4e</hash>
        <hash alg="SHA-384">8cc6ddf04d215b3e82f2a671ca0266c5052293ce4dd6b96b64063ec6bce5ac11b1eb8ddf885636095304fd355b2148f7</hash>
        <hash alg="SHA3-384">c76c9b6c5806eb184d49e075f6a2521d1d03f1f0f0773b01d28b5ebd210d5ef7948f6732e5dcc863e0c756fea02324c1</hash>
        <hash alg="SHA3-256">cf55df85f96e1afe7e207826427bf30fbb27c8ec3dbe1205f6eb47c3cf55778f</hash>
        <hash alg="SHA3-512">ffac51ff4c6cac70262115035b49e4e129fbf077b6021cd5442a87759b7a024f45c42c7a21466e2535440996ee48ea165ecf464f95d4c9eba7615a1156c327fc</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.evolveum.commons/util@4.9.4?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://spring.io/projects/spring-boot/prism-parent/util</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://nexus.evolveum.com/nexus/repository/releases/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://support.evolveum.com/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/Evolveum/prism.git/util</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/xerces/xercesImpl@2.12.2?type=jar">
      <group>xerces</group>
      <name>xercesImpl</name>
      <version>2.12.2</version>
      <description>Xerces2 provides high performance, fully compliant XML parsers in the Apache Xerces family. This new version of Xerces continues to build upon the Xerces Native Interface (XNI), a complete framework for building parser components and configurations that is extremely modular and easy to program.

      The Apache Xerces2 parser is the reference implementation of XNI but other parser components, configurations, and parsers can be written using the Xerces Native Interface. For complete design and implementation documents, refer to the XNI Manual.

      Xerces2 provides fully conforming XML Schema 1.0 and 1.1 processors. An experimental implementation of the "XML Schema Definition Language (XSD): Component Designators (SCD) Candidate Recommendation (January 2010)" is also provided for evaluation. For more information, refer to the XML Schema page.

      Xerces2 also provides a complete implementation of the Document Object Model Level 3 Core and Load/Save W3C Recommendations and provides a complete implementation of the XML Inclusions (XInclude) W3C Recommendation. It also provides support for OASIS XML Catalogs v1.1.

      Xerces2 is able to parse documents written according to the XML 1.1 Recommendation, except that it does not yet provide an option to enable normalization checking as described in section 2.13 of this specification. It also handles namespaces according to the XML Namespaces 1.1 Recommendation, and will correctly serialize XML 1.1 documents if the DOM level 3 load/save APIs are in use.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">40e4f2d5aacfbf51a9a1572d77a0e5e9</hash>
        <hash alg="SHA-1">f051f988aa2c9b4d25d05f95742ab0cc3ed789e2</hash>
        <hash alg="SHA-256">6fc991829af1708d15aea50c66f0beadcd2cfeb6968e0b2f55c1b0909883fe16</hash>
        <hash alg="SHA-512">bfd21f2350bf0bb546a68d3303f28c6a15cee1e630138c169344c3f65fe39a15e61c6ff4e5239f38f2f1f9e488eff4d5565a4a0774263064ab6a30aa9fcaaed3</hash>
        <hash alg="SHA-384">0a35ae0744f05973997b0710cc8d1d774867bc1c1b63ef5bf5f554d1b4c4ab42033f7819430e05ac623e7c8630aa7c52</hash>
        <hash alg="SHA3-384">b016ed02d907b21c90b4a2560aa4c778e8aad1b5ecb0ba62777f668166c6e7b8a0c0deef7d1e63b7a9b1092c64c8a4a6</hash>
        <hash alg="SHA3-256">875856aafff433840ee9933c01018cd18c0a13b46bd4472853698ef1dff83168</hash>
        <hash alg="SHA3-512">1587332fb01515a72b7856b1f566070dcd26fef33c5070039c28684215466a9b9d3a4625cf7181443e3c3a67a313a938cf0775f39b96daf43f5edd4772143c23</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/xerces/xercesImpl@2.12.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://xerces.apache.org/xerces2-j/</url>
        </reference>
        <reference type="vcs">
          <url>https://svn.apache.org/repos/asf/xerces/java/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.github.classgraph/classgraph@4.8.162?type=jar">
      <group>io.github.classgraph</group>
      <name>classgraph</name>
      <version>4.8.162</version>
      <description>The uber-fast, ultra-lightweight classpath and module scanner for JVM languages.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">3ded56585fa8cb2900b1abc98386553f</hash>
        <hash alg="SHA-1">85bc1625bc8aac51ad32971ebb26a3e35cb97356</hash>
        <hash alg="SHA-256">ea30b2d5e29e89d52706bcecf7a6ae3b44682d4a1566a5f22b9453f9be2a970c</hash>
        <hash alg="SHA-512">a117092f4ab77ef89b3b83a45b9e33c0360cb18098df17da77e5d765a6b5cea1fae6190399217236c0d970f2b3603bc8f408c2471cf8854de1282dba7525c335</hash>
        <hash alg="SHA-384">2e7c901ee92224d5229213d1301b25fa8e3998dd53b709a848b53d74dbde5bfc6eb0b0d76e692046652f4f6376f5ff81</hash>
        <hash alg="SHA3-384">66a3e28f6098449cf4bebc02e90d8c392dbf84f0efa27766ab4ddb684e2b5592b87cab87cefc390b4716b948c7875c02</hash>
