This is an automated email from the ASF dual-hosted git repository.

acosentino pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/camel.git

commit 1d89b272ca4ad5fe1f95e936db98fd68b17f1343
Author: Andrea Cosentino <anco...@gmail.com>
AuthorDate: Mon Jan 23 13:10:56 2023 +0100

    Regen SBOM
    
    Signed-off-by: Andrea Cosentino <anco...@gmail.com>
---
 camel-sbom/camel-sbom.json | 272 ++++++---------------------------------------
 camel-sbom/camel-sbom.xml  | 146 ++++++------------------
 2 files changed, 65 insertions(+), 353 deletions(-)

diff --git a/camel-sbom/camel-sbom.json b/camel-sbom/camel-sbom.json
index 8ebd5e950f6..b3bcbccf92c 100644
--- a/camel-sbom/camel-sbom.json
+++ b/camel-sbom/camel-sbom.json
@@ -1,10 +1,10 @@
 {
   "bomFormat" : "CycloneDX",
   "specVersion" : "1.4",
-  "serialNumber" : "urn:uuid:dd08712f-d1ee-47b7-9153-5647b6acf58a",
+  "serialNumber" : "urn:uuid:6f152ddc-82d5-4011-a2b3-f9ea9f5bbd8d",
   "version" : 1,
   "metadata" : {
-    "timestamp" : "2023-01-23T09:05:59Z",
+    "timestamp" : "2023-01-23T12:09:32Z",
     "tools" : [
       {
         "vendor" : "OWASP Foundation",
@@ -84857,7 +84857,6 @@
       "name" : "cache-api",
       "version" : "1.1.0",
       "description" : "Sonatype helps open source projects to set up Maven 
repositories on https://oss.sonatype.org/";,
-      "scope" : "required",
       "hashes" : [
         {
           "alg" : "MD5",
@@ -115247,44 +115246,43 @@
       "bom-ref" : 
"pkg:maven/org.apache.camel/camel-jcache@4.0.0-SNAPSHOT?type=jar"
     },
     {
-      "publisher" : "The Apache Software Foundation",
-      "group" : "org.apache.servicemix.bundles",
-      "name" : "org.apache.servicemix.bundles.javax-cache-api",
-      "version" : "1.1.1_1",
-      "description" : "This OSGi bundle wraps cache-api 1.1.1 jar file.",
+      "group" : "javax.cache",
+      "name" : "cache-api",
+      "version" : "1.1.1",
+      "description" : "Sonatype helps open source projects to set up Maven 
repositories on https://oss.sonatype.org/";,
       "scope" : "required",
       "hashes" : [
         {
           "alg" : "MD5",
-          "content" : "0d7fe9916395b21846169a9eff6b8a7c"
+          "content" : "dfdac9358e140e61c574abb1ada84dc9"
         },
         {
           "alg" : "SHA-1",
-          "content" : "7d44c39b1ae76a47a839fad1e34780cb547729b6"
+          "content" : "c56fb980eb5208bfee29a9a5b9d951aba076bd91"
         },
         {
           "alg" : "SHA-256",
-          "content" : 
"8270b602351d6e195837cddf60f46287c5d6b133be95021591e95e03da141d94"
+          "content" : 
"9f34e007edfa82a7b2a2e1b969477dcf5099ce7f4f926fb54ce7e27c4a0cd54b"
         },
         {
           "alg" : "SHA-512",
-          "content" : 
"2c0097b8eb7354e85ecb07901898f91c372134c9e62b9bda300514957bbfa05a80044b81f50cc0bc83679277622cda3d8e3eb8801291ad4c05ba0796ec3c9aab"
+          "content" : 
"7e2c2e421c46d66f35ae0c107c31ae28606562190871655efd38c60b335a10b1770134f88c8aada5a389e9e364be885713fe7d0464c2a9fbea06ec1102b2c3e5"
         },
         {
           "alg" : "SHA-384",
-          "content" : 
"1bedbf0fa4fbc51de0797e95db8b34390a337e104bcd82a05dc2b7df8bec51c4852f1a1baf8a077e527af0384325a19c"
+          "content" : 
"3740a5ddb6bf6d1627190fbabf06ffc19fb84a488c120ebf1bbc6407971905c7f415310a17c8db77ee90d09cb2301d3d"
         },
         {
           "alg" : "SHA3-384",
-          "content" : 
"3c6b8b5dbf34e55fbcb34e4b1aa2539d19651ea52131cde9f525ea808047ea59b51ee79083f184109cb860b8df2ae526"
+          "content" : 
"49c3aca710ab2ad62e4610ad0f3b76338079aa49e90e84cb18b59ced56caf9f6e2bc855e9900cb1b7748a1f3e0d160e2"
         },
         {
           "alg" : "SHA3-256",
-          "content" : 
"ae364c83245c3f1ea0a08cb87bb69c4eb609d7d1f57f5439b8753cabbe139b13"
+          "content" : 
"ed71d13b59b8ebba5fb3f2f42da03e29d1fdaefef8fde375794a6598fdb702be"
         },
         {
           "alg" : "SHA3-512",
-          "content" : 
"a8d4e0fd5bcbf98ecc3920432359cb3a89ddbe4b8e228d0744a47f0ea9daf2ef58e905f5742c028dd333bf025652ab8bf0ebe828e9d8fefa19923ad2279388ac"
+          "content" : 
"8b93ce37a0ea13bcb8f35a0237307f7b232c178d11e452d02c4383dbd51531eeb4a3c722778dfb95637412e6451a132f6031f0f4e3d51928a6b857160269dec0"
         }
       ],
       "licenses" : [
@@ -115294,31 +115292,19 @@
           }
         }
       ],
-      "purl" : 
"pkg:maven/org.apache.servicemix.bundles/org.apache.servicemix.bundles.javax-cache-api@1.1.1_1?type=jar",
+      "purl" : "pkg:maven/javax.cache/cache-api@1.1.1?type=jar",
       "externalReferences" : [
         {
           "type" : "website",
-          "url" : 
