This is an automated email from the ASF dual-hosted git repository. acosentino pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/camel.git
commit 1d89b272ca4ad5fe1f95e936db98fd68b17f1343 Author: Andrea Cosentino <anco...@gmail.com> AuthorDate: Mon Jan 23 13:10:56 2023 +0100 Regen SBOM Signed-off-by: Andrea Cosentino <anco...@gmail.com> --- camel-sbom/camel-sbom.json | 272 ++++++--------------------------------------- camel-sbom/camel-sbom.xml | 146 ++++++------------------ 2 files changed, 65 insertions(+), 353 deletions(-) diff --git a/camel-sbom/camel-sbom.json b/camel-sbom/camel-sbom.json index 8ebd5e950f6..b3bcbccf92c 100644 --- a/camel-sbom/camel-sbom.json +++ b/camel-sbom/camel-sbom.json @@ -1,10 +1,10 @@ { "bomFormat" : "CycloneDX", "specVersion" : "1.4", - "serialNumber" : "urn:uuid:dd08712f-d1ee-47b7-9153-5647b6acf58a", + "serialNumber" : "urn:uuid:6f152ddc-82d5-4011-a2b3-f9ea9f5bbd8d", "version" : 1, "metadata" : { - "timestamp" : "2023-01-23T09:05:59Z", + "timestamp" : "2023-01-23T12:09:32Z", "tools" : [ { "vendor" : "OWASP Foundation", @@ -84857,7 +84857,6 @@ "name" : "cache-api", "version" : "1.1.0", "description" : "Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/", - "scope" : "required", "hashes" : [ { "alg" : "MD5", @@ -115247,44 +115246,43 @@ "bom-ref" : "pkg:maven/org.apache.camel/camel-jcache@4.0.0-SNAPSHOT?type=jar" }, { - "publisher" : "The Apache Software Foundation", - "group" : "org.apache.servicemix.bundles", - "name" : "org.apache.servicemix.bundles.javax-cache-api", - "version" : "1.1.1_1", - "description" : "This OSGi bundle wraps cache-api 1.1.1 jar file.", + "group" : "javax.cache", + "name" : "cache-api", + "version" : "1.1.1", + "description" : "Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "0d7fe9916395b21846169a9eff6b8a7c" + "content" : "dfdac9358e140e61c574abb1ada84dc9" }, { "alg" : "SHA-1", - "content" : "7d44c39b1ae76a47a839fad1e34780cb547729b6" + "content" : "c56fb980eb5208bfee29a9a5b9d951aba076bd91" }, { "alg" : "SHA-256", - "content" : "8270b602351d6e195837cddf60f46287c5d6b133be95021591e95e03da141d94" + "content" : "9f34e007edfa82a7b2a2e1b969477dcf5099ce7f4f926fb54ce7e27c4a0cd54b" }, { "alg" : "SHA-512", - "content" : "2c0097b8eb7354e85ecb07901898f91c372134c9e62b9bda300514957bbfa05a80044b81f50cc0bc83679277622cda3d8e3eb8801291ad4c05ba0796ec3c9aab" + "content" : "7e2c2e421c46d66f35ae0c107c31ae28606562190871655efd38c60b335a10b1770134f88c8aada5a389e9e364be885713fe7d0464c2a9fbea06ec1102b2c3e5" }, { "alg" : "SHA-384", - "content" : "1bedbf0fa4fbc51de0797e95db8b34390a337e104bcd82a05dc2b7df8bec51c4852f1a1baf8a077e527af0384325a19c" + "content" : "3740a5ddb6bf6d1627190fbabf06ffc19fb84a488c120ebf1bbc6407971905c7f415310a17c8db77ee90d09cb2301d3d" }, { "alg" : "SHA3-384", - "content" : "3c6b8b5dbf34e55fbcb34e4b1aa2539d19651ea52131cde9f525ea808047ea59b51ee79083f184109cb860b8df2ae526" + "content" : "49c3aca710ab2ad62e4610ad0f3b76338079aa49e90e84cb18b59ced56caf9f6e2bc855e9900cb1b7748a1f3e0d160e2" }, { "alg" : "SHA3-256", - "content" : "ae364c83245c3f1ea0a08cb87bb69c4eb609d7d1f57f5439b8753cabbe139b13" + "content" : "ed71d13b59b8ebba5fb3f2f42da03e29d1fdaefef8fde375794a6598fdb702be" }, { "alg" : "SHA3-512", - "content" : "a8d4e0fd5bcbf98ecc3920432359cb3a89ddbe4b8e228d0744a47f0ea9daf2ef58e905f5742c028dd333bf025652ab8bf0ebe828e9d8fefa19923ad2279388ac" + "content" : "8b93ce37a0ea13bcb8f35a0237307f7b232c178d11e452d02c4383dbd51531eeb4a3c722778dfb95637412e6451a132f6031f0f4e3d51928a6b857160269dec0" } ], "licenses" : [ @@ -115294,31 +115292,19 @@ } } ], - "purl" : "pkg:maven/org.apache.servicemix.bundles/org.apache.servicemix.bundles.javax-cache-api@1.1.1_1?type=jar", + "purl" : "pkg:maven/javax.cache/cache-api@1.1.1?