diff --git a/src/providers/java_gradle.js b/src/providers/java_gradle.js index 6a27c9cb..a89fee26 100644 --- a/src/providers/java_gradle.js +++ b/src/providers/java_gradle.js @@ -162,9 +162,10 @@ export default class Java_gradle extends Base_java { * @param {Sbom} sbom - the SBOM object to add dependencies to * @param {Set} processedDeps - set of already processed dependencies * @param {string} scope - the dependency scope + * @param {Map>} [hashMap] - map of "group:name@version" to CycloneDX hashes * @private */ - #processDependencyTree(config, parentPurl, sbom, processedDeps, scope) { + #processDependencyTree(config, parentPurl, sbom, processedDeps, scope, hashMap) { const processedLines = this.#prepareLinesForParsingDependencyTree(config); let parentStack = [parentPurl]; @@ -186,7 +187,7 @@ export default class Java_gradle extends Base_java { // Add dependency to SBOM if not already processed if (!processedDeps.has(depKey)) { processedDeps.add(depKey); - sbom.addDependency(currentParent, purl, scope); + sbom.addDependency(currentParent, purl, scope, this.#lookupHashes(purl, hashMap)); } parentStack.push(purl); } @@ -200,7 +201,7 @@ export default class Java_gradle extends Base_java { * @returns {string} the Dot Graph content * @private */ - #buildSbom(content, properties, manifestPath, opts = {}) { + #buildSbom(content, properties, manifestPath, opts = {}, hashMap) { let sbom = new Sbom(); let root = `${properties.group}:${properties[ROOT_PROJECT_KEY_NAME].match(/Root project '(.+)'/)[1]}:jar:${properties.version}` let rootPurl = this.parseDep(root) @@ -212,8 +213,8 @@ export default class Java_gradle extends Base_java { const processedDeps = new Set(); - this.#processDependencyTree(runtimeConfig, rootPurl, sbom, processedDeps, 'required'); - this.#processDependencyTree(compileConfig, rootPurl, sbom, processedDeps, 'optional'); + this.#processDependencyTree(runtimeConfig, rootPurl, sbom, processedDeps, 'required', hashMap); + this.#processDependencyTree(compileConfig, rootPurl, sbom, processedDeps, 'optional', hashMap); return sbom.filterIgnoredDepsIncludingVersion(ignoredDeps).getAsJsonString(opts); } @@ -228,11 +229,12 @@ export default class Java_gradle extends Base_java { #createSbomStackAnalysis(manifest, opts = {}) { let content = this.#getDependencies(manifest, opts) let properties = this.#extractProperties(manifest, opts) + let hashMap = this.parseGradleHashes(manifest, opts) // read dependency tree from temp file if (process.env["TRUSTIFY_DA_DEBUG"] === "true") { console.log("Dependency tree that will be used as input for creating the BOM =>" + EOL + EOL + content) } - let sbom = this.#buildSbom(content, properties, manifest, opts) + let sbom = this.#buildSbom(content, properties, manifest, opts, hashMap) return sbom } @@ -282,8 +284,9 @@ export default class Java_gradle extends Base_java { #getSbomForComponentAnalysis(manifestPath, opts = {}) { let content = this.#getDependencies(manifestPath, opts) let properties = this.#extractProperties(manifestPath, opts) + let hashMap = this.parseGradleHashes(manifestPath, opts) - let sbom = this.#buildDirectDependenciesSbom(content, properties, manifestPath, opts) + let sbom = this.#buildDirectDependenciesSbom(content, properties, manifestPath, opts, hashMap) return sbom } @@ -305,6 +308,119 @@ export default class Java_gradle extends Base_java { } } + /** + * Compute SHA-256 hashes for the resolved artifacts of a Gradle manifest. + * + * Rather than scanning the local Gradle cache, this asks Gradle itself for + * the resolved artifact files via an init script (mirroring the pattern used + * by {@link discoverGradleSubprojects}), then hashes each file with the + * Node.js `crypto` module. The result is keyed by the canonical PURL string + * built via {@link Base_java#toPurl} — the same builder {@link parseDep} uses + * for the lookup — so the stored key and the lookup key cannot drift. + * + * Degrades gracefully: if Gradle cannot be invoked, the init script fails, or + * an artifact has no readable file (e.g. BOM/`platform()` dependencies), the + * hash for that component is omitted rather than throwing. A warning is emitted + * on every degradation path so incomplete hash coverage is visible even without + * `TRUSTIFY_DA_DEBUG` (mirroring the pip/cargo providers). + * + * @param {string} manifest - path to build.gradle[.kts] + * @param {{}} [opts={}] - optional various options to pass along the application + * @returns {Map>} map of canonical PURL string to CycloneDX hashes + */ + parseGradleHashes(manifest, opts = {}) { + const hashMap = new Map() + const debug = process.env["TRUSTIFY_DA_DEBUG"] === "true" + + let gradle + try { + gradle = this.selectToolBinary(manifest, opts) + } catch (error) { + console.warn('Gradle could not be invoked to compute artifact hashes, SBOM will be generated without hashes') + if (debug) { + console.error(`Gradle hash: selectToolBinary failed => ${error.stack || error.message}`) + } + return hashMap + } + + const initScriptPath = path.join(os.tmpdir(), `da-list-hashes-${crypto.randomUUID()}.gradle`) + try { + fs.writeFileSync(initScriptPath, GRADLE_HASH_INIT_SCRIPT) + let output + try { + output = this._invokeCommand(gradle, [ + '-q', '--no-daemon', + '--init-script', initScriptPath, + 'daListHashes', + ], { cwd: path.dirname(manifest) }) + } catch (error) { + console.warn('Gradle hash init script failed, SBOM will be generated without hashes') + if (debug) { + console.error(`Gradle hash: init script invocation failed => ${error.stack || error.message}`) + } + return hashMap + } + + let attempted = 0 + let missed = 0 + for (const { id, file } of parseGradleHashScriptOutput(output.toString())) { + const coord = parseComponentId(id) + if (!coord) { + continue + } + // Build the key with the same canonical PURL builder parseDep uses for + // the lookup, so the stored key and the #lookupHashes key cannot drift. + const key = this.toPurl(coord.group, coord.name, coord.version).toString() + if (hashMap.has(key)) { + continue + } + attempted++ + try { + const digest = crypto.createHash('sha256').update(fs.readFileSync(file)).digest('hex') + hashMap.set(key, [{ alg: 'SHA-256', content: digest }]) + } catch (error) { + // artifact file missing/unreadable — omit the hash for this component + missed++ + if (debug) { + console.error(`Gradle hash: could not read artifact ${file} => ${error.message}`) + } + } + } + if (missed > 0) { + console.warn(`Gradle hash: ${missed} of ${attempted} resolved artifacts could not be read, SBOM will be generated without hashes for those components`) + } + } catch (error) { + // Unexpected failure (e.g. a programming error) is degraded to keep SBOM + // generation working, but surfaced under debug so it is not mistaken for + // ordinary graceful degradation. + console.warn('Gradle artifact hashing failed, SBOM will be generated without hashes') + if (debug) { + console.error(`Gradle hash: unexpected failure => ${error.stack || error.message}`) + } + return hashMap + } finally { + try { fs.unlinkSync(initScriptPath) } catch { /* ignore */ } + } + + return hashMap + } + + /** + * Look up the CycloneDX hashes for a dependency purl in the hash map. + * Keys off the canonical PURL string so it matches the key stored by + * {@link parseGradleHashes}. + * @param {PackageURL} purl - the dependency package URL + * @param {Map>} [hashMap] - map of canonical PURL string to hashes + * @returns {Array<{alg: string, content: string}>|undefined} the hashes, or undefined when absent + * @private + */ + #lookupHashes(purl, hashMap) { + if (!hashMap) { + return undefined + } + return hashMap.get(purl.toString()) + } + /** * Extracts runtime and compile configurations from the dependency tree * @param {string} content - the dependency tree content @@ -355,7 +471,7 @@ export default class Java_gradle extends Base_java { * @param properties {Object} - properties of the gradle project. * @return {string} return sbom json string of the build.gradle manifest file */ - #buildDirectDependenciesSbom(content, properties, manifestPath, opts = {}) { + #buildDirectDependenciesSbom(content, properties, manifestPath, opts = {}, hashMap) { let sbom = new Sbom(); let root = `${properties.group}:${properties[ROOT_PROJECT_KEY_NAME].match(/Root project '(.+)'/)[1]}:jar:${properties.version}` let rootPurl = this.parseDep(root) @@ -372,7 +488,7 @@ export default class Java_gradle extends Base_java { directDependencies.forEach((scope, dep) => { const purl = this.parseDep(dep); purl.scope = scope; - sbom.addDependency(rootPurl, purl, scope); + sbom.addDependency(rootPurl, purl, scope, this.#lookupHashes(purl, hashMap)); }); return sbom.filterIgnoredDepsIncludingVersion(ignoredDeps).getAsJsonString(opts); @@ -486,6 +602,30 @@ const GRADLE_INIT_SCRIPT = `allprojects { } ` +/** + * Gradle init script that emits, per resolved module artifact, a structured line + * of the form `::DA_HASH::group:name:version::/absolute/file/path`. It obtains + * files from Gradle's resolution API (the same approach as the CycloneDX Gradle + * plugin) so it is robust to cache-layout changes and correctly reports + * classifiers and non-jar artifacts. Uses a lenient artifact view so + * unresolved/fileless artifacts are skipped rather than failing the build. + */ +const GRADLE_HASH_INIT_SCRIPT = `allprojects { + task daListHashes { + doLast { + configurations.findAll { it.canBeResolved }.each { cfg -> + cfg.incoming.artifactView { lenient = true }.artifacts.each { artifact -> + def cid = artifact.id.componentIdentifier + if (cid instanceof org.gradle.api.artifacts.component.ModuleComponentIdentifier) { + println "::DA_HASH::\${cid.group}:\${cid.module}:\${cid.version}::\${artifact.file.absolutePath}" + } + } + } + } + } +} +` + /** * Discover all build.gradle[.kts] manifest paths in a Gradle multi-project build. * Uses a custom init script to get structured project listing. @@ -584,3 +724,52 @@ export function parseGradleInitScriptOutput(raw) { } return projects } + +/** + * Parse the structured output from the Gradle hash init script. + * Each recognised line has the form `::DA_HASH::group:name:version::`. + * + * @param {string} raw - Raw stdout from gradle + * @returns {{ id: string, file: string }[]} component id (`group:name:version`) and absolute artifact file path + */ +export function parseGradleHashScriptOutput(raw) { + const artifacts = [] + for (const rawLine of raw.split('\n')) { + const line = rawLine.trimEnd() + if (!line.startsWith('::DA_HASH::')) { + continue + } + const prefix = '::DA_HASH::' + const remainder = line.substring(prefix.length) + const lastSep = remainder.lastIndexOf('::') + if (lastSep < 0) { + continue + } + const id = remainder.substring(0, lastSep) + const file = remainder.substring(lastSep + 2) + if (id && file) { + artifacts.push({ id, file }) + } + } + return artifacts +} + +/** + * Parse a Gradle module component id (`group:name:version`) into its coordinate + * parts. The caller builds the canonical PURL key from these parts using the same + * builder {@link parseDep} uses, so the stored key and the lookup key cannot drift. + * + * @param {string} id - the Gradle component id + * @returns {{group: string, name: string, version: string}|null} the parsed coordinate, or null when the id is malformed + */ +export function parseComponentId(id) { + const parts = id.split(':') + if (parts.length < 3) { + return null + } + const [group, name, version] = parts + if (!group || !name || !version) { + return null + } + return { group, name, version } +} diff --git a/test/providers/gradle_hash_test_utils.js b/test/providers/gradle_hash_test_utils.js new file mode 100644 index 00000000..fd135dec --- /dev/null +++ b/test/providers/gradle_hash_test_utils.js @@ -0,0 +1,102 @@ +import fs from 'fs' +import os from 'os' +import path from 'path' + +/** Directory holding deterministic stand-in artifact files whose content is hashed by the provider. */ +export const HASH_FIXTURE_DIR = path.join(os.tmpdir(), 'da-gradle-hash-fixtures') + +/** + * Extract a superset of `group:name:version` coordinates from a gradle dependency tree. + * Mirrors the tree-glyph stripping done by the provider so artifact names with hyphens + * are preserved; extra coordinates are harmless because the provider only looks up real ones. + * @param {string} depTree - the `gradle dependencies` output + * @returns {string[]} unique `group:name:version` coordinates + */ +export function extractCoordinates(depTree) { + const coords = new Set() + for (const raw of depTree.split(/\r?\n/)) { + const line = raw.replaceAll('|', ' ').replace(/\\---|\+---/g, ' ').trim() + if (!line || line.startsWith('No dependencies') || line.startsWith('Root project')) { + continue + } + const m = line.match(/^([\w.-]+):([\w.-]+):([\w.-]+)(?:\s*->\s*([\w.-]+))?/) + if (m) { + const version = m[4] || m[3] + coords.add(`${m[1]}:${m[2]}:${version}`) + } + } + return [...coords] +} + +/** + * Ensure a deterministic stand-in artifact file exists for a coordinate and return its path. + * The file content is the coordinate itself, so the SHA-256 the provider computes is stable. + * @param {string} coord - a `group:name:version` coordinate + * @returns {string} absolute path to the artifact file + */ +export function artifactFileFor(coord) { + fs.mkdirSync(HASH_FIXTURE_DIR, { recursive: true }) + const p = path.join(HASH_FIXTURE_DIR, coord.replace(/[^\w.-]/g, '_') + '.jar') + if (!fs.existsSync(p)) { + fs.writeFileSync(p, coord) + } + return p +} + +/** + * Build the `::DA_HASH::group:name:version::` init-script output for a dependency tree. + * @param {string} depTree - the `gradle dependencies` output + * @param {(coord: string) => string|null} [fileFor=artifactFileFor] - resolves a coordinate to an artifact path; return null to omit the line + * @returns {string} the mocked init-script stdout + */ +export function buildHashScriptOutput(depTree, fileFor = artifactFileFor) { + return extractCoordinates(depTree) + .map(c => { + const file = fileFor(c) + return file ? `::DA_HASH::${c}::${file}` : null + }) + .filter(Boolean) + .join('\n') +} + +/** + * Stub for `_invokeCommand` that answers `dependencies`, `properties`, and the + * `daListHashes` init-script task used to compute artifact hashes. + * @param {string[]} args - the args passed to the gradle binary + * @param {string} dependencyTreeTextContent - mocked `gradle dependencies` output + * @param {string} gradleProperties - mocked `gradle properties` output + * @param {string} [hashScriptOutput] - mocked `daListHashes` output (defaults to hashes for the whole tree) + * @returns {string} the mocked stdout for the requested gradle invocation + */ +export function getStubbedResponse(args, dependencyTreeTextContent, gradleProperties, hashScriptOutput) { + if (args.includes("daListHashes")) { + return hashScriptOutput !== undefined ? hashScriptOutput : buildHashScriptOutput(dependencyTreeTextContent) + } else if (args.includes("dependencies")) { + return dependencyTreeTextContent + } else if (args.includes("properties")) { + return gradleProperties + } + return '' +} + +/** + * Install a mocked `_invokeCommand` on the Base_java prototype for a provider. + * @param {object} provider - the gradle provider instance + * @param {string} depTree - mocked dependency tree output + * @param {string} props - mocked properties output + * @param {string} [hashScriptOutput] - optional override for the `daListHashes` output + */ +export function mockInvokeCommand(provider, depTree, props, hashScriptOutput) { + const mockedExecFunction = function (bin, args) { + return getStubbedResponse(args, depTree, props, hashScriptOutput); + } + Object.getPrototypeOf(Object.getPrototypeOf(provider))._invokeCommand = mockedExecFunction +} + +/** + * Remove the stand-in artifact files created by {@link artifactFileFor}. Call from + * `suiteTeardown` so long-lived CI agents do not accumulate temp artifacts. + */ +export function cleanupHashFixtures() { + fs.rmSync(HASH_FIXTURE_DIR, { recursive: true, force: true }) +} diff --git a/test/providers/java_gradle_groovy.test.js b/test/providers/java_gradle_groovy.test.js index 8d9cebe5..3747699b 100644 --- a/test/providers/java_gradle_groovy.test.js +++ b/test/providers/java_gradle_groovy.test.js @@ -1,34 +1,30 @@ import { throws } from 'assert'; +import crypto from 'crypto' import fs from 'fs' +import path from 'path' import { expect } from 'chai' -import { useFakeTimers } from "sinon"; +import { spy, useFakeTimers } from "sinon"; import Java_gradle_groovy from '../../src/providers/java_gradle_groovy.js' -import { compareSboms } from '../utils/sbom_utils.js'; -let clock +import { + HASH_FIXTURE_DIR, + artifactFileFor, + buildHashScriptOutput, + cleanupHashFixtures, + getStubbedResponse, + mockInvokeCommand, +} from './gradle_hash_test_utils.js' -/** this function is parsing the outputfile path from the given command, and write that file the providerContent supplied. - * - * @param {Array}args - the args passed to the binary - * @param {string}providerContent - the content of the mocked data to replace original content in intercepted temp file - * @param {string} outputFileParameter - name of the parameter indicating the output file of the command invocation, including '='. - * @private - */ - -function getStubbedResponse(args, dependencyTreeTextContent, gradleProperties) { - if (args.includes("dependencies")) { - return dependencyTreeTextContent - } else if (args.includes("properties")) { - return gradleProperties - } - return '' -} +let clock suite('testing the java-gradle-groovy data provider', () => { suiteSetup(() => clock = useFakeTimers(new Date('2023-08-07T00:00:00.000Z'))); - suiteTeardown(() => clock.restore()); + suiteTeardown(() => { + clock.restore() + cleanupHashFixtures() + }); [ { name: 'build.gradle', expected: true }, @@ -53,15 +49,12 @@ suite('testing the java-gradle-groovy data provider', () => { let expectedSbom = fs.readFileSync(`test/providers/tst_manifests/gradle/${testCase}/expected_stack_sbom.json`,).toString().trim() let dependencyTreeTextContent = fs.readFileSync(`test/providers/tst_manifests/gradle/${testCase}/depTree.txt`,).toString() let gradleProperties = fs.readFileSync(`test/providers/tst_manifests/gradle/${testCase}/gradle.properties`,).toString() - let mockedExecFunction = function (bin, args) { - return getStubbedResponse(args, dependencyTreeTextContent, gradleProperties); - } let provider = new Java_gradle_groovy() - Object.getPrototypeOf(Object.getPrototypeOf(provider))._invokeCommand = mockedExecFunction + mockInvokeCommand(provider, dependencyTreeTextContent, gradleProperties) // invoke sut stack analysis for scenario manifest let providedDataForStack = provider.provideStack(`test/providers/tst_manifests/gradle/${testCase}/build.gradle`) - // verify returned data matches expectation - compareSboms(providedDataForStack.content, expectedSbom); + // verify returned data matches expectation exactly, including artifact hashes (SBOM_CASES deep-equal) + expect(JSON.parse(providedDataForStack.content)).to.deep.equal(JSON.parse(expectedSbom)); // these test cases takes ~2500-2700 ms each pr >10000 in CI (for the first test-case) }).timeout(process.env.GITHUB_ACTIONS ? 40000 : 10000) @@ -71,19 +64,152 @@ suite('testing the java-gradle-groovy data provider', () => { let expectedSbom = fs.readFileSync(`test/providers/tst_manifests/gradle/${testCase}/expected_component_sbom.json`,).toString().trim() let dependencyTreeTextContent = fs.readFileSync(`test/providers/tst_manifests/gradle/${testCase}/depTree.txt`,).toString() let gradleProperties = fs.readFileSync(`test/providers/tst_manifests/gradle/${testCase}/gradle.properties`,).toString() - let mockedExecFunction = function (bin, args) { - return getStubbedResponse(args, dependencyTreeTextContent, gradleProperties); - } let provider = new Java_gradle_groovy() - Object.getPrototypeOf(Object.getPrototypeOf(provider))._invokeCommand = mockedExecFunction + mockInvokeCommand(provider, dependencyTreeTextContent, gradleProperties) // invoke component analysis for scenario manifest let providedForComponent = provider.provideComponent(`test/providers/tst_manifests/gradle/${testCase}/build.gradle`, {}) - // verify returned data matches expectation - compareSboms(providedForComponent.content, expectedSbom); + // verify returned data matches expectation exactly, including artifact hashes (SBOM_CASES deep-equal) + expect(JSON.parse(providedForComponent.content)).to.deep.equal(JSON.parse(expectedSbom)); // these test cases takes ~1400-2000 ms each pr >10000 in CI (for the first test-case) }).timeout(process.env.GITHUB_ACTIONS ? 15000 : 5000) }); + suite('artifact hash computation', () => { + const testCase = 'deps_with_no_ignore_common_paths' + const dir = `test/providers/tst_manifests/gradle/${testCase}` + + /** Verifies the SHA-256 the provider computes matches the digest of the resolved artifact file. */ + test('verify component hashes are the SHA-256 hex digest of the resolved artifact file', () => { + // Given a dependency tree whose artifacts hash to a known, deterministic digest + let depTree = fs.readFileSync(`${dir}/depTree.txt`).toString() + let props = fs.readFileSync(`${dir}/gradle.properties`).toString() + let provider = new Java_gradle_groovy() + mockInvokeCommand(provider, depTree, props) + + // When building the component-analysis SBOM + let sbom = JSON.parse(provider.provideComponent(`${dir}/build.gradle`, {}).content) + + // Then the direct dependency carries the SHA-256 of its artifact file content + let coord = 'io.quarkus:quarkus-hibernate-orm:2.13.5.Final' + let expectedDigest = crypto.createHash('sha256').update(coord).digest('hex') + let component = sbom.components.find(c => c.name === 'quarkus-hibernate-orm' && c.version === '2.13.5.Final') + expect(component.hashes).to.be.an('array').with.lengthOf(1) + expect(component.hashes[0].alg).to.equal('SHA-256') + expect(component.hashes[0].content).to.match(/^[0-9a-f]{64}$/) + expect(component.hashes[0].content).to.equal(expectedDigest) + }).timeout(10000) + + /** Verifies that a fileless artifact (e.g. a BOM/platform dependency) yields no hash while others keep theirs. */ + test('verify an artifact with no resolvable file has its hash omitted, others unaffected', () => { + // Given an init script that reports no file for one dependency (as a platform()/BOM would) + let depTree = fs.readFileSync(`${dir}/depTree.txt`).toString() + let props = fs.readFileSync(`${dir}/gradle.properties`).toString() + let omitted = 'io.quarkus:quarkus-hibernate-orm:2.13.5.Final' + let hashOutput = buildHashScriptOutput(depTree, coord => (coord === omitted ? null : artifactFileFor(coord))) + let provider = new Java_gradle_groovy() + mockInvokeCommand(provider, depTree, props, hashOutput) + + // When building the component-analysis SBOM + let sbom = JSON.parse(provider.provideComponent(`${dir}/build.gradle`, {}).content) + + // Then the fileless dependency has no hashes, while a sibling dependency still does + let omittedComponent = sbom.components.find(c => c.name === 'quarkus-hibernate-orm') + let otherComponent = sbom.components.find(c => c.name === 'quarkus-agroal') + expect(omittedComponent.hashes).to.be.undefined + expect(otherComponent.hashes).to.be.an('array').with.lengthOf(1) + }).timeout(10000) + + /** Verifies the init script raising an error degrades to an SBOM without hashes rather than throwing. */ + test('verify a failing hash init script degrades to an SBOM without hashes', () => { + // Given a gradle binary that throws when the hash init script is invoked + let depTree = fs.readFileSync(`${dir}/depTree.txt`).toString() + let props = fs.readFileSync(`${dir}/gradle.properties`).toString() + let provider = new Java_gradle_groovy() + Object.getPrototypeOf(Object.getPrototypeOf(provider))._invokeCommand = function (bin, args) { + if (args.includes('daListHashes')) { + throw new Error('init script failed') + } + return getStubbedResponse(args, depTree, props) + } + + // When building the stack-analysis SBOM + let build = () => provider.provideStack(`${dir}/build.gradle`) + + // Then no error is raised and no component carries hashes + expect(build).to.not.throw() + let sbom = JSON.parse(build().content) + expect(sbom.components.filter(c => c.hashes)).to.have.lengthOf(0) + }).timeout(10000) + + /** + * Key drift (Maven lesson #1): both the stored key and the lookup key are built + * from the canonical PURL, so the map is keyed by `pkg:maven/...` strings and a + * conflict-resolved (`->`) transitive dependency still matches at its resolved version. + */ + test('verify the hash map is keyed by canonical PURL and conflict-resolved deps still match', () => { + // Given a tree containing "jboss-logging:3.4.3.Final -> 3.5.0.Final" + let depTree = fs.readFileSync(`${dir}/depTree.txt`).toString() + let props = fs.readFileSync(`${dir}/gradle.properties`).toString() + let provider = new Java_gradle_groovy() + mockInvokeCommand(provider, depTree, props) + + // Then the hash map is keyed by canonical PURL strings, keyed at the resolved version + let hashMap = provider.parseGradleHashes(`${dir}/build.gradle`) + expect([...hashMap.keys()]).to.not.be.empty + expect([...hashMap.keys()].every(k => k.startsWith('pkg:maven/'))).to.equal(true) + expect(hashMap.has('pkg:maven/org.jboss.logging/jboss-logging@3.5.0.Final')).to.equal(true) + + // And end-to-end, that resolved transitive dependency carries its hash in the stack SBOM + let sbom = JSON.parse(provider.provideStack(`${dir}/build.gradle`).content) + let comp = sbom.components.find(c => c.name === 'jboss-logging' && c.version === '3.5.0.Final') + expect(comp.hashes).to.be.an('array').with.lengthOf(1) + }).timeout(10000) + + /** Degradation warning (Maven lesson #2): a summary warning is emitted when some artifacts cannot be read. */ + test('verify a warning is emitted when some resolved artifacts cannot be read', () => { + // Given an init script that points one dependency at a nonexistent file + let depTree = fs.readFileSync(`${dir}/depTree.txt`).toString() + let props = fs.readFileSync(`${dir}/gradle.properties`).toString() + let unreadable = 'io.quarkus:quarkus-hibernate-orm:2.13.5.Final' + let hashOutput = buildHashScriptOutput(depTree, coord => + (coord === unreadable ? path.join(HASH_FIXTURE_DIR, 'does-not-exist.jar') : artifactFileFor(coord))) + let provider = new Java_gradle_groovy() + mockInvokeCommand(provider, depTree, props, hashOutput) + + // When building the SBOM, a summary warning is emitted even without TRUSTIFY_DA_DEBUG + let warn = spy(console, 'warn') + try { + provider.provideComponent(`${dir}/build.gradle`, {}) + } finally { + warn.restore() + } + expect(warn.calledWithMatch(/could not be read/)).to.equal(true) + }).timeout(10000) + + /** Degradation warning (Maven lesson #2): a failing hash init script emits a warning rather than degrading silently. */ + test('verify a warning is emitted when the hash init script fails', () => { + // Given a gradle binary that throws when the hash init script is invoked + let depTree = fs.readFileSync(`${dir}/depTree.txt`).toString() + let props = fs.readFileSync(`${dir}/gradle.properties`).toString() + let provider = new Java_gradle_groovy() + Object.getPrototypeOf(Object.getPrototypeOf(provider))._invokeCommand = function (bin, args) { + if (args.includes('daListHashes')) { + throw new Error('init script failed') + } + return getStubbedResponse(args, depTree, props) + } + + // When building the SBOM, the silent degradation is surfaced as a warning + let warn = spy(console, 'warn') + try { + provider.provideStack(`${dir}/build.gradle`) + } finally { + warn.restore() + } + expect(warn.calledWithMatch(/without hashes/)).to.equal(true) + }).timeout(10000) + }); + [ "deps_with_empty_project_group" ].forEach(testCase => { @@ -93,14 +219,10 @@ suite('testing the java-gradle-groovy data provider', () => { // load the expected list for the scenario let dependencyTreeTextContent = fs.readFileSync(`test/providers/tst_manifests/gradle/${testCase}/depTree.txt`,).toString() let gradleProperties = fs.readFileSync(`test/providers/tst_manifests/gradle/${testCase}/gradle.properties`,).toString() - let mockedExecFunction = function (bin, args) { - return getStubbedResponse(args, dependencyTreeTextContent, gradleProperties); - } let provider = new Java_gradle_groovy() - Object.getPrototypeOf(Object.getPrototypeOf(provider))._invokeCommand = mockedExecFunction + mockInvokeCommand(provider, dependencyTreeTextContent, gradleProperties) // invoke component analysis for scenario manifest throws(() => provider.provideComponent(`test/providers/tst_manifests/gradle/${testCase}/build.gradle`, {})) }) }) }); - diff --git a/test/providers/java_gradle_kotlin.test.js b/test/providers/java_gradle_kotlin.test.js index a4517f6a..fa3ea201 100644 --- a/test/providers/java_gradle_kotlin.test.js +++ b/test/providers/java_gradle_kotlin.test.js @@ -1,34 +1,30 @@ import { throws } from 'assert'; +import crypto from 'crypto' import fs from 'fs' +import path from 'path' import { expect } from 'chai' -import { useFakeTimers } from "sinon"; +import { spy, useFakeTimers } from "sinon"; import Java_gradle_kotlin from '../../src/providers/java_gradle_kotlin.js' -import { compareSboms } from '../utils/sbom_utils.js'; -let clock +import { + HASH_FIXTURE_DIR, + artifactFileFor, + buildHashScriptOutput, + cleanupHashFixtures, + getStubbedResponse, + mockInvokeCommand, +} from './gradle_hash_test_utils.js' -/** this function is parsing the outputfile path from the given command, and write that file the providerContent supplied. - * - * @param {Array}args - the args passed to the binary - * @param {string}providerContent - the content of the mocked data to replace original content in intercepted temp file - * @param {string} outputFileParameter - name of the parameter indicating the output file of the command invocation, including '='. - * @private - */ - -function getStubbedResponse(args, dependencyTreeTextContent, gradleProperties) { - if (args.includes("dependencies")) { - return dependencyTreeTextContent - } else if (args.includes("properties")) { - return gradleProperties - } - return '' -} +let clock suite('testing the java-gradle-kotlin data provider', () => { suiteSetup(() => clock = useFakeTimers(new Date('2023-08-07T00:00:00.000Z'))); - suiteTeardown(() => clock.restore()); + suiteTeardown(() => { + clock.restore() + cleanupHashFixtures() + }); [ { name: 'build.gradle.kts', expected: true }, @@ -53,15 +49,12 @@ suite('testing the java-gradle-kotlin data provider', () => { let expectedSbom = fs.readFileSync(`test/providers/tst_manifests/gradle/${testCase}/expected_stack_sbom.json`,).toString().trim() let dependencyTreeTextContent = fs.readFileSync(`test/providers/tst_manifests/gradle/${testCase}/depTree.txt`,).toString() let gradleProperties = fs.readFileSync(`test/providers/tst_manifests/gradle/${testCase}/gradle.properties`,).toString() - let mockedExecFunction = function (bin, args) { - return getStubbedResponse(args, dependencyTreeTextContent, gradleProperties); - } let javGradleProvider = new Java_gradle_kotlin() - Object.getPrototypeOf(Object.getPrototypeOf(javGradleProvider))._invokeCommand = mockedExecFunction + mockInvokeCommand(javGradleProvider, dependencyTreeTextContent, gradleProperties) // invoke sut stack analysis for scenario manifest let providedDataForStack = javGradleProvider.provideStack(`test/providers/tst_manifests/gradle/${testCase}/build.gradle.kts`) - // verify returned data matches expectation - compareSboms(providedDataForStack.content, expectedSbom); + // verify returned data matches expectation exactly, including artifact hashes (SBOM_CASES deep-equal) + expect(JSON.parse(providedDataForStack.content)).to.deep.equal(JSON.parse(expectedSbom)); // these test cases takes ~2500-2700 ms each pr >10000 in CI (for the first test-case) }).timeout(process.env.GITHUB_ACTIONS ? 40000 : 10000) @@ -71,19 +64,152 @@ suite('testing the java-gradle-kotlin data provider', () => { let expectedSbom = fs.readFileSync(`test/providers/tst_manifests/gradle/${testCase}/expected_component_sbom.json`,).toString().trim() let dependencyTreeTextContent = fs.readFileSync(`test/providers/tst_manifests/gradle/${testCase}/depTree.txt`,).toString() let gradleProperties = fs.readFileSync(`test/providers/tst_manifests/gradle/${testCase}/gradle.properties`,).toString() - let mockedExecFunction = function (bin, args) { - return getStubbedResponse(args, dependencyTreeTextContent, gradleProperties); - } let javaGradleProvider = new Java_gradle_kotlin() - Object.getPrototypeOf(Object.getPrototypeOf(javaGradleProvider))._invokeCommand = mockedExecFunction + mockInvokeCommand(javaGradleProvider, dependencyTreeTextContent, gradleProperties) // invoke component analysis for scenario manifest let providedForComponent = javaGradleProvider.provideComponent(`test/providers/tst_manifests/gradle/${testCase}/build.gradle.kts`, {}) - // verify returned data matches expectation - compareSboms(providedForComponent.content, expectedSbom); + // verify returned data matches expectation exactly, including artifact hashes (SBOM_CASES deep-equal) + expect(JSON.parse(providedForComponent.content)).to.deep.equal(JSON.parse(expectedSbom)); // these test cases takes ~1400-2000 ms each pr >10000 in CI (for the first test-case) }).timeout(process.env.GITHUB_ACTIONS ? 15000 : 5000) }); + suite('artifact hash computation', () => { + const testCase = 'deps_with_no_ignore_common_paths' + const dir = `test/providers/tst_manifests/gradle/${testCase}` + + /** Verifies the SHA-256 the provider computes matches the digest of the resolved artifact file. */ + test('verify component hashes are the SHA-256 hex digest of the resolved artifact file', () => { + // Given a dependency tree whose artifacts hash to a known, deterministic digest + let depTree = fs.readFileSync(`${dir}/depTree.txt`).toString() + let props = fs.readFileSync(`${dir}/gradle.properties`).toString() + let provider = new Java_gradle_kotlin() + mockInvokeCommand(provider, depTree, props) + + // When building the component-analysis SBOM + let sbom = JSON.parse(provider.provideComponent(`${dir}/build.gradle.kts`, {}).content) + + // Then the direct dependency carries the SHA-256 of its artifact file content + let coord = 'io.quarkus:quarkus-hibernate-orm:2.13.5.Final' + let expectedDigest = crypto.createHash('sha256').update(coord).digest('hex') + let component = sbom.components.find(c => c.name === 'quarkus-hibernate-orm' && c.version === '2.13.5.Final') + expect(component.hashes).to.be.an('array').with.lengthOf(1) + expect(component.hashes[0].alg).to.equal('SHA-256') + expect(component.hashes[0].content).to.match(/^[0-9a-f]{64}$/) + expect(component.hashes[0].content).to.equal(expectedDigest) + }).timeout(10000) + + /** Verifies that a fileless artifact (e.g. a BOM/platform dependency) yields no hash while others keep theirs. */ + test('verify an artifact with no resolvable file has its hash omitted, others unaffected', () => { + // Given an init script that reports no file for one dependency (as a platform()/BOM would) + let depTree = fs.readFileSync(`${dir}/depTree.txt`).toString() + let props = fs.readFileSync(`${dir}/gradle.properties`).toString() + let omitted = 'io.quarkus:quarkus-hibernate-orm:2.13.5.Final' + let hashOutput = buildHashScriptOutput(depTree, coord => (coord === omitted ? null : artifactFileFor(coord))) + let provider = new Java_gradle_kotlin() + mockInvokeCommand(provider, depTree, props, hashOutput) + + // When building the component-analysis SBOM + let sbom = JSON.parse(provider.provideComponent(`${dir}/build.gradle.kts`, {}).content) + + // Then the fileless dependency has no hashes, while a sibling dependency still does + let omittedComponent = sbom.components.find(c => c.name === 'quarkus-hibernate-orm') + let otherComponent = sbom.components.find(c => c.name === 'quarkus-agroal') + expect(omittedComponent.hashes).to.be.undefined + expect(otherComponent.hashes).to.be.an('array').with.lengthOf(1) + }).timeout(10000) + + /** Verifies the init script raising an error degrades to an SBOM without hashes rather than throwing. */ + test('verify a failing hash init script degrades to an SBOM without hashes', () => { + // Given a gradle binary that throws when the hash init script is invoked + let depTree = fs.readFileSync(`${dir}/depTree.txt`).toString() + let props = fs.readFileSync(`${dir}/gradle.properties`).toString() + let provider = new Java_gradle_kotlin() + Object.getPrototypeOf(Object.getPrototypeOf(provider))._invokeCommand = function (bin, args) { + if (args.includes('daListHashes')) { + throw new Error('init script failed') + } + return getStubbedResponse(args, depTree, props) + } + + // When building the stack-analysis SBOM + let build = () => provider.provideStack(`${dir}/build.gradle.kts`) + + // Then no error is raised and no component carries hashes + expect(build).to.not.throw() + let sbom = JSON.parse(build().content) + expect(sbom.components.filter(c => c.hashes)).to.have.lengthOf(0) + }).timeout(10000) + + /** + * Key drift (Maven lesson #1): both the stored key and the lookup key are built + * from the canonical PURL, so the map is keyed by `pkg:maven/...` strings and a + * conflict-resolved (`->`) transitive dependency still matches at its resolved version. + */ + test('verify the hash map is keyed by canonical PURL and conflict-resolved deps still match', () => { + // Given a tree containing "jboss-logging:3.4.3.Final -> 3.5.0.Final" + let depTree = fs.readFileSync(`${dir}/depTree.txt`).toString() + let props = fs.readFileSync(`${dir}/gradle.properties`).toString() + let provider = new Java_gradle_kotlin() + mockInvokeCommand(provider, depTree, props) + + // Then the hash map is keyed by canonical PURL strings, keyed at the resolved version + let hashMap = provider.parseGradleHashes(`${dir}/build.gradle.kts`) + expect([...hashMap.keys()]).to.not.be.empty + expect([...hashMap.keys()].every(k => k.startsWith('pkg:maven/'))).to.equal(true) + expect(hashMap.has('pkg:maven/org.jboss.logging/jboss-logging@3.5.0.Final')).to.equal(true) + + // And end-to-end, that resolved transitive dependency carries its hash in the stack SBOM + let sbom = JSON.parse(provider.provideStack(`${dir}/build.gradle.kts`).content) + let comp = sbom.components.find(c => c.name === 'jboss-logging' && c.version === '3.5.0.Final') + expect(comp.hashes).to.be.an('array').with.lengthOf(1) + }).timeout(10000) + + /** Degradation warning (Maven lesson #2): a summary warning is emitted when some artifacts cannot be read. */ + test('verify a warning is emitted when some resolved artifacts cannot be read', () => { + // Given an init script that points one dependency at a nonexistent file + let depTree = fs.readFileSync(`${dir}/depTree.txt`).toString() + let props = fs.readFileSync(`${dir}/gradle.properties`).toString() + let unreadable = 'io.quarkus:quarkus-hibernate-orm:2.13.5.Final' + let hashOutput = buildHashScriptOutput(depTree, coord => + (coord === unreadable ? path.join(HASH_FIXTURE_DIR, 'does-not-exist.jar') : artifactFileFor(coord))) + let provider = new Java_gradle_kotlin() + mockInvokeCommand(provider, depTree, props, hashOutput) + + // When building the SBOM, a summary warning is emitted even without TRUSTIFY_DA_DEBUG + let warn = spy(console, 'warn') + try { + provider.provideComponent(`${dir}/build.gradle.kts`, {}) + } finally { + warn.restore() + } + expect(warn.calledWithMatch(/could not be read/)).to.equal(true) + }).timeout(10000) + + /** Degradation warning (Maven lesson #2): a failing hash init script emits a warning rather than degrading silently. */ + test('verify a warning is emitted when the hash init script fails', () => { + // Given a gradle binary that throws when the hash init script is invoked + let depTree = fs.readFileSync(`${dir}/depTree.txt`).toString() + let props = fs.readFileSync(`${dir}/gradle.properties`).toString() + let provider = new Java_gradle_kotlin() + Object.getPrototypeOf(Object.getPrototypeOf(provider))._invokeCommand = function (bin, args) { + if (args.includes('daListHashes')) { + throw new Error('init script failed') + } + return getStubbedResponse(args, depTree, props) + } + + // When building the SBOM, the silent degradation is surfaced as a warning + let warn = spy(console, 'warn') + try { + provider.provideStack(`${dir}/build.gradle.kts`) + } finally { + warn.restore() + } + expect(warn.calledWithMatch(/without hashes/)).to.equal(true) + }).timeout(10000) + }); + [ "deps_with_empty_project_group" ].forEach(testCase => { @@ -93,14 +219,10 @@ suite('testing the java-gradle-kotlin data provider', () => { // load the expected list for the scenario let dependencyTreeTextContent = fs.readFileSync(`test/providers/tst_manifests/gradle/${testCase}/depTree.txt`,).toString() let gradleProperties = fs.readFileSync(`test/providers/tst_manifests/gradle/${testCase}/gradle.properties`,).toString() - let mockedExecFunction = function (bin, args) { - return getStubbedResponse(args, dependencyTreeTextContent, gradleProperties); - } let provider = new Java_gradle_kotlin() - Object.getPrototypeOf(Object.getPrototypeOf(provider))._invokeCommand = mockedExecFunction + mockInvokeCommand(provider, dependencyTreeTextContent, gradleProperties) // invoke component analysis for scenario manifest throws(() => provider.provideComponent(`test/providers/tst_manifests/gradle/${testCase}/build.gradle`, {})) }) }) }); - diff --git a/test/providers/tst_manifests/gradle/deps_with_ignore_full_specification/expected_component_sbom.json b/test/providers/tst_manifests/gradle/deps_with_ignore_full_specification/expected_component_sbom.json index ef2291f2..043b6432 100644 --- a/test/providers/tst_manifests/gradle/deps_with_ignore_full_specification/expected_component_sbom.json +++ b/test/providers/tst_manifests/gradle/deps_with_ignore_full_specification/expected_component_sbom.json @@ -1,179 +1,245 @@ { - "bomFormat": "CycloneDX", - "specVersion": "1.4", - "version": 1, - "metadata": { - "timestamp": "2023-08-07T00:00:00.000Z", - "component": { - "group": "org.acme.dbaas", - "name": "postgresql-orm-quarkus", - "version": "1.0.0-SNAPSHOT", - "purl": "pkg:maven/org.acme.dbaas/postgresql-orm-quarkus@1.0.0-SNAPSHOT", - "type": "application", - "bom-ref": "pkg:maven/org.acme.dbaas/postgresql-orm-quarkus@1.0.0-SNAPSHOT" - } - }, - "components": [ - { - "group": "io.quarkus", - "name": "quarkus-hibernate-orm", - "version": "2.13.5.Final", - "purl": "pkg:maven/io.quarkus/quarkus-hibernate-orm@2.13.5.Final", - "type": "library", - "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-hibernate-orm@2.13.5.Final" - }, - { - "group": "io.quarkus", - "name": "quarkus-agroal", - "version": "2.13.5.Final", - "purl": "pkg:maven/io.quarkus/quarkus-agroal@2.13.5.Final", - "type": "library", - "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-agroal@2.13.5.Final" - }, - { - "group": "io.quarkus", - "name": "quarkus-resteasy", - "version": "2.13.7.Final", - "purl": "pkg:maven/io.quarkus/quarkus-resteasy@2.13.7.Final", - "type": "library", - "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-resteasy@2.13.7.Final" - }, - { - "group": "io.quarkus", - "name": "quarkus-resteasy-jackson", - "version": "2.13.5.Final", - "purl": "pkg:maven/io.quarkus/quarkus-resteasy-jackson@2.13.5.Final", - "type": "library", - "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-resteasy-jackson@2.13.5.Final" - }, - { - "group": "io.quarkus", - "name": "quarkus-jdbc-postgresql", - "version": "2.13.5.Final", - "purl": "pkg:maven/io.quarkus/quarkus-jdbc-postgresql@2.13.5.Final", - "type": "library", - "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-jdbc-postgresql@2.13.5.Final" - }, - { - "group": "io.quarkus", - "name": "quarkus-vertx-http", - "version": "2.13.7.Final", - "purl": "pkg:maven/io.quarkus/quarkus-vertx-http@2.13.7.Final", - "type": "library", - "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-vertx-http@2.13.7.Final" - }, - { - "group": "io.quarkus", - "name": "quarkus-kubernetes-service-binding", - "version": "2.13.5.Final", - "purl": "pkg:maven/io.quarkus/quarkus-kubernetes-service-binding@2.13.5.Final", - "type": "library", - "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-kubernetes-service-binding@2.13.5.Final" - }, - { - "group": "io.quarkus", - "name": "quarkus-container-image-docker", - "version": "2.13.5.Final", - "purl": "pkg:maven/io.quarkus/quarkus-container-image-docker@2.13.5.Final", - "type": "library", - "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-container-image-docker@2.13.5.Final" - }, - { - "group": "jakarta.validation", - "name": "jakarta.validation-api", - "version": "2.0.2", - "purl": "pkg:maven/jakarta.validation/jakarta.validation-api@2.0.2", - "type": "library", - "scope": "required", - "bom-ref": "pkg:maven/jakarta.validation/jakarta.validation-api@2.0.2" - }, - { - "group": "io.quarkus", - "name": "quarkus-resteasy-multipart", - "version": "2.13.7.Final", - "purl": "pkg:maven/io.quarkus/quarkus-resteasy-multipart@2.13.7.Final", - "type": "library", - "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-resteasy-multipart@2.13.7.Final" - }, - { - "group": "io.quarkus", - "name": "quarkus-hibernate-orm-deployment", - "version": "2.0.2.Final", - "purl": "pkg:maven/io.quarkus/quarkus-hibernate-orm-deployment@2.0.2.Final", - "type": "library", - "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-hibernate-orm-deployment@2.0.2.Final" - } - ], - "dependencies": [ - { - "ref": "pkg:maven/org.acme.dbaas/postgresql-orm-quarkus@1.0.0-SNAPSHOT", - "dependsOn": [ - "pkg:maven/io.quarkus/quarkus-hibernate-orm@2.13.5.Final", - "pkg:maven/io.quarkus/quarkus-agroal@2.13.5.Final", - "pkg:maven/io.quarkus/quarkus-resteasy@2.13.7.Final", - "pkg:maven/io.quarkus/quarkus-resteasy-jackson@2.13.5.Final", - "pkg:maven/io.quarkus/quarkus-jdbc-postgresql@2.13.5.Final", - "pkg:maven/io.quarkus/quarkus-vertx-http@2.13.7.Final", - "pkg:maven/io.quarkus/quarkus-kubernetes-service-binding@2.13.5.Final", - "pkg:maven/io.quarkus/quarkus-container-image-docker@2.13.5.Final", - "pkg:maven/jakarta.validation/jakarta.validation-api@2.0.2", - "pkg:maven/io.quarkus/quarkus-resteasy-multipart@2.13.7.Final", - "pkg:maven/io.quarkus/quarkus-hibernate-orm-deployment@2.0.2.Final" - ] - }, - { - "ref": "pkg:maven/io.quarkus/quarkus-hibernate-orm@2.13.5.Final", - "dependsOn": [] - }, - { - "ref": "pkg:maven/io.quarkus/quarkus-agroal@2.13.5.Final", - "dependsOn": [] - }, - { - "ref": "pkg:maven/io.quarkus/quarkus-resteasy@2.13.7.Final", - "dependsOn": [] - }, - { - "ref": "pkg:maven/io.quarkus/quarkus-resteasy-jackson@2.13.5.Final", - "dependsOn": [] - }, - { - "ref": "pkg:maven/io.quarkus/quarkus-jdbc-postgresql@2.13.5.Final", - "dependsOn": [] - }, - { - "ref": "pkg:maven/io.quarkus/quarkus-vertx-http@2.13.7.Final", - "dependsOn": [] - }, - { - "ref": "pkg:maven/io.quarkus/quarkus-kubernetes-service-binding@2.13.5.Final", - "dependsOn": [] - }, - { - "ref": "pkg:maven/io.quarkus/quarkus-container-image-docker@2.13.5.Final", - "dependsOn": [] - }, - { - "ref": "pkg:maven/jakarta.validation/jakarta.validation-api@2.0.2", - "dependsOn": [] - }, - { - "ref": "pkg:maven/io.quarkus/quarkus-resteasy-multipart@2.13.7.Final", - "dependsOn": [] - }, - { - "ref": "pkg:maven/io.quarkus/quarkus-hibernate-orm-deployment@2.0.2.Final", - "dependsOn": [] - } - ] + "bomFormat": "CycloneDX", + "specVersion": "1.4", + "version": 1, + "metadata": { + "timestamp": "2023-08-07T00:00:00.000Z", + "component": { + "group": "org.acme.dbaas", + "name": "postgresql-orm-quarkus", + "version": "1.0.0-SNAPSHOT", + "purl": "pkg:maven/org.acme.dbaas/postgresql-orm-quarkus@1.0.0-SNAPSHOT", + "type": "application", + "bom-ref": "pkg:maven/org.acme.dbaas/postgresql-orm-quarkus@1.0.0-SNAPSHOT" + } + }, + "components": [ + { + "group": "io.quarkus", + "name": "quarkus-hibernate-orm", + "version": "2.13.5.Final", + "purl": "pkg:maven/io.quarkus/quarkus-hibernate-orm@2.13.5.Final", + "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-hibernate-orm@2.13.5.Final", + "scope": "required", + "hashes": [ + { + "alg": "SHA-256", + "content": "79056c3042ee5c1bf05766340e4ae54fdde64f08036ec3e7eade6fb1c1d74375" + } + ] + }, + { + "group": "io.quarkus", + "name": "quarkus-agroal", + "version": "2.13.5.Final", + "purl": "pkg:maven/io.quarkus/quarkus-agroal@2.13.5.Final", + "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-agroal@2.13.5.Final", + "scope": "required", + "hashes": [ + { + "alg": "SHA-256", + "content": "373e7e3e0789069ac3b414658fdc8d2e78fa29ed649672443833fd61653e8239" + } + ] + }, + { + "group": "io.quarkus", + "name": "quarkus-resteasy", + "version": "2.13.7.Final", + "purl": "pkg:maven/io.quarkus/quarkus-resteasy@2.13.7.Final", + "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-resteasy@2.13.7.Final", + "scope": "required", + "hashes": [ + { + "alg": "SHA-256", + "content": "c66681b1e334d3e1b1d6b438044ac660b020371f65b9441bd195c1811ac6d651" + } + ] + }, + { + "group": "io.quarkus", + "name": "quarkus-resteasy-jackson", + "version": "2.13.5.Final", + "purl": "pkg:maven/io.quarkus/quarkus-resteasy-jackson@2.13.5.Final", + "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-resteasy-jackson@2.13.5.Final", + "scope": "required", + "hashes": [ + { + "alg": "SHA-256", + "content": "dd61825bd9a8c2f962121098870239a0200b2d71fe004b00fb572414b40d422f" + } + ] + }, + { + "group": "io.quarkus", + "name": "quarkus-jdbc-postgresql", + "version": "2.13.5.Final", + "purl": "pkg:maven/io.quarkus/quarkus-jdbc-postgresql@2.13.5.Final", + "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-jdbc-postgresql@2.13.5.Final", + "scope": "required", + "hashes": [ + { + "alg": "SHA-256", + "content": "a1af9f5bef767f20b966430723412779f71275106e66c4e80dad67d0874881d6" + } + ] + }, + { + "group": "io.quarkus", + "name": "quarkus-vertx-http", + "version": "2.13.7.Final", + "purl": "pkg:maven/io.quarkus/quarkus-vertx-http@2.13.7.Final", + "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-vertx-http@2.13.7.Final", + "scope": "required", + "hashes": [ + { + "alg": "SHA-256", + "content": "fe3e832b2816256f627f93810d609a1ff732b9ba5ef7109826a19af8b1ac7310" + } + ] + }, + { + "group": "io.quarkus", + "name": "quarkus-kubernetes-service-binding", + "version": "2.13.5.Final", + "purl": "pkg:maven/io.quarkus/quarkus-kubernetes-service-binding@2.13.5.Final", + "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-kubernetes-service-binding@2.13.5.Final", + "scope": "required", + "hashes": [ + { + "alg": "SHA-256", + "content": "33fe80f8a1666b04c4ffa621d46f3b7fbb6af343194db24e81d1ffb9065bb0b6" + } + ] + }, + { + "group": "io.quarkus", + "name": "quarkus-container-image-docker", + "version": "2.13.5.Final", + "purl": "pkg:maven/io.quarkus/quarkus-container-image-docker@2.13.5.Final", + "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-container-image-docker@2.13.5.Final", + "scope": "required", + "hashes": [ + { + "alg": "SHA-256", + "content": "340cc17319511435110f74a594c065fb8e09b4cd054054df810bbe0ff7754e16" + } + ] + }, + { + "group": "jakarta.validation", + "name": "jakarta.validation-api", + "version": "2.0.2", + "purl": "pkg:maven/jakarta.validation/jakarta.validation-api@2.0.2", + "type": "library", + "bom-ref": "pkg:maven/jakarta.validation/jakarta.validation-api@2.0.2", + "scope": "required", + "hashes": [ + { + "alg": "SHA-256", + "content": "a8c2b114508ccd20562239505b9732776d3371aaea137b265a0548f456475d06" + } + ] + }, + { + "group": "io.quarkus", + "name": "quarkus-resteasy-multipart", + "version": "2.13.7.Final", + "purl": "pkg:maven/io.quarkus/quarkus-resteasy-multipart@2.13.7.Final", + "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-resteasy-multipart@2.13.7.Final", + "scope": "required", + "hashes": [ + { + "alg": "SHA-256", + "content": "1dba08c004cdf3d1137882fb0c55b2c251d9d4c3c8597d9cdcec5e8488a6bb4c" + } + ] + }, + { + "group": "io.quarkus", + "name": "quarkus-hibernate-orm-deployment", + "version": "2.0.2.Final", + "purl": "pkg:maven/io.quarkus/quarkus-hibernate-orm-deployment@2.0.2.Final", + "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-hibernate-orm-deployment@2.0.2.Final", + "scope": "required", + "hashes": [ + { + "alg": "SHA-256", + "content": "dcdd842c6024cbc027f0e9a5374a84461243343a83c295192e6dc93d10d873d9" + } + ] + } + ], + "dependencies": [ + { + "ref": "pkg:maven/org.acme.dbaas/postgresql-orm-quarkus@1.0.0-SNAPSHOT", + "dependsOn": [ + "pkg:maven/io.quarkus/quarkus-hibernate-orm@2.13.5.Final", + "pkg:maven/io.quarkus/quarkus-agroal@2.13.5.Final", + "pkg:maven/io.quarkus/quarkus-resteasy@2.13.7.Final", + "pkg:maven/io.quarkus/quarkus-resteasy-jackson@2.13.5.Final", + "pkg:maven/io.quarkus/quarkus-jdbc-postgresql@2.13.5.Final", + "pkg:maven/io.quarkus/quarkus-vertx-http@2.13.7.Final", + "pkg:maven/io.quarkus/quarkus-kubernetes-service-binding@2.13.5.Final", + "pkg:maven/io.quarkus/quarkus-container-image-docker@2.13.5.Final", + "pkg:maven/jakarta.validation/jakarta.validation-api@2.0.2", + "pkg:maven/io.quarkus/quarkus-resteasy-multipart@2.13.7.Final", + "pkg:maven/io.quarkus/quarkus-hibernate-orm-deployment@2.0.2.Final" + ] + }, + { + "ref": "pkg:maven/io.quarkus/quarkus-hibernate-orm@2.13.5.Final", + "dependsOn": [] + }, + { + "ref": "pkg:maven/io.quarkus/quarkus-agroal@2.13.5.Final", + "dependsOn": [] + }, + { + "ref": "pkg:maven/io.quarkus/quarkus-resteasy@2.13.7.Final", + "dependsOn": [] + }, + { + "ref": "pkg:maven/io.quarkus/quarkus-resteasy-jackson@2.13.5.Final", + "dependsOn": [] + }, + { + "ref": "pkg:maven/io.quarkus/quarkus-jdbc-postgresql@2.13.5.Final", + "dependsOn": [] + }, + { + "ref": "pkg:maven/io.quarkus/quarkus-vertx-http@2.13.7.Final", + "dependsOn": [] + }, + { + "ref": "pkg:maven/io.quarkus/quarkus-kubernetes-service-binding@2.13.5.Final", + "dependsOn": [] + }, + { + "ref": "pkg:maven/io.quarkus/quarkus-container-image-docker@2.13.5.Final", + "dependsOn": [] + }, + { + "ref": "pkg:maven/jakarta.validation/jakarta.validation-api@2.0.2", + "dependsOn": [] + }, + { + "ref": "pkg:maven/io.quarkus/quarkus-resteasy-multipart@2.13.7.Final", + "dependsOn": [] + }, + { + "ref": "pkg:maven/io.quarkus/quarkus-hibernate-orm-deployment@2.0.2.Final", + "dependsOn": [] + } + ] } diff --git a/test/providers/tst_manifests/gradle/deps_with_ignore_full_specification/expected_stack_sbom.json b/test/providers/tst_manifests/gradle/deps_with_ignore_full_specification/expected_stack_sbom.json index 809da96f..547e9430 100644 --- a/test/providers/tst_manifests/gradle/deps_with_ignore_full_specification/expected_stack_sbom.json +++ b/test/providers/tst_manifests/gradle/deps_with_ignore_full_specification/expected_stack_sbom.json @@ -20,8 +20,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-hibernate-orm@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-hibernate-orm@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-hibernate-orm@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "79056c3042ee5c1bf05766340e4ae54fdde64f08036ec3e7eade6fb1c1d74375" + } + ] }, { "group": "io.quarkus", @@ -29,8 +35,14 @@ "version": "2.13.7.Final", "purl": "pkg:maven/io.quarkus/quarkus-core@2.13.7.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-core@2.13.7.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-core@2.13.7.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "e5d56e2e002acbfa172f6b3c363de6de6cd6866a2148692ed4b68fa1e3e2cb54" + } + ] }, { "group": "jakarta.annotation", @@ -38,8 +50,14 @@ "version": "1.3.5", "purl": "pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5", "type": "library", + "bom-ref": "pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5", "scope": "required", - "bom-ref": "pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5" + "hashes": [ + { + "alg": "SHA-256", + "content": "d3b4e3e5413539c37eeb16d0590fad710ceafd09bf8a044e72e0d3b21e461fc3" + } + ] }, { "group": "jakarta.enterprise", @@ -47,8 +65,14 @@ "version": "2.0.2", "purl": "pkg:maven/jakarta.enterprise/jakarta.enterprise.cdi-api@2.0.2", "type": "library", + "bom-ref": "pkg:maven/jakarta.enterprise/jakarta.enterprise.cdi-api@2.0.2", "scope": "required", - "bom-ref": "pkg:maven/jakarta.enterprise/jakarta.enterprise.cdi-api@2.0.2" + "hashes": [ + { + "alg": "SHA-256", + "content": "c1f2010bdd10b561a178248098cff63cd0fba8772d8d1552b9732bc0ab09da1a" + } + ] }, { "group": "jakarta.el", @@ -56,8 +80,14 @@ "version": "3.0.3", "purl": "pkg:maven/jakarta.el/jakarta.el-api@3.0.3", "type": "library", + "bom-ref": "pkg:maven/jakarta.el/jakarta.el-api@3.0.3", "scope": "required", - "bom-ref": "pkg:maven/jakarta.el/jakarta.el-api@3.0.3" + "hashes": [ + { + "alg": "SHA-256", + "content": "142a2bb7295c9f320601a22c1222fe29232663b0e154ceeffd4002b4101996d0" + } + ] }, { "group": "jakarta.interceptor", @@ -65,8 +95,14 @@ "version": "1.2.5", "purl": "pkg:maven/jakarta.interceptor/jakarta.interceptor-api@1.2.5", "type": "library", + "bom-ref": "pkg:maven/jakarta.interceptor/jakarta.interceptor-api@1.2.5", "scope": "required", - "bom-ref": "pkg:maven/jakarta.interceptor/jakarta.interceptor-api@1.2.5" + "hashes": [ + { + "alg": "SHA-256", + "content": "f5e24fb964cf09f358d61a3ccb79f4b5c1e5c9aa478cd61088aa64bb5b23b2a1" + } + ] }, { "group": "jakarta.ejb", @@ -74,8 +110,14 @@ "version": "3.2.6", "purl": "pkg:maven/jakarta.ejb/jakarta.ejb-api@3.2.6", "type": "library", + "bom-ref": "pkg:maven/jakarta.ejb/jakarta.ejb-api@3.2.6", "scope": "required", - "bom-ref": "pkg:maven/jakarta.ejb/jakarta.ejb-api@3.2.6" + "hashes": [ + { + "alg": "SHA-256", + "content": "b22e27d3035682fe2b0f4d319c09315ad09af845a5e529859dcc0f7f32448c6b" + } + ] }, { "group": "jakarta.transaction", @@ -83,8 +125,14 @@ "version": "1.3.3", "purl": "pkg:maven/jakarta.transaction/jakarta.transaction-api@1.3.3", "type": "library", + "bom-ref": "pkg:maven/jakarta.transaction/jakarta.transaction-api@1.3.3", "scope": "required", - "bom-ref": "pkg:maven/jakarta.transaction/jakarta.transaction-api@1.3.3" + "hashes": [ + { + "alg": "SHA-256", + "content": "2f345438752720e31257607bb2e2b77bc1ca39a539dc75ee3fceced9b77d39fb" + } + ] }, { "group": "jakarta.inject", @@ -92,8 +140,14 @@ "version": "1.0", "purl": "pkg:maven/jakarta.inject/jakarta.inject-api@1.0", "type": "library", + "bom-ref": "pkg:maven/jakarta.inject/jakarta.inject-api@1.0", "scope": "required", - "bom-ref": "pkg:maven/jakarta.inject/jakarta.inject-api@1.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "b98d47614ffb494c7f35d301cdfa39a26ea53a83fc2bf94af9c634caf0b33bca" + } + ] }, { "group": "io.quarkus", @@ -101,8 +155,14 @@ "version": "2.13.7.Final", "purl": "pkg:maven/io.quarkus/quarkus-ide-launcher@2.13.7.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-ide-launcher@2.13.7.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-ide-launcher@2.13.7.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "85560da8e6597dbaed3d72df52a55a924fd1ad268010a20de7887f4f7cf98b44" + } + ] }, { "group": "io.quarkus", @@ -110,8 +170,14 @@ "version": "2.13.7.Final", "purl": "pkg:maven/io.quarkus/quarkus-development-mode-spi@2.13.7.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-development-mode-spi@2.13.7.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-development-mode-spi@2.13.7.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "f0857d2e232938c0bed4eed79cb00d282c0a770f0df569f402c208e89074c771" + } + ] }, { "group": "io.smallrye.config", @@ -119,8 +185,14 @@ "version": "2.12.3", "purl": "pkg:maven/io.smallrye.config/smallrye-config@2.12.3", "type": "library", + "bom-ref": "pkg:maven/io.smallrye.config/smallrye-config@2.12.3", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye.config/smallrye-config@2.12.3" + "hashes": [ + { + "alg": "SHA-256", + "content": "a233ee95ba07a81989382756330fdc5ea07923d02ffbace24fd541279c612123" + } + ] }, { "group": "io.smallrye.config", @@ -128,8 +200,14 @@ "version": "2.12.3", "purl": "pkg:maven/io.smallrye.config/smallrye-config-core@2.12.3", "type": "library", + "bom-ref": "pkg:maven/io.smallrye.config/smallrye-config-core@2.12.3", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye.config/smallrye-config-core@2.12.3" + "hashes": [ + { + "alg": "SHA-256", + "content": "ace5818b585aa679061053dbdecc382f0c64cf22f533e470adc5341cee067e96" + } + ] }, { "group": "org.eclipse.microprofile.config", @@ -137,8 +215,14 @@ "version": "2.0.1", "purl": "pkg:maven/org.eclipse.microprofile.config/microprofile-config-api@2.0.1", "type": "library", + "bom-ref": "pkg:maven/org.eclipse.microprofile.config/microprofile-config-api@2.0.1", "scope": "required", - "bom-ref": "pkg:maven/org.eclipse.microprofile.config/microprofile-config-api@2.0.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "5ce209fecc8c1cca24721da1b49bfe9b7919d35821915a4c03b40719619a3f5f" + } + ] }, { "group": "io.smallrye.common", @@ -146,8 +230,14 @@ "version": "1.13.1", "purl": "pkg:maven/io.smallrye.common/smallrye-common-annotation@1.13.1", "type": "library", + "bom-ref": "pkg:maven/io.smallrye.common/smallrye-common-annotation@1.13.1", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye.common/smallrye-common-annotation@1.13.