"http://servicemix.apache.org/bundles-pom/org.apache.servicemix.bundles.javax-cache-api/";
+          "url" : "https://github.com/jsr107/jsr107spec";
         },
         {
           "type" : "distribution",
-          "url" : 
"https://repository.apache.org/service/local/staging/deploy/maven2";
-        },
-        {
-          "type" : "issue-tracker",
-          "url" : "http://issues.apache.org/activemq/browse/SM";
-        },
-        {
-          "type" : "mailing-list",
-          "url" : 
"http://servicemix.apache.org/discussion-forums.html#nabble-f12051";
-        },
-        {
-          "type" : "vcs",
-          "url" : 
"https://gitbox.apache.org/repos/asf?p=servicemix-bundles.git";
+          "url" : "http://oss.sonatype.org/service/local/staging/deploy/maven2";
         }
       ],
       "type" : "library",
-      "bom-ref" : 
"pkg:maven/org.apache.servicemix.bundles/org.apache.servicemix.bundles.javax-cache-api@1.1.1_1?type=jar"
+      "bom-ref" : "pkg:maven/javax.cache/cache-api@1.1.1?type=jar"
     },
     {
       "publisher" : "The Apache Software Foundation",
@@ -139133,66 +139119,6 @@
       "type" : "library",
       "bom-ref" : "pkg:maven/org.redisson/redisson@3.16.7?type=jar"
     },
-    {
-      "group" : "javax.cache",
-      "name" : "cache-api",
-      "version" : "1.1.1",
-      "description" : "Sonatype helps open source projects to set up Maven 
repositories on https://oss.sonatype.org/";,
-      "hashes" : [
-        {
-          "alg" : "MD5",
-          "content" : "dfdac9358e140e61c574abb1ada84dc9"
-        },
-        {
-          "alg" : "SHA-1",
-          "content" : "c56fb980eb5208bfee29a9a5b9d951aba076bd91"
-        },
-        {
-          "alg" : "SHA-256",
-          "content" : 
"9f34e007edfa82a7b2a2e1b969477dcf5099ce7f4f926fb54ce7e27c4a0cd54b"
-        },
-        {
-          "alg" : "SHA-512",
-          "content" : 
"7e2c2e421c46d66f35ae0c107c31ae28606562190871655efd38c60b335a10b1770134f88c8aada5a389e9e364be885713fe7d0464c2a9fbea06ec1102b2c3e5"
-        },
-        {
-          "alg" : "SHA-384",
-          "content" : 
"3740a5ddb6bf6d1627190fbabf06ffc19fb84a488c120ebf1bbc6407971905c7f415310a17c8db77ee90d09cb2301d3d"
-        },
-        {
-          "alg" : "SHA3-384",
-          "content" : 
"49c3aca710ab2ad62e4610ad0f3b76338079aa49e90e84cb18b59ced56caf9f6e2bc855e9900cb1b7748a1f3e0d160e2"
-        },
-        {
-          "alg" : "SHA3-256",
-          "content" : 
"ed71d13b59b8ebba5fb3f2f42da03e29d1fdaefef8fde375794a6598fdb702be"
-        },
-        {
-          "alg" : "SHA3-512",
-          "content" : 
"8b93ce37a0ea13bcb8f35a0237307f7b232c178d11e452d02c4383dbd51531eeb4a3c722778dfb95637412e6451a132f6031f0f4e3d51928a6b857160269dec0"
-        }
-      ],
-      "licenses" : [
-        {
-          "license" : {
-            "id" : "Apache-2.0"
-          }
-        }
-      ],
-      "purl" : "pkg:maven/javax.cache/cache-api@1.1.1?type=jar",
-      "externalReferences" : [
-        {
-          "type" : "website",
-          "url" : "https://github.com/jsr107/jsr107spec";
-        },
-        {
-          "type" : "distribution",
-          "url" : "http://oss.sonatype.org/service/local/staging/deploy/maven2";
-        }
-      ],
-      "type" : "library",
-      "bom-ref" : "pkg:maven/javax.cache/cache-api@1.1.1?type=jar"
-    },
     {
       "publisher" : "reactor",
       "group" : "io.projectreactor",
@@ -148662,41 +148588,41 @@
     {
       "group" : "org.apache.thrift",
       "name" : "libthrift",
-      "version" : "0.14.1",
+      "version" : "0.17.0",
       "description" : "Thrift is a software framework for scalable 
cross-language services development.",
       "scope" : "required",
       "hashes" : [
         {
           "alg" : "MD5",
-          "content" : "ef7e068f5319c5a9deee83990e8ef557"
+          "content" : "b4e4d44f7c3b3bb7f1b77b7131a534b9"
         },
         {
           "alg" : "SHA-1",
-          "content" : "85348a0c44c298bbec5ae747e67ae12e60b3aef6"
+          "content" : "36aec83a463d233ab537407df7612c383727b03f"
         },
         {
           "alg" : "SHA-256",
-          "content" : 
"5b3510fe72e6f0725e29cef6ebdb1eabacccc69d79fc4ed50b681600a87667ec"
+          "content" : 
"91135681b23af6132865725509f1ba8e7f8a0d89076b6105ce4d9b9fec4024cc"
         },
         {
           "alg" : "SHA-512",
-          "content" : 
"392590d79e520a9ee07c9332be11c4295ea572c25aa5adbceccdede22085cc5d019c1510befce9dcc747ca9923c2267e4d23adb2276df227cf1fd79d6228158c"
+          "content" : 
"644937dc90b43b81a145d2b737d91cd37644b3f90e1fbc56d2ce190d9b591ebccfb4f4fc1fe663bcf636355a24aed4d6e12bf96e89c310c10f4c49aaadc68112"
