From 2c18db22f2612646230a9b0f83aa8999365ea5b3 Mon Sep 17 00:00:00 2001 From: san-zrl Date: Tue, 3 Feb 2026 15:07:16 +0100 Subject: [PATCH] refactored CryptoGoSensor to support integration wit CBOMkit Signed-off-by: san-zrl --- bom/bom.json | 3720 ++++++++--------- common/bom/bom.json | 2015 +++++---- engine/bom/bom.json | 2060 +++++---- .../engine/language/go/GoDetectionEngine.java | 13 +- enricher/bom/bom.json | 2148 +++++----- .../java/com/ibm/plugin/CryptoGoSensor.java | 37 +- java/bom/bom.json | 2922 ++++++------- mapper/bom/bom.json | 2101 ++++++---- output/bom/bom.json | 2346 ++++++----- python/bom/bom.json | 2844 +++++++------ sonar-cryptography-plugin/bom/bom.json | 3134 +++++++------- 11 files changed, 12120 insertions(+), 11220 deletions(-) diff --git a/bom/bom.json b/bom/bom.json index 16658d79..e920b539 100644 --- a/bom/bom.json +++ b/bom/bom.json @@ -1,10 +1,10 @@ { "bomFormat" : "CycloneDX", "specVersion" : "1.5", - "serialNumber" : "urn:uuid:4c7a2803-de63-3bf4-84ac-59fb6bce9f21", + "serialNumber" : "urn:uuid:fb643f6e-1a37-3646-b00a-dd82cdad4da7", "version" : 1, "metadata" : { - "timestamp" : "2024-04-12T08:16:42Z", + "timestamp" : "2026-01-28T14:17:12Z", "lifecycles" : [ { "phase" : "build" @@ -52,27 +52,27 @@ } ], "component" : { - "publisher" : "IBM", + "publisher" : "cbomkit", "group" : "com.ibm", "name" : "sonar-cryptography", - "version" : "1.0.3-SNAPSHOT", + "version" : "2.0.0-SNAPSHOT", "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "https://www.gnu.org/licenses/lgpl.txt" + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], - "purl" : "pkg:maven/com.ibm/sonar-cryptography@1.0.3-SNAPSHOT?type=pom", + "purl" : "pkg:maven/com.ibm/sonar-cryptography@2.0.0-SNAPSHOT?type=pom", "externalReferences" : [ { "type" : "distribution-intake", - "url" : "https://eu.artifactory.swg-devops.com/artifactory/res-cryptoagility-team-maven-local" + "url" : "https://maven.pkg.github.com/cbomkit/sonar-cryptography" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.ibm/sonar-cryptography@1.0.3-SNAPSHOT?type=pom" + "bom-ref" : "pkg:maven/com.ibm/sonar-cryptography@2.0.0-SNAPSHOT?type=pom" }, "properties" : [ { @@ -87,233 +87,252 @@ }, "components" : [ { - "group" : "org.jetbrains", - "name" : "annotations", - "version" : "24.1.0", - "description" : "A set of annotations used for code inspection support and code documentation.", + "publisher" : "SonarSource", + "group" : "org.sonarsource.api.plugin", + "name" : "sonar-plugin-api", + "version" : "13.4.3.4290", + "description" : "Plugin API for SonarQube, SonarCloud and SonarLint", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "38673abe87d12508cd05498eff0b9731" + "content" : "9121c8851ff1af1153c8dd4fa94c9ce7" }, { "alg" : "SHA-1", - "content" : "7af6a669488450c4a07c2c3254e2151df42d7d04" + "content" : "64194b3b6336b78df92f9fa5a58682c85ec5626b" }, { "alg" : "SHA-256", - "content" : "27a770dc7ce50500918bb8c3c0660c98290630ec796b5e3cf6b90f403b3033c6" + "content" : "ce1c77307f81897f3c8f901d81a0169db9f2ec614d65723679bc8bfedceb56dd" }, { "alg" : "SHA-512", - "content" : "663395a885561cc97eed411c67b496c06ec9a54906185a871de8743bf53e92152f4bc7c2a0118b7f3cfe85cc0a6c408ac6d589839b8d25c851637f85880331f2" + "content" : "8a9f34a03acbe05d9086119287ab2b2d84c8bff43367f75d42ca5bd5f66c54e4007d1affe247f7f3a0cb710328705b6a0db0db2e211b46e8979ea9e3eee6c401" }, { "alg" : "SHA-384", - "content" : "85779b72d864894f1d3cdd489b0a419c0620281c4fd22a061f4a3fe2aee91015681889573200cd2124c3add48a3216a6" + "content" : "7f1d268c151ad6fda7e5c5b21abb74b5a4b2bcb3e43fb4d3eceef01cab5e28e12b0d019d6d7da39a977f1fd8a6260ed2" }, { "alg" : "SHA3-384", - "content" : "0cfce80b012ba441be96368fe8af54e805100f7680fdbb7defae4dd07ff3c75cd0f89b993a61bef139a405637a73236f" + "content" : "c4ab8215fb558662a98375c9f347636f4e27fa912a23acadf804c5661caa2899529a6777f8c9f9a133c5a6e676ec0bf4" }, { "alg" : "SHA3-256", - "content" : "f7c5e25c9c16aad9f5482f3853660238db4f32be72c20f40383a1d20e0306f42" + "content" : "acb5c5fb43a612de73d7562499398bfb7678b878de04ecb697590fac4ed2e61c" }, { "alg" : "SHA3-512", - "content" : "0f74369cdb67a58c0f89033723665320eb535d1c1e66049347f6b3e25cbf7d1f80b8fa3a7b3e0b4fa8eae8d9ec8c30510b65bab581adeaff3f94651fa214105a" + "content" : "bf256b0cd721c685cc677bc5ab0af2eb68e469b7cdcd9e9bae7b60baa718b159b0e2cc9ca489a088b8d4556cef33da26d1bdf7fb1b952014b61e4b282aface76" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0" + "name" : "GNU LGPL 3", + "url" : "https://www.gnu.org/licenses/lgpl-3.0.txt" } } ], - "purl" : "pkg:maven/org.jetbrains/annotations@24.1.0?type=jar", + "purl" : "pkg:maven/org.sonarsource.api.plugin/sonar-plugin-api@13.4.3.4290?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://github.com/JetBrains/java-annotations" + "url" : "https://www.sonarqube.org/" }, { "type" : "vcs", - "url" : "https://github.com/JetBrains/java-annotations" + "url" : "https://github.com/SonarSource/sonar-plugin-api" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.jetbrains/annotations@24.1.0?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.api.plugin/sonar-plugin-api@13.4.3.4290?type=jar" }, { - "publisher" : "SonarSource", - "group" : "org.sonarsource.api.plugin", - "name" : "sonar-plugin-api", - "version" : "9.13.0.360", - "description" : "Plugin API for SonarQube, SonarCloud and SonarLint", + "publisher" : "QOS.ch", + "group" : "org.slf4j", + "name" : "slf4j-api", + "version" : "2.0.17", + "description" : "The slf4j API", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "b401a934655540b37bf6765778a7b759" + "content" : "b6480d114a23683498ac3f746f959d2f" }, { "alg" : "SHA-1", - "content" : "64b99cf118b048da0fa98a397b2e03f11c6970e9" + "content" : "d9e58ac9c7779ba3bf8142aff6c830617a7fe60f" }, { "alg" : "SHA-256", - "content" : "f20ae1d944f84a611583c33900d8788aa855a0d9ea66493e1046539715d53c0c" + "content" : "7b751d952061954d5abfed7181c1f645d336091b679891591d63329c622eb832" }, { "alg" : "SHA-512", - "content" : "f6b8fa7447300c1f95e14e9be12d36419b302d1844bd069ceaae134b3caa54d546a337be3c66e8e25ca5dd78fb95e76f92306cf5c26ba0730e3c730d443c2822" + "content" : "9a3e79db6666a6096a3021bb2e1d918f30f589d8de51d6b600f8ebd92515a510ae2d8f87919cc2dfa8365d64f10194cac8dfa0fb950160eef0e9da06f6caaeb9" }, { "alg" : "SHA-384", - "content" : "5cbdc17456d4ab1959cd8ad59d64a733224a3d03aa0f1e12968e0e7c86785e465d3f27f7c54b13c858326b4ee8bd60a7" + "content" : "6ea24f814a9b6ece428cfd0535e2f3b8927005745ef61006b50fdb5a90126ee5ea05650155382b3b755c5bce38ef3944" }, { "alg" : "SHA3-384", - "content" : "8930616bed39525c4c5c0396f8c541268b46b1df45432ee66ca6af8609a6ebd1e904493f025ba4b045401930a3ea2a2d" + "content" : "9b1015052f0ec43f9be09764e131834157599611cb52f6fe591c4ac6a8ab4817518f2a4b8871e5e738c8678e93af5557" }, { "alg" : "SHA3-256", - "content" : "4fb1225cc1bed06656fa92422d0425b44032725e6afb8d980c4af8cd8efc4b40" + "content" : "00559b4f4066b4917ba4fe2a6f23111eaeada321112d030910d218ced9084b5e" }, { "alg" : "SHA3-512", - "content" : "3a505b03e37ff9bd00248bf77344b880f206042a81b90eccbb42a78fe2496ff4f61c519f4ec77ded65d1f488b4caf6a69afae97a9a5a59f915ec8068176a0cbb" + "content" : "9579c2f7e7516e177c2d493ccc9eb8150978cf19f6f09b28d116f6935239fd56dc6af2b62b3336f79b0b462445550cd1fb5377a07001a6f44aaab6a32fa2fa47" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "https://www.gnu.org/licenses/lgpl-3.0.txt" + "id" : "MIT", + "url" : "https://opensource.org/licenses/MIT" } } ], - "purl" : "pkg:maven/org.sonarsource.api.plugin/sonar-plugin-api@9.13.0.360?type=jar", + "purl" : "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://www.sonarqube.org/" + "url" : "http://www.slf4j.org" + }, + { + "type" : "distribution-intake", + "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-plugin-api" + "url" : "https://github.com/qos-ch/slf4j/slf4j-parent/slf4j-api" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.api.plugin/sonar-plugin-api@9.13.0.360?type=jar" + "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar" }, { - "group" : "com.google.code.findbugs", - "name" : "jsr305", - "version" : "3.0.2", - "description" : "JSR305 Annotations for Findbugs", + "publisher" : "The Apache Software Foundation", + "group" : "org.apache.commons", + "name" : "commons-lang3", + "version" : "3.18.0", + "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang. The code is tested using the latest revision of the JDK for supported LTS releases: 8, 11, 17 and 21 currently. See https://github.com/apache/commons-lang/blob/master/.github/workflows/maven.yml Please ensure your build environment is up-to-date and kindly report any build issues.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "dd83accb899363c32b07d7a1b2e4ce40" + "content" : "48b9886957920a4cdb602780ca345087" }, { "alg" : "SHA-1", - "content" : "25ea2e8b0c338a877313bd4672d3fe056ea78f0d" + "content" : "fb14946f0e39748a6571de0635acbe44e7885491" }, { "alg" : "SHA-256", - "content" : "766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7" + "content" : "4eeeae8d20c078abb64b015ec158add383ac581571cddc45c68f0c9ae0230720" }, { "alg" : "SHA-512", - "content" : "bb09db62919a50fa5b55906013be6ca4fc7acb2e87455fac5eaf9ede2e41ce8bbafc0e5a385a561264ea4cd71bbbd3ef5a45e02d63277a201d06a0ae1636f804" + "content" : "c2c9d497fc1be411050f4011b2407764b78aa098eb42925af8a197eabdbc25b507f09fb898805e9bed4815f35236a508ee5b096e36f363df4d407232d50fc832" }, { "alg" : "SHA-384", - "content" : "ca0b169d3eb2d0922dc031133a021f861a043bb3e405a88728215fd6ff00fa52fdc7347842dcc2031472e3726164bdc4" + "content" : "4fb3f101106e4ce3666d5c15d276ba86f7683a0ef35f0384edfcd579ea454275edbb7400795d265ec3a38e39997e79b8" }, { "alg" : "SHA3-384", - "content" : "9903fd7505218999f8262efedb3d935d64bcef84aae781064ab5e1b24755466b269517cada562fa140cd1d417ede57a1" + "content" : "aada7e3612cf3f6190a19fa7c3db74df1e13ec56b300be9bb4317d261d5877c84ab59ba9a09168becdbd82cd41961395" }, { "alg" : "SHA3-256", - "content" : "223fda9a89a461afaae73b177a2dc20ed4a90f2f8757f5c65f3241b0510f00ff" + "content" : "306d286d0bd7549c203cc802fd755d354c4f7926fa023f4e83623ba1a6261250" }, { "alg" : "SHA3-512", - "content" : "3996b5af57a5d5c6a0cd62b11773360fb051dd86a2ba968476806a2a5d32049b82d69a24a3c694e8fe4d735be6a28e41000cc500cc2a9fb577e058045855d2d6" + "content" : "f6f1ecc684e309d7b9fc5c343792508fee935cd2119d962721662c5af88e4864ba6f47a863e083714f315f926c156de1970cd2fb577449bdfdc7bf98a4a451fa" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0" + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], - "purl" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", + "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://findbugs.sourceforge.net/" + "url" : "https://commons.apache.org/proper/commons-lang/" + }, + { + "type" : "build-system", + "url" : "https://github.com/apache/commons-lang/actions" }, { "type" : "distribution-intake", - "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" + "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" + }, + { + "type" : "issue-tracker", + "url" : "https://issues.apache.org/jira/browse/LANG" + }, + { + "type" : "mailing-list", + "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/" }, { "type" : "vcs", - "url" : "https://code.google.com/p/jsr-305/" + "url" : "https://gitbox.apache.org/repos/asf/commons-lang.git" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar" + "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar" }, { - "publisher" : "The Apache Software Foundation", - "group" : "org.apache.commons", - "name" : "commons-lang3", - "version" : "3.14.0", - "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.", + "group" : "com.google.code.gson", + "name" : "gson", + "version" : "2.13.2", + "description" : "Gson JSON library", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "4e5c3f5e6b0b965ef241d7d72ac8971f" + "content" : "a2c47e14ce5e956105458fe455f5d542" }, { "alg" : "SHA-1", - "content" : "1ed471194b02f2c6cb734a0cd6f6f107c673afae" + "content" : "48b8230771e573b54ce6e867a9001e75977fe78e" }, { "alg" : "SHA-256", - "content" : "7b96bf3ee68949abb5bc465559ac270e0551596fa34523fddf890ec418dde13c" + "content" : "dd0ce1b55a3ed2080cb70f9c655850cda86c206862310009dcb5e5c95265a5e0" }, { "alg" : "SHA-512", - "content" : "0338b50767166e5746ada6d6aa2e071e7221d699323bfb629f7f204b294c1dc4cad140610a129ed751798443b43e74e0818989c7df7d33c5915aa29742be9ba8" + "content" : "8974a052656d2e5ec968b6bac2edf51413ffc62040fdc65f14f00597e738ab544d22487f8579ba90618b5a7f94ef33773510fac67b408fee6ed274b38f3d9947" }, { "alg" : "SHA-384", - "content" : "908d0a22dc17aaa04caa5104cff7cad5b88b77eecb78dd5b3b3fefa22ff71ac50a4fb9e31c897ac243f9d841e4b3453d" + "content" : "98e8afe5b23c43b84e7a57e0e27f683a182fcf97ee3eeb6a1311582f7fecd846c806ffb092b620088dc03d256d8eaf27" }, { "alg" : "SHA3-384", - "content" : "8a7f2e061b998780870eddd571620fbf3d3c70bcb54e24539d0db504f59d65bc6bda58136284498babe29fcc5eabb7a6" + "content" : "d61d6b1cf6997c75287f454e536f855db8404e5fb9d0b8faa4dcc1e7a60ffefc05c2f92f3514e091808a8677b29f3619" }, { "alg" : "SHA3-256", - "content" : "022bf1f8039fcea717e9e34dd96eb80cfff05b43c9cbb76e9739b2421e2d027c" + "content" : "1c051cfe5e630b35d003f96e135de7c5d5cab145b6e1159143570cb246426a0d" }, { "alg" : "SHA3-512", - "content" : "0bcbc4edce974ea970c46e2da12ec98d9fd962c2cf64f757ac97136dec5623ca52af0c225895303c17ffabb57090e6772d7bd326d5e7438cef5454f8bbaeecfa" + "content" : "55ddee7f6c1659ffa82e5c308a0181b459cfeb3442f1f9868ff7e9a3c83376bd2ad527b16d5131df442ffd03d06c35dbd64458df6b02a111c1654f01db381ba5" } ], "licenses" : [ @@ -324,161 +343,137 @@ } } ], - "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar", + "purl" : "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://commons.apache.org/proper/commons-lang/" - }, - { - "type" : "build-system", - "url" : "https://github.com/apache/commons-parent/actions" - }, - { - "type" : "distribution-intake", - "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" + "url" : "https://github.com/google/gson" }, { "type" : "issue-tracker", - "url" : "https://issues.apache.org/jira/browse/LANG" - }, - { - "type" : "mailing-list", - "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/" + "url" : "https://github.com/google/gson/issues" }, { "type" : "vcs", - "url" : "https://gitbox.apache.org/repos/asf?p=commons-lang.git" + "url" : "https://github.com/google/gson/" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar" + "bom-ref" : "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar" }, { - "group" : "com.google.code.gson", - "name" : "gson", - "version" : "2.10.1", - "description" : "Gson JSON library", + "publisher" : "Google LLC", + "group" : "com.google.errorprone", + "name" : "error_prone_annotations", + "version" : "2.41.0", + "description" : "Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "df6097815738cb31fc56391553210843" + "content" : "75e3b25da8b8a2136463c4674f5e49bf" }, { "alg" : "SHA-1", - "content" : "b3add478d4382b78ea20b1671390a858002feb6c" + "content" : "4381275efdef6ddfae38f002c31e84cd001c97f0" }, { "alg" : "SHA-256", - "content" : "4241c14a7727c34feea6507ec801318a3d4a90f070e4525681079fb94ee4c593" + "content" : "a56e782b5b50811ac204073a355a21d915a2107fce13ec711331ad036f660fcc" }, { "alg" : "SHA-512", - "content" : "7503e4b8d05c6cc0ecb3a94c5a2e070e049083a441003a79a0cdf474f4286699b4ba1d2a655ddabb8ba10c50e7c36a7045cccdaee465166d4630db647aba2727" + "content" : "e2eb4bf9f36f95a4d4c5ea344db5cd90a456e63bef8e52932b8f6f4ecfdd59cb2f6c2ce9e67b0070c82177e42885688b95afef591b16001f789b378f18afdf30" }, { "alg" : "SHA-384", - "content" : "48a4786bd6e1867f058ee4fb676fc82d9d9f64a6d7420d4a47ae2398504c9de73222636614aeb4a9fbf10ee143d72226" + "content" : "43700b378624aa37197ef03a6b5ea40b5fbb6c0aa667eadf810ad36f0707dffaf3ea23471f2553327c3f5644cc875ee7" }, { "alg" : "SHA3-384", - "content" : "3df9a0332c2766124fe7c915cfea665d2e318ccaa7212415fabd9e93e6eb77de538725fd2ef313cde46f6d814c9566ea" + "content" : "8bf3293cf4b72c9a999948f8812190636ef3b0c35bab8dbf9a54c263eeab2a3b3d0774fdcab52c6d114551ff74a8aea2" }, { "alg" : "SHA3-256", - "content" : "d3374006d76d4f9acdf3d3a1a4f47899570f52442b2188f80c09a74f22139ecb" + "content" : "2ca1a59f4fdc37a3c83501542c63842fa4fe40c06f69a59a2a072e4af442a16a" }, { "alg" : "SHA3-512", - "content" : "2b10c2f4fe39d8712b430ff171823d7172c0a06685c1eb7de511e90159cec0e094fb2a9b50b747c5b039cb10f1fce9edf82ecbf9c47f76a6f31c4e3cb7586cce" + "content" : "6d1f419996b15e5a2bd9b268d166046e38fe9cc6c58fe56aaacbe71b95e3db8c8fe1d226e7f549ea227956feaf3087706bdfa79930fe432298bba9ec06c26a90" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0", - "url" : "https://www.apache.org/licenses/LICENSE-2.0" + "id" : "Apache-2.0" } } ], - "purl" : "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar", + "purl" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.41.0?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://github.com/google/gson/gson" - }, - { - "type" : "distribution-intake", - "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" - }, - { - "type" : "issue-tracker", - "url" : "https://github.com/google/gson/issues" + "url" : "https://errorprone.info/error_prone_annotations" }, { "type" : "vcs", - "url" : "https://github.com/google/gson/gson/" + "url" : "https://github.com/google/error-prone/error_prone_annotations" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar" + "bom-ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.41.0?type=jar" }, { "publisher" : "SonarSource", "group" : "org.sonarsource.java", "name" : "sonar-java-plugin", - "version" : "7.33.0.35775", + "version" : "8.18.0.40025", "description" : "Code Analyzer for Java", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "1b7d9cc6384c6be9b2b2be09d39a4409" + "content" : "b1a9179feade38e76fb3bd484426ed87" }, { "alg" : "SHA-1", - "content" : "74549fd0b22373ba0db5f5d8c9e83c4e1d4859d6" + "content" : "869cc6db9898899450852a5d89e77649dbc2e545" }, { "alg" : "SHA-256", - "content" : "84d7f2cce4bf4e66bacd053fd350489792519d83c292c2f4d5d8df0404450959" + "content" : "27dbc832bbeb28c70947d4d35fcc4a36b384911761831d8d5fc947cc1732d114" }, { "alg" : "SHA-512", - "content" : "f70839584286b4141cb252727f299be7a6f27cc8714d66b9c8b4a97d19030c5e39277ed85019cb2ffd9cd59f4b5c7780dd2bdd8cccd14d49a7aa618640069eca" + "content" : "b38980fb48ee7720a297190197e1ff20025ccaffad858a195234d4747773f4ed2ff2806b253ccd9d2121cddc71d1ac1fcc75ece9a07365db2089df89773add48" }, { "alg" : "SHA-384", - "content" : "ab79904167297307834e85b850b012fbdd22d6dbb938567ca8525219f8cd1cc2b725cc9ca781bca94dbab340580130ff" + "content" : "700d2a57ebc1672779fc11da69c29c822f8b0382bfb07afa5ef984abd2e38863b1ce8c2129c3ad173f796abebc14af96" }, { "alg" : "SHA3-384", - "content" : "5b177240092d00c9399f08b3148b58a299f0bb7a2a82458e5d4f4d5d0e4b5f6eba4f8b6f82c02369e8343c4bb0aea360" + "content" : "de424a453da7d8c708948d8bf9cffcabb6f00fac592f0be36b3d53fa41b95bc42ab6e1fcb4525c3c15793de00ad34478" }, { "alg" : "SHA3-256", - "content" : "f5829afa58615feeb89cdea0b96fa63ffda9c1401d5ac33d1420398ff42e59f9" + "content" : "3f2edc3ae30c79ac6e5db6bc7f968dd164f252b173bd3780ef1e06f68fec2962" }, { "alg" : "SHA3-512", - "content" : "4dc73ffee4b763a67a89b13a7574c03c9b7bfd08591088c30c64f9cb2aacd028d9c1bbbb4e5a68e5751635d9a3547e798eb4577b555187f410476a38e10ed9fc" + "content" : "73060df15758e595f9ad23967b9632b3b25584660362b8a660c699d7bfa092927edb2334ec711a2eca8394b03f0d32878e64b6b20411816b239f808747e7bcc2" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.sonarsource.java/sonar-java-plugin@7.33.0.35775?type=jar", + "purl" : "pkg:maven/org.sonarsource.java/sonar-java-plugin@8.18.0.40025?type=jar", "externalReferences" : [ - { - "type" : "website", - "url" : "http://redirect.sonarsource.com/plugins/java.html" - }, { "type" : "build-system", "url" : "https://cirrus-ci.com/github/SonarSource/sonar-java" @@ -494,65 +489,61 @@ { "type" : "mailing-list", "url" : "https://community.sonarsource.com" - }, - { - "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-java" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.java/sonar-java-plugin@7.33.0.35775?