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://servicemix.apache.org/bundles-pom/org.apache.servicemix.bundles.javax-cache-api/" + "url" : "https://github.com/jsr107/jsr107spec" }, { "type" : "distribution", - "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" - }, - { - "type" : "issue-tracker", - "url" : "http://issues.apache.org/activemq/browse/SM" - }, - { - "type" : "mailing-list", - "url" : "http://servicemix.apache.org/discussion-forums.html#nabble-f12051" - }, - { - "type" : "vcs", - "url" : "https://gitbox.apache.org/repos/asf?p=servicemix-bundles.git" + "url" : "http://oss.sonatype.org/service/local/staging/deploy/maven2" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.apache.servicemix.bundles/org.apache.servicemix.bundles.javax-cache-api@1.1.1_1?type=jar" + "bom-ref" : "pkg:maven/javax.cache/cache-api@1.1.1?type=jar" }, { "publisher" : "The Apache Software Foundation", @@ -139133,66 +139119,6 @@ "type" : "library", "bom-ref" : "pkg:maven/org.redisson/redisson@3.16.7?type=jar" }, - { - "group" : "javax.cache", - "name" : "cache-api", - "version" : "1.1.1", - "description" : "Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/", - "hashes" : [ - { - "alg" : "MD5", - "content" : "dfdac9358e140e61c574abb1ada84dc9" - }, - { - "alg" : "SHA-1", - "content" : "c56fb980eb5208bfee29a9a5b9d951aba076bd91" - }, - { - "alg" : "SHA-256", - "content" : "9f34e007edfa82a7b2a2e1b969477dcf5099ce7f4f926fb54ce7e27c4a0cd54b" - }, - { - "alg" : "SHA-512", - "content" : "7e2c2e421c46d66f35ae0c107c31ae28606562190871655efd38c60b335a10b1770134f88c8aada5a389e9e364be885713fe7d0464c2a9fbea06ec1102b2c3e5" - }, - { - "alg" : "SHA-384", - "content" : "3740a5ddb6bf6d1627190fbabf06ffc19fb84a488c120ebf1bbc6407971905c7f415310a17c8db77ee90d09cb2301d3d" - }, - { - "alg" : "SHA3-384", - "content" : "49c3aca710ab2ad62e4610ad0f3b76338079aa49e90e84cb18b59ced56caf9f6e2bc855e9900cb1b7748a1f3e0d160e2" - }, - { - "alg" : "SHA3-256", - "content" : "ed71d13b59b8ebba5fb3f2f42da03e29d1fdaefef8fde375794a6598fdb702be" - }, - { - "alg" : "SHA3-512", - "content" : "8b93ce37a0ea13bcb8f35a0237307f7b232c178d11e452d02c4383dbd51531eeb4a3c722778dfb95637412e6451a132f6031f0f4e3d51928a6b857160269dec0" - } - ], - "licenses" : [ - { - "license" : { - "id" : "Apache-2.0" - } - } - ], - "purl" : "pkg:maven/javax.cache/cache-api@1.1.1?type=jar", - "externalReferences" : [ - { - "type" : "website", - "url" : "https://github.com/jsr107/jsr107spec" - }, - { - "type" : "distribution", - "url" : "http://oss.sonatype.org/service/local/staging/deploy/maven2" - } - ], - "type" : "library", - "bom-ref" : "pkg:maven/javax.cache/cache-api@1.1.1?type=jar" - }, { "publisher" : "reactor", "group" : "io.projectreactor", @@ -148662,41 +148588,41 @@ { "group" : "org.apache.thrift", "name" : "libthrift", - "version" : "0.14.1", + "version" : "0.17.0", "description" : "Thrift is a software framework for scalable cross-language services development.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "ef7e068f5319c5a9deee83990e8ef557" + "content" : "b4e4d44f7c3b3bb7f1b77b7131a534b9" }, { "alg" : "SHA-1", - "content" : "85348a0c44c298bbec5ae747e67ae12e60b3aef6" + "content" : "36aec83a463d233ab537407df7612c383727b03f" }, { "alg" : "SHA-256", - "content" : "5b3510fe72e6f0725e29cef6ebdb1eabacccc69d79fc4ed50b681600a87667ec" + "content" : "91135681b23af6132865725509f1ba8e7f8a0d89076b6105ce4d9b9fec4024cc" }, { "alg" : "SHA-512", - "content" : "392590d79e520a9ee07c9332be11c4295ea572c25aa5adbceccdede22085cc5d019c1510befce9dcc747ca9923c2267e4d23adb2276df227cf1fd79d6228158c" + "content" : "644937dc90b43b81a145d2b737d91cd37644b3f90e1fbc56d2ce190d9b591ebccfb4f4fc1fe663bcf636355a24aed4d6e12bf96e89c310c10f4c49aaadc68112" }, { "alg" : "SHA-384", - "content" : "4cf645f0233fd1bb530afb6d92e13dfc05b98b22d7f8e90bf6026e72b9f0c392a263499ab63b05f27453d8fe52c150d0" + "content