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "2782202c634bf0ccd3c321c1c72b07f05bfc36eb72b102b3a43da7bfbacf0121" + } + ] }, { "group": "io.smallrye.common", @@ -155,8 +245,14 @@ "version": "1.13.1", "purl": "pkg:maven/io.smallrye.common/smallrye-common-expression@1.13.1", "type": "library", + "bom-ref": "pkg:maven/io.smallrye.common/smallrye-common-expression@1.13.1", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye.common/smallrye-common-expression@1.13.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "e0407b8b7d035aa501807a02c806d450dbe72d58da9fd497f0ab274db34ae699" + } + ] }, { "group": "io.smallrye.common", @@ -164,8 +260,14 @@ "version": "1.13.1", "purl": "pkg:maven/io.smallrye.common/smallrye-common-function@1.13.1", "type": "library", + "bom-ref": "pkg:maven/io.smallrye.common/smallrye-common-function@1.13.1", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye.common/smallrye-common-function@1.13.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "93b16012e6a57df4f32f984a678dc3282adab53cf43205766237ff2c955faa6b" + } + ] }, { "group": "io.smallrye.common", @@ -173,8 +275,14 @@ "version": "1.13.1", "purl": "pkg:maven/io.smallrye.common/smallrye-common-constraint@1.13.1", "type": "library", + "bom-ref": "pkg:maven/io.smallrye.common/smallrye-common-constraint@1.13.1", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye.common/smallrye-common-constraint@1.13.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "1c93cad19cc638b8471fa31fc1c8c6fc48f1d8096351676ce12712f246b54010" + } + ] }, { "group": "org.jboss.logging", @@ -182,8 +290,14 @@ "version": "3.5.0.Final", "purl": "pkg:maven/org.jboss.logging/jboss-logging@3.5.0.Final", "type": "library", + "bom-ref": "pkg:maven/org.jboss.logging/jboss-logging@3.5.0.Final", "scope": "required", - "bom-ref": "pkg:maven/org.jboss.logging/jboss-logging@3.5.0.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "549e1e9180f0ac2d48f7bfca604da808cb1529000ac56e2028fb89d2a840f5ae" + } + ] }, { "group": "io.smallrye.common", @@ -191,8 +305,14 @@ "version": "1.13.1", "purl": "pkg:maven/io.smallrye.common/smallrye-common-classloader@1.13.1", "type": "library", + "bom-ref": "pkg:maven/io.smallrye.common/smallrye-common-classloader@1.13.1", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye.common/smallrye-common-classloader@1.13.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "305af32f28575800967816e5293c86759732c8e04714055eeda31de80d4d9e6c" + } + ] }, { "group": "org.ow2.asm", @@ -200,8 +320,14 @@ "version": "9.3", "purl": "pkg:maven/org.ow2.asm/asm@9.3", "type": "library", + "bom-ref": "pkg:maven/org.ow2.asm/asm@9.3", "scope": "required", - "bom-ref": "pkg:maven/org.ow2.asm/asm@9.3" + "hashes": [ + { + "alg": "SHA-256", + "content": "18551e6bfcf4ff5235dab8c0fd7f37f08ab1c753326dbcbe01f104eb76ac28b9" + } + ] }, { "group": "io.smallrye.config", @@ -209,8 +335,14 @@ "version": "2.12.3", "purl": "pkg:maven/io.smallrye.config/smallrye-config-common@2.12.3", "type": "library", + "bom-ref": "pkg:maven/io.smallrye.config/smallrye-config-common@2.12.3", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye.config/smallrye-config-common@2.12.3" + "hashes": [ + { + "alg": "SHA-256", + "content": "2aab40fa8bcd23b4f21f3c8de6dba646e2126519ff5b3d09131c50d33eaed086" + } + ] }, { "group": "org.jboss.logmanager", @@ -218,8 +350,14 @@ "version": "1.0.10", "purl": "pkg:maven/org.jboss.logmanager/jboss-logmanager-embedded@1.0.10", "type": "library", + "bom-ref": "pkg:maven/org.jboss.logmanager/jboss-logmanager-embedded@1.0.10", "scope": "required", - "bom-ref": "pkg:maven/org.jboss.logmanager/jboss-logmanager-embedded@1.0.10" + "hashes": [ + { + "alg": "SHA-256", + "content": "25b39888997956807ac167a762931d52b8d3cd07b4394a7b8a60f42de8aee855" + } + ] }, { "group": "org.wildfly.common", @@ -227,8 +365,14 @@ "version": "1.5.4.Final-format-001", "purl": "pkg:maven/org.wildfly.common/wildfly-common@1.5.4.Final-format-001", "type": "library", + "bom-ref": "pkg:maven/org.wildfly.common/wildfly-common@1.5.4.Final-format-001", "scope": "required", - "bom-ref": "pkg:maven/org.wildfly.common/wildfly-common@1.5.4.Final-format-001" + "hashes": [ + { + "alg": "SHA-256", + "content": "0c5989fadb7f0f9f2f7707fa10028ba7eac94e555a5b32f680a4d062c2bcfe9a" + } + ] }, { "group": "org.jboss.logging", @@ -236,8 +380,14 @@ "version": "2.2.1.Final", "purl": "pkg:maven/org.jboss.logging/jboss-logging-annotations@2.2.1.Final", "type": "library", + "bom-ref": "pkg:maven/org.jboss.logging/jboss-logging-annotations@2.2.1.Final", "scope": "required", - "bom-ref": "pkg:maven/org.jboss.logging/jboss-logging-annotations@2.2.1.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "f3d0fca0b72cf53fcab6fd6948a40f80eae5e28bda883ee29a055fd098e47dc8" + } + ] }, { "group": "org.jboss.threads", @@ -245,8 +395,14 @@ "version": "3.4.3.Final", "purl": "pkg:maven/org.jboss.threads/jboss-threads@3.4.3.Final", "type": "library", + "bom-ref": "pkg:maven/org.jboss.threads/jboss-threads@3.4.3.Final", "scope": "required", - "bom-ref": "pkg:maven/org.jboss.threads/jboss-threads@3.4.3.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "ec8d6bbcc85fa84436055bf2809a97889c472ef77a055ed9636e70100f3c7439" + } + ] }, { "group": "org.slf4j", @@ -254,8 +410,14 @@ "version": "1.7.36", "purl": "pkg:maven/org.slf4j/slf4j-api@1.7.36", "type": "library", + "bom-ref": "pkg:maven/org.slf4j/slf4j-api@1.7.36", "scope": "required", - "bom-ref": "pkg:maven/org.slf4j/slf4j-api@1.7.36" + "hashes": [ + { + "alg": "SHA-256", + "content": "c0a772724ba038f0fcdeb34db4f3fb43693f6152101b1e7e7a1ac35a9cb4cec9" + } + ] }, { "group": "org.jboss.slf4j", @@ -263,8 +425,14 @@ "version": "1.2.0.Final", "purl": "pkg:maven/org.jboss.slf4j/slf4j-jboss-logmanager@1.2.0.Final", "type": "library", + "bom-ref": "pkg:maven/org.jboss.slf4j/slf4j-jboss-logmanager@1.2.0.Final", "scope": "required", - "bom-ref": "pkg:maven/org.jboss.slf4j/slf4j-jboss-logmanager@1.2.0.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "8c5cc65839e939694ca1c9b27ff8978d9a79a8a667c3e1ba414db7a221277858" + } + ] }, { "group": "org.graalvm.sdk", @@ -272,8 +440,14 @@ "version": "22.3.0", "purl": "pkg:maven/org.graalvm.sdk/graal-sdk@22.3.0", "type": "library", + "bom-ref": "pkg:maven/org.graalvm.sdk/graal-sdk@22.3.0", "scope": "required", - "bom-ref": "pkg:maven/org.graalvm.sdk/graal-sdk@22.3.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "b297b3cdc2bd9c55cc6ea3648230cf7c5b656be4f85c2291ea08404ffb7aeb0d" + } + ] }, { "group": "io.quarkus", @@ -281,8 +455,14 @@ "version": "2.13.7.Final", "purl": "pkg:maven/io.quarkus/quarkus-bootstrap-runner@2.13.7.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-bootstrap-runner@2.13.7.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-bootstrap-runner@2.13.7.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "67c8d35e46b532caa58e1f6653d4f342ad21f397fd1924ca14f3d957f224ae36" + } + ] }, { "group": "io.smallrye.common", @@ -290,8 +470,14 @@ "version": "1.13.1", "purl": "pkg:maven/io.smallrye.common/smallrye-common-io@1.13.1", "type": "library", + "bom-ref": "pkg:maven/io.smallrye.common/smallrye-common-io@1.13.1", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye.common/smallrye-common-io@1.13.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "fe329b6f953d309a1f9e0929d69c60e57e3be2120a60ca1790e6cb0e428d0001" + } + ] }, { "group": "io.github.crac", @@ -299,8 +485,14 @@ "version": "0.1.1", "purl": "pkg:maven/io.github.crac/org-crac@0.1.1", "type": "library", + "bom-ref": "pkg:maven/io.github.crac/org-crac@0.1.1", "scope": "required", - "bom-ref": "pkg:maven/io.github.crac/org-crac@0.1.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "e3332dab2a0fafb59c8f9c3e97af2578c8543577e7c2a8131c98aeb4e9f6446a" + } + ] }, { "group": "io.quarkus", @@ -308,8 +500,14 @@ "version": "0.0.9", "purl": "pkg:maven/io.quarkus/quarkus-fs-util@0.0.9", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-fs-util@0.0.9", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-fs-util@0.0.9" + "hashes": [ + { + "alg": "SHA-256", + "content": "a6e06c973540641496c1e843bc32e0ac5a8a520ba64bc822144e34a48a63ac98" + } + ] }, { "group": "io.quarkus", @@ -317,8 +515,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-agroal@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-agroal@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-agroal@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "373e7e3e0789069ac3b414658fdc8d2e78fa29ed649672443833fd61653e8239" + } + ] }, { "group": "io.quarkus", @@ -326,8 +530,14 @@ "version": "2.13.7.Final", "purl": "pkg:maven/io.quarkus/quarkus-arc@2.13.7.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-arc@2.13.7.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-arc@2.13.7.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "38a15d0b22b6aae94eed3cae8da82b0b6260df68cad90fff31501701ad947aed" + } + ] }, { "group": "io.quarkus.arc", @@ -335,8 +545,14 @@ "version": "2.13.7.Final", "purl": "pkg:maven/io.quarkus.arc/arc@2.13.7.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus.arc/arc@2.13.7.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus.arc/arc@2.13.7.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "999b6c98b4c2a0fd153e869cc72b210aa370bf82b0a0ce0a0a967dca2e95a043" + } + ] }, { "group": "io.smallrye.reactive", @@ -344,8 +560,14 @@ "version": "1.7.0", "purl": "pkg:maven/io.smallrye.reactive/mutiny@1.7.0", "type": "library", + "bom-ref": "pkg:maven/io.smallrye.reactive/mutiny@1.7.0", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye.reactive/mutiny@1.7.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "7b95809b54bfb315f22fc369a417377017f332217fbeed0d19616596ea58e99e" + } + ] }, { "group": "org.reactivestreams", @@ -353,8 +575,14 @@ "version": "1.0.3", "purl": "pkg:maven/org.reactivestreams/reactive-streams@1.0.3", "type": "library", + "bom-ref": "pkg:maven/org.reactivestreams/reactive-streams@1.0.3", "scope": "required", - "bom-ref": "pkg:maven/org.reactivestreams/reactive-streams@1.0.3" + "hashes": [ + { + "alg": "SHA-256", + "content": "cc80acd6a1ad07a28990f997157d729c38f99efccd20158515bdb52d1c50f16c" + } + ] }, { "group": "org.eclipse.microprofile.context-propagation", @@ -362,8 +590,14 @@ "version": "1.3", "purl": "pkg:maven/org.eclipse.microprofile.context-propagation/microprofile-context-propagation-api@1.3", "type": "library", + "bom-ref": "pkg:maven/org.eclipse.microprofile.context-propagation/microprofile-context-propagation-api@1.3", "scope": "required", - "bom-ref": "pkg:maven/org.eclipse.microprofile.context-propagation/microprofile-context-propagation-api@1.3" + "hashes": [ + { + "alg": "SHA-256", + "content": "039a0b83a06108636482d2f9bbbc894ea6c6c0750034be7c486e06bacc559d8c" + } + ] }, { "group": "io.quarkus", @@ -371,8 +605,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-datasource@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-datasource@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-datasource@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "889993db8ee5d85cde8032b7dac65f73b38307d5bf5608a321b56be0f10664f2" + } + ] }, { "group": "io.quarkus", @@ -380,8 +620,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-datasource-common@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-datasource-common@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-datasource-common@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "29771fd757c97a980e79826669d289393b08686e30ecaeb3d39bdd7c227984c6" + } + ] }, { "group": "io.quarkus", @@ -389,8 +635,14 @@ "version": "2.13.7.Final", "purl": "pkg:maven/io.quarkus/quarkus-credentials@2.13.7.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-credentials@2.13.7.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-credentials@2.13.7.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "fecd259b0f869c6e82a5c9ef524d196a984678c70fa9b4caac04a0f6ba93a901" + } + ] }, { "group": "io.quarkus", @@ -398,8 +650,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-narayana-jta@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-narayana-jta@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-narayana-jta@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "1ef954c2c9c885ec215806871643215778c6daeb5a999a55d2ded512db72f881" + } + ] }, { "group": "io.quarkus", @@ -407,8 +665,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-transaction-annotations@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-transaction-annotations@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-transaction-annotations@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "c7a9ab990db0a2572e847141b7bb56f08172e974e5bae5d7ca102e4445dac0b4" + } + ] }, { "group": "io.quarkus", @@ -416,8 +680,14 @@ "version": "2.13.7.Final", "purl": "pkg:maven/io.quarkus/quarkus-mutiny@2.13.7.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-mutiny@2.13.7.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-mutiny@2.13.7.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "3f4d56e81c596c2d6cebe06f1d9e5ae9089ee1520aa17e579e18c55fe8df53b8" + } + ] }, { "group": "io.quarkus", @@ -425,8 +695,14 @@ "version": "2.13.7.Final", "purl": "pkg:maven/io.quarkus/quarkus-smallrye-context-propagation@2.13.7.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-smallrye-context-propagation@2.13.7.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-smallrye-context-propagation@2.13.7.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "49df5b0db2e56171209b12baab05c1fe7bdd63370502811b7d23dc15b7eacc66" + } + ] }, { "group": "io.smallrye", @@ -434,8 +710,14 @@ "version": "1.2.2", "purl": "pkg:maven/io.smallrye/smallrye-context-propagation@1.2.2", "type": "library", + "bom-ref": "pkg:maven/io.smallrye/smallrye-context-propagation@1.2.2", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye/smallrye-context-propagation@1.2.2" + "hashes": [ + { + "alg": "SHA-256", + "content": "bc1ee770918d8d76b47bc6f47d312f3159e8c698f6673d6c712fe4ce0ec982e8" + } + ] }, { "group": "io.smallrye", @@ -443,8 +725,14 @@ "version": "1.2.2", "purl": "pkg:maven/io.smallrye/smallrye-context-propagation-api@1.2.2", "type": "library", + "bom-ref": "pkg:maven/io.smallrye/smallrye-context-propagation-api@1.2.2", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye/smallrye-context-propagation-api@1.2.2" + "hashes": [ + { + "alg": "SHA-256", + "content": "4d39df66447b05d938c9a6b8eb147d93680987dc1032a2d8c1dcb083710fb79a" + } + ] }, { "group": "io.smallrye", @@ -452,8 +740,14 @@ "version": "1.2.2", "purl": "pkg:maven/io.smallrye/smallrye-context-propagation-storage@1.2.2", "type": "library", + "bom-ref": "pkg:maven/io.smallrye/smallrye-context-propagation-storage@1.2.2", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye/smallrye-context-propagation-storage@1.2.2" + "hashes": [ + { + "alg": "SHA-256", + "content": "1bf3b19038fec5a110a82adb6c2bf8b8dc2234126281a36e423daf50a9e23a39" + } + ] }, { "group": "io.smallrye.reactive", @@ -461,8 +755,14 @@ "version": "1.7.0", "purl": "pkg:maven/io.smallrye.reactive/mutiny-smallrye-context-propagation@1.7.0", "type": "library", + "bom-ref": "pkg:maven/io.smallrye.reactive/mutiny-smallrye-context-propagation@1.7.0", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye.reactive/mutiny-smallrye-context-propagation@1.7.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "67ea7a1aa0d27ffc2d436ad05e745003ddc6d33f0c5dde4507018d6d03e12ed5" + } + ] }, { "group": "io.smallrye", @@ -470,8 +770,14 @@ "version": "1.2.2", "purl": "pkg:maven/io.smallrye/smallrye-context-propagation-jta@1.2.2", "type": "library", + "bom-ref": "pkg:maven/io.smallrye/smallrye-context-propagation-jta@1.2.2", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye/smallrye-context-propagation-jta@1.2.2" + "hashes": [ + { + "alg": "SHA-256", + "content": "6e32035875ad87b392709587a6faff6d8853b38d6a249082134f0822c3898e79" + } + ] }, { "group": "io.smallrye.reactive", @@ -479,8 +785,14 @@ "version": "2.7.0", "purl": "pkg:maven/io.smallrye.reactive/smallrye-reactive-converter-api@2.7.0", "type": "library", + "bom-ref": "pkg:maven/io.smallrye.reactive/smallrye-reactive-converter-api@2.7.0", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye.reactive/smallrye-reactive-converter-api@2.7.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "c604e090dc282423e9084b6339bf9d1cffde53d7d189bf6f50ae4640e162b611" + } + ] }, { "group": "io.smallrye.reactive", @@ -488,8 +800,14 @@ "version": "2.7.0", "purl": "pkg:maven/io.smallrye.reactive/smallrye-reactive-converter-mutiny@2.7.0", "type": "library", + "bom-ref": "pkg:maven/io.smallrye.reactive/smallrye-reactive-converter-mutiny@2.7.0", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye.reactive/smallrye-reactive-converter-mutiny@2.7.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "b01de8b2211277e4f7d03a232752b7dd9cd6d9db9270f0491e1b8e8deb24c16a" + } + ] }, { "group": "org.jboss.narayana.jta", @@ -497,8 +815,14 @@ "version": "5.13.1.Alpha1", "purl": "pkg:maven/org.jboss.narayana.jta/narayana-jta@5.13.1.Alpha1", "type": "library", + "bom-ref": "pkg:maven/org.jboss.narayana.jta/narayana-jta@5.13.1.Alpha1", "scope": "required", - "bom-ref": "pkg:maven/org.jboss.narayana.jta/narayana-jta@5.13.1.Alpha1" + "hashes": [ + { + "alg": "SHA-256", + "content": "3c601dda329f76088be0a0e67a64d3326409fc57ca801ccd129080b14bab6726" + } + ] }, { "group": "org.jboss", @@ -506,8 +830,14 @@ "version": "7.6.1.Final", "purl": "pkg:maven/org.jboss/jboss-transaction-spi@7.6.1.Final", "type": "library", + "bom-ref": "pkg:maven/org.jboss/jboss-transaction-spi@7.6.1.Final", "scope": "required", - "bom-ref": "pkg:maven/org.jboss/jboss-transaction-spi@7.6.1.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "d92fee6cac2a06f468572fde42b64758d8ecb1fcef57825f0d9b8514ba098dd4" + } + ] }, { "group": "org.jboss.spec.javax.resource", @@ -515,8 +845,14 @@ "version": "1.0.0.Final", "purl": "pkg:maven/org.jboss.spec.javax.resource/jboss-connector-api_1.7_spec@1.0.0.Final", "type": "library", + "bom-ref": "pkg:maven/org.jboss.spec.javax.resource/jboss-connector-api_1.7_spec@1.0.0.Final", "scope": "required", - "bom-ref": "pkg:maven/org.jboss.spec.javax.resource/jboss-connector-api_1.7_spec@1.0.0.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "80046bf02c6afd0cc7cb22ee6b7a322833c007f5fa4a953eb833308c7c807592" + } + ] }, { "group": "org.jboss.narayana.jts", @@ -524,8 +860,14 @@ "version": "5.13.1.Alpha1", "purl": "pkg:maven/org.jboss.narayana.jts/narayana-jts-integration@5.13.1.Alpha1", "type": "library", + "bom-ref": "pkg:maven/org.jboss.narayana.jts/narayana-jts-integration@5.13.1.Alpha1", "scope": "required", - "bom-ref": "pkg:maven/org.jboss.narayana.jts/narayana-jts-integration@5.13.1.Alpha1" + "hashes": [ + { + "alg": "SHA-256", + "content": "92411cde8dff5026a9ef0cf26a46bcfd09bce1e208daee49b0d57fabd8352e33" + } + ] }, { "group": "io.agroal", @@ -533,8 +875,14 @@ "version": "1.16", "purl": "pkg:maven/io.agroal/agroal-api@1.16", "type": "library", + "bom-ref": "pkg:maven/io.agroal/agroal-api@1.16", "scope": "required", - "bom-ref": "pkg:maven/io.agroal/agroal-api@1.16" + "hashes": [ + { + "alg": "SHA-256", + "content": "121caa97e838680277dc196354266a3697861238070a235366750f356e226073" + } + ] }, { "group": "io.agroal", @@ -542,8 +890,14 @@ "version": "1.16", "purl": "pkg:maven/io.agroal/agroal-narayana@1.16", "type": "library", + "bom-ref": "pkg:maven/io.agroal/agroal-narayana@1.16", "scope": "required", - "bom-ref": "pkg:maven/io.agroal/agroal-narayana@1.16" + "hashes": [ + { + "alg": "SHA-256", + "content": "27685faad7aab4327103ddbbadf01528a034a67938afd316076a57340421511e" + } + ] }, { "group": "io.agroal", @@ -551,8 +905,14 @@ "version": "1.16", "purl": "pkg:maven/io.agroal/agroal-pool@1.16", "type": "library", + "bom-ref": "pkg:maven/io.agroal/agroal-pool@1.16", "scope": "required", - "bom-ref": "pkg:maven/io.agroal/agroal-pool@1.16" + "hashes": [ + { + "alg": "SHA-256", + "content": "095b8d8424ae92298d3795f619c4a5210026befea210c721df2517cd8d8f8529" + } + ] }, { "group": "org.hibernate", @@ -560,8 +920,14 @@ "version": "5.6.14.Final", "purl": "pkg:maven/org.hibernate/hibernate-core@5.6.14.Final", "type": "library", + "bom-ref": "pkg:maven/org.hibernate/hibernate-core@5.6.14.Final", "scope": "required", - "bom-ref": "pkg:maven/org.hibernate/hibernate-core@5.6.14.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "147319ec25f86ba8f6263601c57cfd98badfea32e6312fee929e8c2207cda5cd" + } + ] }, { "group": "net.bytebuddy", @@ -569,8 +935,14 @@ "version": "1.12.18", "purl": "pkg:maven/net.bytebuddy/byte-buddy@1.12.18", "type": "library", + "bom-ref": "pkg:maven/net.bytebuddy/byte-buddy@1.12.18", "scope": "required", - "bom-ref": "pkg:maven/net.bytebuddy/byte-buddy@1.12.18" + "hashes": [ + { + "alg": "SHA-256", + "content": "dfda1288566e62724c078947c6d6439e5c0150342b5177c8ac160019f1870237" + } + ] }, { "group": "antlr", @@ -578,8 +950,14 @@ "version": "2.7.7", "purl": "pkg:maven/antlr/antlr@2.7.7", "type": "library", + "bom-ref": "pkg:maven/antlr/antlr@2.7.7", "scope": "required", - "bom-ref": "pkg:maven/antlr/antlr@2.7.7" + "hashes": [ + { + "alg": "SHA-256", + "content": "d0c1c8265545cb28554d2131d57a5b50bbba22d138f9610aef4b42bb68270b7e" + } + ] }, { "group": "com.fasterxml", @@ -587,8 +965,14 @@ "version": "1.5.1", "purl": "pkg:maven/com.fasterxml/classmate@1.5.1", "type": "library", + "bom-ref": "pkg:maven/com.fasterxml/classmate@1.5.1", "scope": "required", - "bom-ref": "pkg:maven/com.fasterxml/classmate@1.5.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "9b9186b8fd7ff56a09a1cb35c441d284d914dcda0697337ce600550c0bffad52" + } + ] }, { "group": "org.hibernate.common", @@ -596,8 +980,14 @@ "version": "5.1.2.Final", "purl": "pkg:maven/org.hibernate.common/hibernate-commons-annotations@5.1.2.Final", "type": "library", + "bom-ref": "pkg:maven/org.hibernate.common/hibernate-commons-annotations@5.1.2.Final", "scope": "required", - "bom-ref": "pkg:maven/org.hibernate.common/hibernate-commons-annotations@5.1.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "1fbc8d27ab1039b06f965584d92883cdbfebe843b0f4bc922a45c527daf0a225" + } + ] }, { "group": "org.hibernate", @@ -605,8 +995,14 @@ "version": "5.6.14.Final", "purl": "pkg:maven/org.hibernate/hibernate-graalvm@5.6.14.Final", "type": "library", + "bom-ref": "pkg:maven/org.hibernate/hibernate-graalvm@5.6.14.Final", "scope": "required", - "bom-ref": "pkg:maven/org.hibernate/hibernate-graalvm@5.6.14.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "5bdd2641a33b6e03a155fced61df9f0f6f4b67cbd679077bdb2acae7cbd97b97" + } + ] }, { "group": "org.glassfish.jaxb", @@ -614,8 +1010,14 @@ "version": "2.3.3-b02", "purl": "pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.3-b02", "type": "library", + "bom-ref": "pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.3-b02", "scope": "required", - "bom-ref": "pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.3-b02" + "hashes": [ + { + "alg": "SHA-256", + "content": "526ad93ddebabbb64cbff4447adc32af34b3b38fcd5ce923d5c547febaa397e3" + } + ] }, { "group": "org.glassfish.jaxb", @@ -623,8 +1025,14 @@ "version": "2.3.3-b02", "purl": "pkg:maven/org.glassfish.jaxb/txw2@2.3.3-b02", "type": "library", + "bom-ref": "pkg:maven/org.glassfish.jaxb/txw2@2.3.3-b02", "scope": "required", - "bom-ref": "pkg:maven/org.glassfish.jaxb/txw2@2.3.3-b02" + "hashes": [ + { + "alg": "SHA-256", + "content": "a9608e9e0040fd437374fb263f44330c140ceea49c75e970a4ea7c1be6b75c22" + } + ] }, { "group": "com.sun.istack", @@ -632,8 +1040,14 @@ "version": "3.0.10", "purl": "pkg:maven/com.sun.istack/istack-commons-runtime@3.0.10", "type": "library", + "bom-ref": "pkg:maven/com.sun.istack/istack-commons-runtime@3.0.10", "scope": "required", - "bom-ref": "pkg:maven/com.sun.istack/istack-commons-runtime@3.0.10" + "hashes": [ + { + "alg": "SHA-256", + "content": "3a088e4af8f0656e8ad8e5dce8d122d7eb616cdec7cf3c6550c6308e97bec587" + } + ] }, { "group": "com.sun.activation", @@ -641,8 +1055,14 @@ "version": "1.2.1", "purl": "pkg:maven/com.sun.activation/jakarta.activation@1.2.1", "type": "library", + "bom-ref": "pkg:maven/com.sun.activation/jakarta.activation@1.2.1", "scope": "required", - "bom-ref": "pkg:maven/com.sun.activation/jakarta.activation@1.2.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "b6895348b68b602bf4c272fc3054e7e1cc95a4c691ba11719e48c0f126b6c1e6" + } + ] }, { "group": "org.jboss.spec.javax.xml.bind", @@ -650,8 +1070,14 @@ "version": "2.0.0.Final", "purl": "pkg:maven/org.jboss.spec.javax.xml.bind/jboss-jaxb-api_2.3_spec@2.0.0.Final", "type": "library", + "bom-ref": "pkg:maven/org.jboss.spec.javax.xml.bind/jboss-jaxb-api_2.3_spec@2.0.0.Final", "scope": "required", - "bom-ref": "pkg:maven/org.jboss.spec.javax.xml.bind/jboss-jaxb-api_2.3_spec@2.0.0.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "cee99591d58a9c9110ca9f3319df0c984ef0914b09a580efcb24f75715f7eb53" + } + ] }, { "group": "jakarta.persistence", @@ -659,8 +1085,14 @@ "version": "2.2.3", "purl": "pkg:maven/jakarta.persistence/jakarta.persistence-api@2.2.3", "type": "library", + "bom-ref": "pkg:maven/jakarta.persistence/jakarta.persistence-api@2.2.3", "scope": "required", - "bom-ref": "pkg:maven/jakarta.persistence/jakarta.persistence-api@2.2.3" + "hashes": [ + { + "alg": "SHA-256", + "content": "bb888f15b5493dc5dc89f80d005afcda077d5df61ba0bd34ffef18445840dd27" + } + ] }, { "group": "org.hibernate", @@ -668,8 +1100,14 @@ "version": "0.1.1", "purl": "pkg:maven/org.hibernate/quarkus-local-cache@0.1.1", "type": "library", + "bom-ref": "pkg:maven/org.hibernate/quarkus-local-cache@0.1.1", "scope": "required", - "bom-ref": "pkg:maven/org.hibernate/quarkus-local-cache@0.1.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "b5047f9a20467ef05e80ee6a9c7abfd6ba2894e961e5467e24808aa234c26a24" + } + ] }, { "group": "io.quarkus", @@ -677,8 +1115,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-caffeine@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-caffeine@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-caffeine@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "8ba118ea99bca84a43e856afdc3ed3ce163e9f67b1164c2244ded7d4b98f1d29" + } + ] }, { "group": "com.github.ben-manes.caffeine", @@ -686,8 +1130,14 @@ "version": "2.9.3", "purl": "pkg:maven/com.github.ben-manes.caffeine/caffeine@2.9.3", "type": "library", + "bom-ref": "pkg:maven/com.github.ben-manes.caffeine/caffeine@2.9.3", "scope": "required", - "bom-ref": "pkg:maven/com.github.ben-manes.caffeine/caffeine@2.9.3" + "hashes": [ + { + "alg": "SHA-256", + "content": "d6ddcd4a2a38ac492033978be5c08af5fe2edd2c3b2e73986175af0afa7bb378" + } + ] }, { "group": "com.google.errorprone", @@ -695,8 +1145,14 @@ "version": "2.10.0", "purl": "pkg:maven/com.google.errorprone/error_prone_annotations@2.10.0", "type": "library", + "bom-ref": "pkg:maven/com.google.errorprone/error_prone_annotations@2.10.0", "scope": "required", - "bom-ref": "pkg:maven/com.google.errorprone/error_prone_annotations@2.10.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "7536b424bdd8644db60e72bb3e0b05b4458c822b2d4136715233554dada62b69" + } + ] }, { "group": "io.quarkus", @@ -704,8 +1160,14 @@ "version": "2.13.7.Final", "purl": "pkg:maven/io.quarkus/quarkus-resteasy@2.13.7.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-resteasy@2.13.7.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-resteasy@2.13.7.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "c66681b1e334d3e1b1d6b438044ac660b020371f65b9441bd195c1811ac6d651" + } + ] }, { "group": "io.quarkus", @@ -713,8 +1175,14 @@ "version": "2.13.7.Final", "purl": "pkg:maven/io.quarkus/quarkus-vertx-http@2.13.7.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-vertx-http@2.13.7.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-vertx-http@2.13.7.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "fe3e832b2816256f627f93810d609a1ff732b9ba5ef7109826a19af8b1ac7310" + } + ] }, { "group": "io.quarkus", @@ -722,8 +1190,14 @@ "version": "2.13.7.Final", "purl": "pkg:maven/io.quarkus/quarkus-security-runtime-spi@2.13.7.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-security-runtime-spi@2.13.7.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-security-runtime-spi@2.13.7.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "fd030bdd051d6bcebf1471b94c985b3f8059d8e6a34972c12a38ffee2baaa857" + } + ] }, { "group": "io.quarkus.security", @@ -731,8 +1205,14 @@ "version": "1.1.4.Final", "purl": "pkg:maven/io.quarkus.security/quarkus-security@1.1.4.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus.security/quarkus-security@1.1.4.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus.security/quarkus-security@1.1.4.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "d2059c5479266f34cf32e736e2098afc061f29acd33bb43c736ac818ca76cb0f" + } + ] }, { "group": "io.smallrye.common", @@ -740,8 +1220,14 @@ "version": "1.13.1", "purl": "pkg:maven/io.smallrye.common/smallrye-common-vertx-context@1.13.1", "type": "library", + "bom-ref": "pkg:maven/io.smallrye.common/smallrye-common-vertx-context@1.13.1", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye.common/smallrye-common-vertx-context@1.13.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "edaf480fd82bc8d7ff2c9020b3d2e0478bfebfa6004b64e8651521201cb81778" + } + ] }, { "group": "io.vertx", @@ -749,8 +1235,14 @@ "version": "4.3.4", "purl": "pkg:maven/io.vertx/vertx-core@4.3.4", "type": "library", + "bom-ref": "pkg:maven/io.vertx/vertx-core@4.3.4", "scope": "required", - "bom-ref": "pkg:maven/io.vertx/vertx-core@4.3.4" + "hashes": [ + { + "alg": "SHA-256", + "content": "b165b53094fec196e9b60de567753e3d45e8c1bef834e7745fb206b9413750ba" + } + ] }, { "group": "io.netty", @@ -758,8 +1250,14 @@ "version": "4.1.86.Final", "purl": "pkg:maven/io.netty/netty-common@4.1.86.Final", "type": "library", + "bom-ref": "pkg:maven/io.netty/netty-common@4.1.86.Final", "scope": "required", - "bom-ref": "pkg:maven/io.netty/netty-common@4.1.86.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "4725e55a972cee948a48137aedb0930091b10b387d726d44a824c10a15e4a2cb" + } + ] }, { "group": "io.netty", @@ -767,8 +1265,14 @@ "version": "4.1.86.Final", "purl": "pkg:maven/io.netty/netty-buffer@4.1.86.Final", "type": "library", + "bom-ref": "pkg:maven/io.netty/netty-buffer@4.1.86.Final", "scope": "required", - "bom-ref": "pkg:maven/io.netty/netty-buffer@4.1.86.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "9152c5f5e8287bf70278875141b317b6e61f111ff4089d104c676021be956b35" + } + ] }, { "group": "io.netty", @@ -776,8 +1280,14 @@ "version": "4.1.86.Final", "purl": "pkg:maven/io.netty/netty-transport@4.1.86.Final", "type": "library", + "bom-ref": "pkg:maven/io.netty/netty-transport@4.1.86.Final", "scope": "required", - "bom-ref": "pkg:maven/io.netty/netty-transport@4.1.86.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "9bc60e7933e7c115e114184961aca439ec4693a388bd6c111cfe6ffc1aed187f" + } + ] }, { "group": "io.netty", @@ -785,8 +1295,14 @@ "version": "4.1.86.Final", "purl": "pkg:maven/io.netty/netty-resolver@4.1.86.Final", "type": "library", + "bom-ref": "pkg:maven/io.netty/netty-resolver@4.1.86.Final", "scope": "required", - "bom-ref": "pkg:maven/io.netty/netty-resolver@4.1.86.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "02ac493ea66df9eed8fee059639e1893707b6eb37cdda172d32f85d06b6af7c8" + } + ] }, { "group": "io.netty", @@ -794,8 +1310,14 @@ "version": "4.1.86.Final", "purl": "pkg:maven/io.netty/netty-handler@4.1.86.Final", "type": "library", + "bom-ref": "pkg:maven/io.netty/netty-handler@4.1.86.Final", "scope": "required", - "bom-ref": "pkg:maven/io.netty/netty-handler@4.1.86.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "b0be2c04eb65c9cdc8bd6871a971c5b277c2177ba240f14da23b06bab2572cce" + } + ] }, { "group": "io.netty", @@ -803,8 +1325,14 @@ "version": "4.1.86.Final", "purl": "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.86.Final", "type": "library", + "bom-ref": "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.86.Final", "scope": "required", - "bom-ref": "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.86.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "19b01d40dc91df902d4f0d83431fdf10f6c183c545f0fda599a4929636e57f47" + } + ] }, { "group": "io.netty", @@ -812,8 +1340,14 @@ "version": "4.1.86.Final", "purl": "pkg:maven/io.netty/netty-codec@4.1.86.Final", "type": "library", + "bom-ref": "pkg:maven/io.netty/netty-codec@4.1.86.Final", "scope": "required", - "bom-ref": "pkg:maven/io.netty/netty-codec@4.1.86.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "6797c376aeac74b322ee8572fe1f5e0d087975426f4c7dffb9d0173307bd7da6" + } + ] }, { "group": "io.netty", @@ -821,8 +1355,14 @@ "version": "4.1.82.Final", "purl": "pkg:maven/io.netty/netty-handler-proxy@4.1.82.Final", "type": "library", + "bom-ref": "pkg:maven/io.netty/netty-handler-proxy@4.1.82.Final", "scope": "required", - "bom-ref": "pkg:maven/io.netty/netty-handler-proxy@4.1.82.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "983abf79f64fe592a1c65fd3482302cd9b6d70e59229c16041463425bf88da1a" + } + ] }, { "group": "io.netty", @@ -830,8 +1370,14 @@ "version": "4.1.82.Final", "purl": "pkg:maven/io.netty/netty-codec-socks@4.1.82.Final", "type": "library", + "bom-ref": "pkg:maven/io.netty/netty-codec-socks@4.1.82.Final", "scope": "required", - "bom-ref": "pkg:maven/io.netty/netty-codec-socks@4.1.82.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "bf72fffd5dd7ae9af89ed91e6540410103c8325e77998e48b497b879952fb6df" + } + ] }, { "group": "io.netty", @@ -839,8 +1385,14 @@ "version": "4.1.86.Final", "purl": "pkg:maven/io.netty/netty-codec-http@4.1.86.Final", "type": "library", + "bom-ref": "pkg:maven/io.netty/netty-codec-http@4.1.86.Final", "scope": "required", - "bom-ref": "pkg:maven/io.netty/netty-codec-http@4.1.86.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "016e3a64dfe42619ebbce8679ebd01759f22b7e296c651308e1528ae1e66723e" + } + ] }, { "group": "io.netty", @@ -848,8 +1400,14 @@ "version": "4.1.86.Final", "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.86.Final", "type": "library", + "bom-ref": "pkg:maven/io.netty/netty-codec-http2@4.1.86.Final", "scope": "required", - "bom-ref": "pkg:maven/io.netty/netty-codec-http2@4.1.86.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "aa76a35fe8368d49d8a5dd4bb7c8d5f94b7fd9e0eedf25dcb07b9f458916f868" + } + ] }, { "group": "io.netty", @@ -857,8 +1415,14 @@ "version": "4.1.82.Final", "purl": "pkg:maven/io.netty/netty-resolver-dns@4.1.82.Final", "type": "library", + "bom-ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.82.Final", "scope": "required", - "bom-ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.82.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "bd2bd64e102733fa0d44c9296fafe6719d159b46e195a69d771edbb12670f2ac" + } + ] }, { "group": "io.netty", @@ -866,8 +1430,14 @@ "version": "4.1.82.Final", "purl": "pkg:maven/io.netty/netty-codec-dns@4.1.82.Final", "type": "library", + "bom-ref": "pkg:maven/io.netty/netty-codec-dns@4.1.82.Final", "scope": "required", - "bom-ref": "pkg:maven/io.netty/netty-codec-dns@4.1.82.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "0777df897344799d318ed8fcff996150eac542b1a2a9149e421e28df2f36cab2" + } + ] }, { "group": "com.fasterxml.jackson.core", @@ -875,8 +1445,14 @@ "version": "2.13.4", "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.4", "type": "library", + "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.4", "scope": "required", - "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.4" + "hashes": [ + { + "alg": "SHA-256", + "content": "a7a57b699e9a41b86efc120f28d7b4f2ae3240535741e03e397dec6fc0a78a2f" + } + ] }, { "group": "com.fasterxml.jackson", @@ -884,8 +1460,14 @@ "version": "2.13.4", "purl": "pkg:maven/com.fasterxml.jackson/jackson-bom@2.13.4", "type": "library", + "bom-ref": "pkg:maven/com.fasterxml.jackson/jackson-bom@2.13.4", "scope": "required", - "bom-ref": "pkg:maven/com.fasterxml.jackson/jackson-bom@2.13.4" + "hashes": [ + { + "alg": "SHA-256", + "content": "d512a5356d0f0316ea042dc8eef793bb0c6e5834668c1e90cf8a9c9dd6b0da52" + } + ] }, { "group": "com.fasterxml.jackson.core", @@ -893,8 +1475,14 @@ "version": "2.13.4", "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.13.4", "type": "library", + "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.13.4", "scope": "required", - "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.13.4" + "hashes": [ + { + "alg": "SHA-256", + "content": "9716a4ce686df5e735198309be0501d033ffc2ed0c163c70d48cbe1ef4e89387" + } + ] }, { "group": "com.fasterxml.jackson.core", @@ -902,8 +1490,14 @@ "version": "2.13.4.2", "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.4.2", "type": "library", + "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.4.2", "scope": "required", - "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.4.2" + "hashes": [ + { + "alg": "SHA-256", + "content": "374081eccd90e07fd882528c60bcf3599ba315cef65d6af2a57f1d02197a76dc" + } + ] }, { "group": "com.fasterxml.jackson.datatype", @@ -911,8 +1505,14 @@ "version": "2.13.4", "purl": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.13.4", "type": "library", + "bom-ref": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.13.4", "scope": "required", - "bom-ref": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.13.4" + "hashes": [ + { + "alg": "SHA-256", + "content": "77fca4491d56907277d7a7df21e9d12d4843698cac7cf2a6a7b510a2f29afbad" + } + ] }, { "group": "com.fasterxml.jackson.datatype", @@ -920,8 +1520,14 @@ "version": "2.13.4", "purl": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.13.4", "type": "library", + "bom-ref": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.13.4", "scope": "required", - "bom-ref": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.13.4" + "hashes": [ + { + "alg": "SHA-256", + "content": "961af7afc842537fc3163a7f287321fe4af465ac3c932151a04734d9b0c91e7a" + } + ] }, { "group": "com.fasterxml.jackson.jaxrs", @@ -929,8 +1535,14 @@ "version": "2.13.4", "purl": "pkg:maven/com.fasterxml.jackson.jaxrs/jackson-jaxrs-json-provider@2.13.4", "type": "library", + "bom-ref": "pkg:maven/com.fasterxml.jackson.jaxrs/jackson-jaxrs-json-provider@2.13.4", "scope": "required", - "bom-ref": "pkg:maven/com.fasterxml.jackson.jaxrs/jackson-jaxrs-json-provider@2.13.4" + "hashes": [ + { + "alg": "SHA-256", + "content": "c3a4eb3ab84d506defe92fc794dc459ba3d8aae5a5cd59c10f6b153ad84f71f0" + } + ] }, { "group": "com.fasterxml.jackson.module", @@ -938,8 +1550,14 @@ "version": "2.13.4", "purl": "pkg:maven/com.fasterxml.jackson.module/jackson-module-parameter-names@2.13.4", "type": "library", + "bom-ref": "pkg:maven/com.fasterxml.jackson.module/jackson-module-parameter-names@2.13.4", "scope": "required", - "bom-ref": "pkg:maven/com.fasterxml.jackson.module/jackson-module-parameter-names@2.13.4" + "hashes": [ + { + "alg": "SHA-256", + "content": "0131ec78c25d8381c950b32aa03c01c722cb5cbfe0247e2db7f6a88ec7729bd0" + } + ] }, { "group": "com.fasterxml.jackson.jaxrs", @@ -947,8 +1565,14 @@ "version": "2.13.4", "purl": "pkg:maven/com.fasterxml.jackson.jaxrs/jackson-jaxrs-base@2.13.4", "type": "library", + "bom-ref": "pkg:maven/com.fasterxml.jackson.jaxrs/jackson-jaxrs-base@2.13.4", "scope": "required", - "bom-ref": "pkg:maven/com.fasterxml.jackson.jaxrs/jackson-jaxrs-base@2.13.4" + "hashes": [ + { + "alg": "SHA-256", + "content": "483e706093b6b7246cf156b71c12522d9dd97e87263aff142f45c62128b6d392" + } + ] }, { "group": "com.fasterxml.jackson.module", @@ -956,8 +1580,14 @@ "version": "2.13.4", "purl": "pkg:maven/com.fasterxml.jackson.module/jackson-module-jaxb-annotations@2.13.4", "type": "library", + "bom-ref": "pkg:maven/com.fasterxml.jackson.module/jackson-module-jaxb-annotations@2.13.4", "scope": "required", - "bom-ref": "pkg:maven/com.fasterxml.jackson.module/jackson-module-jaxb-annotations@2.13.4" + "hashes": [ + { + "alg": "SHA-256", + "content": "dcd8704d2fe8f42c93b1c76c0ccc4955d99fe601893945b1a5ea751d64a79c97" + } + ] }, { "group": "io.quarkus", @@ -965,8 +1595,14 @@ "version": "2.13.7.Final", "purl": "pkg:maven/io.quarkus/quarkus-vertx-http-dev-console-runtime-spi@2.13.7.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-vertx-http-dev-console-runtime-spi@2.13.7.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-vertx-http-dev-console-runtime-spi@2.13.7.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "5d6cec615d81c4ce0cd462df852bc9b063610fde698892f357df9edcb49098d7" + } + ] }, { "group": "io.vertx", @@ -974,8 +1610,14 @@ "version": "4.3.4", "purl": "pkg:maven/io.vertx/vertx-web@4.3.4", "type": "library", + "bom-ref": "pkg:maven/io.vertx/vertx-web@4.3.4", "scope": "required", - "bom-ref": "pkg:maven/io.vertx/vertx-web@4.3.4" + "hashes": [ + { + "alg": "SHA-256", + "content": "60b44da6840972cf6d730279ba5d2b699465a72dad63695787fc4d4bb967a2c1" + } + ] }, { "group": "io.vertx", @@ -983,8 +1625,14 @@ "version": "4.3.4", "purl": "pkg:maven/io.vertx/vertx-web-common@4.3.4", "type": "library", + "bom-ref": "pkg:maven/io.vertx/vertx-web-common@4.3.4", "scope": "required", - "bom-ref": "pkg:maven/io.vertx/vertx-web-common@4.3.4" + "hashes": [ + { + "alg": "SHA-256", + "content": "4c4e90a0751703830a98b747439e23603ae18eeb8b5f523db612ef98030fca07" + } + ] }, { "group": "io.vertx", @@ -992,8 +1640,14 @@ "version": "4.3.4", "purl": "pkg:maven/io.vertx/vertx-auth-common@4.3.4", "type": "library", + "bom-ref": "pkg:maven/io.vertx/vertx-auth-common@4.3.4", "scope": "required", - "bom-ref": "pkg:maven/io.vertx/vertx-auth-common@4.3.4" + "hashes": [ + { + "alg": "SHA-256", + "content": "335c5d772c5db152b64a41891cd15d547baac692d540e93eadc0742cea41c80f" + } + ] }, { "group": "io.vertx", @@ -1001,8 +1655,14 @@ "version": "4.3.4", "purl": "pkg:maven/io.vertx/vertx-bridge-common@4.3.4", "type": "library", + "bom-ref": "pkg:maven/io.vertx/vertx-bridge-common@4.3.4", "scope": "required", - "bom-ref": "pkg:maven/io.vertx/vertx-bridge-common@4.3.4" + "hashes": [ + { + "alg": "SHA-256", + "content": "70aa713402bfb59e5a4f90785a699c6e91a311a78e2772af32c00321f7c53f6d" + } + ] }, { "group": "io.quarkus", @@ -1010,8 +1670,14 @@ "version": "2.13.7.Final", "purl": "pkg:maven/io.quarkus/quarkus-vertx@2.13.7.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-vertx@2.13.7.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-vertx@2.13.7.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "05c8aaccd8d88a4f4b5800ccc3c601e659371d2bdd2fabc7c31353689f345491" + } + ] }, { "group": "io.quarkus", @@ -1019,8 +1685,14 @@ "version": "2.13.7.Final", "purl": "pkg:maven/io.quarkus/quarkus-netty@2.13.7.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-netty@2.13.7.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-netty@2.13.7.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "5f756bdcf39e4fba7609a1e7126ce3f655d3b730346e1428f8e68af6df5bfea9" + } + ] }, { "group": "com.aayushatharva.brotli4j", @@ -1028,8 +1700,14 @@ "version": "1.7.1", "purl": "pkg:maven/com.aayushatharva.brotli4j/brotli4j@1.7.1", "type": "library", + "bom-ref": "pkg:maven/com.aayushatharva.brotli4j/brotli4j@1.7.1", "scope": "required", - "bom-ref": "pkg:maven/com.aayushatharva.brotli4j/brotli4j@1.7.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "97b9c394fc377ba14640e4dc0c08ebcc7f05ca514f533b944a0509479c8a5ede" + } + ] }, { "group": "io.netty", @@ -1037,8 +1715,14 @@ "version": "4.1.86.Final", "purl": "pkg:maven/io.netty/netty-codec-haproxy@4.1.86.Final", "type": "library", + "bom-ref": "pkg:maven/io.netty/netty-codec-haproxy@4.1.86.Final", "scope": "required", - "bom-ref": "pkg:maven/io.netty/netty-codec-haproxy@4.1.86.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "c87c380e3c213efa0c1b7533ca22c3b7ea8efdd646a26ed80ae20273c189ad5d" + } + ] }, { "group": "io.quarkus", @@ -1046,8 +1730,14 @@ "version": "2.13.7.Final", "purl": "pkg:maven/io.quarkus/quarkus-vertx-latebound-mdc-provider@2.13.7.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-vertx-latebound-mdc-provider@2.13.7.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-vertx-latebound-mdc-provider@2.13.7.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "59fdf94ede83cae3b7bb60f8ecbdf46434939e7533aff810b04d5141cc0e418c" + } + ] }, { "group": "io.smallrye.reactive", @@ -1055,8 +1745,14 @@ "version": "2.27.0", "purl": "pkg:maven/io.smallrye.reactive/smallrye-mutiny-vertx-core@2.27.0", "type": "library", + "bom-ref": "pkg:maven/io.smallrye.reactive/smallrye-mutiny-vertx-core@2.27.0", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye.reactive/smallrye-mutiny-vertx-core@2.27.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "de60bc30dcb6164d8de0301bafd3ddfdc7cc3ce2f424e8ef31345226972c6e73" + } + ] }, { "group": "io.smallrye.reactive", @@ -1064,8 +1760,14 @@ "version": "2.27.0", "purl": "pkg:maven/io.smallrye.reactive/smallrye-mutiny-vertx-runtime@2.27.0", "type": "library", + "bom-ref": "pkg:maven/io.smallrye.reactive/smallrye-mutiny-vertx-runtime@2.27.0", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye.reactive/smallrye-mutiny-vertx-runtime@2.27.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "8009b258e3518f5d222db0870ef6454687addd7b09328bfd186f7987090db614" + } + ] }, { "group": "io.smallrye.reactive", @@ -1073,8 +1775,14 @@ "version": "2.27.0", "purl": "pkg:maven/io.smallrye.reactive/vertx-mutiny-generator@2.27.0", "type": "library", + "bom-ref": "pkg:maven/io.smallrye.reactive/vertx-mutiny-generator@2.27.0", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye.reactive/vertx-mutiny-generator@2.27.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "afd708bf8cfd65acb76e264bdf9f23435df732fecda078ea7097291c93b3052f" + } + ] }, { "group": "io.vertx", @@ -1082,8 +1790,14 @@ "version": "4.3.4", "purl": "pkg:maven/io.vertx/vertx-codegen@4.3.4", "type": "library", + "bom-ref": "pkg:maven/io.vertx/vertx-codegen@4.3.4", "scope": "required", - "bom-ref": "pkg:maven/io.vertx/vertx-codegen@4.3.4" + "hashes": [ + { + "alg": "SHA-256", + "content": "9d53e2b393abb33c1cbc724e605f234c0ae29a95f1a2886b142a2f176063512b" + } + ] }, { "group": "io.smallrye", @@ -1091,8 +1805,14 @@ "version": "5.5.0", "purl": "pkg:maven/io.smallrye/smallrye-fault-tolerance-vertx@5.5.0", "type": "library", + "bom-ref": "pkg:maven/io.smallrye/smallrye-fault-tolerance-vertx@5.5.0", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye/smallrye-fault-tolerance-vertx@5.5.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "ab3eb26389d9a769627621f0467a6f8d28366adec97342a10b83836bc10f6b8e" + } + ] }, { "group": "io.smallrye.reactive", @@ -1100,8 +1820,14 @@ "version": "2.27.0", "purl": "pkg:maven/io.smallrye.reactive/smallrye-mutiny-vertx-web@2.27.0", "type": "library", + "bom-ref": "pkg:maven/io.smallrye.reactive/smallrye-mutiny-vertx-web@2.27.0", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye.reactive/smallrye-mutiny-vertx-web@2.27.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "5bcd310b30d73903631adf505ee85a5c6fba249bebe9e80a0f116d8644bcc02d" + } + ] }, { "group": "io.smallrye.reactive", @@ -1109,8 +1835,14 @@ "version": "2.27.0", "purl": "pkg:maven/io.smallrye.reactive/smallrye-mutiny-vertx-web-common@2.27.0", "type": "library", + "bom-ref": "pkg:maven/io.smallrye.reactive/smallrye-mutiny-vertx-web-common@2.27.0", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye.reactive/smallrye-mutiny-vertx-web-common@2.27.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "5557378d88617205234d74cf77abb30e3364299ca9055c6346c247cdf18a83b9" + } + ] }, { "group": "io.smallrye.reactive", @@ -1118,8 +1850,14 @@ "version": "2.27.0", "purl": "pkg:maven/io.smallrye.reactive/smallrye-mutiny-vertx-auth-common@2.27.0", "type": "library", + "bom-ref": "pkg:maven/io.smallrye.reactive/smallrye-mutiny-vertx-auth-common@2.27.0", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye.reactive/smallrye-mutiny-vertx-auth-common@2.27.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "451fdc0bc5e4287f1bcf641cc15e4a31c6aca7d97403e16f9bc2105a55d8032a" + } + ] }, { "group": "io.smallrye.reactive", @@ -1127,8 +1865,14 @@ "version": "2.27.0", "purl": "pkg:maven/io.smallrye.reactive/smallrye-mutiny-vertx-bridge-common@2.27.0", "type": "library", + "bom-ref": "pkg:maven/io.smallrye.reactive/smallrye-mutiny-vertx-bridge-common@2.27.0", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye.reactive/smallrye-mutiny-vertx-bridge-common@2.27.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "338d3c77a5a75115c5cf557c43866244b73cdd59620602dc7f0941d71a74fa76" + } + ] }, { "group": "io.smallrye.reactive", @@ -1136,8 +1880,14 @@ "version": "2.27.0", "purl": "pkg:maven/io.smallrye.reactive/smallrye-mutiny-vertx-uri-template@2.27.0", "type": "library", + "bom-ref": "pkg:maven/io.smallrye.reactive/smallrye-mutiny-vertx-uri-template@2.27.0", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye.reactive/smallrye-mutiny-vertx-uri-template@2.27.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "2281c385d91c8c6531ad1a91a3a30064592ec7b713391adc9a1d47859d02ad02" + } + ] }, { "group": "io.vertx", @@ -1145,8 +1895,14 @@ "version": "4.3.4", "purl": "pkg:maven/io.vertx/vertx-uri-template@4.3.4", "type": "library", + "bom-ref": "pkg:maven/io.vertx/vertx-uri-template@4.3.4", "scope": "required", - "bom-ref": "pkg:maven/io.vertx/vertx-uri-template@4.3.4" + "hashes": [ + { + "alg": "SHA-256", + "content": "694b9f0c2c0f831a6bf2924e4708fa4b3b23c6545b7ec89d47b3dde515c07c4e" + } + ] }, { "group": "io.quarkus", @@ -1154,8 +1910,14 @@ "version": "2.13.7.Final", "purl": "pkg:maven/io.quarkus/quarkus-resteasy-server-common@2.13.7.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-resteasy-server-common@2.13.7.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-resteasy-server-common@2.13.7.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "66967939a38c7c74014a48959f040798e86fb539ff6e9c93800a276d61a0551d" + } + ] }, { "group": "io.quarkus", @@ -1163,8 +1925,14 @@ "version": "2.13.7.Final", "purl": "pkg:maven/io.quarkus/quarkus-resteasy-common@2.13.7.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-resteasy-common@2.13.7.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-resteasy-common@2.13.7.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "5336c11c354e63f7fed13130411535d91b2b93489f65ac8f480f6ce563f4f4b8" + } + ] }, { "group": "org.jboss.resteasy", @@ -1172,8 +1940,14 @@ "version": "4.7.7.Final", "purl": "pkg:maven/org.jboss.resteasy/resteasy-core@4.7.7.Final", "type": "library", + "bom-ref": "pkg:maven/org.jboss.resteasy/resteasy-core@4.7.7.Final", "scope": "required", - "bom-ref": "pkg:maven/org.jboss.resteasy/resteasy-core@4.7.7.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "c7c39a1fa4794fe91f07a10f69f2d14244efb76f7360070beaba658b94222b57" + } + ] }, { "group": "org.jboss.spec.javax.annotation", @@ -1181,8 +1955,14 @@ "version": "2.0.1.Final", "purl": "pkg:maven/org.jboss.spec.javax.annotation/jboss-annotations-api_1.3_spec@2.0.1.Final", "type": "library", + "bom-ref": "pkg:maven/org.jboss.spec.javax.annotation/jboss-annotations-api_1.3_spec@2.0.1.Final", "scope": "required", - "bom-ref": "pkg:maven/org.jboss.spec.javax.annotation/jboss-annotations-api_1.3_spec@2.0.1.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "3e8a73afd02919e1b2a6bace5ed5d9af666eb47a79c6015c5fe6b72ba0787dc7" + } + ] }, { "group": "org.jboss.spec.javax.ws.rs", @@ -1190,8 +1970,14 @@ "version": "2.0.1.Final", "purl": "pkg:maven/org.jboss.spec.javax.ws.rs/jboss-jaxrs-api_2.1_spec@2.0.1.Final", "type": "library", + "bom-ref": "pkg:maven/org.jboss.spec.javax.ws.rs/jboss-jaxrs-api_2.1_spec@2.0.1.Final", "scope": "required", - "bom-ref": "pkg:maven/org.jboss.spec.javax.ws.rs/jboss-jaxrs-api_2.1_spec@2.0.1.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "2d490bccbe4ac31117a2194f3345cf43152867b9f51311746b6ac0dca174a4d7" + } + ] }, { "group": "org.jboss.resteasy", @@ -1199,8 +1985,14 @@ "version": "4.7.7.Final", "purl": "pkg:maven/org.jboss.resteasy/resteasy-core-spi@4.7.7.Final", "type": "library", + "bom-ref": "pkg:maven/org.jboss.resteasy/resteasy-core-spi@4.7.7.Final", "scope": "required", - "bom-ref": "pkg:maven/org.jboss.resteasy/resteasy-core-spi@4.7.7.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "a398d037a931161213320c89c94f643127e88c6c68d2876ad9e58392cb6de60d" + } + ] }, { "group": "jakarta.validation", @@ -1208,8 +2000,14 @@ "version": "2.0.2", "purl": "pkg:maven/jakarta.validation/jakarta.validation-api@2.0.2", "type": "library", + "bom-ref": "pkg:maven/jakarta.validation/jakarta.validation-api@2.0.2", "scope": "required", - "bom-ref": "pkg:maven/jakarta.validation/jakarta.validation-api@2.0.2" + "hashes": [ + { + "alg": "SHA-256", + "content": "a8c2b114508ccd20562239505b9732776d3371aaea137b265a0548f456475d06" + } + ] }, { "group": "com.ibm.async", @@ -1217,8 +2015,14 @@ "version": "0.1.0", "purl": "pkg:maven/com.ibm.async/asyncutil@0.1.0", "type": "library", + "bom-ref": "pkg:maven/com.ibm.async/asyncutil@0.1.0", "scope": "required", - "bom-ref": "pkg:maven/com.ibm.async/asyncutil@0.1.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "c565fd5ffe7c8d386d0453723c088cdd572d8351dd2ade703fcc44c45ccd9de7" + } + ] }, { "group": "io.quarkus", @@ -1226,8 +2030,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-resteasy-jackson@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-resteasy-jackson@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-resteasy-jackson@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "dd61825bd9a8c2f962121098870239a0200b2d71fe004b00fb572414b40d422f" + } + ] }, { "group": "io.quarkus", @@ -1235,8 +2045,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-jackson@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-jackson@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-jackson@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "da11fba8adceb5f3574a5021a439e382d77ef36ce9196bf926f74f8c27169de5" + } + ] }, { "group": "org.jboss.resteasy", @@ -1244,8 +2060,14 @@ "version": "4.7.7.Final", "purl": "pkg:maven/org.jboss.resteasy/resteasy-jackson2-provider@4.7.7.Final", "type": "library", + "bom-ref": "pkg:maven/org.jboss.resteasy/resteasy-jackson2-provider@4.7.7.Final", "scope": "required", - "bom-ref": "pkg:maven/org.jboss.resteasy/resteasy-jackson2-provider@4.7.7.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "f44560025fb9e1e28d13a3918d54c8d3c033342d2d5ae50709d7916066f44ff3" + } + ] }, { "group": "com.github.java-json-tools", @@ -1253,8 +2075,14 @@ "version": "1.13", "purl": "pkg:maven/com.github.java-json-tools/json-patch@1.13", "type": "library", + "bom-ref": "pkg:maven/com.github.java-json-tools/json-patch@1.13", "scope": "required", - "bom-ref": "pkg:maven/com.github.java-json-tools/json-patch@1.13" + "hashes": [ + { + "alg": "SHA-256", + "content": "3ff3baf1ba186fdcf33233cb30fc9930c5c77e86cb44c6791865ab377e447bfe" + } + ] }, { "group": "com.github.java-json-tools", @@ -1262,8 +2090,14 @@ "version": "1.2", "purl": "pkg:maven/com.github.java-json-tools/msg-simple@1.2", "type": "library", + "bom-ref": "pkg:maven/com.github.java-json-tools/msg-simple@1.2", "scope": "required", - "bom-ref": "pkg:maven/com.github.java-json-tools/msg-simple@1.2" + "hashes": [ + { + "alg": "SHA-256", + "content": "e6e80ab37a2566fe7847b7090b9e44f436f615b322c97d204ac71f727e119487" + } + ] }, { "group": "com.github.java-json-tools", @@ -1271,8 +2105,14 @@ "version": "1.3", "purl": "pkg:maven/com.github.java-json-tools/btf@1.3", "type": "library", + "bom-ref": "pkg:maven/com.github.java-json-tools/btf@1.3", "scope": "required", - "bom-ref": "pkg:maven/com.github.java-json-tools/btf@1.3" + "hashes": [ + { + "alg": "SHA-256", + "content": "f441a5d0aecc2027bd5b9e4bce9a60b8b56a79e5eac2eff8df0e03182e44cac2" + } + ] }, { "group": "com.github.java-json-tools", @@ -1280,8 +2120,14 @@ "version": "2.0", "purl": "pkg:maven/com.github.java-json-tools/jackson-coreutils@2.0", "type": "library", + "bom-ref": "pkg:maven/com.github.java-json-tools/jackson-coreutils@2.0", "scope": "required", - "bom-ref": "pkg:maven/com.github.java-json-tools/jackson-coreutils@2.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "4d19c88dc43613b28ed18392cff7a0c9c2f6a59473ffba5e486c2f403a8c2f6f" + } + ] }, { "group": "io.quarkus", @@ -1289,8 +2135,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-jdbc-postgresql@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-jdbc-postgresql@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-jdbc-postgresql@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "a1af9f5bef767f20b966430723412779f71275106e66c4e80dad67d0874881d6" + } + ] }, { "group": "org.postgresql", @@ -1298,8 +2150,14 @@ "version": "42.5.0", "purl": "pkg:maven/org.postgresql/postgresql@42.5.0", "type": "library", + "bom-ref": "pkg:maven/org.postgresql/postgresql@42.5.0", "scope": "required", - "bom-ref": "pkg:maven/org.postgresql/postgresql@42.5.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "de729a946b7210ee58cee16a0db68018b1b619ec66f4802ecb41a54d56640b2b" + } + ] }, { "group": "io.quarkus", @@ -1307,8 +2165,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-kubernetes-service-binding@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-kubernetes-service-binding@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-kubernetes-service-binding@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "33fe80f8a1666b04c4ffa621d46f3b7fbb6af343194db24e81d1ffb9065bb0b6" + } + ] }, { "group": "io.quarkus", @@ -1316,8 +2180,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-container-image-docker@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-container-image-docker@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-container-image-docker@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "340cc17319511435110f74a594c065fb8e09b4cd054054df810bbe0ff7754e16" + } + ] }, { "group": "io.quarkus", @@ -1325,8 +2195,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-container-image@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-container-image@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-container-image@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "2283aaad3ea757907383a693d9981e49f167021a6655b41a6761b7f39f6d848c" + } + ] }, { "group": "io.quarkus", @@ -1334,8 +2210,14 @@ "version": "2.13.7.Final", "purl": "pkg:maven/io.quarkus/quarkus-resteasy-multipart@2.13.7.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-resteasy-multipart@2.13.7.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-resteasy-multipart@2.13.7.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "1dba08c004cdf3d1137882fb0c55b2c251d9d4c3c8597d9cdcec5e8488a6bb4c" + } + ] }, { "group": "org.jboss.resteasy", @@ -1343,8 +2225,14 @@ "version": "4.7.7.Final", "purl": "pkg:maven/org.jboss.resteasy/resteasy-multipart-provider@4.7.7.Final", "type": "library", + "bom-ref": "pkg:maven/org.jboss.resteasy/resteasy-multipart-provider@4.7.7.Final", "scope": "required", - "bom-ref": "pkg:maven/org.jboss.resteasy/resteasy-multipart-provider@4.7.7.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "dc367d8beee02e0c638bae5e919104fd64db2c93231eed3b4f992a93f866fa78" + } + ] }, { "group": "org.jboss.resteasy", @@ -1352,8 +2240,14 @@ "version": "4.7.7.Final", "purl": "pkg:maven/org.jboss.resteasy/resteasy-jaxb-provider@4.7.7.Final", "type": "library", + "bom-ref": "pkg:maven/org.jboss.resteasy/resteasy-jaxb-provider@4.7.7.Final", "scope": "required", - "bom-ref": "pkg:maven/org.jboss.resteasy/resteasy-jaxb-provider@4.7.7.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "7cfad418700b1b4095935189e8bec12f542c19b2bd8620bd406d2ba73022dfa7" + } + ] }, { "group": "com.sun.mail", @@ -1361,8 +2255,14 @@ "version": "1.6.5", "purl": "pkg:maven/com.sun.mail/jakarta.mail@1.6.5", "type": "library", + "bom-ref": "pkg:maven/com.sun.mail/jakarta.mail@1.6.5", "scope": "required", - "bom-ref": "pkg:maven/com.sun.mail/jakarta.mail@1.6.5" + "hashes": [ + { + "alg": "SHA-256", + "content": "da5479fdbc808b70b72255908e3ee3ae1e9947b46de8b4fee647b36e1f76988f" + } + ] }, { "group": "org.apache.james", @@ -1370,8 +2270,14 @@ "version": "0.8.3", "purl": "pkg:maven/org.apache.james/apache-mime4j-dom@0.8.3", "type": "library", + "bom-ref": "pkg:maven/org.apache.james/apache-mime4j-dom@0.8.3", "scope": "required", - "bom-ref": "pkg:maven/org.apache.james/apache-mime4j-dom@0.8.3" + "hashes": [ + { + "alg": "SHA-256", + "content": "76cc2f6fc46ae00d45f7d11a558f4b8bcd5aebe6d19848f86c52b24b71cd8695" + } + ] }, { "group": "org.apache.james", @@ -1379,8 +2285,14 @@ "version": "0.8.3", "purl": "pkg:maven/org.apache.james/apache-mime4j-core@0.8.3", "type": "library", + "bom-ref": "pkg:maven/org.apache.james/apache-mime4j-core@0.8.3", "scope": "required", - "bom-ref": "pkg:maven/org.apache.james/apache-mime4j-core@0.8.3" + "hashes": [ + { + "alg": "SHA-256", + "content": "0aee5769cb96580e5e43febee718493f50e7c40eea65d34c3587c076f6fc7d2e" + } + ] }, { "group": "org.apache.james", @@ -1388,8 +2300,14 @@ "version": "0.8.3", "purl": "pkg:maven/org.apache.james/apache-mime4j-storage@0.8.3", "type": "library", + "bom-ref": "pkg:maven/org.apache.james/apache-mime4j-storage@0.8.3", "scope": "required", - "bom-ref": "pkg:maven/org.apache.james/apache-mime4j-storage@0.8.3" + "hashes": [ + { + "alg": "SHA-256", + "content": "c8b2004a2cc30515dd125746091a58b3b0f0cd6bd1a704c418e53e1b4a27aa99" + } + ] }, { "group": "commons-io", @@ -1397,8 +2315,14 @@ "version": "2.6", "purl": "pkg:maven/commons-io/commons-io@2.6", "type": "library", + "bom-ref": "pkg:maven/commons-io/commons-io@2.6", "scope": "required", - "bom-ref": "pkg:maven/commons-io/commons-io@2.6" + "hashes": [ + { + "alg": "SHA-256", + "content": "10c450477b5fc3ea7baac9445b7de8d16048ce260b5514dbcef68f9f20d4f448" + } + ] }, { "group": "org.jboss.logging", @@ -1406,8 +2330,14 @@ "version": "1.0.0.Final", "purl": "pkg:maven/org.jboss.logging/commons-logging-jboss-logging@1.0.0.Final", "type": "library", + "bom-ref": "pkg:maven/org.jboss.logging/commons-logging-jboss-logging@1.0.0.Final", "scope": "required", - "bom-ref": "pkg:maven/org.jboss.logging/commons-logging-jboss-logging@1.0.0.