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.java/sonar-java-plugin@8.18.0.40025?type=jar" }, { "publisher" : "SonarSource", "group" : "org.sonarsource.java", "name" : "java-surefire", - "version" : "7.33.0.35775", - "description" : "Code Analyzer for Java", + "version" : "8.18.0.40025", + "description" : "Code Analyzer for Java :: Plugin to import JUnit report files", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "ebad97c089ab298bbf410b83645b5c91" + "content" : "8ec0e95937cd6bad70824f4fcbcdfd13" }, { "alg" : "SHA-1", - "content" : "1d6e25230cb5a0818e76cbf250b1f443c1117fe9" + "content" : "74166214d6bc038b62ac39fb6068ee92a7cc2377" }, { "alg" : "SHA-256", - "content" : "547a33116a008789a640ac520aca61b4aee460baf32d880f35ecbc247be17cf5" + "content" : "e5b3e323d65d5d1e07c67f2a3c231d976665dd36a755e4a25a529e020ecf246e" }, { "alg" : "SHA-512", - "content" : "79967a8394b8bada006fe03ed3519f73f9f4856d09cfaef3db91ab1e0dbd828bb9c69178a8151b678420e95489ace27ce9a59693be65fc3511696b446118c572" + "content" : "5f8666b8cabc3605c88d1066b3a4f102677a4592a055cddbd0857667a4c97da0b5963d4b6e9b9443bfa9a9f8eb5122bea5230c54d1948a8829137e0adfda2c53" }, { "alg" : "SHA-384", - "content" : "a3926f55e7e691e558e8fd2bed7da6f71cae00174987d108c5ccb5e4bff67052c1a7294ff83f93fecc89f0d37e72d2f2" + "content" : "7f91179e70d48c4f157b7c21e2d66043f197f5e77e93ca22cc514121f8aeb904f0be2d41cca33e026b79a6954b93620a" }, { "alg" : "SHA3-384", - "content" : "197a92ee27d6b823fe39f896604e292864f8e563ee9eebc8b7b8f98b5811c3bd3d31d1d991f91f305d61e78376c792fb" + "content" : "1181d83f7f281f38d1fd32a113cf36d0aafc3315b0f96394d1509a55cb71107a32dffc689991f08ea34d24afa146de4d" }, { "alg" : "SHA3-256", - "content" : "421298125883242fc4173246fd9f114c55e086270f0482a5b92f88462bf18f99" + "content" : "ee3151b15fa3040368071c28b161c21ffb9d0f0053ca3a869a8633790a8dbcb6" }, { "alg" : "SHA3-512", - "content" : "ff3c88c85a17e2983655e522450641dd191aa2f8818734af99b576778662e7025c6d635c6edc3052b3c42415693b7ba5c2137c7cac7140460d9405fb0d2780f9" + "content" : "94b7e5bc75cd127797485f48d5acca3853cefa2e8c433487268f12b177cd06e4aa4783f009f7a835099f406ccf1a22b69d0c3c523f3ab84fe8b348da312bd677" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.sonarsource.java/java-surefire@7.33.0.35775?type=jar", + "purl" : "pkg:maven/org.sonarsource.java/java-surefire@8.18.0.40025?type=jar", "externalReferences" : [ { "type" : "website", @@ -580,7 +571,7 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.java/java-surefire@7.33.0.35775?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.java/java-surefire@8.18.0.40025?type=jar" }, { "publisher" : "FasterXML", @@ -656,52 +647,52 @@ "publisher" : "SonarSource", "group" : "org.sonarsource.java", "name" : "java-frontend", - "version" : "7.33.0.35775", - "description" : "Code Analyzer for Java", + "version" : "8.18.0.40025", + "description" : "Code Analyzer for Java :: Front-end (Java Parser)", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "43bc91e0b5a11258625288f075b54633" + "content" : "a30b3194ba4e4aaf19e64afaf2c0cd9d" }, { "alg" : "SHA-1", - "content" : "2f748efd6e152c3526efd52a446cc8930381a16d" + "content" : "6c781ad5452a9f6c40efa651ec1514efd4956de0" }, { "alg" : "SHA-256", - "content" : "f22c60ed403f37c5378f2241c110d5f1427d9f8ac88710236a1662887a0961a5" + "content" : "6da24fc369a912c40bad484b580d15e8df7fd4a603e999b79952c1e88f1a10a4" }, { "alg" : "SHA-512", - "content" : "5ab1acc211dec17121948a678e59be6f050b1ba5360bf93fb724b51ff6160a29892c3847e5b0ad1deb450472bbdd5387f28403504670537b82477348dd97ca41" + "content" : "77fcb592867445be61fb472dc11eb2ed91e4d7675f6050728fe34fef4488bad75cf5fbb128bdbe6874820ece7e752f684065b98a6b0690bcbbc081f0efdf7a9c" }, { "alg" : "SHA-384", - "content" : "9d57998dcddbcbbf9ebcf79a68b928ce6aa9c8770c2b7565771b457ed299545f5ddbcc99a13889af53ab12e391c618d6" + "content" : "827447252ad585c8ef98e9f737d2b5ec4529f6f68f0fd571bfae08f3264186a4a5c9d864b488b66d933877c8d13f7863" }, { "alg" : "SHA3-384", - "content" : "64b3e663d553d1c3aa38d9e3b34cad8b38d440dc937bdb6e80edab6621f3c519d38ce4ec04f5353bf7e103cf315a808b" + "content" : "2eaeb68497c50d4bcd38ba010ab33f4833310fdf4c057d32ce622f01febd34d37d4b353b31ad53040a6dce7b1c287bf6" }, { "alg" : "SHA3-256", - "content" : "3febae6771046e4a5909ec72a2b6cd1749f384c910f3a090443a26d4651a1953" + "content" : "a2c28164e5d0c37e00f10f6b5187a6b8c31f87d2d3d86b12f9721516f91034e7" }, { "alg" : "SHA3-512", - "content" : "7555011fd0167dd38b798556104d02f2c5bd4b7e035065234f44ae22c7779c1a7fef4f3b17769d49deaf0635c99d211cb219ffac05da6c50ae1313f032565526" + "content" : "9163b1eac48b627a86db9c7b93fe258657561540fb605d926c645cb59e82fe6f72d1fb7d97120b4bc1488e27ede2420dbacb1ed021ff76642d10a2bc3cc54612" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.sonarsource.java/java-frontend@7.33.0.35775?type=jar", + "purl" : "pkg:maven/org.sonarsource.java/java-frontend@8.18.0.40025?type=jar", "externalReferences" : [ { "type" : "website", @@ -729,47 +720,47 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.java/java-frontend@7.33.0.35775?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.java/java-frontend@8.18.0.40025?type=jar" }, { "publisher" : "SonarSource", "group" : "org.sonarsource.java", "name" : "jdt-package", - "version" : "1.1.0.34", - "description" : "Parent pom of SonarSource public projects", + "version" : "1.6.0.160", + "description" : "Packaging of Eclipse JDT Core for SonarQube Java Analyzer", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "b37dc58a62e2d0cf93c0721fd974c31c" + "content" : "1df75f474b6bdb538899d8704b84757a" }, { "alg" : "SHA-1", - "content" : "505fc262c9e9347ff10f5c2e095a008db26a538b" + "content" : "1f8abb9d709c6ba2ab7ce3aa933857cb3735a1ce" }, { "alg" : "SHA-256", - "content" : "7ac622acdb900de5bb04529b822412731308f1f02a610e596b8a7789c28bde07" + "content" : "5efd84c8e2e39a310e9139b503355e9f31eeb3bcce779860ce96944096cf064f" }, { "alg" : "SHA-512", - "content" : "c264a6a75e00b39325e2be6e9cc4cc9903fcbb97e1e60766f09a42bad4d00ef0bc76b741a9c76ca76bf60fe0052987362f4f564a78e0ef3a654fdad833a00cf4" + "content" : "fcb097a96b7c6903ed8e50c95cea915cdb4ab2f4398869b812489d8f639509f970646adcd66afc8004b0c14807e05510d4406d7215726775695b0abcbe602dc5" }, { "alg" : "SHA-384", - "content" : "1f17c8e14bf19d6f93cd61f745ca681e2bf3ec5a2566a9233553e7d2c71f7896c7ee770c37db46536b98fd5cbb19f687" + "content" : "e500ad2d02142aa1fbbe1b9436f9e5bbb74d5c208b0c6aa0191725b126c9a3a4d2a21c708b2bd26a4f11a9ef880fbe07" }, { "alg" : "SHA3-384", - "content" : "40d04d2a79475f774b6a2b2a08b02387e2ac2c17e4b9b220fc1e59baf0554c569573d9abe22af1cff8e5fef69b4a43dd" + "content" : "60bd6cd889de6164963d49fe557e13456d962893e74d56bda559c6b57bd18ab1e8a065e64a2d8317e13dd754052d3f23" }, { "alg" : "SHA3-256", - "content" : "7bdaedda0da1edc3e63e8e62bcf3651b4d4169c24efa0baba01c368d2c6b7b74" + "content" : "32c6d9249b541d8ff7b488f8c584d8f068caace22037ec0e2340e6e850b919b7" }, { "alg" : "SHA3-512", - "content" : "11854f8cb06c601f4e54488b0943a8eac7790dfacd3355e52b274e8a39fe0aec36fd25da6c5711c7c294eaf540958c88013a4b57e7399f76c51b9e75d451c0a5" + "content" : "8378364906e74189f4255964961c90273743b41af7859c8bb946a092965b5787f37718ce6dccbed3cb531501361293fa96175327bd62d29a7ffe18be70caab78" } ], "licenses" : [ @@ -779,7 +770,7 @@ } } ], - "purl" : "pkg:maven/org.sonarsource.java/jdt-package@1.1.0.34?type=jar", + "purl" : "pkg:maven/org.sonarsource.java/jdt-package@1.6.0.160?type=jar", "externalReferences" : [ { "type" : "website", @@ -803,7 +794,7 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.java/jdt-package@1.1.0.34?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.java/jdt-package@1.6.0.160?type=jar" }, { "publisher" : "SonarSource", @@ -884,41 +875,41 @@ "publisher" : "SonarSource", "group" : "org.sonarsource.analyzer-commons", "name" : "sonar-regex-parsing", - "version" : "2.8.0.2699", + "version" : "2.18.0.3393", "description" : "Logic useful to read and analyze regular expressions", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "35a3545ee8cc01b7630817c10d3ad63b" + "content" : "c9c38681ffebe27c85c27119dcbac4e2" }, { "alg" : "SHA-1", - "content" : "f30c693d63d35e55921b600d1cc02f6ab45fb162" + "content" : "887b8fb94772af059501ce252122d572da041615" }, { "alg" : "SHA-256", - "content" : "83710ff002b9faf8afb413a05a08b0530a3cf8ef130815d5a46c955c478664b5" + "content" : "0c3ea5153be8a0766373b1992a18c91702a48b37647ca400a5cd077b2d78e9ba" }, { "alg" : "SHA-512", - "content" : "0a10e363e24117e86650a1a8e9a10a637c4f99cee64405607be5da8c4bf4ecc413e67ed78acbd174b699b5c7325db5f0d623c10ded7e642a3e98f1f74e680f11" + "content" : "830bd069a1714fd24676db83114479961e3baea2abd4884c549f147edb6b83eafe4c9230f429818a9adfba89a0c4a21d39eddbcf4c1b937cc65a65b09d1a00ef" }, { "alg" : "SHA-384", - "content" : "c3775396d6d0c3001eb244d062e0f5262b78aae72a9d0ba5760dfa8eb5310112c403d0889cc73ade62a9fafcb515c635" + "content" : "ab21ccd7f07b9bceac88e85180e1f1643b43c30db4d8cdff030cd7cbc53753987284bfc1d412d7def8ec5380244fcfad" }, { "alg" : "SHA3-384", - "content" : "87bd8e6f2545740da80e5ad7c17600f1a3d0bd86aab07557e5f2fc3cdeccfc5654f030b0fe11c93e084da7a1e8b1d95b" + "content" : "ae43098f0c1a4939136f8f285cf9ca44663c2c77fd1120dd338239e70799b713af401a1c334559565263a1dc7f8613ae" }, { "alg" : "SHA3-256", - "content" : "85d791fcc5a6001f15ca84efff8a03c55b791a88745deca215c8108c8318ad1d" + "content" : "546a71b50a13237407e76548bf1fe5d61bf08df21dfa086bd17c2e3a103d25a0" }, { "alg" : "SHA3-512", - "content" : "024d92e865992b92d5c29a65ebec60a706ea8f0859de1c55312377ef22188396855b4403033d1e03a05208f37c3a24ea2e948f463cb3c5c9bc53c8d4266e5e03" + "content" : "18dbb41e4e61ece31c96cd50cc7a1d85799119cd5a88fef79ac4553071a363f485161ada5324cd8ef8b4204d60f000f5fff39c4db0eba2d15e9babf59a01f889" } ], "licenses" : [ @@ -929,7 +920,7 @@ } } ], - "purl" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.8.0.2699?type=jar", + "purl" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.18.0.3393?type=jar", "externalReferences" : [ { "type" : "website", @@ -953,62 +944,62 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.8.0.2699?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.18.0.3393?type=jar" }, { "publisher" : "SonarSource", "group" : "org.sonarsource.java", - "name" : "java-symbolic-execution", - "version" : "7.33.0.35775", - "description" : "Code Analyzer for Java", + "name" : "java-checks", + "version" : "8.18.0.40025", + "description" : "Code Analyzer for Java :: Analyzer's checks", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "232f45616c57791e1376b309b99d6bf3" + "content" : "1ac68532191b336b9c760c596dbabf9f" }, { "alg" : "SHA-1", - "content" : "ea12ce7dc955bbafca59c3463ea1f44ad82e42ab" + "content" : "6165e4a7c0bc4dd5bd6bdc8b74184f167bb5436b" }, { "alg" : "SHA-256", - "content" : "8ac28a32e08e60c451cc153bee71bc028f3c72e4ab0e3a9c91bdc5b131ad0f57" + "content" : "78b31d837169a372353c0b91ff2776590039996d8d50dbf033b774f6930d3b8c" }, { "alg" : "SHA-512", - "content" : "6ad5b4c6b85757346f203924c26e908d5557ab4d03147afbf58e33e0f25fdb3999f94aee6973366d2441565466473c30c0861a1512c79f240cd35a9a97f0d35e" + "content" : "07b461fd5a923bbd6a60379e61fc73924ad7bc3e1623257fbb16fee3390eb61e0d930dd80cb4e290da538c958546d8206a66fb433889665312df60b63aeccb1f" }, { "alg" : "SHA-384", - "content" : "dbc472dd1173bcac5ba03e4a1165ed35bd7db93511cc8b99e5407aaaa65a56a92027d79c551a4df7120c2a8d87705797" + "content" : "d1227c576fd2372fdcb0240ef2c0fc5497aaca1251df248eabf8e767765e8023ad5e727fecdd3ade31b5af2022a9f519" }, { "alg" : "SHA3-384", - "content" : "1912414c5430f6b4711e20bb73e1076b5ad85babae3e8374fbb65f1dd3232ae380d9bc52891184befed50777dace89f9" + "content" : "5a6b215207811609717d9b39ddaa332369918cf91fbe3bba94ebfff23408624b1bade52b5cf03062d16364fd9c792ea8" }, { "alg" : "SHA3-256", - "content" : "a5cbfac546a7aaf0a2211c3f1beceb36e2ed3384c9d7d4ece2195d2932fba345" + "content" : "030d53c3182415e2896ffc5898b155cac52587a006b327a51c6c5ab59714c012" }, { "alg" : "SHA3-512", - "content" : "4f6974c7877b90dfb0acf4a6f8f412ea4f391164165ce3de75973c871e356a55fdc5ad4de3322a7e30e57f4d7caa87871b3671a63e19ca51a6f5b3cec949d281" + "content" : "a5a4a3f41c1ba65066554808baeff26551c033ccb31ec561ab622e535984db16d9742107f5d07b7d3bc6f25ec92c410600eca7cdf1d9e36fd23a6246d1220db7" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.sonarsource.java/java-symbolic-execution@7.33.0.35775?type=jar", + "purl" : "pkg:maven/org.sonarsource.java/java-checks@8.18.0.40025?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://redirect.sonarsource.com/plugins/java.html/java-symbolic-execution" + "url" : "http://redirect.sonarsource.com/plugins/java.html/java-checks" }, { "type" : "build-system", @@ -1028,66 +1019,66 @@ }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-java/java-symbolic-execution" + "url" : "https://github.com/SonarSource/sonar-java/java-checks" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.java/java-symbolic-execution@7.33.0.35775?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.java/java-checks@8.18.0.40025?type=jar" }, { "publisher" : "SonarSource", "group" : "org.sonarsource.java", - "name" : "java-checks", - "version" : "7.33.0.35775", - "description" : "Code Analyzer for Java", + "name" : "java-checks-common", + "version" : "8.18.0.40025", + "description" : "Code Analyzer for Java :: Common utilities for analyzer's checks", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "eaeb082ff51df115aaf0f3116faf4b84" + "content" : "5514880c7701b527cdcc574edae88dc7" }, { "alg" : "SHA-1", - "content" : "f11567226d2a4c2efcadf5545c3e0b1bb5f8142c" + "content" : "5e3906963a6aee9229c0d5735ec5b0caba9c7a36" }, { "alg" : "SHA-256", - "content" : "1eeb30e79298fa3cff7e7265a0d313a5572bdd726b8d83e83dcb1d144421c24b" + "content" : "89aadedaaa0bd0e788c55b3a78a5b086fd0dbc4935e1ca9e8d15266c81dbc1eb" }, { "alg" : "SHA-512", - "content" : "0034e5bf2e95fb181c476a3d1a5b111efcd22131f62d75eb6daf21da645b4e3ad8e35096274e3898e042a7463d831caea46a7840f843c10442d5f48b75041687" + "content" : "c7e5eea32cd08b004728418429b1b1255751a50a33f5a58712ee7ebddb2f15883cbbc9a999d3d388274662e1b398f2121bdd8e28465a7b86b5702be57a211e0a" }, { "alg" : "SHA-384", - "content" : "c2e5daa8bb17411f2ad282755de82c02d98a4940a81a76c26167713a1b5f55f7551875ae8459b5b77934d42f37f5e8e5" + "content" : "74603a766b61c433df59fa6df8c140018dc181c84af0476242c22c4fefea6f3437cde005c253c21301be0209797ef6c8" }, { "alg" : "SHA3-384", - "content" : "7de6a308f476947ec7a132968be161ea98ab1f135d6286129fde8ee5f8a1044a295c9febf482d7f5a5f83b65e1ccd36f" + "content" : "a9a28120b1353f47a2aff96a032d95d8988eb0b2c940bff0bcef27dc352b19950d0b1eb0de8a521f8c232cfc0b3abea5" }, { "alg" : "SHA3-256", - "content" : "8033896b6e57169054031f9d386f00cc0194f1cf930782becea1b12a5f5421f7" + "content" : "eeb22c67995bfa542c898dc47195590c37da85116f30df4b367bd970c162084a" }, { "alg" : "SHA3-512", - "content" : "789208a299ff2cbfe4ac9f6c647b0d703ff77040fce20e269b33a6d0712011d214704496d27ee8b63adf5778e4d8b58fde286e5a8f043f3b1813ec4c15a06fce" + "content" : "27adbd9adbd039453b3f8fc762117222650d45147cfb4ea26ad6daf65b994fd618f4b5a2173f0860fdaa5b1e096af32faa100c902377b811892d8664c094684a" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.sonarsource.java/java-checks@7.33.0.35775?type=jar", + "purl" : "pkg:maven/org.sonarsource.java/java-checks-common@8.18.0.40025?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://redirect.sonarsource.com/plugins/java.html/java-checks" + "url" : "http://redirect.sonarsource.com/plugins/java.html/java-checks-common" }, { "type" : "build-system", @@ -1107,51 +1098,51 @@ }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-java/java-checks" + "url" : "https://github.com/SonarSource/sonar-java/java-checks-common" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.java/java-checks@7.33.0.35775?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.java/java-checks-common@8.18.0.40025?type=jar" }, { "publisher" : "SonarSource", - "group" : "org.sonarsource.java", - "name" : "java-checks-common", - "version" : "7.33.0.35775", - "description" : "Code Analyzer for Java", + "group" : "org.sonarsource.analyzer-commons", + "name" : "sonar-analyzer-recognizers", + "version" : "2.18.0.3393", + "description" : "Shared code recognizers", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "377bec0957fff4818de779185dc9d46b" + "content" : "c8fea2140f3d18005b73ba0cd39ac3cf" }, { "alg" : "SHA-1", - "content" : "64e48e3a5d4bdc7ed674b21f8ddb393e548c9947" + "content" : "f741f10d470867172afa510990c16877ede70222" }, { "alg" : "SHA-256", - "content" : "a5db4cf127e982760c049faf6a3df99fafccdd5e1d58b59afba30b206bde96b2" + "content" : "0b4ef58f3bba93170f115ec2a73eb5596276abc21219b7fa733240b6bc3f7d52" }, { "alg" : "SHA-512", - "content" : "ebb84100013c73fd13cd502e5ea56a557568f5404b1b60d015ba5529c955c7ae70c612437cbb249068c7437d2dd4ef7f249a20f4f2090ea22c414123df062838" + "content" : "8edf444d67195ff181307c7f27744833b7fa47ff54ee2c687c92761cd7e0900e302f71541d2ccb84a0436ac04fc28ccc79c4700452455db6c155c6ac774bf26d" }, { "alg" : "SHA-384", - "content" : "a3e9a9cf69e639b84e22ef84a9937d8c8e829628ae2b203ec722394ad3b50e0c07fc1b6265d4bf8df3a86cac424125ef" + "content" : "821446711dedcdcb0a20bae33560f7f5d86ca528b7277170b3fe539bc20ab41f90096c6d6cb6cb9b67a7738cf56029fd" }, { "alg" : "SHA3-384", - "content" : "abe29bc0a84ab6ec1dc55fe8d349f72e37865e46a7eb114d85328882711f00f344cb7252ef9adc449009b62a4350f7bd" + "content" : "c036fd79d7730afa956adbabd42edfd0fb5473e5b4534d2ecc480b2b587099d923ee97a9ee51e40e1e027a413fb7b33d" }, { "alg" : "SHA3-256", - "content" : "2bfc0c71aef10df37be7c91fea1ab5e1d90f018c859aa7e3f0844ce2246137fa" + "content" : "aafdbc0fc6e44a212ee7cb7eb10d9cb4b23ceb25a532ea0a6508ea32141cb581" }, { "alg" : "SHA3-512", - "content" : "0e7d60391152b9fbc7b7238967dbf3c4c4c32e776f065b65e456c5ba5b88550723709c82125334fb749167231d602fd6bf3c610a7e83e2d34f3e339f139f71b6" + "content" : "747d1f9f8a556ff1c67bfa46aa1e8e8b9c7b76114e141845751376c7bb34d841349491766e6ed221938f6d64e8aed91663515d23283668711177d076f12eb852" } ], "licenses" : [ @@ -1162,23 +1153,19 @@ } } ], - "purl" : "pkg:maven/org.sonarsource.java/java-checks-common@7.33.0.35775?type=jar", + "purl" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.18.0.3393?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://redirect.sonarsource.com/plugins/java.html/java-checks-common" + "url" : "http://docs.sonarqube.org/display/PLUG/Plugin+Library/sonar-analyzer-commons-parent/sonar-analyzer-recognizers" }, { "type" : "build-system", - "url" : "https://cirrus-ci.com/github/SonarSource/sonar-java" - }, - { - "type" : "distribution-intake", - "url" : "file:./local-deployment" + "url" : "https://cirrus-ci.com/github/SonarSource/" }, { "type" : "issue-tracker", - "url" : "https://jira.sonarsource.com/browse/SONARJAVA" + "url" : "http://jira.sonarsource.com" }, { "type" : "mailing-list", @@ -1186,126 +1173,117 @@ }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-java/java-checks-common" + "url" : "https://github.com/SonarSource/sonar-analyzer-commons/sonar-analyzer-recognizers" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.java/java-checks-common@7.33.0.35775?