" : "3136aee7d34f35e26aecb82864699d9878b648674b57ec4d44f56f8f076cc1fd1fe8196b4de68deca2632f3ffe0d3cdb" }, { "alg" : "SHA3-384", - "content" : "c407638c126efb91233170b38db81d776383b13719715c962ad03163813aa90c69cebea9a9c94a11de89b2c513181de3" + "content" : "fee843072f2646688fe7f8d28a2357c3f8c5553d3321a2e153923290e01d8e3488d44e0d4ce68d697c8687b0877013a6" }, { "alg" : "SHA3-256", - "content" : "cd064ebd555683f27049a9caf303d3201f7350ee8b2c980a6f73f53716f4a886" + "content" : "99f23ef5e6a16a6f6f25aa63380c72341d64d80a022500f9641e1c9c9f1d7f35" }, { "alg" : "SHA3-512", - "content" : "c8ce5f46b491799bc74862c0ed24094bbe0a395ed535874bc24b9b83a24cd18f461b267582346714dfaafc7a6e9e3b70e9e7faeb2059cdeae5e0f700f36dc5a5" + "content" : "4f93b054e4d4e6a617efa576f53bc1c8bbce959be9ef9de6dc69b42c238da73adc62b3df3b2cd1ed95c1606f856a05386db1c757772dade1e4d4d679fca00790" } ], "licenses" : [ @@ -148706,7 +148632,7 @@ } } ], - "purl" : "pkg:maven/org.apache.thrift/libthrift@0.14.1?type=jar", + "purl" : "pkg:maven/org.apache.thrift/libthrift@0.17.0?type=jar", "externalReferences" : [ { "type" : "website", @@ -148718,119 +148644,7 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/org.apache.thrift/libthrift@0.14.1?type=jar" - }, - { - "group" : "org.apache.tomcat.embed", - "name" : "tomcat-embed-core", - "version" : "8.5.46", - "description" : "Core Tomcat implementation", - "hashes" : [ - { - "alg" : "MD5", - "content" : "45378afdce63a61c488db97d2a6e9fbd" - }, - { - "alg" : "SHA-1", - "content" : "5d686394334d143f48251827435ab086a161e75e" - }, - { - "alg" : "SHA-256", - "content" : "be5f854448d2ee5d6e0036feb2b4f713163079a1b6b9a7a97508e55917ad35c2" - }, - { - "alg" : "SHA-512", - "content" : "f85371c45348625c5854e99cc6efcdedd2724cca20dbaa6c9a76141492a70e8c882a4b66de63b0d1cdd170e23f18f86efaa52bdafc05cc903d4b83f1ac4799a1" - }, - { - "alg" : "SHA-384", - "content" : "5feffe14a4874d5d738e35e65b06ada607e67cef9b44c4e29feae1897bee63787faca034f4bde301b9e3e1ad60118232" - }, - { - "alg" : "SHA3-384", - "content" : "318450bba37870cfddf798fe0273f9f494b17a5e37019b28a26f15293a026ce2ee10e2182957c0a5c2398b6cf4d267d4" - }, - { - "alg" : "SHA3-256", - "content" : "859ca4f24d9aa0c8b7287a39a5818b1e94d9a7563074a52fce0b1abeedd9a419" - }, - { - "alg" : "SHA3-512", - "content" : "101144ddd60df18c01e6aea47a0c7620fad87913c0b24e3184b8ff5ee133c631945455b7c51c76aa173666ac90921dd0db1407d5395e11b43abe4e58a46f3985" - } - ], - "licenses" : [ - { - "license" : { - "id" : "Apache-2.0" - } - } - ], - "purl" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@8.5.46?type=jar", - "externalReferences" : [ - { - "type" : "website", - "url" : "https://tomcat.apache.org/" - } - ], - "type" : "library", - "bom-ref" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@8.5.46?type=jar" - }, - { - "group" : "org.apache.tomcat", - "name" : "tomcat-annotations-api", - "version" : "8.5.46", - "description" : "Annotations Package", - "hashes" : [ - { - "alg" : "MD5", - "content" : "24d29eeee84c155a9a9fe72bbd98c0b7" - }, - { - "alg" : "SHA-1", - "content" : "56c67699de192c603afd6f029e80e5ff8d98e7e9" - }, - { - "alg" : "SHA-256", - "content" : "6a6b46d0e6958644514c0ca3658b3b07e6123a682a20ee36d3795242735fabc3" - }, - { - "alg" : "SHA-512", - "content" : "249c77fc30f1b054e35531aa5a52b242f05ef3e16f83f8c7751d766d490da5a8ea24f798605d35b8b1c8651834c50abd19c4ac0f93c483b020d7a90758ab832e" - }, - { - "alg" : "SHA-384", - "content" : "f4bb78d0c7e12d733d46378b2ab75afb057a631d69957af5527dfbd89399f1c89c8562e56df95b2c691023987b6696e3" - }, - { - "alg" : "SHA3-384", - "content" : "fcde30303d433881f6b20aa07715a26b93c4702c5b5705e5747a141c94b1aeef40737dc5d0fa262d07224a763734d3e1" - }, - { - "alg" : "SHA3-256", - "content" : "85fdca9eb886ab8e4e1610422b176880a8dc3b195153bd53460ad861900967ac" - }, - { - "alg" : "SHA3-512", - "content" : "81455e112788bc580b229733e21aa5d3077237b2798c7a134cefd9f0db722ec48f220ecff50428c296285f2c47da5d12f90be8bfd4c9b5d88fc5266ceb07a3d7" - } - ], - "licenses" : [ - { - "license" : { - "id" : "Apache-2.0" - } - } - ], - "purl" : "pkg:maven/org.apache.tomcat/tomcat-annotations-api@8.5.46?type=jar", - "externalReferences" : [ - { - "type" : "website", - "url" : "https://tomcat.apache.org/" - } - ], - "type" : "library", - "bom-ref" : "pkg:maven/org.apache.tomcat/tomcat-annotations-api@8.5.46?type=jar" + "bom-ref" : "pkg:maven/org.apache.thrift/libthrift@0.17.0?type=jar" }, { "publisher" : "The Apache Software Foundation", @@ -177821,11 +177635,11 @@ "ref" : "pkg:maven/org.apache.camel/camel-jcache@4.0.0-SNAPSHOT?type=jar", "dependsOn" : [ "pkg:maven/org.apache.camel/camel-support@4.0.0-SNAPSHOT?type=jar", - "pkg:maven/org.apache.servicemix.bundles/org.apache.servicemix.bundles.javax-cache-api@1.1.1_1?type=jar" + "pkg:maven/javax.cache/cache-api@1.1.1?type=jar" ] }, { - "ref" : "pkg:maven/org.apache.servicemix.bundles/org.apache.servicemix.bundles.javax-cache-api@1.1.1_1?type=jar", + "ref" : "pkg:maven/javax.cache/cache-api@1.1.1?type=jar", "dependsOn" : [ ] }, { @@ -180764,10 +180578,6 @@ "pkg:maven/org.jodd/jodd-bean@5.1.6?type=jar" ] }, - { - "ref" : "pkg:maven/javax.cache/cache-api@1.1.1?type=jar", - "dependsOn" : [ ] - }, { "ref" : "pkg:maven/io.projectreactor/reactor-core@3.4.4?type=jar", "dependsOn" : [ @@ -181974,29 +181784,13 @@ "ref" : "pkg:maven/org.apache.camel/camel-thrift@4.0.0-SNAPSHOT?type=jar", "dependsOn" : [ "pkg:maven/org.apache.camel/camel-support@4.0.0-SNAPSHOT?type=jar", - "pkg:maven/org.apache.thrift/libthrift@0.14.1?type=jar", + "pkg:maven/org.apache.thrift/libthrift@0.17.0?type=jar", "pkg:maven/org.javassist/javassist@3.28.0-GA?type=jar", "pkg:maven/commons-io/commons-io@2.11.0?type=jar" ] }, { - "ref" : "pkg:maven/org.apache.thrift/libthrift@0.14.1?type=jar", - "dependsOn" : [ - "pkg:maven/org.slf4j/slf4j-api@2.0.6?type=jar", - "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar", - "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar", - "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@8.5.46?type=jar", - "pkg:maven/javax.annotation/javax.annotation-api@1.3.2?type=jar" - ] - }, - { - "ref" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@8.5.46?type=jar", - "dependsOn" : [ - "pkg:maven/org.apache.tomcat/tomcat-annotations-api@8.5.46?type=jar" - ] - }, - { - "ref" : "pkg:maven/org.apache.tomcat/tomcat-annotations-api@8.5.46?type=jar", + "ref" : "pkg:maven/org.apache.thrift/libthrift@0.17.0?type=jar", "dependsOn" : [ ] }, { diff --git a/camel-sbom/camel-sbom.xml b/camel-sbom/camel-sbom.xml index b208309f8f8..cc4c7f7ce5d 100644 --- a/camel-sbom/camel-sbom.xml +++ b/camel-sbom/camel-sbom.xml @@ -1,7 +1,7 @@ <?xml version="1.0" encoding="UTF-8"?> -<bom serialNumber="urn:uuid:dd08712f-d1ee-47b7-9153-5647b6acf58a" version="1" xmlns="http://cyclonedx.org/schema/bom/1.4"> +<bom serialNumber="urn:uuid:6f152ddc-82d5-4011-a2b3-f9ea9f5bbd8d" version="1" xmlns="http://cyclonedx.org/schema/bom/1.4"> <metadata> - <timestamp>2023-01-23T09:05:59Z</timestamp> + <timestamp>2023-01-23T12:09:32Z</timestamp> <tools> <tool> <vendor>OWASP Foundation</vendor> @@ -31146,7 +31146,6 @@ data-binding.</description> <name>cache-api</name> <version>1.1.0</version> <description>Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/</description> - <scope>required</scope> <hashes> <hash alg="MD5">ac907ad12e9a7ac5d41abf703855002f</hash> <hash alg="SHA-1">77bdcff7814076dfa61611b0db88487c515150b6</hash> @@ -42472,30 +42471,29 @@ GraalVM removes the isolation between programming languages and enables interope <purl>pkg:maven/org.apache.camel/camel-jcache@4.0.0-SNAPSHOT?type=jar</purl> <externalReferences><reference type="website"><url>https://camel.apache.org/camel-parent/components/camel-jcache</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CAMEL</url></reference><reference type="mailing-list"><url>dev-subscr...