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "fe37c37aa4f39e5a80bcf00808c4a11046831fcf51ebcf947daf7d45f2ab1a40" + } + ] }, { "group": "io.quarkus", @@ -1415,8 +2345,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-hibernate-orm-deployment@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-hibernate-orm-deployment@2.0.2.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-hibernate-orm-deployment@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "dcdd842c6024cbc027f0e9a5374a84461243343a83c295192e6dc93d10d873d9" + } + ] }, { "group": "io.quarkus", @@ -1424,8 +2360,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-core-deployment@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-core-deployment@2.0.2.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-core-deployment@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "8cda4e5ee59a41566f9c5ebafdece3c9771ae0f2b115247bcdd0256e6140d7be" + } + ] }, { "group": "org.aesh", @@ -1433,8 +2375,14 @@ "version": "2.1", "purl": "pkg:maven/org.aesh/readline@2.1", "type": "library", + "bom-ref": "pkg:maven/org.aesh/readline@2.1", "scope": "required", - "bom-ref": "pkg:maven/org.aesh/readline@2.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "2cd72dc7c8327dde309770d348c53b9eb961f685d201074d936d83e5bb9461da" + } + ] }, { "group": "org.fusesource.jansi", @@ -1442,8 +2390,14 @@ "version": "1.18", "purl": "pkg:maven/org.fusesource.jansi/jansi@1.18", "type": "library", + "bom-ref": "pkg:maven/org.fusesource.jansi/jansi@1.18", "scope": "required", - "bom-ref": "pkg:maven/org.fusesource.jansi/jansi@1.18" + "hashes": [ + { + "alg": "SHA-256", + "content": "0dc7dd24f8c8e361f1d839fd930a13b384376d45aa66766927070f0d0d9ca42e" + } + ] }, { "group": "org.apache.commons", @@ -1451,8 +2405,14 @@ "version": "3.12.0", "purl": "pkg:maven/org.apache.commons/commons-lang3@3.12.0", "type": "library", + "bom-ref": "pkg:maven/org.apache.commons/commons-lang3@3.12.0", "scope": "required", - "bom-ref": "pkg:maven/org.apache.commons/commons-lang3@3.12.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "75d06cb0f9b85ba1fad7f3da0f3c35306a102d6cbfce3f998d8315ccacfc3012" + } + ] }, { "group": "io.quarkus.gizmo", @@ -1460,8 +2420,14 @@ "version": "1.0.9.Final", "purl": "pkg:maven/io.quarkus.gizmo/gizmo@1.0.9.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus.gizmo/gizmo@1.0.9.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus.gizmo/gizmo@1.0.9.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "aaf4ed4d511db297fffb49d292f6927d79d6dc35ce6ee48d45178c487f5030d0" + } + ] }, { "group": "org.ow2.asm", @@ -1469,8 +2435,14 @@ "version": "9.1", "purl": "pkg:maven/org.ow2.asm/asm-util@9.1", "type": "library", + "bom-ref": "pkg:maven/org.ow2.asm/asm-util@9.1", "scope": "required", - "bom-ref": "pkg:maven/org.ow2.asm/asm-util@9.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "537baffb3a79453e148081685f9915de7be1fd239e221db6dd91cf2001671310" + } + ] }, { "group": "org.ow2.asm", @@ -1478,8 +2450,14 @@ "version": "9.1", "purl": "pkg:maven/org.ow2.asm/asm-tree@9.1", "type": "library", + "bom-ref": "pkg:maven/org.ow2.asm/asm-tree@9.1", "scope": "required", - "bom-ref": "pkg:maven/org.ow2.asm/asm-tree@9.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "a09d7a940c53c26c0067b33ca0358d330cfa9da3c426d04e86c07f35d406241c" + } + ] }, { "group": "org.ow2.asm", @@ -1487,8 +2465,14 @@ "version": "9.1", "purl": "pkg:maven/org.ow2.asm/asm-analysis@9.1", "type": "library", + "bom-ref": "pkg:maven/org.ow2.asm/asm-analysis@9.1", "scope": "required", - "bom-ref": "pkg:maven/org.ow2.asm/asm-analysis@9.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "f45548ccb5a04167749d372c3faf2caa97a5c42b6e8d204705d5342a0b68d672" + } + ] }, { "group": "org.jboss", @@ -1496,8 +2480,14 @@ "version": "2.3.0.Final", "purl": "pkg:maven/org.jboss/jandex@2.3.0.Final", "type": "library", + "bom-ref": "pkg:maven/org.jboss/jandex@2.3.0.Final", "scope": "required", - "bom-ref": "pkg:maven/org.jboss/jandex@2.3.0.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "6f800e144c7786e8d981cc7d2797981007482215d91deb52a21979d5aa9252a1" + } + ] }, { "group": "io.quarkus", @@ -1505,8 +2495,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-class-change-agent@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-class-change-agent@2.0.2.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-class-change-agent@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "5156efa455261c2479c6e4b11cb6227763a2366d517d1bdf1bc297216984a958" + } + ] }, { "group": "io.quarkus", @@ -1514,8 +2510,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-bootstrap-core@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-bootstrap-core@2.0.2.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-bootstrap-core@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "52ec7ee32ee3ba500822cebdcb10c4bfdabe021fd2af35e9b0db75ad07ee6a90" + } + ] }, { "group": "io.quarkus", @@ -1523,8 +2525,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-bootstrap-app-model@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-bootstrap-app-model@2.0.2.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-bootstrap-app-model@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "a644bad59e34e107e9e2a834a93bfa43ce24224fc76f4170f30167e814c8dfff" + } + ] }, { "group": "io.quarkus", @@ -1532,8 +2540,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-bootstrap-maven-resolver@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-bootstrap-maven-resolver@2.0.2.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-bootstrap-maven-resolver@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "e57278f946f685bd6ca9707b9f63df5de72e27912591107b1f4a01ffe7190e58" + } + ] }, { "group": "org.apache.maven", @@ -1541,8 +2555,14 @@ "version": "3.8.1", "purl": "pkg:maven/org.apache.maven/maven-embedder@3.8.1", "type": "library", + "bom-ref": "pkg:maven/org.apache.maven/maven-embedder@3.8.1", "scope": "required", - "bom-ref": "pkg:maven/org.apache.maven/maven-embedder@3.8.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "c68d9d9e6724a83f00f359c7095cba127cc46ed0b7b0534379aa7363c290d26c" + } + ] }, { "group": "org.apache.maven", @@ -1550,8 +2570,14 @@ "version": "3.8.1", "purl": "pkg:maven/org.apache.maven/maven-settings@3.8.1", "type": "library", + "bom-ref": "pkg:maven/org.apache.maven/maven-settings@3.8.1", "scope": "required", - "bom-ref": "pkg:maven/org.apache.maven/maven-settings@3.8.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "0803ee5e8c795d39ec5f80f438fca25333d36a03899802e6dacce22fe8158a1b" + } + ] }, { "group": "org.codehaus.plexus", @@ -1559,8 +2585,14 @@ "version": "3.3.0", "purl": "pkg:maven/org.codehaus.plexus/plexus-utils@3.3.0", "type": "library", + "bom-ref": "pkg:maven/org.codehaus.plexus/plexus-utils@3.3.0", "scope": "required", - "bom-ref": "pkg:maven/org.codehaus.plexus/plexus-utils@3.3.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "cfebf23a44d7bb8e5947c9f362f8538fc363da422afa6649596732e134c338ab" + } + ] }, { "group": "org.apache.maven", @@ -1568,8 +2600,14 @@ "version": "3.8.1", "purl": "pkg:maven/org.apache.maven/maven-settings-builder@3.8.1", "type": "library", + "bom-ref": "pkg:maven/org.apache.maven/maven-settings-builder@3.8.1", "scope": "required", - "bom-ref": "pkg:maven/org.apache.maven/maven-settings-builder@3.8.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "4a5d417cec132243dfdb9572742c001cbf265da44e794e912b4578500439fd0c" + } + ] }, { "group": "org.apache.maven", @@ -1577,8 +2615,14 @@ "version": "3.8.1", "purl": "pkg:maven/org.apache.maven/maven-builder-support@3.8.1", "type": "library", + "bom-ref": "pkg:maven/org.apache.maven/maven-builder-support@3.8.1", "scope": "required", - "bom-ref": "pkg:maven/org.apache.maven/maven-builder-support@3.8.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "1af4ec512b2675952af66164a610bca043a62ddfceea10d082a38dc4b4974e38" + } + ] }, { "group": "org.codehaus.plexus", @@ -1586,8 +2630,14 @@ "version": "1.25", "purl": "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.25", "type": "library", + "bom-ref": "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.25", "scope": "required", - "bom-ref": "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.25" + "hashes": [ + { + "alg": "SHA-256", + "content": "e80ac909af53b689563a2431af9d53e6ec5c82caf5b32a11c029fca18884fc82" + } + ] }, { "group": "org.sonatype.plexus", @@ -1595,8 +2645,14 @@ "version": "1.4", "purl": "pkg:maven/org.sonatype.plexus/plexus-sec-dispatcher@1.4", "type": "library", + "bom-ref": "pkg:maven/org.sonatype.plexus/plexus-sec-dispatcher@1.4", "scope": "required", - "bom-ref": "pkg:maven/org.sonatype.plexus/plexus-sec-dispatcher@1.4" + "hashes": [ + { + "alg": "SHA-256", + "content": "a652bc8bc584d8de8ae6a2b50f00f248a0230e048062abb6e73bac4d07ad84af" + } + ] }, { "group": "org.sonatype.plexus", @@ -1604,8 +2660,14 @@ "version": "1.4", "purl": "pkg:maven/org.sonatype.plexus/plexus-cipher@1.4", "type": "library", + "bom-ref": "pkg:maven/org.sonatype.plexus/plexus-cipher@1.4", "scope": "required", - "bom-ref": "pkg:maven/org.sonatype.plexus/plexus-cipher@1.4" + "hashes": [ + { + "alg": "SHA-256", + "content": "633d1db3235958cf69a4db38c7a279dced8714666bf0d28073c32229a2718837" + } + ] }, { "group": "org.apache.maven", @@ -1613,8 +2675,14 @@ "version": "3.8.1", "purl": "pkg:maven/org.apache.maven/maven-core@3.8.1", "type": "library", + "bom-ref": "pkg:maven/org.apache.maven/maven-core@3.8.1", "scope": "required", - "bom-ref": "pkg:maven/org.apache.maven/maven-core@3.8.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "635918aa4738430f81c4dec7c56998f6bd20696aad81148410dd6a823b74b7a3" + } + ] }, { "group": "org.apache.maven", @@ -1622,8 +2690,14 @@ "version": "3.8.1", "purl": "pkg:maven/org.apache.maven/maven-model@3.8.1", "type": "library", + "bom-ref": "pkg:maven/org.apache.maven/maven-model@3.8.1", "scope": "required", - "bom-ref": "pkg:maven/org.apache.maven/maven-model@3.8.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "23dc00a1ebfd1bd1dbb9ebb4446572a6ba804b5252d7cba3e99a5c2fe9cd494b" + } + ] }, { "group": "org.apache.maven", @@ -1631,8 +2705,14 @@ "version": "3.8.1", "purl": "pkg:maven/org.apache.maven/maven-repository-metadata@3.8.1", "type": "library", + "bom-ref": "pkg:maven/org.apache.maven/maven-repository-metadata@3.8.1", "scope": "required", - "bom-ref": "pkg:maven/org.apache.maven/maven-repository-metadata@3.8.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "0d92468de4cff3464f956cdd6044c717d1ccddf7b5fd53d90184dfa2eb86b381" + } + ] }, { "group": "org.apache.maven", @@ -1640,8 +2720,14 @@ "version": "3.8.1", "purl": "pkg:maven/org.apache.maven/maven-artifact@3.8.1", "type": "library", + "bom-ref": "pkg:maven/org.apache.maven/maven-artifact@3.8.1", "scope": "required", - "bom-ref": "pkg:maven/org.apache.maven/maven-artifact@3.8.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "fd6855903809b4e77002a7a9e60aa6975bd9046e07af215a6d2d15c60ec3f427" + } + ] }, { "group": "org.apache.maven", @@ -1649,8 +2735,14 @@ "version": "3.8.1", "purl": "pkg:maven/org.apache.maven/maven-plugin-api@3.8.1", "type": "library", + "bom-ref": "pkg:maven/org.apache.maven/maven-plugin-api@3.8.1", "scope": "required", - "bom-ref": "pkg:maven/org.apache.maven/maven-plugin-api@3.8.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "fb89f33cc2154de9cafae1bc2bce23f2784ff1f88ec0f654bf3efb09d6a63928" + } + ] }, { "group": "org.eclipse.sisu", @@ -1658,8 +2750,14 @@ "version": "0.3.4", "purl": "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.3.4", "type": "library", + "bom-ref": "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.3.4", "scope": "required", - "bom-ref": "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.3.4" + "hashes": [ + { + "alg": "SHA-256", + "content": "892dfcf9c0ab795cad559b5ff081f005a7cc13834bece92e4e6fe1bc619d83a0" + } + ] }, { "group": "org.codehaus.plexus", @@ -1667,8 +2765,14 @@ "version": "2.1.0", "purl": "pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0", "type": "library", + "bom-ref": "pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0", "scope": "required", - "bom-ref": "pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "0221fa6eecf3f22f70bc4789a437e8971a37285d40af43ab0be0a69dc2fecba8" + } + ] }, { "group": "org.codehaus.plexus", @@ -1676,8 +2780,14 @@ "version": "2.6.0", "purl": "pkg:maven/org.codehaus.plexus/plexus-classworlds@2.6.0", "type": "library", + "bom-ref": "pkg:maven/org.codehaus.plexus/plexus-classworlds@2.6.0", "scope": "required", - "bom-ref": "pkg:maven/org.codehaus.plexus/plexus-classworlds@2.6.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "0d458f6ef51992b68f3f67bcd2867f6231135e0ed885a94bd48e5c36d480a9b7" + } + ] }, { "group": "org.apache.maven", @@ -1685,8 +2795,14 @@ "version": "3.8.1", "purl": "pkg:maven/org.apache.maven/maven-model-builder@3.8.1", "type": "library", + "bom-ref": "pkg:maven/org.apache.maven/maven-model-builder@3.8.1", "scope": "required", - "bom-ref": "pkg:maven/org.apache.maven/maven-model-builder@3.8.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "753ae05791ea0517c042fd233c1af2db124db7b48239925b56cab73f2ac56d5d" + } + ] }, { "group": "org.apache.maven", @@ -1694,8 +2810,14 @@ "version": "3.8.1", "purl": "pkg:maven/org.apache.maven/maven-resolver-provider@3.8.1", "type": "library", + "bom-ref": "pkg:maven/org.apache.maven/maven-resolver-provider@3.8.1", "scope": "required", - "bom-ref": "pkg:maven/org.apache.maven/maven-resolver-provider@3.8.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "bd7822b5883e0cea9fca95b6c7f75ceac2cd9d5051fb93d402c9836e58360cf2" + } + ] }, { "group": "org.apache.maven.resolver", @@ -1703,8 +2825,14 @@ "version": "1.6.2", "purl": "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.6.2", "type": "library", + "bom-ref": "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.6.2", "scope": "required", - "bom-ref": "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.6.2" + "hashes": [ + { + "alg": "SHA-256", + "content": "167872c8192069cd33d95a19695c1db9f792294254a7c1007e5c81b9b9e09d6a" + } + ] }, { "group": "org.apache.maven.resolver", @@ -1712,8 +2840,14 @@ "version": "1.6.2", "purl": "pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.6.2", "type": "library", + "bom-ref": "pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.6.2", "scope": "required", - "bom-ref": "pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.6.2" + "hashes": [ + { + "alg": "SHA-256", + "content": "d349392330b7735f9cce688ddedfdd8d96ce74897e3b996c61a09eeb0b599fca" + } + ] }, { "group": "org.apache.maven.resolver", @@ -1721,8 +2855,14 @@ "version": "1.6.2", "purl": "pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.6.2", "type": "library", + "bom-ref": "pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.6.2", "scope": "required", - "bom-ref": "pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.6.2" + "hashes": [ + { + "alg": "SHA-256", + "content": "a7b85498cf9da664e9a0f8a6cd0b99532cacdd2b41a50d8e1de514ac5c64496a" + } + ] }, { "group": "org.apache.maven.resolver", @@ -1730,8 +2870,14 @@ "version": "1.6.2", "purl": "pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.6.2", "type": "library", + "bom-ref": "pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.6.2", "scope": "required", - "bom-ref": "pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.6.2" + "hashes": [ + { + "alg": "SHA-256", + "content": "e531a9dc8c35f55d444bff04751c75848c3fd3d7fe93d62730410e30667961c8" + } + ] }, { "group": "org.apache.maven.shared", @@ -1739,8 +2885,14 @@ "version": "3.2.1", "purl": "pkg:maven/org.apache.maven.shared/maven-shared-utils@3.2.1", "type": "library", + "bom-ref": "pkg:maven/org.apache.maven.shared/maven-shared-utils@3.2.1", "scope": "required", - "bom-ref": "pkg:maven/org.apache.maven.shared/maven-shared-utils@3.2.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "8b960b4297a3225d5610e7a7b4fd0b3cc47df2bf36db3dc2f7121b9c0bada051" + } + ] }, { "group": "com.google.inject", @@ -1748,8 +2900,14 @@ "version": "4.2.1", "purl": "pkg:maven/com.google.inject/guice@4.2.1", "type": "library", + "bom-ref": "pkg:maven/com.google.inject/guice@4.2.1", "scope": "required", - "bom-ref": "pkg:maven/com.google.inject/guice@4.2.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "92277e95f88594dae4534ca9f3b6e9290f1ea29cb0577ef43e8b6c0b4beeb53e" + } + ] }, { "group": "aopalliance", @@ -1757,8 +2915,14 @@ "version": "1.0", "purl": "pkg:maven/aopalliance/aopalliance@1.0", "type": "library", + "bom-ref": "pkg:maven/aopalliance/aopalliance@1.0", "scope": "required", - "bom-ref": "pkg:maven/aopalliance/aopalliance@1.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "0e26e161ee03141cfadfd4eec6285eccc621a4877722bfb09a4ec2958e4dcf57" + } + ] }, { "group": "com.google.guava", @@ -1766,8 +2930,14 @@ "version": "25.1-android", "purl": "pkg:maven/com.google.guava/guava@25.1-android", "type": "library", + "bom-ref": "pkg:maven/com.google.guava/guava@25.1-android", "scope": "required", - "bom-ref": "pkg:maven/com.google.guava/guava@25.1-android" + "hashes": [ + { + "alg": "SHA-256", + "content": "b6eeecdbad9a9be217583a8f6d5bb447426d62f63fe9b114beeb6b499efb2560" + } + ] }, { "group": "com.google.code.findbugs", @@ -1775,8 +2945,14 @@ "version": "3.0.2", "purl": "pkg:maven/com.google.code.findbugs/jsr305@3.0.2", "type": "library", + "bom-ref": "pkg:maven/com.google.code.findbugs/jsr305@3.0.2", "scope": "required", - "bom-ref": "pkg:maven/com.google.code.findbugs/jsr305@3.0.2" + "hashes": [ + { + "alg": "SHA-256", + "content": "b9748bf56c300be0f44a20ba5b99676565bb215d693ce4067097d4b14e4185d5" + } + ] }, { "group": "org.checkerframework", @@ -1784,8 +2960,14 @@ "version": "2.0.0", "purl": "pkg:maven/org.checkerframework/checker-compat-qual@2.0.0", "type": "library", + "bom-ref": "pkg:maven/org.checkerframework/checker-compat-qual@2.0.0", "scope": "required", - "bom-ref": "pkg:maven/org.checkerframework/checker-compat-qual@2.0.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "1e5bb65bf0acbcf01e87f77aa9281738846be042ee776e0b05f06f95ed94d4c9" + } + ] }, { "group": "com.google.j2objc", @@ -1793,8 +2975,14 @@ "version": "1.1", "purl": "pkg:maven/com.google.j2objc/j2objc-annotations@1.1", "type": "library", + "bom-ref": "pkg:maven/com.google.j2objc/j2objc-annotations@1.1", "scope": "required", - "bom-ref": "pkg:maven/com.google.j2objc/j2objc-annotations@1.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "f41a81c6cadc39388d14b4c8c56aeda722511c02507f9ac5f3479db3174f2406" + } + ] }, { "group": "org.codehaus.mojo", @@ -1802,8 +2990,14 @@ "version": "1.14", "purl": "pkg:maven/org.codehaus.mojo/animal-sniffer-annotations@1.14", "type": "library", + "bom-ref": "pkg:maven/org.codehaus.mojo/animal-sniffer-annotations@1.14", "scope": "required", - "bom-ref": "pkg:maven/org.codehaus.mojo/animal-sniffer-annotations@1.14" + "hashes": [ + { + "alg": "SHA-256", + "content": "982a7061046068098a95334dc007d11d31462628ac1bf904b7bd1b28aef00ebc" + } + ] }, { "group": "commons-cli", @@ -1811,8 +3005,14 @@ "version": "1.4", "purl": "pkg:maven/commons-cli/commons-cli@1.4", "type": "library", + "bom-ref": "pkg:maven/commons-cli/commons-cli@1.4", "scope": "required", - "bom-ref": "pkg:maven/commons-cli/commons-cli@1.4" + "hashes": [ + { + "alg": "SHA-256", + "content": "4d5698c601e30825d885d7f2aee8a1a23ddf07eff5d9468dbb1c68f33739c15b" + } + ] }, { "group": "org.apache.maven.resolver", @@ -1820,8 +3020,14 @@ "version": "1.6.2", "purl": "pkg:maven/org.apache.maven.resolver/maven-resolver-connector-basic@1.6.2", "type": "library", + "bom-ref": "pkg:maven/org.apache.maven.resolver/maven-resolver-connector-basic@1.6.2", "scope": "required", - "bom-ref": "pkg:maven/org.apache.maven.resolver/maven-resolver-connector-basic@1.6.2" + "hashes": [ + { + "alg": "SHA-256", + "content": "93a7d6623696b7542f7a778999a7591c787400d2b1cfb9ed702847ae74fe04f6" + } + ] }, { "group": "org.apache.maven.resolver", @@ -1829,8 +3035,14 @@ "version": "1.6.2", "purl": "pkg:maven/org.apache.maven.resolver/maven-resolver-transport-wagon@1.6.2", "type": "library", + "bom-ref": "pkg:maven/org.apache.maven.resolver/maven-resolver-transport-wagon@1.6.2", "scope": "required", - "bom-ref": "pkg:maven/org.apache.maven.resolver/maven-resolver-transport-wagon@1.6.2" + "hashes": [ + { + "alg": "SHA-256", + "content": "69ac64f7a61830d1b609b75f061c5f37bd841d204494d91107a4976d65ba74dc" + } + ] }, { "group": "org.apache.maven.wagon", @@ -1838,8 +3050,14 @@ "version": "3.4.3", "purl": "pkg:maven/org.apache.maven.wagon/wagon-http@3.4.3", "type": "library", + "bom-ref": "pkg:maven/org.apache.maven.wagon/wagon-http@3.4.3", "scope": "required", - "bom-ref": "pkg:maven/org.apache.maven.wagon/wagon-http@3.4.3" + "hashes": [ + { + "alg": "SHA-256", + "content": "dc73d554018c277bb34f2d8c0f22c48b989f4c1ebfc72acccceb1a5596f9ca66" + } + ] }, { "group": "org.apache.maven.wagon", @@ -1847,8 +3065,14 @@ "version": "3.4.3", "purl": "pkg:maven/org.apache.maven.wagon/wagon-http-shared@3.4.3", "type": "library", + "bom-ref": "pkg:maven/org.apache.maven.wagon/wagon-http-shared@3.4.3", "scope": "required", - "bom-ref": "pkg:maven/org.apache.maven.wagon/wagon-http-shared@3.4.3" + "hashes": [ + { + "alg": "SHA-256", + "content": "bb98ed8606e6fc4aeb551149d5699f33c67f940eb96daca3a6cdafd899324118" + } + ] }, { "group": "org.jsoup", @@ -1856,8 +3080,14 @@ "version": "1.12.1", "purl": "pkg:maven/org.jsoup/jsoup@1.12.1", "type": "library", + "bom-ref": "pkg:maven/org.jsoup/jsoup@1.12.1", "scope": "required", - "bom-ref": "pkg:maven/org.jsoup/jsoup@1.12.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "d18bc1810d6619608bf6eeb373d533bbbb331a419c05f5088e88dd6e9c5a68cf" + } + ] }, { "group": "org.apache.httpcomponents", @@ -1865,8 +3095,14 @@ "version": "4.5.13", "purl": "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13", "type": "library", + "bom-ref": "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13", "scope": "required", - "bom-ref": "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13" + "hashes": [ + { + "alg": "SHA-256", + "content": "aa8533703665c45b418af29b71d92f56ddba39a83daf856072c947685d37a780" + } + ] }, { "group": "org.apache.httpcomponents", @@ -1874,8 +3110,14 @@ "version": "4.4.14", "purl": "pkg:maven/org.apache.httpcomponents/httpcore@4.4.14", "type": "library", + "bom-ref": "pkg:maven/org.apache.httpcomponents/httpcore@4.4.14", "scope": "required", - "bom-ref": "pkg:maven/org.apache.httpcomponents/httpcore@4.4.14" + "hashes": [ + { + "alg": "SHA-256", + "content": "1f782fc7fa0aa6db8929e7e59c0c88b597c9fbb6bf1136f8adc609945c83282e" + } + ] }, { "group": "commons-codec", @@ -1883,8 +3125,14 @@ "version": "1.11", "purl": "pkg:maven/commons-codec/commons-codec@1.11", "type": "library", + "bom-ref": "pkg:maven/commons-codec/commons-codec@1.11", "scope": "required", - "bom-ref": "pkg:maven/commons-codec/commons-codec@1.11" + "hashes": [ + { + "alg": "SHA-256", + "content": "d885eea5759a9df7787fdb132d42e443705fc925df49cb14ef00dc85eeabed82" + } + ] }, { "group": "org.apache.maven.wagon", @@ -1892,8 +3140,14 @@ "version": "3.4.3", "purl": "pkg:maven/org.apache.maven.wagon/wagon-provider-api@3.4.3", "type": "library", + "bom-ref": "pkg:maven/org.apache.maven.wagon/wagon-provider-api@3.4.3", "scope": "required", - "bom-ref": "pkg:maven/org.apache.maven.wagon/wagon-provider-api@3.4.3" + "hashes": [ + { + "alg": "SHA-256", + "content": "29232ca8f8e443f952d4d6c1829aafb49b3dabc23c308d70a329698cdef3d4bd" + } + ] }, { "group": "org.apache.maven.wagon", @@ -1901,8 +3155,14 @@ "version": "3.4.3", "purl": "pkg:maven/org.apache.maven.wagon/wagon-file@3.4.3", "type": "library", + "bom-ref": "pkg:maven/org.apache.maven.wagon/wagon-file@3.4.3", "scope": "required", - "bom-ref": "pkg:maven/org.apache.maven.wagon/wagon-file@3.4.3" + "hashes": [ + { + "alg": "SHA-256", + "content": "921a96e3e6e7860a984b9153ecee636c67f7933b16e76ec62e9ae50fd0d991ba" + } + ] }, { "group": "io.quarkus", @@ -1910,8 +3170,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-bootstrap-gradle-resolver@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-bootstrap-gradle-resolver@2.0.2.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-bootstrap-gradle-resolver@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "2e74280c166cb42551498f707ccfee61ad33a6ef1f43aba928134990153bd4ee" + } + ] }, { "group": "io.quarkus", @@ -1919,8 +3185,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-devtools-utilities@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-devtools-utilities@2.0.2.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-devtools-utilities@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "ce8a21bfa9bca0248be35a37e209b6b183dc4b34689cf6feef2b2e01b8f3db24" + } + ] }, { "group": "org.eclipse.sisu", @@ -1928,8 +3200,14 @@ "version": "0.3.4", "purl": "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.3.4", "type": "library", + "bom-ref": "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.3.4", "scope": "required", - "bom-ref": "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.3.4" + "hashes": [ + { + "alg": "SHA-256", + "content": "03f86159b252bd4b293683e4a8f0dc57ea33bf46dca5df1acfc1b0b4c7476398" + } + ] }, { "group": "io.quarkus", @@ -1937,8 +3215,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-builder@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-builder@2.0.2.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-builder@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "0cea3c6b3c8fb29c4b5e627623908164a802691261a4a17c10bb53c816bb4a6b" + } + ] }, { "group": "org.junit.platform", @@ -1946,8 +3230,14 @@ "version": "1.7.2", "purl": "pkg:maven/org.junit.platform/junit-platform-launcher@1.7.2", "type": "library", + "bom-ref": "pkg:maven/org.junit.platform/junit-platform-launcher@1.7.2", "scope": "required", - "bom-ref": "pkg:maven/org.junit.platform/junit-platform-launcher@1.7.2" + "hashes": [ + { + "alg": "SHA-256", + "content": "e6277701ce25d3aa3b0944d429fa068687004e560b7cb00691d6bc8b26e435e9" + } + ] }, { "group": "org.junit", @@ -1955,8 +3245,14 @@ "version": "5.7.2", "purl": "pkg:maven/org.junit/junit-bom@5.7.2", "type": "library", + "bom-ref": "pkg:maven/org.junit/junit-bom@5.7.2", "scope": "required", - "bom-ref": "pkg:maven/org.junit/junit-bom@5.7.2" + "hashes": [ + { + "alg": "SHA-256", + "content": "36067e7ca222d8f77f7ab2022c57b10637f9a35c2b4343d09bc67311def7b7dc" + } + ] }, { "group": "org.junit.jupiter", @@ -1964,8 +3260,14 @@ "version": "5.7.2", "purl": "pkg:maven/org.junit.jupiter/junit-jupiter@5.7.2", "type": "library", + "bom-ref": "pkg:maven/org.junit.jupiter/junit-jupiter@5.7.2", "scope": "required", - "bom-ref": "pkg:maven/org.junit.jupiter/junit-jupiter@5.7.2" + "hashes": [ + { + "alg": "SHA-256", + "content": "0553c80cc0fbddc1114db5bb4816cc24cc0c876891d0a238a7bd35e1059723d3" + } + ] }, { "group": "org.junit.jupiter", @@ -1973,8 +3275,14 @@ "version": "5.7.2", "purl": "pkg:maven/org.junit.jupiter/junit-jupiter-api@5.7.2", "type": "library", + "bom-ref": "pkg:maven/org.junit.jupiter/junit-jupiter-api@5.7.2", "scope": "required", - "bom-ref": "pkg:maven/org.junit.jupiter/junit-jupiter-api@5.7.2" + "hashes": [ + { + "alg": "SHA-256", + "content": "5e167a2fc374270965aaa4e1c2efa4951a9d60268da0a80fbf7898dbf9a3a2c8" + } + ] }, { "group": "org.junit.jupiter", @@ -1982,8 +3290,14 @@ "version": "5.7.2", "purl": "pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.7.2", "type": "library", + "bom-ref": "pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.7.2", "scope": "required", - "bom-ref": "pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.7.2" + "hashes": [ + { + "alg": "SHA-256", + "content": "e726eee7cc36a0d5104fe1bd234fd61a8bec6dabca56299f86263a265c07a5c8" + } + ] }, { "group": "org.junit.jupiter", @@ -1991,8 +3305,14 @@ "version": "5.7.2", "purl": "pkg:maven/org.junit.jupiter/junit-jupiter-params@5.7.2", "type": "library", + "bom-ref": "pkg:maven/org.junit.jupiter/junit-jupiter-params@5.7.2", "scope": "required", - "bom-ref": "pkg:maven/org.junit.jupiter/junit-jupiter-params@5.7.2" + "hashes": [ + { + "alg": "SHA-256", + "content": "7d4732347008f6eef3428078582203423c0be01aad09256d5e5023da0fd76e4d" + } + ] }, { "group": "org.junit.platform", @@ -2000,8 +3320,14 @@ "version": "1.7.2", "purl": "pkg:maven/org.junit.platform/junit-platform-engine@1.7.2", "type": "library", + "bom-ref": "pkg:maven/org.junit.platform/junit-platform-engine@1.7.2", "scope": "required", - "bom-ref": "pkg:maven/org.junit.platform/junit-platform-engine@1.7.2" + "hashes": [ + { + "alg": "SHA-256", + "content": "efc3f3220e47989db48d427b6fbf1361f7ed1c192937c80d22ee5258f1ec641d" + } + ] }, { "group": "org.junit.platform", @@ -2009,8 +3335,14 @@ "version": "1.7.2", "purl": "pkg:maven/org.junit.platform/junit-platform-commons@1.7.2", "type": "library", + "bom-ref": "pkg:maven/org.junit.platform/junit-platform-commons@1.7.2", "scope": "required", - "bom-ref": "pkg:maven/org.junit.platform/junit-platform-commons@1.7.2" + "hashes": [ + { + "alg": "SHA-256", + "content": "c8bf2c027bb1f8284bec7c821d36df26f579ad3e5d7629fad193953639e2963a" + } + ] }, { "group": "org.apiguardian", @@ -2018,8 +3350,14 @@ "version": "1.1.0", "purl": "pkg:maven/org.apiguardian/apiguardian-api@1.1.0", "type": "library", + "bom-ref": "pkg:maven/org.apiguardian/apiguardian-api@1.1.0", "scope": "required", - "bom-ref": "pkg:maven/org.apiguardian/apiguardian-api@1.1.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "20449bb8023ab658018bfd91b5943ea198d34fe46b3c905338701092e0f5fc80" + } + ] }, { "group": "org.opentest4j", @@ -2027,8 +3365,14 @@ "version": "1.2.0", "purl": "pkg:maven/org.opentest4j/opentest4j@1.2.0", "type": "library", + "bom-ref": "pkg:maven/org.opentest4j/opentest4j@1.2.0", "scope": "required", - "bom-ref": "pkg:maven/org.opentest4j/opentest4j@1.2.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "6d86f077185a962c9500d35a50e32dbaaf5364a1eb9ccf4eea4437ca126f754f" + } + ] }, { "group": "io.quarkus", @@ -2036,8 +3380,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-narayana-jta-deployment@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-narayana-jta-deployment@2.0.2.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-narayana-jta-deployment@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "72b740382bc19bb7f991e8ea9113a59ecae0fa9d02267fda13a2695584911a37" + } + ] }, { "group": "io.quarkus", @@ -2045,8 +3395,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-arc-deployment@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-arc-deployment@2.0.2.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-arc-deployment@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "2842063ad9da4ec68dca08769c36121695bef39207e79a7feb345ece73c3edc6" + } + ] }, { "group": "io.quarkus", @@ -2054,8 +3410,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-vertx-http-dev-console-spi@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-vertx-http-dev-console-spi@2.0.2.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-vertx-http-dev-console-spi@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "4d3a59117e3beb43d5643a6314e9bb482b529ae2b219ee4dfc2be5108d49e09a" + } + ] }, { "group": "io.quarkus.arc", @@ -2063,8 +3425,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus.arc/arc-processor@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus.arc/arc-processor@2.0.2.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus.arc/arc-processor@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "7956865dcd107ed97018c5ccca052f895a5e22ee5bd9459371edda952478cfd6" + } + ] }, { "group": "io.quarkus", @@ -2072,8 +3440,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-mutiny-deployment@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-mutiny-deployment@2.0.2.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-mutiny-deployment@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "4ef40118bd1d35409f1b44d4d0040532e496fe1ad1313b4bbf32b9bbfa6869a5" + } + ] }, { "group": "io.quarkus", @@ -2081,8 +3455,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-smallrye-context-propagation-deployment@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-smallrye-context-propagation-deployment@2.0.2.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-smallrye-context-propagation-deployment@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "fe29c8de492b4aaa727bfe971e6cb38680f1a190cc48e0084f8cea7a11a3f077" + } + ] }, { "group": "io.quarkus", @@ -2090,8 +3470,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-agroal-deployment@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-agroal-deployment@2.0.2.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-agroal-deployment@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "30c6f0310e3d205be81858303e26e5f5dfd00a1de0645c57ab234619bfec0126" + } + ] }, { "group": "io.quarkus", @@ -2099,8 +3485,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-datasource-deployment@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-datasource-deployment@2.0.2.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-datasource-deployment@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "b3c9d72ccd890189e7b2a399628d8f25cc39fa9a1f942d4f9eb050296ae8cf53" + } + ] }, { "group": "io.quarkus", @@ -2108,8 +3500,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-datasource-deployment-spi@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-datasource-deployment-spi@2.0.2.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-datasource-deployment-spi@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "9e251f8b44174660c3d6db81d09567b5cdacbd3bd3d86a7a9585472b0311bfb6" + } + ] }, { "group": "io.quarkus", @@ -2117,8 +3515,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-agroal-spi@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-agroal-spi@2.0.2.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-agroal-spi@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "866519601a62fef570340577923e890475bd9d17defe16d596a0f9beb7f18bc5" + } + ] }, { "group": "io.quarkus", @@ -2126,8 +3530,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-credentials-deployment@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-credentials-deployment@2.0.2.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-credentials-deployment@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "c794d1b4f732bda972a20d0afd7f88e2b09772d39986fe66198be0024ff2f4eb" + } + ] }, { "group": "io.quarkus", @@ -2135,8 +3545,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-smallrye-health-spi@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-smallrye-health-spi@2.0.2.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-smallrye-health-spi@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "6e06f30a2ddf5c449af7ac341b0637ca5af58b24e7317b54392fbbbe3282f9b3" + } + ] }, { "group": "io.quarkus", @@ -2144,8 +3560,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-caffeine-deployment@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-caffeine-deployment@2.0.2.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-caffeine-deployment@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "b5ec996f16d4555f7a84287eb4adaf5b2d191696bc22ac3b9e6bd6aad0de27ba" + } + ] }, { "group": "io.quarkus", @@ -2153,8 +3575,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-panache-hibernate-common-deployment@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-panache-hibernate-common-deployment@2.0.2.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-panache-hibernate-common-deployment@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "568067174ce357bf3e0c18d453679663e9d6b73eea3803895032929e6feeddaa" + } + ] }, { "group": "io.quarkus", @@ -2162,8 +3590,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-panache-hibernate-common@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-panache-hibernate-common@2.0.2.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-panache-hibernate-common@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "497b0a7aee81a41e671cdb80017165f78d6fa817c6ab690458145178a3214a9c" + } + ] }, { "group": "io.quarkus", @@ -2171,8 +3605,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-panache-common@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-panache-common@2.0.2.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-panache-common@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "3d0df22ee49ef52d77df941dd97483cbcc16857f2ded6e74e43083f796b0c78c" + } + ] }, { "group": "io.quarkus", @@ -2180,8 +3620,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-panache-common-deployment@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-panache-common-deployment@2.0.2.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-panache-common-deployment@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "3e045616c2f54d71f25b1facb081024d5b70c02689fffd2bad5c5a7ce050177b" + } + ] } ], "dependencies": [ diff --git a/test/providers/tst_manifests/gradle/deps_with_ignore_named_params/expected_component_sbom.json b/test/providers/tst_manifests/gradle/deps_with_ignore_named_params/expected_component_sbom.json index ef2291f2..043b6432 100644 --- a/test/providers/tst_manifests/gradle/deps_with_ignore_named_params/expected_component_sbom.json +++ b/test/providers/tst_manifests/gradle/deps_with_ignore_named_params/expected_component_sbom.json @@ -1,179 +1,245 @@ { - "bomFormat": "CycloneDX", - "specVersion": "1.4", - "version": 1, - "metadata": { - "timestamp": "2023-08-07T00:00:00.000Z", - "component": { - "group": "org.acme.dbaas", - "name": "postgresql-orm-quarkus", - "version": "1.0.0-SNAPSHOT", - "purl": "pkg:maven/org.acme.dbaas/postgresql-orm-quarkus@1.0.0-SNAPSHOT", - "type": "application", - "bom-ref": "pkg:maven/org.acme.dbaas/postgresql-orm-quarkus@1.0.0-SNAPSHOT" - } - }, - "components": [ - { - "group": "io.quarkus", - "name": "quarkus-hibernate-orm", - "version": "2.13.5.Final", - "purl": "pkg:maven/io.quarkus/quarkus-hibernate-orm@2.13.5.Final", - "type": "library", - "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-hibernate-orm@2.13.5.Final" - }, - { - "group": "io.quarkus", - "name": "quarkus-agroal", - "version": "2.13.5.Final", - "purl": "pkg:maven/io.quarkus/quarkus-agroal@2.13.5.Final", - "type": "library", - "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-agroal@2.13.5.Final" - }, - { - "group": "io.quarkus", - "name": "quarkus-resteasy", - "version": "2.13.7.Final", - "purl": "pkg:maven/io.quarkus/quarkus-resteasy@2.13.7.Final", - "type": "library", - "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-resteasy@2.13.7.Final" - }, - { - "group": "io.quarkus", - "name": "quarkus-resteasy-jackson", - "version": "2.13.5.Final", - "purl": "pkg:maven/io.quarkus/quarkus-resteasy-jackson@2.13.5.Final", - "type": "library", - "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-resteasy-jackson@2.13.5.Final" - }, - { - "group": "io.quarkus", - "name": "quarkus-jdbc-postgresql", - "version": "2.13.5.Final", - "purl": "pkg:maven/io.quarkus/quarkus-jdbc-postgresql@2.13.5.Final", - "type": "library", - "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-jdbc-postgresql@2.13.5.Final" - }, - { - "group": "io.quarkus", - "name": "quarkus-vertx-http", - "version": "2.13.7.Final", - "purl": "pkg:maven/io.quarkus/quarkus-vertx-http@2.13.7.Final", - "type": "library", - "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-vertx-http@2.13.7.Final" - }, - { - "group": "io.quarkus", - "name": "quarkus-kubernetes-service-binding", - "version": "2.13.5.Final", - "purl": "pkg:maven/io.quarkus/quarkus-kubernetes-service-binding@2.13.5.Final", - "type": "library", - "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-kubernetes-service-binding@2.13.5.Final" - }, - { - "group": "io.quarkus", - "name": "quarkus-container-image-docker", - "version": "2.13.5.Final", - "purl": "pkg:maven/io.quarkus/quarkus-container-image-docker@2.13.5.Final", - "type": "library", - "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-container-image-docker@2.13.5.Final" - }, - { - "group": "jakarta.validation", - "name": "jakarta.validation-api", - "version": "2.0.2", - "purl": "pkg:maven/jakarta.validation/jakarta.validation-api@2.0.2", - "type": "library", - "scope": "required", - "bom-ref": "pkg:maven/jakarta.validation/jakarta.validation-api@2.0.2" - }, - { - "group": "io.quarkus", - "name": "quarkus-resteasy-multipart", - "version": "2.13.7.Final", - "purl": "pkg:maven/io.quarkus/quarkus-resteasy-multipart@2.13.7.Final", - "type": "library", - "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-resteasy-multipart@2.13.7.Final" - }, - { - "group": "io.quarkus", - "name": "quarkus-hibernate-orm-deployment", - "version": "2.0.2.Final", - "purl": "pkg:maven/io.quarkus/quarkus-hibernate-orm-deployment@2.0.2.Final", - "type": "library", - "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-hibernate-orm-deployment@2.0.2.Final" - } - ], - "dependencies": [ - { - "ref": "pkg:maven/org.acme.dbaas/postgresql-orm-quarkus@1.0.0-SNAPSHOT", - "dependsOn": [ - "pkg:maven/io.quarkus/quarkus-hibernate-orm@2.13.5.Final", - "pkg:maven/io.quarkus/quarkus-agroal@2.13.5.Final", - "pkg:maven/io.quarkus/quarkus-resteasy@2.13.7.Final", - "pkg:maven/io.quarkus/quarkus-resteasy-jackson@2.13.5.Final", - "pkg:maven/io.quarkus/quarkus-jdbc-postgresql@2.13.5.Final", - "pkg:maven/io.quarkus/quarkus-vertx-http@2.13.7.Final", - "pkg:maven/io.quarkus/quarkus-kubernetes-service-binding@2.13.5.Final", - "pkg:maven/io.quarkus/quarkus-container-image-docker@2.13.5.Final", - "pkg:maven/jakarta.validation/jakarta.validation-api@2.0.2", - "pkg:maven/io.quarkus/quarkus-resteasy-multipart@2.13.7.Final", - "pkg:maven/io.quarkus/quarkus-hibernate-orm-deployment@2.0.2.Final" - ] - }, - { - "ref": "pkg:maven/io.quarkus/quarkus-hibernate-orm@2.13.5.Final", - "dependsOn": [] - }, - { - "ref": "pkg:maven/io.quarkus/quarkus-agroal@2.13.5.Final", - "dependsOn": [] - }, - { - "ref": "pkg:maven/io.quarkus/quarkus-resteasy@2.13.7.Final", - "dependsOn": [] - }, - { - "ref": "pkg:maven/io.quarkus/quarkus-resteasy-jackson@2.13.5.Final", - "dependsOn": [] - }, - { - "ref": "pkg:maven/io.quarkus/quarkus-jdbc-postgresql@2.13.5.Final", - "dependsOn": [] - }, - { - "ref": "pkg:maven/io.quarkus/quarkus-vertx-http@2.13.7.Final", - "dependsOn": [] - }, - { - "ref": "pkg:maven/io.quarkus/quarkus-kubernetes-service-binding@2.13.5.Final", - "dependsOn": [] - }, - { - "ref": "pkg:maven/io.quarkus/quarkus-container-image-docker@2.13.5.Final", - "dependsOn": [] - }, - { - "ref": "pkg:maven/jakarta.validation/jakarta.validation-api@2.0.2", - "dependsOn": [] - }, - { - "ref": "pkg:maven/io.quarkus/quarkus-resteasy-multipart@2.13.7.Final", - "dependsOn": [] - }, - { - "ref": "pkg:maven/io.quarkus/quarkus-hibernate-orm-deployment@2.0.2.Final", - "dependsOn": [] - } - ] + "bomFormat": "CycloneDX", + "specVersion": "1.4", + "version": 1, + "metadata": { + "timestamp": "2023-08-07T00:00:00.000Z", + "component": { + "group": "org.acme.dbaas", + "name": "postgresql-orm-quarkus", + "version": "1.0.0-SNAPSHOT", + "purl": "pkg:maven/org.acme.dbaas/postgresql-orm-quarkus@1.0.0-SNAPSHOT", + "type": "application", + "bom-ref": "pkg:maven/org.acme.dbaas/postgresql-orm-quarkus@1.0.0-SNAPSHOT" + } + }, + "components": [ + { + "group": "io.quarkus", + "name": "quarkus-hibernate-orm", + "version": "2.13.5.Final", + "purl": "pkg:maven/io.quarkus/quarkus-hibernate-orm@2.13.5.Final", + "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-hibernate-orm@2.13.5.Final", + "scope": "required", + "hashes": [ + { + "alg": "SHA-256", + "content": "79056c3042ee5c1bf05766340e4ae54fdde64f08036ec3e7eade6fb1c1d74375" + } + ] + }, + { + "group": "io.quarkus", + "name": "quarkus-agroal", + "version": "2.13.5.Final", + "purl": "pkg:maven/io.quarkus/quarkus-agroal@2.13.5.Final", + "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-agroal@2.13.5.Final", + "scope": "required", + "hashes": [ + { + "alg": "SHA-256", + "content": "373e7e3e0789069ac3b414658fdc8d2e78fa29ed649672443833fd61653e8239" + } + ] + }, + { + "group": "io.quarkus", + "name": "quarkus-resteasy", + "version": "2.13.7.Final", + "purl": "pkg:maven/io.quarkus/quarkus-resteasy@2.13.7.Final", + "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-resteasy@2.13.7.Final", + "scope": "required", + "hashes": [ + { + "alg": "SHA-256", + "content": "c66681b1e334d3e1b1d6b438044ac660b020371f65b9441bd195c1811ac6d651" + } + ] + }, + { + "group": "io.quarkus", + "name": "quarkus-resteasy-jackson", + "version": "2.13.5.Final", + "purl": "pkg:maven/io.quarkus/quarkus-resteasy-jackson@2.13.5.Final", + "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-resteasy-jackson@2.13.5.Final", + "scope": "required", + "hashes": [ + { + "alg": "SHA-256", + "content": "dd61825bd9a8c2f962121098870239a0200b2d71fe004b00fb572414b40d422f" + } + ] + }, + { + "group": "io.quarkus", + "name": "quarkus-jdbc-postgresql", + "version": "2.13.5.Final", + "purl": "pkg:maven/io.quarkus/quarkus-jdbc-postgresql@2.13.5.Final", + "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-jdbc-postgresql@2.13.5.Final", + "scope": "required", + "hashes": [ + { + "alg": "SHA-256", + "content": "a1af9f5bef767f20b966430723412779f71275106e66c4e80dad67d0874881d6" + } + ] + }, + { + "group": "io.quarkus", + "name": "quarkus-vertx-http", + "version": "2.13.7.Final", + "purl": "pkg:maven/io.quarkus/quarkus-vertx-http@2.13.7.Final", + "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-vertx-http@2.13.7.Final", + "scope": "required", + "hashes": [ + { + "alg": "SHA-256", + "content": "fe3e832b2816256f627f93810d609a1ff732b9ba5ef7109826a19af8b1ac7310" + } + ] + }, + { + "group": "io.quarkus", + "name": "quarkus-kubernetes-service-binding", + "version": "2.13.5.Final", + "purl": "pkg:maven/io.quarkus/quarkus-kubernetes-service-binding@2.13.5.Final", + "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-kubernetes-service-binding@2.13.5.Final", + "scope": "required", + "hashes": [ + { + "alg": "SHA-256", + "content": "33fe80f8a1666b04c4ffa621d46f3b7fbb6af343194db24e81d1ffb9065bb0b6" + } + ] + }, + { + "group": "io.quarkus", + "name": "quarkus-container-image-docker", + "version": "2.13.5.Final", + "purl": "pkg:maven/io.quarkus/quarkus-container-image-docker@2.13.5.Final", + "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-container-image-docker@2.13.5.Final", + "scope": "required", + "hashes": [ + { + "alg": "SHA-256", + "content": "340cc17319511435110f74a594c065fb8e09b4cd054054df810bbe0ff7754e16" + } + ] + }, + { + "group": "jakarta.validation", + "name": "jakarta.validation-api", + "version": "2.0.2", + "purl": "pkg:maven/jakarta.validation/jakarta.validation-api@2.0.2", + "type": "library", + "bom-ref": "pkg:maven/jakarta.validation/jakarta.validation-api@2.0.2", + "scope": "required", + "hashes": [ + { + "alg": "SHA-256", + "content": "a8c2b114508ccd20562239505b9732776d3371aaea137b265a0548f456475d06" + } + ] + }, + { + "group": "io.quarkus", + "name": "quarkus-resteasy-multipart", + "version": "2.13.7.Final", + "purl": "pkg:maven/io.quarkus/quarkus-resteasy-multipart@2.13.7.Final", + "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-resteasy-multipart@2.13.7.Final", + "scope": "required", + "hashes": [ + { + "alg": "SHA-256", + "content": "1dba08c004cdf3d1137882fb0c55b2c251d9d4c3c8597d9cdcec5e8488a6bb4c" + } + ] + }, + { + "group": "io.quarkus", + "name": "quarkus-hibernate-orm-deployment", + "version": "2.0.2.Final", + "purl": "pkg:maven/io.quarkus/quarkus-hibernate-orm-deployment@2.0.2.Final", + "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-hibernate-orm-deployment@2.0.2.Final", + "scope": "required", + "hashes": [ + { + "alg": "SHA-256", + "content": "dcdd842c6024cbc027f0e9a5374a84461243343a83c295192e6dc93d10d873d9" + } + ] + } + ], + "dependencies": [ + { + "ref": "pkg:maven/org.acme.dbaas/postgresql-orm-quarkus@1.0.0-SNAPSHOT", + "dependsOn": [ + "pkg:maven/io.quarkus/quarkus-hibernate-orm@2.13.5.Final", + "pkg:maven/io.quarkus/quarkus-agroal@2.13.5.Final", + "pkg:maven/io.quarkus/quarkus-resteasy@2.13.7.Final", + "pkg:maven/io.quarkus/quarkus-resteasy-jackson@2.13.5.Final", + "pkg:maven/io.quarkus/quarkus-jdbc-postgresql@2.13.5.Final", + "pkg:maven/io.quarkus/quarkus-vertx-http@2.13.7.Final", + "pkg:maven/io.quarkus/quarkus-kubernetes-service-binding@2.13.5.Final", + "pkg:maven/io.quarkus/quarkus-container-image-docker@2.13.5.Final", + "pkg:maven/jakarta.validation/jakarta.validation-api@2.0.2", + "pkg:maven/io.quarkus/quarkus-resteasy-multipart@2.13.7.Final", + "pkg:maven/io.quarkus/quarkus-hibernate-orm-deployment@2.0.2.Final" + ] + }, + { + "ref": "pkg:maven/io.quarkus/quarkus-hibernate-orm@2.13.5.Final", + "dependsOn": [] + }, + { + "ref": "pkg:maven/io.quarkus/quarkus-agroal@2.13.5.Final", + "dependsOn": [] + }, + { + "ref": "pkg:maven/io.quarkus/quarkus-resteasy@2.13.7.Final", + "dependsOn": [] + }, + { + "ref": "pkg:maven/io.quarkus/quarkus-resteasy-jackson@2.13.5.Final", + "dependsOn": [] + }, + { + "ref": "pkg:maven/io.quarkus/quarkus-jdbc-postgresql@2.13.5.Final", + "dependsOn": [] + }, + { + "ref": "pkg:maven/io.quarkus/quarkus-vertx-http@2.13.7.Final", + "dependsOn": [] + }, + { + "ref": "pkg:maven/io.quarkus/quarkus-kubernetes-service-binding@2.13.5.Final", + "dependsOn": [] + }, + { + "ref": "pkg:maven/io.quarkus/quarkus-container-image-docker@2.13.5.Final", + "dependsOn": [] + }, + { + "ref": "pkg:maven/jakarta.validation/jakarta.validation-api@2.0.2", + "dependsOn": [] + }, + { + "ref": "pkg:maven/io.quarkus/quarkus-resteasy-multipart@2.13.7.Final", + "dependsOn": [] + }, + { + "ref": "pkg:maven/io.quarkus/quarkus-hibernate-orm-deployment@2.0.2.Final", + "dependsOn": [] + } + ] } diff --git a/test/providers/tst_manifests/gradle/deps_with_ignore_named_params/expected_stack_sbom.json b/test/providers/tst_manifests/gradle/deps_with_ignore_named_params/expected_stack_sbom.json index 809da96f..547e9430 100644 --- a/test/providers/tst_manifests/gradle/deps_with_ignore_named_params/expected_stack_sbom.json +++ b/test/providers/tst_manifests/gradle/deps_with_ignore_named_params/expected_stack_sbom.json @@ -20,8 +20,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-hibernate-orm@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-hibernate-orm@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-hibernate-orm@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "79056c3042ee5c1bf05766340e4ae54fdde64f08036ec3e7eade6fb1c1d74375" + } + ] }, { "group": "io.quarkus", @@ -29,8 +35,14 @@ "version": "2.13.7.Final", "purl": "pkg:maven/io.quarkus/quarkus-core@2.13.7.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-core@2.13.7.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-core@2.13.7.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "e5d56e2e002acbfa172f6b3c363de6de6cd6866a2148692ed4b68fa1e3e2cb54" + } + ] }, { "group": "jakarta.annotation", @@ -38,8 +50,14 @@ "version": "1.3.5", "purl": "pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5", "type": "library", + "bom-ref": "pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5", "scope": "required", - "bom-ref": "pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5" + "hashes": [ + { + "alg": "SHA-256", + "content": "d3b4e3e5413539c37eeb16d0590fad710ceafd09bf8a044e72e0d3b21e461fc3" + } + ] }, { "group": "jakarta.enterprise", @@ -47,8 +65,14 @@ "version": "2.0.2", "purl": "pkg:maven/jakarta.enterprise/jakarta.enterprise.cdi-api@2.0.2", "type": "library", + "bom-ref": "pkg:maven/jakarta.enterprise/jakarta.enterprise.cdi-api@2.0.2", "scope": "required", - "bom-ref": "pkg:maven/jakarta.enterprise/jakarta.enterprise.cdi-api@2.0.2" + "hashes": [ + { + "alg": "SHA-256", + "content": "c1f2010bdd10b561a178248098cff63cd0fba8772d8d1552b9732bc0ab09da1a" + } + ] }, { "group": "jakarta.el", @@ -56,8 +80,14 @@ "version": "3.0.3", "purl": "pkg:maven/jakarta.el/jakarta.el-api@3.0.3", "type": "library", + "bom-ref": "pkg:maven/jakarta.el/jakarta.el-api@3.0.3", "scope": "required", - "bom-ref": "pkg:maven/jakarta.el/jakarta.el-api@3.0.3" + "hashes": [ + { + "alg": "SHA-256", + "content": "142a2bb7295c9f320601a22c1222fe29232663b0e154ceeffd4002b4101996d0" + } + ] }, { "group": "jakarta.interceptor", @@ -65,8 +95,14 @@ "version": "1.2.5", "purl": "pkg:maven/jakarta.interceptor/jakarta.interceptor-api@1.2.5", "type": "library", + "bom-ref": "pkg:maven/jakarta.interceptor/jakarta.interceptor-api@1.2.5", "scope": "required", - "bom-ref": "pkg:maven/jakarta.interceptor/jakarta.interceptor-api@1.2.5" + "hashes": [ + { + "alg": "SHA-256", + "content": "f5e24fb964cf09f358d61a3ccb79f4b5c1e5c9aa478cd61088aa64bb5b23b2a1" + } + ] }, { "group": "jakarta.ejb", @@ -74,8 +110,14 @@ "version": "3.2.6", "purl": "pkg:maven/jakarta.ejb/jakarta.ejb-api@3.2.6", "type": "library", + "bom-ref": "pkg:maven/jakarta.ejb/jakarta.ejb-api@3.2.6", "scope": "required", - "bom-ref": "pkg:maven/jakarta.ejb/jakarta.ejb-api@3.2.6" + "hashes": [ + { + "alg": "SHA-256", + "content": "b22e27d3035682fe2b0f4d319c09315ad09af845a5e529859dcc0f7f32448c6b" + } + ] }, { "group": "jakarta.transaction", @@ -83,8 +125,14 @@ "version": "1.3.3", "purl": "pkg:maven/jakarta.transaction/jakarta.transaction-api@1.3.3", "type": "library", + "bom-ref": "pkg:maven/jakarta.transaction/jakarta.transaction-api@1.3.3", "scope": "required", - "bom-ref": "pkg:maven/jakarta.transaction/jakarta.transaction-api@1.3.3" + "hashes": [ + { + "alg": "SHA-256", + "content": "2f345438752720e31257607bb2e2b77bc1ca39a539dc75ee3fceced9b77d39fb" + } + ] }, { "group": "jakarta.inject", @@ -92,8 +140,14 @@ "version": "1.0", "purl": "pkg:maven/jakarta.inject/jakarta.inject-api@1.0", "type": "library", + "bom-ref": "pkg:maven/jakarta.inject/jakarta.inject-api@1.0", "scope": "required", - "bom-ref": "pkg:maven/jakarta.inject/jakarta.inject-api@1.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "b98d47614ffb494c7f35d301cdfa39a26ea53a83fc2bf94af9c634caf0b33bca" + } + ] }, { "group": "io.quarkus", @@ -101,8 +155,14 @@ "version": "2.13.7.Final", "purl": "pkg:maven/io.quarkus/quarkus-ide-launcher@2.13.7.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-ide-launcher@2.13.7.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-ide-launcher@2.13.7.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "85560da8e6597dbaed3d72df52a55a924fd1ad268010a20de7887f4f7cf98b44" + } + ] }, { "group": "io.quarkus", @@ -110,8 +170,14 @@ "version": "2.13.7.Final", "purl": "pkg:maven/io.quarkus/quarkus-development-mode-spi@2.13.7.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-development-mode-spi@2.13.7.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-development-mode-spi@2.13.7.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "f0857d2e232938c0bed4eed79cb00d282c0a770f0df569f402c208e89074c771" + } + ] }, { "group": "io.smallrye.config", @@ -119,8 +185,14 @@ "version": "2.12.3", "purl": "pkg:maven/io.smallrye.config/smallrye-config@2.12.3", "type": "library", + "bom-ref": "pkg:maven/io.smallrye.config/smallrye-config@2.12.3", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye.config/smallrye-config@2.12.3" + "hashes": [ + { + "alg": "SHA-256", + "content": "a233ee95ba07a81989382756330fdc5ea07923d02ffbace24fd541279c612123" + } + ] }, { "group": "io.smallrye.config", @@ -128,8 +200,14 @@ "version": "2.12.3", "purl": "pkg:maven/io.smallrye.config/smallrye-config-core@2.12.3", "type": "library", + "bom-ref": "pkg:maven/io.smallrye.config/smallrye-config-core@2.12.3", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye.config/smallrye-config-core@2.12.3" + "hashes": [ + { + "alg": "SHA-256", + "content": "ace5818b585aa679061053dbdecc382f0c64cf22f533e470adc5341cee067e96" + } + ] }, { "group": "org.eclipse.microprofile.config", @@ -137,8 +215,14 @@ "version": "2.0.1", "purl": "pkg:maven/org.eclipse.microprofile.config/microprofile-config-api@2.0.1", "type": "library", + "bom-ref": "pkg:maven/org.eclipse.microprofile.config/microprofile-config-api@2.0.1", "scope": "required", - "bom-ref": "pkg:maven/org.eclipse.microprofile.config/microprofile-config-api@2.0.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "5ce209fecc8c1cca24721da1b49bfe9b7919d35821915a4c03b40719619a3f5f" + } + ] }, { "group": "io.smallrye.common", @@ -146,8 +230,14 @@ "version": "1.13.1", "purl": "pkg:maven/io.smallrye.common/smallrye-common-annotation@1.13.1", "type": "library", + "bom-ref": "pkg:maven/io.smallrye.common/smallrye-common-annotation@1.13.1", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye.common/smallrye-common-annotation@1.13.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "2782202c634bf0ccd3c321c1c72b07f05bfc36eb72b102b3a43da7bfbacf0121" + } + ] }, { "group": "io.smallrye.common", @@ -155,8 +245,14 @@ "version": "1.13.1", "purl": "pkg:maven/io.smallrye.common/smallrye-common-expression@1.13.1", "type": "library", + "bom-ref": "pkg:maven/io.smallrye.common/smallrye-common-expression@1.13.1", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye.common/smallrye-common-expression@1.13.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "e0407b8b7d035aa501807a02c806d450dbe72d58da9fd497f0ab274db34ae699" + } + ] }, { "group": "io.smallrye.common", @@ -164,8 +260,14 @@ "version": "1.13.1", "purl": "pkg:maven/io.smallrye.common/smallrye-common-function@1.13.1", "type": "library", + "bom-ref": "pkg:maven/io.smallrye.common/smallrye-common-function@1.13.1", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye.common/smallrye-common-function@1.13.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "93b16012e6a57df4f32f984a678dc3282adab53cf43205766237ff2c955faa6b" + } + ] }, { "group": "io.smallrye.common", @@ -173,8 +275,14 @@ "version": "1.13.1", "purl": "pkg:maven/io.smallrye.common/smallrye-common-constraint@1.13.1", "type": "library", + "bom-ref": "pkg:maven/io.smallrye.common/smallrye-common-constraint@1.13.1", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye.common/smallrye-common-constraint@1.13.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "1c93cad19cc638b8471fa31fc1c8c6fc48f1d8096351676ce12712f246b54010" + } + ] }, { "group": "org.jboss.logging", @@ -182,8 +290,14 @@ "version": "3.5.0.Final", "purl": "pkg:maven/org.jboss.logging/jboss-logging@3.5.0.Final", "type": "library", + "bom-ref": "pkg:maven/org.jboss.logging/jboss-logging@3.5.0.Final", "scope": "required", - "bom-ref": "pkg:maven/org.jboss.logging/jboss-logging@3.5.0.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "549e1e9180f0ac2d48f7bfca604da808cb1529000ac56e2028fb89d2a840f5ae" + } + ] }, { "group": "io.smallrye.common", @@ -191,8 +305,14 @@ "version": "1.13.1", "purl": "pkg:maven/io.smallrye.common/smallrye-common-classloader@1.13.1", "type": "library", + "bom-ref": "pkg:maven/io.smallrye.common/smallrye-common-classloader@1.13.1", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye.common/smallrye-common-classloader@1.13.