         },
         {
           "alg" : "SHA-384",
-          "content" : 
"4cf645f0233fd1bb530afb6d92e13dfc05b98b22d7f8e90bf6026e72b9f0c392a263499ab63b05f27453d8fe52c150d0"
+          "content" : 
"3136aee7d34f35e26aecb82864699d9878b648674b57ec4d44f56f8f076cc1fd1fe8196b4de68deca2632f3ffe0d3cdb"
         },
         {
           "alg" : "SHA3-384",
-          "content" : 
"c407638c126efb91233170b38db81d776383b13719715c962ad03163813aa90c69cebea9a9c94a11de89b2c513181de3"
+          "content" : 
"fee843072f2646688fe7f8d28a2357c3f8c5553d3321a2e153923290e01d8e3488d44e0d4ce68d697c8687b0877013a6"
         },
         {
           "alg" : "SHA3-256",
-          "content" : 
"cd064ebd555683f27049a9caf303d3201f7350ee8b2c980a6f73f53716f4a886"
+          "content" : 
"99f23ef5e6a16a6f6f25aa63380c72341d64d80a022500f9641e1c9c9f1d7f35"
         },
         {
           "alg" : "SHA3-512",
-          "content" : 
"c8ce5f46b491799bc74862c0ed24094bbe0a395ed535874bc24b9b83a24cd18f461b267582346714dfaafc7a6e9e3b70e9e7faeb2059cdeae5e0f700f36dc5a5"
+          "content" : 
"4f93b054e4d4e6a617efa576f53bc1c8bbce959be9ef9de6dc69b42c238da73adc62b3df3b2cd1ed95c1606f856a05386db1c757772dade1e4d4d679fca00790"
         }
       ],
       "licenses" : [
@@ -148706,7 +148632,7 @@
           }
         }
       ],
-      "purl" : "pkg:maven/org.apache.thrift/libthrift@0.14.1?type=jar",
+      "purl" : "pkg:maven/org.apache.thrift/libthrift@0.17.0?type=jar",
       "externalReferences" : [
         {
           "type" : "website",
@@ -148718,119 +148644,7 @@
         }
       ],
       "type" : "library",
-      "bom-ref" : "pkg:maven/org.apache.thrift/libthrift@0.14.1?type=jar"
-    },
-    {
-      "group" : "org.apache.tomcat.embed",
-      "name" : "tomcat-embed-core",
-      "version" : "8.5.46",
-      "description" : "Core Tomcat implementation",
-      "hashes" : [
-        {
-          "alg" : "MD5",
-          "content" : "45378afdce63a61c488db97d2a6e9fbd"
-        },
-        {
-          "alg" : "SHA-1",
-          "content" : "5d686394334d143f48251827435ab086a161e75e"
-        },
-        {
-          "alg" : "SHA-256",
-          "content" : 
"be5f854448d2ee5d6e0036feb2b4f713163079a1b6b9a7a97508e55917ad35c2"
-        },
-        {
-          "alg" : "SHA-512",
-          "content" : 
"f85371c45348625c5854e99cc6efcdedd2724cca20dbaa6c9a76141492a70e8c882a4b66de63b0d1cdd170e23f18f86efaa52bdafc05cc903d4b83f1ac4799a1"
-        },
-        {
-          "alg" : "SHA-384",
-          "content" : 
"5feffe14a4874d5d738e35e65b06ada607e67cef9b44c4e29feae1897bee63787faca034f4bde301b9e3e1ad60118232"
-        },
-        {
-          "alg" : "SHA3-384",
-          "content" : 
"318450bba37870cfddf798fe0273f9f494b17a5e37019b28a26f15293a026ce2ee10e2182957c0a5c2398b6cf4d267d4"
-        },
-        {
-          "alg" : "SHA3-256",
-          "content" : 
"859ca4f24d9aa0c8b7287a39a5818b1e94d9a7563074a52fce0b1abeedd9a419"
-        },
-        {
-          "alg" : "SHA3-512",
-          "content" : 
"101144ddd60df18c01e6aea47a0c7620fad87913c0b24e3184b8ff5ee133c631945455b7c51c76aa173666ac90921dd0db1407d5395e11b43abe4e58a46f3985"
-        }
-      ],
-      "licenses" : [
-        {
-          "license" : {
-            "id" : "Apache-2.0"
-          }
-        }
-      ],
-      "purl" : 
"pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@8.5.46?type=jar",
-      "externalReferences" : [
-        {
-          "type" : "website",
-          "url" : "https://tomcat.apache.org/";
-        }
-      ],
-      "type" : "library",
-      "bom-ref" : 
"pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@8.5.46?type=jar"
-    },
-    {
-      "group" : "org.apache.tomcat",
-      "name" : "tomcat-annotations-api",
-      "version" : "8.5.46",
-      "description" : "Annotations Package",
-      "hashes" : [
-        {
-          "alg" : "MD5",
-          "content" : "24d29eeee84c155a9a9fe72bbd98c0b7"
-        },
-        {
-          "alg" : "SHA-1",
-          "content" : "56c67699de192c603afd6f029e80e5ff8d98e7e9"
-        },
-        {
-          "alg" : "SHA-256",
-          "content" : 
"6a6b46d0e6958644514c0ca3658b3b07e6123a682a20ee36d3795242735fabc3"
-        },
-        {
-          "alg" : "SHA-512",
-          "content" : 
"249c77fc30f1b054e35531aa5a52b242f05ef3e16f83f8c7751d766d490da5a8ea24f798605d35b8b1c8651834c50abd19c4ac0f93c483b020d7a90758ab832e"
-        },
-        {
-          "alg" : "SHA-384",
-          "content" : 
"f4bb78d0c7e12d733d46378b2ab75afb057a631d69957af5527dfbd89399f1c89c8562e56df95b2c691023987b6696e3"
-        },
-        {
-          "alg" : "SHA3-384",