        <hash alg="SHA3-256">a5d97a1dd197a393c56641984d385265dd517e9014434e5d32d1f40cda684f90</hash>
        <hash alg="SHA3-512">0c1328544e1778aba3724768052b20af1bba39cedd17d0324a58778987dbc0c766fe1ac7c59d11331dbe07951f478edb5a40e68c77f8a64654d4b9bb4456c75b</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.github.classgraph/classgraph@4.8.162?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/classgraph/classgraph</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/classgraph/classgraph/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/classgraph/classgraph</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.guava/guava@32.1.2-jre?type=jar">
      <group>com.google.guava</group>
      <name>guava</name>
      <version>32.1.2-jre</version>
      <description>Guava is a suite of core and expanded libraries that include
    utility classes, Google's collections, I/O classes, and
    much more.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">5fe031b3b35ed56182478811a931d617</hash>
        <hash alg="SHA-1">5e64ec7e056456bef3a4bc4c6fdaef71e8ab6318</hash>
        <hash alg="SHA-256">bc65dea7cfd9e4dacf8419d8af0e741655857d27885bb35d943d7187fc3a8fce</hash>
        <hash alg="SHA-512">d683751034688863dc82315a75620abbeeca525cc592d5227b136c29902a0d035f306c6bfaf87d00d95bd1bd967953b00a932286ce09cfba1a0fb35efd852cd4</hash>
        <hash alg="SHA-384">cdf41f5f70c467f1f0d8ec42d43eebd8e9da7e5fc60bd24d17db852ce0669a7316abb0a217f19c5cca41b20ade17a1f0</hash>
        <hash alg="SHA3-384">2084f7a28971f428e1b07a659d9a2cc221654b0e31d457c1219b5526e102124207ab4b2d163d4d5ec731551da396003b</hash>
        <hash alg="SHA3-256">0ccf9f22abd1ae422fd040e387adb12c31e4dd749c3e40181077e6fb9acdb51b</hash>
        <hash alg="SHA3-512">e354820ed3f5da18411e6f4ba69294b2d171b2debbd51053e617178fa7a7cb64b3a6978c841a3060fd77474cf99e6aa2451aea39a5755cfe1f7eaef0d20d0e63</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.guava/guava@32.1.2-jre?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/google/guava</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/google/guava/actions</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/google/guava/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/google/guava/guava</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar">
      <group>com.google.guava</group>
      <name>failureaccess</name>
      <version>1.0.1</version>
      <description>Contains
    com.google.common.util.concurrent.internal.InternalFutureFailureAccess and
    InternalFutures. Most users will never need to use this artifact. Its
    classes is conceptually a part of Guava, but they're in this separate
    artifact so that Android libraries can use them without pulling in all of
    Guava (just as they can use ListenableFuture by depending on the
    listenablefuture artifact).</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">091883993ef5bfa91da01dcc8fc52236</hash>
        <hash alg="SHA-1">1dcf1de382a0bf95a3d8b0849546c88bac1292c9</hash>
        <hash alg="SHA-256">a171ee4c734dd2da837e4b16be9df4661afab72a41adaf31eb84dfdaf936ca26</hash>
        <hash alg="SHA-512">f8d59b808d6ba617252305b66d5590937da9b2b843d492d06b8d0b1b1f397e39f360d5817707797b979a5bf20bf21987b35333e7a15c44ed7401fea2d2119cae</hash>
        <hash alg="SHA-384">67659dbd9647ec303d7f15128dc9dba19b98fd8d74758ee3b602451e32c855e236ccaafe08edf4bbfa245f981268440f</hash>
        <hash alg="SHA3-384">1460875f0331c5fa3791772a6a322a7db180261bc2adacf7271df1fbf3b088a587a755a604c039982cb593c5cfc1f101</hash>
        <hash alg="SHA3-256">ea86406e75fcd93eafe3cde1b3135ba485f1bb9b75fed98894a0bf1f0aee04f0</hash>
        <hash alg="SHA3-512">52ac0f487ab5dd27c9f2e54fd1d84c7a620cae9d49be4072aa2b11501787bf4391ddaa13d02eccdf19e8eea46aecbea5f6064b26777c1b836108a280652e04ac</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/google/guava/failureaccess</url>
        </reference>
        <reference type="build-system">
          <url>https://travis-ci.org/google/guava</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/google/guava/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/google/guava/failureaccess</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar">
      <group>com.google.guava</group>
      <name>listenablefuture</name>
      <version>9999.0-empty-to-avoid-conflict-with-guava</version>
      <description>An empty artifact that Guava depends on to signal that it is providing
    ListenableFuture -- but is also available in a second "version" that
    contains com.google.common.util.concurrent.ListenableFuture class, without
    any other Guava classes. The idea is:

    - If users want only ListenableFuture, they depend on listenablefuture-1.0.

    - If users want all of Guava, they depend on guava, which, as of Guava
    27.0, depends on
    listenablefuture-9999.0-empty-to-avoid-conflict-with-guava. The 9999.0-...