@camel.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/re [...] </component> - <component type="library" bom-ref="pkg:maven/org.apache.servicemix.bundles/org.apache.servicemix.bundles.javax-cache-api@1.1.1_1?type=jar"> - <publisher>The Apache Software Foundation</publisher> - <group>org.apache.servicemix.bundles</group> - <name>org.apache.servicemix.bundles.javax-cache-api</name> - <version>1.1.1_1</version> - <description>This OSGi bundle wraps cache-api 1.1.1 jar file.</description> + <component type="library" bom-ref="pkg:maven/javax.cache/cache-api@1.1.1?type=jar"> + <group>javax.cache</group> + <name>cache-api</name> + <version>1.1.1</version> + <description>Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/</description> <scope>required</scope> <hashes> - <hash alg="MD5">0d7fe9916395b21846169a9eff6b8a7c</hash> - <hash alg="SHA-1">7d44c39b1ae76a47a839fad1e34780cb547729b6</hash> - <hash alg="SHA-256">8270b602351d6e195837cddf60f46287c5d6b133be95021591e95e03da141d94</hash> - <hash alg="SHA-512">2c0097b8eb7354e85ecb07901898f91c372134c9e62b9bda300514957bbfa05a80044b81f50cc0bc83679277622cda3d8e3eb8801291ad4c05ba0796ec3c9aab</hash> - <hash alg="SHA-384">1bedbf0fa4fbc51de0797e95db8b34390a337e104bcd82a05dc2b7df8bec51c4852f1a1baf8a077e527af0384325a19c</hash> - <hash alg="SHA3-384">3c6b8b5dbf34e55fbcb34e4b1aa2539d19651ea52131cde9f525ea808047ea59b51ee79083f184109cb860b8df2ae526</hash> - <hash alg="SHA3-256">ae364c83245c3f1ea0a08cb87bb69c4eb609d7d1f57f5439b8753cabbe139b13</hash> - <hash alg="SHA3-512">a8d4e0fd5bcbf98ecc3920432359cb3a89ddbe4b8e228d0744a47f0ea9daf2ef58e905f5742c028dd333bf025652ab8bf0ebe828e9d8fefa19923ad2279388ac</hash> + <hash alg="MD5">dfdac9358e140e61c574abb1ada84dc9</hash> + <hash alg="SHA-1">c56fb980eb5208bfee29a9a5b9d951aba076bd91</hash> + <hash alg="SHA-256">9f34e007edfa82a7b2a2e1b969477dcf5099ce7f4f926fb54ce7e27c4a0cd54b</hash> + <hash alg="SHA-512">7e2c2e421c46d66f35ae0c107c31ae28606562190871655efd38c60b335a10b1770134f88c8aada5a389e9e364be885713fe7d0464c2a9fbea06ec1102b2c3e5</hash> + <hash alg="SHA-384">3740a5ddb6bf6d1627190fbabf06ffc19fb84a488c120ebf1bbc6407971905c7f415310a17c8db77ee90d09cb2301d3d</hash> + <hash alg="SHA3-384">49c3aca710ab2ad62e4610ad0f3b76338079aa49e90e84cb18b59ced56caf9f6e2bc855e9900cb1b7748a1f3e0d160e2</hash> + <hash alg="SHA3-256">ed71d13b59b8ebba5fb3f2f42da03e29d1fdaefef8fde375794a6598fdb702be</hash> + <hash alg="SHA3-512">8b93ce37a0ea13bcb8f35a0237307f7b232c178d11e452d02c4383dbd51531eeb4a3c722778dfb95637412e6451a132f6031f0f4e3d51928a6b857160269dec0</hash> </hashes> <licenses> <license> <id>Apache-2.0</id> </license> </licenses> - <purl>pkg:maven/org.apache.servicemix.bundles/org.apache.servicemix.bundles.javax-cache-api@1.1.1_1?type=jar</purl> - <externalReferences><reference type="website"><url>http://servicemix.apache.org/bundles-pom/org.apache.servicemix.bundles.javax-cache-api/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/activemq/browse/SM</url></reference><reference type="mailing-list"><url>http://servicemix.apache.org/discussion-forums.html#nabble-f12051</url></refe [...] + <purl>pkg:maven/javax.cache/cache-api@1.1.1?type=jar</purl> + <externalReferences><reference type="website"><url>https://github.com/jsr107/jsr107spec</url></reference><reference type="distribution"><url>http://oss.sonatype.org/service/local/staging/deploy/maven2</url></reference></externalReferences> </component> <component type="library" bom-ref="pkg:maven/org.apache.camel/camel-tracing@4.0.0-SNAPSHOT?type=jar"> <publisher>The Apache Software Foundation</publisher> @@ -51274,29 +51272,6 @@ flexible messaging model and an intuitive client API.