-          "content" : 
"fcde30303d433881f6b20aa07715a26b93c4702c5b5705e5747a141c94b1aeef40737dc5d0fa262d07224a763734d3e1"
-        },
-        {
-          "alg" : "SHA3-256",
-          "content" : 
"85fdca9eb886ab8e4e1610422b176880a8dc3b195153bd53460ad861900967ac"
-        },
-        {
-          "alg" : "SHA3-512",
-          "content" : 
"81455e112788bc580b229733e21aa5d3077237b2798c7a134cefd9f0db722ec48f220ecff50428c296285f2c47da5d12f90be8bfd4c9b5d88fc5266ceb07a3d7"
-        }
-      ],
-      "licenses" : [
-        {
-          "license" : {
-            "id" : "Apache-2.0"
-          }
-        }
-      ],
-      "purl" : 
"pkg:maven/org.apache.tomcat/tomcat-annotations-api@8.5.46?type=jar",
-      "externalReferences" : [
-        {
-          "type" : "website",
-          "url" : "https://tomcat.apache.org/";
-        }
-      ],
-      "type" : "library",
-      "bom-ref" : 
"pkg:maven/org.apache.tomcat/tomcat-annotations-api@8.5.46?type=jar"
+      "bom-ref" : "pkg:maven/org.apache.thrift/libthrift@0.17.0?type=jar"
     },
     {
       "publisher" : "The Apache Software Foundation",
@@ -177821,11 +177635,11 @@
       "ref" : 
"pkg:maven/org.apache.camel/camel-jcache@4.0.0-SNAPSHOT?type=jar",
       "dependsOn" : [
         "pkg:maven/org.apache.camel/camel-support@4.0.0-SNAPSHOT?type=jar",
-        
"pkg:maven/org.apache.servicemix.bundles/org.apache.servicemix.bundles.javax-cache-api@1.1.1_1?type=jar"
+        "pkg:maven/javax.cache/cache-api@1.1.1?type=jar"
       ]
     },
     {
-      "ref" : 
"pkg:maven/org.apache.servicemix.bundles/org.apache.servicemix.bundles.javax-cache-api@1.1.1_1?type=jar",
+      "ref" : "pkg:maven/javax.cache/cache-api@1.1.1?type=jar",
       "dependsOn" : [ ]
     },
     {
@@ -180764,10 +180578,6 @@
         "pkg:maven/org.jodd/jodd-bean@5.1.6?type=jar"
       ]
     },
-    {
-      "ref" : "pkg:maven/javax.cache/cache-api@1.1.1?type=jar",
-      "dependsOn" : [ ]
-    },
     {
       "ref" : "pkg:maven/io.projectreactor/reactor-core@3.4.4?type=jar",
       "dependsOn" : [
@@ -181974,29 +181784,13 @@
       "ref" : 
"pkg:maven/org.apache.camel/camel-thrift@4.0.0-SNAPSHOT?type=jar",
       "dependsOn" : [
         "pkg:maven/org.apache.camel/camel-support@4.0.0-SNAPSHOT?type=jar",
-        "pkg:maven/org.apache.thrift/libthrift@0.14.1?type=jar",
+        "pkg:maven/org.apache.thrift/libthrift@0.17.0?type=jar",
         "pkg:maven/org.javassist/javassist@3.28.0-GA?type=jar",
         "pkg:maven/commons-io/commons-io@2.11.0?type=jar"
       ]
     },
     {
-      "ref" : "pkg:maven/org.apache.thrift/libthrift@0.14.1?type=jar",
-      "dependsOn" : [
-        "pkg:maven/org.slf4j/slf4j-api@2.0.6?type=jar",
-        "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar",
-        "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar",
-        "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@8.5.46?type=jar",
-        "pkg:maven/javax.annotation/javax.annotation-api@1.3.2?type=jar"
-      ]
-    },
-    {
-      "ref" : 
"pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@8.5.46?type=jar",
-      "dependsOn" : [
-        "pkg:maven/org.apache.tomcat/tomcat-annotations-api@8.5.46?type=jar"
-      ]
-    },
-    {
-      "ref" : 
"pkg:maven/org.apache.tomcat/tomcat-annotations-api@8.5.46?type=jar",
+      "ref" : "pkg:maven/org.apache.thrift/libthrift@0.17.0?type=jar",
       "dependsOn" : [ ]
     },
     {
diff --git a/camel-sbom/camel-sbom.xml b/camel-sbom/camel-sbom.xml
index b208309f8f8..cc4c7f7ce5d 100644
--- a/camel-sbom/camel-sbom.xml
+++ b/camel-sbom/camel-sbom.xml
@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="UTF-8"?>
-<bom serialNumber="urn:uuid:dd08712f-d1ee-47b7-9153-5647b6acf58a" version="1" 
xmlns="http://cyclonedx.org/schema/bom/1.4";>
+<bom serialNumber="urn:uuid:6f152ddc-82d5-4011-a2b3-f9ea9f5bbd8d" version="1" 
xmlns="http://cyclonedx.org/schema/bom/1.4";>
   <metadata>
-    <timestamp>2023-01-23T09:05:59Z</timestamp>
+    <timestamp>2023-01-23T12:09:32Z</timestamp>
     <tools>
       <tool>
         <vendor>OWASP Foundation</vendor>
@@ -31146,7 +31146,6 @@ data-binding.</description>
       <name>cache-api</name>
       <version>1.1.0</version>
       <description>Sonatype helps open source projects to set up Maven 
repositories on https://oss.sonatype.org/</description>
-      <scope>required</scope>
       <hashes>
         <hash alg="MD5">ac907ad12e9a7ac5d41abf703855002f</hash>
         <hash alg="SHA-1">77bdcff7814076dfa61611b0db88487c515150b6</hash>
@@ -42472,30 +42471,29 @@ GraalVM removes the isolation between programming 
languages and enables interope
       