    version number is enough for some build systems (notably, Gradle) to select
    that empty artifact over the "real" listenablefuture-1.0 -- avoiding a
    conflict with the copy of ListenableFuture in guava itself. If users are
    using an older version of Guava or a build system other than Gradle, they
    may see class conflicts. If so, they can solve them by manually excluding
    the listenablefuture artifact or manually forcing their build systems to
    use 9999.0-....</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d094c22570d65e132c19cea5d352e381</hash>
        <hash alg="SHA-1">b421526c5f297295adef1c886e5246c39d4ac629</hash>
        <hash alg="SHA-256">b372a037d4230aa57fbeffdef30fd6123f9c0c2db85d0aced00c91b974f33f99</hash>
        <hash alg="SHA-512">c5987a979174cbacae2e78b319f080420cc71bcdbcf7893745731eeb93c23ed13bff8d4599441f373f3a246023d33df03e882de3015ee932a74a774afdd0782f</hash>
        <hash alg="SHA-384">caff9b74079f95832ca7f6029346b34b606051cc8c5a4389fac263511d277ada0c55f28b0d43011055b268c6eb7184d5</hash>
        <hash alg="SHA3-384">e939f08df0545847ea0d3e4b04a114b08499ad069ba8ec9461d1779f87a56e0c37273630a0f4c14e78c348d3ac7eb97f</hash>
        <hash alg="SHA3-256">1f0a8b1177773b3a8ace839df5eed63cbf56b24a38714898a6e4ed065c42559f</hash>
        <hash alg="SHA3-512">6b495ecc2a18b17365cb08d124a0da47f04bcdde81927b5245edf3edd8e498c3c3fb92ce6a4127f660bac851bb1d3e4510e5c20d03be47ce99dc296d360db285</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/google/guava/listenablefuture</url>
        </reference>
        <reference type="build-system">
          <url>https://travis-ci.org/google/guava</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/google/guava/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/google/guava/listenablefuture</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.checkerframework/checker-qual@3.19.0?type=jar">
      <group>org.checkerframework</group>
      <name>checker-qual</name>
      <version>3.19.0</version>
      <description>checker-qual contains annotations (type qualifiers) that a programmer
writes to specify Java code for type-checking by the Checker Framework.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">a70912824bb142a53d6cb50a349dab1a</hash>
        <hash alg="SHA-1">838b42bb6f7f73315167b359d24649845cef1c48</hash>
        <hash alg="SHA-256">a827c49183f3a632277d27a0a4673686cb341507447b9d570261094bd748aa68</hash>
        <hash alg="SHA-512">2406c3188c5d7eed0530adddd6c8782686ecae665e27e8cd5cb84c8da88532eedad4d93fadafdf98fc37ba6f5114669ee458e62682a1eab7c2c8570f41fdcc12</hash>
        <hash alg="SHA-384">6384bcf40badedc35e9e52f4c4263bf439dd0e45c5a8db73b72999b18a6e58519d05a5cb1ed25feb2c58ce14198035bd</hash>
        <hash alg="SHA3-384">3f0b4f70fbd015ed00e4f67ed89feb4ca31f885e86885a13a6a46e121fd221a9cb47309a6128c4c97fad1730c007bc43</hash>
        <hash alg="SHA3-256">fc0f6dd9f4239303a221e24e86b5e5a03a4e0f919bd07ae7e226a67482cc9fd1</hash>
        <hash alg="SHA3-512">0af9efff31a4b9ea2bcbdefe906ff54fc35db5e733bc6ec26501d900869fb3626497bad1cf6f8f566198a7cceb64e86302f2016a63e8e7657c3ec4700e27d184</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.checkerframework/checker-qual@3.19.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://checkerframework.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/typetools/checker-framework.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.10.0?type=jar">
      <publisher>Google LLC</publisher>
      <group>com.google.errorprone</group>
      <name>error_prone_annotations</name>
      <version>2.10.0</version>
      <description>Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">df93bd9f00b1d2b1e2ca6317fd8f6df3</hash>
        <hash alg="SHA-1">9bc20b94d3ac42489cf6ce1e42509c86f6f861a1</hash>
        <hash alg="SHA-256">a249d4d25dfb86d41e6c82fc335df580189f0c9feeabdc53233fc1e5060724a1</hash>
        <hash alg="SHA-512">f44c30261f01e42658a253e8311852a49c29b42547c381c3c4a73f7a124be0ed173d832712c00be6de3a82a58fd9ab5503dec2cba7d30333ddc685c8a331ad31</hash>
        <hash alg="SHA-384">255f696508f6aa95d99a171cce3ab1b9a3273cb08900d382d211a8eb206e7bbebaf2cc11b34bf7282959cbd4b746a458</hash>
        <hash alg="SHA3-384">a88e397ce7b44b25f586f6b92506bd5e9c3d0b049db6ca1ffa1e71bd119ab3b63a8a3554213ea27e791bdeb1987f22f5</hash>
        <hash alg="SHA3-256">9c8976a37bced6c4a66f9ff2b75b6d048305c5d8b9c62dab2f69f28b1a6ec207</hash>
        <hash alg="SHA3-512">e7bc77149ec70e8622572790b0df4266d3dff12561a7d39ad02a7ab1ee2612b44e9902395b4a7cfded6730352f4b9e63c635743857d225480c687c9eeba32354</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.errorprone/error_prone_annotations@2.10.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://errorprone.info/error_prone_annotations</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/google/error-prone/error_prone_annotations</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar">
      <group>com.google.j2objc</group>
      <name>j2objc-annotations</name>
      <version>2.8</version>
      <description>A set of annotations that provide additional information to the J2ObjC