</description> <purl>pkg:maven/org.redisson/redisson@3.16.7?type=jar</purl> <externalReferences><reference type="website"><url>http://redisson.org</url></reference><reference type="vcs"><url>scm:git:g...@github.com:redisson/redisson.git/redisson</url></reference></externalReferences> </component> - <component type="library" bom-ref="pkg:maven/javax.cache/cache-api@1.1.1?type=jar"> - <group>javax.cache</group> - <name>cache-api</name> - <version>1.1.1</version> - <description>Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/</description> - <hashes> - <hash alg="MD5">dfdac9358e140e61c574abb1ada84dc9</hash> - <hash alg="SHA-1">c56fb980eb5208bfee29a9a5b9d951aba076bd91</hash> - <hash alg="SHA-256">9f34e007edfa82a7b2a2e1b969477dcf5099ce7f4f926fb54ce7e27c4a0cd54b</hash> - <hash alg="SHA-512">7e2c2e421c46d66f35ae0c107c31ae28606562190871655efd38c60b335a10b1770134f88c8aada5a389e9e364be885713fe7d0464c2a9fbea06ec1102b2c3e5</hash> - <hash alg="SHA-384">3740a5ddb6bf6d1627190fbabf06ffc19fb84a488c120ebf1bbc6407971905c7f415310a17c8db77ee90d09cb2301d3d</hash> - <hash alg="SHA3-384">49c3aca710ab2ad62e4610ad0f3b76338079aa49e90e84cb18b59ced56caf9f6e2bc855e9900cb1b7748a1f3e0d160e2</hash> - <hash alg="SHA3-256">ed71d13b59b8ebba5fb3f2f42da03e29d1fdaefef8fde375794a6598fdb702be</hash> - <hash alg="SHA3-512">8b93ce37a0ea13bcb8f35a0237307f7b232c178d11e452d02c4383dbd51531eeb4a3c722778dfb95637412e6451a132f6031f0f4e3d51928a6b857160269dec0</hash> - </hashes> - <licenses> - <license> - <id>Apache-2.0</id> - </license> - </licenses> - <purl>pkg:maven/javax.cache/cache-api@1.1.1?type=jar</purl> - <externalReferences><reference type="website"><url>https://github.com/jsr107/jsr107spec</url></reference><reference type="distribution"><url>http://oss.sonatype.org/service/local/staging/deploy/maven2</url></reference></externalReferences> - </component> <component type="library" bom-ref="pkg:maven/io.projectreactor/reactor-core@3.4.4?type=jar"> <publisher>reactor</publisher> <group>io.projectreactor</group> @@ -54792,76 +54767,30 @@ SAX2 and Stax2 APIs</description> <purl>pkg:maven/org.apache.camel/camel-thrift@4.0.0-SNAPSHOT?type=jar</purl> <externalReferences><reference type="website"><url>https://camel.apache.org/camel-parent/components/camel-thrift</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CAMEL</url></reference><reference type="mailing-list"><url>dev-subscr...@camel.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/re [...] </component> - <component type="library" bom-ref="pkg:maven/org.apache.thrift/libthrift@0.14.1?type=jar"> + <component type="library" bom-ref="pkg:maven/org.apache.thrift/libthrift@0.17.0?type=jar"> <group>org.apache.thrift</group> <name>libthrift</name> - <version>0.14.1</version> + <version>0.17.0</version> <description>Thrift is a software framework for scalable cross-language services development.</description> <scope>required</scope> <hashes> - <hash alg="MD5">ef7e068f5319c5a9deee83990e8ef557</hash> - <hash alg="SHA-1">85348a0c44c298bbec5ae747e67ae12e60b3aef6</hash> - <hash alg="SHA-256">5b3510fe72e6f0725e29cef6ebdb1eabacccc69d79fc4ed50b681600a87667ec</hash> - <hash alg="SHA-512">392590d79e520a9ee07c9332be11c4295ea572c25aa5adbceccdede22085cc5d019c1510befce9dcc747ca9923c2267e4d23adb2276df227cf1fd79d6228158c</hash> - <hash alg="SHA-384">4cf645f0233fd1bb530afb6d92e13dfc05b98b22d7f8e90bf6026e72b9f0c392a263499ab63b05f27453d8fe52c150d0</hash> - <hash alg="SHA3-384">c407638c126efb91233170b38db81d776383b13719715c962ad03163813aa90c69cebea9a9c94a11de89b2c513181de3</hash> - <hash alg="SHA3-256">cd064ebd555683f27049a9caf303d3201f7350ee8b2c980a6f73f53716f4a886</hash> - <hash