<purl>pkg:maven/org.apache.camel/camel-jcache@4.0.0-SNAPSHOT?type=jar</purl>
       <externalReferences><reference 
type="website"><url>https://camel.apache.org/camel-parent/components/camel-jcache</url></reference><reference
 
type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference
 
type="issue-tracker"><url>https://issues.apache.org/jira/browse/CAMEL</url></reference><reference
 
type="mailing-list"><url>dev-subscr...@camel.apache.org</url></reference><reference
 type="vcs"><url>https://gitbox.apache.org/re [...]
     </component>
-    <component type="library" 
bom-ref="pkg:maven/org.apache.servicemix.bundles/org.apache.servicemix.bundles.javax-cache-api@1.1.1_1?type=jar">
-      <publisher>The Apache Software Foundation</publisher>
-      <group>org.apache.servicemix.bundles</group>
-      <name>org.apache.servicemix.bundles.javax-cache-api</name>
-      <version>1.1.1_1</version>
-      <description>This OSGi bundle wraps cache-api 1.1.1 jar 
file.</description>
+    <component type="library" 
bom-ref="pkg:maven/javax.cache/cache-api@1.1.1?type=jar">
+      <group>javax.cache</group>
+      <name>cache-api</name>
+      <version>1.1.1</version>
+      <description>Sonatype helps open source projects to set up Maven 
repositories on https://oss.sonatype.org/</description>
       <scope>required</scope>
       <hashes>
-        <hash alg="MD5">0d7fe9916395b21846169a9eff6b8a7c</hash>
-        <hash alg="SHA-1">7d44c39b1ae76a47a839fad1e34780cb547729b6</hash>
-        <hash 
alg="SHA-256">8270b602351d6e195837cddf60f46287c5d6b133be95021591e95e03da141d94</hash>
-        <hash 
alg="SHA-512">2c0097b8eb7354e85ecb07901898f91c372134c9e62b9bda300514957bbfa05a80044b81f50cc0bc83679277622cda3d8e3eb8801291ad4c05ba0796ec3c9aab</hash>
-        <hash 
alg="SHA-384">1bedbf0fa4fbc51de0797e95db8b34390a337e104bcd82a05dc2b7df8bec51c4852f1a1baf8a077e527af0384325a19c</hash>
-        <hash 
alg="SHA3-384">3c6b8b5dbf34e55fbcb34e4b1aa2539d19651ea52131cde9f525ea808047ea59b51ee79083f184109cb860b8df2ae526</hash>
-        <hash 
alg="SHA3-256">ae364c83245c3f1ea0a08cb87bb69c4eb609d7d1f57f5439b8753cabbe139b13</hash>
-        <hash 
alg="SHA3-512">a8d4e0fd5bcbf98ecc3920432359cb3a89ddbe4b8e228d0744a47f0ea9daf2ef58e905f5742c028dd333bf025652ab8bf0ebe828e9d8fefa19923ad2279388ac</hash>
+        <hash alg="MD5">dfdac9358e140e61c574abb1ada84dc9</hash>
+        <hash alg="SHA-1">c56fb980eb5208bfee29a9a5b9d951aba076bd91</hash>
+        <hash 
alg="SHA-256">9f34e007edfa82a7b2a2e1b969477dcf5099ce7f4f926fb54ce7e27c4a0cd54b</hash>
+        <hash 
alg="SHA-512">7e2c2e421c46d66f35ae0c107c31ae28606562190871655efd38c60b335a10b1770134f88c8aada5a389e9e364be885713fe7d0464c2a9fbea06ec1102b2c3e5</hash>
+        <hash 
alg="SHA-384">3740a5ddb6bf6d1627190fbabf06ffc19fb84a488c120ebf1bbc6407971905c7f415310a17c8db77ee90d09cb2301d3d</hash>
+        <hash 
alg="SHA3-384">49c3aca710ab2ad62e4610ad0f3b76338079aa49e90e84cb18b59ced56caf9f6e2bc855e9900cb1b7748a1f3e0d160e2</hash>
+        <hash 
alg="SHA3-256">ed71d13b59b8ebba5fb3f2f42da03e29d1fdaefef8fde375794a6598fdb702be</hash>
+        <hash 
alg="SHA3-512">8b93ce37a0ea13bcb8f35a0237307f7b232c178d11e452d02c4383dbd51531eeb4a3c722778dfb95637412e6451a132f6031f0f4e3d51928a6b857160269dec0</hash>
       </hashes>
       <licenses>
         <license>
           <id>Apache-2.0</id>
         </license>
       </licenses>
-      
<purl>pkg:maven/org.apache.servicemix.bundles/org.apache.servicemix.bundles.javax-cache-api@1.1.1_1?type=jar</purl>
-      <externalReferences><reference 
type="website"><url>http://servicemix.apache.org/bundles-pom/org.apache.servicemix.bundles.javax-cache-api/</url></reference><reference
 