    translator to modify the result of translation.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c50af69b704dc91050efb98e0dff66d1</hash>
        <hash alg="SHA-1">c85270e307e7b822f1086b93689124b89768e273</hash>
        <hash alg="SHA-256">f02a95fa1a5e95edb3ed859fd0fb7df709d121a35290eff8b74dce2ab7f4d6ed</hash>
        <hash alg="SHA-512">f8263868a792b41707c9e7fe6fa5650a14cd93fbeafad20efe3772a3058fc933eb59782ec59e6eb9b9c569aa96da80134ae9fdf7547b69c44a97087efddceeff</hash>
        <hash alg="SHA-384">e6087ec31fec8289158496ad2ed6ce8472d5d513808a312e0782cedac3b86c37a62a63c0b5ea3839491d109fe9e148a1</hash>
        <hash alg="SHA3-384">10add34bfeb8612283eef89ac96747a3c9b755acd80ad526e1addaeb7efd6323c52b9bfa1a3d34adb40e1ccb963ee65d</hash>
        <hash alg="SHA3-256">b3336f8abd6b1f73b9f06d306974557000a000073bfbae6b54fda26d17dbb072</hash>
        <hash alg="SHA3-512">d376c184a6df071c4e93b913d175b5c2e63deac37105dc20342c19bdda62e4e9598ca1e8bfb4f4fd5cdee6dd5ac3b8af49e2c5193e324d59a59ce1f7adeab627</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/google/j2objc/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>http://svn.sonatype.org/spice/trunk/oss/oss-parent-9/j2objc-annotations</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-codec/commons-codec@1.15?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-codec</group>
      <name>commons-codec</name>
      <version>1.15</version>
      <description>The Apache Commons Codec package contains simple encoder and decoders for
     various formats such as Base64 and Hexadecimal.  In addition to these
     widely used encoders and decoders, the codec package also maintains a
     collection of phonetic encoding utilities.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">303baf002ce6d382198090aedd9d79a2</hash>
        <hash alg="SHA-1">49d94806b6e3dc933dacbd8acb0fdbab8ebd1e5d</hash>
        <hash alg="SHA-256">b3e9f6d63a790109bf0d056611fbed1cf69055826defeb9894a71369d246ed63</hash>
        <hash alg="SHA-512">da30a716770795fce390e4dd340a8b728f220c6572383ffef55bd5839655d5611fcc06128b2144f6cdcb36f53072a12ec80b04afee787665e7ad0b6e888a6787</hash>
        <hash alg="SHA-384">05d0506283716472175d44c2a4766523397bf8a007c18848f9c9a61718cc8aa437f9cb4b91771037ab29a960860b62a0</hash>
        <hash alg="SHA3-384">12fad4ef78274b06f97b1243cea6f970088abde082d2de9377d915a34b44f7d7d67807c03e59c849b69f1544e2a9a1be</hash>
        <hash alg="SHA3-256">87be248f33f241121f54aad61a9a460a79eabefbf1b5b0dd22aeb95b581f727e</hash>
        <hash alg="SHA3-512">8c992c9c569ebaa0bf956a4c5b34fbf5e1ed1c212c2dd896fa216183ee0bcd341e96698af4b9cec7e8880762faa081a3d3a27f51349aa457cb8e373e4f57c788</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-codec/commons-codec@1.15?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://commons.apache.org/proper/commons-codec/</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CODEC</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/commons-codec</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-io/commons-io@2.18.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-io</group>
      <name>commons-io</name>
      <version>2.18.0</version>
      <description>The Apache Commons IO library contains utility classes, stream implementations, file filters,
file comparators, endian transformation classes, and much more.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">8cce74ccf461cd6502ae04c908eca917</hash>
        <hash alg="SHA-1">44084ef756763795b31c578403dd028ff4a22950</hash>
        <hash alg="SHA-256">f3ca0f8d63c40e23a56d54101c60d5edee136b42d84bfb85bc7963093109cf8b</hash>
        <hash alg="SHA-512">786778529435d8a14ab6ce2176cdf2b9ee6585a71893b785f26257122166dcefc7c4af3f612eda3974b06c16d06fc357178bf28b9b74010e9bc04c33221adc2f</hash>
        <hash alg="SHA-384">4be7ad9b352412ddad3eb00f2e44f1236216d3e713546d34d71f3aa8e589b06636abf22dad0c28e11a0cd7b54ea0496a</hash>
        <hash alg="SHA3-384">d003d33c2cd37806d9d8f0576b65fd51fc1f02bfed7716279474556ef98abfaaddb5b5622762b64458bec6b57f77ceca</hash>
        <hash alg="SHA3-256">89019fd824ce65aa33554a848dce2ca47f09c3a261fd22c699342d99579e91d9</hash>
        <hash alg="SHA3-512">6edaba8f76bd3e96421ae3611fb32414b064c5ef2fdefd7402f3052c5849e06aa6dfdd218a6df97b25cdd7997df0c9d643af960c4294f2e89dffb052b4b9d8cd</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/commons-io/commons-io@2.18.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://commons.apache.org/proper/commons-io/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/commons-parent/actions</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/IO</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=commons-io.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-text</name>
      <version>1.10.0</version>
      <description>Apache Commons Text is a library focused on algorithms working on strings.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">4afc9bfa2d31dbf7330c98fcc954b892</hash>
        <hash alg="SHA-1">3363381aef8cef2dbc1023b3e3a9433b08b64e01</hash>
        <hash alg="SHA-256">770cd903fa7b604d1f7ef7ba17f84108667294b2b478be8ed1af3bffb4ae0018</hash>