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.18.0.3393?type=jar" }, { - "publisher" : "SonarSource", - "group" : "org.sonarsource.analyzer-commons", - "name" : "sonar-analyzer-recognizers", - "version" : "2.8.0.2699", - "description" : "Shared code recognizers", + "publisher" : "Spring IO", + "group" : "org.springframework", + "name" : "spring-expression", + "version" : "6.1.21", + "description" : "Spring Expression Language (SpEL)", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "f9c0e3225c8cd152cd8385ab211c1211" + "content" : "9ea32c5135a59a1264f13d8f8d5f355c" }, { "alg" : "SHA-1", - "content" : "10fa0ef13f09632cc2d8a97990512a36252b2e2c" + "content" : "72da3b3521a6788e143a47b0f7273ce7cf98c6f0" }, { "alg" : "SHA-256", - "content" : "5ba42aefbd8cf715575a9f40293a53b47cc82ba67943215a5382487e4042da50" + "content" : "29597c579b6b051d0dd2f56775c6e0078ac5252eab5c940ae687bd5e1fcafbd7" }, { "alg" : "SHA-512", - "content" : "0659ad40421f8be0d492fedf4cee72c531d264d8b9aa9327e789b9277de0a5b037c0dba25a25bc1efb5a858a959941e7e6fa3c7e166ff908db1ea272b5f05486" + "content" : "e54e346271cbc327b138f7a16d6c086f68290688c293753cc5513bc26a20ddd91ee194de32d91122432dae785692468d9d68971202e05c0571a65a44f0a518e1" }, { "alg" : "SHA-384", - "content" : "7b629d1b28bab3012d347760905c7235e579c868460098c2f4e9e9127e3eef1fd08be8f8cff2400552a2f6ba3c735d18" + "content" : "eb0349b3f3b4952f088a4243ab58b7167087e01a719babbe15e54c25d5b6cc3e8f52203542e447a465c3002a3588e6ec" }, { "alg" : "SHA3-384", - "content" : "e3f76485b0c60e07e0a8d93716847e12279c8914590d06000a95df859b952d2b1348a2c1b74a434f92aa36ae711ad858" + "content" : "a2d39ba6e734731a7588f70fac0ab312d835674427c384e7bc7fde62340d2d1c48217ec0bbdc953b3f436550aa0dc796" }, { "alg" : "SHA3-256", - "content" : "af4025e146ba6f1982d1351d1adcabee0a2acb8b90f7a7e8e76f019e408adc1f" + "content" : "be4aa16518c2a8cae7deb0b7f867a2a4be88a7a9b3030db00558615eae43d27c" }, { "alg" : "SHA3-512", - "content" : "ec20e48bda7e839e8c30bdb52156bd42a856f176282c3b1fd3241a268e1674b582acee92f83d72b0247a03634e46a2a740326dda9c089b704605b45c69322606" + "content" : "c4e3742d1ba2111bc4b72c1f9fcebff0d47c8466dd732d5f66ef2c7303a60d7da4e1a63fbf469df27075bf0f5174302dfa921722079425540151fd5e16fdfbfb" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "id" : "Apache-2.0" } } ], - "purl" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.8.0.2699?type=jar", + "purl" : "pkg:maven/org.springframework/spring-expression@6.1.21?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://docs.sonarqube.org/display/PLUG/Plugin+Library/sonar-analyzer-commons-parent/sonar-analyzer-recognizers" - }, - { - "type" : "build-system", - "url" : "https://cirrus-ci.com/github/SonarSource/" + "url" : "https://github.com/spring-projects/spring-framework" }, { "type" : "issue-tracker", - "url" : "http://jira.sonarsource.com" - }, - { - "type" : "mailing-list", - "url" : "https://community.sonarsource.com" + "url" : "https://github.com/spring-projects/spring-framework/issues" }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-analyzer-commons/sonar-analyzer-recognizers" + "url" : "https://github.com/spring-projects/spring-framework" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.8.0.2699?type=jar" + "bom-ref" : "pkg:maven/org.springframework/spring-expression@6.1.21?type=jar" }, { "publisher" : "Spring IO", "group" : "org.springframework", - "name" : "spring-expression", - "version" : "6.1.5", - "description" : "Spring Expression Language (SpEL)", + "name" : "spring-core", + "version" : "6.1.21", + "description" : "Spring Core", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "1f268a22bb7c0cb80958953ffbc21125" + "content" : "3c233d75937864d95e9051eafa9205f1" }, { "alg" : "SHA-1", - "content" : "7e21cb1c6bbef1509e12d485b75ffc61278d9fa7" + "content" : "dcc8607ee792439389e19111d83737b6b06ca4ac" }, { "alg" : "SHA-256", - "content" : "1f37b50dcaf091a43bb10d946178fff4082674497fd821438327815da14f7fd0" + "content" : "0729b69e52ac8d9a8d03991315690f632bb0984620a0595e52580d7f3557298d" }, { "alg" : "SHA-512", - "content" : "d5a13856a7f4619eaf1c9593f7739ec5cde37a555a98f0da4cb21aa591e87fb0bcdbd2a5da67d9b69a0dab0016f806c9d3f096bc8841c32bb98810daf1e5e7b7" + "content" : "8d926d38d47cc510378bff4cbd59a951660e8b813a22ffe662490631eb0f85668b007a0ee6961f4a6db2a80dab75181e13196fac10076510dc155c897a6aa999" }, { "alg" : "SHA-384", - "content" : "1e0c29ba819c5c8f5eb278a8f308a0119a476e81998ff5c7658b150352d357ef53c408566bd7a0b8023b7b41cabf4636" + "content" : "b8d3fff87f154bd509d1844c68a005787729112fac80512fa5d6df43d32b1f2fde0bd33e6ba6038e5d57e6265c8b97e5" }, { "alg" : "SHA3-384", - "content" : "f9cefe146557fe266e6e38bc8fbe157c7ef10fc606edafaf901d393ab140d25dabf4e60ff79c6a45a83c7eff890d3cac" + "content" : "d68af409a439cedb3b7da43946892d6012fb3000e849e929221a994cdd7ed1fd2791b1fbcc2b5903415ec6612f679cb9" }, { "alg" : "SHA3-256", - "content" : "ba29e269a74f3c452a64bd9e7a680c84c5c26b96397683c22435e4fcea8ecb9e" + "content" : "2a8bcfdbaae2b6c617f4896069b188e279faf8d169932c17f90c0e0ed4223fc0" }, { "alg" : "SHA3-512", - "content" : "8de364ab79572c8d2af2dc22ea5768d323b7268e03ae977701024f17e6fede13f03e248ef44c6789dea3007723beb1454c7795b45f3834b6040510661b6dee54" + "content" : "2890d9f8375e68786ea993d22ea2d9fd7c45bcbcce07949013857d7a3ff89da0aadb22a34493180c0d1fe905e744b453510b1f87631bbce8eda84c7844389884" } ], "licenses" : [ @@ -1315,7 +1293,7 @@ } } ], - "purl" : "pkg:maven/org.springframework/spring-expression@6.1.5?type=jar", + "purl" : "pkg:maven/org.springframework/spring-core@6.1.21?type=jar", "externalReferences" : [ { "type" : "website", @@ -1331,47 +1309,47 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/org.springframework/spring-expression@6.1.5?type=jar" + "bom-ref" : "pkg:maven/org.springframework/spring-core@6.1.21?type=jar" }, { "publisher" : "Spring IO", "group" : "org.springframework", - "name" : "spring-core", - "version" : "6.1.5", - "description" : "Spring Core", + "name" : "spring-jcl", + "version" : "6.1.21", + "description" : "Spring Commons Logging Bridge", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "6eeff94b635753591e74d979ffc2f793" + "content" : "0e017885cab7225c3859aaf24d3a96cb" }, { "alg" : "SHA-1", - "content" : "6dae1b06ffacbb9abab636be2dbc6acd3b6e5d68" + "content" : "fa75fc86c26dbbc6fb816e5b7aa5fc83f4494423" }, { "alg" : "SHA-256", - "content" : "476dac28509b3f47d0b5e895a639fa75ac2218f074ce214e44832a836c469f7e" + "content" : "f77ae10f41eaf02bc94a6424a3bad1d80a58b168e6af032ecb40a474d9e4f82d" }, { "alg" : "SHA-512", - "content" : "067d31ab99c842a586fbc1bf7aa7ac9aad0fa36d70f0e5bdb7e355514d66b1f6106dbb74ce15959a8dff8223a3e447ae30735e40f376e67f0ef8b70ed1a85002" + "content" : "b0821cb6220914b2bc517f858d21c4a3b98b5a487ee94f29acf044153ba5a568a44fead4d003f71ffbad65f61791d01e33ec05859cdf2a3a1bb853469dc37753" }, { "alg" : "SHA-384", - "content" : "25728b0246bc11715c8b1fec2a704b74a6c2bd6e41851b44aead5c76d0ad1493929bdbcef51dee8005404099388c03ee" + "content" : "84188cf73912ff5372b4ebc58fd0bc63ecc282240c896a987ebf3cfcbbc57cfeacd1a63ea5a9cd6fbcd3ea45e11a001a" }, { "alg" : "SHA3-384", - "content" : "ba98714211e0a6d8337b876cd6452216d1752b5274671f476fa06a63931da1e8ff0d7d0b4105967ab68e6f967aa8b43e" + "content" : "a787e5682a3d41e20e726caf3e0eabd9fd0b33beff448bdd8915c5d1755eec973d7e9ea229a806b00a1d969941364614" }, { "alg" : "SHA3-256", - "content" : "70c250de2d49aec369e3abf959c980036051ca0f54ddfc774840c95a8eabccae" + "content" : "9ab47bf24ddfbb2dbe03a02e131d4b9bd7ada2da72badba7a7fadd0363895247" }, { "alg" : "SHA3-512", - "content" : "c4d9cb5d1a7a738f6a762bd8f9a0fbd2455f3900e702b77d5d1d76079ab1b614b7993f992473ea57639a57fdb46e985a3b29191b3d8a18215b97e82b31cdb3e7" + "content" : "3d537771c6060078daca6cb556d0a1571f9a685e0287c8c186f3f8e441ce0d7460040de7368c7a51d4dd99faa0d6216baa1013c8acc7f3b981eb30e25cccdaa3" } ], "licenses" : [ @@ -1381,7 +1359,7 @@ } } ], - "purl" : "pkg:maven/org.springframework/spring-core@6.1.5?type=jar", + "purl" : "pkg:maven/org.springframework/spring-jcl@6.1.21?type=jar", "externalReferences" : [ { "type" : "website", @@ -1397,128 +1375,141 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/org.springframework/spring-core@6.1.5?type=jar" + "bom-ref" : "pkg:maven/org.springframework/spring-jcl@6.1.21?type=jar" }, { - "publisher" : "Spring IO", - "group" : "org.springframework", - "name" : "spring-jcl", - "version" : "6.1.5", - "description" : "Spring Commons Logging Bridge", + "publisher" : "SonarSource", + "group" : "org.sonarsource.java", + "name" : "java-checks-aws", + "version" : "8.18.0.40025", + "description" : "Code Analyzer for Java :: Analyzer's checks for AWS", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "4b7724c57ea12f13ce3fc49a18209b6c" + "content" : "8aed826c7d8696ce3699588cd6ff952b" }, { "alg" : "SHA-1", - "content" : "896ae3519327731589c6e77521656b50ae32d5b3" + "content" : "6cc1bba5a36b3eef6230e273866fc6dc309189af" }, { "alg" : "SHA-256", - "content" : "c53540419e482242c815db6d6a8cd80af85a6a895e38329b9d9bd6b4616503eb" + "content" : "5ee06300e5427acf74b378cf181a697b548a477ffcf1edfc216ae5345e40c1e0" }, { "alg" : "SHA-512", - "content" : "0de5bdae17924ab55ed7e6e97acbfeb60406fa99b10c1fd8a391f9f81c475691638535a297636fb79b51f02cf07d98ac613049235e9fdbf1186672c8b64c5967" + "content" : "47ecef1096030771bb0c24c2b3c15ebe51ab8a6f66d76ae2683ea4b54821f9c914ecd694b877a186c26650db463aedfa57e9a172fe509de26ca4f0a19867be61" }, { "alg" : "SHA-384", - "content" : "2844ddc317d6fed2c80c5090e3b4b976a063ad5fce4bf8dbfa7c1034cb647497a830142ff7e70b7eb0c8cf742a091071" + "content" : "242495b1e08269988e57a0e08730bb23d18fe614cf37af2ede8aa489a7a3ad581c0d5f970b7d25aee2db35f658649c26" }, { "alg" : "SHA3-384", - "content" : "dfc30f87671459ea2bdc8c25aa6ed814dd53a0ab60df4b98b44eb96ab28cd7bfce358c32b5ab8255d0c0d7ebba1a28b0" + "content" : "f8f74f485da5f891e8a98701cc7d7267548ebeb2d04861239a891547abebdda1951cc16de0003c60db18fa48ad9696f9" }, { "alg" : "SHA3-256", - "content" : "a7a4153deabf0b46852c6539f1d0d63bac5963eaf9ef73209097c3bd4b2118c3" + "content" : "b60ad5ee6b83beabd93c21866b2bd05eaf340ead9ef9f4d1f38492546d103d89" }, { "alg" : "SHA3-512", - "content" : "62add3aa8ea534168ba2eb4e811628e35970e17a2ae350de376fd95e8e0d70045dc9f6748075bafe4f74ebec4278bb3e36243478e08b4329840c8f068b30cde9" + "content" : "8bd74670d07ae07f638e31a27a8f8a00eb0fabd40337f3b601595c86769e31da58b969f08ca5424dbb48adc4d7c8477503a1d795cb8eeec3179f276273997685" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.springframework/spring-jcl@6.1.5?type=jar", + "purl" : "pkg:maven/org.sonarsource.java/java-checks-aws@8.18.0.40025?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://github.com/spring-projects/spring-framework" + "url" : "http://redirect.sonarsource.com/plugins/java.html/java-checks-aws" + }, + { + "type" : "build-system", + "url" : "https://cirrus-ci.com/github/SonarSource/sonar-java" + }, + { + "type" : "distribution-intake", + "url" : "file:./local-deployment" }, { "type" : "issue-tracker", - "url" : "https://github.com/spring-projects/spring-framework/issues" + "url" : "https://jira.sonarsource.com/browse/SONARJAVA" + }, + { + "type" : "mailing-list", + "url" : "https://community.sonarsource.com" }, { "type" : "vcs", - "url" : "https://github.com/spring-projects/spring-framework" + "url" : "https://github.com/SonarSource/sonar-java/java-checks-aws" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.springframework/spring-jcl@6.1.5?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.java/java-checks-aws@8.18.0.40025?type=jar" }, { "publisher" : "SonarSource", "group" : "org.sonarsource.java", - "name" : "java-checks-aws", - "version" : "7.33.0.35775", - "description" : "Code Analyzer for Java", + "name" : "check-list", + "version" : "8.18.0.40025", + "description" : "Code Analyzer for Java :: Generate the list of checks at build time", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "14dfa924e3e61569475db951d81dff71" + "content" : "523e390cec46df34c6686d8f61181bef" }, { "alg" : "SHA-1", - "content" : "2af499d9be4ebd5d898db1eb13eb34ad3b2fb8e9" + "content" : "93c3737e36e776e9c9ba43293256d3ade559e656" }, { "alg" : "SHA-256", - "content" : "62148c334e45df290a958dd438ef662ba5fd29c4023de832d425e674f7c585fd" + "content" : "aa62feaefd959fe9c4a75280ddbee6ffe9b59181296c521e8d876676812ddf5a" }, { "alg" : "SHA-512", - "content" : "f9365f6002c6a51295e7a00a4255ad9eb693d52de2e4c3aa0161e722c58f57a565f97bd3e03e53f3fcc2b1b1af3753471b0ba707e8416f6d2c21f17fcb1b7071" + "content" : "bba574e1f4a05a5fc7a70cb5f9deb5a1f68d8bcb6b2ad4859799e94ca18f622b15075f454e00e3d8fd5ac64827c06afc660ec73bc0db1402bdc3f5e4ebb16bbe" }, { "alg" : "SHA-384", - "content" : "45f68667d8e7543d39b51ebf451513bd085a573edfcee9b89c8154a61bda72d55f7085a1ccb132b306bb2dcebcb9b899" + "content" : "a87fc3e9946eef5166f6393ca2ee064caf3763d19e3415779f0e5269b267790a897485fb8cf085ba84f535e2112fbbe3" }, { "alg" : "SHA3-384", - "content" : "5a6ef9e7483108b215e37833d6d4321ae9ca11f2a2df09d02563d008228dd469e2ce9d9b307679fe16fc229a1a90f588" + "content" : "9e9584346c363abd4a0aad992c54f60dfec95d7a7e8c3cc2834d878c72d1b8a5460c834eaeafc6045a7115af424bcacf" }, { "alg" : "SHA3-256", - "content" : "2c6b29354a7077d0a34a9c742a2e0a95310e2dbc40cab29527ec59aed9ac7b22" + "content" : "9ddbb48896bde9c6d4457d250d207daef592fe257f10ff0ed88cbb38990c9209" }, { "alg" : "SHA3-512", - "content" : "d19b4dfeca42f8ff8821621d241b12aec49fd8012cac5ccffefac6bd55ca2dca60ef40ee15a81460051fbf1797631a34c70fb4600a9e4182a581f082b8c5028e" + "content" : "7a3b54a4fd3db04d97df4040f10c27fb9993071eed45f1caac906d989b213995fddd8b7e74b92d68c6cc99709fc69b789f1a55bd55d1226adccaf80493869b8f" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.sonarsource.java/java-checks-aws@7.33.0.35775?type=jar", + "purl" : "pkg:maven/org.sonarsource.java/check-list@8.18.0.40025?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://redirect.sonarsource.com/plugins/java.html/java-checks-aws" + "url" : "http://redirect.sonarsource.com/plugins/java.html/check-list" }, { "type" : "build-system", @@ -1538,62 +1529,62 @@ }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-java/java-checks-aws" + "url" : "https://github.com/SonarSource/sonar-java/check-list" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.java/java-checks-aws@7.33.0.35775?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.java/check-list@8.18.0.40025?type=jar" }, { "publisher" : "SonarSource", "group" : "org.sonarsource.java", "name" : "external-reports", - "version" : "7.33.0.35775", - "description" : "Code Analyzer for Java", + "version" : "8.18.0.40025", + "description" : "Code Analyzer for Java :: External Reports Plugin", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "b07b7b394b1de4dadcdd41bf472bff97" + "content" : "0a2d44b03fd1c355461dd30c436d3097" }, { "alg" : "SHA-1", - "content" : "bc9c1e1cb3f4abca42ddb1b6ffc027eb2fd4c68e" + "content" : "6374bd720414018d7ed56f80b2ed918ec94e6b2f" }, { "alg" : "SHA-256", - "content" : "aabc8b03f2c9c042ad4d1d25ada8281dd029480e9f59831d98e91adca67fee08" + "content" : "38eb3bbdd4857c485d41a0a9deab123e2c9c4cba4e187dd1997efe72cdafdccc" }, { "alg" : "SHA-512", - "content" : "b60270c2b3d038cc3b3387ba052a79c2e5fad1b0536a5a1f2e4bfa98da3046ae451503f7837a214359dd6c6052cdbdf5d8776fbab5648bcc31ac974830a6c16d" + "content" : "ec05b2b58d09641b89777d15383f8ec27873aa1e2d97977af5365840b322e1a3e38a8d65c71dd7bf5b87fbca59e49bfc6e71dc7400efad987c51dcc5e9bd5e89" }, { "alg" : "SHA-384", - "content" : "943d62b27e66b0b7472c0115f9749fe109343ee1409eb6ba57ffd3776eddfb92bf28c4c1f664aefc08e891d29d5ea2e8" + "content" : "dfde96d508de66a673c9e13298c958dfc2c6fb32e85c0b42450b3263ba4f3a09a254d893f08ae4b9f39d707e4cee22c7" }, { "alg" : "SHA3-384", - "content" : "ff834b86b09d0b11bd4fd9da2245b52c76d540af4bbc858d2478f40444c2a632ca671eac45b65097c0014456a7d553ba" + "content" : "41b976778dec610536e3b9eb679754ef9568cc8bb2beb7c7fe1d852c5d5879c682d8844a0c035ebe0b095626ea43203f" }, { "alg" : "SHA3-256", - "content" : "b632f307cefea8b5fafe516db380b7160da28677ed0657db17332250ee40b26d" + "content" : "42ddf81281e703791ae6f8c8d8adcc96da58390d4cb4b49668b4d3e3d1ba4bec" }, { "alg" : "SHA3-512", - "content" : "81ae57ff106ae7f468dfa23a5d7fd828915cbe1bcc6b21ba988a255287a7d40858979aaede906f3cf277f93117eb7ec919e003083622d061b3149a2d15eb765b" + "content" : "586377b8e12c4b960ef1a3a5cf335e8e19db4da10de7346f140bf3eb56243229be4271603c2400a6bcedb87d06dce5f95cb11581e8eceb80e88a6ddb3e00a564" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.sonarsource.java/external-reports@7.33.0.35775?type=jar", + "purl" : "pkg:maven/org.sonarsource.java/external-reports@8.18.0.40025?type=jar", "externalReferences" : [ { "type" : "website", @@ -1621,58 +1612,58 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.java/external-reports@7.33.0.35775?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.java/external-reports@8.18.0.40025?type=jar" }, { "publisher" : "SonarSource", "group" : "org.sonarsource.java", "name" : "java-jsp", - "version" : "7.33.0.35775", - "description" : "Code Analyzer for Java", + "version" : "8.18.0.40025", + "description" : "Code Analyzer for Java :: JSP parser", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "e0890ace531478ef8ac18849d78cd9e5" + "content" : "7ad6c8d9c8472d350359adbb1bb2a117" }, { "alg" : "SHA-1", - "content" : "a8cecb5145490f15b35742712345b5919726ad89" + "content" : "bf1f05662d4aa017bfab919bee32c6e985aea49b" }, { "alg" : "SHA-256", - "content" : "ae1ee6f32a16217667ea46a973f7c93a6f66ef7052a2d1e24d6e8f78c02f96bf" + "content" : "85520636a757ac333fb349873dada3386a2a89352bb6443a552612323a898e3a" }, { "alg" : "SHA-512", - "content" : "b7fcefd8fa7174db020947db1a41aff0e5c25191fbd8feb8c53438a42604a50b342ac072f571eaf6b0d54915e9106dc5bc6304d5899dbee90e20dcfc08139ca9" + "content" : "34e2e4fd545dfab31f0f0dba626b61648a2daadfaa7f32483cb3b31aa2010e90639bcae4b2b3ac669d60ae3d0490ef59bf6d87ee61098d593c15b043ad8e43e1" }, { "alg" : "SHA-384", - "content" : "39420fa5bb00153057946a5b667877475bdb65923dd9af86acc6db63f3bbb9471de9735e4ed16a03b3c3a2c6da3118df" + "content" : "acb14999bcc8e0347f71ee453d3c58426e60de8f576904058391dbab16da82bfb0ac7083cdd73b6f26862b2ca06912cb" }, { "alg" : "SHA3-384", - "content" : "6defb43802dfd77c5a549fd7d28ffdf85711623dd24d28520e1e2d96677e47a69c5661029a028d7ca13ea3fa75697a00" + "content" : "75c0fed98b9486927c2c767745222e6b93e7c8af00727abbc871380d5bb2b9d71ba9a9bede424aedfc0c057e5c564d02" }, { "alg" : "SHA3-256", - "content" : "54265f768ea5687f500b148e81ac1c3a41c0ac1d9eeb3e2154ebe4507bef46f6" + "content" : "3ff452bc563a50565843c16d94fd729cdd4f76ce6b1847c5fd61d6504a6fb2a7" }, { "alg" : "SHA3-512", - "content" : "8530ff5df32f8250d5d3a68e81bf4f1e0d0add2a69fe6c2de5dc94b01bbe2e99a86fec11494f4d95239040ee2f736ae305c94b23376475ea7c981cdad6054c85" + "content" : "96ad4a5625e3d8c3b6df8a224e75597da826ca3438e1e0c6fe805cfc0d246822ab98794250913691ed1c5ce201b9e938ca6af648e9d2f5f842efdaad78599341" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.sonarsource.java/java-jsp@7.33.0.35775?type=jar", + "purl" : "pkg:maven/org.sonarsource.java/java-jsp@8.18.0.40025?type=jar", "externalReferences" : [ { "type" : "website", @@ -1700,275 +1691,122 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.java/java-jsp@7.33.0.35775?