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "305af32f28575800967816e5293c86759732c8e04714055eeda31de80d4d9e6c" + } + ] }, { "group": "org.ow2.asm", @@ -200,8 +320,14 @@ "version": "9.3", "purl": "pkg:maven/org.ow2.asm/asm@9.3", "type": "library", + "bom-ref": "pkg:maven/org.ow2.asm/asm@9.3", "scope": "required", - "bom-ref": "pkg:maven/org.ow2.asm/asm@9.3" + "hashes": [ + { + "alg": "SHA-256", + "content": "18551e6bfcf4ff5235dab8c0fd7f37f08ab1c753326dbcbe01f104eb76ac28b9" + } + ] }, { "group": "io.smallrye.config", @@ -209,8 +335,14 @@ "version": "2.12.3", "purl": "pkg:maven/io.smallrye.config/smallrye-config-common@2.12.3", "type": "library", + "bom-ref": "pkg:maven/io.smallrye.config/smallrye-config-common@2.12.3", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye.config/smallrye-config-common@2.12.3" + "hashes": [ + { + "alg": "SHA-256", + "content": "2aab40fa8bcd23b4f21f3c8de6dba646e2126519ff5b3d09131c50d33eaed086" + } + ] }, { "group": "org.jboss.logmanager", @@ -218,8 +350,14 @@ "version": "1.0.10", "purl": "pkg:maven/org.jboss.logmanager/jboss-logmanager-embedded@1.0.10", "type": "library", + "bom-ref": "pkg:maven/org.jboss.logmanager/jboss-logmanager-embedded@1.0.10", "scope": "required", - "bom-ref": "pkg:maven/org.jboss.logmanager/jboss-logmanager-embedded@1.0.10" + "hashes": [ + { + "alg": "SHA-256", + "content": "25b39888997956807ac167a762931d52b8d3cd07b4394a7b8a60f42de8aee855" + } + ] }, { "group": "org.wildfly.common", @@ -227,8 +365,14 @@ "version": "1.5.4.Final-format-001", "purl": "pkg:maven/org.wildfly.common/wildfly-common@1.5.4.Final-format-001", "type": "library", + "bom-ref": "pkg:maven/org.wildfly.common/wildfly-common@1.5.4.Final-format-001", "scope": "required", - "bom-ref": "pkg:maven/org.wildfly.common/wildfly-common@1.5.4.Final-format-001" + "hashes": [ + { + "alg": "SHA-256", + "content": "0c5989fadb7f0f9f2f7707fa10028ba7eac94e555a5b32f680a4d062c2bcfe9a" + } + ] }, { "group": "org.jboss.logging", @@ -236,8 +380,14 @@ "version": "2.2.1.Final", "purl": "pkg:maven/org.jboss.logging/jboss-logging-annotations@2.2.1.Final", "type": "library", + "bom-ref": "pkg:maven/org.jboss.logging/jboss-logging-annotations@2.2.1.Final", "scope": "required", - "bom-ref": "pkg:maven/org.jboss.logging/jboss-logging-annotations@2.2.1.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "f3d0fca0b72cf53fcab6fd6948a40f80eae5e28bda883ee29a055fd098e47dc8" + } + ] }, { "group": "org.jboss.threads", @@ -245,8 +395,14 @@ "version": "3.4.3.Final", "purl": "pkg:maven/org.jboss.threads/jboss-threads@3.4.3.Final", "type": "library", + "bom-ref": "pkg:maven/org.jboss.threads/jboss-threads@3.4.3.Final", "scope": "required", - "bom-ref": "pkg:maven/org.jboss.threads/jboss-threads@3.4.3.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "ec8d6bbcc85fa84436055bf2809a97889c472ef77a055ed9636e70100f3c7439" + } + ] }, { "group": "org.slf4j", @@ -254,8 +410,14 @@ "version": "1.7.36", "purl": "pkg:maven/org.slf4j/slf4j-api@1.7.36", "type": "library", + "bom-ref": "pkg:maven/org.slf4j/slf4j-api@1.7.36", "scope": "required", - "bom-ref": "pkg:maven/org.slf4j/slf4j-api@1.7.36" + "hashes": [ + { + "alg": "SHA-256", + "content": "c0a772724ba038f0fcdeb34db4f3fb43693f6152101b1e7e7a1ac35a9cb4cec9" + } + ] }, { "group": "org.jboss.slf4j", @@ -263,8 +425,14 @@ "version": "1.2.0.Final", "purl": "pkg:maven/org.jboss.slf4j/slf4j-jboss-logmanager@1.2.0.Final", "type": "library", + "bom-ref": "pkg:maven/org.jboss.slf4j/slf4j-jboss-logmanager@1.2.0.Final", "scope": "required", - "bom-ref": "pkg:maven/org.jboss.slf4j/slf4j-jboss-logmanager@1.2.0.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "8c5cc65839e939694ca1c9b27ff8978d9a79a8a667c3e1ba414db7a221277858" + } + ] }, { "group": "org.graalvm.sdk", @@ -272,8 +440,14 @@ "version": "22.3.0", "purl": "pkg:maven/org.graalvm.sdk/graal-sdk@22.3.0", "type": "library", + "bom-ref": "pkg:maven/org.graalvm.sdk/graal-sdk@22.3.0", "scope": "required", - "bom-ref": "pkg:maven/org.graalvm.sdk/graal-sdk@22.3.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "b297b3cdc2bd9c55cc6ea3648230cf7c5b656be4f85c2291ea08404ffb7aeb0d" + } + ] }, { "group": "io.quarkus", @@ -281,8 +455,14 @@ "version": "2.13.7.Final", "purl": "pkg:maven/io.quarkus/quarkus-bootstrap-runner@2.13.7.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-bootstrap-runner@2.13.7.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-bootstrap-runner@2.13.7.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "67c8d35e46b532caa58e1f6653d4f342ad21f397fd1924ca14f3d957f224ae36" + } + ] }, { "group": "io.smallrye.common", @@ -290,8 +470,14 @@ "version": "1.13.1", "purl": "pkg:maven/io.smallrye.common/smallrye-common-io@1.13.1", "type": "library", + "bom-ref": "pkg:maven/io.smallrye.common/smallrye-common-io@1.13.1", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye.common/smallrye-common-io@1.13.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "fe329b6f953d309a1f9e0929d69c60e57e3be2120a60ca1790e6cb0e428d0001" + } + ] }, { "group": "io.github.crac", @@ -299,8 +485,14 @@ "version": "0.1.1", "purl": "pkg:maven/io.github.crac/org-crac@0.1.1", "type": "library", + "bom-ref": "pkg:maven/io.github.crac/org-crac@0.1.1", "scope": "required", - "bom-ref": "pkg:maven/io.github.crac/org-crac@0.1.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "e3332dab2a0fafb59c8f9c3e97af2578c8543577e7c2a8131c98aeb4e9f6446a" + } + ] }, { "group": "io.quarkus", @@ -308,8 +500,14 @@ "version": "0.0.9", "purl": "pkg:maven/io.quarkus/quarkus-fs-util@0.0.9", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-fs-util@0.0.9", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-fs-util@0.0.9" + "hashes": [ + { + "alg": "SHA-256", + "content": "a6e06c973540641496c1e843bc32e0ac5a8a520ba64bc822144e34a48a63ac98" + } + ] }, { "group": "io.quarkus", @@ -317,8 +515,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-agroal@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-agroal@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-agroal@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "373e7e3e0789069ac3b414658fdc8d2e78fa29ed649672443833fd61653e8239" + } + ] }, { "group": "io.quarkus", @@ -326,8 +530,14 @@ "version": "2.13.7.Final", "purl": "pkg:maven/io.quarkus/quarkus-arc@2.13.7.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-arc@2.13.7.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-arc@2.13.7.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "38a15d0b22b6aae94eed3cae8da82b0b6260df68cad90fff31501701ad947aed" + } + ] }, { "group": "io.quarkus.arc", @@ -335,8 +545,14 @@ "version": "2.13.7.Final", "purl": "pkg:maven/io.quarkus.arc/arc@2.13.7.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus.arc/arc@2.13.7.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus.arc/arc@2.13.7.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "999b6c98b4c2a0fd153e869cc72b210aa370bf82b0a0ce0a0a967dca2e95a043" + } + ] }, { "group": "io.smallrye.reactive", @@ -344,8 +560,14 @@ "version": "1.7.0", "purl": "pkg:maven/io.smallrye.reactive/mutiny@1.7.0", "type": "library", + "bom-ref": "pkg:maven/io.smallrye.reactive/mutiny@1.7.0", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye.reactive/mutiny@1.7.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "7b95809b54bfb315f22fc369a417377017f332217fbeed0d19616596ea58e99e" + } + ] }, { "group": "org.reactivestreams", @@ -353,8 +575,14 @@ "version": "1.0.3", "purl": "pkg:maven/org.reactivestreams/reactive-streams@1.0.3", "type": "library", + "bom-ref": "pkg:maven/org.reactivestreams/reactive-streams@1.0.3", "scope": "required", - "bom-ref": "pkg:maven/org.reactivestreams/reactive-streams@1.0.3" + "hashes": [ + { + "alg": "SHA-256", + "content": "cc80acd6a1ad07a28990f997157d729c38f99efccd20158515bdb52d1c50f16c" + } + ] }, { "group": "org.eclipse.microprofile.context-propagation", @@ -362,8 +590,14 @@ "version": "1.3", "purl": "pkg:maven/org.eclipse.microprofile.context-propagation/microprofile-context-propagation-api@1.3", "type": "library", + "bom-ref": "pkg:maven/org.eclipse.microprofile.context-propagation/microprofile-context-propagation-api@1.3", "scope": "required", - "bom-ref": "pkg:maven/org.eclipse.microprofile.context-propagation/microprofile-context-propagation-api@1.3" + "hashes": [ + { + "alg": "SHA-256", + "content": "039a0b83a06108636482d2f9bbbc894ea6c6c0750034be7c486e06bacc559d8c" + } + ] }, { "group": "io.quarkus", @@ -371,8 +605,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-datasource@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-datasource@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-datasource@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "889993db8ee5d85cde8032b7dac65f73b38307d5bf5608a321b56be0f10664f2" + } + ] }, { "group": "io.quarkus", @@ -380,8 +620,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-datasource-common@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-datasource-common@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-datasource-common@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "29771fd757c97a980e79826669d289393b08686e30ecaeb3d39bdd7c227984c6" + } + ] }, { "group": "io.quarkus", @@ -389,8 +635,14 @@ "version": "2.13.7.Final", "purl": "pkg:maven/io.quarkus/quarkus-credentials@2.13.7.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-credentials@2.13.7.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-credentials@2.13.7.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "fecd259b0f869c6e82a5c9ef524d196a984678c70fa9b4caac04a0f6ba93a901" + } + ] }, { "group": "io.quarkus", @@ -398,8 +650,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-narayana-jta@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-narayana-jta@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-narayana-jta@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "1ef954c2c9c885ec215806871643215778c6daeb5a999a55d2ded512db72f881" + } + ] }, { "group": "io.quarkus", @@ -407,8 +665,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-transaction-annotations@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-transaction-annotations@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-transaction-annotations@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "c7a9ab990db0a2572e847141b7bb56f08172e974e5bae5d7ca102e4445dac0b4" + } + ] }, { "group": "io.quarkus", @@ -416,8 +680,14 @@ "version": "2.13.7.Final", "purl": "pkg:maven/io.quarkus/quarkus-mutiny@2.13.7.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-mutiny@2.13.7.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-mutiny@2.13.7.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "3f4d56e81c596c2d6cebe06f1d9e5ae9089ee1520aa17e579e18c55fe8df53b8" + } + ] }, { "group": "io.quarkus", @@ -425,8 +695,14 @@ "version": "2.13.7.Final", "purl": "pkg:maven/io.quarkus/quarkus-smallrye-context-propagation@2.13.7.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-smallrye-context-propagation@2.13.7.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-smallrye-context-propagation@2.13.7.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "49df5b0db2e56171209b12baab05c1fe7bdd63370502811b7d23dc15b7eacc66" + } + ] }, { "group": "io.smallrye", @@ -434,8 +710,14 @@ "version": "1.2.2", "purl": "pkg:maven/io.smallrye/smallrye-context-propagation@1.2.2", "type": "library", + "bom-ref": "pkg:maven/io.smallrye/smallrye-context-propagation@1.2.2", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye/smallrye-context-propagation@1.2.2" + "hashes": [ + { + "alg": "SHA-256", + "content": "bc1ee770918d8d76b47bc6f47d312f3159e8c698f6673d6c712fe4ce0ec982e8" + } + ] }, { "group": "io.smallrye", @@ -443,8 +725,14 @@ "version": "1.2.2", "purl": "pkg:maven/io.smallrye/smallrye-context-propagation-api@1.2.2", "type": "library", + "bom-ref": "pkg:maven/io.smallrye/smallrye-context-propagation-api@1.2.2", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye/smallrye-context-propagation-api@1.2.2" + "hashes": [ + { + "alg": "SHA-256", + "content": "4d39df66447b05d938c9a6b8eb147d93680987dc1032a2d8c1dcb083710fb79a" + } + ] }, { "group": "io.smallrye", @@ -452,8 +740,14 @@ "version": "1.2.2", "purl": "pkg:maven/io.smallrye/smallrye-context-propagation-storage@1.2.2", "type": "library", + "bom-ref": "pkg:maven/io.smallrye/smallrye-context-propagation-storage@1.2.2", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye/smallrye-context-propagation-storage@1.2.2" + "hashes": [ + { + "alg": "SHA-256", + "content": "1bf3b19038fec5a110a82adb6c2bf8b8dc2234126281a36e423daf50a9e23a39" + } + ] }, { "group": "io.smallrye.reactive", @@ -461,8 +755,14 @@ "version": "1.7.0", "purl": "pkg:maven/io.smallrye.reactive/mutiny-smallrye-context-propagation@1.7.0", "type": "library", + "bom-ref": "pkg:maven/io.smallrye.reactive/mutiny-smallrye-context-propagation@1.7.0", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye.reactive/mutiny-smallrye-context-propagation@1.7.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "67ea7a1aa0d27ffc2d436ad05e745003ddc6d33f0c5dde4507018d6d03e12ed5" + } + ] }, { "group": "io.smallrye", @@ -470,8 +770,14 @@ "version": "1.2.2", "purl": "pkg:maven/io.smallrye/smallrye-context-propagation-jta@1.2.2", "type": "library", + "bom-ref": "pkg:maven/io.smallrye/smallrye-context-propagation-jta@1.2.2", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye/smallrye-context-propagation-jta@1.2.2" + "hashes": [ + { + "alg": "SHA-256", + "content": "6e32035875ad87b392709587a6faff6d8853b38d6a249082134f0822c3898e79" + } + ] }, { "group": "io.smallrye.reactive", @@ -479,8 +785,14 @@ "version": "2.7.0", "purl": "pkg:maven/io.smallrye.reactive/smallrye-reactive-converter-api@2.7.0", "type": "library", + "bom-ref": "pkg:maven/io.smallrye.reactive/smallrye-reactive-converter-api@2.7.0", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye.reactive/smallrye-reactive-converter-api@2.7.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "c604e090dc282423e9084b6339bf9d1cffde53d7d189bf6f50ae4640e162b611" + } + ] }, { "group": "io.smallrye.reactive", @@ -488,8 +800,14 @@ "version": "2.7.0", "purl": "pkg:maven/io.smallrye.reactive/smallrye-reactive-converter-mutiny@2.7.0", "type": "library", + "bom-ref": "pkg:maven/io.smallrye.reactive/smallrye-reactive-converter-mutiny@2.7.0", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye.reactive/smallrye-reactive-converter-mutiny@2.7.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "b01de8b2211277e4f7d03a232752b7dd9cd6d9db9270f0491e1b8e8deb24c16a" + } + ] }, { "group": "org.jboss.narayana.jta", @@ -497,8 +815,14 @@ "version": "5.13.1.Alpha1", "purl": "pkg:maven/org.jboss.narayana.jta/narayana-jta@5.13.1.Alpha1", "type": "library", + "bom-ref": "pkg:maven/org.jboss.narayana.jta/narayana-jta@5.13.1.Alpha1", "scope": "required", - "bom-ref": "pkg:maven/org.jboss.narayana.jta/narayana-jta@5.13.1.Alpha1" + "hashes": [ + { + "alg": "SHA-256", + "content": "3c601dda329f76088be0a0e67a64d3326409fc57ca801ccd129080b14bab6726" + } + ] }, { "group": "org.jboss", @@ -506,8 +830,14 @@ "version": "7.6.1.Final", "purl": "pkg:maven/org.jboss/jboss-transaction-spi@7.6.1.Final", "type": "library", + "bom-ref": "pkg:maven/org.jboss/jboss-transaction-spi@7.6.1.Final", "scope": "required", - "bom-ref": "pkg:maven/org.jboss/jboss-transaction-spi@7.6.1.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "d92fee6cac2a06f468572fde42b64758d8ecb1fcef57825f0d9b8514ba098dd4" + } + ] }, { "group": "org.jboss.spec.javax.resource", @@ -515,8 +845,14 @@ "version": "1.0.0.Final", "purl": "pkg:maven/org.jboss.spec.javax.resource/jboss-connector-api_1.7_spec@1.0.0.Final", "type": "library", + "bom-ref": "pkg:maven/org.jboss.spec.javax.resource/jboss-connector-api_1.7_spec@1.0.0.Final", "scope": "required", - "bom-ref": "pkg:maven/org.jboss.spec.javax.resource/jboss-connector-api_1.7_spec@1.0.0.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "80046bf02c6afd0cc7cb22ee6b7a322833c007f5fa4a953eb833308c7c807592" + } + ] }, { "group": "org.jboss.narayana.jts", @@ -524,8 +860,14 @@ "version": "5.13.1.Alpha1", "purl": "pkg:maven/org.jboss.narayana.jts/narayana-jts-integration@5.13.1.Alpha1", "type": "library", + "bom-ref": "pkg:maven/org.jboss.narayana.jts/narayana-jts-integration@5.13.1.Alpha1", "scope": "required", - "bom-ref": "pkg:maven/org.jboss.narayana.jts/narayana-jts-integration@5.13.1.Alpha1" + "hashes": [ + { + "alg": "SHA-256", + "content": "92411cde8dff5026a9ef0cf26a46bcfd09bce1e208daee49b0d57fabd8352e33" + } + ] }, { "group": "io.agroal", @@ -533,8 +875,14 @@ "version": "1.16", "purl": "pkg:maven/io.agroal/agroal-api@1.16", "type": "library", + "bom-ref": "pkg:maven/io.agroal/agroal-api@1.16", "scope": "required", - "bom-ref": "pkg:maven/io.agroal/agroal-api@1.16" + "hashes": [ + { + "alg": "SHA-256", + "content": "121caa97e838680277dc196354266a3697861238070a235366750f356e226073" + } + ] }, { "group": "io.agroal", @@ -542,8 +890,14 @@ "version": "1.16", "purl": "pkg:maven/io.agroal/agroal-narayana@1.16", "type": "library", + "bom-ref": "pkg:maven/io.agroal/agroal-narayana@1.16", "scope": "required", - "bom-ref": "pkg:maven/io.agroal/agroal-narayana@1.16" + "hashes": [ + { + "alg": "SHA-256", + "content": "27685faad7aab4327103ddbbadf01528a034a67938afd316076a57340421511e" + } + ] }, { "group": "io.agroal", @@ -551,8 +905,14 @@ "version": "1.16", "purl": "pkg:maven/io.agroal/agroal-pool@1.16", "type": "library", + "bom-ref": "pkg:maven/io.agroal/agroal-pool@1.16", "scope": "required", - "bom-ref": "pkg:maven/io.agroal/agroal-pool@1.16" + "hashes": [ + { + "alg": "SHA-256", + "content": "095b8d8424ae92298d3795f619c4a5210026befea210c721df2517cd8d8f8529" + } + ] }, { "group": "org.hibernate", @@ -560,8 +920,14 @@ "version": "5.6.14.Final", "purl": "pkg:maven/org.hibernate/hibernate-core@5.6.14.Final", "type": "library", + "bom-ref": "pkg:maven/org.hibernate/hibernate-core@5.6.14.Final", "scope": "required", - "bom-ref": "pkg:maven/org.hibernate/hibernate-core@5.6.14.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "147319ec25f86ba8f6263601c57cfd98badfea32e6312fee929e8c2207cda5cd" + } + ] }, { "group": "net.bytebuddy", @@ -569,8 +935,14 @@ "version": "1.12.18", "purl": "pkg:maven/net.bytebuddy/byte-buddy@1.12.18", "type": "library", + "bom-ref": "pkg:maven/net.bytebuddy/byte-buddy@1.12.18", "scope": "required", - "bom-ref": "pkg:maven/net.bytebuddy/byte-buddy@1.12.18" + "hashes": [ + { + "alg": "SHA-256", + "content": "dfda1288566e62724c078947c6d6439e5c0150342b5177c8ac160019f1870237" + } + ] }, { "group": "antlr", @@ -578,8 +950,14 @@ "version": "2.7.7", "purl": "pkg:maven/antlr/antlr@2.7.7", "type": "library", + "bom-ref": "pkg:maven/antlr/antlr@2.7.7", "scope": "required", - "bom-ref": "pkg:maven/antlr/antlr@2.7.7" + "hashes": [ + { + "alg": "SHA-256", + "content": "d0c1c8265545cb28554d2131d57a5b50bbba22d138f9610aef4b42bb68270b7e" + } + ] }, { "group": "com.fasterxml", @@ -587,8 +965,14 @@ "version": "1.5.1", "purl": "pkg:maven/com.fasterxml/classmate@1.5.1", "type": "library", + "bom-ref": "pkg:maven/com.fasterxml/classmate@1.5.1", "scope": "required", - "bom-ref": "pkg:maven/com.fasterxml/classmate@1.5.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "9b9186b8fd7ff56a09a1cb35c441d284d914dcda0697337ce600550c0bffad52" + } + ] }, { "group": "org.hibernate.common", @@ -596,8 +980,14 @@ "version": "5.1.2.Final", "purl": "pkg:maven/org.hibernate.common/hibernate-commons-annotations@5.1.2.Final", "type": "library", + "bom-ref": "pkg:maven/org.hibernate.common/hibernate-commons-annotations@5.1.2.Final", "scope": "required", - "bom-ref": "pkg:maven/org.hibernate.common/hibernate-commons-annotations@5.1.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "1fbc8d27ab1039b06f965584d92883cdbfebe843b0f4bc922a45c527daf0a225" + } + ] }, { "group": "org.hibernate", @@ -605,8 +995,14 @@ "version": "5.6.14.Final", "purl": "pkg:maven/org.hibernate/hibernate-graalvm@5.6.14.Final", "type": "library", + "bom-ref": "pkg:maven/org.hibernate/hibernate-graalvm@5.6.14.Final", "scope": "required", - "bom-ref": "pkg:maven/org.hibernate/hibernate-graalvm@5.6.14.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "5bdd2641a33b6e03a155fced61df9f0f6f4b67cbd679077bdb2acae7cbd97b97" + } + ] }, { "group": "org.glassfish.jaxb", @@ -614,8 +1010,14 @@ "version": "2.3.3-b02", "purl": "pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.3-b02", "type": "library", + "bom-ref": "pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.3-b02", "scope": "required", - "bom-ref": "pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.3-b02" + "hashes": [ + { + "alg": "SHA-256", + "content": "526ad93ddebabbb64cbff4447adc32af34b3b38fcd5ce923d5c547febaa397e3" + } + ] }, { "group": "org.glassfish.jaxb", @@ -623,8 +1025,14 @@ "version": "2.3.3-b02", "purl": "pkg:maven/org.glassfish.jaxb/txw2@2.3.3-b02", "type": "library", + "bom-ref": "pkg:maven/org.glassfish.jaxb/txw2@2.3.3-b02", "scope": "required", - "bom-ref": "pkg:maven/org.glassfish.jaxb/txw2@2.3.3-b02" + "hashes": [ + { + "alg": "SHA-256", + "content": "a9608e9e0040fd437374fb263f44330c140ceea49c75e970a4ea7c1be6b75c22" + } + ] }, { "group": "com.sun.istack", @@ -632,8 +1040,14 @@ "version": "3.0.10", "purl": "pkg:maven/com.sun.istack/istack-commons-runtime@3.0.10", "type": "library", + "bom-ref": "pkg:maven/com.sun.istack/istack-commons-runtime@3.0.10", "scope": "required", - "bom-ref": "pkg:maven/com.sun.istack/istack-commons-runtime@3.0.10" + "hashes": [ + { + "alg": "SHA-256", + "content": "3a088e4af8f0656e8ad8e5dce8d122d7eb616cdec7cf3c6550c6308e97bec587" + } + ] }, { "group": "com.sun.activation", @@ -641,8 +1055,14 @@ "version": "1.2.1", "purl": "pkg:maven/com.sun.activation/jakarta.activation@1.2.1", "type": "library", + "bom-ref": "pkg:maven/com.sun.activation/jakarta.activation@1.2.1", "scope": "required", - "bom-ref": "pkg:maven/com.sun.activation/jakarta.activation@1.2.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "b6895348b68b602bf4c272fc3054e7e1cc95a4c691ba11719e48c0f126b6c1e6" + } + ] }, { "group": "org.jboss.spec.javax.xml.bind", @@ -650,8 +1070,14 @@ "version": "2.0.0.Final", "purl": "pkg:maven/org.jboss.spec.javax.xml.bind/jboss-jaxb-api_2.3_spec@2.0.0.Final", "type": "library", + "bom-ref": "pkg:maven/org.jboss.spec.javax.xml.bind/jboss-jaxb-api_2.3_spec@2.0.0.Final", "scope": "required", - "bom-ref": "pkg:maven/org.jboss.spec.javax.xml.bind/jboss-jaxb-api_2.3_spec@2.0.0.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "cee99591d58a9c9110ca9f3319df0c984ef0914b09a580efcb24f75715f7eb53" + } + ] }, { "group": "jakarta.persistence", @@ -659,8 +1085,14 @@ "version": "2.2.3", "purl": "pkg:maven/jakarta.persistence/jakarta.persistence-api@2.2.3", "type": "library", + "bom-ref": "pkg:maven/jakarta.persistence/jakarta.persistence-api@2.2.3", "scope": "required", - "bom-ref": "pkg:maven/jakarta.persistence/jakarta.persistence-api@2.2.3" + "hashes": [ + { + "alg": "SHA-256", + "content": "bb888f15b5493dc5dc89f80d005afcda077d5df61ba0bd34ffef18445840dd27" + } + ] }, { "group": "org.hibernate", @@ -668,8 +1100,14 @@ "version": "0.1.1", "purl": "pkg:maven/org.hibernate/quarkus-local-cache@0.1.1", "type": "library", + "bom-ref": "pkg:maven/org.hibernate/quarkus-local-cache@0.1.1", "scope": "required", - "bom-ref": "pkg:maven/org.hibernate/quarkus-local-cache@0.1.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "b5047f9a20467ef05e80ee6a9c7abfd6ba2894e961e5467e24808aa234c26a24" + } + ] }, { "group": "io.quarkus", @@ -677,8 +1115,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-caffeine@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-caffeine@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-caffeine@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "8ba118ea99bca84a43e856afdc3ed3ce163e9f67b1164c2244ded7d4b98f1d29" + } + ] }, { "group": "com.github.ben-manes.caffeine", @@ -686,8 +1130,14 @@ "version": "2.9.3", "purl": "pkg:maven/com.github.ben-manes.caffeine/caffeine@2.9.3", "type": "library", + "bom-ref": "pkg:maven/com.github.ben-manes.caffeine/caffeine@2.9.3", "scope": "required", - "bom-ref": "pkg:maven/com.github.ben-manes.caffeine/caffeine@2.9.3" + "hashes": [ + { + "alg": "SHA-256", + "content": "d6ddcd4a2a38ac492033978be5c08af5fe2edd2c3b2e73986175af0afa7bb378" + } + ] }, { "group": "com.google.errorprone", @@ -695,8 +1145,14 @@ "version": "2.10.0", "purl": "pkg:maven/com.google.errorprone/error_prone_annotations@2.10.0", "type": "library", + "bom-ref": "pkg:maven/com.google.errorprone/error_prone_annotations@2.10.0", "scope": "required", - "bom-ref": "pkg:maven/com.google.errorprone/error_prone_annotations@2.10.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "7536b424bdd8644db60e72bb3e0b05b4458c822b2d4136715233554dada62b69" + } + ] }, { "group": "io.quarkus", @@ -704,8 +1160,14 @@ "version": "2.13.7.Final", "purl": "pkg:maven/io.quarkus/quarkus-resteasy@2.13.7.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-resteasy@2.13.7.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-resteasy@2.13.7.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "c66681b1e334d3e1b1d6b438044ac660b020371f65b9441bd195c1811ac6d651" + } + ] }, { "group": "io.quarkus", @@ -713,8 +1175,14 @@ "version": "2.13.7.Final", "purl": "pkg:maven/io.quarkus/quarkus-vertx-http@2.13.7.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-vertx-http@2.13.7.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-vertx-http@2.13.7.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "fe3e832b2816256f627f93810d609a1ff732b9ba5ef7109826a19af8b1ac7310" + } + ] }, { "group": "io.quarkus", @@ -722,8 +1190,14 @@ "version": "2.13.7.Final", "purl": "pkg:maven/io.quarkus/quarkus-security-runtime-spi@2.13.7.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-security-runtime-spi@2.13.7.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-security-runtime-spi@2.13.7.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "fd030bdd051d6bcebf1471b94c985b3f8059d8e6a34972c12a38ffee2baaa857" + } + ] }, { "group": "io.quarkus.security", @@ -731,8 +1205,14 @@ "version": "1.1.4.Final", "purl": "pkg:maven/io.quarkus.security/quarkus-security@1.1.4.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus.security/quarkus-security@1.1.4.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus.security/quarkus-security@1.1.4.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "d2059c5479266f34cf32e736e2098afc061f29acd33bb43c736ac818ca76cb0f" + } + ] }, { "group": "io.smallrye.common", @@ -740,8 +1220,14 @@ "version": "1.13.1", "purl": "pkg:maven/io.smallrye.common/smallrye-common-vertx-context@1.13.1", "type": "library", + "bom-ref": "pkg:maven/io.smallrye.common/smallrye-common-vertx-context@1.13.1", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye.common/smallrye-common-vertx-context@1.13.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "edaf480fd82bc8d7ff2c9020b3d2e0478bfebfa6004b64e8651521201cb81778" + } + ] }, { "group": "io.vertx", @@ -749,8 +1235,14 @@ "version": "4.3.4", "purl": "pkg:maven/io.vertx/vertx-core@4.3.4", "type": "library", + "bom-ref": "pkg:maven/io.vertx/vertx-core@4.3.4", "scope": "required", - "bom-ref": "pkg:maven/io.vertx/vertx-core@4.3.4" + "hashes": [ + { + "alg": "SHA-256", + "content": "b165b53094fec196e9b60de567753e3d45e8c1bef834e7745fb206b9413750ba" + } + ] }, { "group": "io.netty", @@ -758,8 +1250,14 @@ "version": "4.1.86.Final", "purl": "pkg:maven/io.netty/netty-common@4.1.86.Final", "type": "library", + "bom-ref": "pkg:maven/io.netty/netty-common@4.1.86.Final", "scope": "required", - "bom-ref": "pkg:maven/io.netty/netty-common@4.1.86.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "4725e55a972cee948a48137aedb0930091b10b387d726d44a824c10a15e4a2cb" + } + ] }, { "group": "io.netty", @@ -767,8 +1265,14 @@ "version": "4.1.86.Final", "purl": "pkg:maven/io.netty/netty-buffer@4.1.86.Final", "type": "library", + "bom-ref": "pkg:maven/io.netty/netty-buffer@4.1.86.Final", "scope": "required", - "bom-ref": "pkg:maven/io.netty/netty-buffer@4.1.86.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "9152c5f5e8287bf70278875141b317b6e61f111ff4089d104c676021be956b35" + } + ] }, { "group": "io.netty", @@ -776,8 +1280,14 @@ "version": "4.1.86.Final", "purl": "pkg:maven/io.netty/netty-transport@4.1.86.Final", "type": "library", + "bom-ref": "pkg:maven/io.netty/netty-transport@4.1.86.Final", "scope": "required", - "bom-ref": "pkg:maven/io.netty/netty-transport@4.1.86.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "9bc60e7933e7c115e114184961aca439ec4693a388bd6c111cfe6ffc1aed187f" + } + ] }, { "group": "io.netty", @@ -785,8 +1295,14 @@ "version": "4.1.86.Final", "purl": "pkg:maven/io.netty/netty-resolver@4.1.86.Final", "type": "library", + "bom-ref": "pkg:maven/io.netty/netty-resolver@4.1.86.Final", "scope": "required", - "bom-ref": "pkg:maven/io.netty/netty-resolver@4.1.86.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "02ac493ea66df9eed8fee059639e1893707b6eb37cdda172d32f85d06b6af7c8" + } + ] }, { "group": "io.netty", @@ -794,8 +1310,14 @@ "version": "4.1.86.Final", "purl": "pkg:maven/io.netty/netty-handler@4.1.86.Final", "type": "library", + "bom-ref": "pkg:maven/io.netty/netty-handler@4.1.86.Final", "scope": "required", - "bom-ref": "pkg:maven/io.netty/netty-handler@4.1.86.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "b0be2c04eb65c9cdc8bd6871a971c5b277c2177ba240f14da23b06bab2572cce" + } + ] }, { "group": "io.netty", @@ -803,8 +1325,14 @@ "version": "4.1.86.Final", "purl": "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.86.Final", "type": "library", + "bom-ref": "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.86.Final", "scope": "required", - "bom-ref": "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.86.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "19b01d40dc91df902d4f0d83431fdf10f6c183c545f0fda599a4929636e57f47" + } + ] }, { "group": "io.netty", @@ -812,8 +1340,14 @@ "version": "4.1.86.Final", "purl": "pkg:maven/io.netty/netty-codec@4.1.86.Final", "type": "library", + "bom-ref": "pkg:maven/io.netty/netty-codec@4.1.86.Final", "scope": "required", - "bom-ref": "pkg:maven/io.netty/netty-codec@4.1.86.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "6797c376aeac74b322ee8572fe1f5e0d087975426f4c7dffb9d0173307bd7da6" + } + ] }, { "group": "io.netty", @@ -821,8 +1355,14 @@ "version": "4.1.82.Final", "purl": "pkg:maven/io.netty/netty-handler-proxy@4.1.82.Final", "type": "library", + "bom-ref": "pkg:maven/io.netty/netty-handler-proxy@4.1.82.Final", "scope": "required", - "bom-ref": "pkg:maven/io.netty/netty-handler-proxy@4.1.82.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "983abf79f64fe592a1c65fd3482302cd9b6d70e59229c16041463425bf88da1a" + } + ] }, { "group": "io.netty", @@ -830,8 +1370,14 @@ "version": "4.1.82.Final", "purl": "pkg:maven/io.netty/netty-codec-socks@4.1.82.Final", "type": "library", + "bom-ref": "pkg:maven/io.netty/netty-codec-socks@4.1.82.Final", "scope": "required", - "bom-ref": "pkg:maven/io.netty/netty-codec-socks@4.1.82.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "bf72fffd5dd7ae9af89ed91e6540410103c8325e77998e48b497b879952fb6df" + } + ] }, { "group": "io.netty", @@ -839,8 +1385,14 @@ "version": "4.1.86.Final", "purl": "pkg:maven/io.netty/netty-codec-http@4.1.86.Final", "type": "library", + "bom-ref": "pkg:maven/io.netty/netty-codec-http@4.1.86.Final", "scope": "required", - "bom-ref": "pkg:maven/io.netty/netty-codec-http@4.1.86.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "016e3a64dfe42619ebbce8679ebd01759f22b7e296c651308e1528ae1e66723e" + } + ] }, { "group": "io.netty", @@ -848,8 +1400,14 @@ "version": "4.1.86.Final", "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.86.Final", "type": "library", + "bom-ref": "pkg:maven/io.netty/netty-codec-http2@4.1.86.Final", "scope": "required", - "bom-ref": "pkg:maven/io.netty/netty-codec-http2@4.1.86.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "aa76a35fe8368d49d8a5dd4bb7c8d5f94b7fd9e0eedf25dcb07b9f458916f868" + } + ] }, { "group": "io.netty", @@ -857,8 +1415,14 @@ "version": "4.1.82.Final", "purl": "pkg:maven/io.netty/netty-resolver-dns@4.1.82.Final", "type": "library", + "bom-ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.82.Final", "scope": "required", - "bom-ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.82.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "bd2bd64e102733fa0d44c9296fafe6719d159b46e195a69d771edbb12670f2ac" + } + ] }, { "group": "io.netty", @@ -866,8 +1430,14 @@ "version": "4.1.82.Final", "purl": "pkg:maven/io.netty/netty-codec-dns@4.1.82.Final", "type": "library", + "bom-ref": "pkg:maven/io.netty/netty-codec-dns@4.1.82.Final", "scope": "required", - "bom-ref": "pkg:maven/io.netty/netty-codec-dns@4.1.82.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "0777df897344799d318ed8fcff996150eac542b1a2a9149e421e28df2f36cab2" + } + ] }, { "group": "com.fasterxml.jackson.core", @@ -875,8 +1445,14 @@ "version": "2.13.4", "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.4", "type": "library", + "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.4", "scope": "required", - "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.4" + "hashes": [ + { + "alg": "SHA-256", + "content": "a7a57b699e9a41b86efc120f28d7b4f2ae3240535741e03e397dec6fc0a78a2f" + } + ] }, { "group": "com.fasterxml.jackson", @@ -884,8 +1460,14 @@ "version": "2.13.4", "purl": "pkg:maven/com.fasterxml.jackson/jackson-bom@2.13.4", "type": "library", + "bom-ref": "pkg:maven/com.fasterxml.jackson/jackson-bom@2.13.4", "scope": "required", - "bom-ref": "pkg:maven/com.fasterxml.jackson/jackson-bom@2.13.4" + "hashes": [ + { + "alg": "SHA-256", + "content": "d512a5356d0f0316ea042dc8eef793bb0c6e5834668c1e90cf8a9c9dd6b0da52" + } + ] }, { "group": "com.fasterxml.jackson.core", @@ -893,8 +1475,14 @@ "version": "2.13.4", "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.13.4", "type": "library", + "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.13.4", "scope": "required", - "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.13.4" + "hashes": [ + { + "alg": "SHA-256", + "content": "9716a4ce686df5e735198309be0501d033ffc2ed0c163c70d48cbe1ef4e89387" + } + ] }, { "group": "com.fasterxml.jackson.core", @@ -902,8 +1490,14 @@ "version": "2.13.4.2", "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.4.2", "type": "library", + "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.4.2", "scope": "required", - "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.4.2" + "hashes": [ + { + "alg": "SHA-256", + "content": "374081eccd90e07fd882528c60bcf3599ba315cef65d6af2a57f1d02197a76dc" + } + ] }, { "group": "com.fasterxml.jackson.datatype", @@ -911,8 +1505,14 @@ "version": "2.13.4", "purl": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.13.4", "type": "library", + "bom-ref": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.13.4", "scope": "required", - "bom-ref": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.13.4" + "hashes": [ + { + "alg": "SHA-256", + "content": "77fca4491d56907277d7a7df21e9d12d4843698cac7cf2a6a7b510a2f29afbad" + } + ] }, { "group": "com.fasterxml.jackson.datatype", @@ -920,8 +1520,14 @@ "version": "2.13.4", "purl": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.13.4", "type": "library", + "bom-ref": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.13.4", "scope": "required", - "bom-ref": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.13.4" + "hashes": [ + { + "alg": "SHA-256", + "content": "961af7afc842537fc3163a7f287321fe4af465ac3c932151a04734d9b0c91e7a" + } + ] }, { "group": "com.fasterxml.jackson.jaxrs", @@ -929,8 +1535,14 @@ "version": "2.13.4", "purl": "pkg:maven/com.fasterxml.jackson.jaxrs/jackson-jaxrs-json-provider@2.13.4", "type": "library", + "bom-ref": "pkg:maven/com.fasterxml.jackson.jaxrs/jackson-jaxrs-json-provider@2.13.4", "scope": "required", - "bom-ref": "pkg:maven/com.fasterxml.jackson.jaxrs/jackson-jaxrs-json-provider@2.13.4" + "hashes": [ + { + "alg": "SHA-256", + "content": "c3a4eb3ab84d506defe92fc794dc459ba3d8aae5a5cd59c10f6b153ad84f71f0" + } + ] }, { "group": "com.fasterxml.jackson.module", @@ -938,8 +1550,14 @@ "version": "2.13.4", "purl": "pkg:maven/com.fasterxml.jackson.module/jackson-module-parameter-names@2.13.4", "type": "library", + "bom-ref": "pkg:maven/com.fasterxml.jackson.module/jackson-module-parameter-names@2.13.4", "scope": "required", - "bom-ref": "pkg:maven/com.fasterxml.jackson.module/jackson-module-parameter-names@2.13.4" + "hashes": [ + { + "alg": "SHA-256", + "content": "0131ec78c25d8381c950b32aa03c01c722cb5cbfe0247e2db7f6a88ec7729bd0" + } + ] }, { "group": "com.fasterxml.jackson.jaxrs", @@ -947,8 +1565,14 @@ "version": "2.13.4", "purl": "pkg:maven/com.fasterxml.jackson.jaxrs/jackson-jaxrs-base@2.13.4", "type": "library", + "bom-ref": "pkg:maven/com.fasterxml.jackson.jaxrs/jackson-jaxrs-base@2.13.4", "scope": "required", - "bom-ref": "pkg:maven/com.fasterxml.jackson.jaxrs/jackson-jaxrs-base@2.13.4" + "hashes": [ + { + "alg": "SHA-256", + "content": "483e706093b6b7246cf156b71c12522d9dd97e87263aff142f45c62128b6d392" + } + ] }, { "group": "com.fasterxml.jackson.module", @@ -956,8 +1580,14 @@ "version": "2.13.4", "purl": "pkg:maven/com.fasterxml.jackson.module/jackson-module-jaxb-annotations@2.13.4", "type": "library", + "bom-ref": "pkg:maven/com.fasterxml.jackson.module/jackson-module-jaxb-annotations@2.13.4", "scope": "required", - "bom-ref": "pkg:maven/com.fasterxml.jackson.module/jackson-module-jaxb-annotations@2.13.4" + "hashes": [ + { + "alg": "SHA-256", + "content": "dcd8704d2fe8f42c93b1c76c0ccc4955d99fe601893945b1a5ea751d64a79c97" + } + ] }, { "group": "io.quarkus", @@ -965,8 +1595,14 @@ "version": "2.13.7.Final", "purl": "pkg:maven/io.quarkus/quarkus-vertx-http-dev-console-runtime-spi@2.13.7.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-vertx-http-dev-console-runtime-spi@2.13.7.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-vertx-http-dev-console-runtime-spi@2.13.7.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "5d6cec615d81c4ce0cd462df852bc9b063610fde698892f357df9edcb49098d7" + } + ] }, { "group": "io.vertx", @@ -974,8 +1610,14 @@ "version": "4.3.4", "purl": "pkg:maven/io.vertx/vertx-web@4.3.4", "type": "library", + "bom-ref": "pkg:maven/io.vertx/vertx-web@4.3.4", "scope": "required", - "bom-ref": "pkg:maven/io.vertx/vertx-web@4.3.4" + "hashes": [ + { + "alg": "SHA-256", + "content": "60b44da6840972cf6d730279ba5d2b699465a72dad63695787fc4d4bb967a2c1" + } + ] }, { "group": "io.vertx", @@ -983,8 +1625,14 @@ "version": "4.3.4", "purl": "pkg:maven/io.vertx/vertx-web-common@4.3.4", "type": "library", + "bom-ref": "pkg:maven/io.vertx/vertx-web-common@4.3.4", "scope": "required", - "bom-ref": "pkg:maven/io.vertx/vertx-web-common@4.3.4" + "hashes": [ + { + "alg": "SHA-256", + "content": "4c4e90a0751703830a98b747439e23603ae18eeb8b5f523db612ef98030fca07" + } + ] }, { "group": "io.vertx", @@ -992,8 +1640,14 @@ "version": "4.3.4", "purl": "pkg:maven/io.vertx/vertx-auth-common@4.3.4", "type": "library", + "bom-ref": "pkg:maven/io.vertx/vertx-auth-common@4.3.4", "scope": "required", - "bom-ref": "pkg:maven/io.vertx/vertx-auth-common@4.3.4" + "hashes": [ + { + "alg": "SHA-256", + "content": "335c5d772c5db152b64a41891cd15d547baac692d540e93eadc0742cea41c80f" + } + ] }, { "group": "io.vertx", @@ -1001,8 +1655,14 @@ "version": "4.3.4", "purl": "pkg:maven/io.vertx/vertx-bridge-common@4.3.4", "type": "library", + "bom-ref": "pkg:maven/io.vertx/vertx-bridge-common@4.3.4", "scope": "required", - "bom-ref": "pkg:maven/io.vertx/vertx-bridge-common@4.3.4" + "hashes": [ + { + "alg": "SHA-256", + "content": "70aa713402bfb59e5a4f90785a699c6e91a311a78e2772af32c00321f7c53f6d" + } + ] }, { "group": "io.quarkus", @@ -1010,8 +1670,14 @@ "version": "2.13.7.Final", "purl": "pkg:maven/io.quarkus/quarkus-vertx@2.13.7.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-vertx@2.13.7.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-vertx@2.13.7.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "05c8aaccd8d88a4f4b5800ccc3c601e659371d2bdd2fabc7c31353689f345491" + } + ] }, { "group": "io.quarkus", @@ -1019,8 +1685,14 @@ "version": "2.13.7.Final", "purl": "pkg:maven/io.quarkus/quarkus-netty@2.13.7.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-netty@2.13.7.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-netty@2.13.7.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "5f756bdcf39e4fba7609a1e7126ce3f655d3b730346e1428f8e68af6df5bfea9" + } + ] }, { "group": "com.aayushatharva.brotli4j", @@ -1028,8 +1700,14 @@ "version": "1.7.1", "purl": "pkg:maven/com.aayushatharva.brotli4j/brotli4j@1.7.1", "type": "library", + "bom-ref": "pkg:maven/com.aayushatharva.brotli4j/brotli4j@1.7.1", "scope": "required", - "bom-ref": "pkg:maven/com.aayushatharva.brotli4j/brotli4j@1.7.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "97b9c394fc377ba14640e4dc0c08ebcc7f05ca514f533b944a0509479c8a5ede" + } + ] }, { "group": "io.netty", @@ -1037,8 +1715,14 @@ "version": "4.1.86.Final", "purl": "pkg:maven/io.netty/netty-codec-haproxy@4.1.86.Final", "type": "library", + "bom-ref": "pkg:maven/io.netty/netty-codec-haproxy@4.1.86.Final", "scope": "required", - "bom-ref": "pkg:maven/io.netty/netty-codec-haproxy@4.1.86.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "c87c380e3c213efa0c1b7533ca22c3b7ea8efdd646a26ed80ae20273c189ad5d" + } + ] }, { "group": "io.quarkus", @@ -1046,8 +1730,14 @@ "version": "2.13.7.Final", "purl": "pkg:maven/io.quarkus/quarkus-vertx-latebound-mdc-provider@2.13.7.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-vertx-latebound-mdc-provider@2.13.7.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-vertx-latebound-mdc-provider@2.13.7.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "59fdf94ede83cae3b7bb60f8ecbdf46434939e7533aff810b04d5141cc0e418c" + } + ] }, { "group": "io.smallrye.reactive", @@ -1055,8 +1745,14 @@ "version": "2.27.0", "purl": "pkg:maven/io.smallrye.reactive/smallrye-mutiny-vertx-core@2.27.0", "type": "library", + "bom-ref": "pkg:maven/io.smallrye.reactive/smallrye-mutiny-vertx-core@2.27.0", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye.reactive/smallrye-mutiny-vertx-core@2.27.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "de60bc30dcb6164d8de0301bafd3ddfdc7cc3ce2f424e8ef31345226972c6e73" + } + ] }, { "group": "io.smallrye.reactive", @@ -1064,8 +1760,14 @@ "version": "2.27.0", "purl": "pkg:maven/io.smallrye.reactive/smallrye-mutiny-vertx-runtime@2.27.0", "type": "library", + "bom-ref": "pkg:maven/io.smallrye.reactive/smallrye-mutiny-vertx-runtime@2.27.0", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye.reactive/smallrye-mutiny-vertx-runtime@2.27.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "8009b258e3518f5d222db0870ef6454687addd7b09328bfd186f7987090db614" + } + ] }, { "group": "io.smallrye.reactive", @@ -1073,8 +1775,14 @@ "version": "2.27.0", "purl": "pkg:maven/io.smallrye.reactive/vertx-mutiny-generator@2.27.0", "type": "library", + "bom-ref": "pkg:maven/io.smallrye.reactive/vertx-mutiny-generator@2.27.0", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye.reactive/vertx-mutiny-generator@2.27.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "afd708bf8cfd65acb76e264bdf9f23435df732fecda078ea7097291c93b3052f" + } + ] }, { "group": "io.vertx", @@ -1082,8 +1790,14 @@ "version": "4.3.4", "purl": "pkg:maven/io.vertx/vertx-codegen@4.3.4", "type": "library", + "bom-ref": "pkg:maven/io.vertx/vertx-codegen@4.3.4", "scope": "required", - "bom-ref": "pkg:maven/io.vertx/vertx-codegen@4.3.4" + "hashes": [ + { + "alg": "SHA-256", + "content": "9d53e2b393abb33c1cbc724e605f234c0ae29a95f1a2886b142a2f176063512b" + } + ] }, { "group": "io.smallrye", @@ -1091,8 +1805,14 @@ "version": "5.5.0", "purl": "pkg:maven/io.smallrye/smallrye-fault-tolerance-vertx@5.5.0", "type": "library", + "bom-ref": "pkg:maven/io.smallrye/smallrye-fault-tolerance-vertx@5.5.0", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye/smallrye-fault-tolerance-vertx@5.5.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "ab3eb26389d9a769627621f0467a6f8d28366adec97342a10b83836bc10f6b8e" + } + ] }, { "group": "io.smallrye.reactive", @@ -1100,8 +1820,14 @@ "version": "2.27.0", "purl": "pkg:maven/io.smallrye.reactive/smallrye-mutiny-vertx-web@2.27.0", "type": "library", + "bom-ref": "pkg:maven/io.smallrye.reactive/smallrye-mutiny-vertx-web@2.27.0", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye.reactive/smallrye-mutiny-vertx-web@2.27.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "5bcd310b30d73903631adf505ee85a5c6fba249bebe9e80a0f116d8644bcc02d" + } + ] }, { "group": "io.smallrye.reactive", @@ -1109,8 +1835,14 @@ "version": "2.27.0", "purl": "pkg:maven/io.smallrye.reactive/smallrye-mutiny-vertx-web-common@2.27.0", "type": "library", + "bom-ref": "pkg:maven/io.smallrye.reactive/smallrye-mutiny-vertx-web-common@2.27.0", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye.reactive/smallrye-mutiny-vertx-web-common@2.27.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "5557378d88617205234d74cf77abb30e3364299ca9055c6346c247cdf18a83b9" + } + ] }, { "group": "io.smallrye.reactive", @@ -1118,8 +1850,14 @@ "version": "2.27.0", "purl": "pkg:maven/io.smallrye.reactive/smallrye-mutiny-vertx-auth-common@2.27.0", "type": "library", + "bom-ref": "pkg:maven/io.smallrye.reactive/smallrye-mutiny-vertx-auth-common@2.27.0", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye.reactive/smallrye-mutiny-vertx-auth-common@2.27.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "451fdc0bc5e4287f1bcf641cc15e4a31c6aca7d97403e16f9bc2105a55d8032a" + } + ] }, { "group": "io.smallrye.reactive", @@ -1127,8 +1865,14 @@ "version": "2.27.0", "purl": "pkg:maven/io.smallrye.reactive/smallrye-mutiny-vertx-bridge-common@2.27.0", "type": "library", + "bom-ref": "pkg:maven/io.smallrye.reactive/smallrye-mutiny-vertx-bridge-common@2.27.0", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye.reactive/smallrye-mutiny-vertx-bridge-common@2.27.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "338d3c77a5a75115c5cf557c43866244b73cdd59620602dc7f0941d71a74fa76" + } + ] }, { "group": "io.smallrye.reactive", @@ -1136,8 +1880,14 @@ "version": "2.27.0", "purl": "pkg:maven/io.smallrye.reactive/smallrye-mutiny-vertx-uri-template@2.27.0", "type": "library", + "bom-ref": "pkg:maven/io.smallrye.reactive/smallrye-mutiny-vertx-uri-template@2.27.0", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye.reactive/smallrye-mutiny-vertx-uri-template@2.27.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "2281c385d91c8c6531ad1a91a3a30064592ec7b713391adc9a1d47859d02ad02" + } + ] }, { "group": "io.vertx", @@ -1145,8 +1895,14 @@ "version": "4.3.4", "purl": "pkg:maven/io.vertx/vertx-uri-template@4.3.4", "type": "library", + "bom-ref": "pkg:maven/io.vertx/vertx-uri-template@4.3.4", "scope": "required", - "bom-ref": "pkg:maven/io.vertx/vertx-uri-template@4.3.4" + "hashes": [ + { + "alg": "SHA-256", + "content": "694b9f0c2c0f831a6bf2924e4708fa4b3b23c6545b7ec89d47b3dde515c07c4e" + } + ] }, { "group": "io.quarkus", @@ -1154,8 +1910,14 @@ "version": "2.13.7.Final", "purl": "pkg:maven/io.quarkus/quarkus-resteasy-server-common@2.13.7.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-resteasy-server-common@2.13.7.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-resteasy-server-common@2.13.7.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "66967939a38c7c74014a48959f040798e86fb539ff6e9c93800a276d61a0551d" + } + ] }, { "group": "io.quarkus", @@ -1163,8 +1925,14 @@ "version": "2.13.7.Final", "purl": "pkg:maven/io.quarkus/quarkus-resteasy-common@2.13.7.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-resteasy-common@2.13.7.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-resteasy-common@2.13.7.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "5336c11c354e63f7fed13130411535d91b2b93489f65ac8f480f6ce563f4f4b8" + } + ] }, { "group": "org.jboss.resteasy", @@ -1172,8 +1940,14 @@ "version": "4.7.7.Final", "purl": "pkg:maven/org.jboss.resteasy/resteasy-core@4.7.7.Final", "type": "library", + "bom-ref": "pkg:maven/org.jboss.resteasy/resteasy-core@4.7.7.Final", "scope": "required", - "bom-ref": "pkg:maven/org.jboss.resteasy/resteasy-core@4.7.7.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "c7c39a1fa4794fe91f07a10f69f2d14244efb76f7360070beaba658b94222b57" + } + ] }, { "group": "org.jboss.spec.javax.annotation", @@ -1181,8 +1955,14 @@ "version": "2.0.1.Final", "purl": "pkg:maven/org.jboss.spec.javax.annotation/jboss-annotations-api_1.3_spec@2.0.1.Final", "type": "library", + "bom-ref": "pkg:maven/org.jboss.spec.javax.annotation/jboss-annotations-api_1.3_spec@2.0.1.Final", "scope": "required", - "bom-ref": "pkg:maven/org.jboss.spec.javax.annotation/jboss-annotations-api_1.3_spec@2.0.1.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "3e8a73afd02919e1b2a6bace5ed5d9af666eb47a79c6015c5fe6b72ba0787dc7" + } + ] }, { "group": "org.jboss.spec.javax.ws.rs", @@ -1190,8 +1970,14 @@ "version": "2.0.1.Final", "purl": "pkg:maven/org.jboss.spec.javax.ws.rs/jboss-jaxrs-api_2.1_spec@2.0.1.Final", "type": "library", + "bom-ref": "pkg:maven/org.jboss.spec.javax.ws.rs/jboss-jaxrs-api_2.1_spec@2.0.1.Final", "scope": "required", - "bom-ref": "pkg:maven/org.jboss.spec.javax.ws.rs/jboss-jaxrs-api_2.1_spec@2.0.1.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "2d490bccbe4ac31117a2194f3345cf43152867b9f51311746b6ac0dca174a4d7" + } + ] }, { "group": "org.jboss.resteasy", @@ -1199,8 +1985,14 @@ "version": "4.7.7.Final", "purl": "pkg:maven/org.jboss.resteasy/resteasy-core-spi@4.7.7.Final", "type": "library", + "bom-ref": "pkg:maven/org.jboss.resteasy/resteasy-core-spi@4.7.7.Final", "scope": "required", - "bom-ref": "pkg:maven/org.jboss.resteasy/resteasy-core-spi@4.7.7.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "a398d037a931161213320c89c94f643127e88c6c68d2876ad9e58392cb6de60d" + } + ] }, { "group": "jakarta.validation", @@ -1208,8 +2000,14 @@ "version": "2.0.2", "purl": "pkg:maven/jakarta.validation/jakarta.validation-api@2.0.2", "type": "library", + "bom-ref": "pkg:maven/jakarta.validation/jakarta.validation-api@2.0.2", "scope": "required", - "bom-ref": "pkg:maven/jakarta.validation/jakarta.validation-api@2.0.2" + "hashes": [ + { + "alg": "SHA-256", + "content": "a8c2b114508ccd20562239505b9732776d3371aaea137b265a0548f456475d06" + } + ] }, { "group": "com.ibm.async", @@ -1217,8 +2015,14 @@ "version": "0.1.0", "purl": "pkg:maven/com.ibm.async/asyncutil@0.1.0", "type": "library", + "bom-ref": "pkg:maven/com.ibm.async/asyncutil@0.1.0", "scope": "required", - "bom-ref": "pkg:maven/com.ibm.async/asyncutil@0.1.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "c565fd5ffe7c8d386d0453723c088cdd572d8351dd2ade703fcc44c45ccd9de7" + } + ] }, { "group": "io.quarkus", @@ -1226,8 +2030,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-resteasy-jackson@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-resteasy-jackson@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-resteasy-jackson@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "dd61825bd9a8c2f962121098870239a0200b2d71fe004b00fb572414b40d422f" + } + ] }, { "group": "io.quarkus", @@ -1235,8 +2045,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-jackson@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-jackson@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-jackson@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "da11fba8adceb5f3574a5021a439e382d77ef36ce9196bf926f74f8c27169de5" + } + ] }, { "group": "org.jboss.resteasy", @@ -1244,8 +2060,14 @@ "version": "4.7.7.Final", "purl": "pkg:maven/org.jboss.resteasy/resteasy-jackson2-provider@4.7.7.Final", "type": "library", + "bom-ref": "pkg:maven/org.jboss.resteasy/resteasy-jackson2-provider@4.7.7.Final", "scope": "required", - "bom-ref": "pkg:maven/org.jboss.resteasy/resteasy-jackson2-provider@4.7.7.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "f44560025fb9e1e28d13a3918d54c8d3c033342d2d5ae50709d7916066f44ff3" + } + ] }, { "group": "com.github.java-json-tools", @@ -1253,8 +2075,14 @@ "version": "1.13", "purl": "pkg:maven/com.github.java-json-tools/json-patch@1.13", "type": "library", + "bom-ref": "pkg:maven/com.github.java-json-tools/json-patch@1.13", "scope": "required", - "bom-ref": "pkg:maven/com.github.java-json-tools/json-patch@1.13" + "hashes": [ + { + "alg": "SHA-256", + "content": "3ff3baf1ba186fdcf33233cb30fc9930c5c77e86cb44c6791865ab377e447bfe" + } + ] }, { "group": "com.github.java-json-tools", @@ -1262,8 +2090,14 @@ "version": "1.2", "purl": "pkg:maven/com.github.java-json-tools/msg-simple@1.2", "type": "library", + "bom-ref": "pkg:maven/com.github.java-json-tools/msg-simple@1.2", "scope": "required", - "bom-ref": "pkg:maven/com.github.java-json-tools/msg-simple@1.2" + "hashes": [ + { + "alg": "SHA-256", + "content": "e6e80ab37a2566fe7847b7090b9e44f436f615b322c97d204ac71f727e119487" + } + ] }, { "group": "com.github.java-json-tools", @@ -1271,8 +2105,14 @@ "version": "1.3", "purl": "pkg:maven/com.github.java-json-tools/btf@1.3", "type": "library", + "bom-ref": "pkg:maven/com.github.java-json-tools/btf@1.3", "scope": "required", - "bom-ref": "pkg:maven/com.github.java-json-tools/btf@1.3" + "hashes": [ + { + "alg": "SHA-256", + "content": "f441a5d0aecc2027bd5b9e4bce9a60b8b56a79e5eac2eff8df0e03182e44cac2" + } + ] }, { "group": "com.github.java-json-tools", @@ -1280,8 +2120,14 @@ "version": "2.0", "purl": "pkg:maven/com.github.java-json-tools/jackson-coreutils@2.0", "type": "library", + "bom-ref": "pkg:maven/com.github.java-json-tools/jackson-coreutils@2.0", "scope": "required", - "bom-ref": "pkg:maven/com.github.java-json-tools/jackson-coreutils@2.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "4d19c88dc43613b28ed18392cff7a0c9c2f6a59473ffba5e486c2f403a8c2f6f" + } + ] }, { "group": "io.quarkus", @@ -1289,8 +2135,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-jdbc-postgresql@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-jdbc-postgresql@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-jdbc-postgresql@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "a1af9f5bef767f20b966430723412779f71275106e66c4e80dad67d0874881d6" + } + ] }, { "group": "org.postgresql", @@ -1298,8 +2150,14 @@ "version": "42.5.0", "purl": "pkg:maven/org.postgresql/postgresql@42.5.0", "type": "library", + "bom-ref": "pkg:maven/org.postgresql/postgresql@42.5.0", "scope": "required", - "bom-ref": "pkg:maven/org.postgresql/postgresql@42.5.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "de729a946b7210ee58cee16a0db68018b1b619ec66f4802ecb41a54d56640b2b" + } + ] }, { "group": "io.quarkus", @@ -1307,8 +2165,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-kubernetes-service-binding@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-kubernetes-service-binding@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-kubernetes-service-binding@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "33fe80f8a1666b04c4ffa621d46f3b7fbb6af343194db24e81d1ffb9065bb0b6" + } + ] }, { "group": "io.quarkus", @@ -1316,8 +2180,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-container-image-docker@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-container-image-docker@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-container-image-docker@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "340cc17319511435110f74a594c065fb8e09b4cd054054df810bbe0ff7754e16" + } + ] }, { "group": "io.quarkus", @@ -1325,8 +2195,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-container-image@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-container-image@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-container-image@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "2283aaad3ea757907383a693d9981e49f167021a6655b41a6761b7f39f6d848c" + } + ] }, { "group": "io.quarkus", @@ -1334,8 +2210,14 @@ "version": "2.13.7.Final", "purl": "pkg:maven/io.quarkus/quarkus-resteasy-multipart@2.13.7.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-resteasy-multipart@2.13.7.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-resteasy-multipart@2.13.7.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "1dba08c004cdf3d1137882fb0c55b2c251d9d4c3c8597d9cdcec5e8488a6bb4c" + } + ] }, { "group": "org.jboss.resteasy", @@ -1343,8 +2225,14 @@ "version": "4.7.7.Final", "purl": "pkg:maven/org.jboss.resteasy/resteasy-multipart-provider@4.7.7.Final", "type": "library", + "bom-ref": "pkg:maven/org.jboss.resteasy/resteasy-multipart-provider@4.7.7.Final", "scope": "required", - "bom-ref": "pkg:maven/org.jboss.resteasy/resteasy-multipart-provider@4.7.7.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "dc367d8beee02e0c638bae5e919104fd64db2c93231eed3b4f992a93f866fa78" + } + ] }, { "group": "org.jboss.resteasy", @@ -1352,8 +2240,14 @@ "version": "4.7.7.Final", "purl": "pkg:maven/org.jboss.resteasy/resteasy-jaxb-provider@4.7.7.Final", "type": "library", + "bom-ref": "pkg:maven/org.jboss.resteasy/resteasy-jaxb-provider@4.7.7.Final", "scope": "required", - "bom-ref": "pkg:maven/org.jboss.resteasy/resteasy-jaxb-provider@4.7.7.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "7cfad418700b1b4095935189e8bec12f542c19b2bd8620bd406d2ba73022dfa7" + } + ] }, { "group": "com.sun.mail", @@ -1361,8 +2255,14 @@ "version": "1.6.5", "purl": "pkg:maven/com.sun.mail/jakarta.mail@1.6.5", "type": "library", + "bom-ref": "pkg:maven/com.sun.mail/jakarta.mail@1.6.5", "scope": "required", - "bom-ref": "pkg:maven/com.sun.mail/jakarta.mail@1.6.5" + "hashes": [ + { + "alg": "SHA-256", + "content": "da5479fdbc808b70b72255908e3ee3ae1e9947b46de8b4fee647b36e1f76988f" + } + ] }, { "group": "org.apache.james", @@ -1370,8 +2270,14 @@ "version": "0.8.3", "purl": "pkg:maven/org.apache.james/apache-mime4j-dom@0.8.3", "type": "library", + "bom-ref": "pkg:maven/org.apache.james/apache-mime4j-dom@0.8.3", "scope": "required", - "bom-ref": "pkg:maven/org.apache.james/apache-mime4j-dom@0.8.3" + "hashes": [ + { + "alg": "SHA-256", + "content": "76cc2f6fc46ae00d45f7d11a558f4b8bcd5aebe6d19848f86c52b24b71cd8695" + } + ] }, { "group": "org.apache.james", @@ -1379,8 +2285,14 @@ "version": "0.8.3", "purl": "pkg:maven/org.apache.james/apache-mime4j-core@0.8.3", "type": "library", + "bom-ref": "pkg:maven/org.apache.james/apache-mime4j-core@0.8.3", "scope": "required", - "bom-ref": "pkg:maven/org.apache.james/apache-mime4j-core@0.8.3" + "hashes": [ + { + "alg": "SHA-256", + "content": "0aee5769cb96580e5e43febee718493f50e7c40eea65d34c3587c076f6fc7d2e" + } + ] }, { "group": "org.apache.james", @@ -1388,8 +2300,14 @@ "version": "0.8.3", "purl": "pkg:maven/org.apache.james/apache-mime4j-storage@0.8.3", "type": "library", + "bom-ref": "pkg:maven/org.apache.james/apache-mime4j-storage@0.8.3", "scope": "required", - "bom-ref": "pkg:maven/org.apache.james/apache-mime4j-storage@0.8.3" + "hashes": [ + { + "alg": "SHA-256", + "content": "c8b2004a2cc30515dd125746091a58b3b0f0cd6bd1a704c418e53e1b4a27aa99" + } + ] }, { "group": "commons-io", @@ -1397,8 +2315,14 @@ "version": "2.6", "purl": "pkg:maven/commons-io/commons-io@2.6", "type": "library", + "bom-ref": "pkg:maven/commons-io/commons-io@2.6", "scope": "required", - "bom-ref": "pkg:maven/commons-io/commons-io@2.6" + "hashes": [ + { + "alg": "SHA-256", + "content": "10c450477b5fc3ea7baac9445b7de8d16048ce260b5514dbcef68f9f20d4f448" + } + ] }, { "group": "org.jboss.logging", @@ -1406,8 +2330,14 @@ "version": "1.0.0.Final", "purl": "pkg:maven/org.jboss.logging/commons-logging-jboss-logging@1.0.0.Final", "type": "library", + "bom-ref": "pkg:maven/org.jboss.logging/commons-logging-jboss-logging@1.0.0.Final", "scope": "required", - "bom-ref": "pkg:maven/org.jboss.logging/commons-logging-jboss-logging@1.0.0.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "fe37c37aa4f39e5a80bcf00808c4a11046831fcf51ebcf947daf7d45f2ab1a40" + } + ] }, { "group": "io.quarkus", @@ -1415,8 +2345,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-hibernate-orm-deployment@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-hibernate-orm-deployment@2.0.2.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-hibernate-orm-deployment@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "dcdd842c6024cbc027f0e9a5374a84461243343a83c295192e6dc93d10d873d9" + } + ] }, { "group": "io.quarkus", @@ -1424,8 +2360,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-core-deployment@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-core-deployment@2.0.2.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-core-deployment@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "8cda4e5ee59a41566f9c5ebafdece3c9771ae0f2b115247bcdd0256e6140d7be" + } + ] }, { "group": "org.aesh", @@ -1433,8 +2375,14 @@ "version": "2.1", "purl": "pkg:maven/org.aesh/readline@2.1", "type": "library", + "bom-ref": "pkg:maven/org.aesh/readline@2.1", "scope": "required", - "bom-ref": "pkg:maven/org.aesh/readline@2.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "2cd72dc7c8327dde309770d348c53b9eb961f685d201074d936d83e5bb9461da" + } + ] }, { "group": "org.fusesource.jansi", @@ -1442,8 +2390,14 @@ "version": "1.18", "purl": "pkg:maven/org.fusesource.jansi/jansi@1.18", "type": "library", + "bom-ref": "pkg:maven/org.fusesource.jansi/jansi@1.18", "scope": "required", - "bom-ref": "pkg:maven/org.fusesource.jansi/jansi@1.18" + "hashes": [ + { + "alg": "SHA-256", + "content": "0dc7dd24f8c8e361f1d839fd930a13b384376d45aa66766927070f0d0d9ca42e" + } + ] }, { "group": "org.apache.commons", @@ -1451,8 +2405,14 @@ "version": "3.12.0", "purl": "pkg:maven/org.apache.commons/commons-lang3@3.12.0", "type": "library", + "bom-ref": "pkg:maven/org.apache.commons/commons-lang3@3.12.0", "scope": "required", - "bom-ref": "pkg:maven/org.apache.commons/commons-lang3@3.12.