        <hash alg="SHA-512">afd836a1094449e0a791fee67363666c47b6d24acff353a5089b837b332c0f4af89565c354682521e37062d20e6b52d70c77bb4f24cca9b9532c274fc708a831</hash>
        <hash alg="SHA-384">06c56e6e513dd77cf10d0da46cdea08c34e220e81fa024735b668c6650df4234e564fe865ff5cafea963f56b1e8ffd4a</hash>
        <hash alg="SHA3-384">f09065ed066c25debf8c78cbb0bcc738e1ea283302ec992dcfb649acb90091cff879465c65a162e94534d454e3b4e9bb</hash>
        <hash alg="SHA3-256">0b59c567164bb755f2353b78ba66744000a8c4b35e1df05255b080a21c3a3dd5</hash>
        <hash alg="SHA3-512">f0fbce02a862b70f472a27d0722c54ac111ca2eb94584b8b0b73d1926aec26047cd92542ad0b3cf980a6825077587f41b194aa93d6f6350d1b87e59e8df1be7c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://commons.apache.org/proper/commons-text</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/commons-parent/actions</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/TEXT</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=commons-text.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>slf4j-api</name>
      <version>2.0.17</version>
      <description>The slf4j API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b6480d114a23683498ac3f746f959d2f</hash>
        <hash alg="SHA-1">d9e58ac9c7779ba3bf8142aff6c830617a7fe60f</hash>
        <hash alg="SHA-256">7b751d952061954d5abfed7181c1f645d336091b679891591d63329c622eb832</hash>
        <hash alg="SHA-512">9a3e79db6666a6096a3021bb2e1d918f30f589d8de51d6b600f8ebd92515a510ae2d8f87919cc2dfa8365d64f10194cac8dfa0fb950160eef0e9da06f6caaeb9</hash>
        <hash alg="SHA-384">6ea24f814a9b6ece428cfd0535e2f3b8927005745ef61006b50fdb5a90126ee5ea05650155382b3b755c5bce38ef3944</hash>
        <hash alg="SHA3-384">9b1015052f0ec43f9be09764e131834157599611cb52f6fe591c4ac6a8ab4817518f2a4b8871e5e738c8678e93af5557</hash>
        <hash alg="SHA3-256">00559b4f4066b4917ba4fe2a6f23111eaeada321112d030910d218ced9084b5e</hash>
        <hash alg="SHA3-512">9579c2f7e7516e177c2d493ccc9eb8150978cf19f6f09b28d116f6935239fd56dc6af2b62b3336f79b0b462445550cd1fb5377a07001a6f44aaab6a32fa2fa47</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/license/mit/</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://www.slf4j.org</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/qos-ch/slf4j/slf4j-parent/slf4j-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/ch.qos.logback/logback-classic@1.5.18?type=jar">
      <publisher>QOS.ch</publisher>
      <group>ch.qos.logback</group>
      <name>logback-classic</name>
      <version>1.5.18</version>
      <description>logback-classic module</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">05bd5f5d61a7efe5d5ae362df43377b5</hash>
        <hash alg="SHA-1">fc371f3fc97a639de2d67947cffb7518ec5e3d40</hash>
        <hash alg="SHA-256">3e1533d0321f8815eef46750aee0111b41554f9a4644c3c4d2d404744b09f60f</hash>
        <hash alg="SHA-512">48edf62d089a13dc3a572aedebf9f881d61690983f03831838c79caecb13cf749786ea215156d9bf39c1b936fcc32ba37dd265f7d191708c5e24ba3ba654ee50</hash>
        <hash alg="SHA-384">840863faef2c85de6b54250d9506df083dac8da479480ec8b069e19e68196b469d7e57da3f437f3d984fec61a2e37071</hash>
        <hash alg="SHA3-384">91c81faf4b98cd2a3a309dc60cd426b821f23a67ab48405168013a2dc4c53ebfb8826c690bf7dedf15d753f5342205d2</hash>
        <hash alg="SHA3-256">3efea23a6f915d59a448fb1b17bb4d0d1505b48131ffc7a092ea0210553b98ad</hash>
        <hash alg="SHA3-512">c1f29a1dd22c4de89cd62b929fa8ec75c9b9fc01d293eb0c9a9a55476c9e079a240ca83ef73d732ee79555bc36a6674f2c2ffafd67519cedd82c46b7a666e3d3</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-1.0</id>
        </license>
        <license>
          <name>GNU Lesser General Public License</name>
          <url>http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html</url>
        </license>
      </licenses>
      <purl>pkg:maven/ch.qos.logback/logback-classic@1.5.18?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://logback.qos.ch/logback-classic</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/qos-ch/logback/logback-classic</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/ch.qos.logback/logback-core@1.5.18?type=jar">
      <publisher>QOS.ch</publisher>
      <group>ch.qos.logback</group>
      <name>logback-core</name>
      <version>1.5.18</version>
      <description>logback-core module</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">10bcea83842beead15f072799b9c923d</hash>
        <hash alg="SHA-1">6c0375624f6f36b4e089e2488ba21334a11ef13f</hash>
        <hash alg="SHA-256">85139e7b57b464f8e5e36326dd81317648bed199ccc4f98cd42585f8d7571027</hash>
        <hash alg="SHA-512">fe6e259238f349839b6a30e71e533b5f2fa0a33a462efe9d09152518d3ad7759ce036f7c66744f1edf95eec4f7c2b7261de616aded28def93de85b8c7ab77d8f</hash>
        <hash alg="SHA-384">36a6553051967acc565898a7b7678a44d4568bfb81b7238bc12bd13d9c436799a98a49b49d8a34cd9a872a6db206463a</hash>
        <hash alg="SHA3-384">6f71dd40416fc84baaba562db7ad10f2c29a516b1b3573b3f4b7301815038679791ec30fb7ec1f3b71dfb880123ce536</hash>
        <hash alg="SHA3-256">8809ebf823a7d2b5f525c43717e4075b328edaed164ae497e2f00deb0304f7e5</hash>