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.java/java-jsp@8.18.0.40025?type=jar" }, { - "group" : "org.apache.tomcat.embed", - "name" : "tomcat-embed-jasper", - "version" : "9.0.84", - "description" : "Core Tomcat implementation", + "publisher" : "SonarSource", + "group" : "org.sonarsource.analyzer-commons", + "name" : "sonar-analyzer-commons", + "version" : "2.18.0.3393", + "description" : "Logic useful for a language plugin", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "22b13ffeab24c14943b58adaee3d15f6" + "content" : "86c3f760a4c1790b1af5c16eb246f8e0" }, { "alg" : "SHA-1", - "content" : "5fcf71c9c39e54c9ca51c304dd7bb2f5558e3286" + "content" : "612043286321caa05aa4e7670b36dd41e826ae2d" }, { "alg" : "SHA-256", - "content" : "3f08ff872bf83defa70c20274ab597aaf23ea95c1ff50f4b98e0c9a2a25c1106" + "content" : "f7babd94546594b9d0427b1bf32cd8f60065b8e8d0a1436f6ac443b9faaa1bf0" }, { "alg" : "SHA-512", - "content" : "89d83d9250be2cfc2d1471133461107dd4fdab532439f7827771f7d2ac202a4c9d57aabed5a7f84fa7a5b1474ce67b60ccdfbd08e2fd4980af1cf133ac69a2c1" + "content" : "b1d166c1ea81d0c89afc9b27e6d9457e6cf0c45afc8de7fa37607ed14b379ddbc1cb1c31bd2ebc25be3c980f1cf145686256dc1b0217f8af73c69d5eb11bb0a3" }, { "alg" : "SHA-384", - "content" : "688680dcea5c8c055cfd461a29c601f0533bf448b9659d0491ee60107c9f8080fb91e2705cc319ab83cdc791f79b916e" + "content" : "1d1bde067e0de39df2d0a35bfda18e9082c4f208411d45488a632a61b0acb04270a4016ad481a7aab1107608d121b90a" }, { "alg" : "SHA3-384", - "content" : "0afb2f67992e9b3d891729c4f65c1804259180f459056f9e608c29d479eb5661a2eb23b46a240ff08d834c0940068f2b" + "content" : "74a471351b75abc4d02989bde9e597307c807683bbac455a3b50aa98928d7dbf3f85db1d4c090c7c7b87299603d1f568" }, { "alg" : "SHA3-256", - "content" : "58917d6995c9fc52fd102c6e26dad93af8e43ef5b8ee1dee7932c2aa947d261c" + "content" : "8a6c33facfe7d600d45ca3db4ef0e545e7bfa75a383ac9d05fe49df6ab695197" }, { "alg" : "SHA3-512", - "content" : "453c585ccdeb65f90a65d3e9d7aedfc0ef6d68cd3a905f24584802d7029b1d79d7bab4a28b2b0f9d12cc41d2c395b87ddcc8e6568e98aae21fd076ed1c4b7bb7" + "content" : "68308ba7a0a3196f866436123817431cda045808cf617084af2efb84f53aa6907841ba67653fad166a347f92de0de2b2fea573e5e2fda734306cb3ca3ecf3319" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0" + "name" : "GNU LGPL 3", + "url" : "http://www.gnu.org/licenses/lgpl.txt" } } ], - "purl" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@9.0.84?type=jar", + "purl" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.18.0.3393?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://tomcat.apache.org/" + "url" : "http://docs.sonarqube.org/display/PLUG/Plugin+Library/sonar-analyzer-commons-parent/sonar-analyzer-commons" + }, + { + "type" : "build-system", + "url" : "https://cirrus-ci.com/github/SonarSource/" + }, + { + "type" : "issue-tracker", + "url" : "http://jira.sonarsource.com" + }, + { + "type" : "mailing-list", + "url" : "https://community.sonarsource.com" + }, + { + "type" : "vcs", + "url" : "https://github.com/SonarSource/sonar-analyzer-commons/sonar-analyzer-commons" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@9.0.84?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.18.0.3393?type=jar" }, { - "group" : "org.apache.tomcat.embed", - "name" : "tomcat-embed-core", - "version" : "9.0.84", - "description" : "Core Tomcat implementation", + "publisher" : "SonarSource", + "group" : "org.sonarsource.analyzer-commons", + "name" : "sonar-xml-parsing", + "version" : "2.18.0.3393", + "description" : "Logic useful to read and analyze XML files", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "2a5bc72d7f698bc42784cb7afa20e808" + "content" : "42a57e652799b8d75ed82ed71af3e8a8" }, { "alg" : "SHA-1", - "content" : "d0cd4045defc2ecf7ccfdc901925eed427bcba3e" + "content" : "d776689581869043b0d5225d9def870872530ab9" }, { "alg" : "SHA-256", - "content" : "29daf71c4b5f5ed0c0983a83ebd96ee74df905e406534b4c5412cc92c2aca2b7" + "content" : "b383b5147a2b186d91f3efcca0cfa9be9e87371e79c0e61f38332b24f152286f" }, { "alg" : "SHA-512", - "content" : "e28752b186c5eaad6df750719e70bd9ab33f4924f293b622ed4a7198ad15fe5e998b6b7ddee230ce564e7ec0b71871fa5c2362f6c4cb65b2872e3f25ef0840e6" + "content" : "04334f2ed4bd53436f9ca5755f836df11147951e5e09ba375e7217a9ddb629172f550eddb978c1ecc3a9e76764db7c82aa05c925f53cb720ca6f0684c2d95197" }, { "alg" : "SHA-384", - "content" : "0df38c977446ce1bb1b6d17b544f3778b4891d6ef499bb1f53dfe8cca457ec8afdb8c061f17e966574d4fd9859517580" + "content" : "5cbbd8a9a784f94c77bac285538e6894c6cf67f5e5da50745633dab13583e6027c7b2620df4c0412cdcbb4bbf7dfb33f" }, { "alg" : "SHA3-384", - "content" : "eb18577b10a3e3cdabd0483e4545226f4fa8d8c2c3d8eb88b9782aeee1ae9d9bc03d76d19c6b5e886b668fe795d38975" + "content" : "3d74f27c2a90595595c59d4f3551e11037f70de03afb7669a59217a42c32e41318ccf53a4911e97c94d4ef7c5d909498" }, { "alg" : "SHA3-256", - "content" : "58006ad9c9fc8e3b18472ad550d72bcd7c9364ecdc586db3f194116694179bb8" + "content" : "e798859717811fa3dd11cdc3e7c518593dad3f1eea35e7880250c832cdb6c51e" }, { "alg" : "SHA3-512", - "content" : "bda4e7479e4b6015f78b24ffca33be9d99d0606acff96f4d18d8e713f261835e16cf26cce800657c28a279fcd1c3e8aa6e5050d5463e1850526364306e003e2a" - } - ], - "licenses" : [ - { - "license" : { - "id" : "Apache-2.0" - } - } - ], - "purl" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.84?type=jar", - "externalReferences" : [ - { - "type" : "website", - "url" : "https://tomcat.apache.org/" - } - ], - "type" : "library", - "bom-ref" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.84?type=jar" - }, - { - "group" : "org.apache.tomcat", - "name" : "tomcat-annotations-api", - "version" : "9.0.84", - "description" : "Annotations Package", - "scope" : "required", - "hashes" : [ - { - "alg" : "MD5", - "content" : "f590e2b4b16de6e9bc4b7f48380a79d3" - }, - { - "alg" : "SHA-1", - "content" : "86186a099bb355a174243f812d58aaf113768b91" - }, - { - "alg" : "SHA-256", - "content" : "b801c2be650483f7a91a6c50a2a93768c0fddc7ec54d0ca0d5e69bc92ef2758a" - }, - { - "alg" : "SHA-512", - "content" : "bfe97892d8e218adcd01a473ca51d7bc3a59bec953fca3752e19d73519972eb7665cf9fc098a74cafb8cdff8fc773ac32424af7b3e865d6bfdaafaab59cb9fb1" - }, - { - "alg" : "SHA-384", - "content" : "7a97a614983641796ef33723f036bfba309c4f6d1fdf860058c795d826ebe311248822a705880de9d48e5a6d456bc471" - }, - { - "alg" : "SHA3-384", - "content" : "4af95a177b0bd0b0477b61a15b167592cf5e8ea0973f756d7850a6792e0da215b2ac1995cdec027169f0e78dc6fa5487" - }, - { - "alg" : "SHA3-256", - "content" : "8c4a3599140a0e684eb0f5aac9cea0857687d00d8bb3dc175cc88ae26ffe8337" - }, - { - "alg" : "SHA3-512", - "content" : "559a0b35852d37bc7115cd09ffb1684c6613eb5fde071e7503c483b46e32be0a7e2bc62d7386a999ac9e8c9d2548fed4c8d420465d0b8125f15fc554bf659a38" - } - ], - "licenses" : [ - { - "license" : { - "id" : "Apache-2.0" - } - } - ], - "purl" : "pkg:maven/org.apache.tomcat/tomcat-annotations-api@9.0.84?type=jar", - "externalReferences" : [ - { - "type" : "website", - "url" : "https://tomcat.apache.org/" - } - ], - "type" : "library", - "bom-ref" : "pkg:maven/org.apache.tomcat/tomcat-annotations-api@9.0.84?type=jar" - }, - { - "group" : "org.apache.tomcat.embed", - "name" : "tomcat-embed-el", - "version" : "9.0.84", - "description" : "Core Tomcat implementation", - "scope" : "required", - "hashes" : [ - { - "alg" : "MD5", - "content" : "3a0cd4945a15ee8d37f4b23cf2216e3d" - }, - { - "alg" : "SHA-1", - "content" : "3fc7c06e3f2c23baf8bfd64320376fa701633602" - }, - { - "alg" : "SHA-256", - "content" : "22370f6a152da44c9a7ea15e597f22ef6b057a8d3278f69ff50cc3452473bf97" - }, - { - "alg" : "SHA-512", - "content" : "3373ff62438698fc3223e7474efca16bdc2a9dc9759e5815ccb8a0e3cc722ba2d581292b60b52eb1d86beb7c705b2640c81d69dfa7162f477d6ed1be8928d748" - }, - { - "alg" : "SHA-384", - "content" : "7d018a18156839d5c3c92ac091a53710944e00955443f1a0b051b3cb40f0c7fc9a925efc776ab09f1f0a569102cca101" - }, - { - "alg" : "SHA3-384", - "content" : "4f300a9fd6932daa3ff4db977860f66a7f88157e72e1481f1981d5597a4666daf76a309d5ff10312ba0968b56f0e4bbd" - }, - { - "alg" : "SHA3-256", - "content" : "ac2d6743eafb0210717527467f014d8fd8ac97a12c5f2aaccf1922b01c4d268d" - }, - { - "alg" : "SHA3-512", - "content" : "656900dad4ca2261cdc8ffa7febfbf4edfe87e2cb32a8a34b830f0f3248ae707a473a82f69487a70003c3b2c0e92ed998c082ec22f172c86b8565b62b7df74ad" - } - ], - "licenses" : [ - { - "license" : { - "id" : "Apache-2.0" - } - } - ], - "purl" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.84?type=jar", - "externalReferences" : [ - { - "type" : "website", - "url" : "https://tomcat.apache.org/" - } - ], - "type" : "library", - "bom-ref" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.84?type=jar" - }, - { - "publisher" : "SonarSource", - "group" : "org.sonarsource.analyzer-commons", - "name" : "sonar-analyzer-commons", - "version" : "2.8.0.2699", - "description" : "Logic useful for a language plugin", - "scope" : "required", - "hashes" : [ - { - "alg" : "MD5", - "content" : "e1a59ec0809b06b3f5e2c8e97a76b218" - }, - { - "alg" : "SHA-1", - "content" : "cada74c92a33d57d5bdb70b8178a9006754e601c" - }, - { - "alg" : "SHA-256", - "content" : "e9e17c3b6e02624cc1981dc7c2100f9ea67b96aec66e6a785e0ed5202febd854" - }, - { - "alg" : "SHA-512", - "content" : "9197a2c16edd4ccbc39a33fe75e4a4175700306d9d1df2f4e146de37728aa8483a3355993bb8e8fb77ef9ff17490427cf55566d81364d82495f3e49c62ee21f2" - }, - { - "alg" : "SHA-384", - "content" : "8385239d7eb9d7bc972fbb63ed5d887b2089129844037c957f0cc5bcd34b8a20deea0531022af0832193f020e94ad5fe" - }, - { - "alg" : "SHA3-384", - "content" : "ce192d54341470644acee6f91217ddeb62f28d1ac2da58b0f73fb8ec9e5278463457f74dc4a264349051b6fc3dc25c3a" - }, - { - "alg" : "SHA3-256", - "content" : "a521179e465dec4a69e93e393df68d9c6719f393654a1e584bd3ff7a0cd39891" - }, - { - "alg" : "SHA3-512", - "content" : "36968ac582180921cb12e613073d261111b81ca042e47624bc07176f6926c6f7a40a11077e51d5e460add84747348b4a962cda95c6b6c1ffe372e032c570ad89" + "content" : "757eb040f0c6dc7a39dfba5f3842962b27433593e7993fc755ecd2d2ab362ee58b04c95ea9f4817b43a518f51144f18cd1e9f85875a79c6234ef0f667f1ff536" } ], "licenses" : [ @@ -1979,11 +1817,11 @@ } } ], - "purl" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.8.0.2699?type=jar", + "purl" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.18.0.3393?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://docs.sonarqube.org/display/PLUG/Plugin+Library/sonar-analyzer-commons-parent/sonar-analyzer-commons" + "url" : "http://docs.sonarqube.org/display/PLUG/Plugin+Library/sonar-analyzer-commons-parent/sonar-xml-parsing" }, { "type" : "build-system", @@ -1999,86 +1837,76 @@ }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-analyzer-commons/sonar-analyzer-commons" + "url" : "https://github.com/SonarSource/sonar-analyzer-commons/sonar-xml-parsing" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.8.0.2699?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.18.0.3393?type=jar" }, { - "publisher" : "SonarSource", - "group" : "org.sonarsource.analyzer-commons", - "name" : "sonar-xml-parsing", - "version" : "2.8.0.2699", - "description" : "Logic useful to read and analyze XML files", + "group" : "com.google.code.findbugs", + "name" : "jsr305", + "version" : "3.0.2", + "description" : "JSR305 Annotations for Findbugs", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "eeb2d8b488da7bd7c98cfb49b3d06830" + "content" : "dd83accb899363c32b07d7a1b2e4ce40" }, { "alg" : "SHA-1", - "content" : "03e14b69bc7a2abbc0a595851f8f31540b208dd6" + "content" : "25ea2e8b0c338a877313bd4672d3fe056ea78f0d" }, { "alg" : "SHA-256", - "content" : "408ec4b66b8fda3fe8a333858aed7cbb3340f570790468f8a789de4cbf2c8c91" + "content" : "766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7" }, { "alg" : "SHA-512", - "content" : "35be20dfa7f82d0ba024c2614359e4b52ac295a2c416d854103b3a7f9739d04e2eb3bb927064fe9ac11ed9dbe5f91f8a266fd16a2ed40675b50c43836d132829" + "content" : "bb09db62919a50fa5b55906013be6ca4fc7acb2e87455fac5eaf9ede2e41ce8bbafc0e5a385a561264ea4cd71bbbd3ef5a45e02d63277a201d06a0ae1636f804" }, { "alg" : "SHA-384", - "content" : "426ea2055c0c9f6642b68a7b2eccbf4d7ee802dd3bfc010564b108a8c5cf54a3a9ce7fd3d07ab4adbbd54fa52bee64b5" + "content" : "ca0b169d3eb2d0922dc031133a021f861a043bb3e405a88728215fd6ff00fa52fdc7347842dcc2031472e3726164bdc4" }, { "alg" : "SHA3-384", - "content" : "9bfe10431714c647f99ce6b8e4d8eaaa6b80862985380a5ce4da37cdcf95cf324f9008b9dd46e81e8ecaacd19fa8e1c3" + "content" : "9903fd7505218999f8262efedb3d935d64bcef84aae781064ab5e1b24755466b269517cada562fa140cd1d417ede57a1" }, { "alg" : "SHA3-256", - "content" : "2c47cf7bd11d40d40d1da9406bbd00a578bee08621cf341598d8fad4c4e8f7d9" + "content" : "223fda9a89a461afaae73b177a2dc20ed4a90f2f8757f5c65f3241b0510f00ff" }, { "alg" : "SHA3-512", - "content" : "4eb5a2b0f0b527231f0bfb1bae4c798713e615a7c5929c0ac09f49b3d9fa5eb12cee0775842e6b7033d7163803a3737595fdf9f221eeaef69e43875c87b6c3bf" + "content" : "3996b5af57a5d5c6a0cd62b11773360fb051dd86a2ba968476806a2a5d32049b82d69a24a3c694e8fe4d735be6a28e41000cc500cc2a9fb577e058045855d2d6" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "id" : "Apache-2.0" } } ], - "purl" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.8.0.2699?type=jar", + "purl" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://docs.sonarqube.org/display/PLUG/Plugin+Library/sonar-analyzer-commons-parent/sonar-xml-parsing" - }, - { - "type" : "build-system", - "url" : "https://cirrus-ci.com/github/SonarSource/" - }, - { - "type" : "issue-tracker", - "url" : "http://jira.sonarsource.com" + "url" : "http://findbugs.sourceforge.net/" }, { - "type" : "mailing-list", - "url" : "https://community.sonarsource.com" + "type" : "distribution-intake", + "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-analyzer-commons/sonar-xml-parsing" + "url" : "https://code.google.com/p/jsr-305/" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.8.0.2699?type=jar" + "bom-ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar" }, { "group" : "xerces", @@ -2296,41 +2124,41 @@ "publisher" : "SonarSource", "group" : "org.sonarsource.analyzer-commons", "name" : "sonar-performance-measure", - "version" : "2.8.0.2699", + "version" : "2.18.0.3393", "description" : "Logic to capture a hierarchy of performance measures, save it into a file, and merge files", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "bfdcb3a88a97fe66b288f61921bab1ae" + "content" : "1854d57f67661c6950374be29145a017" }, { "alg" : "SHA-1", - "content" : "0ecfd7e49341de39ad53f9608c31f30b6a10c441" + "content" : "eb02954016253fd34551a4641e3215fdafc239c6" }, { "alg" : "SHA-256", - "content" : "ebba386ff08f8bbe6e9a37a0666e91c8c8561af5e8b24de484a520e828ec64e7" + "content" : "4a3f60003f00a88695158a522cfbb7119c2c696991f13b7ca391e7c1eaf46d34" }, { "alg" : "SHA-512", - "content" : "02d37166706b1a93248cfb82731318304950162814292a295f0252d0f5d7ec734cedaf4a9f960d30c85dc8bac0ee59d75089f5ae10c88212b98e4de7ef7c4d8b" + "content" : "f3f2cc2211f00a66c33cd81ef996557fda3ee89421b2fc4565c376dadc22dc2a25eb327e5dfa041f3c48b8fa8620b797ec6762fd74d3ddde0184e6598c211d39" }, { "alg" : "SHA-384", - "content" : "84f70dfb7e80d7a6c1dad5ac31ce743f0da036e683881acf172d35f7d21ccbb3296165b88fcd4b2167cdc1234956bcdb" + "content" : "54138af00ebd5d85cb2f776d75d2455de1a058e657dff84d8e19a563d720fa819a1efd4d432a1d3c2dcb2fa31158c184" }, { "alg" : "SHA3-384", - "content" : "e89f15bf1b1ff83ce691bd755daab7a6ac6cfb416ccdc12ebd1a7f427da2224c4b8371062ebaa3fa63ba878473e7a8d2" + "content" : "7855e1aba9691493ebd9a5d79ace4cbccdc1f9fd9194a8300f6b71367014e7fdaf04a7aa9db87ed195b7d738552e6080" }, { "alg" : "SHA3-256", - "content" : "c08c9694411c5561032ace350fb1bb2201f3bfd0aa217e48047a399eb26e26c2" + "content" : "f65d3d9a6737a6bd62c31d2d463d011512c3aa434d0575d6e54a95dc00bc5c6e" }, { "alg" : "SHA3-512", - "content" : "a47781adf6a0dd209579e9c09ddb1f53c88bf89dadd4a7829655599eaea3399f9a71cf7e3b9c831c0f7e86904d5de2e97a6c3df8c0c0126ce8f4f4ad73cda1a3" + "content" : "34d64169af99b65d4ee59cfd414e189af6ea00ae5118aae5976e1ec76752631138c08eae42b96e95f9668123bbe44a17907c7556003e0dfd988723fc50db0d31" } ], "licenses" : [ @@ -2341,7 +2169,7 @@ } } ], - "purl" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.8.0.2699?type=jar", + "purl" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.18.0.3393?type=jar", "externalReferences" : [ { "type" : "website", @@ -2365,58 +2193,58 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.8.0.2699?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.18.0.3393?type=jar" }, { - "publisher" : "SonarSource and Waleri Enns", + "publisher" : "SonarSource", "group" : "org.sonarsource.python", "name" : "sonar-python-plugin", - "version" : "4.17.0.14845", + "version" : "5.16.0.29940", "description" : "Code Analyzer for Python", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "a1f37ca54b6407c29e14d6a84ef527be" + "content" : "96af3be952506f19faa9797702af83d2" }, { "alg" : "SHA-1", - "content" : "d2a19e1624695b1a8bf7691c028be1c1d795c3b4" + "content" : "7358996b700859eefb489750874f6b276555ae44" }, { "alg" : "SHA-256", - "content" : "4745222f0e3ff47ae4bef17fe6e6c8f50234c69d4992e81628c52217f3443564" + "content" : "161047717514eb4299847263ccb553df5e5be8fc9ceb081aaf4015fa834c734a" }, { "alg" : "SHA-512", - "content" : "7fb3dc79348493ea5a16c8a436db16665126137f0dfcc146fd75dac317a686c26f81499e5a370341e87374fe28006670f48d7424ab2c7988e8e51a842872fc4a" + "content" : "09689460be8675a15d4f1c2cecb868563c94a54c311f992bdd190aef37300a80760966216f73c12824765d7a7562735799b9c08f0606f465b03c299778110b31" }, { "alg" : "SHA-384", - "content" : "55bff9b2c2d2fede0efcaa6c64835bb2e42e94d4ba6196168d4d5b2f7fbd65cd8c03ae85f39937d27f873edcc359d565" + "content" : "bc18a99dabb6a1f04cd2bfdaffd3e1ba70688d16716b8cf40c9a751e94c6312b721b31478d7ea1baf3095da0654e6ae1" }, { "alg" : "SHA3-384", - "content" : "f38a0bc3cfd4b5d024c210e71fc0b63f41cc4bbac4bc501905fad95ceda64f81e39c3a53ca50b5c1e25250e802ce8a92" + "content" : "5d4803f25bb278676d6aa3ec55c6fd4db93fb42d5966fe73f0d7c6ecc2edcd2633154defacccd021b82574399e095c6c" }, { "alg" : "SHA3-256", - "content" : "2a9a49aac638a35dbc0ec3d31a79cb92a87bb148ce46ca7072bbb4d732a0cda6" + "content" : "b5898d3547c883a1aeaeb1175ed6bf9b691ae896210df2a0ce22b74295ddc004" }, { "alg" : "SHA3-512", - "content" : "5861b8fa999a2e4117429bf16c4ee05f765050a41ca59fd6beb2499ac24020a0693f366b6807bce569cf789be4ef075ab320aa02580712ad32d0b10a0b1b34d4" + "content" : "22c2445b64a2d200eb021df6bf93ef083c5487bde5c7923df897941445fd7f77eb9eac76542924195c8fdf17d43a3336a9b91f7c507ce8c36265447d8b77472c" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.sonarsource.python/sonar-python-plugin@4.17.0.14845?type=jar", + "purl" : "pkg:maven/org.sonarsource.python/sonar-python-plugin@5.16.0.29940?type=jar", "externalReferences" : [ { "type" : "website", @@ -2440,62 +2268,62 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.python/sonar-python-plugin@4.17.0.14845?