alg="SHA3-512">c8ce5f46b491799bc74862c0ed24094bbe0a395ed535874bc24b9b83a24cd18f461b267582346714dfaafc7a6e9e3b70e9e7faeb2059cdeae5e0f700f36dc5a5</hash> + <hash alg="MD5">b4e4d44f7c3b3bb7f1b77b7131a534b9</hash> + <hash alg="SHA-1">36aec83a463d233ab537407df7612c383727b03f</hash> + <hash alg="SHA-256">91135681b23af6132865725509f1ba8e7f8a0d89076b6105ce4d9b9fec4024cc</hash> + <hash alg="SHA-512">644937dc90b43b81a145d2b737d91cd37644b3f90e1fbc56d2ce190d9b591ebccfb4f4fc1fe663bcf636355a24aed4d6e12bf96e89c310c10f4c49aaadc68112</hash> + <hash alg="SHA-384">3136aee7d34f35e26aecb82864699d9878b648674b57ec4d44f56f8f076cc1fd1fe8196b4de68deca2632f3ffe0d3cdb</hash> + <hash alg="SHA3-384">fee843072f2646688fe7f8d28a2357c3f8c5553d3321a2e153923290e01d8e3488d44e0d4ce68d697c8687b0877013a6</hash> + <hash alg="SHA3-256">99f23ef5e6a16a6f6f25aa63380c72341d64d80a022500f9641e1c9c9f1d7f35</hash> + <hash alg="SHA3-512">4f93b054e4d4e6a617efa576f53bc1c8bbce959be9ef9de6dc69b42c238da73adc62b3df3b2cd1ed95c1606f856a05386db1c757772dade1e4d4d679fca00790</hash> </hashes> <licenses> <license> <id>Apache-2.0</id> </license> </licenses> - <purl>pkg:maven/org.apache.thrift/libthrift@0.14.1?type=jar</purl> + <purl>pkg:maven/org.apache.thrift/libthrift@0.17.0?type=jar</purl> <externalReferences><reference type="website"><url>http://thrift.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/thrift</url></reference></externalReferences> </component> - <component type="library" bom-ref="pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@8.5.46?type=jar"> - <group>org.apache.tomcat.embed</group> - <name>tomcat-embed-core</name> - <version>8.5.46</version> - <description>Core Tomcat implementation</description> - <hashes> - <hash alg="MD5">45378afdce63a61c488db97d2a6e9fbd</hash> - <hash alg="SHA-1">5d686394334d143f48251827435ab086a161e75e</hash> - <hash alg="SHA-256">be5f854448d2ee5d6e0036feb2b4f713163079a1b6b9a7a97508e55917ad35c2</hash> - <hash alg="SHA-512">f85371c45348625c5854e99cc6efcdedd2724cca20dbaa6c9a76141492a70e8c882a4b66de63b0d1cdd170e23f18f86efaa52bdafc05cc903d4b83f1ac4799a1</hash> - <hash alg="SHA-384">5feffe14a4874d5d738e35e65b06ada607e67cef9b44c4e29feae1897bee63787faca034f4bde301b9e3e1ad60118232</hash> - <hash alg="SHA3-384">318450bba37870cfddf798fe0273f9f494b17a5e37019b28a26f15293a026ce2ee10e2182957c0a5c2398b6cf4d267d4</hash> - <hash alg="SHA3-256">859ca4f24d9aa0c8b7287a39a5818b1e94d9a7563074a52fce0b1abeedd9a419</hash> - <hash alg="SHA3-512">101144ddd60df18c01e6aea47a0c7620fad87913c0b24e3184b8ff5ee133c631945455b7c51c76aa173666ac90921dd0db1407d5395e11b43abe4e58a46f3985</hash> - </hashes> - <licenses> - <license> - <id>Apache-2.0</id> - </license> - </licenses> - <purl>pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@8.5.46?type=jar</purl> - <externalReferences><reference type="website"><url>https://tomcat.apache.org/</url></reference></externalReferences> - </component> - <component type="library" bom-ref="pkg:maven/org.apache.tomcat/tomcat-annotations-api@8.5.46?type=jar"> - <group>org.apache.tomcat</group> - <name>tomcat-annotations-api</name> - <version>8.5.46</version> - <description>Annotations Package</description> - <hashes> - <hash alg="MD5">24d29eeee84c155a9a9fe72bbd98c0b7</hash> - <hash alg="SHA-1">56c67699de192c603afd6f029e80e5ff8d98e7e9</hash> - <hash alg="SHA-256">6a6b46d0e6958644514c0ca3658b3b07e6123a682a20ee36d3795242735fabc3</hash> - <hash alg="SHA-512">249c77fc30f1b054e35531aa5a52b242f05ef3e16f83f8c7751d766d490da5a8ea24f798605d35b8b1c8651834c50abd19c4ac0f93c483b020d7a90758ab832e</hash> - <hash alg="SHA-384">f4bb78d0c7e12d733d46378b2ab75afb057a631d69957af5527dfbd89399f1c89c8562e56df95b2c691023987b6696e3</hash> - <hash alg="SHA3-384">fcde30303d433881f6b20aa07715a26b93c4702c5b5705e5747a141c94b1aeef40737dc5d0fa262d07224a763734d3e1</hash> - <hash alg="SHA3-256">85fdca9eb886ab8e4e1610422b176880a8dc3b195153bd53460ad861900967ac</hash> - <hash