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "75d06cb0f9b85ba1fad7f3da0f3c35306a102d6cbfce3f998d8315ccacfc3012" + } + ] }, { "group": "io.quarkus.gizmo", @@ -1460,8 +2420,14 @@ "version": "1.0.9.Final", "purl": "pkg:maven/io.quarkus.gizmo/gizmo@1.0.9.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus.gizmo/gizmo@1.0.9.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus.gizmo/gizmo@1.0.9.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "aaf4ed4d511db297fffb49d292f6927d79d6dc35ce6ee48d45178c487f5030d0" + } + ] }, { "group": "org.ow2.asm", @@ -1469,8 +2435,14 @@ "version": "9.1", "purl": "pkg:maven/org.ow2.asm/asm-util@9.1", "type": "library", + "bom-ref": "pkg:maven/org.ow2.asm/asm-util@9.1", "scope": "required", - "bom-ref": "pkg:maven/org.ow2.asm/asm-util@9.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "537baffb3a79453e148081685f9915de7be1fd239e221db6dd91cf2001671310" + } + ] }, { "group": "org.ow2.asm", @@ -1478,8 +2450,14 @@ "version": "9.1", "purl": "pkg:maven/org.ow2.asm/asm-tree@9.1", "type": "library", + "bom-ref": "pkg:maven/org.ow2.asm/asm-tree@9.1", "scope": "required", - "bom-ref": "pkg:maven/org.ow2.asm/asm-tree@9.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "a09d7a940c53c26c0067b33ca0358d330cfa9da3c426d04e86c07f35d406241c" + } + ] }, { "group": "org.ow2.asm", @@ -1487,8 +2465,14 @@ "version": "9.1", "purl": "pkg:maven/org.ow2.asm/asm-analysis@9.1", "type": "library", + "bom-ref": "pkg:maven/org.ow2.asm/asm-analysis@9.1", "scope": "required", - "bom-ref": "pkg:maven/org.ow2.asm/asm-analysis@9.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "f45548ccb5a04167749d372c3faf2caa97a5c42b6e8d204705d5342a0b68d672" + } + ] }, { "group": "org.jboss", @@ -1496,8 +2480,14 @@ "version": "2.3.0.Final", "purl": "pkg:maven/org.jboss/jandex@2.3.0.Final", "type": "library", + "bom-ref": "pkg:maven/org.jboss/jandex@2.3.0.Final", "scope": "required", - "bom-ref": "pkg:maven/org.jboss/jandex@2.3.0.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "6f800e144c7786e8d981cc7d2797981007482215d91deb52a21979d5aa9252a1" + } + ] }, { "group": "io.quarkus", @@ -1505,8 +2495,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-class-change-agent@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-class-change-agent@2.0.2.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-class-change-agent@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "5156efa455261c2479c6e4b11cb6227763a2366d517d1bdf1bc297216984a958" + } + ] }, { "group": "io.quarkus", @@ -1514,8 +2510,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-bootstrap-core@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-bootstrap-core@2.0.2.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-bootstrap-core@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "52ec7ee32ee3ba500822cebdcb10c4bfdabe021fd2af35e9b0db75ad07ee6a90" + } + ] }, { "group": "io.quarkus", @@ -1523,8 +2525,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-bootstrap-app-model@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-bootstrap-app-model@2.0.2.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-bootstrap-app-model@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "a644bad59e34e107e9e2a834a93bfa43ce24224fc76f4170f30167e814c8dfff" + } + ] }, { "group": "io.quarkus", @@ -1532,8 +2540,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-bootstrap-maven-resolver@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-bootstrap-maven-resolver@2.0.2.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-bootstrap-maven-resolver@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "e57278f946f685bd6ca9707b9f63df5de72e27912591107b1f4a01ffe7190e58" + } + ] }, { "group": "org.apache.maven", @@ -1541,8 +2555,14 @@ "version": "3.8.1", "purl": "pkg:maven/org.apache.maven/maven-embedder@3.8.1", "type": "library", + "bom-ref": "pkg:maven/org.apache.maven/maven-embedder@3.8.1", "scope": "required", - "bom-ref": "pkg:maven/org.apache.maven/maven-embedder@3.8.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "c68d9d9e6724a83f00f359c7095cba127cc46ed0b7b0534379aa7363c290d26c" + } + ] }, { "group": "org.apache.maven", @@ -1550,8 +2570,14 @@ "version": "3.8.1", "purl": "pkg:maven/org.apache.maven/maven-settings@3.8.1", "type": "library", + "bom-ref": "pkg:maven/org.apache.maven/maven-settings@3.8.1", "scope": "required", - "bom-ref": "pkg:maven/org.apache.maven/maven-settings@3.8.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "0803ee5e8c795d39ec5f80f438fca25333d36a03899802e6dacce22fe8158a1b" + } + ] }, { "group": "org.codehaus.plexus", @@ -1559,8 +2585,14 @@ "version": "3.3.0", "purl": "pkg:maven/org.codehaus.plexus/plexus-utils@3.3.0", "type": "library", + "bom-ref": "pkg:maven/org.codehaus.plexus/plexus-utils@3.3.0", "scope": "required", - "bom-ref": "pkg:maven/org.codehaus.plexus/plexus-utils@3.3.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "cfebf23a44d7bb8e5947c9f362f8538fc363da422afa6649596732e134c338ab" + } + ] }, { "group": "org.apache.maven", @@ -1568,8 +2600,14 @@ "version": "3.8.1", "purl": "pkg:maven/org.apache.maven/maven-settings-builder@3.8.1", "type": "library", + "bom-ref": "pkg:maven/org.apache.maven/maven-settings-builder@3.8.1", "scope": "required", - "bom-ref": "pkg:maven/org.apache.maven/maven-settings-builder@3.8.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "4a5d417cec132243dfdb9572742c001cbf265da44e794e912b4578500439fd0c" + } + ] }, { "group": "org.apache.maven", @@ -1577,8 +2615,14 @@ "version": "3.8.1", "purl": "pkg:maven/org.apache.maven/maven-builder-support@3.8.1", "type": "library", + "bom-ref": "pkg:maven/org.apache.maven/maven-builder-support@3.8.1", "scope": "required", - "bom-ref": "pkg:maven/org.apache.maven/maven-builder-support@3.8.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "1af4ec512b2675952af66164a610bca043a62ddfceea10d082a38dc4b4974e38" + } + ] }, { "group": "org.codehaus.plexus", @@ -1586,8 +2630,14 @@ "version": "1.25", "purl": "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.25", "type": "library", + "bom-ref": "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.25", "scope": "required", - "bom-ref": "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.25" + "hashes": [ + { + "alg": "SHA-256", + "content": "e80ac909af53b689563a2431af9d53e6ec5c82caf5b32a11c029fca18884fc82" + } + ] }, { "group": "org.sonatype.plexus", @@ -1595,8 +2645,14 @@ "version": "1.4", "purl": "pkg:maven/org.sonatype.plexus/plexus-sec-dispatcher@1.4", "type": "library", + "bom-ref": "pkg:maven/org.sonatype.plexus/plexus-sec-dispatcher@1.4", "scope": "required", - "bom-ref": "pkg:maven/org.sonatype.plexus/plexus-sec-dispatcher@1.4" + "hashes": [ + { + "alg": "SHA-256", + "content": "a652bc8bc584d8de8ae6a2b50f00f248a0230e048062abb6e73bac4d07ad84af" + } + ] }, { "group": "org.sonatype.plexus", @@ -1604,8 +2660,14 @@ "version": "1.4", "purl": "pkg:maven/org.sonatype.plexus/plexus-cipher@1.4", "type": "library", + "bom-ref": "pkg:maven/org.sonatype.plexus/plexus-cipher@1.4", "scope": "required", - "bom-ref": "pkg:maven/org.sonatype.plexus/plexus-cipher@1.4" + "hashes": [ + { + "alg": "SHA-256", + "content": "633d1db3235958cf69a4db38c7a279dced8714666bf0d28073c32229a2718837" + } + ] }, { "group": "org.apache.maven", @@ -1613,8 +2675,14 @@ "version": "3.8.1", "purl": "pkg:maven/org.apache.maven/maven-core@3.8.1", "type": "library", + "bom-ref": "pkg:maven/org.apache.maven/maven-core@3.8.1", "scope": "required", - "bom-ref": "pkg:maven/org.apache.maven/maven-core@3.8.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "635918aa4738430f81c4dec7c56998f6bd20696aad81148410dd6a823b74b7a3" + } + ] }, { "group": "org.apache.maven", @@ -1622,8 +2690,14 @@ "version": "3.8.1", "purl": "pkg:maven/org.apache.maven/maven-model@3.8.1", "type": "library", + "bom-ref": "pkg:maven/org.apache.maven/maven-model@3.8.1", "scope": "required", - "bom-ref": "pkg:maven/org.apache.maven/maven-model@3.8.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "23dc00a1ebfd1bd1dbb9ebb4446572a6ba804b5252d7cba3e99a5c2fe9cd494b" + } + ] }, { "group": "org.apache.maven", @@ -1631,8 +2705,14 @@ "version": "3.8.1", "purl": "pkg:maven/org.apache.maven/maven-repository-metadata@3.8.1", "type": "library", + "bom-ref": "pkg:maven/org.apache.maven/maven-repository-metadata@3.8.1", "scope": "required", - "bom-ref": "pkg:maven/org.apache.maven/maven-repository-metadata@3.8.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "0d92468de4cff3464f956cdd6044c717d1ccddf7b5fd53d90184dfa2eb86b381" + } + ] }, { "group": "org.apache.maven", @@ -1640,8 +2720,14 @@ "version": "3.8.1", "purl": "pkg:maven/org.apache.maven/maven-artifact@3.8.1", "type": "library", + "bom-ref": "pkg:maven/org.apache.maven/maven-artifact@3.8.1", "scope": "required", - "bom-ref": "pkg:maven/org.apache.maven/maven-artifact@3.8.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "fd6855903809b4e77002a7a9e60aa6975bd9046e07af215a6d2d15c60ec3f427" + } + ] }, { "group": "org.apache.maven", @@ -1649,8 +2735,14 @@ "version": "3.8.1", "purl": "pkg:maven/org.apache.maven/maven-plugin-api@3.8.1", "type": "library", + "bom-ref": "pkg:maven/org.apache.maven/maven-plugin-api@3.8.1", "scope": "required", - "bom-ref": "pkg:maven/org.apache.maven/maven-plugin-api@3.8.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "fb89f33cc2154de9cafae1bc2bce23f2784ff1f88ec0f654bf3efb09d6a63928" + } + ] }, { "group": "org.eclipse.sisu", @@ -1658,8 +2750,14 @@ "version": "0.3.4", "purl": "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.3.4", "type": "library", + "bom-ref": "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.3.4", "scope": "required", - "bom-ref": "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.3.4" + "hashes": [ + { + "alg": "SHA-256", + "content": "892dfcf9c0ab795cad559b5ff081f005a7cc13834bece92e4e6fe1bc619d83a0" + } + ] }, { "group": "org.codehaus.plexus", @@ -1667,8 +2765,14 @@ "version": "2.1.0", "purl": "pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0", "type": "library", + "bom-ref": "pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0", "scope": "required", - "bom-ref": "pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "0221fa6eecf3f22f70bc4789a437e8971a37285d40af43ab0be0a69dc2fecba8" + } + ] }, { "group": "org.codehaus.plexus", @@ -1676,8 +2780,14 @@ "version": "2.6.0", "purl": "pkg:maven/org.codehaus.plexus/plexus-classworlds@2.6.0", "type": "library", + "bom-ref": "pkg:maven/org.codehaus.plexus/plexus-classworlds@2.6.0", "scope": "required", - "bom-ref": "pkg:maven/org.codehaus.plexus/plexus-classworlds@2.6.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "0d458f6ef51992b68f3f67bcd2867f6231135e0ed885a94bd48e5c36d480a9b7" + } + ] }, { "group": "org.apache.maven", @@ -1685,8 +2795,14 @@ "version": "3.8.1", "purl": "pkg:maven/org.apache.maven/maven-model-builder@3.8.1", "type": "library", + "bom-ref": "pkg:maven/org.apache.maven/maven-model-builder@3.8.1", "scope": "required", - "bom-ref": "pkg:maven/org.apache.maven/maven-model-builder@3.8.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "753ae05791ea0517c042fd233c1af2db124db7b48239925b56cab73f2ac56d5d" + } + ] }, { "group": "org.apache.maven", @@ -1694,8 +2810,14 @@ "version": "3.8.1", "purl": "pkg:maven/org.apache.maven/maven-resolver-provider@3.8.1", "type": "library", + "bom-ref": "pkg:maven/org.apache.maven/maven-resolver-provider@3.8.1", "scope": "required", - "bom-ref": "pkg:maven/org.apache.maven/maven-resolver-provider@3.8.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "bd7822b5883e0cea9fca95b6c7f75ceac2cd9d5051fb93d402c9836e58360cf2" + } + ] }, { "group": "org.apache.maven.resolver", @@ -1703,8 +2825,14 @@ "version": "1.6.2", "purl": "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.6.2", "type": "library", + "bom-ref": "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.6.2", "scope": "required", - "bom-ref": "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.6.2" + "hashes": [ + { + "alg": "SHA-256", + "content": "167872c8192069cd33d95a19695c1db9f792294254a7c1007e5c81b9b9e09d6a" + } + ] }, { "group": "org.apache.maven.resolver", @@ -1712,8 +2840,14 @@ "version": "1.6.2", "purl": "pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.6.2", "type": "library", + "bom-ref": "pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.6.2", "scope": "required", - "bom-ref": "pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.6.2" + "hashes": [ + { + "alg": "SHA-256", + "content": "d349392330b7735f9cce688ddedfdd8d96ce74897e3b996c61a09eeb0b599fca" + } + ] }, { "group": "org.apache.maven.resolver", @@ -1721,8 +2855,14 @@ "version": "1.6.2", "purl": "pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.6.2", "type": "library", + "bom-ref": "pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.6.2", "scope": "required", - "bom-ref": "pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.6.2" + "hashes": [ + { + "alg": "SHA-256", + "content": "a7b85498cf9da664e9a0f8a6cd0b99532cacdd2b41a50d8e1de514ac5c64496a" + } + ] }, { "group": "org.apache.maven.resolver", @@ -1730,8 +2870,14 @@ "version": "1.6.2", "purl": "pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.6.2", "type": "library", + "bom-ref": "pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.6.2", "scope": "required", - "bom-ref": "pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.6.2" + "hashes": [ + { + "alg": "SHA-256", + "content": "e531a9dc8c35f55d444bff04751c75848c3fd3d7fe93d62730410e30667961c8" + } + ] }, { "group": "org.apache.maven.shared", @@ -1739,8 +2885,14 @@ "version": "3.2.1", "purl": "pkg:maven/org.apache.maven.shared/maven-shared-utils@3.2.1", "type": "library", + "bom-ref": "pkg:maven/org.apache.maven.shared/maven-shared-utils@3.2.1", "scope": "required", - "bom-ref": "pkg:maven/org.apache.maven.shared/maven-shared-utils@3.2.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "8b960b4297a3225d5610e7a7b4fd0b3cc47df2bf36db3dc2f7121b9c0bada051" + } + ] }, { "group": "com.google.inject", @@ -1748,8 +2900,14 @@ "version": "4.2.1", "purl": "pkg:maven/com.google.inject/guice@4.2.1", "type": "library", + "bom-ref": "pkg:maven/com.google.inject/guice@4.2.1", "scope": "required", - "bom-ref": "pkg:maven/com.google.inject/guice@4.2.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "92277e95f88594dae4534ca9f3b6e9290f1ea29cb0577ef43e8b6c0b4beeb53e" + } + ] }, { "group": "aopalliance", @@ -1757,8 +2915,14 @@ "version": "1.0", "purl": "pkg:maven/aopalliance/aopalliance@1.0", "type": "library", + "bom-ref": "pkg:maven/aopalliance/aopalliance@1.0", "scope": "required", - "bom-ref": "pkg:maven/aopalliance/aopalliance@1.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "0e26e161ee03141cfadfd4eec6285eccc621a4877722bfb09a4ec2958e4dcf57" + } + ] }, { "group": "com.google.guava", @@ -1766,8 +2930,14 @@ "version": "25.1-android", "purl": "pkg:maven/com.google.guava/guava@25.1-android", "type": "library", + "bom-ref": "pkg:maven/com.google.guava/guava@25.1-android", "scope": "required", - "bom-ref": "pkg:maven/com.google.guava/guava@25.1-android" + "hashes": [ + { + "alg": "SHA-256", + "content": "b6eeecdbad9a9be217583a8f6d5bb447426d62f63fe9b114beeb6b499efb2560" + } + ] }, { "group": "com.google.code.findbugs", @@ -1775,8 +2945,14 @@ "version": "3.0.2", "purl": "pkg:maven/com.google.code.findbugs/jsr305@3.0.2", "type": "library", + "bom-ref": "pkg:maven/com.google.code.findbugs/jsr305@3.0.2", "scope": "required", - "bom-ref": "pkg:maven/com.google.code.findbugs/jsr305@3.0.2" + "hashes": [ + { + "alg": "SHA-256", + "content": "b9748bf56c300be0f44a20ba5b99676565bb215d693ce4067097d4b14e4185d5" + } + ] }, { "group": "org.checkerframework", @@ -1784,8 +2960,14 @@ "version": "2.0.0", "purl": "pkg:maven/org.checkerframework/checker-compat-qual@2.0.0", "type": "library", + "bom-ref": "pkg:maven/org.checkerframework/checker-compat-qual@2.0.0", "scope": "required", - "bom-ref": "pkg:maven/org.checkerframework/checker-compat-qual@2.0.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "1e5bb65bf0acbcf01e87f77aa9281738846be042ee776e0b05f06f95ed94d4c9" + } + ] }, { "group": "com.google.j2objc", @@ -1793,8 +2975,14 @@ "version": "1.1", "purl": "pkg:maven/com.google.j2objc/j2objc-annotations@1.1", "type": "library", + "bom-ref": "pkg:maven/com.google.j2objc/j2objc-annotations@1.1", "scope": "required", - "bom-ref": "pkg:maven/com.google.j2objc/j2objc-annotations@1.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "f41a81c6cadc39388d14b4c8c56aeda722511c02507f9ac5f3479db3174f2406" + } + ] }, { "group": "org.codehaus.mojo", @@ -1802,8 +2990,14 @@ "version": "1.14", "purl": "pkg:maven/org.codehaus.mojo/animal-sniffer-annotations@1.14", "type": "library", + "bom-ref": "pkg:maven/org.codehaus.mojo/animal-sniffer-annotations@1.14", "scope": "required", - "bom-ref": "pkg:maven/org.codehaus.mojo/animal-sniffer-annotations@1.14" + "hashes": [ + { + "alg": "SHA-256", + "content": "982a7061046068098a95334dc007d11d31462628ac1bf904b7bd1b28aef00ebc" + } + ] }, { "group": "commons-cli", @@ -1811,8 +3005,14 @@ "version": "1.4", "purl": "pkg:maven/commons-cli/commons-cli@1.4", "type": "library", + "bom-ref": "pkg:maven/commons-cli/commons-cli@1.4", "scope": "required", - "bom-ref": "pkg:maven/commons-cli/commons-cli@1.4" + "hashes": [ + { + "alg": "SHA-256", + "content": "4d5698c601e30825d885d7f2aee8a1a23ddf07eff5d9468dbb1c68f33739c15b" + } + ] }, { "group": "org.apache.maven.resolver", @@ -1820,8 +3020,14 @@ "version": "1.6.2", "purl": "pkg:maven/org.apache.maven.resolver/maven-resolver-connector-basic@1.6.2", "type": "library", + "bom-ref": "pkg:maven/org.apache.maven.resolver/maven-resolver-connector-basic@1.6.2", "scope": "required", - "bom-ref": "pkg:maven/org.apache.maven.resolver/maven-resolver-connector-basic@1.6.2" + "hashes": [ + { + "alg": "SHA-256", + "content": "93a7d6623696b7542f7a778999a7591c787400d2b1cfb9ed702847ae74fe04f6" + } + ] }, { "group": "org.apache.maven.resolver", @@ -1829,8 +3035,14 @@ "version": "1.6.2", "purl": "pkg:maven/org.apache.maven.resolver/maven-resolver-transport-wagon@1.6.2", "type": "library", + "bom-ref": "pkg:maven/org.apache.maven.resolver/maven-resolver-transport-wagon@1.6.2", "scope": "required", - "bom-ref": "pkg:maven/org.apache.maven.resolver/maven-resolver-transport-wagon@1.6.2" + "hashes": [ + { + "alg": "SHA-256", + "content": "69ac64f7a61830d1b609b75f061c5f37bd841d204494d91107a4976d65ba74dc" + } + ] }, { "group": "org.apache.maven.wagon", @@ -1838,8 +3050,14 @@ "version": "3.4.3", "purl": "pkg:maven/org.apache.maven.wagon/wagon-http@3.4.3", "type": "library", + "bom-ref": "pkg:maven/org.apache.maven.wagon/wagon-http@3.4.3", "scope": "required", - "bom-ref": "pkg:maven/org.apache.maven.wagon/wagon-http@3.4.3" + "hashes": [ + { + "alg": "SHA-256", + "content": "dc73d554018c277bb34f2d8c0f22c48b989f4c1ebfc72acccceb1a5596f9ca66" + } + ] }, { "group": "org.apache.maven.wagon", @@ -1847,8 +3065,14 @@ "version": "3.4.3", "purl": "pkg:maven/org.apache.maven.wagon/wagon-http-shared@3.4.3", "type": "library", + "bom-ref": "pkg:maven/org.apache.maven.wagon/wagon-http-shared@3.4.3", "scope": "required", - "bom-ref": "pkg:maven/org.apache.maven.wagon/wagon-http-shared@3.4.3" + "hashes": [ + { + "alg": "SHA-256", + "content": "bb98ed8606e6fc4aeb551149d5699f33c67f940eb96daca3a6cdafd899324118" + } + ] }, { "group": "org.jsoup", @@ -1856,8 +3080,14 @@ "version": "1.12.1", "purl": "pkg:maven/org.jsoup/jsoup@1.12.1", "type": "library", + "bom-ref": "pkg:maven/org.jsoup/jsoup@1.12.1", "scope": "required", - "bom-ref": "pkg:maven/org.jsoup/jsoup@1.12.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "d18bc1810d6619608bf6eeb373d533bbbb331a419c05f5088e88dd6e9c5a68cf" + } + ] }, { "group": "org.apache.httpcomponents", @@ -1865,8 +3095,14 @@ "version": "4.5.13", "purl": "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13", "type": "library", + "bom-ref": "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13", "scope": "required", - "bom-ref": "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13" + "hashes": [ + { + "alg": "SHA-256", + "content": "aa8533703665c45b418af29b71d92f56ddba39a83daf856072c947685d37a780" + } + ] }, { "group": "org.apache.httpcomponents", @@ -1874,8 +3110,14 @@ "version": "4.4.14", "purl": "pkg:maven/org.apache.httpcomponents/httpcore@4.4.14", "type": "library", + "bom-ref": "pkg:maven/org.apache.httpcomponents/httpcore@4.4.14", "scope": "required", - "bom-ref": "pkg:maven/org.apache.httpcomponents/httpcore@4.4.14" + "hashes": [ + { + "alg": "SHA-256", + "content": "1f782fc7fa0aa6db8929e7e59c0c88b597c9fbb6bf1136f8adc609945c83282e" + } + ] }, { "group": "commons-codec", @@ -1883,8 +3125,14 @@ "version": "1.11", "purl": "pkg:maven/commons-codec/commons-codec@1.11", "type": "library", + "bom-ref": "pkg:maven/commons-codec/commons-codec@1.11", "scope": "required", - "bom-ref": "pkg:maven/commons-codec/commons-codec@1.11" + "hashes": [ + { + "alg": "SHA-256", + "content": "d885eea5759a9df7787fdb132d42e443705fc925df49cb14ef00dc85eeabed82" + } + ] }, { "group": "org.apache.maven.wagon", @@ -1892,8 +3140,14 @@ "version": "3.4.3", "purl": "pkg:maven/org.apache.maven.wagon/wagon-provider-api@3.4.3", "type": "library", + "bom-ref": "pkg:maven/org.apache.maven.wagon/wagon-provider-api@3.4.3", "scope": "required", - "bom-ref": "pkg:maven/org.apache.maven.wagon/wagon-provider-api@3.4.3" + "hashes": [ + { + "alg": "SHA-256", + "content": "29232ca8f8e443f952d4d6c1829aafb49b3dabc23c308d70a329698cdef3d4bd" + } + ] }, { "group": "org.apache.maven.wagon", @@ -1901,8 +3155,14 @@ "version": "3.4.3", "purl": "pkg:maven/org.apache.maven.wagon/wagon-file@3.4.3", "type": "library", + "bom-ref": "pkg:maven/org.apache.maven.wagon/wagon-file@3.4.3", "scope": "required", - "bom-ref": "pkg:maven/org.apache.maven.wagon/wagon-file@3.4.3" + "hashes": [ + { + "alg": "SHA-256", + "content": "921a96e3e6e7860a984b9153ecee636c67f7933b16e76ec62e9ae50fd0d991ba" + } + ] }, { "group": "io.quarkus", @@ -1910,8 +3170,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-bootstrap-gradle-resolver@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-bootstrap-gradle-resolver@2.0.2.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-bootstrap-gradle-resolver@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "2e74280c166cb42551498f707ccfee61ad33a6ef1f43aba928134990153bd4ee" + } + ] }, { "group": "io.quarkus", @@ -1919,8 +3185,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-devtools-utilities@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-devtools-utilities@2.0.2.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-devtools-utilities@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "ce8a21bfa9bca0248be35a37e209b6b183dc4b34689cf6feef2b2e01b8f3db24" + } + ] }, { "group": "org.eclipse.sisu", @@ -1928,8 +3200,14 @@ "version": "0.3.4", "purl": "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.3.4", "type": "library", + "bom-ref": "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.3.4", "scope": "required", - "bom-ref": "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.3.4" + "hashes": [ + { + "alg": "SHA-256", + "content": "03f86159b252bd4b293683e4a8f0dc57ea33bf46dca5df1acfc1b0b4c7476398" + } + ] }, { "group": "io.quarkus", @@ -1937,8 +3215,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-builder@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-builder@2.0.2.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-builder@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "0cea3c6b3c8fb29c4b5e627623908164a802691261a4a17c10bb53c816bb4a6b" + } + ] }, { "group": "org.junit.platform", @@ -1946,8 +3230,14 @@ "version": "1.7.2", "purl": "pkg:maven/org.junit.platform/junit-platform-launcher@1.7.2", "type": "library", + "bom-ref": "pkg:maven/org.junit.platform/junit-platform-launcher@1.7.2", "scope": "required", - "bom-ref": "pkg:maven/org.junit.platform/junit-platform-launcher@1.7.2" + "hashes": [ + { + "alg": "SHA-256", + "content": "e6277701ce25d3aa3b0944d429fa068687004e560b7cb00691d6bc8b26e435e9" + } + ] }, { "group": "org.junit", @@ -1955,8 +3245,14 @@ "version": "5.7.2", "purl": "pkg:maven/org.junit/junit-bom@5.7.2", "type": "library", + "bom-ref": "pkg:maven/org.junit/junit-bom@5.7.2", "scope": "required", - "bom-ref": "pkg:maven/org.junit/junit-bom@5.7.2" + "hashes": [ + { + "alg": "SHA-256", + "content": "36067e7ca222d8f77f7ab2022c57b10637f9a35c2b4343d09bc67311def7b7dc" + } + ] }, { "group": "org.junit.jupiter", @@ -1964,8 +3260,14 @@ "version": "5.7.2", "purl": "pkg:maven/org.junit.jupiter/junit-jupiter@5.7.2", "type": "library", + "bom-ref": "pkg:maven/org.junit.jupiter/junit-jupiter@5.7.2", "scope": "required", - "bom-ref": "pkg:maven/org.junit.jupiter/junit-jupiter@5.7.2" + "hashes": [ + { + "alg": "SHA-256", + "content": "0553c80cc0fbddc1114db5bb4816cc24cc0c876891d0a238a7bd35e1059723d3" + } + ] }, { "group": "org.junit.jupiter", @@ -1973,8 +3275,14 @@ "version": "5.7.2", "purl": "pkg:maven/org.junit.jupiter/junit-jupiter-api@5.7.2", "type": "library", + "bom-ref": "pkg:maven/org.junit.jupiter/junit-jupiter-api@5.7.2", "scope": "required", - "bom-ref": "pkg:maven/org.junit.jupiter/junit-jupiter-api@5.7.2" + "hashes": [ + { + "alg": "SHA-256", + "content": "5e167a2fc374270965aaa4e1c2efa4951a9d60268da0a80fbf7898dbf9a3a2c8" + } + ] }, { "group": "org.junit.jupiter", @@ -1982,8 +3290,14 @@ "version": "5.7.2", "purl": "pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.7.2", "type": "library", + "bom-ref": "pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.7.2", "scope": "required", - "bom-ref": "pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.7.2" + "hashes": [ + { + "alg": "SHA-256", + "content": "e726eee7cc36a0d5104fe1bd234fd61a8bec6dabca56299f86263a265c07a5c8" + } + ] }, { "group": "org.junit.jupiter", @@ -1991,8 +3305,14 @@ "version": "5.7.2", "purl": "pkg:maven/org.junit.jupiter/junit-jupiter-params@5.7.2", "type": "library", + "bom-ref": "pkg:maven/org.junit.jupiter/junit-jupiter-params@5.7.2", "scope": "required", - "bom-ref": "pkg:maven/org.junit.jupiter/junit-jupiter-params@5.7.2" + "hashes": [ + { + "alg": "SHA-256", + "content": "7d4732347008f6eef3428078582203423c0be01aad09256d5e5023da0fd76e4d" + } + ] }, { "group": "org.junit.platform", @@ -2000,8 +3320,14 @@ "version": "1.7.2", "purl": "pkg:maven/org.junit.platform/junit-platform-engine@1.7.2", "type": "library", + "bom-ref": "pkg:maven/org.junit.platform/junit-platform-engine@1.7.2", "scope": "required", - "bom-ref": "pkg:maven/org.junit.platform/junit-platform-engine@1.7.2" + "hashes": [ + { + "alg": "SHA-256", + "content": "efc3f3220e47989db48d427b6fbf1361f7ed1c192937c80d22ee5258f1ec641d" + } + ] }, { "group": "org.junit.platform", @@ -2009,8 +3335,14 @@ "version": "1.7.2", "purl": "pkg:maven/org.junit.platform/junit-platform-commons@1.7.2", "type": "library", + "bom-ref": "pkg:maven/org.junit.platform/junit-platform-commons@1.7.2", "scope": "required", - "bom-ref": "pkg:maven/org.junit.platform/junit-platform-commons@1.7.2" + "hashes": [ + { + "alg": "SHA-256", + "content": "c8bf2c027bb1f8284bec7c821d36df26f579ad3e5d7629fad193953639e2963a" + } + ] }, { "group": "org.apiguardian", @@ -2018,8 +3350,14 @@ "version": "1.1.0", "purl": "pkg:maven/org.apiguardian/apiguardian-api@1.1.0", "type": "library", + "bom-ref": "pkg:maven/org.apiguardian/apiguardian-api@1.1.0", "scope": "required", - "bom-ref": "pkg:maven/org.apiguardian/apiguardian-api@1.1.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "20449bb8023ab658018bfd91b5943ea198d34fe46b3c905338701092e0f5fc80" + } + ] }, { "group": "org.opentest4j", @@ -2027,8 +3365,14 @@ "version": "1.2.0", "purl": "pkg:maven/org.opentest4j/opentest4j@1.2.0", "type": "library", + "bom-ref": "pkg:maven/org.opentest4j/opentest4j@1.2.0", "scope": "required", - "bom-ref": "pkg:maven/org.opentest4j/opentest4j@1.2.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "6d86f077185a962c9500d35a50e32dbaaf5364a1eb9ccf4eea4437ca126f754f" + } + ] }, { "group": "io.quarkus", @@ -2036,8 +3380,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-narayana-jta-deployment@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-narayana-jta-deployment@2.0.2.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-narayana-jta-deployment@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "72b740382bc19bb7f991e8ea9113a59ecae0fa9d02267fda13a2695584911a37" + } + ] }, { "group": "io.quarkus", @@ -2045,8 +3395,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-arc-deployment@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-arc-deployment@2.0.2.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-arc-deployment@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "2842063ad9da4ec68dca08769c36121695bef39207e79a7feb345ece73c3edc6" + } + ] }, { "group": "io.quarkus", @@ -2054,8 +3410,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-vertx-http-dev-console-spi@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-vertx-http-dev-console-spi@2.0.2.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-vertx-http-dev-console-spi@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "4d3a59117e3beb43d5643a6314e9bb482b529ae2b219ee4dfc2be5108d49e09a" + } + ] }, { "group": "io.quarkus.arc", @@ -2063,8 +3425,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus.arc/arc-processor@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus.arc/arc-processor@2.0.2.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus.arc/arc-processor@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "7956865dcd107ed97018c5ccca052f895a5e22ee5bd9459371edda952478cfd6" + } + ] }, { "group": "io.quarkus", @@ -2072,8 +3440,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-mutiny-deployment@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-mutiny-deployment@2.0.2.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-mutiny-deployment@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "4ef40118bd1d35409f1b44d4d0040532e496fe1ad1313b4bbf32b9bbfa6869a5" + } + ] }, { "group": "io.quarkus", @@ -2081,8 +3455,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-smallrye-context-propagation-deployment@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-smallrye-context-propagation-deployment@2.0.2.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-smallrye-context-propagation-deployment@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "fe29c8de492b4aaa727bfe971e6cb38680f1a190cc48e0084f8cea7a11a3f077" + } + ] }, { "group": "io.quarkus", @@ -2090,8 +3470,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-agroal-deployment@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-agroal-deployment@2.0.2.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-agroal-deployment@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "30c6f0310e3d205be81858303e26e5f5dfd00a1de0645c57ab234619bfec0126" + } + ] }, { "group": "io.quarkus", @@ -2099,8 +3485,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-datasource-deployment@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-datasource-deployment@2.0.2.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-datasource-deployment@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "b3c9d72ccd890189e7b2a399628d8f25cc39fa9a1f942d4f9eb050296ae8cf53" + } + ] }, { "group": "io.quarkus", @@ -2108,8 +3500,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-datasource-deployment-spi@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-datasource-deployment-spi@2.0.2.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-datasource-deployment-spi@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "9e251f8b44174660c3d6db81d09567b5cdacbd3bd3d86a7a9585472b0311bfb6" + } + ] }, { "group": "io.quarkus", @@ -2117,8 +3515,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-agroal-spi@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-agroal-spi@2.0.2.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-agroal-spi@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "866519601a62fef570340577923e890475bd9d17defe16d596a0f9beb7f18bc5" + } + ] }, { "group": "io.quarkus", @@ -2126,8 +3530,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-credentials-deployment@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-credentials-deployment@2.0.2.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-credentials-deployment@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "c794d1b4f732bda972a20d0afd7f88e2b09772d39986fe66198be0024ff2f4eb" + } + ] }, { "group": "io.quarkus", @@ -2135,8 +3545,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-smallrye-health-spi@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-smallrye-health-spi@2.0.2.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-smallrye-health-spi@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "6e06f30a2ddf5c449af7ac341b0637ca5af58b24e7317b54392fbbbe3282f9b3" + } + ] }, { "group": "io.quarkus", @@ -2144,8 +3560,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-caffeine-deployment@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-caffeine-deployment@2.0.2.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-caffeine-deployment@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "b5ec996f16d4555f7a84287eb4adaf5b2d191696bc22ac3b9e6bd6aad0de27ba" + } + ] }, { "group": "io.quarkus", @@ -2153,8 +3575,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-panache-hibernate-common-deployment@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-panache-hibernate-common-deployment@2.0.2.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-panache-hibernate-common-deployment@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "568067174ce357bf3e0c18d453679663e9d6b73eea3803895032929e6feeddaa" + } + ] }, { "group": "io.quarkus", @@ -2162,8 +3590,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-panache-hibernate-common@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-panache-hibernate-common@2.0.2.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-panache-hibernate-common@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "497b0a7aee81a41e671cdb80017165f78d6fa817c6ab690458145178a3214a9c" + } + ] }, { "group": "io.quarkus", @@ -2171,8 +3605,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-panache-common@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-panache-common@2.0.2.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-panache-common@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "3d0df22ee49ef52d77df941dd97483cbcc16857f2ded6e74e43083f796b0c78c" + } + ] }, { "group": "io.quarkus", @@ -2180,8 +3620,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-panache-common-deployment@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-panache-common-deployment@2.0.2.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-panache-common-deployment@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "3e045616c2f54d71f25b1facb081024d5b70c02689fffd2bad5c5a7ce050177b" + } + ] } ], "dependencies": [ diff --git a/test/providers/tst_manifests/gradle/deps_with_ignore_notations/expected_component_sbom.json b/test/providers/tst_manifests/gradle/deps_with_ignore_notations/expected_component_sbom.json index 3a801ae8..ac514a75 100644 --- a/test/providers/tst_manifests/gradle/deps_with_ignore_notations/expected_component_sbom.json +++ b/test/providers/tst_manifests/gradle/deps_with_ignore_notations/expected_component_sbom.json @@ -20,8 +20,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-hibernate-orm@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-hibernate-orm@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-hibernate-orm@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "79056c3042ee5c1bf05766340e4ae54fdde64f08036ec3e7eade6fb1c1d74375" + } + ] }, { "group": "io.quarkus", @@ -29,8 +35,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-agroal@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-agroal@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-agroal@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "373e7e3e0789069ac3b414658fdc8d2e78fa29ed649672443833fd61653e8239" + } + ] }, { "group": "io.quarkus", @@ -38,8 +50,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-resteasy@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-resteasy@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-resteasy@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "e4569c385c1200dfd4144f52f8be1cd3c608d1438425aa596c13268d88a01243" + } + ] }, { "group": "io.quarkus", @@ -47,8 +65,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-resteasy-jackson@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-resteasy-jackson@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-resteasy-jackson@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "dd61825bd9a8c2f962121098870239a0200b2d71fe004b00fb572414b40d422f" + } + ] }, { "group": "io.quarkus", @@ -56,8 +80,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-jdbc-postgresql@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-jdbc-postgresql@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-jdbc-postgresql@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "a1af9f5bef767f20b966430723412779f71275106e66c4e80dad67d0874881d6" + } + ] }, { "group": "io.quarkus", @@ -65,8 +95,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-kubernetes-service-binding@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-kubernetes-service-binding@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-kubernetes-service-binding@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "33fe80f8a1666b04c4ffa621d46f3b7fbb6af343194db24e81d1ffb9065bb0b6" + } + ] }, { "group": "io.quarkus", @@ -74,8 +110,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-container-image-docker@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-container-image-docker@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-container-image-docker@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "340cc17319511435110f74a594c065fb8e09b4cd054054df810bbe0ff7754e16" + } + ] }, { "group": "jakarta.validation", @@ -83,8 +125,14 @@ "version": "2.0.2", "purl": "pkg:maven/jakarta.validation/jakarta.validation-api@2.0.2", "type": "library", + "bom-ref": "pkg:maven/jakarta.validation/jakarta.validation-api@2.0.2", "scope": "required", - "bom-ref": "pkg:maven/jakarta.validation/jakarta.validation-api@2.0.2" + "hashes": [ + { + "alg": "SHA-256", + "content": "a8c2b114508ccd20562239505b9732776d3371aaea137b265a0548f456475d06" + } + ] }, { "group": "io.quarkus", @@ -92,8 +140,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-vertx-http@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-vertx-http@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-vertx-http@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "25fe6553700806fa0e9b2cda1946670da6b56a2f76b838b304f87014b686a1ac" + } + ] }, { "group": "io.quarkus", @@ -101,8 +155,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-hibernate-orm-deployment@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-hibernate-orm-deployment@2.0.2.Final", "scope": "optional", - "bom-ref": "pkg:maven/io.quarkus/quarkus-hibernate-orm-deployment@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "dcdd842c6024cbc027f0e9a5374a84461243343a83c295192e6dc93d10d873d9" + } + ] } ], "dependencies": [ diff --git a/test/providers/tst_manifests/gradle/deps_with_ignore_notations/expected_stack_sbom.json b/test/providers/tst_manifests/gradle/deps_with_ignore_notations/expected_stack_sbom.json index 316f17a1..cbdb162e 100644 --- a/test/providers/tst_manifests/gradle/deps_with_ignore_notations/expected_stack_sbom.json +++ b/test/providers/tst_manifests/gradle/deps_with_ignore_notations/expected_stack_sbom.json @@ -20,8 +20,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-hibernate-orm@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-hibernate-orm@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-hibernate-orm@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "79056c3042ee5c1bf05766340e4ae54fdde64f08036ec3e7eade6fb1c1d74375" + } + ] }, { "group": "io.quarkus", @@ -29,8 +35,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-core@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-core@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-core@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "fdb7ce28fa76c84148a3e4bcdf3a3ea4db801f117caf703435ef731327a2e843" + } + ] }, { "group": "jakarta.annotation", @@ -38,8 +50,14 @@ "version": "1.3.5", "purl": "pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5", "type": "library", + "bom-ref": "pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5", "scope": "required", - "bom-ref": "pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5" + "hashes": [ + { + "alg": "SHA-256", + "content": "d3b4e3e5413539c37eeb16d0590fad710ceafd09bf8a044e72e0d3b21e461fc3" + } + ] }, { "group": "jakarta.enterprise", @@ -47,8 +65,14 @@ "version": "2.0.2", "purl": "pkg:maven/jakarta.enterprise/jakarta.enterprise.cdi-api@2.0.2", "type": "library", + "bom-ref": "pkg:maven/jakarta.enterprise/jakarta.enterprise.cdi-api@2.0.2", "scope": "required", - "bom-ref": "pkg:maven/jakarta.enterprise/jakarta.enterprise.cdi-api@2.0.2" + "hashes": [ + { + "alg": "SHA-256", + "content": "c1f2010bdd10b561a178248098cff63cd0fba8772d8d1552b9732bc0ab09da1a" + } + ] }, { "group": "jakarta.el", @@ -56,8 +80,14 @@ "version": "3.0.3", "purl": "pkg:maven/jakarta.el/jakarta.el-api@3.0.3", "type": "library", + "bom-ref": "pkg:maven/jakarta.el/jakarta.el-api@3.0.3", "scope": "required", - "bom-ref": "pkg:maven/jakarta.el/jakarta.el-api@3.0.3" + "hashes": [ + { + "alg": "SHA-256", + "content": "142a2bb7295c9f320601a22c1222fe29232663b0e154ceeffd4002b4101996d0" + } + ] }, { "group": "jakarta.interceptor", @@ -65,8 +95,14 @@ "version": "1.2.5", "purl": "pkg:maven/jakarta.interceptor/jakarta.interceptor-api@1.2.5", "type": "library", + "bom-ref": "pkg:maven/jakarta.interceptor/jakarta.interceptor-api@1.2.5", "scope": "required", - "bom-ref": "pkg:maven/jakarta.interceptor/jakarta.interceptor-api@1.2.5" + "hashes": [ + { + "alg": "SHA-256", + "content": "f5e24fb964cf09f358d61a3ccb79f4b5c1e5c9aa478cd61088aa64bb5b23b2a1" + } + ] }, { "group": "jakarta.ejb", @@ -74,8 +110,14 @@ "version": "3.2.6", "purl": "pkg:maven/jakarta.ejb/jakarta.ejb-api@3.2.6", "type": "library", + "bom-ref": "pkg:maven/jakarta.ejb/jakarta.ejb-api@3.2.6", "scope": "required", - "bom-ref": "pkg:maven/jakarta.ejb/jakarta.ejb-api@3.2.6" + "hashes": [ + { + "alg": "SHA-256", + "content": "b22e27d3035682fe2b0f4d319c09315ad09af845a5e529859dcc0f7f32448c6b" + } + ] }, { "group": "jakarta.transaction", @@ -83,8 +125,14 @@ "version": "1.3.3", "purl": "pkg:maven/jakarta.transaction/jakarta.transaction-api@1.3.3", "type": "library", + "bom-ref": "pkg:maven/jakarta.transaction/jakarta.transaction-api@1.3.3", "scope": "required", - "bom-ref": "pkg:maven/jakarta.transaction/jakarta.transaction-api@1.3.3" + "hashes": [ + { + "alg": "SHA-256", + "content": "2f345438752720e31257607bb2e2b77bc1ca39a539dc75ee3fceced9b77d39fb" + } + ] }, { "group": "jakarta.inject", @@ -92,8 +140,14 @@ "version": "1.0", "purl": "pkg:maven/jakarta.inject/jakarta.inject-api@1.0", "type": "library", + "bom-ref": "pkg:maven/jakarta.inject/jakarta.inject-api@1.0", "scope": "required", - "bom-ref": "pkg:maven/jakarta.inject/jakarta.inject-api@1.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "b98d47614ffb494c7f35d301cdfa39a26ea53a83fc2bf94af9c634caf0b33bca" + } + ] }, { "group": "io.quarkus", @@ -101,8 +155,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-ide-launcher@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-ide-launcher@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-ide-launcher@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "3cd845ef528949241735604796af445482d82f1b8d249ef45a3dde59b50e27e2" + } + ] }, { "group": "io.quarkus", @@ -110,8 +170,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-development-mode-spi@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-development-mode-spi@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-development-mode-spi@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "b73a42112df2c620234e8ae19051a56c572edcc36044d6feb297bba5620248af" + } + ] }, { "group": "io.smallrye.config", @@ -119,8 +185,14 @@ "version": "2.12.0", "purl": "pkg:maven/io.smallrye.config/smallrye-config@2.12.0", "type": "library", + "bom-ref": "pkg:maven/io.smallrye.config/smallrye-config@2.12.0", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye.config/smallrye-config@2.12.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "bea689702e399f8199ec7b064841c275da2ed1900efd08a50c52729d4bf80fd6" + } + ] }, { "group": "io.smallrye.config", @@ -128,8 +200,14 @@ "version": "2.12.0", "purl": "pkg:maven/io.smallrye.config/smallrye-config-core@2.12.0", "type": "library", + "bom-ref": "pkg:maven/io.smallrye.config/smallrye-config-core@2.12.0", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye.config/smallrye-config-core@2.12.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "b6f1137d5cabd03c1c79bf6aa7e3fafc2fdd54593903b40eaaa47f04dedcd764" + } + ] }, { "group": "org.eclipse.microprofile.config", @@ -137,8 +215,14 @@ "version": "2.0.1", "purl": "pkg:maven/org.eclipse.microprofile.config/microprofile-config-api@2.0.1", "type": "library", + "bom-ref": "pkg:maven/org.eclipse.microprofile.config/microprofile-config-api@2.0.1", "scope": "required", - "bom-ref": "pkg:maven/org.eclipse.microprofile.config/microprofile-config-api@2.0.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "5ce209fecc8c1cca24721da1b49bfe9b7919d35821915a4c03b40719619a3f5f" + } + ] }, { "group": "io.smallrye.common", @@ -146,8 +230,14 @@ "version": "1.13.1", "purl": "pkg:maven/io.smallrye.common/smallrye-common-annotation@1.13.1", "type": "library", + "bom-ref": "pkg:maven/io.smallrye.common/smallrye-common-annotation@1.13.1", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye.common/smallrye-common-annotation@1.13.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "2782202c634bf0ccd3c321c1c72b07f05bfc36eb72b102b3a43da7bfbacf0121" + } + ] }, { "group": "io.smallrye.common", @@ -155,8 +245,14 @@ "version": "1.13.1", "purl": "pkg:maven/io.smallrye.common/smallrye-common-expression@1.13.1", "type": "library", + "bom-ref": "pkg:maven/io.smallrye.common/smallrye-common-expression@1.13.1", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye.common/smallrye-common-expression@1.13.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "e0407b8b7d035aa501807a02c806d450dbe72d58da9fd497f0ab274db34ae699" + } + ] }, { "group": "io.smallrye.common", @@ -164,8 +260,14 @@ "version": "1.13.1", "purl": "pkg:maven/io.smallrye.common/smallrye-common-function@1.13.1", "type": "library", + "bom-ref": "pkg:maven/io.smallrye.common/smallrye-common-function@1.13.1", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye.common/smallrye-common-function@1.13.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "93b16012e6a57df4f32f984a678dc3282adab53cf43205766237ff2c955faa6b" + } + ] }, { "group": "io.smallrye.common", @@ -173,8 +275,14 @@ "version": "1.13.1", "purl": "pkg:maven/io.smallrye.common/smallrye-common-constraint@1.13.1", "type": "library", + "bom-ref": "pkg:maven/io.smallrye.common/smallrye-common-constraint@1.13.1", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye.common/smallrye-common-constraint@1.13.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "1c93cad19cc638b8471fa31fc1c8c6fc48f1d8096351676ce12712f246b54010" + } + ] }, { "group": "org.jboss.logging", @@ -182,8 +290,14 @@ "version": "3.5.0.Final", "purl": "pkg:maven/org.jboss.logging/jboss-logging@3.5.0.Final", "type": "library", + "bom-ref": "pkg:maven/org.jboss.logging/jboss-logging@3.5.0.Final", "scope": "required", - "bom-ref": "pkg:maven/org.jboss.logging/jboss-logging@3.5.0.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "549e1e9180f0ac2d48f7bfca604da808cb1529000ac56e2028fb89d2a840f5ae" + } + ] }, { "group": "io.smallrye.common", @@ -191,8 +305,14 @@ "version": "1.13.1", "purl": "pkg:maven/io.smallrye.common/smallrye-common-classloader@1.13.1", "type": "library", + "bom-ref": "pkg:maven/io.smallrye.common/smallrye-common-classloader@1.13.1", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye.common/smallrye-common-classloader@1.13.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "305af32f28575800967816e5293c86759732c8e04714055eeda31de80d4d9e6c" + } + ] }, { "group": "org.ow2.asm", @@ -200,8 +320,14 @@ "version": "9.3", "purl": "pkg:maven/org.ow2.asm/asm@9.3", "type": "library", + "bom-ref": "pkg:maven/org.ow2.asm/asm@9.3", "scope": "required", - "bom-ref": "pkg:maven/org.ow2.asm/asm@9.3" + "hashes": [ + { + "alg": "SHA-256", + "content": "18551e6bfcf4ff5235dab8c0fd7f37f08ab1c753326dbcbe01f104eb76ac28b9" + } + ] }, { "group": "io.smallrye.config", @@ -209,8 +335,14 @@ "version": "2.12.0", "purl": "pkg:maven/io.smallrye.config/smallrye-config-common@2.12.0", "type": "library", + "bom-ref": "pkg:maven/io.smallrye.config/smallrye-config-common@2.12.0", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye.config/smallrye-config-common@2.12.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "c52879f7a5b99e5eff9dff5356a0f9f62ae6e9c60956f74c7ff0e6c88f2d9338" + } + ] }, { "group": "org.jboss.logmanager", @@ -218,8 +350,14 @@ "version": "1.0.10", "purl": "pkg:maven/org.jboss.logmanager/jboss-logmanager-embedded@1.0.10", "type": "library", + "bom-ref": "pkg:maven/org.jboss.logmanager/jboss-logmanager-embedded@1.0.10", "scope": "required", - "bom-ref": "pkg:maven/org.jboss.logmanager/jboss-logmanager-embedded@1.0.10" + "hashes": [ + { + "alg": "SHA-256", + "content": "25b39888997956807ac167a762931d52b8d3cd07b4394a7b8a60f42de8aee855" + } + ] }, { "group": "org.wildfly.common", @@ -227,8 +365,14 @@ "version": "1.5.4.Final-format-001", "purl": "pkg:maven/org.wildfly.common/wildfly-common@1.5.4.Final-format-001", "type": "library", + "bom-ref": "pkg:maven/org.wildfly.common/wildfly-common@1.5.4.Final-format-001", "scope": "required", - "bom-ref": "pkg:maven/org.wildfly.common/wildfly-common@1.5.4.Final-format-001" + "hashes": [ + { + "alg": "SHA-256", + "content": "0c5989fadb7f0f9f2f7707fa10028ba7eac94e555a5b32f680a4d062c2bcfe9a" + } + ] }, { "group": "org.jboss.logging", @@ -236,8 +380,14 @@ "version": "2.2.1.Final", "purl": "pkg:maven/org.jboss.logging/jboss-logging-annotations@2.2.1.Final", "type": "library", + "bom-ref": "pkg:maven/org.jboss.logging/jboss-logging-annotations@2.2.1.Final", "scope": "required", - "bom-ref": "pkg:maven/org.jboss.logging/jboss-logging-annotations@2.2.1.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "f3d0fca0b72cf53fcab6fd6948a40f80eae5e28bda883ee29a055fd098e47dc8" + } + ] }, { "group": "org.jboss.threads", @@ -245,8 +395,14 @@ "version": "3.4.3.Final", "purl": "pkg:maven/org.jboss.threads/jboss-threads@3.4.3.Final", "type": "library", + "bom-ref": "pkg:maven/org.jboss.threads/jboss-threads@3.4.3.Final", "scope": "required", - "bom-ref": "pkg:maven/org.jboss.threads/jboss-threads@3.4.3.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "ec8d6bbcc85fa84436055bf2809a97889c472ef77a055ed9636e70100f3c7439" + } + ] }, { "group": "org.slf4j", @@ -254,8 +410,14 @@ "version": "1.7.36", "purl": "pkg:maven/org.slf4j/slf4j-api@1.7.36", "type": "library", + "bom-ref": "pkg:maven/org.slf4j/slf4j-api@1.7.36", "scope": "required", - "bom-ref": "pkg:maven/org.slf4j/slf4j-api@1.7.36" + "hashes": [ + { + "alg": "SHA-256", + "content": "c0a772724ba038f0fcdeb34db4f3fb43693f6152101b1e7e7a1ac35a9cb4cec9" + } + ] }, { "group": "org.jboss.slf4j", @@ -263,8 +425,14 @@ "version": "1.2.0.Final", "purl": "pkg:maven/org.jboss.slf4j/slf4j-jboss-logmanager@1.2.0.Final", "type": "library", + "bom-ref": "pkg:maven/org.jboss.slf4j/slf4j-jboss-logmanager@1.2.0.Final", "scope": "required", - "bom-ref": "pkg:maven/org.jboss.slf4j/slf4j-jboss-logmanager@1.2.0.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "8c5cc65839e939694ca1c9b27ff8978d9a79a8a667c3e1ba414db7a221277858" + } + ] }, { "group": "org.graalvm.sdk", @@ -272,8 +440,14 @@ "version": "22.3.0", "purl": "pkg:maven/org.graalvm.sdk/graal-sdk@22.3.0", "type": "library", + "bom-ref": "pkg:maven/org.graalvm.sdk/graal-sdk@22.3.0", "scope": "required", - "bom-ref": "pkg:maven/org.graalvm.sdk/graal-sdk@22.3.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "b297b3cdc2bd9c55cc6ea3648230cf7c5b656be4f85c2291ea08404ffb7aeb0d" + } + ] }, { "group": "io.quarkus", @@ -281,8 +455,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-bootstrap-runner@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-bootstrap-runner@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-bootstrap-runner@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "f573aef29c3fb5d9e1709a560c820c4691983a2414e25f2a1bb806f8d3c0d8f4" + } + ] }, { "group": "io.smallrye.common", @@ -290,8 +470,14 @@ "version": "1.13.1", "purl": "pkg:maven/io.smallrye.common/smallrye-common-io@1.13.1", "type": "library", + "bom-ref": "pkg:maven/io.smallrye.common/smallrye-common-io@1.13.1", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye.common/smallrye-common-io@1.13.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "fe329b6f953d309a1f9e0929d69c60e57e3be2120a60ca1790e6cb0e428d0001" + } + ] }, { "group": "io.github.crac", @@ -299,8 +485,14 @@ "version": "0.1.1", "purl": "pkg:maven/io.github.crac/org-crac@0.1.1", "type": "library", + "bom-ref": "pkg:maven/io.github.crac/org-crac@0.1.1", "scope": "required", - "bom-ref": "pkg:maven/io.github.crac/org-crac@0.1.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "e3332dab2a0fafb59c8f9c3e97af2578c8543577e7c2a8131c98aeb4e9f6446a" + } + ] }, { "group": "io.quarkus", @@ -308,8 +500,14 @@ "version": "0.0.9", "purl": "pkg:maven/io.quarkus/quarkus-fs-util@0.0.9", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-fs-util@0.0.9", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-fs-util@0.0.9" + "hashes": [ + { + "alg": "SHA-256", + "content": "a6e06c973540641496c1e843bc32e0ac5a8a520ba64bc822144e34a48a63ac98" + } + ] }, { "group": "io.quarkus", @@ -317,8 +515,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-agroal@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-agroal@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-agroal@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "373e7e3e0789069ac3b414658fdc8d2e78fa29ed649672443833fd61653e8239" + } + ] }, { "group": "io.quarkus", @@ -326,8 +530,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-arc@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-arc@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-arc@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "fed9cd5b86013b26136317ebe66c77cbb249c2f036d5d0ce3e6e4027f9e86103" + } + ] }, { "group": "io.quarkus.arc", @@ -335,8 +545,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus.arc/arc@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus.arc/arc@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus.arc/arc@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "5d1513ef9ea8aff4cf26919dcfb692a01948074f9aa1f75039389e07e47ebb46" + } + ] }, { "group": "io.smallrye.reactive", @@ -344,8 +560,14 @@ "version": "1.7.0", "purl": "pkg:maven/io.smallrye.reactive/mutiny@1.7.0", "type": "library", + "bom-ref": "pkg:maven/io.smallrye.reactive/mutiny@1.7.0", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye.reactive/mutiny@1.7.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "7b95809b54bfb315f22fc369a417377017f332217fbeed0d19616596ea58e99e" + } + ] }, { "group": "org.reactivestreams", @@ -353,8 +575,14 @@ "version": "1.0.3", "purl": "pkg:maven/org.reactivestreams/reactive-streams@1.0.3", "type": "library", + "bom-ref": "pkg:maven/org.reactivestreams/reactive-streams@1.0.3", "scope": "required", - "bom-ref": "pkg:maven/org.reactivestreams/reactive-streams@1.0.3" + "hashes": [ + { + "alg": "SHA-256", + "content": "cc80acd6a1ad07a28990f997157d729c38f99efccd20158515bdb52d1c50f16c" + } + ] }, { "group": "org.eclipse.microprofile.context-propagation", @@ -362,8 +590,14 @@ "version": "1.3", "purl": "pkg:maven/org.eclipse.microprofile.context-propagation/microprofile-context-propagation-api@1.3", "type": "library", + "bom-ref": "pkg:maven/org.eclipse.microprofile.context-propagation/microprofile-context-propagation-api@1.3", "scope": "required", - "bom-ref": "pkg:maven/org.eclipse.microprofile.context-propagation/microprofile-context-propagation-api@1.3" + "hashes": [ + { + "alg": "SHA-256", + "content": "039a0b83a06108636482d2f9bbbc894ea6c6c0750034be7c486e06bacc559d8c" + } + ] }, { "group": "io.quarkus", @@ -371,8 +605,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-datasource@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-datasource@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-datasource@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "889993db8ee5d85cde8032b7dac65f73b38307d5bf5608a321b56be0f10664f2" + } + ] }, { "group": "io.quarkus", @@ -380,8 +620,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-datasource-common@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-datasource-common@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-datasource-common@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "29771fd757c97a980e79826669d289393b08686e30ecaeb3d39bdd7c227984c6" + } + ] }, { "group": "io.quarkus", @@ -389,8 +635,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-credentials@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-credentials@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-credentials@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "90cf81415e20e4a986745d3210ec610ec3cf158fd5f08d9cb73be6b010b10462" + } + ] }, { "group": "io.quarkus", @@ -398,8 +650,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-narayana-jta@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-narayana-jta@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-narayana-jta@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "1ef954c2c9c885ec215806871643215778c6daeb5a999a55d2ded512db72f881" + } + ] }, { "group": "io.quarkus", @@ -407,8 +665,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-transaction-annotations@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-transaction-annotations@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-transaction-annotations@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "c7a9ab990db0a2572e847141b7bb56f08172e974e5bae5d7ca102e4445dac0b4" + } + ] }, { "group": "io.quarkus", @@ -416,8 +680,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-mutiny@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-mutiny@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-mutiny@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "f7d90078356e39d273c532d305d6e28754187a28efcea4a889597b858e39e355" + } + ] }, { "group": "io.quarkus", @@ -425,8 +695,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-smallrye-context-propagation@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-smallrye-context-propagation@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-smallrye-context-propagation@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "4b57dfcca15bb87b976e0d133991cb095909de81b49a9b93c568b3c0497c4edd" + } + ] }, { "group": "io.smallrye", @@ -434,8 +710,14 @@ "version": "1.2.2", "purl": "pkg:maven/io.smallrye/smallrye-context-propagation@1.2.2", "type": "library", + "bom-ref": "pkg:maven/io.smallrye/smallrye-context-propagation@1.2.2", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye/smallrye-context-propagation@1.2.2" + "hashes": [ + { + "alg": "SHA-256", + "content": "bc1ee770918d8d76b47bc6f47d312f3159e8c698f6673d6c712fe4ce0ec982e8" + } + ] }, { "group": "io.smallrye", @@ -443,8 +725,14 @@ "version": "1.2.2", "purl": "pkg:maven/io.smallrye/smallrye-context-propagation-api@1.2.2", "type": "library", + "bom-ref": "pkg:maven/io.smallrye/smallrye-context-propagation-api@1.2.2", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye/smallrye-context-propagation-api@1.2.2" + "hashes": [ + { + "alg": "SHA-256", + "content": "4d39df66447b05d938c9a6b8eb147d93680987dc1032a2d8c1dcb083710fb79a" + } + ] }, { "group": "io.smallrye", @@ -452,8 +740,14 @@ "version": "1.2.2", "purl": "pkg:maven/io.smallrye/smallrye-context-propagation-storage@1.2.2", "type": "library", + "bom-ref": "pkg:maven/io.smallrye/smallrye-context-propagation-storage@1.2.2", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye/smallrye-context-propagation-storage@1.2.2" + "hashes": [ + { + "alg": "SHA-256", + "content": "1bf3b19038fec5a110a82adb6c2bf8b8dc2234126281a36e423daf50a9e23a39" + } + ] }, { "group": "io.smallrye.reactive", @@ -461,8 +755,14 @@ "version": "1.7.0", "purl": "pkg:maven/io.smallrye.reactive/mutiny-smallrye-context-propagation@1.7.0", "type": "library", + "bom-ref": "pkg:maven/io.smallrye.reactive/mutiny-smallrye-context-propagation@1.7.0", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye.reactive/mutiny-smallrye-context-propagation@1.7.