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.python/sonar-python-plugin@5.16.0.29940?type=jar" }, { - "publisher" : "SonarSource and Waleri Enns", + "publisher" : "SonarSource", "group" : "org.sonarsource.python", "name" : "python-frontend", - "version" : "4.17.0.14845", + "version" : "5.16.0.29940", "description" : "Parent pom of SonarSource public projects", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "c55cb48cedabf79f2877ebb9d88f6b58" + "content" : "af8fb4754bb34b00450e1886e6e35f24" }, { "alg" : "SHA-1", - "content" : "4ff8dfa5ea7d5ad5847562d95396b919308caea3" + "content" : "3d29bbb908e0740432fd9e29f6f9fef3b61fa8bf" }, { "alg" : "SHA-256", - "content" : "437b54530740f33ae5e46bdf8348d1440684f7d1cb318a7ee058689bd9b97c76" + "content" : "2bf0a615cb8804200e9de8c3b407b6a928a16b34349f43c76bf9f6c548e8000c" }, { "alg" : "SHA-512", - "content" : "4928573b4dde5237b3056a25d01fdcaa0d8477f66517d0939d332ff8ba434b6a03d884095701f4b571af131b3afc6b57feee148d69d86b8e62a3a4d39d2d1001" + "content" : "0b42071f37c0cf8dfc46c3a3ed915bdc1d99b0bc41706200305c7f962f7b14c79e19eb42f99488b874d45267015de3f9762d903d6c03c7fb1c4bd1ac331c45d8" }, { "alg" : "SHA-384", - "content" : "859f11ab3b6590bc07f6a082ef8d87775939341e064abd4c840ad326640c71b84e99a8ae281f0bece8bd5b8196db1c0d" + "content" : "5411758030a57ffedc16b7b9f93592107920e01b27b8b6b98c3cb0cec1bbb3eecfc0dfc36ba130b2616507a703938560" }, { "alg" : "SHA3-384", - "content" : "7dc1a501021011058c6e46cf0e069103aca9687de27aea29c42196af8d74c09ed668ec77284abafc12d635f4e0c9154e" + "content" : "d2054bd5b799463c0364aebef1024584f37fc63b122b0d9a137d5d052b152ef3b23ebb64961222adc72f30e49ccdbe3d" }, { "alg" : "SHA3-256", - "content" : "84a8def8e68682978bda393edba28e6caa7d4c333fffce5c09a24e54a4104d20" + "content" : "6eaa8027ba8e0f7c11c2a2da14084630735110429505016fd92d8292c33637f4" }, { "alg" : "SHA3-512", - "content" : "b44fdef1e3482a1f65d0d5345c69fb78ed32cee27f96abab033ae1e3e26923efd69e8b213ae7c9c367c0e9a87df3785154ecc58961a5261513dc1fb3e260d50d" + "content" : "35de0af96a078f4bc7709776d051b3d40c5f965647096114d33cb47c2fda0aacef5453af4475302a074e351c796b30315daa182fc69f780f515ac046a19e9ff0" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.sonarsource.python/python-frontend@4.17.0.14845?type=jar", + "purl" : "pkg:maven/org.sonarsource.python/python-frontend@5.16.0.29940?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://docs.sonarqube.org/display/PLUG/Plugin+Library/python/python-frontend" + "url" : "https://docs.sonarsource.com/sonarqube-server/latest/extension-guide/developing-a-plugin/plugin-basics/python/python-frontend/" }, { "type" : "build-system", @@ -2515,46 +2343,46 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.python/python-frontend@4.17.0.14845?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.python/python-frontend@5.16.0.29940?type=jar" }, { "group" : "com.google.protobuf", "name" : "protobuf-java", - "version" : "3.25.1", + "version" : "4.29.0", "description" : "Core Protocol Buffers library. Protocol Buffers are a way of encoding structured data in an efficient yet extensible format.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "7dc81d3c2187ce5627d134a37df88cc0" + "content" : "5de9c1cc9a647278ab03d76ccfb8ff9d" }, { "alg" : "SHA-1", - "content" : "2933a5c3f022456d8842323fe0d7fb2d25a7e3c7" + "content" : "ffea90ab158435d68de76951857ef5f8b0f98365" }, { "alg" : "SHA-256", - "content" : "48a8e58a1a8f82eff141a7a388d38dfe77d7a48d5e57c9066ee37f19147e20df" + "content" : "16901851ebe5e89fe88aaad3c26866373695bc2e30627bb8932847e2f5fc2e76" }, { "alg" : "SHA-512", - "content" : "d4adb935097c4fee13838ea7c166b41a9c34977e436d2fa5e5e92aac1a95462846463895ad994858a442079627696ca14618ff97a0039abd3fcb8671d7961d3a" + "content" : "ed9aae4faa56c04dc086af07078db3734f675eb4188bb2be98c94cc59a8e4e77b74195c47d70c7b697bc3b938e106fdc137ffda5358b3029795f28e7d9216d68" }, { "alg" : "SHA-384", - "content" : "2fc41e52f529bcbbe4d8938d262153ee7e7a098d51fc84a2720bade27aff0247af47629c3caa630b706001d769714d1c" + "content" : "d204ff730ba5eff0eddd9439f05ab89e87194fc6c69d50054da593ab7537495207374840701867856ea1e9aa87ef1e14" }, { "alg" : "SHA3-384", - "content" : "9ff49c91b6ca5e5ebc8005b6179d171f3bb549b9ef667c694ea6cebe842bccbea1bedb2bab69d97e89270900915f125b" + "content" : "9a3dc4e7ef4e1488b6ee4a653d9f47569bb3f543012ec20fe695d1bba2a7da8e329ffe70d5ef8e43fd9da1721fe3f3c1" }, { "alg" : "SHA3-256", - "content" : "e3794da30f03c61b916aeb9aa2af625792dc7f236bf2bd16cbfffbf3ef186d59" + "content" : "16fec3a2d08bcc363c69d2a260a78020636d94dd4ed929050d8e8b51d37960f0" }, { "alg" : "SHA3-512", - "content" : "1d3bfb11f6cae1912bd5cd04aef53ae725d705e598fafaa185903d2c534ca2f88ad919321ec4bcdca36c9b1515097c5d47aa6868f5bd3b93732337bd564b3bb7" + "content" : "37c5a864aa97fd50a88a5c9b2a9c7eedd646eb4655ec041502e1892efb55b2f22e9f2292dcca120e74755a11f92dc41616e1dc6919d8906fe2c5802e25ed1187" } ], "licenses" : [ @@ -2565,7 +2393,7 @@ } } ], - "purl" : "pkg:maven/com.google.protobuf/protobuf-java@3.25.1?type=jar", + "purl" : "pkg:maven/com.google.protobuf/protobuf-java@4.29.0?type=jar", "externalReferences" : [ { "type" : "website", @@ -2581,122 +2409,117 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/com.google.protobuf/protobuf-java@3.25.1?type=jar" + "bom-ref" : "pkg:maven/com.google.protobuf/protobuf-java@4.29.0?type=jar" }, { - "publisher" : "SonarSource and Waleri Enns", - "group" : "org.sonarsource.python", - "name" : "python-checks", - "version" : "4.17.0.14845", - "description" : "Parent pom of SonarSource public projects", + "publisher" : "FasterXML", + "group" : "com.fasterxml.jackson.core", + "name" : "jackson-databind", + "version" : "2.20.1", + "description" : "General data-binding functionality for Jackson: works on core streaming API", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "077f9306a20f8a6eca092f54a53a26e3" + "content" : "49d7b7226df5ed4a036e48997a03d066" }, { "alg" : "SHA-1", - "content" : "ef43f45c57346b910ac422d7aff2ab4b6fe25894" + "content" : "9586a7fe0e1775de0e54237fa6a2c8455c93ac06" }, { "alg" : "SHA-256", - "content" : "7d6e1743538dbfa7310bc54fbb7e511a6fd8633549018d7e2b4ba67019a3123e" + "content" : "34bbeb4526fff4f8565b12106bf85a6afcbae858966d489b54214ac46b2e26e8" }, { "alg" : "SHA-512", - "content" : "f628f82e470f9af8e0da159464ef41996b5edbbab7ead94db853afc54992d8f155994becbb9acdfe4af46a41fbf5e3ae01ba6b17078d1e20861da5e4eedccafc" + "content" : "16906e9c2f1962649eb21de148f362fedf2ce903c7ca0e6d68a01d43dbe8402b70cc537c104f36bc40a2bed6601162e7c21663735582e25bff7e27852be1405d" }, { "alg" : "SHA-384", - "content" : "43302f43c32c5b35c4f7b85e901c457ad7ce7c1d0cc8d891dceb828018d0fa06c09fd7b6a34764f187b0deb8f002db96" + "content" : "0591935cdfed1d65fa4a2820133ba129384f71921228ffe093f343d3ebf0b699762810d9208641726111015f0e35753b" }, { "alg" : "SHA3-384", - "content" : "2c847248451a6f0874fa6d91dedd203c7492db05161c15235d709e9e9bc6d8ff5900b7c60e0aeea74fb7566cb1a3db3e" + "content" : "855ccd449944e7884f8088c8c5b224e6e2f63bcd3123502618b4f5ded025e5978143af8c5d31215276932bc3bb089472" }, { "alg" : "SHA3-256", - "content" : "32f3d74c14e3918b8af6c98cc32304cc5d0b835348cd15734033307e4e871d2f" + "content" : "53732171c9f2bdeaa40017a34683a00ac11e8a8c1bcefaed07eb91e629e20376" }, { "alg" : "SHA3-512", - "content" : "2429a23270a66433e76eade81bb8b8acd3d91b55a587c6230ecc1282e71b2fcd61d9867d100fe04b74d387516a7c0df4124d8aa82f300c07a82dba20b4c01920" + "content" : "05017efae94bc3c83131aaaa7911f20e7c367502cd2cd05c6cedabc877b55724bcde2521ba1da15bf1c1c3ccb1a235124b39b2d4860142f2b89d4df197cf5c83" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "id" : "Apache-2.0" } } ], - "purl" : "pkg:maven/org.sonarsource.python/python-checks@4.17.0.14845?type=jar", + "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://docs.sonarqube.org/display/PLUG/Plugin+Library/python/python-checks" + "url" : "https://github.com/FasterXML/jackson" }, { - "type" : "build-system", - "url" : "https://cirrus-ci.com/github/SonarSource/sonar-python" + "type" : "distribution-intake", + "url" : "https://central.sonatype.com/api/v1/publisher" }, { "type" : "issue-tracker", - "url" : "https://jira.sonarsource.com/browse/SONARPY" - }, - { - "type" : "mailing-list", - "url" : "https://community.sonarsource.com" + "url" : "https://github.com/FasterXML/jackson-databind/issues" }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-python/python-checks" + "url" : "https://github.com/FasterXML/jackson-databind" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.python/python-checks@4.17.0.14845?type=jar" + "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1?type=jar" }, { - "publisher" : "The Apache Software Foundation", - "group" : "commons-lang", - "name" : "commons-lang", - "version" : "2.6", - "description" : "Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.", + "publisher" : "FasterXML", + "group" : "com.fasterxml.jackson.core", + "name" : "jackson-annotations", + "version" : "2.20", + "description" : "Core annotations used for value types, used by Jackson data binding package.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "4d5c1693079575b362edf41500630bbd" + "content" : "b901def3c20752817f27130e4b8d6640" }, { "alg" : "SHA-1", - "content" : "0ce1edb914c94ebc388f086c6827e8bdeec71ac2" + "content" : "6a5e7291ea3f2b590a7ce400adb7b3aea4d7e12c" }, { "alg" : "SHA-256", - "content" : "50f11b09f877c294d56f24463f47d28f929cf5044f648661c0f0cfbae9a2f49c" + "content" : "959a2ffb2d591436f51f183c6a521fc89347912f711bf0cae008cdf045d95319" }, { "alg" : "SHA-512", - "content" : "4a5a3dbe4941c645e2cca068cca5c1882cfe988b02e7cd981d1e51784900767d1deab0e0e0566f559c9fcabb4a180e436d5bb948902d4f4106f37360466afb42" + "content" : "8926d89bfe7f427c7793f6af619249540f23f82eae055dd03d4cb163ff603a43dd6a3ebe43528d00789aed3df0dd2f10e08552fdec53e2691849b9769f57f0c9" }, { "alg" : "SHA-384", - "content" : "9725bc421adc1dbcd6f937eca0f3075d186a2b353ece4cef66b0fe81bb8d3f7d7641c43e86d657ef526c719f0c2a8c90" + "content" : "40ee4c1438a5a190624dff9deca83377f7e60690b4535359b2a79924f736bff7c8d077e5b01c6c8972735dc152f2ccf4" }, { "alg" : "SHA3-384", - "content" : "4bc4eaaf2580ded6d552b96ae5261c936de95f69a1d137c47279c51bf2aa1406ae44f69ccc94486267b8441e53c4bd74" + "content" : "0fc0f697d03692b63c2b11fcabac51c630278ed6df15420975263ea4ad19418b3b71b7889497ed20a150035f9bcba79d" }, { "alg" : "SHA3-256", - "content" : "b68d49ef037d428ea0c3e67a7a20f3d68a134bef30a1639ec08d28886b9f5629" + "content" : "6bf49e384735969af020f758b255ceed26af92d4cf456f6e7b83e8de53289f93" }, { "alg" : "SHA3-512", - "content" : "2e9ffc0608827cffc0b48b7a0f35d371c66586c99fea2910f7c2a237c7c57d9ae4d65de7c8e018362c2e4f963c2f70a9196cebf35457f1dd0cea6c65c256f673" + "content" : "3372f6c456a7f6a33ebc3ecc65daaf36288be2a14b1f2cb9fcd7387c07acab1c69ae803a366e5d12adf4934970ffd2e34017917c5f16a6d563bc94810f228ab3" } ], "licenses" : [ @@ -2706,272 +2529,287 @@ } } ], - "purl" : "pkg:maven/commons-lang/commons-lang@2.6?type=jar", + "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.20?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://commons.apache.org/lang/" - }, - { - "type" : "build-system", - "url" : "http://vmbuild.apache.org/continuum/" + "url" : "https://github.com/FasterXML/jackson" }, { "type" : "distribution-intake", - "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" + "url" : "https://central.sonatype.com/api/v1/publisher" }, { "type" : "issue-tracker", - "url" : "http://issues.apache.org/jira/browse/LANG" - }, - { - "type" : "mailing-list", - "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/" + "url" : "https://github.com/FasterXML/jackson-annotations/issues" }, { "type" : "vcs", - "url" : "http://svn.apache.org/viewvc/commons/proper/lang/branches/LANG_2_X" + "url" : "https://github.com/FasterXML/jackson-annotations" } ], "type" : "library", - "bom-ref" : "pkg:maven/commons-lang/commons-lang@2.6?type=jar" + "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.20?type=jar" }, { - "publisher" : "Codehaus", - "group" : "org.codehaus.staxmate", - "name" : "staxmate", - "version" : "2.0.1", - "description" : "StaxMate is a light-weight framework that adds convenience to streaming XML-processing without significant additional overhead. It builds on top of a Stax (JSR-173) compliant XML processors such as Woodstox or Sjsxp (default Stax implementation of JDK 1.6) and offers two basic abstractions: Cursors, which build on XMLStreamReaders and Output objects, which build on XMLStreamWriters.", + "publisher" : "FasterXML", + "group" : "com.fasterxml.jackson.core", + "name" : "jackson-core", + "version" : "2.20.1", + "description" : "Core Jackson processing abstractions (aka Streaming API), implementation for JSON", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "cbc599b621abdb9fd93d0c0527b6e273" + "content" : "889b2c417b61c9f4f460b06957147234" }, { "alg" : "SHA-1", - "content" : "b0b767fbc22683d7bf26a14ae1c5817561e21d00" + "content" : "5734323adfece72111769b0ae38a6cf803e3d178" }, { "alg" : "SHA-256", - "content" : "18c8e8b0507afe307be25c825e058fe91514cb3d8616a11b37225bbb760a143e" + "content" : "ffab4d957daa2796cf24cb66d0b78a7090f1bcbe17c3a4578f09affaaf137089" }, { "alg" : "SHA-512", - "content" : "8d8a336b79c83b8c229aba7cc56738271f7ca0b5387b09c246a18992299d0061015cde1f07da07b0ca6da8ac66eca4846269c48fd090968cf9f4f398d923dcb2" + "content" : "0463e1c2e1d8e8cfa4954dfce491583f0ec9ec1de6e6f342d1e5f0c63dcfb959673552a279ec4e6b6cc69e6ac2de6d42dd512149ceb76620b5d780db7325e6a7" }, { "alg" : "SHA-384", - "content" : "6f61dce2306717d3ba910ef8657977cfcc83d5e6f87b4fca30c96bb52feb416f187227963a5007f73ea120a93f7b4684" + "content" : "a279b2d57d019a05f65762ce670ce23e02466b11276d8c0687f3bb5ed40a8a1854bfe6dd2dc157d0f5695186f7d9a65a" }, { "alg" : "SHA3-384", - "content" : "165746fc80503b39ff6c3ecf7bd9516a30bb961270bb3ed1b2d009654d2c8ae1986261adadf6e7426eb00b283d8580bb" + "content" : "06b9f33e030a99fa95d171118ab668bee42e32b35b85e05750f8514128dbadc94026afde16dbadc0ff786027b09712a4" }, { "alg" : "SHA3-256", - "content" : "dc24cc41221fbcb753a407f0713ca0648861c7935e4ba2cf7e95accfb72ef434" + "content" : "3e83a1a349d8ba3a4e76ee983f04b259a85263dda5090f55aae5535109c4b6c0" }, { "alg" : "SHA3-512", - "content" : "bd029443e45d4a57e9d36587b0155cca05324282c48d259c1eae7e34a999dcff4ccd44590ca6fea208cce07d7034dac87d3155e46d2241c9f09b8de530d60a5b" + "content" : "87b3a61a71a625adfc6b9b402079c26b223e19535ca5af07e4130932d479f9c22e90696911050d8ab8a09a6209651fe2f25f54d7d9a1493b6dab6f8acb76203d" } ], "licenses" : [ { "license" : { - "id" : "BSD-4-Clause" + "id" : "Apache-2.0" } } ], - "purl" : "pkg:maven/org.codehaus.staxmate/staxmate@2.0.1?type=jar", + "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.1?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://staxmate.codehaus.org" + "url" : "https://github.com/FasterXML/jackson-core" }, { "type" : "distribution-intake", - "url" : "dav:https://dav.codehaus.org/repository/staxmate" + "url" : "https://central.sonatype.com/api/v1/publisher" }, { "type" : "issue-tracker", - "url" : "http://jira.codehaus.org/browse/STAXMATE" + "url" : "https://github.com/FasterXML/jackson-core/issues" + }, + { + "type" : "vcs", + "url" : "https://github.com/FasterXML/jackson-core" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.codehaus.staxmate/staxmate@2.0.1?type=jar" + "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.1?type=jar" }, { - "group" : "stax", - "name" : "stax-api", - "version" : "1.0.1", - "description" : "StAX API is the standard java XML processing API defined by JSR-173", + "publisher" : "SonarSource", + "group" : "org.sonarsource.python", + "name" : "python-checks", + "version" : "5.16.0.29940", + "description" : "Parent pom of SonarSource public projects", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "7d436a53c64490bee564c576babb36b4" + "content" : "c6a6f14dd43b2ca777639d045d371686" }, { "alg" : "SHA-1", - "content" : "49c100caf72d658aca8e58bd74a4ba90fa2b0d70" + "content" : "7420c64bb23358297f8fb465d194b0abc81a268d" }, { "alg" : "SHA-256", - "content" : "d1968436fc216c901fb9b82c7e878b50fd1d30091676da95b2edd3a9c0ccf92e" + "content" : "8d71a04ae268809a329169124e821538409f323c25738a787f1004691830947a" }, { "alg" : "SHA-512", - "content" : "43c24e8dbffa9b932492c8ccf2b91926b2ba3d1d34b5a9671c689bd24d4c220b996708a9667521641d1abbf29404b653755b6f6f3dc0ad0671f5c09db332ea06" + "content" : "49cc6c1c1f6d4ab7691e52ee582edc2dc4320706f0cba8b0264232bb8c648e0c1411fc349480d4126909275bc722a26ce7dc1d0442b0fe800d68e43dd502e8e0" }, { "alg" : "SHA-384", - "content" : "2e6c232d3012064dc17e10c2e5b281728a6771eb0d74868e730caf60fe6f96fdd6145759fbbf9d1aa2e07eb1f49764d6" + "content" : "0ec195c2cd805ba066715992213efab8234ad4fea211d38c11621b764ce81a82ec4eb13f372c3a6ae77663319de497ca" }, { "alg" : "SHA3-384", - "content" : "03ebb8db88d04b7308570c1058aadfb6a81d3d6725b1dd13a049ea984ed1df42d3e0f8163e1229752228cada978fb462" + "content" : "d59fe66bc7a1621385b1a8e6d9e7e9aba25f5bcd1bf7460aaeea718a9fdefa1f01d65bc6bbf08c4ea20d6ff5533321d5" }, { "alg" : "SHA3-256", - "content" : "8173e3e3a0db17b3dbb80c017268858ecda57c819e5b58dbe202bd8087664bb1" + "content" : "6b6d15ca4b8e534cfb0a5b3a9dc4ea328d07647a6a5029cc5bc36cc0e33f4ae7" }, { "alg" : "SHA3-512", - "content" : "e9a7c234dfeff5d4cabd034a536f31ad5a141e30b0ad2438cf5856dd6c36eeb16c69b8bc1ba3ee6bba91f69cd3cbd450953249f2f0eee0a9a22d49637b575f4d" + "content" : "258f4367d5303ee344945915f54637c52cdfd441d3ec1a642172dd417815e38993f14b35154b0d9c7d3f49dfad666e9cb2ca26a9993f52815180b4bb6bdf8dce" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/stax/stax-api@1.0.1?type=jar", + "purl" : "pkg:maven/org.sonarsource.python/python-checks@5.16.0.29940?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://stax.codehaus.org/" + "url" : "https://docs.sonarsource.com/sonarqube-server/latest/extension-guide/developing-a-plugin/plugin-basics/python/python-checks/" + }, + { + "type" : "build-system", + "url" : "https://cirrus-ci.com/github/SonarSource/sonar-python" }, { "type" : "issue-tracker", - "url" : "http://jira.codehaus.org/browse/STAX" + "url" : "https://jira.sonarsource.com/browse/SONARPY" }, { "type" : "mailing-list", - "url" : "http://groups.yahoo.com/group/stax_builders/" + "url" : "https://community.sonarsource.com" + }, + { + "type" : "vcs", + "url" : "https://github.com/SonarSource/sonar-python/python-checks" } ], "type" : "library", - "bom-ref" : "pkg:maven/stax/stax-api@1.0.1?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.python/python-checks@5.16.0.29940?type=jar" }, { - "publisher" : "fasterxml.com", - "group" : "org.codehaus.woodstox", - "name" : "stax2-api", - "version" : "3.1.4", - "description" : "tax2 API is an extension to basic Stax 1.0 API that adds significant new functionality, such as full-featured bi-direction validation interface and high-performance Typed Access API.", + "publisher" : "SonarSource", + "group" : "org.sonarsource.python", + "name" : "python-commons", + "version" : "5.16.0.29940", + "description" : "Parent pom of SonarSource public projects", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "c08e89de601b0a78f941b2c29db565c3" + "content" : "9d94ffb59a75cf874e054eb124bc1815" }, { "alg" : "SHA-1", - "content" : "ac19014b1e6a7c08aad07fe114af792676b685b7" + "content" : "0c4756f9dd9cc5caf3acc856171694e2fa033bcc" }, { "alg" : "SHA-256", - "content" : "86d7c0b775a7c9b454cc6ba61d40a8eb3b99cc129f832eb9b977a3755b4b338e" + "content" : "5fb75ed5d0f7767f3d5877e1fc44a2cb4498b83c482e1e4cefd5c878f118225e" }, { "alg" : "SHA-512", - "content" : "911e3e250c9ac9098899f12db584b83f36d91e8cca1afeef38c19952a168647dbbc88cb1cbdd5919769342ed09267263a142b12e71cab465b25daeedf2255cb7" + "content" : "d8aa8345c5a55aa6a9cbcb261277e0f36e4756ea4a4d9dc99410053781a6305f9c98e1d0c2f0253e9e6140c40f6f9f19da26e7e85913407b42b20808aebfe9f0" }, { "alg" : "SHA-384", - "content" : "83c42936c43d6d6826edea636cf315924cdf52a7201bf07f1cf87a30d2b2855088306c94f39dea55529fed0360cf563f" + "content" : "ee39919d1c32d29c16e41ef2259b5b71f5670244c9c9b1224972eb4d38c90e963dedb6108ce8c0243e322086e585a3da" }, { "alg" : "SHA3-384", - "content" : "905976003ae70127f2c6142070da5736fc4a01b7a98008fefa1270fc9096691c1307e002f3b6381da462a92f2f31478e" + "content" : "ddc8bf3b9b5d30bb0916c90f676061729666587f674827a29dcb21a08fe4d59e42f5ce818c5730e2aa21f1befa74c130" }, { "alg" : "SHA3-256", - "content" : "308d5a1692fd0135e5af967b0b83803a2fd835429ac83401124a0357f99cbb84" + "content" : "da0ff73c07625578b2d3d55fcc5cd16406762ad670a77c46e7128f6c4e90ec3b" }, { "alg" : "SHA3-512", - "content" : "ac3d87dab7f1e89c83f039557557536433c52a0d3201a2f514b82bb8b4f454eb9fc28b02b46a45a9caf983239612cf270085270421e4fd79eccfce0fd01f99da" + "content" : "624e8aaaee39fcad526d4e2699174f8aa9804fc1cb08418dd742374a91fdc3fd474173f59e64508a74029080e9e56d9c6c32e311b71533eba3eead882c4a736f" } ], "licenses" : [ { "license" : { - "id" : "BSD-4-Clause" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.codehaus.woodstox/stax2-api@3.1.4?type=jar", + "purl" : "pkg:maven/org.sonarsource.python/python-commons@5.16.0.29940?