type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference
 
type="issue-tracker"><url>http://issues.apache.org/activemq/browse/SM</url></reference><reference
 
type="mailing-list"><url>http://servicemix.apache.org/discussion-forums.html#nabble-f12051</url></refe
 [...]
+      <purl>pkg:maven/javax.cache/cache-api@1.1.1?type=jar</purl>
+      <externalReferences><reference 
type="website"><url>https://github.com/jsr107/jsr107spec</url></reference><reference
 
type="distribution"><url>http://oss.sonatype.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
     </component>
     <component type="library" 
bom-ref="pkg:maven/org.apache.camel/camel-tracing@4.0.0-SNAPSHOT?type=jar">
       <publisher>The Apache Software Foundation</publisher>
@@ -51274,29 +51272,6 @@ flexible messaging model and an intuitive client 
API.</description>
       <purl>pkg:maven/org.redisson/redisson@3.16.7?type=jar</purl>
       <externalReferences><reference 
type="website"><url>http://redisson.org</url></reference><reference 
type="vcs"><url>scm:git:g...@github.com:redisson/redisson.git/redisson</url></reference></externalReferences>
     </component>
-    <component type="library" 
bom-ref="pkg:maven/javax.cache/cache-api@1.1.1?type=jar">
-      <group>javax.cache</group>
-      <name>cache-api</name>
-      <version>1.1.1</version>
-      <description>Sonatype helps open source projects to set up Maven 
repositories on https://oss.sonatype.org/</description>
-      <hashes>
-        <hash alg="MD5">dfdac9358e140e61c574abb1ada84dc9</hash>
-        <hash alg="SHA-1">c56fb980eb5208bfee29a9a5b9d951aba076bd91</hash>
-        <hash 
alg="SHA-256">9f34e007edfa82a7b2a2e1b969477dcf5099ce7f4f926fb54ce7e27c4a0cd54b</hash>
-        <hash 
alg="SHA-512">7e2c2e421c46d66f35ae0c107c31ae28606562190871655efd38c60b335a10b1770134f88c8aada5a389e9e364be885713fe7d0464c2a9fbea06ec1102b2c3e5</hash>
-        <hash 
alg="SHA-384">3740a5ddb6bf6d1627190fbabf06ffc19fb84a488c120ebf1bbc6407971905c7f415310a17c8db77ee90d09cb2301d3d</hash>
-        <hash 
alg="SHA3-384">49c3aca710ab2ad62e4610ad0f3b76338079aa49e90e84cb18b59ced56caf9f6e2bc855e9900cb1b7748a1f3e0d160e2</hash>
-        <hash 
alg="SHA3-256">ed71d13b59b8ebba5fb3f2f42da03e29d1fdaefef8fde375794a6598fdb702be</hash>
-        <hash 
alg="SHA3-512">8b93ce37a0ea13bcb8f35a0237307f7b232c178d11e452d02c4383dbd51531eeb4a3c722778dfb95637412e6451a132f6031f0f4e3d51928a6b857160269dec0</hash>
-      </hashes>
-      <licenses>
-        <license>
-          <id>Apache-2.0</id>
-        </license>
-      </licenses>
-      <purl>pkg:maven/javax.cache/cache-api@1.1.1?type=jar</purl>
-      <externalReferences><reference 
type="website"><url>https://github.com/jsr107/jsr107spec</url></reference><reference
 
type="distribution"><url>http://oss.sonatype.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
-    </component>
     <component type="library" 
bom-ref="pkg:maven/io.projectreactor/reactor-core@3.4.4?type=jar">
       <publisher>reactor</publisher>
       <group>io.projectreactor</group>
@@ -54792,76 +54767,30 @@ SAX2 and Stax2 APIs</description>
       
<purl>pkg:maven/org.apache.camel/camel-thrift@4.0.0-SNAPSHOT?type=jar</purl>
       <externalReferences><reference 
type="website"><url>https://camel.apache.org/camel-parent/components/camel-thrift</url></reference><reference
 
type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference
 
type="issue-tracker"><url>https://issues.apache.org/jira/browse/CAMEL</url></reference><reference
 