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "67ea7a1aa0d27ffc2d436ad05e745003ddc6d33f0c5dde4507018d6d03e12ed5" + } + ] }, { "group": "io.smallrye", @@ -470,8 +770,14 @@ "version": "1.2.2", "purl": "pkg:maven/io.smallrye/smallrye-context-propagation-jta@1.2.2", "type": "library", + "bom-ref": "pkg:maven/io.smallrye/smallrye-context-propagation-jta@1.2.2", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye/smallrye-context-propagation-jta@1.2.2" + "hashes": [ + { + "alg": "SHA-256", + "content": "6e32035875ad87b392709587a6faff6d8853b38d6a249082134f0822c3898e79" + } + ] }, { "group": "io.smallrye.reactive", @@ -479,8 +785,14 @@ "version": "2.7.0", "purl": "pkg:maven/io.smallrye.reactive/smallrye-reactive-converter-api@2.7.0", "type": "library", + "bom-ref": "pkg:maven/io.smallrye.reactive/smallrye-reactive-converter-api@2.7.0", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye.reactive/smallrye-reactive-converter-api@2.7.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "c604e090dc282423e9084b6339bf9d1cffde53d7d189bf6f50ae4640e162b611" + } + ] }, { "group": "io.smallrye.reactive", @@ -488,8 +800,14 @@ "version": "2.7.0", "purl": "pkg:maven/io.smallrye.reactive/smallrye-reactive-converter-mutiny@2.7.0", "type": "library", + "bom-ref": "pkg:maven/io.smallrye.reactive/smallrye-reactive-converter-mutiny@2.7.0", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye.reactive/smallrye-reactive-converter-mutiny@2.7.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "b01de8b2211277e4f7d03a232752b7dd9cd6d9db9270f0491e1b8e8deb24c16a" + } + ] }, { "group": "org.jboss.narayana.jta", @@ -497,8 +815,14 @@ "version": "5.13.1.Alpha1", "purl": "pkg:maven/org.jboss.narayana.jta/narayana-jta@5.13.1.Alpha1", "type": "library", + "bom-ref": "pkg:maven/org.jboss.narayana.jta/narayana-jta@5.13.1.Alpha1", "scope": "required", - "bom-ref": "pkg:maven/org.jboss.narayana.jta/narayana-jta@5.13.1.Alpha1" + "hashes": [ + { + "alg": "SHA-256", + "content": "3c601dda329f76088be0a0e67a64d3326409fc57ca801ccd129080b14bab6726" + } + ] }, { "group": "org.jboss", @@ -506,8 +830,14 @@ "version": "7.6.1.Final", "purl": "pkg:maven/org.jboss/jboss-transaction-spi@7.6.1.Final", "type": "library", + "bom-ref": "pkg:maven/org.jboss/jboss-transaction-spi@7.6.1.Final", "scope": "required", - "bom-ref": "pkg:maven/org.jboss/jboss-transaction-spi@7.6.1.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "d92fee6cac2a06f468572fde42b64758d8ecb1fcef57825f0d9b8514ba098dd4" + } + ] }, { "group": "org.jboss.spec.javax.resource", @@ -515,8 +845,14 @@ "version": "1.0.0.Final", "purl": "pkg:maven/org.jboss.spec.javax.resource/jboss-connector-api_1.7_spec@1.0.0.Final", "type": "library", + "bom-ref": "pkg:maven/org.jboss.spec.javax.resource/jboss-connector-api_1.7_spec@1.0.0.Final", "scope": "required", - "bom-ref": "pkg:maven/org.jboss.spec.javax.resource/jboss-connector-api_1.7_spec@1.0.0.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "80046bf02c6afd0cc7cb22ee6b7a322833c007f5fa4a953eb833308c7c807592" + } + ] }, { "group": "org.jboss.narayana.jts", @@ -524,8 +860,14 @@ "version": "5.13.1.Alpha1", "purl": "pkg:maven/org.jboss.narayana.jts/narayana-jts-integration@5.13.1.Alpha1", "type": "library", + "bom-ref": "pkg:maven/org.jboss.narayana.jts/narayana-jts-integration@5.13.1.Alpha1", "scope": "required", - "bom-ref": "pkg:maven/org.jboss.narayana.jts/narayana-jts-integration@5.13.1.Alpha1" + "hashes": [ + { + "alg": "SHA-256", + "content": "92411cde8dff5026a9ef0cf26a46bcfd09bce1e208daee49b0d57fabd8352e33" + } + ] }, { "group": "io.agroal", @@ -533,8 +875,14 @@ "version": "1.16", "purl": "pkg:maven/io.agroal/agroal-api@1.16", "type": "library", + "bom-ref": "pkg:maven/io.agroal/agroal-api@1.16", "scope": "required", - "bom-ref": "pkg:maven/io.agroal/agroal-api@1.16" + "hashes": [ + { + "alg": "SHA-256", + "content": "121caa97e838680277dc196354266a3697861238070a235366750f356e226073" + } + ] }, { "group": "io.agroal", @@ -542,8 +890,14 @@ "version": "1.16", "purl": "pkg:maven/io.agroal/agroal-narayana@1.16", "type": "library", + "bom-ref": "pkg:maven/io.agroal/agroal-narayana@1.16", "scope": "required", - "bom-ref": "pkg:maven/io.agroal/agroal-narayana@1.16" + "hashes": [ + { + "alg": "SHA-256", + "content": "27685faad7aab4327103ddbbadf01528a034a67938afd316076a57340421511e" + } + ] }, { "group": "io.agroal", @@ -551,8 +905,14 @@ "version": "1.16", "purl": "pkg:maven/io.agroal/agroal-pool@1.16", "type": "library", + "bom-ref": "pkg:maven/io.agroal/agroal-pool@1.16", "scope": "required", - "bom-ref": "pkg:maven/io.agroal/agroal-pool@1.16" + "hashes": [ + { + "alg": "SHA-256", + "content": "095b8d8424ae92298d3795f619c4a5210026befea210c721df2517cd8d8f8529" + } + ] }, { "group": "org.hibernate", @@ -560,8 +920,14 @@ "version": "5.6.14.Final", "purl": "pkg:maven/org.hibernate/hibernate-core@5.6.14.Final", "type": "library", + "bom-ref": "pkg:maven/org.hibernate/hibernate-core@5.6.14.Final", "scope": "required", - "bom-ref": "pkg:maven/org.hibernate/hibernate-core@5.6.14.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "147319ec25f86ba8f6263601c57cfd98badfea32e6312fee929e8c2207cda5cd" + } + ] }, { "group": "net.bytebuddy", @@ -569,8 +935,14 @@ "version": "1.12.18", "purl": "pkg:maven/net.bytebuddy/byte-buddy@1.12.18", "type": "library", + "bom-ref": "pkg:maven/net.bytebuddy/byte-buddy@1.12.18", "scope": "required", - "bom-ref": "pkg:maven/net.bytebuddy/byte-buddy@1.12.18" + "hashes": [ + { + "alg": "SHA-256", + "content": "dfda1288566e62724c078947c6d6439e5c0150342b5177c8ac160019f1870237" + } + ] }, { "group": "antlr", @@ -578,8 +950,14 @@ "version": "2.7.7", "purl": "pkg:maven/antlr/antlr@2.7.7", "type": "library", + "bom-ref": "pkg:maven/antlr/antlr@2.7.7", "scope": "required", - "bom-ref": "pkg:maven/antlr/antlr@2.7.7" + "hashes": [ + { + "alg": "SHA-256", + "content": "d0c1c8265545cb28554d2131d57a5b50bbba22d138f9610aef4b42bb68270b7e" + } + ] }, { "group": "com.fasterxml", @@ -587,8 +965,14 @@ "version": "1.5.1", "purl": "pkg:maven/com.fasterxml/classmate@1.5.1", "type": "library", + "bom-ref": "pkg:maven/com.fasterxml/classmate@1.5.1", "scope": "required", - "bom-ref": "pkg:maven/com.fasterxml/classmate@1.5.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "9b9186b8fd7ff56a09a1cb35c441d284d914dcda0697337ce600550c0bffad52" + } + ] }, { "group": "org.hibernate.common", @@ -596,8 +980,14 @@ "version": "5.1.2.Final", "purl": "pkg:maven/org.hibernate.common/hibernate-commons-annotations@5.1.2.Final", "type": "library", + "bom-ref": "pkg:maven/org.hibernate.common/hibernate-commons-annotations@5.1.2.Final", "scope": "required", - "bom-ref": "pkg:maven/org.hibernate.common/hibernate-commons-annotations@5.1.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "1fbc8d27ab1039b06f965584d92883cdbfebe843b0f4bc922a45c527daf0a225" + } + ] }, { "group": "org.hibernate", @@ -605,8 +995,14 @@ "version": "5.6.14.Final", "purl": "pkg:maven/org.hibernate/hibernate-graalvm@5.6.14.Final", "type": "library", + "bom-ref": "pkg:maven/org.hibernate/hibernate-graalvm@5.6.14.Final", "scope": "required", - "bom-ref": "pkg:maven/org.hibernate/hibernate-graalvm@5.6.14.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "5bdd2641a33b6e03a155fced61df9f0f6f4b67cbd679077bdb2acae7cbd97b97" + } + ] }, { "group": "org.glassfish.jaxb", @@ -614,8 +1010,14 @@ "version": "2.3.3-b02", "purl": "pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.3-b02", "type": "library", + "bom-ref": "pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.3-b02", "scope": "required", - "bom-ref": "pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.3-b02" + "hashes": [ + { + "alg": "SHA-256", + "content": "526ad93ddebabbb64cbff4447adc32af34b3b38fcd5ce923d5c547febaa397e3" + } + ] }, { "group": "org.glassfish.jaxb", @@ -623,8 +1025,14 @@ "version": "2.3.3-b02", "purl": "pkg:maven/org.glassfish.jaxb/txw2@2.3.3-b02", "type": "library", + "bom-ref": "pkg:maven/org.glassfish.jaxb/txw2@2.3.3-b02", "scope": "required", - "bom-ref": "pkg:maven/org.glassfish.jaxb/txw2@2.3.3-b02" + "hashes": [ + { + "alg": "SHA-256", + "content": "a9608e9e0040fd437374fb263f44330c140ceea49c75e970a4ea7c1be6b75c22" + } + ] }, { "group": "com.sun.istack", @@ -632,8 +1040,14 @@ "version": "3.0.10", "purl": "pkg:maven/com.sun.istack/istack-commons-runtime@3.0.10", "type": "library", + "bom-ref": "pkg:maven/com.sun.istack/istack-commons-runtime@3.0.10", "scope": "required", - "bom-ref": "pkg:maven/com.sun.istack/istack-commons-runtime@3.0.10" + "hashes": [ + { + "alg": "SHA-256", + "content": "3a088e4af8f0656e8ad8e5dce8d122d7eb616cdec7cf3c6550c6308e97bec587" + } + ] }, { "group": "com.sun.activation", @@ -641,8 +1055,14 @@ "version": "1.2.1", "purl": "pkg:maven/com.sun.activation/jakarta.activation@1.2.1", "type": "library", + "bom-ref": "pkg:maven/com.sun.activation/jakarta.activation@1.2.1", "scope": "required", - "bom-ref": "pkg:maven/com.sun.activation/jakarta.activation@1.2.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "b6895348b68b602bf4c272fc3054e7e1cc95a4c691ba11719e48c0f126b6c1e6" + } + ] }, { "group": "org.jboss.spec.javax.xml.bind", @@ -650,8 +1070,14 @@ "version": "2.0.0.Final", "purl": "pkg:maven/org.jboss.spec.javax.xml.bind/jboss-jaxb-api_2.3_spec@2.0.0.Final", "type": "library", + "bom-ref": "pkg:maven/org.jboss.spec.javax.xml.bind/jboss-jaxb-api_2.3_spec@2.0.0.Final", "scope": "required", - "bom-ref": "pkg:maven/org.jboss.spec.javax.xml.bind/jboss-jaxb-api_2.3_spec@2.0.0.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "cee99591d58a9c9110ca9f3319df0c984ef0914b09a580efcb24f75715f7eb53" + } + ] }, { "group": "jakarta.persistence", @@ -659,8 +1085,14 @@ "version": "2.2.3", "purl": "pkg:maven/jakarta.persistence/jakarta.persistence-api@2.2.3", "type": "library", + "bom-ref": "pkg:maven/jakarta.persistence/jakarta.persistence-api@2.2.3", "scope": "required", - "bom-ref": "pkg:maven/jakarta.persistence/jakarta.persistence-api@2.2.3" + "hashes": [ + { + "alg": "SHA-256", + "content": "bb888f15b5493dc5dc89f80d005afcda077d5df61ba0bd34ffef18445840dd27" + } + ] }, { "group": "org.hibernate", @@ -668,8 +1100,14 @@ "version": "0.1.1", "purl": "pkg:maven/org.hibernate/quarkus-local-cache@0.1.1", "type": "library", + "bom-ref": "pkg:maven/org.hibernate/quarkus-local-cache@0.1.1", "scope": "required", - "bom-ref": "pkg:maven/org.hibernate/quarkus-local-cache@0.1.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "b5047f9a20467ef05e80ee6a9c7abfd6ba2894e961e5467e24808aa234c26a24" + } + ] }, { "group": "io.quarkus", @@ -677,8 +1115,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-caffeine@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-caffeine@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-caffeine@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "8ba118ea99bca84a43e856afdc3ed3ce163e9f67b1164c2244ded7d4b98f1d29" + } + ] }, { "group": "com.github.ben-manes.caffeine", @@ -686,8 +1130,14 @@ "version": "2.9.3", "purl": "pkg:maven/com.github.ben-manes.caffeine/caffeine@2.9.3", "type": "library", + "bom-ref": "pkg:maven/com.github.ben-manes.caffeine/caffeine@2.9.3", "scope": "required", - "bom-ref": "pkg:maven/com.github.ben-manes.caffeine/caffeine@2.9.3" + "hashes": [ + { + "alg": "SHA-256", + "content": "d6ddcd4a2a38ac492033978be5c08af5fe2edd2c3b2e73986175af0afa7bb378" + } + ] }, { "group": "com.google.errorprone", @@ -695,8 +1145,14 @@ "version": "2.10.0", "purl": "pkg:maven/com.google.errorprone/error_prone_annotations@2.10.0", "type": "library", + "bom-ref": "pkg:maven/com.google.errorprone/error_prone_annotations@2.10.0", "scope": "required", - "bom-ref": "pkg:maven/com.google.errorprone/error_prone_annotations@2.10.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "7536b424bdd8644db60e72bb3e0b05b4458c822b2d4136715233554dada62b69" + } + ] }, { "group": "io.quarkus", @@ -704,8 +1160,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-resteasy@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-resteasy@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-resteasy@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "e4569c385c1200dfd4144f52f8be1cd3c608d1438425aa596c13268d88a01243" + } + ] }, { "group": "io.quarkus", @@ -713,8 +1175,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-vertx-http@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-vertx-http@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-vertx-http@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "25fe6553700806fa0e9b2cda1946670da6b56a2f76b838b304f87014b686a1ac" + } + ] }, { "group": "io.quarkus", @@ -722,8 +1190,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-security-runtime-spi@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-security-runtime-spi@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-security-runtime-spi@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "efb3779030b9066e502beead9d4317d7e3167966e66846f02778d6ef3f24b051" + } + ] }, { "group": "io.quarkus.security", @@ -731,8 +1205,14 @@ "version": "1.1.4.Final", "purl": "pkg:maven/io.quarkus.security/quarkus-security@1.1.4.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus.security/quarkus-security@1.1.4.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus.security/quarkus-security@1.1.4.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "d2059c5479266f34cf32e736e2098afc061f29acd33bb43c736ac818ca76cb0f" + } + ] }, { "group": "io.smallrye.common", @@ -740,8 +1220,14 @@ "version": "1.13.1", "purl": "pkg:maven/io.smallrye.common/smallrye-common-vertx-context@1.13.1", "type": "library", + "bom-ref": "pkg:maven/io.smallrye.common/smallrye-common-vertx-context@1.13.1", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye.common/smallrye-common-vertx-context@1.13.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "edaf480fd82bc8d7ff2c9020b3d2e0478bfebfa6004b64e8651521201cb81778" + } + ] }, { "group": "io.vertx", @@ -749,8 +1235,14 @@ "version": "4.3.4", "purl": "pkg:maven/io.vertx/vertx-core@4.3.4", "type": "library", + "bom-ref": "pkg:maven/io.vertx/vertx-core@4.3.4", "scope": "required", - "bom-ref": "pkg:maven/io.vertx/vertx-core@4.3.4" + "hashes": [ + { + "alg": "SHA-256", + "content": "b165b53094fec196e9b60de567753e3d45e8c1bef834e7745fb206b9413750ba" + } + ] }, { "group": "io.netty", @@ -758,8 +1250,14 @@ "version": "4.1.82.Final", "purl": "pkg:maven/io.netty/netty-common@4.1.82.Final", "type": "library", + "bom-ref": "pkg:maven/io.netty/netty-common@4.1.82.Final", "scope": "required", - "bom-ref": "pkg:maven/io.netty/netty-common@4.1.82.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "0d7f12d011a9188513d062253b2e14a094b8be0bdf5ad4e1e79d2add1bfc0225" + } + ] }, { "group": "io.netty", @@ -767,8 +1265,14 @@ "version": "4.1.82.Final", "purl": "pkg:maven/io.netty/netty-buffer@4.1.82.Final", "type": "library", + "bom-ref": "pkg:maven/io.netty/netty-buffer@4.1.82.Final", "scope": "required", - "bom-ref": "pkg:maven/io.netty/netty-buffer@4.1.82.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "10a41fc29ad1de58ad024a23da23d544359e1ea81d60655c1a1c9164aa63f7e6" + } + ] }, { "group": "io.netty", @@ -776,8 +1280,14 @@ "version": "4.1.82.Final", "purl": "pkg:maven/io.netty/netty-transport@4.1.82.Final", "type": "library", + "bom-ref": "pkg:maven/io.netty/netty-transport@4.1.82.Final", "scope": "required", - "bom-ref": "pkg:maven/io.netty/netty-transport@4.1.82.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "d53ccc1f4fb77e54a1b4af8035f7727503c4f6ea4ec2d7d9d9bae9374953f3b0" + } + ] }, { "group": "io.netty", @@ -785,8 +1295,14 @@ "version": "4.1.82.Final", "purl": "pkg:maven/io.netty/netty-resolver@4.1.82.Final", "type": "library", + "bom-ref": "pkg:maven/io.netty/netty-resolver@4.1.82.Final", "scope": "required", - "bom-ref": "pkg:maven/io.netty/netty-resolver@4.1.82.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "82751c8e733e39965757117ab240bf1a0293727128f3912dbfc6274f13782635" + } + ] }, { "group": "io.netty", @@ -794,8 +1310,14 @@ "version": "4.1.82.Final", "purl": "pkg:maven/io.netty/netty-handler@4.1.82.Final", "type": "library", + "bom-ref": "pkg:maven/io.netty/netty-handler@4.1.82.Final", "scope": "required", - "bom-ref": "pkg:maven/io.netty/netty-handler@4.1.82.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "35c850f4cdfa1f7be3786de57b465978b0489a74f0f115d1ad529d92f984c801" + } + ] }, { "group": "io.netty", @@ -803,8 +1325,14 @@ "version": "4.1.82.Final", "purl": "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.82.Final", "type": "library", + "bom-ref": "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.82.Final", "scope": "required", - "bom-ref": "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.82.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "52b73a2512ac9e774758e59ff884236c698c8bb3ae14db4bd543c619f3384810" + } + ] }, { "group": "io.netty", @@ -812,8 +1340,14 @@ "version": "4.1.82.Final", "purl": "pkg:maven/io.netty/netty-codec@4.1.82.Final", "type": "library", + "bom-ref": "pkg:maven/io.netty/netty-codec@4.1.82.Final", "scope": "required", - "bom-ref": "pkg:maven/io.netty/netty-codec@4.1.82.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "a1e91db28ce128ad5724fca4925a9bfae42ff1a989ee2e733655824faafa39df" + } + ] }, { "group": "io.netty", @@ -821,8 +1355,14 @@ "version": "4.1.82.Final", "purl": "pkg:maven/io.netty/netty-handler-proxy@4.1.82.Final", "type": "library", + "bom-ref": "pkg:maven/io.netty/netty-handler-proxy@4.1.82.Final", "scope": "required", - "bom-ref": "pkg:maven/io.netty/netty-handler-proxy@4.1.82.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "983abf79f64fe592a1c65fd3482302cd9b6d70e59229c16041463425bf88da1a" + } + ] }, { "group": "io.netty", @@ -830,8 +1370,14 @@ "version": "4.1.82.Final", "purl": "pkg:maven/io.netty/netty-codec-socks@4.1.82.Final", "type": "library", + "bom-ref": "pkg:maven/io.netty/netty-codec-socks@4.1.82.Final", "scope": "required", - "bom-ref": "pkg:maven/io.netty/netty-codec-socks@4.1.82.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "bf72fffd5dd7ae9af89ed91e6540410103c8325e77998e48b497b879952fb6df" + } + ] }, { "group": "io.netty", @@ -839,8 +1385,14 @@ "version": "4.1.82.Final", "purl": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final", "type": "library", + "bom-ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final", "scope": "required", - "bom-ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "f637e27a3e199bacc5845d1925b9545ed09feea39b14daf25203a4f99d323217" + } + ] }, { "group": "io.netty", @@ -848,8 +1400,14 @@ "version": "4.1.82.Final", "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final", "type": "library", + "bom-ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final", "scope": "required", - "bom-ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "a98d678aefdf597ff460a57155c2600c421cda190f0e333b1c1cac0690969a9f" + } + ] }, { "group": "io.netty", @@ -857,8 +1415,14 @@ "version": "4.1.82.Final", "purl": "pkg:maven/io.netty/netty-resolver-dns@4.1.82.Final", "type": "library", + "bom-ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.82.Final", "scope": "required", - "bom-ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.82.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "bd2bd64e102733fa0d44c9296fafe6719d159b46e195a69d771edbb12670f2ac" + } + ] }, { "group": "io.netty", @@ -866,8 +1430,14 @@ "version": "4.1.82.Final", "purl": "pkg:maven/io.netty/netty-codec-dns@4.1.82.Final", "type": "library", + "bom-ref": "pkg:maven/io.netty/netty-codec-dns@4.1.82.Final", "scope": "required", - "bom-ref": "pkg:maven/io.netty/netty-codec-dns@4.1.82.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "0777df897344799d318ed8fcff996150eac542b1a2a9149e421e28df2f36cab2" + } + ] }, { "group": "com.fasterxml.jackson.core", @@ -875,8 +1445,14 @@ "version": "2.13.4", "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.4", "type": "library", + "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.4", "scope": "required", - "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.4" + "hashes": [ + { + "alg": "SHA-256", + "content": "a7a57b699e9a41b86efc120f28d7b4f2ae3240535741e03e397dec6fc0a78a2f" + } + ] }, { "group": "io.quarkus", @@ -884,8 +1460,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-vertx-http-dev-console-runtime-spi@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-vertx-http-dev-console-runtime-spi@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-vertx-http-dev-console-runtime-spi@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "33ac5fe3885995561ed7dedbeb8f82956f8ac1e150fcd396263e5469f9f55fe4" + } + ] }, { "group": "io.vertx", @@ -893,8 +1475,14 @@ "version": "4.3.4", "purl": "pkg:maven/io.vertx/vertx-web@4.3.4", "type": "library", + "bom-ref": "pkg:maven/io.vertx/vertx-web@4.3.4", "scope": "required", - "bom-ref": "pkg:maven/io.vertx/vertx-web@4.3.4" + "hashes": [ + { + "alg": "SHA-256", + "content": "60b44da6840972cf6d730279ba5d2b699465a72dad63695787fc4d4bb967a2c1" + } + ] }, { "group": "io.vertx", @@ -902,8 +1490,14 @@ "version": "4.3.4", "purl": "pkg:maven/io.vertx/vertx-web-common@4.3.4", "type": "library", + "bom-ref": "pkg:maven/io.vertx/vertx-web-common@4.3.4", "scope": "required", - "bom-ref": "pkg:maven/io.vertx/vertx-web-common@4.3.4" + "hashes": [ + { + "alg": "SHA-256", + "content": "4c4e90a0751703830a98b747439e23603ae18eeb8b5f523db612ef98030fca07" + } + ] }, { "group": "io.vertx", @@ -911,8 +1505,14 @@ "version": "4.3.4", "purl": "pkg:maven/io.vertx/vertx-auth-common@4.3.4", "type": "library", + "bom-ref": "pkg:maven/io.vertx/vertx-auth-common@4.3.4", "scope": "required", - "bom-ref": "pkg:maven/io.vertx/vertx-auth-common@4.3.4" + "hashes": [ + { + "alg": "SHA-256", + "content": "335c5d772c5db152b64a41891cd15d547baac692d540e93eadc0742cea41c80f" + } + ] }, { "group": "io.vertx", @@ -920,8 +1520,14 @@ "version": "4.3.4", "purl": "pkg:maven/io.vertx/vertx-bridge-common@4.3.4", "type": "library", + "bom-ref": "pkg:maven/io.vertx/vertx-bridge-common@4.3.4", "scope": "required", - "bom-ref": "pkg:maven/io.vertx/vertx-bridge-common@4.3.4" + "hashes": [ + { + "alg": "SHA-256", + "content": "70aa713402bfb59e5a4f90785a699c6e91a311a78e2772af32c00321f7c53f6d" + } + ] }, { "group": "io.quarkus", @@ -929,8 +1535,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-vertx@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-vertx@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-vertx@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "7734fcc25af0688fa4771d33bfabd4c3f250cf41c290483b98a764e6548aecc6" + } + ] }, { "group": "io.quarkus", @@ -938,8 +1550,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-netty@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-netty@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-netty@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "b3f242b64d8991db53fc985b5ab1b7fb797137590a68d3ea364eb929cb90a441" + } + ] }, { "group": "com.aayushatharva.brotli4j", @@ -947,8 +1565,14 @@ "version": "1.7.1", "purl": "pkg:maven/com.aayushatharva.brotli4j/brotli4j@1.7.1", "type": "library", + "bom-ref": "pkg:maven/com.aayushatharva.brotli4j/brotli4j@1.7.1", "scope": "required", - "bom-ref": "pkg:maven/com.aayushatharva.brotli4j/brotli4j@1.7.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "97b9c394fc377ba14640e4dc0c08ebcc7f05ca514f533b944a0509479c8a5ede" + } + ] }, { "group": "io.netty", @@ -956,8 +1580,14 @@ "version": "4.1.82.Final", "purl": "pkg:maven/io.netty/netty-codec-haproxy@4.1.82.Final", "type": "library", + "bom-ref": "pkg:maven/io.netty/netty-codec-haproxy@4.1.82.Final", "scope": "required", - "bom-ref": "pkg:maven/io.netty/netty-codec-haproxy@4.1.82.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "5584dae571f78234be750098887826317ef29e95055f507125390923089db447" + } + ] }, { "group": "io.quarkus", @@ -965,8 +1595,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-vertx-latebound-mdc-provider@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-vertx-latebound-mdc-provider@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-vertx-latebound-mdc-provider@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "403f7eac587da9ab47f3ba1bccffe5e812390a7e8f4415cdf3ff6505940b5001" + } + ] }, { "group": "io.smallrye.reactive", @@ -974,8 +1610,14 @@ "version": "2.27.0", "purl": "pkg:maven/io.smallrye.reactive/smallrye-mutiny-vertx-core@2.27.0", "type": "library", + "bom-ref": "pkg:maven/io.smallrye.reactive/smallrye-mutiny-vertx-core@2.27.0", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye.reactive/smallrye-mutiny-vertx-core@2.27.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "de60bc30dcb6164d8de0301bafd3ddfdc7cc3ce2f424e8ef31345226972c6e73" + } + ] }, { "group": "io.smallrye.reactive", @@ -983,8 +1625,14 @@ "version": "2.27.0", "purl": "pkg:maven/io.smallrye.reactive/smallrye-mutiny-vertx-runtime@2.27.0", "type": "library", + "bom-ref": "pkg:maven/io.smallrye.reactive/smallrye-mutiny-vertx-runtime@2.27.0", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye.reactive/smallrye-mutiny-vertx-runtime@2.27.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "8009b258e3518f5d222db0870ef6454687addd7b09328bfd186f7987090db614" + } + ] }, { "group": "io.smallrye.reactive", @@ -992,8 +1640,14 @@ "version": "2.27.0", "purl": "pkg:maven/io.smallrye.reactive/vertx-mutiny-generator@2.27.0", "type": "library", + "bom-ref": "pkg:maven/io.smallrye.reactive/vertx-mutiny-generator@2.27.0", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye.reactive/vertx-mutiny-generator@2.27.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "afd708bf8cfd65acb76e264bdf9f23435df732fecda078ea7097291c93b3052f" + } + ] }, { "group": "io.vertx", @@ -1001,8 +1655,14 @@ "version": "4.3.4", "purl": "pkg:maven/io.vertx/vertx-codegen@4.3.4", "type": "library", + "bom-ref": "pkg:maven/io.vertx/vertx-codegen@4.3.4", "scope": "required", - "bom-ref": "pkg:maven/io.vertx/vertx-codegen@4.3.4" + "hashes": [ + { + "alg": "SHA-256", + "content": "9d53e2b393abb33c1cbc724e605f234c0ae29a95f1a2886b142a2f176063512b" + } + ] }, { "group": "io.smallrye", @@ -1010,8 +1670,14 @@ "version": "5.5.0", "purl": "pkg:maven/io.smallrye/smallrye-fault-tolerance-vertx@5.5.0", "type": "library", + "bom-ref": "pkg:maven/io.smallrye/smallrye-fault-tolerance-vertx@5.5.0", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye/smallrye-fault-tolerance-vertx@5.5.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "ab3eb26389d9a769627621f0467a6f8d28366adec97342a10b83836bc10f6b8e" + } + ] }, { "group": "io.smallrye.reactive", @@ -1019,8 +1685,14 @@ "version": "2.27.0", "purl": "pkg:maven/io.smallrye.reactive/smallrye-mutiny-vertx-web@2.27.0", "type": "library", + "bom-ref": "pkg:maven/io.smallrye.reactive/smallrye-mutiny-vertx-web@2.27.0", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye.reactive/smallrye-mutiny-vertx-web@2.27.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "5bcd310b30d73903631adf505ee85a5c6fba249bebe9e80a0f116d8644bcc02d" + } + ] }, { "group": "io.smallrye.reactive", @@ -1028,8 +1700,14 @@ "version": "2.27.0", "purl": "pkg:maven/io.smallrye.reactive/smallrye-mutiny-vertx-web-common@2.27.0", "type": "library", + "bom-ref": "pkg:maven/io.smallrye.reactive/smallrye-mutiny-vertx-web-common@2.27.0", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye.reactive/smallrye-mutiny-vertx-web-common@2.27.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "5557378d88617205234d74cf77abb30e3364299ca9055c6346c247cdf18a83b9" + } + ] }, { "group": "io.smallrye.reactive", @@ -1037,8 +1715,14 @@ "version": "2.27.0", "purl": "pkg:maven/io.smallrye.reactive/smallrye-mutiny-vertx-auth-common@2.27.0", "type": "library", + "bom-ref": "pkg:maven/io.smallrye.reactive/smallrye-mutiny-vertx-auth-common@2.27.0", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye.reactive/smallrye-mutiny-vertx-auth-common@2.27.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "451fdc0bc5e4287f1bcf641cc15e4a31c6aca7d97403e16f9bc2105a55d8032a" + } + ] }, { "group": "io.smallrye.reactive", @@ -1046,8 +1730,14 @@ "version": "2.27.0", "purl": "pkg:maven/io.smallrye.reactive/smallrye-mutiny-vertx-bridge-common@2.27.0", "type": "library", + "bom-ref": "pkg:maven/io.smallrye.reactive/smallrye-mutiny-vertx-bridge-common@2.27.0", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye.reactive/smallrye-mutiny-vertx-bridge-common@2.27.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "338d3c77a5a75115c5cf557c43866244b73cdd59620602dc7f0941d71a74fa76" + } + ] }, { "group": "io.smallrye.reactive", @@ -1055,8 +1745,14 @@ "version": "2.27.0", "purl": "pkg:maven/io.smallrye.reactive/smallrye-mutiny-vertx-uri-template@2.27.0", "type": "library", + "bom-ref": "pkg:maven/io.smallrye.reactive/smallrye-mutiny-vertx-uri-template@2.27.0", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye.reactive/smallrye-mutiny-vertx-uri-template@2.27.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "2281c385d91c8c6531ad1a91a3a30064592ec7b713391adc9a1d47859d02ad02" + } + ] }, { "group": "io.vertx", @@ -1064,8 +1760,14 @@ "version": "4.3.4", "purl": "pkg:maven/io.vertx/vertx-uri-template@4.3.4", "type": "library", + "bom-ref": "pkg:maven/io.vertx/vertx-uri-template@4.3.4", "scope": "required", - "bom-ref": "pkg:maven/io.vertx/vertx-uri-template@4.3.4" + "hashes": [ + { + "alg": "SHA-256", + "content": "694b9f0c2c0f831a6bf2924e4708fa4b3b23c6545b7ec89d47b3dde515c07c4e" + } + ] }, { "group": "io.quarkus", @@ -1073,8 +1775,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-resteasy-server-common@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-resteasy-server-common@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-resteasy-server-common@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "4cb037068cb526e5a473a9e36b87ceea8370a7f2c6cb1478405b3bc76a023ce5" + } + ] }, { "group": "io.quarkus", @@ -1082,8 +1790,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-resteasy-common@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-resteasy-common@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-resteasy-common@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "753d3189b66ba46828ce405892849ca416466a828d0ad83cee2585aee073185f" + } + ] }, { "group": "org.jboss.resteasy", @@ -1091,8 +1805,14 @@ "version": "4.7.7.Final", "purl": "pkg:maven/org.jboss.resteasy/resteasy-core@4.7.7.Final", "type": "library", + "bom-ref": "pkg:maven/org.jboss.resteasy/resteasy-core@4.7.7.Final", "scope": "required", - "bom-ref": "pkg:maven/org.jboss.resteasy/resteasy-core@4.7.7.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "c7c39a1fa4794fe91f07a10f69f2d14244efb76f7360070beaba658b94222b57" + } + ] }, { "group": "org.jboss.spec.javax.annotation", @@ -1100,8 +1820,14 @@ "version": "2.0.1.Final", "purl": "pkg:maven/org.jboss.spec.javax.annotation/jboss-annotations-api_1.3_spec@2.0.1.Final", "type": "library", + "bom-ref": "pkg:maven/org.jboss.spec.javax.annotation/jboss-annotations-api_1.3_spec@2.0.1.Final", "scope": "required", - "bom-ref": "pkg:maven/org.jboss.spec.javax.annotation/jboss-annotations-api_1.3_spec@2.0.1.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "3e8a73afd02919e1b2a6bace5ed5d9af666eb47a79c6015c5fe6b72ba0787dc7" + } + ] }, { "group": "org.jboss.spec.javax.ws.rs", @@ -1109,8 +1835,14 @@ "version": "2.0.1.Final", "purl": "pkg:maven/org.jboss.spec.javax.ws.rs/jboss-jaxrs-api_2.1_spec@2.0.1.Final", "type": "library", + "bom-ref": "pkg:maven/org.jboss.spec.javax.ws.rs/jboss-jaxrs-api_2.1_spec@2.0.1.Final", "scope": "required", - "bom-ref": "pkg:maven/org.jboss.spec.javax.ws.rs/jboss-jaxrs-api_2.1_spec@2.0.1.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "2d490bccbe4ac31117a2194f3345cf43152867b9f51311746b6ac0dca174a4d7" + } + ] }, { "group": "org.jboss.resteasy", @@ -1118,8 +1850,14 @@ "version": "4.7.7.Final", "purl": "pkg:maven/org.jboss.resteasy/resteasy-core-spi@4.7.7.Final", "type": "library", + "bom-ref": "pkg:maven/org.jboss.resteasy/resteasy-core-spi@4.7.7.Final", "scope": "required", - "bom-ref": "pkg:maven/org.jboss.resteasy/resteasy-core-spi@4.7.7.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "a398d037a931161213320c89c94f643127e88c6c68d2876ad9e58392cb6de60d" + } + ] }, { "group": "jakarta.validation", @@ -1127,8 +1865,14 @@ "version": "2.0.2", "purl": "pkg:maven/jakarta.validation/jakarta.validation-api@2.0.2", "type": "library", + "bom-ref": "pkg:maven/jakarta.validation/jakarta.validation-api@2.0.2", "scope": "required", - "bom-ref": "pkg:maven/jakarta.validation/jakarta.validation-api@2.0.2" + "hashes": [ + { + "alg": "SHA-256", + "content": "a8c2b114508ccd20562239505b9732776d3371aaea137b265a0548f456475d06" + } + ] }, { "group": "com.ibm.async", @@ -1136,8 +1880,14 @@ "version": "0.1.0", "purl": "pkg:maven/com.ibm.async/asyncutil@0.1.0", "type": "library", + "bom-ref": "pkg:maven/com.ibm.async/asyncutil@0.1.0", "scope": "required", - "bom-ref": "pkg:maven/com.ibm.async/asyncutil@0.1.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "c565fd5ffe7c8d386d0453723c088cdd572d8351dd2ade703fcc44c45ccd9de7" + } + ] }, { "group": "io.quarkus", @@ -1145,8 +1895,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-resteasy-jackson@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-resteasy-jackson@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-resteasy-jackson@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "dd61825bd9a8c2f962121098870239a0200b2d71fe004b00fb572414b40d422f" + } + ] }, { "group": "io.quarkus", @@ -1154,8 +1910,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-jackson@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-jackson@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-jackson@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "da11fba8adceb5f3574a5021a439e382d77ef36ce9196bf926f74f8c27169de5" + } + ] }, { "group": "com.fasterxml.jackson.core", @@ -1163,8 +1925,14 @@ "version": "2.13.4.2", "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.4.2", "type": "library", + "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.4.2", "scope": "required", - "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.4.2" + "hashes": [ + { + "alg": "SHA-256", + "content": "374081eccd90e07fd882528c60bcf3599ba315cef65d6af2a57f1d02197a76dc" + } + ] }, { "group": "com.fasterxml.jackson.core", @@ -1172,8 +1940,14 @@ "version": "2.13.4", "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.13.4", "type": "library", + "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.13.4", "scope": "required", - "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.13.4" + "hashes": [ + { + "alg": "SHA-256", + "content": "9716a4ce686df5e735198309be0501d033ffc2ed0c163c70d48cbe1ef4e89387" + } + ] }, { "group": "com.fasterxml.jackson.datatype", @@ -1181,8 +1955,14 @@ "version": "2.13.4", "purl": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.13.4", "type": "library", + "bom-ref": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.13.4", "scope": "required", - "bom-ref": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.13.4" + "hashes": [ + { + "alg": "SHA-256", + "content": "961af7afc842537fc3163a7f287321fe4af465ac3c932151a04734d9b0c91e7a" + } + ] }, { "group": "com.fasterxml.jackson.datatype", @@ -1190,8 +1970,14 @@ "version": "2.13.4", "purl": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.13.4", "type": "library", + "bom-ref": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.13.4", "scope": "required", - "bom-ref": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.13.4" + "hashes": [ + { + "alg": "SHA-256", + "content": "77fca4491d56907277d7a7df21e9d12d4843698cac7cf2a6a7b510a2f29afbad" + } + ] }, { "group": "com.fasterxml.jackson.module", @@ -1199,8 +1985,14 @@ "version": "2.13.4", "purl": "pkg:maven/com.fasterxml.jackson.module/jackson-module-parameter-names@2.13.4", "type": "library", + "bom-ref": "pkg:maven/com.fasterxml.jackson.module/jackson-module-parameter-names@2.13.4", "scope": "required", - "bom-ref": "pkg:maven/com.fasterxml.jackson.module/jackson-module-parameter-names@2.13.4" + "hashes": [ + { + "alg": "SHA-256", + "content": "0131ec78c25d8381c950b32aa03c01c722cb5cbfe0247e2db7f6a88ec7729bd0" + } + ] }, { "group": "org.jboss.resteasy", @@ -1208,8 +2000,14 @@ "version": "4.7.7.Final", "purl": "pkg:maven/org.jboss.resteasy/resteasy-jackson2-provider@4.7.7.Final", "type": "library", + "bom-ref": "pkg:maven/org.jboss.resteasy/resteasy-jackson2-provider@4.7.7.Final", "scope": "required", - "bom-ref": "pkg:maven/org.jboss.resteasy/resteasy-jackson2-provider@4.7.7.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "f44560025fb9e1e28d13a3918d54c8d3c033342d2d5ae50709d7916066f44ff3" + } + ] }, { "group": "com.fasterxml.jackson.jaxrs", @@ -1217,8 +2015,14 @@ "version": "2.12.6", "purl": "pkg:maven/com.fasterxml.jackson.jaxrs/jackson-jaxrs-json-provider@2.12.6", "type": "library", + "bom-ref": "pkg:maven/com.fasterxml.jackson.jaxrs/jackson-jaxrs-json-provider@2.12.6", "scope": "required", - "bom-ref": "pkg:maven/com.fasterxml.jackson.jaxrs/jackson-jaxrs-json-provider@2.12.6" + "hashes": [ + { + "alg": "SHA-256", + "content": "f019abf2a909433b2d947213bb57593e7bd74c6781aa36a37afd82bd99eaa102" + } + ] }, { "group": "com.fasterxml.jackson.jaxrs", @@ -1226,8 +2030,14 @@ "version": "2.12.6", "purl": "pkg:maven/com.fasterxml.jackson.jaxrs/jackson-jaxrs-base@2.12.6", "type": "library", + "bom-ref": "pkg:maven/com.fasterxml.jackson.jaxrs/jackson-jaxrs-base@2.12.6", "scope": "required", - "bom-ref": "pkg:maven/com.fasterxml.jackson.jaxrs/jackson-jaxrs-base@2.12.6" + "hashes": [ + { + "alg": "SHA-256", + "content": "1401556fa4fb0b32c403087e39a3ef9cd222599f329d85ee929d881d105fb4da" + } + ] }, { "group": "com.fasterxml.jackson.module", @@ -1235,8 +2045,14 @@ "version": "2.12.6", "purl": "pkg:maven/com.fasterxml.jackson.module/jackson-module-jaxb-annotations@2.12.6", "type": "library", + "bom-ref": "pkg:maven/com.fasterxml.jackson.module/jackson-module-jaxb-annotations@2.12.6", "scope": "required", - "bom-ref": "pkg:maven/com.fasterxml.jackson.module/jackson-module-jaxb-annotations@2.12.6" + "hashes": [ + { + "alg": "SHA-256", + "content": "344630a96f59de033ea33f982db15e1abbaf957adc3d95cb29262b6fa77e17c0" + } + ] }, { "group": "com.github.java-json-tools", @@ -1244,8 +2060,14 @@ "version": "1.13", "purl": "pkg:maven/com.github.java-json-tools/json-patch@1.13", "type": "library", + "bom-ref": "pkg:maven/com.github.java-json-tools/json-patch@1.13", "scope": "required", - "bom-ref": "pkg:maven/com.github.java-json-tools/json-patch@1.13" + "hashes": [ + { + "alg": "SHA-256", + "content": "3ff3baf1ba186fdcf33233cb30fc9930c5c77e86cb44c6791865ab377e447bfe" + } + ] }, { "group": "com.github.java-json-tools", @@ -1253,8 +2075,14 @@ "version": "1.2", "purl": "pkg:maven/com.github.java-json-tools/msg-simple@1.2", "type": "library", + "bom-ref": "pkg:maven/com.github.java-json-tools/msg-simple@1.2", "scope": "required", - "bom-ref": "pkg:maven/com.github.java-json-tools/msg-simple@1.2" + "hashes": [ + { + "alg": "SHA-256", + "content": "e6e80ab37a2566fe7847b7090b9e44f436f615b322c97d204ac71f727e119487" + } + ] }, { "group": "com.github.java-json-tools", @@ -1262,8 +2090,14 @@ "version": "1.3", "purl": "pkg:maven/com.github.java-json-tools/btf@1.3", "type": "library", + "bom-ref": "pkg:maven/com.github.java-json-tools/btf@1.3", "scope": "required", - "bom-ref": "pkg:maven/com.github.java-json-tools/btf@1.3" + "hashes": [ + { + "alg": "SHA-256", + "content": "f441a5d0aecc2027bd5b9e4bce9a60b8b56a79e5eac2eff8df0e03182e44cac2" + } + ] }, { "group": "com.github.java-json-tools", @@ -1271,8 +2105,14 @@ "version": "2.0", "purl": "pkg:maven/com.github.java-json-tools/jackson-coreutils@2.0", "type": "library", + "bom-ref": "pkg:maven/com.github.java-json-tools/jackson-coreutils@2.0", "scope": "required", - "bom-ref": "pkg:maven/com.github.java-json-tools/jackson-coreutils@2.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "4d19c88dc43613b28ed18392cff7a0c9c2f6a59473ffba5e486c2f403a8c2f6f" + } + ] }, { "group": "io.quarkus", @@ -1280,8 +2120,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-jdbc-postgresql@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-jdbc-postgresql@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-jdbc-postgresql@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "a1af9f5bef767f20b966430723412779f71275106e66c4e80dad67d0874881d6" + } + ] }, { "group": "org.postgresql", @@ -1289,8 +2135,14 @@ "version": "42.5.0", "purl": "pkg:maven/org.postgresql/postgresql@42.5.0", "type": "library", + "bom-ref": "pkg:maven/org.postgresql/postgresql@42.5.0", "scope": "required", - "bom-ref": "pkg:maven/org.postgresql/postgresql@42.5.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "de729a946b7210ee58cee16a0db68018b1b619ec66f4802ecb41a54d56640b2b" + } + ] }, { "group": "io.quarkus", @@ -1298,8 +2150,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-kubernetes-service-binding@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-kubernetes-service-binding@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-kubernetes-service-binding@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "33fe80f8a1666b04c4ffa621d46f3b7fbb6af343194db24e81d1ffb9065bb0b6" + } + ] }, { "group": "io.quarkus", @@ -1307,8 +2165,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-container-image-docker@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-container-image-docker@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-container-image-docker@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "340cc17319511435110f74a594c065fb8e09b4cd054054df810bbe0ff7754e16" + } + ] }, { "group": "io.quarkus", @@ -1316,8 +2180,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-container-image@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-container-image@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-container-image@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "2283aaad3ea757907383a693d9981e49f167021a6655b41a6761b7f39f6d848c" + } + ] }, { "group": "io.quarkus", @@ -1325,8 +2195,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-hibernate-orm-deployment@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-hibernate-orm-deployment@2.0.2.Final", "scope": "optional", - "bom-ref": "pkg:maven/io.quarkus/quarkus-hibernate-orm-deployment@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "dcdd842c6024cbc027f0e9a5374a84461243343a83c295192e6dc93d10d873d9" + } + ] }, { "group": "io.quarkus", @@ -1334,8 +2210,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-core-deployment@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-core-deployment@2.0.2.Final", "scope": "optional", - "bom-ref": "pkg:maven/io.quarkus/quarkus-core-deployment@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "8cda4e5ee59a41566f9c5ebafdece3c9771ae0f2b115247bcdd0256e6140d7be" + } + ] }, { "group": "org.aesh", @@ -1343,8 +2225,14 @@ "version": "2.1", "purl": "pkg:maven/org.aesh/readline@2.1", "type": "library", + "bom-ref": "pkg:maven/org.aesh/readline@2.1", "scope": "optional", - "bom-ref": "pkg:maven/org.aesh/readline@2.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "2cd72dc7c8327dde309770d348c53b9eb961f685d201074d936d83e5bb9461da" + } + ] }, { "group": "org.fusesource.jansi", @@ -1352,8 +2240,14 @@ "version": "1.18", "purl": "pkg:maven/org.fusesource.jansi/jansi@1.18", "type": "library", + "bom-ref": "pkg:maven/org.fusesource.jansi/jansi@1.18", "scope": "optional", - "bom-ref": "pkg:maven/org.fusesource.jansi/jansi@1.18" + "hashes": [ + { + "alg": "SHA-256", + "content": "0dc7dd24f8c8e361f1d839fd930a13b384376d45aa66766927070f0d0d9ca42e" + } + ] }, { "group": "org.apache.commons", @@ -1361,8 +2255,14 @@ "version": "3.12.0", "purl": "pkg:maven/org.apache.commons/commons-lang3@3.12.0", "type": "library", + "bom-ref": "pkg:maven/org.apache.commons/commons-lang3@3.12.0", "scope": "optional", - "bom-ref": "pkg:maven/org.apache.commons/commons-lang3@3.12.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "75d06cb0f9b85ba1fad7f3da0f3c35306a102d6cbfce3f998d8315ccacfc3012" + } + ] }, { "group": "io.quarkus.gizmo", @@ -1370,8 +2270,14 @@ "version": "1.0.9.Final", "purl": "pkg:maven/io.quarkus.gizmo/gizmo@1.0.9.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus.gizmo/gizmo@1.0.9.Final", "scope": "optional", - "bom-ref": "pkg:maven/io.quarkus.gizmo/gizmo@1.0.9.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "aaf4ed4d511db297fffb49d292f6927d79d6dc35ce6ee48d45178c487f5030d0" + } + ] }, { "group": "org.ow2.asm", @@ -1379,8 +2285,14 @@ "version": "9.1", "purl": "pkg:maven/org.ow2.asm/asm-util@9.1", "type": "library", + "bom-ref": "pkg:maven/org.ow2.asm/asm-util@9.1", "scope": "optional", - "bom-ref": "pkg:maven/org.ow2.asm/asm-util@9.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "537baffb3a79453e148081685f9915de7be1fd239e221db6dd91cf2001671310" + } + ] }, { "group": "org.ow2.asm", @@ -1388,8 +2300,14 @@ "version": "9.1", "purl": "pkg:maven/org.ow2.asm/asm-tree@9.1", "type": "library", + "bom-ref": "pkg:maven/org.ow2.asm/asm-tree@9.1", "scope": "optional", - "bom-ref": "pkg:maven/org.ow2.asm/asm-tree@9.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "a09d7a940c53c26c0067b33ca0358d330cfa9da3c426d04e86c07f35d406241c" + } + ] }, { "group": "org.ow2.asm", @@ -1397,8 +2315,14 @@ "version": "9.1", "purl": "pkg:maven/org.ow2.asm/asm-analysis@9.1", "type": "library", + "bom-ref": "pkg:maven/org.ow2.asm/asm-analysis@9.1", "scope": "optional", - "bom-ref": "pkg:maven/org.ow2.asm/asm-analysis@9.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "f45548ccb5a04167749d372c3faf2caa97a5c42b6e8d204705d5342a0b68d672" + } + ] }, { "group": "org.jboss", @@ -1406,8 +2330,14 @@ "version": "2.3.0.Final", "purl": "pkg:maven/org.jboss/jandex@2.3.0.Final", "type": "library", + "bom-ref": "pkg:maven/org.jboss/jandex@2.3.0.Final", "scope": "optional", - "bom-ref": "pkg:maven/org.jboss/jandex@2.3.0.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "6f800e144c7786e8d981cc7d2797981007482215d91deb52a21979d5aa9252a1" + } + ] }, { "group": "io.quarkus", @@ -1415,8 +2345,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-class-change-agent@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-class-change-agent@2.0.2.Final", "scope": "optional", - "bom-ref": "pkg:maven/io.quarkus/quarkus-class-change-agent@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "5156efa455261c2479c6e4b11cb6227763a2366d517d1bdf1bc297216984a958" + } + ] }, { "group": "io.quarkus", @@ -1424,8 +2360,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-bootstrap-core@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-bootstrap-core@2.0.2.Final", "scope": "optional", - "bom-ref": "pkg:maven/io.quarkus/quarkus-bootstrap-core@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "52ec7ee32ee3ba500822cebdcb10c4bfdabe021fd2af35e9b0db75ad07ee6a90" + } + ] }, { "group": "io.quarkus", @@ -1433,8 +2375,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-bootstrap-app-model@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-bootstrap-app-model@2.0.2.Final", "scope": "optional", - "bom-ref": "pkg:maven/io.quarkus/quarkus-bootstrap-app-model@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "a644bad59e34e107e9e2a834a93bfa43ce24224fc76f4170f30167e814c8dfff" + } + ] }, { "group": "io.quarkus", @@ -1442,8 +2390,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-bootstrap-maven-resolver@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-bootstrap-maven-resolver@2.0.2.Final", "scope": "optional", - "bom-ref": "pkg:maven/io.quarkus/quarkus-bootstrap-maven-resolver@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "e57278f946f685bd6ca9707b9f63df5de72e27912591107b1f4a01ffe7190e58" + } + ] }, { "group": "org.apache.maven", @@ -1451,8 +2405,14 @@ "version": "3.8.1", "purl": "pkg:maven/org.apache.maven/maven-embedder@3.8.1", "type": "library", + "bom-ref": "pkg:maven/org.apache.maven/maven-embedder@3.8.1", "scope": "optional", - "bom-ref": "pkg:maven/org.apache.maven/maven-embedder@3.8.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "c68d9d9e6724a83f00f359c7095cba127cc46ed0b7b0534379aa7363c290d26c" + } + ] }, { "group": "org.apache.maven", @@ -1460,8 +2420,14 @@ "version": "3.8.1", "purl": "pkg:maven/org.apache.maven/maven-settings@3.8.1", "type": "library", + "bom-ref": "pkg:maven/org.apache.maven/maven-settings@3.8.1", "scope": "optional", - "bom-ref": "pkg:maven/org.apache.maven/maven-settings@3.8.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "0803ee5e8c795d39ec5f80f438fca25333d36a03899802e6dacce22fe8158a1b" + } + ] }, { "group": "org.codehaus.plexus", @@ -1469,8 +2435,14 @@ "version": "3.3.0", "purl": "pkg:maven/org.codehaus.plexus/plexus-utils@3.3.0", "type": "library", + "bom-ref": "pkg:maven/org.codehaus.plexus/plexus-utils@3.3.0", "scope": "optional", - "bom-ref": "pkg:maven/org.codehaus.plexus/plexus-utils@3.3.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "cfebf23a44d7bb8e5947c9f362f8538fc363da422afa6649596732e134c338ab" + } + ] }, { "group": "org.apache.maven", @@ -1478,8 +2450,14 @@ "version": "3.8.1", "purl": "pkg:maven/org.apache.maven/maven-settings-builder@3.8.1", "type": "library", + "bom-ref": "pkg:maven/org.apache.maven/maven-settings-builder@3.8.1", "scope": "optional", - "bom-ref": "pkg:maven/org.apache.maven/maven-settings-builder@3.8.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "4a5d417cec132243dfdb9572742c001cbf265da44e794e912b4578500439fd0c" + } + ] }, { "group": "org.apache.maven", @@ -1487,8 +2465,14 @@ "version": "3.8.1", "purl": "pkg:maven/org.apache.maven/maven-builder-support@3.8.1", "type": "library", + "bom-ref": "pkg:maven/org.apache.maven/maven-builder-support@3.8.1", "scope": "optional", - "bom-ref": "pkg:maven/org.apache.maven/maven-builder-support@3.8.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "1af4ec512b2675952af66164a610bca043a62ddfceea10d082a38dc4b4974e38" + } + ] }, { "group": "org.codehaus.plexus", @@ -1496,8 +2480,14 @@ "version": "1.25", "purl": "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.25", "type": "library", + "bom-ref": "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.25", "scope": "optional", - "bom-ref": "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.25" + "hashes": [ + { + "alg": "SHA-256", + "content": "e80ac909af53b689563a2431af9d53e6ec5c82caf5b32a11c029fca18884fc82" + } + ] }, { "group": "org.sonatype.plexus", @@ -1505,8 +2495,14 @@ "version": "1.4", "purl": "pkg:maven/org.sonatype.plexus/plexus-sec-dispatcher@1.4", "type": "library", + "bom-ref": "pkg:maven/org.sonatype.plexus/plexus-sec-dispatcher@1.4", "scope": "optional", - "bom-ref": "pkg:maven/org.sonatype.plexus/plexus-sec-dispatcher@1.4" + "hashes": [ + { + "alg": "SHA-256", + "content": "a652bc8bc584d8de8ae6a2b50f00f248a0230e048062abb6e73bac4d07ad84af" + } + ] }, { "group": "org.sonatype.plexus", @@ -1514,8 +2510,14 @@ "version": "1.4", "purl": "pkg:maven/org.sonatype.plexus/plexus-cipher@1.4", "type": "library", + "bom-ref": "pkg:maven/org.sonatype.plexus/plexus-cipher@1.4", "scope": "optional", - "bom-ref": "pkg:maven/org.sonatype.plexus/plexus-cipher@1.4" + "hashes": [ + { + "alg": "SHA-256", + "content": "633d1db3235958cf69a4db38c7a279dced8714666bf0d28073c32229a2718837" + } + ] }, { "group": "org.apache.maven", @@ -1523,8 +2525,14 @@ "version": "3.8.1", "purl": "pkg:maven/org.apache.maven/maven-core@3.8.1", "type": "library", + "bom-ref": "pkg:maven/org.apache.maven/maven-core@3.8.1", "scope": "optional", - "bom-ref": "pkg:maven/org.apache.maven/maven-core@3.8.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "635918aa4738430f81c4dec7c56998f6bd20696aad81148410dd6a823b74b7a3" + } + ] }, { "group": "org.apache.maven", @@ -1532,8 +2540,14 @@ "version": "3.8.1", "purl": "pkg:maven/org.apache.maven/maven-model@3.8.1", "type": "library", + "bom-ref": "pkg:maven/org.apache.maven/maven-model@3.8.1", "scope": "optional", - "bom-ref": "pkg:maven/org.apache.maven/maven-model@3.8.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "23dc00a1ebfd1bd1dbb9ebb4446572a6ba804b5252d7cba3e99a5c2fe9cd494b" + } + ] }, { "group": "org.apache.maven", @@ -1541,8 +2555,14 @@ "version": "3.8.1", "purl": "pkg:maven/org.apache.maven/maven-repository-metadata@3.8.1", "type": "library", + "bom-ref": "pkg:maven/org.apache.maven/maven-repository-metadata@3.8.1", "scope": "optional", - "bom-ref": "pkg:maven/org.apache.maven/maven-repository-metadata@3.8.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "0d92468de4cff3464f956cdd6044c717d1ccddf7b5fd53d90184dfa2eb86b381" + } + ] }, { "group": "org.apache.maven", @@ -1550,8 +2570,14 @@ "version": "3.8.1", "purl": "pkg:maven/org.apache.maven/maven-artifact@3.8.1", "type": "library", + "bom-ref": "pkg:maven/org.apache.maven/maven-artifact@3.8.1", "scope": "optional", - "bom-ref": "pkg:maven/org.apache.maven/maven-artifact@3.8.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "fd6855903809b4e77002a7a9e60aa6975bd9046e07af215a6d2d15c60ec3f427" + } + ] }, { "group": "org.apache.maven", @@ -1559,8 +2585,14 @@ "version": "3.8.1", "purl": "pkg:maven/org.apache.maven/maven-plugin-api@3.8.1", "type": "library", + "bom-ref": "pkg:maven/org.apache.maven/maven-plugin-api@3.8.1", "scope": "optional", - "bom-ref": "pkg:maven/org.apache.maven/maven-plugin-api@3.8.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "fb89f33cc2154de9cafae1bc2bce23f2784ff1f88ec0f654bf3efb09d6a63928" + } + ] }, { "group": "org.eclipse.sisu", @@ -1568,8 +2600,14 @@ "version": "0.3.4", "purl": "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.3.4", "type": "library", + "bom-ref": "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.3.4", "scope": "optional", - "bom-ref": "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.3.4" + "hashes": [ + { + "alg": "SHA-256", + "content": "892dfcf9c0ab795cad559b5ff081f005a7cc13834bece92e4e6fe1bc619d83a0" + } + ] }, { "group": "org.codehaus.plexus", @@ -1577,8 +2615,14 @@ "version": "2.1.0", "purl": "pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0", "type": "library", + "bom-ref": "pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0", "scope": "optional", - "bom-ref": "pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "0221fa6eecf3f22f70bc4789a437e8971a37285d40af43ab0be0a69dc2fecba8" + } + ] }, { "group": "org.codehaus.plexus", @@ -1586,8 +2630,14 @@ "version": "2.6.0", "purl": "pkg:maven/org.codehaus.plexus/plexus-classworlds@2.6.0", "type": "library", + "bom-ref": "pkg:maven/org.codehaus.plexus/plexus-classworlds@2.6.0", "scope": "optional", - "bom-ref": "pkg:maven/org.codehaus.plexus/plexus-classworlds@2.6.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "0d458f6ef51992b68f3f67bcd2867f6231135e0ed885a94bd48e5c36d480a9b7" + } + ] }, { "group": "org.apache.maven", @@ -1595,8 +2645,14 @@ "version": "3.8.1", "purl": "pkg:maven/org.apache.maven/maven-model-builder@3.8.1", "type": "library", + "bom-ref": "pkg:maven/org.apache.maven/maven-model-builder@3.8.1", "scope": "optional", - "bom-ref": "pkg:maven/org.apache.maven/maven-model-builder@3.8.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "753ae05791ea0517c042fd233c1af2db124db7b48239925b56cab73f2ac56d5d" + } + ] }, { "group": "org.apache.maven", @@ -1604,8 +2660,14 @@ "version": "3.8.1", "purl": "pkg:maven/org.apache.maven/maven-resolver-provider@3.8.1", "type": "library", + "bom-ref": "pkg:maven/org.apache.maven/maven-resolver-provider@3.8.1", "scope": "optional", - "bom-ref": "pkg:maven/org.apache.maven/maven-resolver-provider@3.8.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "bd7822b5883e0cea9fca95b6c7f75ceac2cd9d5051fb93d402c9836e58360cf2" + } + ] }, { "group": "org.apache.maven.resolver", @@ -1613,8 +2675,14 @@ "version": "1.6.2", "purl": "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.6.2", "type": "library", + "bom-ref": "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.6.2", "scope": "optional", - "bom-ref": "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.6.2" + "hashes": [ + { + "alg": "SHA-256", + "content": "167872c8192069cd33d95a19695c1db9f792294254a7c1007e5c81b9b9e09d6a" + } + ] }, { "group": "org.apache.maven.resolver", @@ -1622,8 +2690,14 @@ "version": "1.6.2", "purl": "pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.6.2", "type": "library", + "bom-ref": "pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.6.2", "scope": "optional", - "bom-ref": "pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.6.2" + "hashes": [ + { + "alg": "SHA-256", + "content": "d349392330b7735f9cce688ddedfdd8d96ce74897e3b996c61a09eeb0b599fca" + } + ] }, { "group": "org.apache.maven.resolver", @@ -1631,8 +2705,14 @@ "version": "1.6.2", "purl": "pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.6.2", "type": "library", + "bom-ref": "pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.6.2", "scope": "optional", - "bom-ref": "pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.6.2" + "hashes": [ + { + "alg": "SHA-256", + "content": "a7b85498cf9da664e9a0f8a6cd0b99532cacdd2b41a50d8e1de514ac5c64496a" + } + ] }, { "group": "org.apache.maven.resolver", @@ -1640,8 +2720,14 @@ "version": "1.6.2", "purl": "pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.6.2", "type": "library", + "bom-ref": "pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.6.2", "scope": "optional", - "bom-ref": "pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.6.2" + "hashes": [ + { + "alg": "SHA-256", + "content": "e531a9dc8c35f55d444bff04751c75848c3fd3d7fe93d62730410e30667961c8" + } + ] }, { "group": "org.apache.maven.shared", @@ -1649,8 +2735,14 @@ "version": "3.2.1", "purl": "pkg:maven/org.apache.maven.shared/maven-shared-utils@3.2.1", "type": "library", + "bom-ref": "pkg:maven/org.apache.maven.shared/maven-shared-utils@3.2.1", "scope": "optional", - "bom-ref": "pkg:maven/org.apache.maven.shared/maven-shared-utils@3.2.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "8b960b4297a3225d5610e7a7b4fd0b3cc47df2bf36db3dc2f7121b9c0bada051" + } + ] }, { "group": "commons-io", @@ -1658,8 +2750,14 @@ "version": "2.6", "purl": "pkg:maven/commons-io/commons-io@2.6", "type": "library", + "bom-ref": "pkg:maven/commons-io/commons-io@2.6", "scope": "optional", - "bom-ref": "pkg:maven/commons-io/commons-io@2.6" + "hashes": [ + { + "alg": "SHA-256", + "content": "10c450477b5fc3ea7baac9445b7de8d16048ce260b5514dbcef68f9f20d4f448" + } + ] }, { "group": "com.google.inject", @@ -1667,8 +2765,14 @@ "version": "4.2.1", "purl": "pkg:maven/com.google.inject/guice@4.2.1", "type": "library", + "bom-ref": "pkg:maven/com.google.inject/guice@4.2.1", "scope": "optional", - "bom-ref": "pkg:maven/com.google.inject/guice@4.2.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "92277e95f88594dae4534ca9f3b6e9290f1ea29cb0577ef43e8b6c0b4beeb53e" + } + ] }, { "group": "aopalliance", @@ -1676,8 +2780,14 @@ "version": "1.0", "purl": "pkg:maven/aopalliance/aopalliance@1.0", "type": "library", + "bom-ref": "pkg:maven/aopalliance/aopalliance@1.0", "scope": "optional", - "bom-ref": "pkg:maven/aopalliance/aopalliance@1.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "0e26e161ee03141cfadfd4eec6285eccc621a4877722bfb09a4ec2958e4dcf57" + } + ] }, { "group": "com.google.guava", @@ -1685,8 +2795,14 @@ "version": "25.1-android", "purl": "pkg:maven/com.google.guava/guava@25.1-android", "type": "library", + "bom-ref": "pkg:maven/com.google.guava/guava@25.1-android", "scope": "optional", - "bom-ref": "pkg:maven/com.google.guava/guava@25.1-android" + "hashes": [ + { + "alg": "SHA-256", + "content": "b6eeecdbad9a9be217583a8f6d5bb447426d62f63fe9b114beeb6b499efb2560" + } + ] }, { "group": "com.google.code.findbugs", @@ -1694,8 +2810,14 @@ "version": "3.0.2", "purl": "pkg:maven/com.google.code.findbugs/jsr305@3.0.2", "type": "library", + "bom-ref": "pkg:maven/com.google.code.findbugs/jsr305@3.0.2", "scope": "optional", - "bom-ref": "pkg:maven/com.google.code.findbugs/jsr305@3.0.2" + "hashes": [ + { + "alg": "SHA-256", + "content": "b9748bf56c300be0f44a20ba5b99676565bb215d693ce4067097d4b14e4185d5" + } + ] }, { "group": "org.checkerframework", @@ -1703,8 +2825,14 @@ "version": "2.0.0", "purl": "pkg:maven/org.checkerframework/checker-compat-qual@2.0.0", "type": "library", + "bom-ref": "pkg:maven/org.checkerframework/checker-compat-qual@2.0.0", "scope": "optional", - "bom-ref": "pkg:maven/org.checkerframework/checker-compat-qual@2.0.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "1e5bb65bf0acbcf01e87f77aa9281738846be042ee776e0b05f06f95ed94d4c9" + } + ] }, { "group": "com.google.j2objc", @@ -1712,8 +2840,14 @@ "version": "1.1", "purl": "pkg:maven/com.google.j2objc/j2objc-annotations@1.1", "type": "library", + "bom-ref": "pkg:maven/com.google.j2objc/j2objc-annotations@1.1", "scope": "optional", - "bom-ref": "pkg:maven/com.google.j2objc/j2objc-annotations@1.