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://wiki.fasterxml.com/WoodstoxStax2" + "url" : "https://docs.sonarsource.com/sonarqube-server/latest/extension-guide/developing-a-plugin/plugin-basics/python/python-commons/" }, { - "type" : "distribution-intake", - "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" + "type" : "build-system", + "url" : "https://cirrus-ci.com/github/SonarSource/sonar-python" + }, + { + "type" : "issue-tracker", + "url" : "https://jira.sonarsource.com/browse/SONARPY" + }, + { + "type" : "mailing-list", + "url" : "https://community.sonarsource.com" }, { "type" : "vcs", - "url" : "http://github.com/FasterXML/stax2-api" + "url" : "https://github.com/SonarSource/sonar-python/python-commons" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.codehaus.woodstox/stax2-api@3.1.4?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.python/python-commons@5.16.0.29940?type=jar" }, { - "publisher" : "The Apache Software Foundation", - "group" : "commons-codec", - "name" : "commons-codec", - "version" : "1.15", - "description" : "The Apache Commons Codec package contains simple encoder and decoders for various formats such as Base64 and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.", + "publisher" : "FasterXML", + "group" : "com.fasterxml.jackson.dataformat", + "name" : "jackson-dataformat-toml", + "version" : "2.20.1", + "description" : "Support for reading and writing TOML-encoded data via Jackson abstractions.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "303baf002ce6d382198090aedd9d79a2" + "content" : "f3d12c27f5c0744054e8716f3ee4b3d2" }, { "alg" : "SHA-1", - "content" : "49d94806b6e3dc933dacbd8acb0fdbab8ebd1e5d" + "content" : "1f4f7249289053551eac7bc8ac6e646576d03e1a" }, { "alg" : "SHA-256", - "content" : "b3e9f6d63a790109bf0d056611fbed1cf69055826defeb9894a71369d246ed63" + "content" : "3936e3fb83edd2754bb317d17a63cded43b5fac4fb82eabb4aaa502bb52f9835" }, { "alg" : "SHA-512", - "content" : "da30a716770795fce390e4dd340a8b728f220c6572383ffef55bd5839655d5611fcc06128b2144f6cdcb36f53072a12ec80b04afee787665e7ad0b6e888a6787" + "content" : "cd31529a28ff83585d8d5944943c528d4d26e0f547c5ed804c90a8c642b0cd34553d2f4b7878903312a06d4ad86351aa6591294dba4f61b0bb03da317aeef870" }, { "alg" : "SHA-384", - "content" : "05d0506283716472175d44c2a4766523397bf8a007c18848f9c9a61718cc8aa437f9cb4b91771037ab29a960860b62a0" + "content" : "e2f0cbd883ee0745e6c27d0cf83c1e48869f89cb444c099e553f25105d7800949b1db37fc5db5055e321fdce8b13ebde" }, { "alg" : "SHA3-384", - "content" : "12fad4ef78274b06f97b1243cea6f970088abde082d2de9377d915a34b44f7d7d67807c03e59c849b69f1544e2a9a1be" + "content" : "fd0c36a837dd0b756c3622606b1490218cba364f30d148bac78dfee7dbb1117a9f1504a2e0cac8d83cf6cdb17f0ecf7b" }, { "alg" : "SHA3-256", - "content" : "87be248f33f241121f54aad61a9a460a79eabefbf1b5b0dd22aeb95b581f727e" + "content" : "58d572441da65e6c63de352d608a144b280bd3754a06128d1da840494c70ce6b" }, { "alg" : "SHA3-512", - "content" : "8c992c9c569ebaa0bf956a4c5b34fbf5e1ed1c212c2dd896fa216183ee0bcd341e96698af4b9cec7e8880762faa081a3d3a27f51349aa457cb8e373e4f57c788" + "content" : "bdbc867b3d2a993b277d19c230f84dd52a8db5f6638f9a90f6d613b9eb7b2f49e3404dc78dba4877fdad3ed5bd255f27be808ec287898c833ee2347ee44a94f4" } ], "licenses" : [ @@ -2981,75 +2819,67 @@ } } ], - "purl" : "pkg:maven/commons-codec/commons-codec@1.15?type=jar", + "purl" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-toml@2.20.1?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://commons.apache.org/proper/commons-codec/" - }, - { - "type" : "build-system", - "url" : "https://builds.apache.org/" + "url" : "https://github.com/FasterXML/jackson-dataformats-text" }, { "type" : "distribution-intake", - "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" + "url" : "https://central.sonatype.com/api/v1/publisher" }, { "type" : "issue-tracker", - "url" : "https://issues.apache.org/jira/browse/CODEC" - }, - { - "type" : "mailing-list", - "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/" + "url" : "https://github.com/FasterXML/jackson-dataformats-text/issues" }, { "type" : "vcs", - "url" : "https://github.com/apache/commons-codec" + "url" : "https://github.com/FasterXML/jackson-dataformats-text/jackson-dataformat-toml" } ], "type" : "library", - "bom-ref" : "pkg:maven/commons-codec/commons-codec@1.15?type=jar" + "bom-ref" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-toml@2.20.1?type=jar" }, { - "publisher" : "The Apache Software Foundation", - "group" : "commons-io", - "name" : "commons-io", - "version" : "2.11.0", - "description" : "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.", + "publisher" : "FasterXML", + "group" : "com.fasterxml.jackson.datatype", + "name" : "jackson-datatype-jdk8", + "version" : "2.20.1", + "description" : "Add-on module for Jackson (https://github.com/FasterXML/jackson) to support JDK 8 data types.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "3b4b7ccfaeceeac240b804839ee1a1ca" + "content" : "9360afe5a78d29ce5510f670b3286e77" }, { "alg" : "SHA-1", - "content" : "a2503f302b11ebde7ebc3df41daebe0e4eea3689" + "content" : "6a8bbc260ba834f67220117d9f08510d69c4a3f0" }, { "alg" : "SHA-256", - "content" : "961b2f6d87dbacc5d54abf45ab7a6e2495f89b75598962d8c723cea9bc210908" + "content" : "6821cdd695e95c4e6853ec855a7432c71f2f4be318b3ca190fbbf8a2e5f981f2" }, { "alg" : "SHA-512", - "content" : "5bd78eed456ede30119319c5bed8e3e4c443b6fd7bdb3a7a5686647bd83094d0c3e2832a7575cfb60e4ef25f08106b93476939d3adcfecf5533cc030b3039e10" + "content" : "9aceae6ea4ac56a038982fc45e91942cc15d68b7e07e044c1e75a71760b2eb02e23a344f36966093be670a2d1f656146492f11148da06a4044b4a5d78e523beb" }, { "alg" : "SHA-384", - "content" : "114f1e324d90ad887c177876d410f5787a8e8da6c48d4b2862d365802c0efded3a88cb24046976bf6276cadad3712f0f" + "content" : "c55990a25083046bd3881b656d5fa351e5d2115ce861427cc8bdc64acbf85f9a3ea739f3510eedfc0372f226ed7ebd2a" }, { "alg" : "SHA3-384", - "content" : "80288c03ad4d80d69f91d056ffc5570d49a9c76bf54ad2dff0121ecde26a560df76d05156f281f5c6db2a38ff07a873d" + "content" : "9556b354a7fdf5324aa22d6a00b308508bfb55555c2a31ca159c2b9f35f8a3d4e904a7eb15388f6532bb464fcc642db5" }, { "alg" : "SHA3-256", - "content" : "5adfb5ccaf5f21a549422f426118a9542673926fcd18c68390cf813e791dcf6c" + "content" : "b4018fdef370f16380205cf366a9b84f4721b5ff0a800e72e0a1a23f4a58848a" }, { "alg" : "SHA3-512", - "content" : "7573f47f0babb53cefdc7c2309a0b982d800139064537b0797da442853d081010ad7c3c74a500598a0f800639a5d540eca21963ea652c68613907059bd4278c2" + "content" : "9f9db93cecb859df97455ddfa61136406700ae786715a3754e0ac9f9993deb9df62c44e08233dcf463e792fcbba9a25e7472e34dba5970d9df7eecf959c71875" } ], "licenses" : [ @@ -3059,217 +2889,211 @@ } } ], - "purl" : "pkg:maven/commons-io/commons-io@2.11.0?type=jar", + "purl" : "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.20.1?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://commons.apache.org/proper/commons-io/" - }, - { - "type" : "build-system", - "url" : "https://builds.apache.org/" + "url" : "https://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jdk8" }, { "type" : "distribution-intake", - "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" + "url" : "https://central.sonatype.com/api/v1/publisher" }, { "type" : "issue-tracker", - "url" : "https://issues.apache.org/jira/browse/IO" - }, - { - "type" : "mailing-list", - "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/" + "url" : "https://github.com/FasterXML/jackson-modules-java8/issues" }, { "type" : "vcs", - "url" : "https://gitbox.apache.org/repos/asf?p=commons-io.git" + "url" : "http://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jdk8" } ], "type" : "library", - "bom-ref" : "pkg:maven/commons-io/commons-io@2.11.0?type=jar" + "bom-ref" : "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.20.1?type=jar" }, { - "publisher" : "Google Inc.", - "group" : "com.google.googlejavaformat", - "name" : "google-java-format", - "version" : "1.22.0", - "description" : "A Java source code formatter that follows Google Java Style.", + "publisher" : "The Apache Software Foundation", + "group" : "org.apache.commons", + "name" : "commons-text", + "version" : "1.14.0", + "description" : "Apache Commons Text is a set of utility functions and reusable components for processing and manipulating text in a Java environment.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "fd1fbd4edf5d8eaca565217ff981b94b" + "content" : "54960a12a82d52df3d5548d6934d87b2" }, { "alg" : "SHA-1", - "content" : "6e31a0877a51e91076c857794a0b1df7af876b2d" + "content" : "adcb0d4c67eabc79682604b47eb852aaff21138a" }, { "alg" : "SHA-256", - "content" : "4f4bdba0f2a3d7e84be47683a0c2a4ba69024d29d906d09784181f68f04af792" + "content" : "121fce2282910c8f0c3ba793a5436b31beb710423cbe2d574a3fb7a73c508e92" }, { "alg" : "SHA-512", - "content" : "d2006def13e5144e12568298014a23c86299a62e2bb7757c63f5f25405b1adb6f60b3f2f54bed9583cdd24cae71088e9f7aa846a10a089cce2a25972e48c7649" + "content" : "4975879372241025bd0a47fe540ed7d0cd3e5eba474b12af67a8c6016be0fbb4f4a3a4a0064f4d2b6aebce67d88ee814da345a5ba3a6ee4f6293b3b4e7bbd065" }, { "alg" : "SHA-384", - "content" : "4aed1de35a09b196347064d45a5996fd7467c9b5cca0faf4655cbeb756053810cd3af2e45d74401aee626e30b1693ca7" + "content" : "a038f1a8b58bb7ec17ba55238d3e40f5d9386dfb17870630a728b22741a9592819374e9abbbc6402a439eea4db5b739a" }, { "alg" : "SHA3-384", - "content" : "28fc6265d1886418ca44d1c7eea8709a2f38ba5b3f8cedb6a44d1a36f676e533662b61105db8b8d1f69fc4796fbcc8bd" + "content" : "5325922bb72aa73d2d51cb3fb5592fc77097614fd3ab3ac77e3acdc0fe1dc8c18893cdd9a05768bb725fa40dd8c14527" }, { "alg" : "SHA3-256", - "content" : "08098285fccec01b2f3fce2e46ac210deb79862f21cb4ae96ff3a1a040df0809" + "content" : "31008266592ec8503bcc7f6b4e7125b0e377f57f3a697cdcb02ee7f20f84ddf1" }, { "alg" : "SHA3-512", - "content" : "122e32ab36408a79ed1153660ab1ba7639212d30921ea022da9affc19f76c5d874241a8584fc5c992ce74d2f01c2e06fddc784aee11c6d4238fc645ade3a1880" + "content" : "385249425d8c6ab181039195a03c6337f393a1e1419527e9f072d695367bc0bd6546e752d1912df557bd8788329f7609aa1c63ce42eb135e2d27b6141ce9280f" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0" + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], - "purl" : "pkg:maven/com.google.googlejavaformat/google-java-format@1.22.0?type=jar", + "purl" : "pkg:maven/org.apache.commons/commons-text@1.14.0?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://github.com/google/google-java-format/google-java-format" + "url" : "https://commons.apache.org/proper/commons-text" + }, + { + "type" : "build-system", + "url" : "https://github.com/apache/commons-text/actions" }, { "type" : "distribution-intake", - "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" + "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", - "url" : "http://github.com/google/google-java-format/issues" + "url" : "https://issues.apache.org/jira/browse/TEXT" + }, + { + "type" : "mailing-list", + "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/" }, { "type" : "vcs", - "url" : "http://github.com/google/google-java-format/google-java-format/" + "url" : "https://gitbox.apache.org/repos/asf?p=commons-text.git" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.google.googlejavaformat/google-java-format@1.22.0?type=jar" + "bom-ref" : "pkg:maven/org.apache.commons/commons-text@1.14.0?type=jar" }, { - "group" : "com.google.guava", - "name" : "guava", - "version" : "32.1.3-jre", - "description" : "Guava is a suite of core and expanded libraries that include utility classes, Google's collections, I/O classes, and much more.", + "publisher" : "Codehaus", + "group" : "org.codehaus.staxmate", + "name" : "staxmate", + "version" : "2.0.1", + "description" : "StaxMate is a light-weight framework that adds convenience to streaming XML-processing without significant additional overhead. It builds on top of a Stax (JSR-173) compliant XML processors such as Woodstox or Sjsxp (default Stax implementation of JDK 1.6) and offers two basic abstractions: Cursors, which build on XMLStreamReaders and Output objects, which build on XMLStreamWriters.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "adc3cf557a48d15cb71be90948558923" + "content" : "cbc599b621abdb9fd93d0c0527b6e273" }, { "alg" : "SHA-1", - "content" : "0f306708742ce2bf0fb0901216183bc14073feae" + "content" : "b0b767fbc22683d7bf26a14ae1c5817561e21d00" }, { "alg" : "SHA-256", - "content" : "6d4e2b5a118aab62e6e5e29d185a0224eed82c85c40ac3d33cf04a270c3b3744" + "content" : "18c8e8b0507afe307be25c825e058fe91514cb3d8616a11b37225bbb760a143e" }, { "alg" : "SHA-512", - "content" : "f575321aa79046f2c12bdf9895db7e235cbaaa8e913389ae48ec4bb5f387d6bf066ed98c5f2c7854bf0c56bb38b59b005ca3c16d68e314743491a223a18cee47" + "content" : "8d8a336b79c83b8c229aba7cc56738271f7ca0b5387b09c246a18992299d0061015cde1f07da07b0ca6da8ac66eca4846269c48fd090968cf9f4f398d923dcb2" }, { "alg" : "SHA-384", - "content" : "efd979f8c807eb973c7bb2edcede11c2881db4232147bb94069701fc002b1c336651aa3347858e3ba25cb89f3df69428" + "content" : "6f61dce2306717d3ba910ef8657977cfcc83d5e6f87b4fca30c96bb52feb416f187227963a5007f73ea120a93f7b4684" }, { "alg" : "SHA3-384", - "content" : "83429ce32c8a20a7314175c053ba0a0e57c20486e6f8abcf7bf1e19c64148db70ae8e6b4437ec168f53b37a653e8bb24" + "content" : "165746fc80503b39ff6c3ecf7bd9516a30bb961270bb3ed1b2d009654d2c8ae1986261adadf6e7426eb00b283d8580bb" }, { "alg" : "SHA3-256", - "content" : "52974020b1d930e646d2fe26b13841275fb9c51e81c28140993c228adda71e78" + "content" : "dc24cc41221fbcb753a407f0713ca0648861c7935e4ba2cf7e95accfb72ef434" }, { "alg" : "SHA3-512", - "content" : "b9bd05ca990c5b76c43248493bb29cbbaad5aa667f394714f35765a8ec04c302a19c4f53f610485c933281211cd6bf4a11a14aaf754ffaed33e02c8b1b78289e" + "content" : "bd029443e45d4a57e9d36587b0155cca05324282c48d259c1eae7e34a999dcff4ccd44590ca6fea208cce07d7034dac87d3155e46d2241c9f09b8de530d60a5b" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0" + "id" : "BSD-4-Clause" } } ], - "purl" : "pkg:maven/com.google.guava/guava@32.1.3-jre?type=jar", + "purl" : "pkg:maven/org.codehaus.staxmate/staxmate@2.0.1?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://github.com/google/guava" - }, - { - "type" : "build-system", - "url" : "https://github.com/google/guava/actions" + "url" : "http://staxmate.codehaus.org" }, { "type" : "distribution-intake", - "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" + "url" : "dav:https://dav.codehaus.org/repository/staxmate" }, { "type" : "issue-tracker", - "url" : "https://github.com/google/guava/issues" - }, - { - "type" : "vcs", - "url" : "https://github.com/google/guava/guava" + "url" : "http://jira.codehaus.org/browse/STAXMATE" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.google.guava/guava@32.1.3-jre?type=jar" + "bom-ref" : "pkg:maven/org.codehaus.staxmate/staxmate@2.0.1?type=jar" }, { - "group" : "com.google.guava", - "name" : "failureaccess", + "group" : "stax", + "name" : "stax-api", "version" : "1.0.1", - "description" : "Contains com.google.common.util.concurrent.internal.InternalFutureFailureAccess and InternalFutures. Most users will never need to use this artifact. Its classes is conceptually a part of Guava, but they're in this separate artifact so that Android libraries can use them without pulling in all of Guava (just as they can use ListenableFuture by depending on the listenablefuture artifact).", + "description" : "StAX API is the standard java XML processing API defined by JSR-173", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "091883993ef5bfa91da01dcc8fc52236" + "content" : "7d436a53c64490bee564c576babb36b4" }, { "alg" : "SHA-1", - "content" : "1dcf1de382a0bf95a3d8b0849546c88bac1292c9" + "content" : "49c100caf72d658aca8e58bd74a4ba90fa2b0d70" }, { "alg" : "SHA-256", - "content" : "a171ee4c734dd2da837e4b16be9df4661afab72a41adaf31eb84dfdaf936ca26" + "content" : "d1968436fc216c901fb9b82c7e878b50fd1d30091676da95b2edd3a9c0ccf92e" }, { "alg" : "SHA-512", - "content" : "f8d59b808d6ba617252305b66d5590937da9b2b843d492d06b8d0b1b1f397e39f360d5817707797b979a5bf20bf21987b35333e7a15c44ed7401fea2d2119cae" + "content" : "43c24e8dbffa9b932492c8ccf2b91926b2ba3d1d34b5a9671c689bd24d4c220b996708a9667521641d1abbf29404b653755b6f6f3dc0ad0671f5c09db332ea06" }, { "alg" : "SHA-384", - "content" : "67659dbd9647ec303d7f15128dc9dba19b98fd8d74758ee3b602451e32c855e236ccaafe08edf4bbfa245f981268440f" + "content" : "2e6c232d3012064dc17e10c2e5b281728a6771eb0d74868e730caf60fe6f96fdd6145759fbbf9d1aa2e07eb1f49764d6" }, { "alg" : "SHA3-384", - "content" : "1460875f0331c5fa3791772a6a322a7db180261bc2adacf7271df1fbf3b088a587a755a604c039982cb593c5cfc1f101" + "content" : "03ebb8db88d04b7308570c1058aadfb6a81d3d6725b1dd13a049ea984ed1df42d3e0f8163e1229752228cada978fb462" }, { "alg" : "SHA3-256", - "content" : "ea86406e75fcd93eafe3cde1b3135ba485f1bb9b75fed98894a0bf1f0aee04f0" + "content" : "8173e3e3a0db17b3dbb80c017268858ecda57c819e5b58dbe202bd8087664bb1" }, { "alg" : "SHA3-512", - "content" : "52ac0f487ab5dd27c9f2e54fd1d84c7a620cae9d49be4072aa2b11501787bf4391ddaa13d02eccdf19e8eea46aecbea5f6064b26777c1b836108a280652e04ac" + "content" : "e9a7c234dfeff5d4cabd034a536f31ad5a141e30b0ad2438cf5856dd6c36eeb16c69b8bc1ba3ee6bba91f69cd3cbd450953249f2f0eee0a9a22d49637b575f4d" } ], "licenses" : [ @@ -3279,657 +3103,549 @@ } } ], - "purl" : "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar", + "purl" : "pkg:maven/stax/stax-api@1.0.1?