type="mailing-list"><url>dev-subscr...@camel.apache.org</url></reference><reference
 type="vcs"><url>https://gitbox.apache.org/re [...]
     </component>
-    <component type="library" 
bom-ref="pkg:maven/org.apache.thrift/libthrift@0.14.1?type=jar">
+    <component type="library" 
bom-ref="pkg:maven/org.apache.thrift/libthrift@0.17.0?type=jar">
       <group>org.apache.thrift</group>
       <name>libthrift</name>
-      <version>0.14.1</version>
+      <version>0.17.0</version>
       <description>Thrift is a software framework for scalable cross-language 
services development.</description>
       <scope>required</scope>
       <hashes>
-        <hash alg="MD5">ef7e068f5319c5a9deee83990e8ef557</hash>
-        <hash alg="SHA-1">85348a0c44c298bbec5ae747e67ae12e60b3aef6</hash>
-        <hash 
alg="SHA-256">5b3510fe72e6f0725e29cef6ebdb1eabacccc69d79fc4ed50b681600a87667ec</hash>
-        <hash 
alg="SHA-512">392590d79e520a9ee07c9332be11c4295ea572c25aa5adbceccdede22085cc5d019c1510befce9dcc747ca9923c2267e4d23adb2276df227cf1fd79d6228158c</hash>
-        <hash 
alg="SHA-384">4cf645f0233fd1bb530afb6d92e13dfc05b98b22d7f8e90bf6026e72b9f0c392a263499ab63b05f27453d8fe52c150d0</hash>
-        <hash 
alg="SHA3-384">c407638c126efb91233170b38db81d776383b13719715c962ad03163813aa90c69cebea9a9c94a11de89b2c513181de3</hash>
-        <hash 
alg="SHA3-256">cd064ebd555683f27049a9caf303d3201f7350ee8b2c980a6f73f53716f4a886</hash>
-        <hash 
alg="SHA3-512">c8ce5f46b491799bc74862c0ed24094bbe0a395ed535874bc24b9b83a24cd18f461b267582346714dfaafc7a6e9e3b70e9e7faeb2059cdeae5e0f700f36dc5a5</hash>
+        <hash alg="MD5">b4e4d44f7c3b3bb7f1b77b7131a534b9</hash>
+        <hash alg="SHA-1">36aec83a463d233ab537407df7612c383727b03f</hash>
+        <hash 
alg="SHA-256">91135681b23af6132865725509f1ba8e7f8a0d89076b6105ce4d9b9fec4024cc</hash>
+        <hash 
alg="SHA-512">644937dc90b43b81a145d2b737d91cd37644b3f90e1fbc56d2ce190d9b591ebccfb4f4fc1fe663bcf636355a24aed4d6e12bf96e89c310c10f4c49aaadc68112</hash>
+        <hash 
alg="SHA-384">3136aee7d34f35e26aecb82864699d9878b648674b57ec4d44f56f8f076cc1fd1fe8196b4de68deca2632f3ffe0d3cdb</hash>
+        <hash 
alg="SHA3-384">fee843072f2646688fe7f8d28a2357c3f8c5553d3321a2e153923290e01d8e3488d44e0d4ce68d697c8687b0877013a6</hash>
+        <hash 
alg="SHA3-256">99f23ef5e6a16a6f6f25aa63380c72341d64d80a022500f9641e1c9c9f1d7f35</hash>
+        <hash 
alg="SHA3-512">4f93b054e4d4e6a617efa576f53bc1c8bbce959be9ef9de6dc69b42c238da73adc62b3df3b2cd1ed95c1606f856a05386db1c757772dade1e4d4d679fca00790</hash>
       </hashes>
       <licenses>
         <license>
           <id>Apache-2.0</id>
         </license>
       </licenses>
-      <purl>pkg:maven/org.apache.thrift/libthrift@0.14.1?type=jar</purl>
+      <purl>pkg:maven/org.apache.thrift/libthrift@0.17.0?type=jar</purl>
       <externalReferences><reference 
type="website"><url>http://thrift.apache.org</url></reference><reference 
type="vcs"><url>https://github.com/apache/thrift</url></reference></externalReferences>
     </component>
-    <component type="library" 
bom-ref="pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@8.5.46?type=jar">
-      <group>org.apache.tomcat.embed</group>
-      <name>tomcat-embed-core</name>
-      <version>8.5.46</version>
-      <description>Core Tomcat implementation</description>
-      <hashes>
-        <hash alg="MD5">45378afdce63a61c488db97d2a6e9fbd</hash>
-        <hash alg="SHA-1">5d686394334d143f48251827435ab086a161e75e</hash>
-        <hash 
alg="SHA-256">be5f854448d2ee5d6e0036feb2b4f713163079a1b6b9a7a97508e55917ad35c2</hash>
-        <hash 
alg="SHA-512">f85371c45348625c5854e99cc6efcdedd2724cca20dbaa6c9a76141492a70e8c882a4b66de63b0d1cdd170e23f18f86efaa52bdafc05cc903d4b83f1ac4799a1</hash>
-        <hash 
alg="SHA-384">5feffe14a4874d5d738e35e65b06ada607e67cef9b44c4e29feae1897bee63787faca034f4bde301b9e3e1ad60118232</hash>
-        <hash 
alg="SHA3-384">318450bba37870cfddf798fe0273f9f494b17a5e37019b28a26f15293a026ce2ee10e2182957c0a5c2398b6cf4d267d4</hash>
-        <hash 
alg="SHA3-256">859ca4f24d9aa0c8b7287a39a5818b1e94d9a7563074a52fce0b1abeedd9a419</hash>
-        <hash 
alg="SHA3-512">101144ddd60df18c01e6aea47a0c7620fad87913c0b24e3184b8ff5ee133c631945455b7c51c76aa173666ac90921dd0db1407d5395e11b43abe4e58a46f3985</hash>
-      </hashes>
-      <licenses>
-        <license>
-          <id>Apache-2.0</id>
-        </license>
-      </licenses>
-      
<purl>pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@8.5.46?type=jar</purl>
-      <externalReferences><reference 
type="website"><url>https://tomcat.apache.org/</url></reference></externalReferences>
-    </component>
-    <component type="library" 
bom-ref="pkg:maven/org.apache.tomcat/tomcat-annotations-api@8.5.46?type=jar">
-      <group>org.apache.tomcat</group>
-      <name>tomcat-annotations-api</name>
-      <version>8.5.46</version>
-      <description>Annotations Package</description>