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "f41a81c6cadc39388d14b4c8c56aeda722511c02507f9ac5f3479db3174f2406" + } + ] }, { "group": "org.codehaus.mojo", @@ -1721,8 +2855,14 @@ "version": "1.14", "purl": "pkg:maven/org.codehaus.mojo/animal-sniffer-annotations@1.14", "type": "library", + "bom-ref": "pkg:maven/org.codehaus.mojo/animal-sniffer-annotations@1.14", "scope": "optional", - "bom-ref": "pkg:maven/org.codehaus.mojo/animal-sniffer-annotations@1.14" + "hashes": [ + { + "alg": "SHA-256", + "content": "982a7061046068098a95334dc007d11d31462628ac1bf904b7bd1b28aef00ebc" + } + ] }, { "group": "commons-cli", @@ -1730,8 +2870,14 @@ "version": "1.4", "purl": "pkg:maven/commons-cli/commons-cli@1.4", "type": "library", + "bom-ref": "pkg:maven/commons-cli/commons-cli@1.4", "scope": "optional", - "bom-ref": "pkg:maven/commons-cli/commons-cli@1.4" + "hashes": [ + { + "alg": "SHA-256", + "content": "4d5698c601e30825d885d7f2aee8a1a23ddf07eff5d9468dbb1c68f33739c15b" + } + ] }, { "group": "org.apache.maven.resolver", @@ -1739,8 +2885,14 @@ "version": "1.6.2", "purl": "pkg:maven/org.apache.maven.resolver/maven-resolver-connector-basic@1.6.2", "type": "library", + "bom-ref": "pkg:maven/org.apache.maven.resolver/maven-resolver-connector-basic@1.6.2", "scope": "optional", - "bom-ref": "pkg:maven/org.apache.maven.resolver/maven-resolver-connector-basic@1.6.2" + "hashes": [ + { + "alg": "SHA-256", + "content": "93a7d6623696b7542f7a778999a7591c787400d2b1cfb9ed702847ae74fe04f6" + } + ] }, { "group": "org.apache.maven.resolver", @@ -1748,8 +2900,14 @@ "version": "1.6.2", "purl": "pkg:maven/org.apache.maven.resolver/maven-resolver-transport-wagon@1.6.2", "type": "library", + "bom-ref": "pkg:maven/org.apache.maven.resolver/maven-resolver-transport-wagon@1.6.2", "scope": "optional", - "bom-ref": "pkg:maven/org.apache.maven.resolver/maven-resolver-transport-wagon@1.6.2" + "hashes": [ + { + "alg": "SHA-256", + "content": "69ac64f7a61830d1b609b75f061c5f37bd841d204494d91107a4976d65ba74dc" + } + ] }, { "group": "org.apache.maven.wagon", @@ -1757,8 +2915,14 @@ "version": "3.4.3", "purl": "pkg:maven/org.apache.maven.wagon/wagon-http@3.4.3", "type": "library", + "bom-ref": "pkg:maven/org.apache.maven.wagon/wagon-http@3.4.3", "scope": "optional", - "bom-ref": "pkg:maven/org.apache.maven.wagon/wagon-http@3.4.3" + "hashes": [ + { + "alg": "SHA-256", + "content": "dc73d554018c277bb34f2d8c0f22c48b989f4c1ebfc72acccceb1a5596f9ca66" + } + ] }, { "group": "org.apache.maven.wagon", @@ -1766,8 +2930,14 @@ "version": "3.4.3", "purl": "pkg:maven/org.apache.maven.wagon/wagon-http-shared@3.4.3", "type": "library", + "bom-ref": "pkg:maven/org.apache.maven.wagon/wagon-http-shared@3.4.3", "scope": "optional", - "bom-ref": "pkg:maven/org.apache.maven.wagon/wagon-http-shared@3.4.3" + "hashes": [ + { + "alg": "SHA-256", + "content": "bb98ed8606e6fc4aeb551149d5699f33c67f940eb96daca3a6cdafd899324118" + } + ] }, { "group": "org.jsoup", @@ -1775,8 +2945,14 @@ "version": "1.12.1", "purl": "pkg:maven/org.jsoup/jsoup@1.12.1", "type": "library", + "bom-ref": "pkg:maven/org.jsoup/jsoup@1.12.1", "scope": "optional", - "bom-ref": "pkg:maven/org.jsoup/jsoup@1.12.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "d18bc1810d6619608bf6eeb373d533bbbb331a419c05f5088e88dd6e9c5a68cf" + } + ] }, { "group": "org.apache.httpcomponents", @@ -1784,8 +2960,14 @@ "version": "4.5.13", "purl": "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13", "type": "library", + "bom-ref": "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13", "scope": "optional", - "bom-ref": "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13" + "hashes": [ + { + "alg": "SHA-256", + "content": "aa8533703665c45b418af29b71d92f56ddba39a83daf856072c947685d37a780" + } + ] }, { "group": "org.apache.httpcomponents", @@ -1793,8 +2975,14 @@ "version": "4.4.14", "purl": "pkg:maven/org.apache.httpcomponents/httpcore@4.4.14", "type": "library", + "bom-ref": "pkg:maven/org.apache.httpcomponents/httpcore@4.4.14", "scope": "optional", - "bom-ref": "pkg:maven/org.apache.httpcomponents/httpcore@4.4.14" + "hashes": [ + { + "alg": "SHA-256", + "content": "1f782fc7fa0aa6db8929e7e59c0c88b597c9fbb6bf1136f8adc609945c83282e" + } + ] }, { "group": "commons-codec", @@ -1802,8 +2990,14 @@ "version": "1.11", "purl": "pkg:maven/commons-codec/commons-codec@1.11", "type": "library", + "bom-ref": "pkg:maven/commons-codec/commons-codec@1.11", "scope": "optional", - "bom-ref": "pkg:maven/commons-codec/commons-codec@1.11" + "hashes": [ + { + "alg": "SHA-256", + "content": "d885eea5759a9df7787fdb132d42e443705fc925df49cb14ef00dc85eeabed82" + } + ] }, { "group": "org.apache.maven.wagon", @@ -1811,8 +3005,14 @@ "version": "3.4.3", "purl": "pkg:maven/org.apache.maven.wagon/wagon-provider-api@3.4.3", "type": "library", + "bom-ref": "pkg:maven/org.apache.maven.wagon/wagon-provider-api@3.4.3", "scope": "optional", - "bom-ref": "pkg:maven/org.apache.maven.wagon/wagon-provider-api@3.4.3" + "hashes": [ + { + "alg": "SHA-256", + "content": "29232ca8f8e443f952d4d6c1829aafb49b3dabc23c308d70a329698cdef3d4bd" + } + ] }, { "group": "org.apache.maven.wagon", @@ -1820,8 +3020,14 @@ "version": "3.4.3", "purl": "pkg:maven/org.apache.maven.wagon/wagon-file@3.4.3", "type": "library", + "bom-ref": "pkg:maven/org.apache.maven.wagon/wagon-file@3.4.3", "scope": "optional", - "bom-ref": "pkg:maven/org.apache.maven.wagon/wagon-file@3.4.3" + "hashes": [ + { + "alg": "SHA-256", + "content": "921a96e3e6e7860a984b9153ecee636c67f7933b16e76ec62e9ae50fd0d991ba" + } + ] }, { "group": "io.quarkus", @@ -1829,8 +3035,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-bootstrap-gradle-resolver@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-bootstrap-gradle-resolver@2.0.2.Final", "scope": "optional", - "bom-ref": "pkg:maven/io.quarkus/quarkus-bootstrap-gradle-resolver@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "2e74280c166cb42551498f707ccfee61ad33a6ef1f43aba928134990153bd4ee" + } + ] }, { "group": "io.quarkus", @@ -1838,8 +3050,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-devtools-utilities@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-devtools-utilities@2.0.2.Final", "scope": "optional", - "bom-ref": "pkg:maven/io.quarkus/quarkus-devtools-utilities@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "ce8a21bfa9bca0248be35a37e209b6b183dc4b34689cf6feef2b2e01b8f3db24" + } + ] }, { "group": "io.quarkus", @@ -1847,8 +3065,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-builder@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-builder@2.0.2.Final", "scope": "optional", - "bom-ref": "pkg:maven/io.quarkus/quarkus-builder@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "0cea3c6b3c8fb29c4b5e627623908164a802691261a4a17c10bb53c816bb4a6b" + } + ] }, { "group": "org.junit.platform", @@ -1856,8 +3080,14 @@ "version": "1.7.2", "purl": "pkg:maven/org.junit.platform/junit-platform-launcher@1.7.2", "type": "library", + "bom-ref": "pkg:maven/org.junit.platform/junit-platform-launcher@1.7.2", "scope": "optional", - "bom-ref": "pkg:maven/org.junit.platform/junit-platform-launcher@1.7.2" + "hashes": [ + { + "alg": "SHA-256", + "content": "e6277701ce25d3aa3b0944d429fa068687004e560b7cb00691d6bc8b26e435e9" + } + ] }, { "group": "org.apiguardian", @@ -1865,8 +3095,14 @@ "version": "1.1.0", "purl": "pkg:maven/org.apiguardian/apiguardian-api@1.1.0", "type": "library", + "bom-ref": "pkg:maven/org.apiguardian/apiguardian-api@1.1.0", "scope": "optional", - "bom-ref": "pkg:maven/org.apiguardian/apiguardian-api@1.1.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "20449bb8023ab658018bfd91b5943ea198d34fe46b3c905338701092e0f5fc80" + } + ] }, { "group": "org.junit.platform", @@ -1874,8 +3110,14 @@ "version": "1.7.2", "purl": "pkg:maven/org.junit.platform/junit-platform-engine@1.7.2", "type": "library", + "bom-ref": "pkg:maven/org.junit.platform/junit-platform-engine@1.7.2", "scope": "optional", - "bom-ref": "pkg:maven/org.junit.platform/junit-platform-engine@1.7.2" + "hashes": [ + { + "alg": "SHA-256", + "content": "efc3f3220e47989db48d427b6fbf1361f7ed1c192937c80d22ee5258f1ec641d" + } + ] }, { "group": "org.opentest4j", @@ -1883,8 +3125,14 @@ "version": "1.2.0", "purl": "pkg:maven/org.opentest4j/opentest4j@1.2.0", "type": "library", + "bom-ref": "pkg:maven/org.opentest4j/opentest4j@1.2.0", "scope": "optional", - "bom-ref": "pkg:maven/org.opentest4j/opentest4j@1.2.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "6d86f077185a962c9500d35a50e32dbaaf5364a1eb9ccf4eea4437ca126f754f" + } + ] }, { "group": "org.junit.platform", @@ -1892,8 +3140,14 @@ "version": "1.7.2", "purl": "pkg:maven/org.junit.platform/junit-platform-commons@1.7.2", "type": "library", + "bom-ref": "pkg:maven/org.junit.platform/junit-platform-commons@1.7.2", "scope": "optional", - "bom-ref": "pkg:maven/org.junit.platform/junit-platform-commons@1.7.2" + "hashes": [ + { + "alg": "SHA-256", + "content": "c8bf2c027bb1f8284bec7c821d36df26f579ad3e5d7629fad193953639e2963a" + } + ] }, { "group": "org.junit.jupiter", @@ -1901,8 +3155,14 @@ "version": "5.7.2", "purl": "pkg:maven/org.junit.jupiter/junit-jupiter@5.7.2", "type": "library", + "bom-ref": "pkg:maven/org.junit.jupiter/junit-jupiter@5.7.2", "scope": "optional", - "bom-ref": "pkg:maven/org.junit.jupiter/junit-jupiter@5.7.2" + "hashes": [ + { + "alg": "SHA-256", + "content": "0553c80cc0fbddc1114db5bb4816cc24cc0c876891d0a238a7bd35e1059723d3" + } + ] }, { "group": "org.junit.jupiter", @@ -1910,8 +3170,14 @@ "version": "5.7.2", "purl": "pkg:maven/org.junit.jupiter/junit-jupiter-api@5.7.2", "type": "library", + "bom-ref": "pkg:maven/org.junit.jupiter/junit-jupiter-api@5.7.2", "scope": "optional", - "bom-ref": "pkg:maven/org.junit.jupiter/junit-jupiter-api@5.7.2" + "hashes": [ + { + "alg": "SHA-256", + "content": "5e167a2fc374270965aaa4e1c2efa4951a9d60268da0a80fbf7898dbf9a3a2c8" + } + ] }, { "group": "org.junit.jupiter", @@ -1919,8 +3185,14 @@ "version": "5.7.2", "purl": "pkg:maven/org.junit.jupiter/junit-jupiter-params@5.7.2", "type": "library", + "bom-ref": "pkg:maven/org.junit.jupiter/junit-jupiter-params@5.7.2", "scope": "optional", - "bom-ref": "pkg:maven/org.junit.jupiter/junit-jupiter-params@5.7.2" + "hashes": [ + { + "alg": "SHA-256", + "content": "7d4732347008f6eef3428078582203423c0be01aad09256d5e5023da0fd76e4d" + } + ] }, { "group": "io.quarkus", @@ -1928,8 +3200,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-narayana-jta-deployment@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-narayana-jta-deployment@2.0.2.Final", "scope": "optional", - "bom-ref": "pkg:maven/io.quarkus/quarkus-narayana-jta-deployment@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "72b740382bc19bb7f991e8ea9113a59ecae0fa9d02267fda13a2695584911a37" + } + ] }, { "group": "io.quarkus", @@ -1937,8 +3215,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-arc-deployment@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-arc-deployment@2.0.2.Final", "scope": "optional", - "bom-ref": "pkg:maven/io.quarkus/quarkus-arc-deployment@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "2842063ad9da4ec68dca08769c36121695bef39207e79a7feb345ece73c3edc6" + } + ] }, { "group": "io.quarkus", @@ -1946,8 +3230,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-vertx-http-dev-console-spi@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-vertx-http-dev-console-spi@2.0.2.Final", "scope": "optional", - "bom-ref": "pkg:maven/io.quarkus/quarkus-vertx-http-dev-console-spi@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "4d3a59117e3beb43d5643a6314e9bb482b529ae2b219ee4dfc2be5108d49e09a" + } + ] }, { "group": "io.quarkus.arc", @@ -1955,8 +3245,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus.arc/arc-processor@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus.arc/arc-processor@2.0.2.Final", "scope": "optional", - "bom-ref": "pkg:maven/io.quarkus.arc/arc-processor@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "7956865dcd107ed97018c5ccca052f895a5e22ee5bd9459371edda952478cfd6" + } + ] }, { "group": "io.quarkus", @@ -1964,8 +3260,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-mutiny-deployment@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-mutiny-deployment@2.0.2.Final", "scope": "optional", - "bom-ref": "pkg:maven/io.quarkus/quarkus-mutiny-deployment@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "4ef40118bd1d35409f1b44d4d0040532e496fe1ad1313b4bbf32b9bbfa6869a5" + } + ] }, { "group": "io.quarkus", @@ -1973,8 +3275,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-smallrye-context-propagation-deployment@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-smallrye-context-propagation-deployment@2.0.2.Final", "scope": "optional", - "bom-ref": "pkg:maven/io.quarkus/quarkus-smallrye-context-propagation-deployment@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "fe29c8de492b4aaa727bfe971e6cb38680f1a190cc48e0084f8cea7a11a3f077" + } + ] }, { "group": "io.quarkus", @@ -1982,8 +3290,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-agroal-deployment@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-agroal-deployment@2.0.2.Final", "scope": "optional", - "bom-ref": "pkg:maven/io.quarkus/quarkus-agroal-deployment@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "30c6f0310e3d205be81858303e26e5f5dfd00a1de0645c57ab234619bfec0126" + } + ] }, { "group": "io.quarkus", @@ -1991,8 +3305,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-datasource-deployment@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-datasource-deployment@2.0.2.Final", "scope": "optional", - "bom-ref": "pkg:maven/io.quarkus/quarkus-datasource-deployment@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "b3c9d72ccd890189e7b2a399628d8f25cc39fa9a1f942d4f9eb050296ae8cf53" + } + ] }, { "group": "io.quarkus", @@ -2000,8 +3320,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-datasource-deployment-spi@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-datasource-deployment-spi@2.0.2.Final", "scope": "optional", - "bom-ref": "pkg:maven/io.quarkus/quarkus-datasource-deployment-spi@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "9e251f8b44174660c3d6db81d09567b5cdacbd3bd3d86a7a9585472b0311bfb6" + } + ] }, { "group": "io.quarkus", @@ -2009,8 +3335,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-agroal-spi@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-agroal-spi@2.0.2.Final", "scope": "optional", - "bom-ref": "pkg:maven/io.quarkus/quarkus-agroal-spi@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "866519601a62fef570340577923e890475bd9d17defe16d596a0f9beb7f18bc5" + } + ] }, { "group": "io.quarkus", @@ -2018,8 +3350,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-credentials-deployment@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-credentials-deployment@2.0.2.Final", "scope": "optional", - "bom-ref": "pkg:maven/io.quarkus/quarkus-credentials-deployment@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "c794d1b4f732bda972a20d0afd7f88e2b09772d39986fe66198be0024ff2f4eb" + } + ] }, { "group": "io.quarkus", @@ -2027,8 +3365,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-smallrye-health-spi@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-smallrye-health-spi@2.0.2.Final", "scope": "optional", - "bom-ref": "pkg:maven/io.quarkus/quarkus-smallrye-health-spi@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "6e06f30a2ddf5c449af7ac341b0637ca5af58b24e7317b54392fbbbe3282f9b3" + } + ] }, { "group": "io.quarkus", @@ -2036,8 +3380,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-caffeine-deployment@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-caffeine-deployment@2.0.2.Final", "scope": "optional", - "bom-ref": "pkg:maven/io.quarkus/quarkus-caffeine-deployment@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "b5ec996f16d4555f7a84287eb4adaf5b2d191696bc22ac3b9e6bd6aad0de27ba" + } + ] }, { "group": "io.quarkus", @@ -2045,8 +3395,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-panache-hibernate-common-deployment@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-panache-hibernate-common-deployment@2.0.2.Final", "scope": "optional", - "bom-ref": "pkg:maven/io.quarkus/quarkus-panache-hibernate-common-deployment@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "568067174ce357bf3e0c18d453679663e9d6b73eea3803895032929e6feeddaa" + } + ] }, { "group": "io.quarkus", @@ -2054,8 +3410,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-panache-hibernate-common@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-panache-hibernate-common@2.0.2.Final", "scope": "optional", - "bom-ref": "pkg:maven/io.quarkus/quarkus-panache-hibernate-common@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "497b0a7aee81a41e671cdb80017165f78d6fa817c6ab690458145178a3214a9c" + } + ] }, { "group": "io.quarkus", @@ -2063,8 +3425,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-panache-common@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-panache-common@2.0.2.Final", "scope": "optional", - "bom-ref": "pkg:maven/io.quarkus/quarkus-panache-common@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "3d0df22ee49ef52d77df941dd97483cbcc16857f2ded6e74e43083f796b0c78c" + } + ] }, { "group": "io.quarkus", @@ -2072,8 +3440,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-panache-common-deployment@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-panache-common-deployment@2.0.2.Final", "scope": "optional", - "bom-ref": "pkg:maven/io.quarkus/quarkus-panache-common-deployment@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "3e045616c2f54d71f25b1facb081024d5b70c02689fffd2bad5c5a7ce050177b" + } + ] } ], "dependencies": [ diff --git a/test/providers/tst_manifests/gradle/deps_with_no_ignore_common_paths/expected_component_sbom.json b/test/providers/tst_manifests/gradle/deps_with_no_ignore_common_paths/expected_component_sbom.json index 3a801ae8..ac514a75 100644 --- a/test/providers/tst_manifests/gradle/deps_with_no_ignore_common_paths/expected_component_sbom.json +++ b/test/providers/tst_manifests/gradle/deps_with_no_ignore_common_paths/expected_component_sbom.json @@ -20,8 +20,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-hibernate-orm@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-hibernate-orm@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-hibernate-orm@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "79056c3042ee5c1bf05766340e4ae54fdde64f08036ec3e7eade6fb1c1d74375" + } + ] }, { "group": "io.quarkus", @@ -29,8 +35,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-agroal@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-agroal@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-agroal@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "373e7e3e0789069ac3b414658fdc8d2e78fa29ed649672443833fd61653e8239" + } + ] }, { "group": "io.quarkus", @@ -38,8 +50,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-resteasy@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-resteasy@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-resteasy@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "e4569c385c1200dfd4144f52f8be1cd3c608d1438425aa596c13268d88a01243" + } + ] }, { "group": "io.quarkus", @@ -47,8 +65,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-resteasy-jackson@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-resteasy-jackson@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-resteasy-jackson@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "dd61825bd9a8c2f962121098870239a0200b2d71fe004b00fb572414b40d422f" + } + ] }, { "group": "io.quarkus", @@ -56,8 +80,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-jdbc-postgresql@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-jdbc-postgresql@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-jdbc-postgresql@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "a1af9f5bef767f20b966430723412779f71275106e66c4e80dad67d0874881d6" + } + ] }, { "group": "io.quarkus", @@ -65,8 +95,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-kubernetes-service-binding@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-kubernetes-service-binding@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-kubernetes-service-binding@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "33fe80f8a1666b04c4ffa621d46f3b7fbb6af343194db24e81d1ffb9065bb0b6" + } + ] }, { "group": "io.quarkus", @@ -74,8 +110,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-container-image-docker@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-container-image-docker@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-container-image-docker@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "340cc17319511435110f74a594c065fb8e09b4cd054054df810bbe0ff7754e16" + } + ] }, { "group": "jakarta.validation", @@ -83,8 +125,14 @@ "version": "2.0.2", "purl": "pkg:maven/jakarta.validation/jakarta.validation-api@2.0.2", "type": "library", + "bom-ref": "pkg:maven/jakarta.validation/jakarta.validation-api@2.0.2", "scope": "required", - "bom-ref": "pkg:maven/jakarta.validation/jakarta.validation-api@2.0.2" + "hashes": [ + { + "alg": "SHA-256", + "content": "a8c2b114508ccd20562239505b9732776d3371aaea137b265a0548f456475d06" + } + ] }, { "group": "io.quarkus", @@ -92,8 +140,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-vertx-http@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-vertx-http@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-vertx-http@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "25fe6553700806fa0e9b2cda1946670da6b56a2f76b838b304f87014b686a1ac" + } + ] }, { "group": "io.quarkus", @@ -101,8 +155,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-hibernate-orm-deployment@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-hibernate-orm-deployment@2.0.2.Final", "scope": "optional", - "bom-ref": "pkg:maven/io.quarkus/quarkus-hibernate-orm-deployment@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "dcdd842c6024cbc027f0e9a5374a84461243343a83c295192e6dc93d10d873d9" + } + ] } ], "dependencies": [ diff --git a/test/providers/tst_manifests/gradle/deps_with_no_ignore_common_paths/expected_stack_sbom.json b/test/providers/tst_manifests/gradle/deps_with_no_ignore_common_paths/expected_stack_sbom.json index 316f17a1..cbdb162e 100644 --- a/test/providers/tst_manifests/gradle/deps_with_no_ignore_common_paths/expected_stack_sbom.json +++ b/test/providers/tst_manifests/gradle/deps_with_no_ignore_common_paths/expected_stack_sbom.json @@ -20,8 +20,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-hibernate-orm@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-hibernate-orm@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-hibernate-orm@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "79056c3042ee5c1bf05766340e4ae54fdde64f08036ec3e7eade6fb1c1d74375" + } + ] }, { "group": "io.quarkus", @@ -29,8 +35,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-core@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-core@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-core@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "fdb7ce28fa76c84148a3e4bcdf3a3ea4db801f117caf703435ef731327a2e843" + } + ] }, { "group": "jakarta.annotation", @@ -38,8 +50,14 @@ "version": "1.3.5", "purl": "pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5", "type": "library", + "bom-ref": "pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5", "scope": "required", - "bom-ref": "pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5" + "hashes": [ + { + "alg": "SHA-256", + "content": "d3b4e3e5413539c37eeb16d0590fad710ceafd09bf8a044e72e0d3b21e461fc3" + } + ] }, { "group": "jakarta.enterprise", @@ -47,8 +65,14 @@ "version": "2.0.2", "purl": "pkg:maven/jakarta.enterprise/jakarta.enterprise.cdi-api@2.0.2", "type": "library", + "bom-ref": "pkg:maven/jakarta.enterprise/jakarta.enterprise.cdi-api@2.0.2", "scope": "required", - "bom-ref": "pkg:maven/jakarta.enterprise/jakarta.enterprise.cdi-api@2.0.2" + "hashes": [ + { + "alg": "SHA-256", + "content": "c1f2010bdd10b561a178248098cff63cd0fba8772d8d1552b9732bc0ab09da1a" + } + ] }, { "group": "jakarta.el", @@ -56,8 +80,14 @@ "version": "3.0.3", "purl": "pkg:maven/jakarta.el/jakarta.el-api@3.0.3", "type": "library", + "bom-ref": "pkg:maven/jakarta.el/jakarta.el-api@3.0.3", "scope": "required", - "bom-ref": "pkg:maven/jakarta.el/jakarta.el-api@3.0.3" + "hashes": [ + { + "alg": "SHA-256", + "content": "142a2bb7295c9f320601a22c1222fe29232663b0e154ceeffd4002b4101996d0" + } + ] }, { "group": "jakarta.interceptor", @@ -65,8 +95,14 @@ "version": "1.2.5", "purl": "pkg:maven/jakarta.interceptor/jakarta.interceptor-api@1.2.5", "type": "library", + "bom-ref": "pkg:maven/jakarta.interceptor/jakarta.interceptor-api@1.2.5", "scope": "required", - "bom-ref": "pkg:maven/jakarta.interceptor/jakarta.interceptor-api@1.2.5" + "hashes": [ + { + "alg": "SHA-256", + "content": "f5e24fb964cf09f358d61a3ccb79f4b5c1e5c9aa478cd61088aa64bb5b23b2a1" + } + ] }, { "group": "jakarta.ejb", @@ -74,8 +110,14 @@ "version": "3.2.6", "purl": "pkg:maven/jakarta.ejb/jakarta.ejb-api@3.2.6", "type": "library", + "bom-ref": "pkg:maven/jakarta.ejb/jakarta.ejb-api@3.2.6", "scope": "required", - "bom-ref": "pkg:maven/jakarta.ejb/jakarta.ejb-api@3.2.6" + "hashes": [ + { + "alg": "SHA-256", + "content": "b22e27d3035682fe2b0f4d319c09315ad09af845a5e529859dcc0f7f32448c6b" + } + ] }, { "group": "jakarta.transaction", @@ -83,8 +125,14 @@ "version": "1.3.3", "purl": "pkg:maven/jakarta.transaction/jakarta.transaction-api@1.3.3", "type": "library", + "bom-ref": "pkg:maven/jakarta.transaction/jakarta.transaction-api@1.3.3", "scope": "required", - "bom-ref": "pkg:maven/jakarta.transaction/jakarta.transaction-api@1.3.3" + "hashes": [ + { + "alg": "SHA-256", + "content": "2f345438752720e31257607bb2e2b77bc1ca39a539dc75ee3fceced9b77d39fb" + } + ] }, { "group": "jakarta.inject", @@ -92,8 +140,14 @@ "version": "1.0", "purl": "pkg:maven/jakarta.inject/jakarta.inject-api@1.0", "type": "library", + "bom-ref": "pkg:maven/jakarta.inject/jakarta.inject-api@1.0", "scope": "required", - "bom-ref": "pkg:maven/jakarta.inject/jakarta.inject-api@1.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "b98d47614ffb494c7f35d301cdfa39a26ea53a83fc2bf94af9c634caf0b33bca" + } + ] }, { "group": "io.quarkus", @@ -101,8 +155,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-ide-launcher@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-ide-launcher@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-ide-launcher@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "3cd845ef528949241735604796af445482d82f1b8d249ef45a3dde59b50e27e2" + } + ] }, { "group": "io.quarkus", @@ -110,8 +170,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-development-mode-spi@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-development-mode-spi@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-development-mode-spi@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "b73a42112df2c620234e8ae19051a56c572edcc36044d6feb297bba5620248af" + } + ] }, { "group": "io.smallrye.config", @@ -119,8 +185,14 @@ "version": "2.12.0", "purl": "pkg:maven/io.smallrye.config/smallrye-config@2.12.0", "type": "library", + "bom-ref": "pkg:maven/io.smallrye.config/smallrye-config@2.12.0", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye.config/smallrye-config@2.12.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "bea689702e399f8199ec7b064841c275da2ed1900efd08a50c52729d4bf80fd6" + } + ] }, { "group": "io.smallrye.config", @@ -128,8 +200,14 @@ "version": "2.12.0", "purl": "pkg:maven/io.smallrye.config/smallrye-config-core@2.12.0", "type": "library", + "bom-ref": "pkg:maven/io.smallrye.config/smallrye-config-core@2.12.0", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye.config/smallrye-config-core@2.12.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "b6f1137d5cabd03c1c79bf6aa7e3fafc2fdd54593903b40eaaa47f04dedcd764" + } + ] }, { "group": "org.eclipse.microprofile.config", @@ -137,8 +215,14 @@ "version": "2.0.1", "purl": "pkg:maven/org.eclipse.microprofile.config/microprofile-config-api@2.0.1", "type": "library", + "bom-ref": "pkg:maven/org.eclipse.microprofile.config/microprofile-config-api@2.0.1", "scope": "required", - "bom-ref": "pkg:maven/org.eclipse.microprofile.config/microprofile-config-api@2.0.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "5ce209fecc8c1cca24721da1b49bfe9b7919d35821915a4c03b40719619a3f5f" + } + ] }, { "group": "io.smallrye.common", @@ -146,8 +230,14 @@ "version": "1.13.1", "purl": "pkg:maven/io.smallrye.common/smallrye-common-annotation@1.13.1", "type": "library", + "bom-ref": "pkg:maven/io.smallrye.common/smallrye-common-annotation@1.13.1", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye.common/smallrye-common-annotation@1.13.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "2782202c634bf0ccd3c321c1c72b07f05bfc36eb72b102b3a43da7bfbacf0121" + } + ] }, { "group": "io.smallrye.common", @@ -155,8 +245,14 @@ "version": "1.13.1", "purl": "pkg:maven/io.smallrye.common/smallrye-common-expression@1.13.1", "type": "library", + "bom-ref": "pkg:maven/io.smallrye.common/smallrye-common-expression@1.13.1", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye.common/smallrye-common-expression@1.13.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "e0407b8b7d035aa501807a02c806d450dbe72d58da9fd497f0ab274db34ae699" + } + ] }, { "group": "io.smallrye.common", @@ -164,8 +260,14 @@ "version": "1.13.1", "purl": "pkg:maven/io.smallrye.common/smallrye-common-function@1.13.1", "type": "library", + "bom-ref": "pkg:maven/io.smallrye.common/smallrye-common-function@1.13.1", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye.common/smallrye-common-function@1.13.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "93b16012e6a57df4f32f984a678dc3282adab53cf43205766237ff2c955faa6b" + } + ] }, { "group": "io.smallrye.common", @@ -173,8 +275,14 @@ "version": "1.13.1", "purl": "pkg:maven/io.smallrye.common/smallrye-common-constraint@1.13.1", "type": "library", + "bom-ref": "pkg:maven/io.smallrye.common/smallrye-common-constraint@1.13.1", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye.common/smallrye-common-constraint@1.13.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "1c93cad19cc638b8471fa31fc1c8c6fc48f1d8096351676ce12712f246b54010" + } + ] }, { "group": "org.jboss.logging", @@ -182,8 +290,14 @@ "version": "3.5.0.Final", "purl": "pkg:maven/org.jboss.logging/jboss-logging@3.5.0.Final", "type": "library", + "bom-ref": "pkg:maven/org.jboss.logging/jboss-logging@3.5.0.Final", "scope": "required", - "bom-ref": "pkg:maven/org.jboss.logging/jboss-logging@3.5.0.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "549e1e9180f0ac2d48f7bfca604da808cb1529000ac56e2028fb89d2a840f5ae" + } + ] }, { "group": "io.smallrye.common", @@ -191,8 +305,14 @@ "version": "1.13.1", "purl": "pkg:maven/io.smallrye.common/smallrye-common-classloader@1.13.1", "type": "library", + "bom-ref": "pkg:maven/io.smallrye.common/smallrye-common-classloader@1.13.1", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye.common/smallrye-common-classloader@1.13.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "305af32f28575800967816e5293c86759732c8e04714055eeda31de80d4d9e6c" + } + ] }, { "group": "org.ow2.asm", @@ -200,8 +320,14 @@ "version": "9.3", "purl": "pkg:maven/org.ow2.asm/asm@9.3", "type": "library", + "bom-ref": "pkg:maven/org.ow2.asm/asm@9.3", "scope": "required", - "bom-ref": "pkg:maven/org.ow2.asm/asm@9.3" + "hashes": [ + { + "alg": "SHA-256", + "content": "18551e6bfcf4ff5235dab8c0fd7f37f08ab1c753326dbcbe01f104eb76ac28b9" + } + ] }, { "group": "io.smallrye.config", @@ -209,8 +335,14 @@ "version": "2.12.0", "purl": "pkg:maven/io.smallrye.config/smallrye-config-common@2.12.0", "type": "library", + "bom-ref": "pkg:maven/io.smallrye.config/smallrye-config-common@2.12.0", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye.config/smallrye-config-common@2.12.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "c52879f7a5b99e5eff9dff5356a0f9f62ae6e9c60956f74c7ff0e6c88f2d9338" + } + ] }, { "group": "org.jboss.logmanager", @@ -218,8 +350,14 @@ "version": "1.0.10", "purl": "pkg:maven/org.jboss.logmanager/jboss-logmanager-embedded@1.0.10", "type": "library", + "bom-ref": "pkg:maven/org.jboss.logmanager/jboss-logmanager-embedded@1.0.10", "scope": "required", - "bom-ref": "pkg:maven/org.jboss.logmanager/jboss-logmanager-embedded@1.0.10" + "hashes": [ + { + "alg": "SHA-256", + "content": "25b39888997956807ac167a762931d52b8d3cd07b4394a7b8a60f42de8aee855" + } + ] }, { "group": "org.wildfly.common", @@ -227,8 +365,14 @@ "version": "1.5.4.Final-format-001", "purl": "pkg:maven/org.wildfly.common/wildfly-common@1.5.4.Final-format-001", "type": "library", + "bom-ref": "pkg:maven/org.wildfly.common/wildfly-common@1.5.4.Final-format-001", "scope": "required", - "bom-ref": "pkg:maven/org.wildfly.common/wildfly-common@1.5.4.Final-format-001" + "hashes": [ + { + "alg": "SHA-256", + "content": "0c5989fadb7f0f9f2f7707fa10028ba7eac94e555a5b32f680a4d062c2bcfe9a" + } + ] }, { "group": "org.jboss.logging", @@ -236,8 +380,14 @@ "version": "2.2.1.Final", "purl": "pkg:maven/org.jboss.logging/jboss-logging-annotations@2.2.1.Final", "type": "library", + "bom-ref": "pkg:maven/org.jboss.logging/jboss-logging-annotations@2.2.1.Final", "scope": "required", - "bom-ref": "pkg:maven/org.jboss.logging/jboss-logging-annotations@2.2.1.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "f3d0fca0b72cf53fcab6fd6948a40f80eae5e28bda883ee29a055fd098e47dc8" + } + ] }, { "group": "org.jboss.threads", @@ -245,8 +395,14 @@ "version": "3.4.3.Final", "purl": "pkg:maven/org.jboss.threads/jboss-threads@3.4.3.Final", "type": "library", + "bom-ref": "pkg:maven/org.jboss.threads/jboss-threads@3.4.3.Final", "scope": "required", - "bom-ref": "pkg:maven/org.jboss.threads/jboss-threads@3.4.3.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "ec8d6bbcc85fa84436055bf2809a97889c472ef77a055ed9636e70100f3c7439" + } + ] }, { "group": "org.slf4j", @@ -254,8 +410,14 @@ "version": "1.7.36", "purl": "pkg:maven/org.slf4j/slf4j-api@1.7.36", "type": "library", + "bom-ref": "pkg:maven/org.slf4j/slf4j-api@1.7.36", "scope": "required", - "bom-ref": "pkg:maven/org.slf4j/slf4j-api@1.7.36" + "hashes": [ + { + "alg": "SHA-256", + "content": "c0a772724ba038f0fcdeb34db4f3fb43693f6152101b1e7e7a1ac35a9cb4cec9" + } + ] }, { "group": "org.jboss.slf4j", @@ -263,8 +425,14 @@ "version": "1.2.0.Final", "purl": "pkg:maven/org.jboss.slf4j/slf4j-jboss-logmanager@1.2.0.Final", "type": "library", + "bom-ref": "pkg:maven/org.jboss.slf4j/slf4j-jboss-logmanager@1.2.0.Final", "scope": "required", - "bom-ref": "pkg:maven/org.jboss.slf4j/slf4j-jboss-logmanager@1.2.0.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "8c5cc65839e939694ca1c9b27ff8978d9a79a8a667c3e1ba414db7a221277858" + } + ] }, { "group": "org.graalvm.sdk", @@ -272,8 +440,14 @@ "version": "22.3.0", "purl": "pkg:maven/org.graalvm.sdk/graal-sdk@22.3.0", "type": "library", + "bom-ref": "pkg:maven/org.graalvm.sdk/graal-sdk@22.3.0", "scope": "required", - "bom-ref": "pkg:maven/org.graalvm.sdk/graal-sdk@22.3.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "b297b3cdc2bd9c55cc6ea3648230cf7c5b656be4f85c2291ea08404ffb7aeb0d" + } + ] }, { "group": "io.quarkus", @@ -281,8 +455,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-bootstrap-runner@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-bootstrap-runner@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-bootstrap-runner@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "f573aef29c3fb5d9e1709a560c820c4691983a2414e25f2a1bb806f8d3c0d8f4" + } + ] }, { "group": "io.smallrye.common", @@ -290,8 +470,14 @@ "version": "1.13.1", "purl": "pkg:maven/io.smallrye.common/smallrye-common-io@1.13.1", "type": "library", + "bom-ref": "pkg:maven/io.smallrye.common/smallrye-common-io@1.13.1", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye.common/smallrye-common-io@1.13.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "fe329b6f953d309a1f9e0929d69c60e57e3be2120a60ca1790e6cb0e428d0001" + } + ] }, { "group": "io.github.crac", @@ -299,8 +485,14 @@ "version": "0.1.1", "purl": "pkg:maven/io.github.crac/org-crac@0.1.1", "type": "library", + "bom-ref": "pkg:maven/io.github.crac/org-crac@0.1.1", "scope": "required", - "bom-ref": "pkg:maven/io.github.crac/org-crac@0.1.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "e3332dab2a0fafb59c8f9c3e97af2578c8543577e7c2a8131c98aeb4e9f6446a" + } + ] }, { "group": "io.quarkus", @@ -308,8 +500,14 @@ "version": "0.0.9", "purl": "pkg:maven/io.quarkus/quarkus-fs-util@0.0.9", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-fs-util@0.0.9", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-fs-util@0.0.9" + "hashes": [ + { + "alg": "SHA-256", + "content": "a6e06c973540641496c1e843bc32e0ac5a8a520ba64bc822144e34a48a63ac98" + } + ] }, { "group": "io.quarkus", @@ -317,8 +515,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-agroal@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-agroal@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-agroal@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "373e7e3e0789069ac3b414658fdc8d2e78fa29ed649672443833fd61653e8239" + } + ] }, { "group": "io.quarkus", @@ -326,8 +530,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-arc@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-arc@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-arc@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "fed9cd5b86013b26136317ebe66c77cbb249c2f036d5d0ce3e6e4027f9e86103" + } + ] }, { "group": "io.quarkus.arc", @@ -335,8 +545,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus.arc/arc@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus.arc/arc@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus.arc/arc@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "5d1513ef9ea8aff4cf26919dcfb692a01948074f9aa1f75039389e07e47ebb46" + } + ] }, { "group": "io.smallrye.reactive", @@ -344,8 +560,14 @@ "version": "1.7.0", "purl": "pkg:maven/io.smallrye.reactive/mutiny@1.7.0", "type": "library", + "bom-ref": "pkg:maven/io.smallrye.reactive/mutiny@1.7.0", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye.reactive/mutiny@1.7.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "7b95809b54bfb315f22fc369a417377017f332217fbeed0d19616596ea58e99e" + } + ] }, { "group": "org.reactivestreams", @@ -353,8 +575,14 @@ "version": "1.0.3", "purl": "pkg:maven/org.reactivestreams/reactive-streams@1.0.3", "type": "library", + "bom-ref": "pkg:maven/org.reactivestreams/reactive-streams@1.0.3", "scope": "required", - "bom-ref": "pkg:maven/org.reactivestreams/reactive-streams@1.0.3" + "hashes": [ + { + "alg": "SHA-256", + "content": "cc80acd6a1ad07a28990f997157d729c38f99efccd20158515bdb52d1c50f16c" + } + ] }, { "group": "org.eclipse.microprofile.context-propagation", @@ -362,8 +590,14 @@ "version": "1.3", "purl": "pkg:maven/org.eclipse.microprofile.context-propagation/microprofile-context-propagation-api@1.3", "type": "library", + "bom-ref": "pkg:maven/org.eclipse.microprofile.context-propagation/microprofile-context-propagation-api@1.3", "scope": "required", - "bom-ref": "pkg:maven/org.eclipse.microprofile.context-propagation/microprofile-context-propagation-api@1.3" + "hashes": [ + { + "alg": "SHA-256", + "content": "039a0b83a06108636482d2f9bbbc894ea6c6c0750034be7c486e06bacc559d8c" + } + ] }, { "group": "io.quarkus", @@ -371,8 +605,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-datasource@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-datasource@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-datasource@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "889993db8ee5d85cde8032b7dac65f73b38307d5bf5608a321b56be0f10664f2" + } + ] }, { "group": "io.quarkus", @@ -380,8 +620,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-datasource-common@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-datasource-common@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-datasource-common@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "29771fd757c97a980e79826669d289393b08686e30ecaeb3d39bdd7c227984c6" + } + ] }, { "group": "io.quarkus", @@ -389,8 +635,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-credentials@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-credentials@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-credentials@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "90cf81415e20e4a986745d3210ec610ec3cf158fd5f08d9cb73be6b010b10462" + } + ] }, { "group": "io.quarkus", @@ -398,8 +650,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-narayana-jta@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-narayana-jta@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-narayana-jta@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "1ef954c2c9c885ec215806871643215778c6daeb5a999a55d2ded512db72f881" + } + ] }, { "group": "io.quarkus", @@ -407,8 +665,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-transaction-annotations@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-transaction-annotations@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-transaction-annotations@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "c7a9ab990db0a2572e847141b7bb56f08172e974e5bae5d7ca102e4445dac0b4" + } + ] }, { "group": "io.quarkus", @@ -416,8 +680,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-mutiny@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-mutiny@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-mutiny@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "f7d90078356e39d273c532d305d6e28754187a28efcea4a889597b858e39e355" + } + ] }, { "group": "io.quarkus", @@ -425,8 +695,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-smallrye-context-propagation@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-smallrye-context-propagation@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-smallrye-context-propagation@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "4b57dfcca15bb87b976e0d133991cb095909de81b49a9b93c568b3c0497c4edd" + } + ] }, { "group": "io.smallrye", @@ -434,8 +710,14 @@ "version": "1.2.2", "purl": "pkg:maven/io.smallrye/smallrye-context-propagation@1.2.2", "type": "library", + "bom-ref": "pkg:maven/io.smallrye/smallrye-context-propagation@1.2.2", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye/smallrye-context-propagation@1.2.2" + "hashes": [ + { + "alg": "SHA-256", + "content": "bc1ee770918d8d76b47bc6f47d312f3159e8c698f6673d6c712fe4ce0ec982e8" + } + ] }, { "group": "io.smallrye", @@ -443,8 +725,14 @@ "version": "1.2.2", "purl": "pkg:maven/io.smallrye/smallrye-context-propagation-api@1.2.2", "type": "library", + "bom-ref": "pkg:maven/io.smallrye/smallrye-context-propagation-api@1.2.2", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye/smallrye-context-propagation-api@1.2.2" + "hashes": [ + { + "alg": "SHA-256", + "content": "4d39df66447b05d938c9a6b8eb147d93680987dc1032a2d8c1dcb083710fb79a" + } + ] }, { "group": "io.smallrye", @@ -452,8 +740,14 @@ "version": "1.2.2", "purl": "pkg:maven/io.smallrye/smallrye-context-propagation-storage@1.2.2", "type": "library", + "bom-ref": "pkg:maven/io.smallrye/smallrye-context-propagation-storage@1.2.2", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye/smallrye-context-propagation-storage@1.2.2" + "hashes": [ + { + "alg": "SHA-256", + "content": "1bf3b19038fec5a110a82adb6c2bf8b8dc2234126281a36e423daf50a9e23a39" + } + ] }, { "group": "io.smallrye.reactive", @@ -461,8 +755,14 @@ "version": "1.7.0", "purl": "pkg:maven/io.smallrye.reactive/mutiny-smallrye-context-propagation@1.7.0", "type": "library", + "bom-ref": "pkg:maven/io.smallrye.reactive/mutiny-smallrye-context-propagation@1.7.0", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye.reactive/mutiny-smallrye-context-propagation@1.7.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "67ea7a1aa0d27ffc2d436ad05e745003ddc6d33f0c5dde4507018d6d03e12ed5" + } + ] }, { "group": "io.smallrye", @@ -470,8 +770,14 @@ "version": "1.2.2", "purl": "pkg:maven/io.smallrye/smallrye-context-propagation-jta@1.2.2", "type": "library", + "bom-ref": "pkg:maven/io.smallrye/smallrye-context-propagation-jta@1.2.2", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye/smallrye-context-propagation-jta@1.2.2" + "hashes": [ + { + "alg": "SHA-256", + "content": "6e32035875ad87b392709587a6faff6d8853b38d6a249082134f0822c3898e79" + } + ] }, { "group": "io.smallrye.reactive", @@ -479,8 +785,14 @@ "version": "2.7.0", "purl": "pkg:maven/io.smallrye.reactive/smallrye-reactive-converter-api@2.7.0", "type": "library", + "bom-ref": "pkg:maven/io.smallrye.reactive/smallrye-reactive-converter-api@2.7.0", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye.reactive/smallrye-reactive-converter-api@2.7.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "c604e090dc282423e9084b6339bf9d1cffde53d7d189bf6f50ae4640e162b611" + } + ] }, { "group": "io.smallrye.reactive", @@ -488,8 +800,14 @@ "version": "2.7.0", "purl": "pkg:maven/io.smallrye.reactive/smallrye-reactive-converter-mutiny@2.7.0", "type": "library", + "bom-ref": "pkg:maven/io.smallrye.reactive/smallrye-reactive-converter-mutiny@2.7.0", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye.reactive/smallrye-reactive-converter-mutiny@2.7.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "b01de8b2211277e4f7d03a232752b7dd9cd6d9db9270f0491e1b8e8deb24c16a" + } + ] }, { "group": "org.jboss.narayana.jta", @@ -497,8 +815,14 @@ "version": "5.13.1.Alpha1", "purl": "pkg:maven/org.jboss.narayana.jta/narayana-jta@5.13.1.Alpha1", "type": "library", + "bom-ref": "pkg:maven/org.jboss.narayana.jta/narayana-jta@5.13.1.Alpha1", "scope": "required", - "bom-ref": "pkg:maven/org.jboss.narayana.jta/narayana-jta@5.13.1.Alpha1" + "hashes": [ + { + "alg": "SHA-256", + "content": "3c601dda329f76088be0a0e67a64d3326409fc57ca801ccd129080b14bab6726" + } + ] }, { "group": "org.jboss", @@ -506,8 +830,14 @@ "version": "7.6.1.Final", "purl": "pkg:maven/org.jboss/jboss-transaction-spi@7.6.1.Final", "type": "library", + "bom-ref": "pkg:maven/org.jboss/jboss-transaction-spi@7.6.1.Final", "scope": "required", - "bom-ref": "pkg:maven/org.jboss/jboss-transaction-spi@7.6.1.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "d92fee6cac2a06f468572fde42b64758d8ecb1fcef57825f0d9b8514ba098dd4" + } + ] }, { "group": "org.jboss.spec.javax.resource", @@ -515,8 +845,14 @@ "version": "1.0.0.Final", "purl": "pkg:maven/org.jboss.spec.javax.resource/jboss-connector-api_1.7_spec@1.0.0.Final", "type": "library", + "bom-ref": "pkg:maven/org.jboss.spec.javax.resource/jboss-connector-api_1.7_spec@1.0.0.Final", "scope": "required", - "bom-ref": "pkg:maven/org.jboss.spec.javax.resource/jboss-connector-api_1.7_spec@1.0.0.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "80046bf02c6afd0cc7cb22ee6b7a322833c007f5fa4a953eb833308c7c807592" + } + ] }, { "group": "org.jboss.narayana.jts", @@ -524,8 +860,14 @@ "version": "5.13.1.Alpha1", "purl": "pkg:maven/org.jboss.narayana.jts/narayana-jts-integration@5.13.1.Alpha1", "type": "library", + "bom-ref": "pkg:maven/org.jboss.narayana.jts/narayana-jts-integration@5.13.1.Alpha1", "scope": "required", - "bom-ref": "pkg:maven/org.jboss.narayana.jts/narayana-jts-integration@5.13.1.Alpha1" + "hashes": [ + { + "alg": "SHA-256", + "content": "92411cde8dff5026a9ef0cf26a46bcfd09bce1e208daee49b0d57fabd8352e33" + } + ] }, { "group": "io.agroal", @@ -533,8 +875,14 @@ "version": "1.16", "purl": "pkg:maven/io.agroal/agroal-api@1.16", "type": "library", + "bom-ref": "pkg:maven/io.agroal/agroal-api@1.16", "scope": "required", - "bom-ref": "pkg:maven/io.agroal/agroal-api@1.16" + "hashes": [ + { + "alg": "SHA-256", + "content": "121caa97e838680277dc196354266a3697861238070a235366750f356e226073" + } + ] }, { "group": "io.agroal", @@ -542,8 +890,14 @@ "version": "1.16", "purl": "pkg:maven/io.agroal/agroal-narayana@1.16", "type": "library", + "bom-ref": "pkg:maven/io.agroal/agroal-narayana@1.16", "scope": "required", - "bom-ref": "pkg:maven/io.agroal/agroal-narayana@1.16" + "hashes": [ + { + "alg": "SHA-256", + "content": "27685faad7aab4327103ddbbadf01528a034a67938afd316076a57340421511e" + } + ] }, { "group": "io.agroal", @@ -551,8 +905,14 @@ "version": "1.16", "purl": "pkg:maven/io.agroal/agroal-pool@1.16", "type": "library", + "bom-ref": "pkg:maven/io.agroal/agroal-pool@1.16", "scope": "required", - "bom-ref": "pkg:maven/io.agroal/agroal-pool@1.16" + "hashes": [ + { + "alg": "SHA-256", + "content": "095b8d8424ae92298d3795f619c4a5210026befea210c721df2517cd8d8f8529" + } + ] }, { "group": "org.hibernate", @@ -560,8 +920,14 @@ "version": "5.6.14.Final", "purl": "pkg:maven/org.hibernate/hibernate-core@5.6.14.Final", "type": "library", + "bom-ref": "pkg:maven/org.hibernate/hibernate-core@5.6.14.Final", "scope": "required", - "bom-ref": "pkg:maven/org.hibernate/hibernate-core@5.6.14.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "147319ec25f86ba8f6263601c57cfd98badfea32e6312fee929e8c2207cda5cd" + } + ] }, { "group": "net.bytebuddy", @@ -569,8 +935,14 @@ "version": "1.12.18", "purl": "pkg:maven/net.bytebuddy/byte-buddy@1.12.18", "type": "library", + "bom-ref": "pkg:maven/net.bytebuddy/byte-buddy@1.12.18", "scope": "required", - "bom-ref": "pkg:maven/net.bytebuddy/byte-buddy@1.12.18" + "hashes": [ + { + "alg": "SHA-256", + "content": "dfda1288566e62724c078947c6d6439e5c0150342b5177c8ac160019f1870237" + } + ] }, { "group": "antlr", @@ -578,8 +950,14 @@ "version": "2.7.7", "purl": "pkg:maven/antlr/antlr@2.7.7", "type": "library", + "bom-ref": "pkg:maven/antlr/antlr@2.7.7", "scope": "required", - "bom-ref": "pkg:maven/antlr/antlr@2.7.7" + "hashes": [ + { + "alg": "SHA-256", + "content": "d0c1c8265545cb28554d2131d57a5b50bbba22d138f9610aef4b42bb68270b7e" + } + ] }, { "group": "com.fasterxml", @@ -587,8 +965,14 @@ "version": "1.5.1", "purl": "pkg:maven/com.fasterxml/classmate@1.5.1", "type": "library", + "bom-ref": "pkg:maven/com.fasterxml/classmate@1.5.1", "scope": "required", - "bom-ref": "pkg:maven/com.fasterxml/classmate@1.5.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "9b9186b8fd7ff56a09a1cb35c441d284d914dcda0697337ce600550c0bffad52" + } + ] }, { "group": "org.hibernate.common", @@ -596,8 +980,14 @@ "version": "5.1.2.Final", "purl": "pkg:maven/org.hibernate.common/hibernate-commons-annotations@5.1.2.Final", "type": "library", + "bom-ref": "pkg:maven/org.hibernate.common/hibernate-commons-annotations@5.1.2.Final", "scope": "required", - "bom-ref": "pkg:maven/org.hibernate.common/hibernate-commons-annotations@5.1.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "1fbc8d27ab1039b06f965584d92883cdbfebe843b0f4bc922a45c527daf0a225" + } + ] }, { "group": "org.hibernate", @@ -605,8 +995,14 @@ "version": "5.6.14.Final", "purl": "pkg:maven/org.hibernate/hibernate-graalvm@5.6.14.Final", "type": "library", + "bom-ref": "pkg:maven/org.hibernate/hibernate-graalvm@5.6.14.Final", "scope": "required", - "bom-ref": "pkg:maven/org.hibernate/hibernate-graalvm@5.6.14.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "5bdd2641a33b6e03a155fced61df9f0f6f4b67cbd679077bdb2acae7cbd97b97" + } + ] }, { "group": "org.glassfish.jaxb", @@ -614,8 +1010,14 @@ "version": "2.3.3-b02", "purl": "pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.3-b02", "type": "library", + "bom-ref": "pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.3-b02", "scope": "required", - "bom-ref": "pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.3-b02" + "hashes": [ + { + "alg": "SHA-256", + "content": "526ad93ddebabbb64cbff4447adc32af34b3b38fcd5ce923d5c547febaa397e3" + } + ] }, { "group": "org.glassfish.jaxb", @@ -623,8 +1025,14 @@ "version": "2.3.3-b02", "purl": "pkg:maven/org.glassfish.jaxb/txw2@2.3.3-b02", "type": "library", + "bom-ref": "pkg:maven/org.glassfish.jaxb/txw2@2.3.3-b02", "scope": "required", - "bom-ref": "pkg:maven/org.glassfish.jaxb/txw2@2.3.3-b02" + "hashes": [ + { + "alg": "SHA-256", + "content": "a9608e9e0040fd437374fb263f44330c140ceea49c75e970a4ea7c1be6b75c22" + } + ] }, { "group": "com.sun.istack", @@ -632,8 +1040,14 @@ "version": "3.0.10", "purl": "pkg:maven/com.sun.istack/istack-commons-runtime@3.0.10", "type": "library", + "bom-ref": "pkg:maven/com.sun.istack/istack-commons-runtime@3.0.10", "scope": "required", - "bom-ref": "pkg:maven/com.sun.istack/istack-commons-runtime@3.0.10" + "hashes": [ + { + "alg": "SHA-256", + "content": "3a088e4af8f0656e8ad8e5dce8d122d7eb616cdec7cf3c6550c6308e97bec587" + } + ] }, { "group": "com.sun.activation", @@ -641,8 +1055,14 @@ "version": "1.2.1", "purl": "pkg:maven/com.sun.activation/jakarta.activation@1.2.1", "type": "library", + "bom-ref": "pkg:maven/com.sun.activation/jakarta.activation@1.2.1", "scope": "required", - "bom-ref": "pkg:maven/com.sun.activation/jakarta.activation@1.2.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "b6895348b68b602bf4c272fc3054e7e1cc95a4c691ba11719e48c0f126b6c1e6" + } + ] }, { "group": "org.jboss.spec.javax.xml.bind", @@ -650,8 +1070,14 @@ "version": "2.0.0.Final", "purl": "pkg:maven/org.jboss.spec.javax.xml.bind/jboss-jaxb-api_2.3_spec@2.0.0.Final", "type": "library", + "bom-ref": "pkg:maven/org.jboss.spec.javax.xml.bind/jboss-jaxb-api_2.3_spec@2.0.0.Final", "scope": "required", - "bom-ref": "pkg:maven/org.jboss.spec.javax.xml.bind/jboss-jaxb-api_2.3_spec@2.0.0.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "cee99591d58a9c9110ca9f3319df0c984ef0914b09a580efcb24f75715f7eb53" + } + ] }, { "group": "jakarta.persistence", @@ -659,8 +1085,14 @@ "version": "2.2.3", "purl": "pkg:maven/jakarta.persistence/jakarta.persistence-api@2.2.3", "type": "library", + "bom-ref": "pkg:maven/jakarta.persistence/jakarta.persistence-api@2.2.3", "scope": "required", - "bom-ref": "pkg:maven/jakarta.persistence/jakarta.persistence-api@2.2.3" + "hashes": [ + { + "alg": "SHA-256", + "content": "bb888f15b5493dc5dc89f80d005afcda077d5df61ba0bd34ffef18445840dd27" + } + ] }, { "group": "org.hibernate", @@ -668,8 +1100,14 @@ "version": "0.1.1", "purl": "pkg:maven/org.hibernate/quarkus-local-cache@0.1.1", "type": "library", + "bom-ref": "pkg:maven/org.hibernate/quarkus-local-cache@0.1.1", "scope": "required", - "bom-ref": "pkg:maven/org.hibernate/quarkus-local-cache@0.1.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "b5047f9a20467ef05e80ee6a9c7abfd6ba2894e961e5467e24808aa234c26a24" + } + ] }, { "group": "io.quarkus", @@ -677,8 +1115,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-caffeine@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-caffeine@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-caffeine@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "8ba118ea99bca84a43e856afdc3ed3ce163e9f67b1164c2244ded7d4b98f1d29" + } + ] }, { "group": "com.github.ben-manes.caffeine", @@ -686,8 +1130,14 @@ "version": "2.9.3", "purl": "pkg:maven/com.github.ben-manes.caffeine/caffeine@2.9.3", "type": "library", + "bom-ref": "pkg:maven/com.github.ben-manes.caffeine/caffeine@2.9.3", "scope": "required", - "bom-ref": "pkg:maven/com.github.ben-manes.caffeine/caffeine@2.9.3" + "hashes": [ + { + "alg": "SHA-256", + "content": "d6ddcd4a2a38ac492033978be5c08af5fe2edd2c3b2e73986175af0afa7bb378" + } + ] }, { "group": "com.google.errorprone", @@ -695,8 +1145,14 @@ "version": "2.10.0", "purl": "pkg:maven/com.google.errorprone/error_prone_annotations@2.10.0", "type": "library", + "bom-ref": "pkg:maven/com.google.errorprone/error_prone_annotations@2.10.0", "scope": "required", - "bom-ref": "pkg:maven/com.google.errorprone/error_prone_annotations@2.10.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "7536b424bdd8644db60e72bb3e0b05b4458c822b2d4136715233554dada62b69" + } + ] }, { "group": "io.quarkus", @@ -704,8 +1160,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-resteasy@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-resteasy@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-resteasy@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "e4569c385c1200dfd4144f52f8be1cd3c608d1438425aa596c13268d88a01243" + } + ] }, { "group": "io.quarkus", @@ -713,8 +1175,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-vertx-http@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-vertx-http@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-vertx-http@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "25fe6553700806fa0e9b2cda1946670da6b56a2f76b838b304f87014b686a1ac" + } + ] }, { "group": "io.quarkus", @@ -722,8 +1190,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-security-runtime-spi@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-security-runtime-spi@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-security-runtime-spi@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "efb3779030b9066e502beead9d4317d7e3167966e66846f02778d6ef3f24b051" + } + ] }, { "group": "io.quarkus.security", @@ -731,8 +1205,14 @@ "version": "1.1.4.Final", "purl": "pkg:maven/io.quarkus.security/quarkus-security@1.1.4.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus.security/quarkus-security@1.1.4.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus.security/quarkus-security@1.1.4.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "d2059c5479266f34cf32e736e2098afc061f29acd33bb43c736ac818ca76cb0f" + } + ] }, { "group": "io.smallrye.common", @@ -740,8 +1220,14 @@ "version": "1.13.1", "purl": "pkg:maven/io.smallrye.common/smallrye-common-vertx-context@1.13.1", "type": "library", + "bom-ref": "pkg:maven/io.smallrye.common/smallrye-common-vertx-context@1.13.1", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye.common/smallrye-common-vertx-context@1.13.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "edaf480fd82bc8d7ff2c9020b3d2e0478bfebfa6004b64e8651521201cb81778" + } + ] }, { "group": "io.vertx", @@ -749,8 +1235,14 @@ "version": "4.3.4", "purl": "pkg:maven/io.vertx/vertx-core@4.3.4", "type": "library", + "bom-ref": "pkg:maven/io.vertx/vertx-core@4.3.4", "scope": "required", - "bom-ref": "pkg:maven/io.vertx/vertx-core@4.3.4" + "hashes": [ + { + "alg": "SHA-256", + "content": "b165b53094fec196e9b60de567753e3d45e8c1bef834e7745fb206b9413750ba" + } + ] }, { "group": "io.netty", @@ -758,8 +1250,14 @@ "version": "4.1.82.Final", "purl": "pkg:maven/io.netty/netty-common@4.1.82.Final", "type": "library", + "bom-ref": "pkg:maven/io.netty/netty-common@4.1.82.Final", "scope": "required", - "bom-ref": "pkg:maven/io.netty/netty-common@4.1.82.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "0d7f12d011a9188513d062253b2e14a094b8be0bdf5ad4e1e79d2add1bfc0225" + } + ] }, { "group": "io.netty", @@ -767,8 +1265,14 @@ "version": "4.1.82.Final", "purl": "pkg:maven/io.netty/netty-buffer@4.1.82.Final", "type": "library", + "bom-ref": "pkg:maven/io.netty/netty-buffer@4.1.82.Final", "scope": "required", - "bom-ref": "pkg:maven/io.netty/netty-buffer@4.1.82.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "10a41fc29ad1de58ad024a23da23d544359e1ea81d60655c1a1c9164aa63f7e6" + } + ] }, { "group": "io.netty", @@ -776,8 +1280,14 @@ "version": "4.1.82.Final", "purl": "pkg:maven/io.netty/netty-transport@4.1.82.Final", "type": "library", + "bom-ref": "pkg:maven/io.netty/netty-transport@4.1.82.Final", "scope": "required", - "bom-ref": "pkg:maven/io.netty/netty-transport@4.1.82.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "d53ccc1f4fb77e54a1b4af8035f7727503c4f6ea4ec2d7d9d9bae9374953f3b0" + } + ] }, { "group": "io.netty", @@ -785,8 +1295,14 @@ "version": "4.1.82.Final", "purl": "pkg:maven/io.netty/netty-resolver@4.1.82.Final", "type": "library", + "bom-ref": "pkg:maven/io.netty/netty-resolver@4.1.82.Final", "scope": "required", - "bom-ref": "pkg:maven/io.netty/netty-resolver@4.1.82.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "82751c8e733e39965757117ab240bf1a0293727128f3912dbfc6274f13782635" + } + ] }, { "group": "io.netty", @@ -794,8 +1310,14 @@ "version": "4.1.82.Final", "purl": "pkg:maven/io.netty/netty-handler@4.1.82.Final", "type": "library", + "bom-ref": "pkg:maven/io.netty/netty-handler@4.1.82.Final", "scope": "required", - "bom-ref": "pkg:maven/io.netty/netty-handler@4.1.82.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "35c850f4cdfa1f7be3786de57b465978b0489a74f0f115d1ad529d92f984c801" + } + ] }, { "group": "io.netty", @@ -803,8 +1325,14 @@ "version": "4.1.82.Final", "purl": "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.82.Final", "type": "library", + "bom-ref": "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.82.Final", "scope": "required", - "bom-ref": "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.82.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "52b73a2512ac9e774758e59ff884236c698c8bb3ae14db4bd543c619f3384810" + } + ] }, { "group": "io.netty", @@ -812,8 +1340,14 @@ "version": "4.1.82.Final", "purl": "pkg:maven/io.netty/netty-codec@4.1.82.Final", "type": "library", + "bom-ref": "pkg:maven/io.netty/netty-codec@4.1.82.Final", "scope": "required", - "bom-ref": "pkg:maven/io.netty/netty-codec@4.1.82.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "a1e91db28ce128ad5724fca4925a9bfae42ff1a989ee2e733655824faafa39df" + } + ] }, { "group": "io.netty", @@ -821,8 +1355,14 @@ "version": "4.1.82.Final", "purl": "pkg:maven/io.netty/netty-handler-proxy@4.1.82.Final", "type": "library", + "bom-ref": "pkg:maven/io.netty/netty-handler-proxy@4.1.82.Final", "scope": "required", - "bom-ref": "pkg:maven/io.netty/netty-handler-proxy@4.1.82.