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://github.com/google/guava/failureaccess" - }, - { - "type" : "build-system", - "url" : "https://travis-ci.org/google/guava" - }, - { - "type" : "distribution-intake", - "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" + "url" : "http://stax.codehaus.org/" }, { "type" : "issue-tracker", - "url" : "https://github.com/google/guava/issues" + "url" : "http://jira.codehaus.org/browse/STAX" }, { - "type" : "vcs", - "url" : "https://github.com/google/guava/failureaccess" + "type" : "mailing-list", + "url" : "http://groups.yahoo.com/group/stax_builders/" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar" + "bom-ref" : "pkg:maven/stax/stax-api@1.0.1?type=jar" }, { - "group" : "com.google.guava", - "name" : "listenablefuture", - "version" : "9999.0-empty-to-avoid-conflict-with-guava", - "description" : "An empty artifact that Guava depends on to signal that it is providing ListenableFuture -- but is also available in a second \"version\" that contains com.google.common.util.concurrent.ListenableFuture class, without any other Guava classes. The idea is: - If users want only ListenableFuture, they depend on listenablefuture-1.0. - If users want all of Guava, they depend on guava, which, as of Guava 27.0, depends on listenablefuture-9999.0-empty-to-avoid-conflict-with-guava. The 9999.0-... version number is enough for some build systems (notably, Gradle) to select that empty artifact over the \"real\" listenablefuture-1.0 -- avoiding a conflict with the copy of ListenableFuture in guava itself. If users are using an older version of Guava or a build system other than Gradle, they may see class conflicts. If so, they can solve them by manually excluding the listenablefuture artifact or manually forcing their build systems to use 9999.0-....", + "publisher" : "fasterxml.com", + "group" : "org.codehaus.woodstox", + "name" : "stax2-api", + "version" : "3.1.4", + "description" : "tax2 API is an extension to basic Stax 1.0 API that adds significant new functionality, such as full-featured bi-direction validation interface and high-performance Typed Access API.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "d094c22570d65e132c19cea5d352e381" + "content" : "c08e89de601b0a78f941b2c29db565c3" }, { "alg" : "SHA-1", - "content" : "b421526c5f297295adef1c886e5246c39d4ac629" + "content" : "ac19014b1e6a7c08aad07fe114af792676b685b7" }, { "alg" : "SHA-256", - "content" : "b372a037d4230aa57fbeffdef30fd6123f9c0c2db85d0aced00c91b974f33f99" + "content" : "86d7c0b775a7c9b454cc6ba61d40a8eb3b99cc129f832eb9b977a3755b4b338e" }, { "alg" : "SHA-512", - "content" : "c5987a979174cbacae2e78b319f080420cc71bcdbcf7893745731eeb93c23ed13bff8d4599441f373f3a246023d33df03e882de3015ee932a74a774afdd0782f" + "content" : "911e3e250c9ac9098899f12db584b83f36d91e8cca1afeef38c19952a168647dbbc88cb1cbdd5919769342ed09267263a142b12e71cab465b25daeedf2255cb7" }, { "alg" : "SHA-384", - "content" : "caff9b74079f95832ca7f6029346b34b606051cc8c5a4389fac263511d277ada0c55f28b0d43011055b268c6eb7184d5" + "content" : "83c42936c43d6d6826edea636cf315924cdf52a7201bf07f1cf87a30d2b2855088306c94f39dea55529fed0360cf563f" }, { "alg" : "SHA3-384", - "content" : "e939f08df0545847ea0d3e4b04a114b08499ad069ba8ec9461d1779f87a56e0c37273630a0f4c14e78c348d3ac7eb97f" + "content" : "905976003ae70127f2c6142070da5736fc4a01b7a98008fefa1270fc9096691c1307e002f3b6381da462a92f2f31478e" }, { "alg" : "SHA3-256", - "content" : "1f0a8b1177773b3a8ace839df5eed63cbf56b24a38714898a6e4ed065c42559f" + "content" : "308d5a1692fd0135e5af967b0b83803a2fd835429ac83401124a0357f99cbb84" }, { "alg" : "SHA3-512", - "content" : "6b495ecc2a18b17365cb08d124a0da47f04bcdde81927b5245edf3edd8e498c3c3fb92ce6a4127f660bac851bb1d3e4510e5c20d03be47ce99dc296d360db285" + "content" : "ac3d87dab7f1e89c83f039557557536433c52a0d3201a2f514b82bb8b4f454eb9fc28b02b46a45a9caf983239612cf270085270421e4fd79eccfce0fd01f99da" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0" + "id" : "BSD-4-Clause" } } ], - "purl" : "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar", + "purl" : "pkg:maven/org.codehaus.woodstox/stax2-api@3.1.4?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://github.com/google/guava/listenablefuture" - }, - { - "type" : "build-system", - "url" : "https://travis-ci.org/google/guava" + "url" : "http://wiki.fasterxml.com/WoodstoxStax2" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, - { - "type" : "issue-tracker", - "url" : "https://github.com/google/guava/issues" - }, { "type" : "vcs", - "url" : "https://github.com/google/guava/listenablefuture" + "url" : "http://github.com/FasterXML/stax2-api" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar" + "bom-ref" : "pkg:maven/org.codehaus.woodstox/stax2-api@3.1.4?type=jar" }, { - "group" : "org.checkerframework", - "name" : "checker-qual", - "version" : "3.37.0", - "description" : "checker-qual contains annotations (type qualifiers) that a programmer writes to specify Java code for type-checking by the Checker Framework.", + "publisher" : "SonarSource", + "group" : "org.sonarsource.go", + "name" : "sonar-go-plugin", + "version" : "1.32.0.5128", + "description" : "Code Analyzer for Go", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "1ff1eed173ff9d6f208d0a5be8f5623d" + "content" : "ea2de97a8b1020865b993afe78aff72f" }, { "alg" : "SHA-1", - "content" : "ba74746d38026581c12166e164bb3c15e90cc4ea" + "content" : "daa3ce9acfba33b2dba823c64d72bf3a0fa2b25d" }, { "alg" : "SHA-256", - "content" : "e4ce1376cc2735e1dde220b62ad0913f51297704daad155a33f386bc5db0d9f7" + "content" : "7ad9dd5e478be53d58ad12d060f0e4aaa5e5eb9f5fcb28411c8083da2d5e0b19" }, { "alg" : "SHA-512", - "content" : "98f92a4d14b77f2946de34bc64bc0068505ba8893a734e52f6458e3061fc7471bd5a60c073c938302b7b78d51205929134207abc24f0edadd3db1e1f57755de5" + "content" : "3176550be29c19e7fb8b90b6993b29f3b8b4b51ddfa4509bab6de91edc4d7b40e3384dc48df7731262cb671379d2c4163eef78565389a391a43d450dcba56996" }, { "alg" : "SHA-384", - "content" : "6a586fa9ead4d6edeb5e73a98af109dca2bf95e950c3c4862773f40e2eed5ea80208021f187fe717963027f7ea2bb489" + "content" : "b1e7333047001ad10c6058a5ede6bc27651bae3335c0faadc1a6bda3ba1b66b90f45aec62389eaa9ec41eba836dc0d52" }, { "alg" : "SHA3-384", - "content" : "0baafa897a7a5b9095680b5534841c537518c67a5ae9bf5923aceeb5aa3283551159c614b7fcfc205f2b5f77c144934c" + "content" : "18184263d523ab59b12019479a129e608f201e2c096745e869d72e029c78d41409d64934307b1f1a343ab0e1475978f3" }, { "alg" : "SHA3-256", - "content" : "68056437b32f1a878d9b38ca2d4c6d88e9ca76b6eb705e7a946bc044010b722d" + "content" : "3fddc018fee60147c78382440a963bf6812bf496bb1d25090b50475e185a0844" }, { "alg" : "SHA3-512", - "content" : "66ec2f2416d564035e78295e7094ec1c23b76870d0095adbb9ec7e2d00b94684dc3c4ac08640b7ba14465ddc305382e5b20240d5eff31875d2ffe4682088a2f7" + "content" : "c1fc155244473f90fcc327f33055b06cb2fb35a203421b832f627d12150d851640a407a84dd47498b372ad0337bb1881ffa8aeab9fec85cb5e04b924989c5db5" } ], "licenses" : [ { "license" : { - "id" : "MIT" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.checkerframework/checker-qual@3.37.0?type=jar", + "purl" : "pkg:maven/org.sonarsource.go/sonar-go-plugin@1.32.0.5128?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://checkerframework.org/" + "url" : "http://www.sonarqube.org/" }, { "type" : "vcs", - "url" : "https://github.com/typetools/checker-framework.git" + "url" : "https://github.com/SonarSource/sonar-go" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.checkerframework/checker-qual@3.37.0?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.go/sonar-go-plugin@1.32.0.5128?type=jar" }, { - "publisher" : "Google LLC", - "group" : "com.google.errorprone", - "name" : "error_prone_annotations", - "version" : "2.21.1", - "description" : "Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.", + "publisher" : "The Apache Software Foundation", + "group" : "commons-codec", + "name" : "commons-codec", + "version" : "1.19.0", + "description" : "The Apache Commons Codec component contains encoders and decoders for formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "75fe4fe33d308dd6cee3b601de902d27" + "content" : "e46fa78c69544eb6239c4e8447e72544" }, { "alg" : "SHA-1", - "content" : "6d9b10773b5237df178a7b3c1b4208df7d0e7f94" + "content" : "8c0dbe3ae883fceda9b50a6c76e745e548073388" }, { "alg" : "SHA-256", - "content" : "d1f3c66aa91ac52549e00ae3b208ba4b9af7d72d68f230643553beb38e6118ac" + "content" : "5c3881e4f556855e9c532927ee0c9dfde94cc66760d5805c031a59887070af5f" }, { "alg" : "SHA-512", - "content" : "530318bcdf1ed8eeee408fc5a0775f1792cbf012b4ec55217a4498c8d2983b230a4d071b9e115565b0411faa51dd938823d9b619beb6786212c375ad3d1ebd8a" + "content" : "d98a7a1cfcc08aa9cce4f7778e3f37ecb99da7b1da01944e5fa8faf06fbf9f969f2efb0b416832f419d53085250f711c071f1dac9fa0968483c37034198367fb" }, { "alg" : "SHA-384", - "content" : "88e628431966a9b5cc19f96159874cefde1558e51d2ce233a0c2d47914eb9c6256f95882605a87cc6629a21ff70b72b4" + "content" : "f0edec3cd84b2320e6930380d3fe13335d33f041470d27fb93789db0c696ec01dda21b471f0015bf70bffffcbfdb67c0" }, { "alg" : "SHA3-384", - "content" : "ebc750b211532fef9a84c3682d47f00b877e4082716ead1f4f883f02ab35bda8d5acfc475722215c4fe6ed9cfd54f43a" + "content" : "ce771ef9f0df326a34ab37e70f710801bb18d545aca0ee492db62770db323ab8a0b5082123ca4826f3d3182748537cfc" }, { "alg" : "SHA3-256", - "content" : "9b4f193bf2f541844c6b1b5cf2d1c7f6e9465b97804d155f34530b203184e1ae" + "content" : "8296db95bb2fac86a0eb68e61e9730084f4272ad6a4a4327a5259c631840e98e" }, { "alg" : "SHA3-512", - "content" : "1d76781cef387a185fd4fb69960394556062969bbbe0be74d0fb11f7c73758e5d35ff546ab04f6382c21c63705a1ffb975a549bf4d846fde54e412ecd4641485" + "content" : "05da2f8674a257c5d8a1137cadbda71d2635f22237450bf2cbc980380a56905247bea38049c8cd80e60077be2be73b1eae6b466c228e4277763a54979cf856fb" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0" + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], - "purl" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.21.1?type=jar", + "purl" : "pkg:maven/commons-codec/commons-codec@1.19.0?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://errorprone.info/error_prone_annotations" + "url" : "https://commons.apache.org/proper/commons-codec/" + }, + { + "type" : "build-system", + "url" : "https://github.com/apache/commons-cli/actions" + }, + { + "type" : "distribution-intake", + "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" + }, + { + "type" : "issue-tracker", + "url" : "https://issues.apache.org/jira/browse/CODEC" + }, + { + "type" : "mailing-list", + "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/" }, { "type" : "vcs", - "url" : "https://github.com/google/error-prone/error_prone_annotations" + "url" : "https://github.com/apache/commons-codec" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.21.1?type=jar" + "bom-ref" : "pkg:maven/commons-codec/commons-codec@1.19.0?type=jar" }, { - "group" : "com.google.j2objc", - "name" : "j2objc-annotations", - "version" : "2.8", - "description" : "A set of annotations that provide additional information to the J2ObjC translator to modify the result of translation.", + "publisher" : "The Apache Software Foundation", + "group" : "commons-io", + "name" : "commons-io", + "version" : "2.20.0", + "description" : "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "c50af69b704dc91050efb98e0dff66d1" + "content" : "94e7e6b9b5fe82388687b584d3571081" }, { "alg" : "SHA-1", - "content" : "c85270e307e7b822f1086b93689124b89768e273" + "content" : "36f3474daec2849c149e877614e7f979b2082cd2" }, { "alg" : "SHA-256", - "content" : "f02a95fa1a5e95edb3ed859fd0fb7df709d121a35290eff8b74dce2ab7f4d6ed" + "content" : "df90bba0fe3cb586b7f164e78fe8f8f4da3f2dd5c27fa645f888100ccc25dd72" }, { "alg" : "SHA-512", - "content" : "f8263868a792b41707c9e7fe6fa5650a14cd93fbeafad20efe3772a3058fc933eb59782ec59e6eb9b9c569aa96da80134ae9fdf7547b69c44a97087efddceeff" + "content" : "fea08e150473673b0608eaee3ae1cb4e73834039db80d3b758710d6baf3a5840a0878a4eb64739ae9bb21ccc7148c8520fe873616a3f6d5cdb4305deabdd015c" }, { "alg" : "SHA-384", - "content" : "e6087ec31fec8289158496ad2ed6ce8472d5d513808a312e0782cedac3b86c37a62a63c0b5ea3839491d109fe9e148a1" + "content" : "22db5e18e3512ed44474e75a124a052d5a1a6f35ce458f6a201a5ccc9510c57c10c117dba80ac6ce91745cf2b51e63f2" }, { "alg" : "SHA3-384", - "content" : "10add34bfeb8612283eef89ac96747a3c9b755acd80ad526e1addaeb7efd6323c52b9bfa1a3d34adb40e1ccb963ee65d" + "content" : "a70700d24df3c276ff387c359e0e940b834e413b72a49917de9a82615836eca8cca1bee1ed71790606c795da795e9151" }, { "alg" : "SHA3-256", - "content" : "b3336f8abd6b1f73b9f06d306974557000a000073bfbae6b54fda26d17dbb072" + "content" : "a8d044d3a4a069d0f20d24112b6427a3a6f02a925b31b932721d1f545ff32cec" }, { "alg" : "SHA3-512", - "content" : "d376c184a6df071c4e93b913d175b5c2e63deac37105dc20342c19bdda62e4e9598ca1e8bfb4f4fd5cdee6dd5ac3b8af49e2c5193e324d59a59ce1f7adeab627" + "content" : "3417bf811d7e5fc1e71b8540f3379751434ea8540c421ff2c8bb5f5ce34401cd0ad8a829b65aa55e055c57141181762c4827099352c2bba453e48ad2df67526a" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0" + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], - "purl" : "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar", + "purl" : "pkg:maven/commons-io/commons-io@2.20.0?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://github.com/google/j2objc/" + "url" : "https://commons.apache.org/proper/commons-io/" }, { - "type" : "distribution-intake", - "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" + "type" : "build-system", + "url" : "https://github.com/apache/commons-io/actions" }, - { - "type" : "vcs", - "url" : "http://svn.sonatype.org/spice/trunk/oss/oss-parent-9/j2objc-annotations" - } - ], - "type" : "library", - "bom-ref" : "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar" - }, - { - "publisher" : "IBM", - "group" : "com.ibm", - "name" : "common", - "version" : "1.0.3-SNAPSHOT", - "licenses" : [ - { - "license" : { - "name" : "GNU LGPL 3", - "url" : "https://www.gnu.org/licenses/lgpl.txt" - } - } - ], - "purl" : "pkg:maven/com.ibm/common@1.0.3-SNAPSHOT?type=jar", - "externalReferences" : [ - { - "type" : "distribution-intake", - "url" : "https://eu.artifactory.swg-devops.com/artifactory/res-cryptoagility-team-maven-local" - } - ], - "type" : "library", - "bom-ref" : "pkg:maven/com.ibm/common@1.0.3-SNAPSHOT?type=jar" - }, - { - "publisher" : "IBM", - "group" : "com.ibm", - "name" : "engine", - "version" : "1.0.3-SNAPSHOT", - "licenses" : [ - { - "license" : { - "name" : "GNU LGPL 3", - "url" : "https://www.gnu.org/licenses/lgpl.txt" - } - } - ], - "purl" : "pkg:maven/com.ibm/engine@1.0.3-SNAPSHOT?type=jar", - "externalReferences" : [ { "type" : "distribution-intake", - "url" : "https://eu.artifactory.swg-devops.com/artifactory/res-cryptoagility-team-maven-local" - } - ], - "type" : "library", - "bom-ref" : "pkg:maven/com.ibm/engine@1.0.3-SNAPSHOT?type=jar" - }, - { - "publisher" : "IBM", - "group" : "com.ibm", - "name" : "mapper", - "version" : "1.0.3-SNAPSHOT", - "licenses" : [ - { - "license" : { - "name" : "GNU LGPL 3", - "url" : "https://www.gnu.org/licenses/lgpl.txt" - } - } - ], - "purl" : "pkg:maven/com.ibm/mapper@1.0.3-SNAPSHOT?type=jar", - "externalReferences" : [ + "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" + }, { - "type" : "distribution-intake", - "url" : "https://eu.artifactory.swg-devops.com/artifactory/res-cryptoagility-team-maven-local" - } - ], - "type" : "library", - "bom-ref" : "pkg:maven/com.ibm/mapper@1.0.3-SNAPSHOT?type=jar" - }, - { - "publisher" : "IBM", - "group" : "com.ibm", - "name" : "output", - "version" : "1.0.3-SNAPSHOT", - "licenses" : [ + "type" : "issue-tracker", + "url" : "https://issues.apache.org/jira/browse/IO" + }, { - "license" : { - "name" : "GNU LGPL 3", - "url" : "https://www.gnu.org/licenses/lgpl.txt" - } - } - ], - "purl" : "pkg:maven/com.ibm/output@1.0.3-SNAPSHOT?type=jar", - "externalReferences" : [ + "type" : "mailing-list", + "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/" + }, { - "type" : "distribution-intake", - "url" : "https://eu.artifactory.swg-devops.com/artifactory/res-cryptoagility-team-maven-local" + "type" : "vcs", + "url" : "https://gitbox.apache.org/repos/asf?p=commons-io.git" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.ibm/output@1.0.3-SNAPSHOT?type=jar" + "bom-ref" : "pkg:maven/commons-io/commons-io@2.20.0?type=jar" }, { - "publisher" : "OWASP Foundation", - "group" : "org.cyclonedx", - "name" : "cyclonedx-core-java", - "version" : "8.1.0-SNAPSHOT", - "description" : "The CycloneDX core module provides a model representation of the BOM along with utilities to assist in creating, parsing, and validating BOMs.", + "group" : "org.jspecify", + "name" : "jspecify", + "version" : "1.0.0", + "description" : "An artifact of well-named and well-specified annotations to power static analysis checks", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "f15d85fa4d72d67dc40b0938e5a263b0" + "content" : "9133aba420d0ca3b001dbb6ae9992cf6" }, { "alg" : "SHA-1", - "content" : "89c94f4407141cc6216dc797eaa527b34e06eadf" + "content" : "7425a601c1c7ec76645a78d22b8c6a627edee507" }, { "alg" : "SHA-256", - "content" : "b186d0f488125cdc032616d0edff92c29bf9cda6dcbf556e5b24e858e1b6f1ee" + "content" : "1fad6e6be7557781e4d33729d49ae1cdc8fdda6fe477bb0cc68ce351eafdfbab" }, { "alg" : "SHA-512", - "content" : "df89c78cde3e1db60c37877b607c0eab3489d825da5d5873c70e6d3592e73158684b76d5105ab93cfac8211b4bab4fff3e557e6cc700dc64698beb625f0ccf48" + "content" : "efded31ef5b342f09422935076e599789076431e93a746685c0607e7de5592719ba6aacde0be670b3f064d1e85630d58d5bce6b34aed2a288fdb34f745efb7bc" }, { "alg" : "SHA-384", - "content" : "d51694f1fac1f99b703849b833d1c83f638c9b1a75cf5283ac4c9456bf624b2fcf829d2f4a5e037062b5b33056056e3c" + "content" : "814f860e5a44ead6c457676841eef471a8b87be31b84c60a8a4477a18a9cbcb6e3c2ae700969d5c5e52309d961e0537a" }, { "alg" : "SHA3-384", - "content" : "59de9d9679f6e05019952cc823fe03729a18d395653d8c7b2706b6d5052cdfa670c3b42a9a0aea5f831e889daea2b995" + "content" : "c8844e5b71e5ecfbb7366097ce34af2f5863d86d5ccc3f9ec384d8ade4b60ccc8124c7fc88664f1afd2b0962fc8775bf" }, { "alg" : "SHA3-256", - "content" : "6c10f4f239f3e9827282b9e9acc81e1baba86c7ccea88f405470e197c8ec2dce" + "content" : "4b4f08ad7606a3ac62997779484919a302267b26d26ee19125f8a7eea60e8a71" }, { "alg" : "SHA3-512", - "content" : "0b7f570e648628beaae172d88e461aff57435dca352496f3b3537833edee3c217af8350c79ad701ff03655302def0567b3252965358e4929cc6e56ac179f32ee" + "content" : "65c6845ebae981cb81b61107707ced39f5b377dae970b47606ef482aaf10e3729def0da40d9377c43abbfb483a5ceae039b0d51c129c50a6d36ad351a5d6b01e" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0", - "url" : "https://www.apache.org/licenses/LICENSE-2.0" + "id" : "Apache-2.0" } } ], - "purl" : "pkg:maven/org.cyclonedx/cyclonedx-core-java@8.1.0-SNAPSHOT?type=jar", + "purl" : "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://github.com/CycloneDX/cyclonedx-core-java" - }, - { - "type" : "build-system", - "url" : "https://github.com/CycloneDX/cyclonedx-core-java/actions" - }, - { - "type" : "distribution-intake", - "url" : "https://eu.artifactory.swg-devops.com/artifactory/res-cryptoagility-team-maven-local" - }, - { - "type" : "issue-tracker", - "url" : "https://github.com/CycloneDX/cyclonedx-core-java/issues" + "url" : "http://jspecify.org/" }, { "type" : "vcs", - "url" : "https://github.com/CycloneDX/cyclonedx-core-java.git" + "url" : "https://github.com/jspecify/jspecify/" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.cyclonedx/cyclonedx-core-java@8.1.0-SNAPSHOT?type=jar" + "bom-ref" : "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar" }, { - "publisher" : "The Apache Software Foundation", - "group" : "commons-codec", - "name" : "commons-codec", - "version" : "1.16.0", - "description" : "The Apache Commons Codec package contains simple encoder and decoders for various formats such as Base64 and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.", + "publisher" : "Google Inc.", + "group" : "com.google.googlejavaformat", + "name" : "google-java-format", + "version" : "1.28.0", + "description" : "A Java source code formatter that follows Google Java Style.