        <hash alg="SHA3-512">34936208bf9fb09a7bdf4726f3c2c831f1801ea3b2288123f114c945c221d7d01aaadeb545a2f234679facb930ec3d889aa062fd38bc61747c3119a3afa4e66b</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-1.0</id>
        </license>
        <license>
          <name>GNU Lesser General Public License</name>
          <url>http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html</url>
        </license>
      </licenses>
      <purl>pkg:maven/ch.qos.logback/logback-core@1.5.18?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://logback.qos.ch/logback-core</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/qos-ch/logback/logback-core</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework/spring-core@6.2.8?type=jar">
      <publisher>Spring IO</publisher>
      <group>org.springframework</group>
      <name>spring-core</name>
      <version>6.2.8</version>
      <description>Spring Core</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">4db163bd5ffe489aaf0d3c44f47d66e5</hash>
        <hash alg="SHA-1">2caf1cef93252f5ef2b7f334b8b4d61f3aecad15</hash>
        <hash alg="SHA-256">27f640340164d74a0e90ee176b75d5a18a93f82fa96f444a757acf0bf3ae7257</hash>
        <hash alg="SHA-512">254bfc4b7677712e9ee04138d982bfb53825c886021ec7694004975f4025231d33365bae907bda2883b1b464e27a5536212bcbb0cd4273778892a731bbcb7076</hash>
        <hash alg="SHA-384">bc34f8bd148d07c7075017fb1135d44f2db433b1f049c8f288285418429fe15d787fd08c42dcd0a7b55a12c28393ef87</hash>
        <hash alg="SHA3-384">0ea1fa05ed9becd7a52fd4d77e7ff5b3ffc3c312fabffd0e43c6f22cf4081ef233540ad1be58c00ed7abdd4ab482725e</hash>
        <hash alg="SHA3-256">74df7a25591db3b3603de64a15bd4379b7c648b02d8807048b7a03c9eedfc6ca</hash>
        <hash alg="SHA3-512">41556b6e4b52b2cfa7dece3b521fe830feddeadf6b45cea718182f5830f81443874a1e1caec61b4238034cf0728dcf75693903d2332f126474f6fb7a85fa42aa</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework/spring-core@6.2.8?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/spring-projects/spring-framework</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/spring-projects/spring-framework/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/spring-projects/spring-framework</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework/spring-aop@6.2.8?type=jar">
      <publisher>Spring IO</publisher>
      <group>org.springframework</group>
      <name>spring-aop</name>
      <version>6.2.8</version>
      <description>Spring AOP</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">6f5fa857e65c21c36049a9c6efd10e45</hash>
        <hash alg="SHA-1">435fb310d5f464050b91ac3cb1a7f217a471e62e</hash>
        <hash alg="SHA-256">e74bfc1e95b60c73785258559020929885424ede9667a5163a9651d51b894e38</hash>
        <hash alg="SHA-512">c39ef74be0428b1039b728e9b7098dbe5b3edc2818e97afc89ac677c8e8d80689790f4a91f3cdc0cbc3e7e28f7531ee80111a7bab4a4db3a962de743b11d4118</hash>
        <hash alg="SHA-384">3c46855d4f12be3885cbf528c21260dcbcfeffc0c3c04500b957f70c611b187fa2508150a38ee8b6f2f836b66a47c0a8</hash>
        <hash alg="SHA3-384">69d836dd30b6f0194c6effde4172abcf3f2d9249bee0837e181553e5d0298471c203b7eec29843266f1fe8bcd3477b74</hash>
        <hash alg="SHA3-256">92b54c16be6d1661a6fe1a6b684d7101b036c5e638cc9256daa517a69a998a17</hash>
        <hash alg="SHA3-512">f10179baa0630b52935178467973f178b1c9fb23814acb8993010a2956f5e9d0d1dccd9c53101f68126afede9a07dec2270baae0f7e1289cd530ba0dd4f115d9</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework/spring-aop@6.2.8?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/spring-projects/spring-framework</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/spring-projects/spring-framework/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/spring-projects/spring-framework</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework/spring-beans@6.2.8?type=jar">
      <publisher>Spring IO</publisher>
      <group>org.springframework</group>
      <name>spring-beans</name>
      <version>6.2.8</version>
      <description>Spring Beans</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b03da8cf450753ea9f4556d9169a90c0</hash>
        <hash alg="SHA-1">9da1e690f343c30b6ed6eabd5f60ecc5dd0b225a</hash>
        <hash alg="SHA-256">a6ae270c6eb06e9502aa7e47ee3fc66deb1853285b4a4e020f3d22767f2fabd3</hash>
        <hash alg="SHA-512">1f42028a02c94bda3a4008300daf07896c1478d05f951bc3a379c7e2e59595590ba84a556f83bda91d27671d00e6e40bcb92548d85052d14b60ad11e09062512</hash>
        <hash alg="SHA-384">02a106e6a922921021d99244632f832606a5631d4c2fdb4f6f25962c3b1233fffaf4455f868cb90f27c1ef60f90d0a04</hash>
        <hash alg="SHA3-384">45d374af78696a87fb3f95f7bd4080ea3dec9ad940b7637c8e4653300faff2250cebe53be76a7553fcea388379a893b3</hash>
        <hash alg="SHA3-256">53a38687d658b907b27e5e428bfe8771e8a561939edebcc908bcdacbf0d406ee</hash>