alg="SHA3-512">81455e112788bc580b229733e21aa5d3077237b2798c7a134cefd9f0db722ec48f220ecff50428c296285f2c47da5d12f90be8bfd4c9b5d88fc5266ceb07a3d7</hash> - </hashes> - <licenses> - <license> - <id>Apache-2.0</id> - </license> - </licenses> - <purl>pkg:maven/org.apache.tomcat/tomcat-annotations-api@8.5.46?type=jar</purl> - <externalReferences><reference type="website"><url>https://tomcat.apache.org/</url></reference></externalReferences> - </component> <component type="library" bom-ref="pkg:maven/org.apache.camel/camel-tika@4.0.0-SNAPSHOT?type=jar"> <publisher>The Apache Software Foundation</publisher> <group>org.apache.camel</group> @@ -69352,9 +69281,9 @@ configuration files as if there was implied nesting structure (by default using <dependency ref="pkg:maven/org.graalvm.sdk/graal-sdk@22.3.0?type=jar"/> <dependency ref="pkg:maven/org.apache.camel/camel-jcache@4.0.0-SNAPSHOT?type=jar"> <dependency ref="pkg:maven/org.apache.camel/camel-support@4.0.0-SNAPSHOT?type=jar"/> - <dependency ref="pkg:maven/org.apache.servicemix.bundles/org.apache.servicemix.bundles.javax-cache-api@1.1.1_1?type=jar"/> + <dependency ref="pkg:maven/javax.cache/cache-api@1.1.1?type=jar"/> </dependency> - <dependency ref="pkg:maven/org.apache.servicemix.bundles/org.apache.servicemix.bundles.javax-cache-api@1.1.1_1?type=jar"/> + <dependency ref="pkg:maven/javax.cache/cache-api@1.1.1?type=jar"/> <dependency ref="pkg:maven/org.apache.camel/camel-tracing@4.0.0-SNAPSHOT?type=jar"> <dependency ref="pkg:maven/org.apache.camel/camel-support@4.0.0-SNAPSHOT?type=jar"/> </dependency> @@ -71130,7 +71059,6 @@ configuration files as if there was implied nesting structure (by default using <dependency ref="pkg:maven/net.bytebuddy/byte-buddy@1.11.0?type=jar"/> <dependency ref="pkg:maven/org.jodd/jodd-bean@5.1.6?type=jar"/> </dependency> - <dependency ref="pkg:maven/javax.cache/cache-api@1.1.1?type=jar"/> <dependency ref="pkg:maven/io.projectreactor/reactor-core@3.4.4?type=jar"> <dependency ref="pkg:maven/org.reactivestreams/reactive-streams@1.0.3?type=jar"/> </dependency> @@ -71864,21 +71792,11 @@ configuration files as if there was implied nesting structure (by default using </dependency> <dependency ref="pkg:maven/org.apache.camel/camel-thrift@4.0.0-SNAPSHOT?type=jar"> <dependency ref="pkg:maven/org.apache.camel/camel-support@4.0.0-SNAPSHOT?type=jar"/> - <dependency ref="pkg:maven/org.apache.thrift/libthrift@0.14.1?type=jar"/> + <dependency ref="pkg:maven/org.apache.thrift/libthrift@0.17.0?type=jar"/> <dependency ref="pkg:maven/org.javassist/javassist@3.28.0-GA?type=jar"/> <dependency ref="pkg:maven/commons-io/commons-io@2.11.0?type=jar"/> </dependency> - <dependency ref="pkg:maven/org.apache.thrift/libthrift@0.14.1?type=jar"> - <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.6?type=jar"/> - <dependency ref="pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar"/> - <dependency ref="pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar"/> - <dependency ref="pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@8.5.46?type=jar"/> - <dependency ref="pkg:maven/javax.annotation/javax.annotation-api@1.3.2?type=jar"/> - </dependency> - <dependency ref="pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@8.5.46?type=jar"> - <dependency ref="pkg:maven/org.apache.tomcat/tomcat-annotations-api@8.5.46?type=jar"/> - </dependency> - <dependency ref="pkg:maven/org.apache.tomcat/tomcat-annotations-api@8.5.46?type=jar"/> + <dependency ref="pkg:maven/org.apache.thrift/libthrift@0.17.0?type=jar"/> <dependency ref="pkg:maven/org.apache.camel/camel-tika@4.0.0-SNAPSHOT?type=jar"> <dependency ref="pkg:maven/org.apache.camel/camel-support@4.0.0-SNAPSHOT?type=jar"/> <dependency ref="pkg:maven/org.apache.tika/tika-core@2.6.0?type=jar"/>