-      <hashes>
-        <hash alg="MD5">24d29eeee84c155a9a9fe72bbd98c0b7</hash>
-        <hash alg="SHA-1">56c67699de192c603afd6f029e80e5ff8d98e7e9</hash>
-        <hash 
alg="SHA-256">6a6b46d0e6958644514c0ca3658b3b07e6123a682a20ee36d3795242735fabc3</hash>
-        <hash 
alg="SHA-512">249c77fc30f1b054e35531aa5a52b242f05ef3e16f83f8c7751d766d490da5a8ea24f798605d35b8b1c8651834c50abd19c4ac0f93c483b020d7a90758ab832e</hash>
-        <hash 
alg="SHA-384">f4bb78d0c7e12d733d46378b2ab75afb057a631d69957af5527dfbd89399f1c89c8562e56df95b2c691023987b6696e3</hash>
-        <hash 
alg="SHA3-384">fcde30303d433881f6b20aa07715a26b93c4702c5b5705e5747a141c94b1aeef40737dc5d0fa262d07224a763734d3e1</hash>
-        <hash 
alg="SHA3-256">85fdca9eb886ab8e4e1610422b176880a8dc3b195153bd53460ad861900967ac</hash>
-        <hash 
alg="SHA3-512">81455e112788bc580b229733e21aa5d3077237b2798c7a134cefd9f0db722ec48f220ecff50428c296285f2c47da5d12f90be8bfd4c9b5d88fc5266ceb07a3d7</hash>
-      </hashes>
-      <licenses>
-        <license>
-          <id>Apache-2.0</id>
-        </license>
-      </licenses>
-      
<purl>pkg:maven/org.apache.tomcat/tomcat-annotations-api@8.5.46?type=jar</purl>
-      <externalReferences><reference 
type="website"><url>https://tomcat.apache.org/</url></reference></externalReferences>
-    </component>
     <component type="library" 
bom-ref="pkg:maven/org.apache.camel/camel-tika@4.0.0-SNAPSHOT?type=jar">
       <publisher>The Apache Software Foundation</publisher>
       <group>org.apache.camel</group>
@@ -69352,9 +69281,9 @@ configuration files as if there was implied nesting 
structure (by default using
     <dependency ref="pkg:maven/org.graalvm.sdk/graal-sdk@22.3.0?type=jar"/>
     <dependency 
ref="pkg:maven/org.apache.camel/camel-jcache@4.0.0-SNAPSHOT?type=jar">
       <dependency 
ref="pkg:maven/org.apache.camel/camel-support@4.0.0-SNAPSHOT?type=jar"/>
-      <dependency 
ref="pkg:maven/org.apache.servicemix.bundles/org.apache.servicemix.bundles.javax-cache-api@1.1.1_1?type=jar"/>
+      <dependency ref="pkg:maven/javax.cache/cache-api@1.1.1?type=jar"/>
     </dependency>
-    <dependency 
ref="pkg:maven/org.apache.servicemix.bundles/org.apache.servicemix.bundles.javax-cache-api@1.1.1_1?type=jar"/>
+    <dependency ref="pkg:maven/javax.cache/cache-api@1.1.1?type=jar"/>
     <dependency 
ref="pkg:maven/org.apache.camel/camel-tracing@4.0.0-SNAPSHOT?type=jar">
       <dependency 
ref="pkg:maven/org.apache.camel/camel-support@4.0.0-SNAPSHOT?type=jar"/>
     </dependency>
@@ -71130,7 +71059,6 @@ configuration files as if there was implied nesting 
structure (by default using
       <dependency ref="pkg:maven/net.bytebuddy/byte-buddy@1.11.0?type=jar"/>
       <dependency ref="pkg:maven/org.jodd/jodd-bean@5.1.6?type=jar"/>
     </dependency>
-    <dependency ref="pkg:maven/javax.cache/cache-api@1.1.1?type=jar"/>
     <dependency ref="pkg:maven/io.projectreactor/reactor-core@3.4.4?type=jar">
       <dependency 
ref="pkg:maven/org.reactivestreams/reactive-streams@1.0.3?type=jar"/>
     </dependency>
@@ -71864,21 +71792,11 @@ configuration files as if there was implied nesting 
structure (by default using
     </dependency>
     <dependency 
ref="pkg:maven/org.apache.camel/camel-thrift@4.0.0-SNAPSHOT?type=jar">
       <dependency 
ref="pkg:maven/org.apache.camel/camel-support@4.0.0-SNAPSHOT?type=jar"/>
-      <dependency ref="pkg:maven/org.apache.thrift/libthrift@0.14.1?type=jar"/>
+      <dependency ref="pkg:maven/org.apache.thrift/libthrift@0.17.0?type=jar"/>
       <dependency ref="pkg:maven/org.javassist/javassist@3.28.0-GA?type=jar"/>
       <dependency ref="pkg:maven/commons-io/commons-io@2.11.0?type=jar"/>
     </dependency>
-    <dependency ref="pkg:maven/org.apache.thrift/libthrift@0.14.1?type=jar">
-      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.6?type=jar"/>
-      <dependency 
ref="pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar"/>
-      <dependency 
ref="pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar"/>
-      <dependency 
ref="pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@8.5.46?type=jar"/>
-      <dependency 
ref="pkg:maven/javax.annotation/javax.annotation-api@1.3.2?type=jar"/>
-    </dependency>
-    <dependency 
ref="pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@8.5.46?type=jar">
-      <dependency 
ref="pkg:maven/org.apache.tomcat/tomcat-annotations-api@8.5.46?type=jar"/>
-    </dependency>
-    <dependency 
ref="pkg:maven/org.apache.tomcat/tomcat-annotations-api@8.5.46?type=jar"/>
+    <dependency ref="pkg:maven/org.apache.thrift/libthrift@0.17.0?type=jar"/>
     <dependency 
ref="pkg:maven/org.apache.camel/camel-tika@4.0.0-SNAPSHOT?type=jar">
       <dependency 
ref="pkg:maven/org.apache.camel/camel-support@4.0.0-SNAPSHOT?type=jar"/>
       <dependency ref="pkg:maven/org.apache.tika/tika-core@2.6.0?type=jar"/>


Reply via email to