        <hash alg="SHA3-512">0f773274461f639365adfe6e22f8e6011ca2cfc26840431bd72cca9addf682ec969c6c10b3f198731a252c370e7adf648eb190606119ad29e453b158dd9ba9d6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework/spring-beans@6.2.8?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/spring-projects/spring-framework</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/spring-projects/spring-framework/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/spring-projects/spring-framework</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.2?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.xml.bind</group>
      <name>jakarta.xml.bind-api</name>
      <version>4.0.2</version>
      <description>Jakarta XML Binding API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0c8f9991081def819435c3ff36e4d93f</hash>
        <hash alg="SHA-1">6cd5a999b834b63238005b7144136379dc36cad2</hash>
        <hash alg="SHA-256">0d6bcfe47763e85047acf7c398336dc84ff85ebcad0a7cb6f3b9d3e981245406</hash>
        <hash alg="SHA-512">2e57ce867ae3592959243ab9d7d064b09d9587933c98f89f5d5eeb8fe70556a53fea6db91520a2e086555684e8917f4001741bd8ffb07d26c59fe95c13d71fa0</hash>
        <hash alg="SHA-384">7ac5da337fccfa426b48691febed0d874a8e9a6a230bb7a53169f902e5b499778106f7b710afbe133dbd7bfacca693a0</hash>
        <hash alg="SHA3-384">fc952425a51459a5d18dc7b6315625c55889e1b92e700450c84205506e5107ca4c7c8bc449190220bf471db3dcbf9c8a</hash>
        <hash alg="SHA3-256">a78dd7c5883b16cf899495930e653650005c71b4d9b509e56cac4665778d715e</hash>
        <hash alg="SHA3-512">bdf9db79b8ade9421c3f5fc497ebe13a552be5852d99cedfa38bb6c760c8bf190f88204ab6e02442db5fb24378afc6112297c5a582d4e721de71285405a6429d</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/jakartaee/jaxb-api/jakarta.xml.bind-api</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/jakartaee/jaxb-api/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/jaxb-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jakartaee/jaxb-api.git/jakarta.xml.bind-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.activation/jakarta.activation-api@2.1.3?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.activation</group>
      <name>jakarta.activation-api</name>
      <version>2.1.3</version>
      <description>Jakarta Activation API 2.1 Specification</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">76e7b680375ea9f40f3ddbd702efcd25</hash>
        <hash alg="SHA-1">fa165bd70cda600368eee31555222776a46b881f</hash>
        <hash alg="SHA-256">01b176d718a169263e78290691fc479977186bcc6b333487325084d6586f4627</hash>
        <hash alg="SHA-512">aaabd4d6085a07035eaaae7b5a81aef429fea76e7fe1c8d29971e6595f0adad6bcf1088cff8a1c8936d739b0e3fce4b845323032f046b7edab2eaebd0e10a2ad</hash>
        <hash alg="SHA-384">4c4e73f59bf09342ca7691fd4855b41d3466da80618a5b7df059a2d89cf6d9779a4af751a6c4a9c48e5025c3ff75f42e</hash>
        <hash alg="SHA3-384">20be816700c87778e9453d41b6d8cb9dc992a092a308a9b7f2dfbf72e2393940a7d666c46625f130a2b57bc414df85ca</hash>
        <hash alg="SHA3-256">8a574b0a249842ea1b397d4cdef9b6d00b34ce8a849ea34184cdf45ac5aafe67</hash>
        <hash alg="SHA3-512">69cfb7dddda70ac1fca272ace0a3d5551b85dd60a6dbaf987ee777fbf573b420d13f06b8990ae70e8fe063f92b78c8a447cf9309ba516a5e993ba2d49cca8d23</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.activation/jakarta.activation-api@2.1.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/jakartaee/jaf-api</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/jakartaee/jaf-api/issues/</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jakartaee/jaf-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar">
      <group>com.google.code.findbugs</group>
      <name>jsr305</name>
      <version>3.0.2</version>
      <description>JSR305 Annotations for Findbugs</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">dd83accb899363c32b07d7a1b2e4ce40</hash>
        <hash alg="SHA-1">25ea2e8b0c338a877313bd4672d3fe056ea78f0d</hash>
        <hash alg="SHA-256">766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7</hash>
        <hash alg="SHA-512">bb09db62919a50fa5b55906013be6ca4fc7acb2e87455fac5eaf9ede2e41ce8bbafc0e5a385a561264ea4cd71bbbd3ef5a45e02d63277a201d06a0ae1636f804</hash>
        <hash alg="SHA-384">ca0b169d3eb2d0922dc031133a021f861a043bb3e405a88728215fd6ff00fa52fdc7347842dcc2031472e3726164bdc4</hash>
        <hash alg="SHA3-384">9903fd7505218999f8262efedb3d935d64bcef84aae781064ab5e1b24755466b269517cada562fa140cd1d417ede57a1</hash>
        <hash alg="SHA3-256">223fda9a89a461afaae73b177a2dc20ed4a90f2f8757f5c65f3241b0510f00ff</hash>
        <hash alg="SHA3-512">3996b5af57a5d5c6a0cd62b11773360fb051dd86a2ba968476806a2a5d32049b82d69a24a3c694e8fe4d735be6a28e41000cc500cc2a9fb577e058045855d2d6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://findbugs.sourceforge.net/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>https://code.google.com/p/jsr-305/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-lang3</name>
      <version>3.18.0</version>
      <description>Apache Commons Lang, a package of Java utility classes for the
  classes that are in java.lang's hierarchy, or are considered to be so
  standard as to justify existence in java.lang.

  The code is tested using the latest revision of the JDK for supported
  LTS releases: 8, 11, 17 and 21 currently.