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "983abf79f64fe592a1c65fd3482302cd9b6d70e59229c16041463425bf88da1a" + } + ] }, { "group": "io.netty", @@ -830,8 +1370,14 @@ "version": "4.1.82.Final", "purl": "pkg:maven/io.netty/netty-codec-socks@4.1.82.Final", "type": "library", + "bom-ref": "pkg:maven/io.netty/netty-codec-socks@4.1.82.Final", "scope": "required", - "bom-ref": "pkg:maven/io.netty/netty-codec-socks@4.1.82.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "bf72fffd5dd7ae9af89ed91e6540410103c8325e77998e48b497b879952fb6df" + } + ] }, { "group": "io.netty", @@ -839,8 +1385,14 @@ "version": "4.1.82.Final", "purl": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final", "type": "library", + "bom-ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final", "scope": "required", - "bom-ref": "pkg:maven/io.netty/netty-codec-http@4.1.82.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "f637e27a3e199bacc5845d1925b9545ed09feea39b14daf25203a4f99d323217" + } + ] }, { "group": "io.netty", @@ -848,8 +1400,14 @@ "version": "4.1.82.Final", "purl": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final", "type": "library", + "bom-ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final", "scope": "required", - "bom-ref": "pkg:maven/io.netty/netty-codec-http2@4.1.82.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "a98d678aefdf597ff460a57155c2600c421cda190f0e333b1c1cac0690969a9f" + } + ] }, { "group": "io.netty", @@ -857,8 +1415,14 @@ "version": "4.1.82.Final", "purl": "pkg:maven/io.netty/netty-resolver-dns@4.1.82.Final", "type": "library", + "bom-ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.82.Final", "scope": "required", - "bom-ref": "pkg:maven/io.netty/netty-resolver-dns@4.1.82.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "bd2bd64e102733fa0d44c9296fafe6719d159b46e195a69d771edbb12670f2ac" + } + ] }, { "group": "io.netty", @@ -866,8 +1430,14 @@ "version": "4.1.82.Final", "purl": "pkg:maven/io.netty/netty-codec-dns@4.1.82.Final", "type": "library", + "bom-ref": "pkg:maven/io.netty/netty-codec-dns@4.1.82.Final", "scope": "required", - "bom-ref": "pkg:maven/io.netty/netty-codec-dns@4.1.82.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "0777df897344799d318ed8fcff996150eac542b1a2a9149e421e28df2f36cab2" + } + ] }, { "group": "com.fasterxml.jackson.core", @@ -875,8 +1445,14 @@ "version": "2.13.4", "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.4", "type": "library", + "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.4", "scope": "required", - "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.4" + "hashes": [ + { + "alg": "SHA-256", + "content": "a7a57b699e9a41b86efc120f28d7b4f2ae3240535741e03e397dec6fc0a78a2f" + } + ] }, { "group": "io.quarkus", @@ -884,8 +1460,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-vertx-http-dev-console-runtime-spi@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-vertx-http-dev-console-runtime-spi@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-vertx-http-dev-console-runtime-spi@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "33ac5fe3885995561ed7dedbeb8f82956f8ac1e150fcd396263e5469f9f55fe4" + } + ] }, { "group": "io.vertx", @@ -893,8 +1475,14 @@ "version": "4.3.4", "purl": "pkg:maven/io.vertx/vertx-web@4.3.4", "type": "library", + "bom-ref": "pkg:maven/io.vertx/vertx-web@4.3.4", "scope": "required", - "bom-ref": "pkg:maven/io.vertx/vertx-web@4.3.4" + "hashes": [ + { + "alg": "SHA-256", + "content": "60b44da6840972cf6d730279ba5d2b699465a72dad63695787fc4d4bb967a2c1" + } + ] }, { "group": "io.vertx", @@ -902,8 +1490,14 @@ "version": "4.3.4", "purl": "pkg:maven/io.vertx/vertx-web-common@4.3.4", "type": "library", + "bom-ref": "pkg:maven/io.vertx/vertx-web-common@4.3.4", "scope": "required", - "bom-ref": "pkg:maven/io.vertx/vertx-web-common@4.3.4" + "hashes": [ + { + "alg": "SHA-256", + "content": "4c4e90a0751703830a98b747439e23603ae18eeb8b5f523db612ef98030fca07" + } + ] }, { "group": "io.vertx", @@ -911,8 +1505,14 @@ "version": "4.3.4", "purl": "pkg:maven/io.vertx/vertx-auth-common@4.3.4", "type": "library", + "bom-ref": "pkg:maven/io.vertx/vertx-auth-common@4.3.4", "scope": "required", - "bom-ref": "pkg:maven/io.vertx/vertx-auth-common@4.3.4" + "hashes": [ + { + "alg": "SHA-256", + "content": "335c5d772c5db152b64a41891cd15d547baac692d540e93eadc0742cea41c80f" + } + ] }, { "group": "io.vertx", @@ -920,8 +1520,14 @@ "version": "4.3.4", "purl": "pkg:maven/io.vertx/vertx-bridge-common@4.3.4", "type": "library", + "bom-ref": "pkg:maven/io.vertx/vertx-bridge-common@4.3.4", "scope": "required", - "bom-ref": "pkg:maven/io.vertx/vertx-bridge-common@4.3.4" + "hashes": [ + { + "alg": "SHA-256", + "content": "70aa713402bfb59e5a4f90785a699c6e91a311a78e2772af32c00321f7c53f6d" + } + ] }, { "group": "io.quarkus", @@ -929,8 +1535,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-vertx@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-vertx@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-vertx@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "7734fcc25af0688fa4771d33bfabd4c3f250cf41c290483b98a764e6548aecc6" + } + ] }, { "group": "io.quarkus", @@ -938,8 +1550,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-netty@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-netty@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-netty@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "b3f242b64d8991db53fc985b5ab1b7fb797137590a68d3ea364eb929cb90a441" + } + ] }, { "group": "com.aayushatharva.brotli4j", @@ -947,8 +1565,14 @@ "version": "1.7.1", "purl": "pkg:maven/com.aayushatharva.brotli4j/brotli4j@1.7.1", "type": "library", + "bom-ref": "pkg:maven/com.aayushatharva.brotli4j/brotli4j@1.7.1", "scope": "required", - "bom-ref": "pkg:maven/com.aayushatharva.brotli4j/brotli4j@1.7.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "97b9c394fc377ba14640e4dc0c08ebcc7f05ca514f533b944a0509479c8a5ede" + } + ] }, { "group": "io.netty", @@ -956,8 +1580,14 @@ "version": "4.1.82.Final", "purl": "pkg:maven/io.netty/netty-codec-haproxy@4.1.82.Final", "type": "library", + "bom-ref": "pkg:maven/io.netty/netty-codec-haproxy@4.1.82.Final", "scope": "required", - "bom-ref": "pkg:maven/io.netty/netty-codec-haproxy@4.1.82.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "5584dae571f78234be750098887826317ef29e95055f507125390923089db447" + } + ] }, { "group": "io.quarkus", @@ -965,8 +1595,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-vertx-latebound-mdc-provider@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-vertx-latebound-mdc-provider@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-vertx-latebound-mdc-provider@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "403f7eac587da9ab47f3ba1bccffe5e812390a7e8f4415cdf3ff6505940b5001" + } + ] }, { "group": "io.smallrye.reactive", @@ -974,8 +1610,14 @@ "version": "2.27.0", "purl": "pkg:maven/io.smallrye.reactive/smallrye-mutiny-vertx-core@2.27.0", "type": "library", + "bom-ref": "pkg:maven/io.smallrye.reactive/smallrye-mutiny-vertx-core@2.27.0", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye.reactive/smallrye-mutiny-vertx-core@2.27.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "de60bc30dcb6164d8de0301bafd3ddfdc7cc3ce2f424e8ef31345226972c6e73" + } + ] }, { "group": "io.smallrye.reactive", @@ -983,8 +1625,14 @@ "version": "2.27.0", "purl": "pkg:maven/io.smallrye.reactive/smallrye-mutiny-vertx-runtime@2.27.0", "type": "library", + "bom-ref": "pkg:maven/io.smallrye.reactive/smallrye-mutiny-vertx-runtime@2.27.0", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye.reactive/smallrye-mutiny-vertx-runtime@2.27.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "8009b258e3518f5d222db0870ef6454687addd7b09328bfd186f7987090db614" + } + ] }, { "group": "io.smallrye.reactive", @@ -992,8 +1640,14 @@ "version": "2.27.0", "purl": "pkg:maven/io.smallrye.reactive/vertx-mutiny-generator@2.27.0", "type": "library", + "bom-ref": "pkg:maven/io.smallrye.reactive/vertx-mutiny-generator@2.27.0", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye.reactive/vertx-mutiny-generator@2.27.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "afd708bf8cfd65acb76e264bdf9f23435df732fecda078ea7097291c93b3052f" + } + ] }, { "group": "io.vertx", @@ -1001,8 +1655,14 @@ "version": "4.3.4", "purl": "pkg:maven/io.vertx/vertx-codegen@4.3.4", "type": "library", + "bom-ref": "pkg:maven/io.vertx/vertx-codegen@4.3.4", "scope": "required", - "bom-ref": "pkg:maven/io.vertx/vertx-codegen@4.3.4" + "hashes": [ + { + "alg": "SHA-256", + "content": "9d53e2b393abb33c1cbc724e605f234c0ae29a95f1a2886b142a2f176063512b" + } + ] }, { "group": "io.smallrye", @@ -1010,8 +1670,14 @@ "version": "5.5.0", "purl": "pkg:maven/io.smallrye/smallrye-fault-tolerance-vertx@5.5.0", "type": "library", + "bom-ref": "pkg:maven/io.smallrye/smallrye-fault-tolerance-vertx@5.5.0", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye/smallrye-fault-tolerance-vertx@5.5.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "ab3eb26389d9a769627621f0467a6f8d28366adec97342a10b83836bc10f6b8e" + } + ] }, { "group": "io.smallrye.reactive", @@ -1019,8 +1685,14 @@ "version": "2.27.0", "purl": "pkg:maven/io.smallrye.reactive/smallrye-mutiny-vertx-web@2.27.0", "type": "library", + "bom-ref": "pkg:maven/io.smallrye.reactive/smallrye-mutiny-vertx-web@2.27.0", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye.reactive/smallrye-mutiny-vertx-web@2.27.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "5bcd310b30d73903631adf505ee85a5c6fba249bebe9e80a0f116d8644bcc02d" + } + ] }, { "group": "io.smallrye.reactive", @@ -1028,8 +1700,14 @@ "version": "2.27.0", "purl": "pkg:maven/io.smallrye.reactive/smallrye-mutiny-vertx-web-common@2.27.0", "type": "library", + "bom-ref": "pkg:maven/io.smallrye.reactive/smallrye-mutiny-vertx-web-common@2.27.0", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye.reactive/smallrye-mutiny-vertx-web-common@2.27.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "5557378d88617205234d74cf77abb30e3364299ca9055c6346c247cdf18a83b9" + } + ] }, { "group": "io.smallrye.reactive", @@ -1037,8 +1715,14 @@ "version": "2.27.0", "purl": "pkg:maven/io.smallrye.reactive/smallrye-mutiny-vertx-auth-common@2.27.0", "type": "library", + "bom-ref": "pkg:maven/io.smallrye.reactive/smallrye-mutiny-vertx-auth-common@2.27.0", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye.reactive/smallrye-mutiny-vertx-auth-common@2.27.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "451fdc0bc5e4287f1bcf641cc15e4a31c6aca7d97403e16f9bc2105a55d8032a" + } + ] }, { "group": "io.smallrye.reactive", @@ -1046,8 +1730,14 @@ "version": "2.27.0", "purl": "pkg:maven/io.smallrye.reactive/smallrye-mutiny-vertx-bridge-common@2.27.0", "type": "library", + "bom-ref": "pkg:maven/io.smallrye.reactive/smallrye-mutiny-vertx-bridge-common@2.27.0", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye.reactive/smallrye-mutiny-vertx-bridge-common@2.27.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "338d3c77a5a75115c5cf557c43866244b73cdd59620602dc7f0941d71a74fa76" + } + ] }, { "group": "io.smallrye.reactive", @@ -1055,8 +1745,14 @@ "version": "2.27.0", "purl": "pkg:maven/io.smallrye.reactive/smallrye-mutiny-vertx-uri-template@2.27.0", "type": "library", + "bom-ref": "pkg:maven/io.smallrye.reactive/smallrye-mutiny-vertx-uri-template@2.27.0", "scope": "required", - "bom-ref": "pkg:maven/io.smallrye.reactive/smallrye-mutiny-vertx-uri-template@2.27.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "2281c385d91c8c6531ad1a91a3a30064592ec7b713391adc9a1d47859d02ad02" + } + ] }, { "group": "io.vertx", @@ -1064,8 +1760,14 @@ "version": "4.3.4", "purl": "pkg:maven/io.vertx/vertx-uri-template@4.3.4", "type": "library", + "bom-ref": "pkg:maven/io.vertx/vertx-uri-template@4.3.4", "scope": "required", - "bom-ref": "pkg:maven/io.vertx/vertx-uri-template@4.3.4" + "hashes": [ + { + "alg": "SHA-256", + "content": "694b9f0c2c0f831a6bf2924e4708fa4b3b23c6545b7ec89d47b3dde515c07c4e" + } + ] }, { "group": "io.quarkus", @@ -1073,8 +1775,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-resteasy-server-common@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-resteasy-server-common@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-resteasy-server-common@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "4cb037068cb526e5a473a9e36b87ceea8370a7f2c6cb1478405b3bc76a023ce5" + } + ] }, { "group": "io.quarkus", @@ -1082,8 +1790,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-resteasy-common@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-resteasy-common@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-resteasy-common@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "753d3189b66ba46828ce405892849ca416466a828d0ad83cee2585aee073185f" + } + ] }, { "group": "org.jboss.resteasy", @@ -1091,8 +1805,14 @@ "version": "4.7.7.Final", "purl": "pkg:maven/org.jboss.resteasy/resteasy-core@4.7.7.Final", "type": "library", + "bom-ref": "pkg:maven/org.jboss.resteasy/resteasy-core@4.7.7.Final", "scope": "required", - "bom-ref": "pkg:maven/org.jboss.resteasy/resteasy-core@4.7.7.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "c7c39a1fa4794fe91f07a10f69f2d14244efb76f7360070beaba658b94222b57" + } + ] }, { "group": "org.jboss.spec.javax.annotation", @@ -1100,8 +1820,14 @@ "version": "2.0.1.Final", "purl": "pkg:maven/org.jboss.spec.javax.annotation/jboss-annotations-api_1.3_spec@2.0.1.Final", "type": "library", + "bom-ref": "pkg:maven/org.jboss.spec.javax.annotation/jboss-annotations-api_1.3_spec@2.0.1.Final", "scope": "required", - "bom-ref": "pkg:maven/org.jboss.spec.javax.annotation/jboss-annotations-api_1.3_spec@2.0.1.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "3e8a73afd02919e1b2a6bace5ed5d9af666eb47a79c6015c5fe6b72ba0787dc7" + } + ] }, { "group": "org.jboss.spec.javax.ws.rs", @@ -1109,8 +1835,14 @@ "version": "2.0.1.Final", "purl": "pkg:maven/org.jboss.spec.javax.ws.rs/jboss-jaxrs-api_2.1_spec@2.0.1.Final", "type": "library", + "bom-ref": "pkg:maven/org.jboss.spec.javax.ws.rs/jboss-jaxrs-api_2.1_spec@2.0.1.Final", "scope": "required", - "bom-ref": "pkg:maven/org.jboss.spec.javax.ws.rs/jboss-jaxrs-api_2.1_spec@2.0.1.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "2d490bccbe4ac31117a2194f3345cf43152867b9f51311746b6ac0dca174a4d7" + } + ] }, { "group": "org.jboss.resteasy", @@ -1118,8 +1850,14 @@ "version": "4.7.7.Final", "purl": "pkg:maven/org.jboss.resteasy/resteasy-core-spi@4.7.7.Final", "type": "library", + "bom-ref": "pkg:maven/org.jboss.resteasy/resteasy-core-spi@4.7.7.Final", "scope": "required", - "bom-ref": "pkg:maven/org.jboss.resteasy/resteasy-core-spi@4.7.7.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "a398d037a931161213320c89c94f643127e88c6c68d2876ad9e58392cb6de60d" + } + ] }, { "group": "jakarta.validation", @@ -1127,8 +1865,14 @@ "version": "2.0.2", "purl": "pkg:maven/jakarta.validation/jakarta.validation-api@2.0.2", "type": "library", + "bom-ref": "pkg:maven/jakarta.validation/jakarta.validation-api@2.0.2", "scope": "required", - "bom-ref": "pkg:maven/jakarta.validation/jakarta.validation-api@2.0.2" + "hashes": [ + { + "alg": "SHA-256", + "content": "a8c2b114508ccd20562239505b9732776d3371aaea137b265a0548f456475d06" + } + ] }, { "group": "com.ibm.async", @@ -1136,8 +1880,14 @@ "version": "0.1.0", "purl": "pkg:maven/com.ibm.async/asyncutil@0.1.0", "type": "library", + "bom-ref": "pkg:maven/com.ibm.async/asyncutil@0.1.0", "scope": "required", - "bom-ref": "pkg:maven/com.ibm.async/asyncutil@0.1.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "c565fd5ffe7c8d386d0453723c088cdd572d8351dd2ade703fcc44c45ccd9de7" + } + ] }, { "group": "io.quarkus", @@ -1145,8 +1895,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-resteasy-jackson@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-resteasy-jackson@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-resteasy-jackson@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "dd61825bd9a8c2f962121098870239a0200b2d71fe004b00fb572414b40d422f" + } + ] }, { "group": "io.quarkus", @@ -1154,8 +1910,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-jackson@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-jackson@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-jackson@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "da11fba8adceb5f3574a5021a439e382d77ef36ce9196bf926f74f8c27169de5" + } + ] }, { "group": "com.fasterxml.jackson.core", @@ -1163,8 +1925,14 @@ "version": "2.13.4.2", "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.4.2", "type": "library", + "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.4.2", "scope": "required", - "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.4.2" + "hashes": [ + { + "alg": "SHA-256", + "content": "374081eccd90e07fd882528c60bcf3599ba315cef65d6af2a57f1d02197a76dc" + } + ] }, { "group": "com.fasterxml.jackson.core", @@ -1172,8 +1940,14 @@ "version": "2.13.4", "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.13.4", "type": "library", + "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.13.4", "scope": "required", - "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.13.4" + "hashes": [ + { + "alg": "SHA-256", + "content": "9716a4ce686df5e735198309be0501d033ffc2ed0c163c70d48cbe1ef4e89387" + } + ] }, { "group": "com.fasterxml.jackson.datatype", @@ -1181,8 +1955,14 @@ "version": "2.13.4", "purl": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.13.4", "type": "library", + "bom-ref": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.13.4", "scope": "required", - "bom-ref": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.13.4" + "hashes": [ + { + "alg": "SHA-256", + "content": "961af7afc842537fc3163a7f287321fe4af465ac3c932151a04734d9b0c91e7a" + } + ] }, { "group": "com.fasterxml.jackson.datatype", @@ -1190,8 +1970,14 @@ "version": "2.13.4", "purl": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.13.4", "type": "library", + "bom-ref": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.13.4", "scope": "required", - "bom-ref": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.13.4" + "hashes": [ + { + "alg": "SHA-256", + "content": "77fca4491d56907277d7a7df21e9d12d4843698cac7cf2a6a7b510a2f29afbad" + } + ] }, { "group": "com.fasterxml.jackson.module", @@ -1199,8 +1985,14 @@ "version": "2.13.4", "purl": "pkg:maven/com.fasterxml.jackson.module/jackson-module-parameter-names@2.13.4", "type": "library", + "bom-ref": "pkg:maven/com.fasterxml.jackson.module/jackson-module-parameter-names@2.13.4", "scope": "required", - "bom-ref": "pkg:maven/com.fasterxml.jackson.module/jackson-module-parameter-names@2.13.4" + "hashes": [ + { + "alg": "SHA-256", + "content": "0131ec78c25d8381c950b32aa03c01c722cb5cbfe0247e2db7f6a88ec7729bd0" + } + ] }, { "group": "org.jboss.resteasy", @@ -1208,8 +2000,14 @@ "version": "4.7.7.Final", "purl": "pkg:maven/org.jboss.resteasy/resteasy-jackson2-provider@4.7.7.Final", "type": "library", + "bom-ref": "pkg:maven/org.jboss.resteasy/resteasy-jackson2-provider@4.7.7.Final", "scope": "required", - "bom-ref": "pkg:maven/org.jboss.resteasy/resteasy-jackson2-provider@4.7.7.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "f44560025fb9e1e28d13a3918d54c8d3c033342d2d5ae50709d7916066f44ff3" + } + ] }, { "group": "com.fasterxml.jackson.jaxrs", @@ -1217,8 +2015,14 @@ "version": "2.12.6", "purl": "pkg:maven/com.fasterxml.jackson.jaxrs/jackson-jaxrs-json-provider@2.12.6", "type": "library", + "bom-ref": "pkg:maven/com.fasterxml.jackson.jaxrs/jackson-jaxrs-json-provider@2.12.6", "scope": "required", - "bom-ref": "pkg:maven/com.fasterxml.jackson.jaxrs/jackson-jaxrs-json-provider@2.12.6" + "hashes": [ + { + "alg": "SHA-256", + "content": "f019abf2a909433b2d947213bb57593e7bd74c6781aa36a37afd82bd99eaa102" + } + ] }, { "group": "com.fasterxml.jackson.jaxrs", @@ -1226,8 +2030,14 @@ "version": "2.12.6", "purl": "pkg:maven/com.fasterxml.jackson.jaxrs/jackson-jaxrs-base@2.12.6", "type": "library", + "bom-ref": "pkg:maven/com.fasterxml.jackson.jaxrs/jackson-jaxrs-base@2.12.6", "scope": "required", - "bom-ref": "pkg:maven/com.fasterxml.jackson.jaxrs/jackson-jaxrs-base@2.12.6" + "hashes": [ + { + "alg": "SHA-256", + "content": "1401556fa4fb0b32c403087e39a3ef9cd222599f329d85ee929d881d105fb4da" + } + ] }, { "group": "com.fasterxml.jackson.module", @@ -1235,8 +2045,14 @@ "version": "2.12.6", "purl": "pkg:maven/com.fasterxml.jackson.module/jackson-module-jaxb-annotations@2.12.6", "type": "library", + "bom-ref": "pkg:maven/com.fasterxml.jackson.module/jackson-module-jaxb-annotations@2.12.6", "scope": "required", - "bom-ref": "pkg:maven/com.fasterxml.jackson.module/jackson-module-jaxb-annotations@2.12.6" + "hashes": [ + { + "alg": "SHA-256", + "content": "344630a96f59de033ea33f982db15e1abbaf957adc3d95cb29262b6fa77e17c0" + } + ] }, { "group": "com.github.java-json-tools", @@ -1244,8 +2060,14 @@ "version": "1.13", "purl": "pkg:maven/com.github.java-json-tools/json-patch@1.13", "type": "library", + "bom-ref": "pkg:maven/com.github.java-json-tools/json-patch@1.13", "scope": "required", - "bom-ref": "pkg:maven/com.github.java-json-tools/json-patch@1.13" + "hashes": [ + { + "alg": "SHA-256", + "content": "3ff3baf1ba186fdcf33233cb30fc9930c5c77e86cb44c6791865ab377e447bfe" + } + ] }, { "group": "com.github.java-json-tools", @@ -1253,8 +2075,14 @@ "version": "1.2", "purl": "pkg:maven/com.github.java-json-tools/msg-simple@1.2", "type": "library", + "bom-ref": "pkg:maven/com.github.java-json-tools/msg-simple@1.2", "scope": "required", - "bom-ref": "pkg:maven/com.github.java-json-tools/msg-simple@1.2" + "hashes": [ + { + "alg": "SHA-256", + "content": "e6e80ab37a2566fe7847b7090b9e44f436f615b322c97d204ac71f727e119487" + } + ] }, { "group": "com.github.java-json-tools", @@ -1262,8 +2090,14 @@ "version": "1.3", "purl": "pkg:maven/com.github.java-json-tools/btf@1.3", "type": "library", + "bom-ref": "pkg:maven/com.github.java-json-tools/btf@1.3", "scope": "required", - "bom-ref": "pkg:maven/com.github.java-json-tools/btf@1.3" + "hashes": [ + { + "alg": "SHA-256", + "content": "f441a5d0aecc2027bd5b9e4bce9a60b8b56a79e5eac2eff8df0e03182e44cac2" + } + ] }, { "group": "com.github.java-json-tools", @@ -1271,8 +2105,14 @@ "version": "2.0", "purl": "pkg:maven/com.github.java-json-tools/jackson-coreutils@2.0", "type": "library", + "bom-ref": "pkg:maven/com.github.java-json-tools/jackson-coreutils@2.0", "scope": "required", - "bom-ref": "pkg:maven/com.github.java-json-tools/jackson-coreutils@2.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "4d19c88dc43613b28ed18392cff7a0c9c2f6a59473ffba5e486c2f403a8c2f6f" + } + ] }, { "group": "io.quarkus", @@ -1280,8 +2120,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-jdbc-postgresql@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-jdbc-postgresql@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-jdbc-postgresql@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "a1af9f5bef767f20b966430723412779f71275106e66c4e80dad67d0874881d6" + } + ] }, { "group": "org.postgresql", @@ -1289,8 +2135,14 @@ "version": "42.5.0", "purl": "pkg:maven/org.postgresql/postgresql@42.5.0", "type": "library", + "bom-ref": "pkg:maven/org.postgresql/postgresql@42.5.0", "scope": "required", - "bom-ref": "pkg:maven/org.postgresql/postgresql@42.5.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "de729a946b7210ee58cee16a0db68018b1b619ec66f4802ecb41a54d56640b2b" + } + ] }, { "group": "io.quarkus", @@ -1298,8 +2150,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-kubernetes-service-binding@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-kubernetes-service-binding@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-kubernetes-service-binding@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "33fe80f8a1666b04c4ffa621d46f3b7fbb6af343194db24e81d1ffb9065bb0b6" + } + ] }, { "group": "io.quarkus", @@ -1307,8 +2165,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-container-image-docker@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-container-image-docker@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-container-image-docker@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "340cc17319511435110f74a594c065fb8e09b4cd054054df810bbe0ff7754e16" + } + ] }, { "group": "io.quarkus", @@ -1316,8 +2180,14 @@ "version": "2.13.5.Final", "purl": "pkg:maven/io.quarkus/quarkus-container-image@2.13.5.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-container-image@2.13.5.Final", "scope": "required", - "bom-ref": "pkg:maven/io.quarkus/quarkus-container-image@2.13.5.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "2283aaad3ea757907383a693d9981e49f167021a6655b41a6761b7f39f6d848c" + } + ] }, { "group": "io.quarkus", @@ -1325,8 +2195,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-hibernate-orm-deployment@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-hibernate-orm-deployment@2.0.2.Final", "scope": "optional", - "bom-ref": "pkg:maven/io.quarkus/quarkus-hibernate-orm-deployment@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "dcdd842c6024cbc027f0e9a5374a84461243343a83c295192e6dc93d10d873d9" + } + ] }, { "group": "io.quarkus", @@ -1334,8 +2210,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-core-deployment@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-core-deployment@2.0.2.Final", "scope": "optional", - "bom-ref": "pkg:maven/io.quarkus/quarkus-core-deployment@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "8cda4e5ee59a41566f9c5ebafdece3c9771ae0f2b115247bcdd0256e6140d7be" + } + ] }, { "group": "org.aesh", @@ -1343,8 +2225,14 @@ "version": "2.1", "purl": "pkg:maven/org.aesh/readline@2.1", "type": "library", + "bom-ref": "pkg:maven/org.aesh/readline@2.1", "scope": "optional", - "bom-ref": "pkg:maven/org.aesh/readline@2.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "2cd72dc7c8327dde309770d348c53b9eb961f685d201074d936d83e5bb9461da" + } + ] }, { "group": "org.fusesource.jansi", @@ -1352,8 +2240,14 @@ "version": "1.18", "purl": "pkg:maven/org.fusesource.jansi/jansi@1.18", "type": "library", + "bom-ref": "pkg:maven/org.fusesource.jansi/jansi@1.18", "scope": "optional", - "bom-ref": "pkg:maven/org.fusesource.jansi/jansi@1.18" + "hashes": [ + { + "alg": "SHA-256", + "content": "0dc7dd24f8c8e361f1d839fd930a13b384376d45aa66766927070f0d0d9ca42e" + } + ] }, { "group": "org.apache.commons", @@ -1361,8 +2255,14 @@ "version": "3.12.0", "purl": "pkg:maven/org.apache.commons/commons-lang3@3.12.0", "type": "library", + "bom-ref": "pkg:maven/org.apache.commons/commons-lang3@3.12.0", "scope": "optional", - "bom-ref": "pkg:maven/org.apache.commons/commons-lang3@3.12.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "75d06cb0f9b85ba1fad7f3da0f3c35306a102d6cbfce3f998d8315ccacfc3012" + } + ] }, { "group": "io.quarkus.gizmo", @@ -1370,8 +2270,14 @@ "version": "1.0.9.Final", "purl": "pkg:maven/io.quarkus.gizmo/gizmo@1.0.9.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus.gizmo/gizmo@1.0.9.Final", "scope": "optional", - "bom-ref": "pkg:maven/io.quarkus.gizmo/gizmo@1.0.9.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "aaf4ed4d511db297fffb49d292f6927d79d6dc35ce6ee48d45178c487f5030d0" + } + ] }, { "group": "org.ow2.asm", @@ -1379,8 +2285,14 @@ "version": "9.1", "purl": "pkg:maven/org.ow2.asm/asm-util@9.1", "type": "library", + "bom-ref": "pkg:maven/org.ow2.asm/asm-util@9.1", "scope": "optional", - "bom-ref": "pkg:maven/org.ow2.asm/asm-util@9.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "537baffb3a79453e148081685f9915de7be1fd239e221db6dd91cf2001671310" + } + ] }, { "group": "org.ow2.asm", @@ -1388,8 +2300,14 @@ "version": "9.1", "purl": "pkg:maven/org.ow2.asm/asm-tree@9.1", "type": "library", + "bom-ref": "pkg:maven/org.ow2.asm/asm-tree@9.1", "scope": "optional", - "bom-ref": "pkg:maven/org.ow2.asm/asm-tree@9.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "a09d7a940c53c26c0067b33ca0358d330cfa9da3c426d04e86c07f35d406241c" + } + ] }, { "group": "org.ow2.asm", @@ -1397,8 +2315,14 @@ "version": "9.1", "purl": "pkg:maven/org.ow2.asm/asm-analysis@9.1", "type": "library", + "bom-ref": "pkg:maven/org.ow2.asm/asm-analysis@9.1", "scope": "optional", - "bom-ref": "pkg:maven/org.ow2.asm/asm-analysis@9.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "f45548ccb5a04167749d372c3faf2caa97a5c42b6e8d204705d5342a0b68d672" + } + ] }, { "group": "org.jboss", @@ -1406,8 +2330,14 @@ "version": "2.3.0.Final", "purl": "pkg:maven/org.jboss/jandex@2.3.0.Final", "type": "library", + "bom-ref": "pkg:maven/org.jboss/jandex@2.3.0.Final", "scope": "optional", - "bom-ref": "pkg:maven/org.jboss/jandex@2.3.0.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "6f800e144c7786e8d981cc7d2797981007482215d91deb52a21979d5aa9252a1" + } + ] }, { "group": "io.quarkus", @@ -1415,8 +2345,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-class-change-agent@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-class-change-agent@2.0.2.Final", "scope": "optional", - "bom-ref": "pkg:maven/io.quarkus/quarkus-class-change-agent@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "5156efa455261c2479c6e4b11cb6227763a2366d517d1bdf1bc297216984a958" + } + ] }, { "group": "io.quarkus", @@ -1424,8 +2360,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-bootstrap-core@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-bootstrap-core@2.0.2.Final", "scope": "optional", - "bom-ref": "pkg:maven/io.quarkus/quarkus-bootstrap-core@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "52ec7ee32ee3ba500822cebdcb10c4bfdabe021fd2af35e9b0db75ad07ee6a90" + } + ] }, { "group": "io.quarkus", @@ -1433,8 +2375,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-bootstrap-app-model@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-bootstrap-app-model@2.0.2.Final", "scope": "optional", - "bom-ref": "pkg:maven/io.quarkus/quarkus-bootstrap-app-model@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "a644bad59e34e107e9e2a834a93bfa43ce24224fc76f4170f30167e814c8dfff" + } + ] }, { "group": "io.quarkus", @@ -1442,8 +2390,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-bootstrap-maven-resolver@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-bootstrap-maven-resolver@2.0.2.Final", "scope": "optional", - "bom-ref": "pkg:maven/io.quarkus/quarkus-bootstrap-maven-resolver@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "e57278f946f685bd6ca9707b9f63df5de72e27912591107b1f4a01ffe7190e58" + } + ] }, { "group": "org.apache.maven", @@ -1451,8 +2405,14 @@ "version": "3.8.1", "purl": "pkg:maven/org.apache.maven/maven-embedder@3.8.1", "type": "library", + "bom-ref": "pkg:maven/org.apache.maven/maven-embedder@3.8.1", "scope": "optional", - "bom-ref": "pkg:maven/org.apache.maven/maven-embedder@3.8.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "c68d9d9e6724a83f00f359c7095cba127cc46ed0b7b0534379aa7363c290d26c" + } + ] }, { "group": "org.apache.maven", @@ -1460,8 +2420,14 @@ "version": "3.8.1", "purl": "pkg:maven/org.apache.maven/maven-settings@3.8.1", "type": "library", + "bom-ref": "pkg:maven/org.apache.maven/maven-settings@3.8.1", "scope": "optional", - "bom-ref": "pkg:maven/org.apache.maven/maven-settings@3.8.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "0803ee5e8c795d39ec5f80f438fca25333d36a03899802e6dacce22fe8158a1b" + } + ] }, { "group": "org.codehaus.plexus", @@ -1469,8 +2435,14 @@ "version": "3.3.0", "purl": "pkg:maven/org.codehaus.plexus/plexus-utils@3.3.0", "type": "library", + "bom-ref": "pkg:maven/org.codehaus.plexus/plexus-utils@3.3.0", "scope": "optional", - "bom-ref": "pkg:maven/org.codehaus.plexus/plexus-utils@3.3.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "cfebf23a44d7bb8e5947c9f362f8538fc363da422afa6649596732e134c338ab" + } + ] }, { "group": "org.apache.maven", @@ -1478,8 +2450,14 @@ "version": "3.8.1", "purl": "pkg:maven/org.apache.maven/maven-settings-builder@3.8.1", "type": "library", + "bom-ref": "pkg:maven/org.apache.maven/maven-settings-builder@3.8.1", "scope": "optional", - "bom-ref": "pkg:maven/org.apache.maven/maven-settings-builder@3.8.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "4a5d417cec132243dfdb9572742c001cbf265da44e794e912b4578500439fd0c" + } + ] }, { "group": "org.apache.maven", @@ -1487,8 +2465,14 @@ "version": "3.8.1", "purl": "pkg:maven/org.apache.maven/maven-builder-support@3.8.1", "type": "library", + "bom-ref": "pkg:maven/org.apache.maven/maven-builder-support@3.8.1", "scope": "optional", - "bom-ref": "pkg:maven/org.apache.maven/maven-builder-support@3.8.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "1af4ec512b2675952af66164a610bca043a62ddfceea10d082a38dc4b4974e38" + } + ] }, { "group": "org.codehaus.plexus", @@ -1496,8 +2480,14 @@ "version": "1.25", "purl": "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.25", "type": "library", + "bom-ref": "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.25", "scope": "optional", - "bom-ref": "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.25" + "hashes": [ + { + "alg": "SHA-256", + "content": "e80ac909af53b689563a2431af9d53e6ec5c82caf5b32a11c029fca18884fc82" + } + ] }, { "group": "org.sonatype.plexus", @@ -1505,8 +2495,14 @@ "version": "1.4", "purl": "pkg:maven/org.sonatype.plexus/plexus-sec-dispatcher@1.4", "type": "library", + "bom-ref": "pkg:maven/org.sonatype.plexus/plexus-sec-dispatcher@1.4", "scope": "optional", - "bom-ref": "pkg:maven/org.sonatype.plexus/plexus-sec-dispatcher@1.4" + "hashes": [ + { + "alg": "SHA-256", + "content": "a652bc8bc584d8de8ae6a2b50f00f248a0230e048062abb6e73bac4d07ad84af" + } + ] }, { "group": "org.sonatype.plexus", @@ -1514,8 +2510,14 @@ "version": "1.4", "purl": "pkg:maven/org.sonatype.plexus/plexus-cipher@1.4", "type": "library", + "bom-ref": "pkg:maven/org.sonatype.plexus/plexus-cipher@1.4", "scope": "optional", - "bom-ref": "pkg:maven/org.sonatype.plexus/plexus-cipher@1.4" + "hashes": [ + { + "alg": "SHA-256", + "content": "633d1db3235958cf69a4db38c7a279dced8714666bf0d28073c32229a2718837" + } + ] }, { "group": "org.apache.maven", @@ -1523,8 +2525,14 @@ "version": "3.8.1", "purl": "pkg:maven/org.apache.maven/maven-core@3.8.1", "type": "library", + "bom-ref": "pkg:maven/org.apache.maven/maven-core@3.8.1", "scope": "optional", - "bom-ref": "pkg:maven/org.apache.maven/maven-core@3.8.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "635918aa4738430f81c4dec7c56998f6bd20696aad81148410dd6a823b74b7a3" + } + ] }, { "group": "org.apache.maven", @@ -1532,8 +2540,14 @@ "version": "3.8.1", "purl": "pkg:maven/org.apache.maven/maven-model@3.8.1", "type": "library", + "bom-ref": "pkg:maven/org.apache.maven/maven-model@3.8.1", "scope": "optional", - "bom-ref": "pkg:maven/org.apache.maven/maven-model@3.8.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "23dc00a1ebfd1bd1dbb9ebb4446572a6ba804b5252d7cba3e99a5c2fe9cd494b" + } + ] }, { "group": "org.apache.maven", @@ -1541,8 +2555,14 @@ "version": "3.8.1", "purl": "pkg:maven/org.apache.maven/maven-repository-metadata@3.8.1", "type": "library", + "bom-ref": "pkg:maven/org.apache.maven/maven-repository-metadata@3.8.1", "scope": "optional", - "bom-ref": "pkg:maven/org.apache.maven/maven-repository-metadata@3.8.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "0d92468de4cff3464f956cdd6044c717d1ccddf7b5fd53d90184dfa2eb86b381" + } + ] }, { "group": "org.apache.maven", @@ -1550,8 +2570,14 @@ "version": "3.8.1", "purl": "pkg:maven/org.apache.maven/maven-artifact@3.8.1", "type": "library", + "bom-ref": "pkg:maven/org.apache.maven/maven-artifact@3.8.1", "scope": "optional", - "bom-ref": "pkg:maven/org.apache.maven/maven-artifact@3.8.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "fd6855903809b4e77002a7a9e60aa6975bd9046e07af215a6d2d15c60ec3f427" + } + ] }, { "group": "org.apache.maven", @@ -1559,8 +2585,14 @@ "version": "3.8.1", "purl": "pkg:maven/org.apache.maven/maven-plugin-api@3.8.1", "type": "library", + "bom-ref": "pkg:maven/org.apache.maven/maven-plugin-api@3.8.1", "scope": "optional", - "bom-ref": "pkg:maven/org.apache.maven/maven-plugin-api@3.8.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "fb89f33cc2154de9cafae1bc2bce23f2784ff1f88ec0f654bf3efb09d6a63928" + } + ] }, { "group": "org.eclipse.sisu", @@ -1568,8 +2600,14 @@ "version": "0.3.4", "purl": "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.3.4", "type": "library", + "bom-ref": "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.3.4", "scope": "optional", - "bom-ref": "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.3.4" + "hashes": [ + { + "alg": "SHA-256", + "content": "892dfcf9c0ab795cad559b5ff081f005a7cc13834bece92e4e6fe1bc619d83a0" + } + ] }, { "group": "org.codehaus.plexus", @@ -1577,8 +2615,14 @@ "version": "2.1.0", "purl": "pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0", "type": "library", + "bom-ref": "pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0", "scope": "optional", - "bom-ref": "pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "0221fa6eecf3f22f70bc4789a437e8971a37285d40af43ab0be0a69dc2fecba8" + } + ] }, { "group": "org.codehaus.plexus", @@ -1586,8 +2630,14 @@ "version": "2.6.0", "purl": "pkg:maven/org.codehaus.plexus/plexus-classworlds@2.6.0", "type": "library", + "bom-ref": "pkg:maven/org.codehaus.plexus/plexus-classworlds@2.6.0", "scope": "optional", - "bom-ref": "pkg:maven/org.codehaus.plexus/plexus-classworlds@2.6.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "0d458f6ef51992b68f3f67bcd2867f6231135e0ed885a94bd48e5c36d480a9b7" + } + ] }, { "group": "org.apache.maven", @@ -1595,8 +2645,14 @@ "version": "3.8.1", "purl": "pkg:maven/org.apache.maven/maven-model-builder@3.8.1", "type": "library", + "bom-ref": "pkg:maven/org.apache.maven/maven-model-builder@3.8.1", "scope": "optional", - "bom-ref": "pkg:maven/org.apache.maven/maven-model-builder@3.8.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "753ae05791ea0517c042fd233c1af2db124db7b48239925b56cab73f2ac56d5d" + } + ] }, { "group": "org.apache.maven", @@ -1604,8 +2660,14 @@ "version": "3.8.1", "purl": "pkg:maven/org.apache.maven/maven-resolver-provider@3.8.1", "type": "library", + "bom-ref": "pkg:maven/org.apache.maven/maven-resolver-provider@3.8.1", "scope": "optional", - "bom-ref": "pkg:maven/org.apache.maven/maven-resolver-provider@3.8.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "bd7822b5883e0cea9fca95b6c7f75ceac2cd9d5051fb93d402c9836e58360cf2" + } + ] }, { "group": "org.apache.maven.resolver", @@ -1613,8 +2675,14 @@ "version": "1.6.2", "purl": "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.6.2", "type": "library", + "bom-ref": "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.6.2", "scope": "optional", - "bom-ref": "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.6.2" + "hashes": [ + { + "alg": "SHA-256", + "content": "167872c8192069cd33d95a19695c1db9f792294254a7c1007e5c81b9b9e09d6a" + } + ] }, { "group": "org.apache.maven.resolver", @@ -1622,8 +2690,14 @@ "version": "1.6.2", "purl": "pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.6.2", "type": "library", + "bom-ref": "pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.6.2", "scope": "optional", - "bom-ref": "pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.6.2" + "hashes": [ + { + "alg": "SHA-256", + "content": "d349392330b7735f9cce688ddedfdd8d96ce74897e3b996c61a09eeb0b599fca" + } + ] }, { "group": "org.apache.maven.resolver", @@ -1631,8 +2705,14 @@ "version": "1.6.2", "purl": "pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.6.2", "type": "library", + "bom-ref": "pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.6.2", "scope": "optional", - "bom-ref": "pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.6.2" + "hashes": [ + { + "alg": "SHA-256", + "content": "a7b85498cf9da664e9a0f8a6cd0b99532cacdd2b41a50d8e1de514ac5c64496a" + } + ] }, { "group": "org.apache.maven.resolver", @@ -1640,8 +2720,14 @@ "version": "1.6.2", "purl": "pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.6.2", "type": "library", + "bom-ref": "pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.6.2", "scope": "optional", - "bom-ref": "pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.6.2" + "hashes": [ + { + "alg": "SHA-256", + "content": "e531a9dc8c35f55d444bff04751c75848c3fd3d7fe93d62730410e30667961c8" + } + ] }, { "group": "org.apache.maven.shared", @@ -1649,8 +2735,14 @@ "version": "3.2.1", "purl": "pkg:maven/org.apache.maven.shared/maven-shared-utils@3.2.1", "type": "library", + "bom-ref": "pkg:maven/org.apache.maven.shared/maven-shared-utils@3.2.1", "scope": "optional", - "bom-ref": "pkg:maven/org.apache.maven.shared/maven-shared-utils@3.2.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "8b960b4297a3225d5610e7a7b4fd0b3cc47df2bf36db3dc2f7121b9c0bada051" + } + ] }, { "group": "commons-io", @@ -1658,8 +2750,14 @@ "version": "2.6", "purl": "pkg:maven/commons-io/commons-io@2.6", "type": "library", + "bom-ref": "pkg:maven/commons-io/commons-io@2.6", "scope": "optional", - "bom-ref": "pkg:maven/commons-io/commons-io@2.6" + "hashes": [ + { + "alg": "SHA-256", + "content": "10c450477b5fc3ea7baac9445b7de8d16048ce260b5514dbcef68f9f20d4f448" + } + ] }, { "group": "com.google.inject", @@ -1667,8 +2765,14 @@ "version": "4.2.1", "purl": "pkg:maven/com.google.inject/guice@4.2.1", "type": "library", + "bom-ref": "pkg:maven/com.google.inject/guice@4.2.1", "scope": "optional", - "bom-ref": "pkg:maven/com.google.inject/guice@4.2.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "92277e95f88594dae4534ca9f3b6e9290f1ea29cb0577ef43e8b6c0b4beeb53e" + } + ] }, { "group": "aopalliance", @@ -1676,8 +2780,14 @@ "version": "1.0", "purl": "pkg:maven/aopalliance/aopalliance@1.0", "type": "library", + "bom-ref": "pkg:maven/aopalliance/aopalliance@1.0", "scope": "optional", - "bom-ref": "pkg:maven/aopalliance/aopalliance@1.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "0e26e161ee03141cfadfd4eec6285eccc621a4877722bfb09a4ec2958e4dcf57" + } + ] }, { "group": "com.google.guava", @@ -1685,8 +2795,14 @@ "version": "25.1-android", "purl": "pkg:maven/com.google.guava/guava@25.1-android", "type": "library", + "bom-ref": "pkg:maven/com.google.guava/guava@25.1-android", "scope": "optional", - "bom-ref": "pkg:maven/com.google.guava/guava@25.1-android" + "hashes": [ + { + "alg": "SHA-256", + "content": "b6eeecdbad9a9be217583a8f6d5bb447426d62f63fe9b114beeb6b499efb2560" + } + ] }, { "group": "com.google.code.findbugs", @@ -1694,8 +2810,14 @@ "version": "3.0.2", "purl": "pkg:maven/com.google.code.findbugs/jsr305@3.0.2", "type": "library", + "bom-ref": "pkg:maven/com.google.code.findbugs/jsr305@3.0.2", "scope": "optional", - "bom-ref": "pkg:maven/com.google.code.findbugs/jsr305@3.0.2" + "hashes": [ + { + "alg": "SHA-256", + "content": "b9748bf56c300be0f44a20ba5b99676565bb215d693ce4067097d4b14e4185d5" + } + ] }, { "group": "org.checkerframework", @@ -1703,8 +2825,14 @@ "version": "2.0.0", "purl": "pkg:maven/org.checkerframework/checker-compat-qual@2.0.0", "type": "library", + "bom-ref": "pkg:maven/org.checkerframework/checker-compat-qual@2.0.0", "scope": "optional", - "bom-ref": "pkg:maven/org.checkerframework/checker-compat-qual@2.0.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "1e5bb65bf0acbcf01e87f77aa9281738846be042ee776e0b05f06f95ed94d4c9" + } + ] }, { "group": "com.google.j2objc", @@ -1712,8 +2840,14 @@ "version": "1.1", "purl": "pkg:maven/com.google.j2objc/j2objc-annotations@1.1", "type": "library", + "bom-ref": "pkg:maven/com.google.j2objc/j2objc-annotations@1.1", "scope": "optional", - "bom-ref": "pkg:maven/com.google.j2objc/j2objc-annotations@1.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "f41a81c6cadc39388d14b4c8c56aeda722511c02507f9ac5f3479db3174f2406" + } + ] }, { "group": "org.codehaus.mojo", @@ -1721,8 +2855,14 @@ "version": "1.14", "purl": "pkg:maven/org.codehaus.mojo/animal-sniffer-annotations@1.14", "type": "library", + "bom-ref": "pkg:maven/org.codehaus.mojo/animal-sniffer-annotations@1.14", "scope": "optional", - "bom-ref": "pkg:maven/org.codehaus.mojo/animal-sniffer-annotations@1.14" + "hashes": [ + { + "alg": "SHA-256", + "content": "982a7061046068098a95334dc007d11d31462628ac1bf904b7bd1b28aef00ebc" + } + ] }, { "group": "commons-cli", @@ -1730,8 +2870,14 @@ "version": "1.4", "purl": "pkg:maven/commons-cli/commons-cli@1.4", "type": "library", + "bom-ref": "pkg:maven/commons-cli/commons-cli@1.4", "scope": "optional", - "bom-ref": "pkg:maven/commons-cli/commons-cli@1.4" + "hashes": [ + { + "alg": "SHA-256", + "content": "4d5698c601e30825d885d7f2aee8a1a23ddf07eff5d9468dbb1c68f33739c15b" + } + ] }, { "group": "org.apache.maven.resolver", @@ -1739,8 +2885,14 @@ "version": "1.6.2", "purl": "pkg:maven/org.apache.maven.resolver/maven-resolver-connector-basic@1.6.2", "type": "library", + "bom-ref": "pkg:maven/org.apache.maven.resolver/maven-resolver-connector-basic@1.6.2", "scope": "optional", - "bom-ref": "pkg:maven/org.apache.maven.resolver/maven-resolver-connector-basic@1.6.2" + "hashes": [ + { + "alg": "SHA-256", + "content": "93a7d6623696b7542f7a778999a7591c787400d2b1cfb9ed702847ae74fe04f6" + } + ] }, { "group": "org.apache.maven.resolver", @@ -1748,8 +2900,14 @@ "version": "1.6.2", "purl": "pkg:maven/org.apache.maven.resolver/maven-resolver-transport-wagon@1.6.2", "type": "library", + "bom-ref": "pkg:maven/org.apache.maven.resolver/maven-resolver-transport-wagon@1.6.2", "scope": "optional", - "bom-ref": "pkg:maven/org.apache.maven.resolver/maven-resolver-transport-wagon@1.6.2" + "hashes": [ + { + "alg": "SHA-256", + "content": "69ac64f7a61830d1b609b75f061c5f37bd841d204494d91107a4976d65ba74dc" + } + ] }, { "group": "org.apache.maven.wagon", @@ -1757,8 +2915,14 @@ "version": "3.4.3", "purl": "pkg:maven/org.apache.maven.wagon/wagon-http@3.4.3", "type": "library", + "bom-ref": "pkg:maven/org.apache.maven.wagon/wagon-http@3.4.3", "scope": "optional", - "bom-ref": "pkg:maven/org.apache.maven.wagon/wagon-http@3.4.3" + "hashes": [ + { + "alg": "SHA-256", + "content": "dc73d554018c277bb34f2d8c0f22c48b989f4c1ebfc72acccceb1a5596f9ca66" + } + ] }, { "group": "org.apache.maven.wagon", @@ -1766,8 +2930,14 @@ "version": "3.4.3", "purl": "pkg:maven/org.apache.maven.wagon/wagon-http-shared@3.4.3", "type": "library", + "bom-ref": "pkg:maven/org.apache.maven.wagon/wagon-http-shared@3.4.3", "scope": "optional", - "bom-ref": "pkg:maven/org.apache.maven.wagon/wagon-http-shared@3.4.3" + "hashes": [ + { + "alg": "SHA-256", + "content": "bb98ed8606e6fc4aeb551149d5699f33c67f940eb96daca3a6cdafd899324118" + } + ] }, { "group": "org.jsoup", @@ -1775,8 +2945,14 @@ "version": "1.12.1", "purl": "pkg:maven/org.jsoup/jsoup@1.12.1", "type": "library", + "bom-ref": "pkg:maven/org.jsoup/jsoup@1.12.1", "scope": "optional", - "bom-ref": "pkg:maven/org.jsoup/jsoup@1.12.1" + "hashes": [ + { + "alg": "SHA-256", + "content": "d18bc1810d6619608bf6eeb373d533bbbb331a419c05f5088e88dd6e9c5a68cf" + } + ] }, { "group": "org.apache.httpcomponents", @@ -1784,8 +2960,14 @@ "version": "4.5.13", "purl": "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13", "type": "library", + "bom-ref": "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13", "scope": "optional", - "bom-ref": "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13" + "hashes": [ + { + "alg": "SHA-256", + "content": "aa8533703665c45b418af29b71d92f56ddba39a83daf856072c947685d37a780" + } + ] }, { "group": "org.apache.httpcomponents", @@ -1793,8 +2975,14 @@ "version": "4.4.14", "purl": "pkg:maven/org.apache.httpcomponents/httpcore@4.4.14", "type": "library", + "bom-ref": "pkg:maven/org.apache.httpcomponents/httpcore@4.4.14", "scope": "optional", - "bom-ref": "pkg:maven/org.apache.httpcomponents/httpcore@4.4.14" + "hashes": [ + { + "alg": "SHA-256", + "content": "1f782fc7fa0aa6db8929e7e59c0c88b597c9fbb6bf1136f8adc609945c83282e" + } + ] }, { "group": "commons-codec", @@ -1802,8 +2990,14 @@ "version": "1.11", "purl": "pkg:maven/commons-codec/commons-codec@1.11", "type": "library", + "bom-ref": "pkg:maven/commons-codec/commons-codec@1.11", "scope": "optional", - "bom-ref": "pkg:maven/commons-codec/commons-codec@1.11" + "hashes": [ + { + "alg": "SHA-256", + "content": "d885eea5759a9df7787fdb132d42e443705fc925df49cb14ef00dc85eeabed82" + } + ] }, { "group": "org.apache.maven.wagon", @@ -1811,8 +3005,14 @@ "version": "3.4.3", "purl": "pkg:maven/org.apache.maven.wagon/wagon-provider-api@3.4.3", "type": "library", + "bom-ref": "pkg:maven/org.apache.maven.wagon/wagon-provider-api@3.4.3", "scope": "optional", - "bom-ref": "pkg:maven/org.apache.maven.wagon/wagon-provider-api@3.4.3" + "hashes": [ + { + "alg": "SHA-256", + "content": "29232ca8f8e443f952d4d6c1829aafb49b3dabc23c308d70a329698cdef3d4bd" + } + ] }, { "group": "org.apache.maven.wagon", @@ -1820,8 +3020,14 @@ "version": "3.4.3", "purl": "pkg:maven/org.apache.maven.wagon/wagon-file@3.4.3", "type": "library", + "bom-ref": "pkg:maven/org.apache.maven.wagon/wagon-file@3.4.3", "scope": "optional", - "bom-ref": "pkg:maven/org.apache.maven.wagon/wagon-file@3.4.3" + "hashes": [ + { + "alg": "SHA-256", + "content": "921a96e3e6e7860a984b9153ecee636c67f7933b16e76ec62e9ae50fd0d991ba" + } + ] }, { "group": "io.quarkus", @@ -1829,8 +3035,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-bootstrap-gradle-resolver@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-bootstrap-gradle-resolver@2.0.2.Final", "scope": "optional", - "bom-ref": "pkg:maven/io.quarkus/quarkus-bootstrap-gradle-resolver@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "2e74280c166cb42551498f707ccfee61ad33a6ef1f43aba928134990153bd4ee" + } + ] }, { "group": "io.quarkus", @@ -1838,8 +3050,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-devtools-utilities@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-devtools-utilities@2.0.2.Final", "scope": "optional", - "bom-ref": "pkg:maven/io.quarkus/quarkus-devtools-utilities@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "ce8a21bfa9bca0248be35a37e209b6b183dc4b34689cf6feef2b2e01b8f3db24" + } + ] }, { "group": "io.quarkus", @@ -1847,8 +3065,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-builder@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-builder@2.0.2.Final", "scope": "optional", - "bom-ref": "pkg:maven/io.quarkus/quarkus-builder@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "0cea3c6b3c8fb29c4b5e627623908164a802691261a4a17c10bb53c816bb4a6b" + } + ] }, { "group": "org.junit.platform", @@ -1856,8 +3080,14 @@ "version": "1.7.2", "purl": "pkg:maven/org.junit.platform/junit-platform-launcher@1.7.2", "type": "library", + "bom-ref": "pkg:maven/org.junit.platform/junit-platform-launcher@1.7.2", "scope": "optional", - "bom-ref": "pkg:maven/org.junit.platform/junit-platform-launcher@1.7.2" + "hashes": [ + { + "alg": "SHA-256", + "content": "e6277701ce25d3aa3b0944d429fa068687004e560b7cb00691d6bc8b26e435e9" + } + ] }, { "group": "org.apiguardian", @@ -1865,8 +3095,14 @@ "version": "1.1.0", "purl": "pkg:maven/org.apiguardian/apiguardian-api@1.1.0", "type": "library", + "bom-ref": "pkg:maven/org.apiguardian/apiguardian-api@1.1.0", "scope": "optional", - "bom-ref": "pkg:maven/org.apiguardian/apiguardian-api@1.1.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "20449bb8023ab658018bfd91b5943ea198d34fe46b3c905338701092e0f5fc80" + } + ] }, { "group": "org.junit.platform", @@ -1874,8 +3110,14 @@ "version": "1.7.2", "purl": "pkg:maven/org.junit.platform/junit-platform-engine@1.7.2", "type": "library", + "bom-ref": "pkg:maven/org.junit.platform/junit-platform-engine@1.7.2", "scope": "optional", - "bom-ref": "pkg:maven/org.junit.platform/junit-platform-engine@1.7.2" + "hashes": [ + { + "alg": "SHA-256", + "content": "efc3f3220e47989db48d427b6fbf1361f7ed1c192937c80d22ee5258f1ec641d" + } + ] }, { "group": "org.opentest4j", @@ -1883,8 +3125,14 @@ "version": "1.2.0", "purl": "pkg:maven/org.opentest4j/opentest4j@1.2.0", "type": "library", + "bom-ref": "pkg:maven/org.opentest4j/opentest4j@1.2.0", "scope": "optional", - "bom-ref": "pkg:maven/org.opentest4j/opentest4j@1.2.0" + "hashes": [ + { + "alg": "SHA-256", + "content": "6d86f077185a962c9500d35a50e32dbaaf5364a1eb9ccf4eea4437ca126f754f" + } + ] }, { "group": "org.junit.platform", @@ -1892,8 +3140,14 @@ "version": "1.7.2", "purl": "pkg:maven/org.junit.platform/junit-platform-commons@1.7.2", "type": "library", + "bom-ref": "pkg:maven/org.junit.platform/junit-platform-commons@1.7.2", "scope": "optional", - "bom-ref": "pkg:maven/org.junit.platform/junit-platform-commons@1.7.2" + "hashes": [ + { + "alg": "SHA-256", + "content": "c8bf2c027bb1f8284bec7c821d36df26f579ad3e5d7629fad193953639e2963a" + } + ] }, { "group": "org.junit.jupiter", @@ -1901,8 +3155,14 @@ "version": "5.7.2", "purl": "pkg:maven/org.junit.jupiter/junit-jupiter@5.7.2", "type": "library", + "bom-ref": "pkg:maven/org.junit.jupiter/junit-jupiter@5.7.2", "scope": "optional", - "bom-ref": "pkg:maven/org.junit.jupiter/junit-jupiter@5.7.2" + "hashes": [ + { + "alg": "SHA-256", + "content": "0553c80cc0fbddc1114db5bb4816cc24cc0c876891d0a238a7bd35e1059723d3" + } + ] }, { "group": "org.junit.jupiter", @@ -1910,8 +3170,14 @@ "version": "5.7.2", "purl": "pkg:maven/org.junit.jupiter/junit-jupiter-api@5.7.2", "type": "library", + "bom-ref": "pkg:maven/org.junit.jupiter/junit-jupiter-api@5.7.2", "scope": "optional", - "bom-ref": "pkg:maven/org.junit.jupiter/junit-jupiter-api@5.7.2" + "hashes": [ + { + "alg": "SHA-256", + "content": "5e167a2fc374270965aaa4e1c2efa4951a9d60268da0a80fbf7898dbf9a3a2c8" + } + ] }, { "group": "org.junit.jupiter", @@ -1919,8 +3185,14 @@ "version": "5.7.2", "purl": "pkg:maven/org.junit.jupiter/junit-jupiter-params@5.7.2", "type": "library", + "bom-ref": "pkg:maven/org.junit.jupiter/junit-jupiter-params@5.7.2", "scope": "optional", - "bom-ref": "pkg:maven/org.junit.jupiter/junit-jupiter-params@5.7.2" + "hashes": [ + { + "alg": "SHA-256", + "content": "7d4732347008f6eef3428078582203423c0be01aad09256d5e5023da0fd76e4d" + } + ] }, { "group": "io.quarkus", @@ -1928,8 +3200,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-narayana-jta-deployment@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-narayana-jta-deployment@2.0.2.Final", "scope": "optional", - "bom-ref": "pkg:maven/io.quarkus/quarkus-narayana-jta-deployment@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "72b740382bc19bb7f991e8ea9113a59ecae0fa9d02267fda13a2695584911a37" + } + ] }, { "group": "io.quarkus", @@ -1937,8 +3215,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-arc-deployment@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-arc-deployment@2.0.2.Final", "scope": "optional", - "bom-ref": "pkg:maven/io.quarkus/quarkus-arc-deployment@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "2842063ad9da4ec68dca08769c36121695bef39207e79a7feb345ece73c3edc6" + } + ] }, { "group": "io.quarkus", @@ -1946,8 +3230,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-vertx-http-dev-console-spi@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-vertx-http-dev-console-spi@2.0.2.Final", "scope": "optional", - "bom-ref": "pkg:maven/io.quarkus/quarkus-vertx-http-dev-console-spi@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "4d3a59117e3beb43d5643a6314e9bb482b529ae2b219ee4dfc2be5108d49e09a" + } + ] }, { "group": "io.quarkus.arc", @@ -1955,8 +3245,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus.arc/arc-processor@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus.arc/arc-processor@2.0.2.Final", "scope": "optional", - "bom-ref": "pkg:maven/io.quarkus.arc/arc-processor@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "7956865dcd107ed97018c5ccca052f895a5e22ee5bd9459371edda952478cfd6" + } + ] }, { "group": "io.quarkus", @@ -1964,8 +3260,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-mutiny-deployment@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-mutiny-deployment@2.0.2.Final", "scope": "optional", - "bom-ref": "pkg:maven/io.quarkus/quarkus-mutiny-deployment@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "4ef40118bd1d35409f1b44d4d0040532e496fe1ad1313b4bbf32b9bbfa6869a5" + } + ] }, { "group": "io.quarkus", @@ -1973,8 +3275,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-smallrye-context-propagation-deployment@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-smallrye-context-propagation-deployment@2.0.2.Final", "scope": "optional", - "bom-ref": "pkg:maven/io.quarkus/quarkus-smallrye-context-propagation-deployment@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "fe29c8de492b4aaa727bfe971e6cb38680f1a190cc48e0084f8cea7a11a3f077" + } + ] }, { "group": "io.quarkus", @@ -1982,8 +3290,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-agroal-deployment@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-agroal-deployment@2.0.2.Final", "scope": "optional", - "bom-ref": "pkg:maven/io.quarkus/quarkus-agroal-deployment@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "30c6f0310e3d205be81858303e26e5f5dfd00a1de0645c57ab234619bfec0126" + } + ] }, { "group": "io.quarkus", @@ -1991,8 +3305,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-datasource-deployment@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-datasource-deployment@2.0.2.Final", "scope": "optional", - "bom-ref": "pkg:maven/io.quarkus/quarkus-datasource-deployment@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "b3c9d72ccd890189e7b2a399628d8f25cc39fa9a1f942d4f9eb050296ae8cf53" + } + ] }, { "group": "io.quarkus", @@ -2000,8 +3320,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-datasource-deployment-spi@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-datasource-deployment-spi@2.0.2.Final", "scope": "optional", - "bom-ref": "pkg:maven/io.quarkus/quarkus-datasource-deployment-spi@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "9e251f8b44174660c3d6db81d09567b5cdacbd3bd3d86a7a9585472b0311bfb6" + } + ] }, { "group": "io.quarkus", @@ -2009,8 +3335,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-agroal-spi@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-agroal-spi@2.0.2.Final", "scope": "optional", - "bom-ref": "pkg:maven/io.quarkus/quarkus-agroal-spi@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "866519601a62fef570340577923e890475bd9d17defe16d596a0f9beb7f18bc5" + } + ] }, { "group": "io.quarkus", @@ -2018,8 +3350,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-credentials-deployment@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-credentials-deployment@2.0.2.Final", "scope": "optional", - "bom-ref": "pkg:maven/io.quarkus/quarkus-credentials-deployment@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "c794d1b4f732bda972a20d0afd7f88e2b09772d39986fe66198be0024ff2f4eb" + } + ] }, { "group": "io.quarkus", @@ -2027,8 +3365,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-smallrye-health-spi@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-smallrye-health-spi@2.0.2.Final", "scope": "optional", - "bom-ref": "pkg:maven/io.quarkus/quarkus-smallrye-health-spi@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "6e06f30a2ddf5c449af7ac341b0637ca5af58b24e7317b54392fbbbe3282f9b3" + } + ] }, { "group": "io.quarkus", @@ -2036,8 +3380,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-caffeine-deployment@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-caffeine-deployment@2.0.2.Final", "scope": "optional", - "bom-ref": "pkg:maven/io.quarkus/quarkus-caffeine-deployment@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "b5ec996f16d4555f7a84287eb4adaf5b2d191696bc22ac3b9e6bd6aad0de27ba" + } + ] }, { "group": "io.quarkus", @@ -2045,8 +3395,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-panache-hibernate-common-deployment@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-panache-hibernate-common-deployment@2.0.2.Final", "scope": "optional", - "bom-ref": "pkg:maven/io.quarkus/quarkus-panache-hibernate-common-deployment@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "568067174ce357bf3e0c18d453679663e9d6b73eea3803895032929e6feeddaa" + } + ] }, { "group": "io.quarkus", @@ -2054,8 +3410,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-panache-hibernate-common@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-panache-hibernate-common@2.0.2.Final", "scope": "optional", - "bom-ref": "pkg:maven/io.quarkus/quarkus-panache-hibernate-common@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "497b0a7aee81a41e671cdb80017165f78d6fa817c6ab690458145178a3214a9c" + } + ] }, { "group": "io.quarkus", @@ -2063,8 +3425,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-panache-common@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-panache-common@2.0.2.Final", "scope": "optional", - "bom-ref": "pkg:maven/io.quarkus/quarkus-panache-common@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "3d0df22ee49ef52d77df941dd97483cbcc16857f2ded6e74e43083f796b0c78c" + } + ] }, { "group": "io.quarkus", @@ -2072,8 +3440,14 @@ "version": "2.0.2.Final", "purl": "pkg:maven/io.quarkus/quarkus-panache-common-deployment@2.0.2.Final", "type": "library", + "bom-ref": "pkg:maven/io.quarkus/quarkus-panache-common-deployment@2.0.2.Final", "scope": "optional", - "bom-ref": "pkg:maven/io.quarkus/quarkus-panache-common-deployment@2.0.2.Final" + "hashes": [ + { + "alg": "SHA-256", + "content": "3e045616c2f54d71f25b1facb081024d5b70c02689fffd2bad5c5a7ce050177b" + } + ] } ], "dependencies": [