  See https://github.com/apache/commons-lang/blob/master/.github/workflows/maven.yml
  
  Please ensure your build environment is up-to-date and kindly report any build issues.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">48b9886957920a4cdb602780ca345087</hash>
        <hash alg="SHA-1">fb14946f0e39748a6571de0635acbe44e7885491</hash>
        <hash alg="SHA-256">4eeeae8d20c078abb64b015ec158add383ac581571cddc45c68f0c9ae0230720</hash>
        <hash alg="SHA-512">c2c9d497fc1be411050f4011b2407764b78aa098eb42925af8a197eabdbc25b507f09fb898805e9bed4815f35236a508ee5b096e36f363df4d407232d50fc832</hash>
        <hash alg="SHA-384">4fb3f101106e4ce3666d5c15d276ba86f7683a0ef35f0384edfcd579ea454275edbb7400795d265ec3a38e39997e79b8</hash>
        <hash alg="SHA3-384">aada7e3612cf3f6190a19fa7c3db74df1e13ec56b300be9bb4317d261d5877c84ab59ba9a09168becdbd82cd41961395</hash>
        <hash alg="SHA3-256">306d286d0bd7549c203cc802fd755d354c4f7926fa023f4e83623ba1a6261250</hash>
        <hash alg="SHA3-512">f6f1ecc684e309d7b9fc5c343792508fee935cd2119d962721662c5af88e4864ba6f47a863e083714f315f926c156de1970cd2fb577449bdfdc7bf98a4a451fa</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://commons.apache.org/proper/commons-lang/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/commons-lang/actions</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/LANG</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf/commons-lang.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.jetbrains/annotations@21.0.1?type=jar">
      <group>org.jetbrains</group>
      <name>annotations</name>
      <version>21.0.1</version>
      <description>A set of annotations used for code inspection support and code documentation.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">876009d4236adac5a5b175faf6ddd8d8</hash>
        <hash alg="SHA-1">3d8aebff2ddbcdcfab2c29e5975fc4cdf3bb9640</hash>
        <hash alg="SHA-256">23b6424aebaf11ff82ec308cffa0ead4c365e2100c278c45050789799e1a32b8</hash>
        <hash alg="SHA-512">29cbe01a1298b06c2455e74790560d01194998667ad767c0b4178e7310c5f83e885e5abce03b62e75f65a8cc57ee2340dca8fe01e0bb53d503ef4dddd0ae1154</hash>
        <hash alg="SHA-384">1fc6ad82241e1d4540fe6236eb6b1157c12b8c6d08f43566c6b9ae6e06a5a1fed3d2ab8da9217cfc8e4132846cc0fc3c</hash>
        <hash alg="SHA3-384">02473860a2475ae5a64fa0b139331582cd0913a13bd4e7a0d465bc3ae96394a4c3f7bef6c85ffd6d4c06da05f442e6de</hash>
        <hash alg="SHA3-256">f46e0d78732a35b4c1fd61243d1e23353c0fdcf4f3b427b3898e20c17fd0a18b</hash>
        <hash alg="SHA3-512">f45dd5624dfbc6efe3f93a3fc8b6623a291dbf047516417022b4950d2cb41d2785c8a49c8bc7b7eba9251602a186956dc98e843b7b9c55f1685934d3c204e776</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.jetbrains/annotations@21.0.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/JetBrains/java-annotations</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/JetBrains/java-annotations</url>
        </reference>
      </externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/com.evolveum.icf/dummy-resource@4.9.4?type=jar">
      <dependency ref="pkg:maven/com.evolveum.commons/util@4.9.4?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar"/>
      <dependency ref="pkg:maven/org.jetbrains/annotations@21.0.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.evolveum.commons/util@4.9.4?type=jar">
      <dependency ref="pkg:maven/xerces/xercesImpl@2.12.2?type=jar"/>
      <dependency ref="pkg:maven/io.github.classgraph/classgraph@4.8.162?type=jar"/>
      <dependency ref="pkg:maven/com.google.guava/guava@32.1.2-jre?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.15?type=jar"/>
      <dependency ref="pkg:maven/commons-io/commons-io@2.18.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"/>
      <dependency ref="pkg:maven/ch.qos.logback/logback-classic@1.5.18?type=jar"/>
      <dependency ref="pkg:maven/ch.qos.logback/logback-core@1.5.18?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-core@6.2.8?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-aop@6.2.8?type=jar"/>
      <dependency ref="pkg:maven/org.jetbrains/annotations@21.0.1?type=jar"/>
      <dependency ref="pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.2?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/xerces/xercesImpl@2.12.2?type=jar"/>
    <dependency ref="pkg:maven/io.github.classgraph/classgraph@4.8.162?type=jar"/>
    <dependency ref="pkg:maven/com.google.guava/guava@32.1.2-jre?type=jar">
      <dependency ref="pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar"/>
      <dependency ref="pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar"/>
      <dependency ref="pkg:maven/org.checkerframework/checker-qual@3.19.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.10.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar"/>
    <dependency ref="pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar"/>
    <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar"/>
    <dependency ref="pkg:maven/org.checkerframework/checker-qual@3.19.0?type=jar"/>
    <dependency ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.10.0?type=jar"/>
    <dependency ref="pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar"/>
    <dependency ref="pkg:maven/commons-codec/commons-codec@1.15?type=jar"/>
    <dependency ref="pkg:maven/commons-io/commons-io@2.18.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar">
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"/>
    <dependency ref="pkg:maven/ch.qos.logback/logback-classic@1.5.18?type=jar">
      <dependency ref="pkg:maven/ch.qos.logback/logback-core@1.5.18?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/ch.qos.logback/logback-core@1.5.18?type=jar"/>
    <dependency ref="pkg:maven/org.springframework/spring-core@6.2.8?type=jar"/>
    <dependency ref="pkg:maven/org.springframework/spring-aop@6.2.8?type=jar">
      <dependency ref="pkg:maven/org.springframework/spring-beans@6.2.8?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-core@6.2.8?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.springframework/spring-beans@6.2.8?type=jar">
      <dependency ref="pkg:maven/org.springframework/spring-core@6.2.8?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.jetbrains/annotations@21.0.1?type=jar"/>
    <dependency ref="pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.2?type=jar">
      <dependency ref="pkg:maven/jakarta.activation/jakarta.activation-api@2.1.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jakarta.activation/jakarta.activation-api@2.1.3?type=jar"/>
  </dependencies>
</bom>