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "6e26920fa7228891980890cce06b718c" + "content" : "8e2d4037e876b608ab0356477b5ead98" }, { "alg" : "SHA-1", - "content" : "4e3eb3d79888d76b54e28b350915b5dc3919c9de" + "content" : "f57d0ad670cc32c4d4a4ffb2cbef44a3dfddeecd" }, { "alg" : "SHA-256", - "content" : "56595fb20b0b85bc91d0d503dad50bb7f1b9afc0eed5dffa6cbb25929000484d" + "content" : "41dfe4d1012794ed15e0ffd70f89fd4fa65d5f15ce0bc0c70f8c2c127d6d010d" }, { "alg" : "SHA-512", - "content" : "eee671e66d808b56b81e15574675cf132d7628c010736d580915bbf8c04849f04df1d95ddeea13c4e119f8f0a564c7003beeb8ab437564e080ee27063c1e52b9" + "content" : "87bf18026e543bc9135d58153f05b8bf58b48bd59cec96e774e3f68bc8d601b9789924a9917b9a4f57b8a69bbe24dd20aef0a65543a63e7101b39317469346d2" }, { "alg" : "SHA-384", - "content" : "65eb89c19815ea11585ff6c91e2ea4acd6a41ee35502891ba29fb5ec390d567190cf2f4120bfbf50ec470274df22a25f" + "content" : "bfd9e42e51d696fa079aa12d3541645873724ce48989615723533aba58fc3e4f77a37e9102bad2b391dc0252b449bad9" }, { "alg" : "SHA3-384", - "content" : "1841b59a30e095b063d9a421be91ee2adf28c98a9b32e4ef24130b60362db2f7f69eea04969d035dc4b01db38a14c65c" + "content" : "b48a456db7981843ffc51f60511d4a5d52072bbe89da4dda6560cee4414493236e94ad1af4c5564449fb000501ca6ef4" }, { "alg" : "SHA3-256", - "content" : "8327323df750189daa3755a4fb3936b685f72b46f3917d5dae2c1f3812577c37" + "content" : "ae18cf36a9212cdb243e3900cca7f9059273dfdf227fb97a189b5ae84cc989e4" }, { "alg" : "SHA3-512", - "content" : "664a0b5779c3e448d448d692a0ab19c2aec422d2adbfb23969bc44d2c6446257104d8206ccca4c0107c58f9a77ece5a48e2fd69fe8038f7cad8254675dadbb05" + "content" : "ac1207d9b7d8be02a222d1f11b44a5bcf1d95924404926698c8f23ba3688cfc49fc81e594e4f48d03ebbbf0ccc638706433ed462499b5b4d083538eb7e37541e" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0", - "url" : "https://www.apache.org/licenses/LICENSE-2.0" + "id" : "Apache-2.0" } } ], - "purl" : "pkg:maven/commons-codec/commons-codec@1.16.0?type=jar", + "purl" : "pkg:maven/com.google.googlejavaformat/google-java-format@1.28.0?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://commons.apache.org/proper/commons-codec/" - }, - { - "type" : "build-system", - "url" : "https://github.com/apache/commons-parent/actions" - }, - { - "type" : "distribution-intake", - "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" + "url" : "https://github.com/google/google-java-format/google-java-format" }, { "type" : "issue-tracker", - "url" : "https://issues.apache.org/jira/browse/CODEC" - }, - { - "type" : "mailing-list", - "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/" + "url" : "http://github.com/google/google-java-format/issues" }, { "type" : "vcs", - "url" : "https://github.com/apache/commons-codec" + "url" : "http://github.com/google/google-java-format/google-java-format/" } ], "type" : "library", - "bom-ref" : "pkg:maven/commons-codec/commons-codec@1.16.0?type=jar" + "bom-ref" : "pkg:maven/com.google.googlejavaformat/google-java-format@1.28.0?type=jar" }, { - "publisher" : "The Apache Software Foundation", - "group" : "commons-io", - "name" : "commons-io", - "version" : "2.15.1", - "description" : "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.", + "group" : "com.google.guava", + "name" : "guava", + "version" : "32.1.3-jre", + "description" : "Guava is a suite of core and expanded libraries that include utility classes, Google's collections, I/O classes, and much more.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "84351f7991a0e6722f00e96a4ccc376f" + "content" : "adc3cf557a48d15cb71be90948558923" }, { "alg" : "SHA-1", - "content" : "f11560da189ab563a5c8e351941415430e9304ea" + "content" : "0f306708742ce2bf0fb0901216183bc14073feae" }, { "alg" : "SHA-256", - "content" : "a58af12ee1b68cfd2ebb0c27caef164f084381a00ec81a48cc275fd7ea54e154" + "content" : "6d4e2b5a118aab62e6e5e29d185a0224eed82c85c40ac3d33cf04a270c3b3744" }, { "alg" : "SHA-512", - "content" : "e9adaeed2d715ac0ae44de056ba165a743a92acbeb9871b535f7e58e0b3bc4fba276495b50429be195098a559f3adb7294048479754a0ee4d397da2efda5f81c" + "content" : "f575321aa79046f2c12bdf9895db7e235cbaaa8e913389ae48ec4bb5f387d6bf066ed98c5f2c7854bf0c56bb38b59b005ca3c16d68e314743491a223a18cee47" }, { "alg" : "SHA-384", - "content" : "028c72b59373d3894da22f9eb2c731aabd00f670993973f71a354d722670c12ca659686b83bbf8db32d060ca180f50b2" + "content" : "efd979f8c807eb973c7bb2edcede11c2881db4232147bb94069701fc002b1c336651aa3347858e3ba25cb89f3df69428" }, { "alg" : "SHA3-384", - "content" : "73cd585ab3736b4be50ec0f10dfe5ebfc3390eea8d56f07f29055f1fddb2dff8084310eaa6fb9f97ea639ed1abd7bc33" + "content" : "83429ce32c8a20a7314175c053ba0a0e57c20486e6f8abcf7bf1e19c64148db70ae8e6b4437ec168f53b37a653e8bb24" }, { "alg" : "SHA3-256", - "content" : "daf39bc99f1a3dc0075714a4a342a58d69a4cd62c25bc39a581f657ca72b1044" + "content" : "52974020b1d930e646d2fe26b13841275fb9c51e81c28140993c228adda71e78" }, { "alg" : "SHA3-512", - "content" : "b003f8971d1536ea0fc4320dbfe17d7259d49e59314739f9fc83134e511facbff048b0ef4f86a9d0893781ca09c95cebc3b181a6c89a2d41e851870b96e76839" + "content" : "b9bd05ca990c5b76c43248493bb29cbbaad5aa667f394714f35765a8ec04c302a19c4f53f610485c933281211cd6bf4a11a14aaf754ffaed33e02c8b1b78289e" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0", - "url" : "https://www.apache.org/licenses/LICENSE-2.0" + "id" : "Apache-2.0" } } ], - "purl" : "pkg:maven/commons-io/commons-io@2.15.1?type=jar", + "purl" : "pkg:maven/com.google.guava/guava@32.1.3-jre?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://commons.apache.org/proper/commons-io/" + "url" : "https://github.com/google/guava" }, { "type" : "build-system", - "url" : "https://github.com/apache/commons-parent/actions" + "url" : "https://github.com/google/guava/actions" }, { "type" : "distribution-intake", - "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" + "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", - "url" : "https://issues.apache.org/jira/browse/IO" - }, - { - "type" : "mailing-list", - "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/" + "url" : "https://github.com/google/guava/issues" }, { "type" : "vcs", - "url" : "https://gitbox.apache.org/repos/asf?p=commons-io.git" + "url" : "https://github.com/google/guava/guava" } ], "type" : "library", - "bom-ref" : "pkg:maven/commons-io/commons-io@2.15.1?type=jar" + "bom-ref" : "pkg:maven/com.google.guava/guava@32.1.3-jre?type=jar" }, { - "publisher" : "The Apache Software Foundation", - "group" : "org.apache.commons", - "name" : "commons-collections4", - "version" : "4.4", - "description" : "The Apache Commons Collections package contains types that extend and augment the Java Collections Framework.", + "group" : "com.google.guava", + "name" : "failureaccess", + "version" : "1.0.1", + "description" : "Contains com.google.common.util.concurrent.internal.InternalFutureFailureAccess and InternalFutures. Most users will never need to use this artifact. Its classes is conceptually a part of Guava, but they're in this separate artifact so that Android libraries can use them without pulling in all of Guava (just as they can use ListenableFuture by depending on the listenablefuture artifact).", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "4a37023740719b391f10030362c86be6" + "content" : "091883993ef5bfa91da01dcc8fc52236" }, { "alg" : "SHA-1", - "content" : "62ebe7544cb7164d87e0637a2a6a2bdc981395e8" + "content" : "1dcf1de382a0bf95a3d8b0849546c88bac1292c9" }, { "alg" : "SHA-256", - "content" : "1df8b9430b5c8ed143d7815e403e33ef5371b2400aadbe9bda0883762e0846d1" + "content" : "a171ee4c734dd2da837e4b16be9df4661afab72a41adaf31eb84dfdaf936ca26" }, { "alg" : "SHA-512", - "content" : "5939c9931eb9557caee3b45fe1dd9ce54cabdc4e6182ed7faac77e1a866dd0cb602bfa4ece2f3316d769913366106bd2b61bf3bb5faad1fa7d808124c06dec0f" + "content" : "f8d59b808d6ba617252305b66d5590937da9b2b843d492d06b8d0b1b1f397e39f360d5817707797b979a5bf20bf21987b35333e7a15c44ed7401fea2d2119cae" }, { "alg" : "SHA-384", - "content" : "74059fd8f61c366ed448e102256fdbd1db0d690501c2c296c80f3657a2c0d8ade3dd9533b1431cc29786bbb624195f46" + "content" : "67659dbd9647ec303d7f15128dc9dba19b98fd8d74758ee3b602451e32c855e236ccaafe08edf4bbfa245f981268440f" }, { "alg" : "SHA3-384", - "content" : "15034fb39842620bf3b152cd90bce252644ebc6a29fafd6dcf5e1f3925f09ccea2ae4e195817450f996b25a7081a9a3f" + "content" : "1460875f0331c5fa3791772a6a322a7db180261bc2adacf7271df1fbf3b088a587a755a604c039982cb593c5cfc1f101" }, { "alg" : "SHA3-256", - "content" : "1716630a207a8f4a83bf9ef19245f46c87d62bfebbcfa1227101e6dd51da8fa5" + "content" : "ea86406e75fcd93eafe3cde1b3135ba485f1bb9b75fed98894a0bf1f0aee04f0" }, { "alg" : "SHA3-512", - "content" : "c290c98c7b5825d024644ec1162804a1f9ad4da3bb5324d147ddffee6cc79e3c0ecc3825d6116502f2ca292ec80c4e7f8d49a03542dda8f4d58b0dc8228923c5" + "content" : "52ac0f487ab5dd27c9f2e54fd1d84c7a620cae9d49be4072aa2b11501787bf4391ddaa13d02eccdf19e8eea46aecbea5f6064b26777c1b836108a280652e04ac" } ], "licenses" : [ @@ -3939,93 +3655,88 @@ } } ], - "purl" : "pkg:maven/org.apache.commons/commons-collections4@4.4?type=jar", + "purl" : "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://commons.apache.org/proper/commons-collections/" + "url" : "https://github.com/google/guava/failureaccess" }, { "type" : "build-system", - "url" : "https://builds.apache.org/" + "url" : "https://travis-ci.org/google/guava" }, { "type" : "distribution-intake", - "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" + "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", - "url" : "http://issues.apache.org/jira/browse/COLLECTIONS" - }, - { - "type" : "mailing-list", - "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/" + "url" : "https://github.com/google/guava/issues" }, { "type" : "vcs", - "url" : "https://git-wip-us.apache.org/repos/asf?p=commons-collections.git" + "url" : "https://github.com/google/guava/failureaccess" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.apache.commons/commons-collections4@4.4?type=jar" + "bom-ref" : "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar" }, { - "group" : "com.github.package-url", - "name" : "packageurl-java", - "version" : "1.5.0", - "description" : "The official Java implementation of the PackageURL specification. PackageURL (purl) is a minimal specification for describing a package via a \"mostly universal\" URL.", + "group" : "com.google.guava", + "name" : "listenablefuture", + "version" : "9999.0-empty-to-avoid-conflict-with-guava", + "description" : "An empty artifact that Guava depends on to signal that it is providing ListenableFuture -- but is also available in a second \"version\" that contains com.google.common.util.concurrent.ListenableFuture class, without any other Guava classes. The idea is: - If users want only ListenableFuture, they depend on listenablefuture-1.0. - If users want all of Guava, they depend on guava, which, as of Guava 27.0, depends on listenablefuture-9999.0-empty-to-avoid-conflict-with-guava. The 9999.0-... version number is enough for some build systems (notably, Gradle) to select that empty artifact over the \"real\" listenablefuture-1.0 -- avoiding a conflict with the copy of ListenableFuture in guava itself. If users are using an older version of Guava or a build system other than Gradle, they may see class conflicts. If so, they can solve them by manually excluding the listenablefuture artifact or manually forcing their build systems to use 9999.0-....", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "90856d8bb5b17e08fdf03b6a2f93b81c" + "content" : "d094c22570d65e132c19cea5d352e381" }, { "alg" : "SHA-1", - "content" : "e6bf530f52feab911f4032604ca0b8216f7ff337" + "content" : "b421526c5f297295adef1c886e5246c39d4ac629" }, { "alg" : "SHA-256", - "content" : "e45551727707acc0c56ac62d56964332ea0f138d6cc3656d988b9369150f5247" + "content" : "b372a037d4230aa57fbeffdef30fd6123f9c0c2db85d0aced00c91b974f33f99" }, { "alg" : "SHA-512", - "content" : "8064df400154caa110b8845bd17e6cea2683307e575ce88e40d7c0c8965ea0af6c150a376d8b9ba7354676c41b52c94535f30c6e830447613299ccf5fc7aa959" + "content" : "c5987a979174cbacae2e78b319f080420cc71bcdbcf7893745731eeb93c23ed13bff8d4599441f373f3a246023d33df03e882de3015ee932a74a774afdd0782f" }, { "alg" : "SHA-384", - "content" : "0597100022f72e020c9d929bf57ecef91af7574610fb03b4019feba4b25f491a076f03577be2009e66d9001c4c0f8ab0" + "content" : "caff9b74079f95832ca7f6029346b34b606051cc8c5a4389fac263511d277ada0c55f28b0d43011055b268c6eb7184d5" }, { "alg" : "SHA3-384", - "content" : "bbdd55a31a4755ef589bcb176283fe03e3c9089d315eab577fef3a9c2d02e632c6ac3fdebbc90a2f0f8ed7974b9f397c" + "content" : "e939f08df0545847ea0d3e4b04a114b08499ad069ba8ec9461d1779f87a56e0c37273630a0f4c14e78c348d3ac7eb97f" }, { "alg" : "SHA3-256", - "content" : "c9881b69bde35ea6ff4006877b9fbf91462f911b5b142aa699a45a00867d413a" + "content" : "1f0a8b1177773b3a8ace839df5eed63cbf56b24a38714898a6e4ed065c42559f" }, { "alg" : "SHA3-512", - "content" : "2b9caf58deef687a9bf01abd61a7af4abdb61247a8a966683a18157ee948f1ea424602598dc8f665bf24f7e1e516866298ef0507e9d697cb20dcf60eff2095ca" + "content" : "6b495ecc2a18b17365cb08d124a0da47f04bcdde81927b5245edf3edd8e498c3c3fb92ce6a4127f660bac851bb1d3e4510e5c20d03be47ce99dc296d360db285" } ], "licenses" : [ { "license" : { - "id" : "MIT", - "url" : "https://opensource.org/licenses/MIT" + "id" : "Apache-2.0" } } ], - "purl" : "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar", + "purl" : "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://github.com/package-url/packageurl-java" + "url" : "https://github.com/google/guava/listenablefuture" }, { "type" : "build-system", - "url" : "https://travis-ci.com/package-url/packageurl-java" + "url" : "https://travis-ci.org/google/guava" }, { "type" : "distribution-intake", @@ -4033,125 +3744,115 @@ }, { "type" : "issue-tracker", - "url" : "https://github.com/package-url/packageurl-java/issues" + "url" : "https://github.com/google/guava/issues" }, { "type" : "vcs", - "url" : "https://github.com/package-url/packageurl-java.git" + "url" : "https://github.com/google/guava/listenablefuture" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar" + "bom-ref" : "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar" }, { - "publisher" : "FasterXML", - "group" : "com.fasterxml.jackson.dataformat", - "name" : "jackson-dataformat-xml", - "version" : "2.16.1", - "description" : "Data format extension for Jackson to offer alternative support for serializing POJOs as XML and deserializing XML as pojos.", + "group" : "org.checkerframework", + "name" : "checker-qual", + "version" : "3.37.0", + "description" : "checker-qual contains annotations (type qualifiers) that a programmer writes to specify Java code for type-checking by the Checker Framework.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "ab3c4a4dcd1928d05f206c5d0e9fe36f" + "content" : "1ff1eed173ff9d6f208d0a5be8f5623d" }, { "alg" : "SHA-1", - "content" : "d952ad30d3f2d1220f39db175618414b56d14638" + "content" : "ba74746d38026581c12166e164bb3c15e90cc4ea" }, { "alg" : "SHA-256", - "content" : "b8e73fa171d1276832abbf20ebb4df597e377405f875ed39808cee9acca3d3ac" + "content" : "e4ce1376cc2735e1dde220b62ad0913f51297704daad155a33f386bc5db0d9f7" }, { "alg" : "SHA-512", - "content" : "018a6e2d0ba7a102331015ec2d471d4565a7eb6d9ce4f339e7cf9f8919c4eb556617b3fa4de703cb7cc438997c7d35b77d100844b14dc1f797292937455c073a" + "content" : "98f92a4d14b77f2946de34bc64bc0068505ba8893a734e52f6458e3061fc7471bd5a60c073c938302b7b78d51205929134207abc24f0edadd3db1e1f57755de5" }, { "alg" : "SHA-384", - "content" : "c6866f8dbf98a9586382dfe2a83a3640183ec8b9e2469e658f89b7f6c8ac236612994493fdcdaf4ef3b3c7df5dfc5315" + "content" : "6a586fa9ead4d6edeb5e73a98af109dca2bf95e950c3c4862773f40e2eed5ea80208021f187fe717963027f7ea2bb489" }, { "alg" : "SHA3-384", - "content" : "4a685f29dd132abc7fad2732f6e6c82378cb23b7a8ce24d2c8b02dfbec05014c27d03ab5c573d893602e9be855bf0685" + "content" : "0baafa897a7a5b9095680b5534841c537518c67a5ae9bf5923aceeb5aa3283551159c614b7fcfc205f2b5f77c144934c" }, { "alg" : "SHA3-256", - "content" : "26f157c5ea198ea4cd0ab454266b6e35577e29c3f8da79513f06d63a9e0e780d" + "content" : "68056437b32f1a878d9b38ca2d4c6d88e9ca76b6eb705e7a946bc044010b722d" }, { "alg" : "SHA3-512", - "content" : "48bd2550e2f66c55c320faa91c12fbc001ee395362706096a2d6afbdc9b5e5857e87365349196c5bce7b3ceb3c831d4c328ab058b54e0e597388e7af828fb6cd" + "content" : "66ec2f2416d564035e78295e7094ec1c23b76870d0095adbb9ec7e2d00b94684dc3c4ac08640b7ba14465ddc305382e5b20240d5eff31875d2ffe4682088a2f7" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0" + "id" : "MIT" } } ], - "purl" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.16.1?type=jar", + "purl" : "pkg:maven/org.checkerframework/checker-qual@3.37.0?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://github.com/FasterXML/jackson-dataformat-xml" - }, - { - "type" : "distribution-intake", - "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" - }, - { - "type" : "issue-tracker", - "url" : "https://github.com/FasterXML/jackson-dataformat-xml/issues" + "url" : "https://checkerframework.org/" }, { "type" : "vcs", - "url" : "http://github.com/FasterXML/jackson-dataformat-xml" + "url" : "https://github.com/typetools/checker-framework.git" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.16.1?type=jar" + "bom-ref" : "pkg:maven/org.checkerframework/checker-qual@3.37.0?type=jar" }, { - "publisher" : "FasterXML", - "group" : "com.fasterxml.jackson.core", - "name" : "jackson-core", - "version" : "2.16.1", - "description" : "Core Jackson processing abstractions (aka Streaming API), implementation for JSON", + "group" : "com.google.j2objc", + "name" : "j2objc-annotations", + "version" : "2.8", + "description" : "A set of annotations that provide additional information to the J2ObjC translator to modify the result of translation.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "0f51c6a7d713aed6e044cf1692bb59f4" + "content" : "c50af69b704dc91050efb98e0dff66d1" }, { "alg" : "SHA-1", - "content" : "9456bb3cdd0f79f91a5f730a1b1bb041a380c91f" + "content" : "c85270e307e7b822f1086b93689124b89768e273" }, { "alg" : "SHA-256", - "content" : "f5f8ef90609e64fec82eb908e497dc7d81b2eb983fe509b870292a193cde4dfb" + "content" : "f02a95fa1a5e95edb3ed859fd0fb7df709d121a35290eff8b74dce2ab7f4d6ed" }, { "alg" : "SHA-512", - "content" : "1f1551b0512a0ac3fc883db62472901c91051586616804daec24268ceaed409faaa1f1695df2f6220fa389aeb54802eb51dec439322bc7383507b45c08cbe17b" + "content" : "f8263868a792b41707c9e7fe6fa5650a14cd93fbeafad20efe3772a3058fc933eb59782ec59e6eb9b9c569aa96da80134ae9fdf7547b69c44a97087efddceeff" }, { "alg" : "SHA-384", - "content" : "24b8435650ceba20008563d8bb9db4a8aca74d7ffa33e95efc6ac576d71f39d5ab228c133b413c6c852c34d905a249cf" + "content" : "e6087ec31fec8289158496ad2ed6ce8472d5d513808a312e0782cedac3b86c37a62a63c0b5ea3839491d109fe9e148a1" }, { "alg" : "SHA3-384", - "content" : "f15db08b5d9ff6b475507afeb587a30bf6fe050d216cadf1bcd9fccaac0a59fd6bb1e8533ee8a48bb6075801b6f617ce" + "content" : "10add34bfeb8612283eef89ac96747a3c9b755acd80ad526e1addaeb7efd6323c52b9bfa1a3d34adb40e1ccb963ee65d" }, { "alg" : "SHA3-256", - "content" : "5fc0bd6adc8b1f3e96b835acc703cb1a4a977deb1f44d0b9314ea25b83c2f36f" + "content" : "b3336f8abd6b1f73b9f06d306974557000a000073bfbae6b54fda26d17dbb072" }, { "alg" : "SHA3-512", - "content" : "7273a7e983ef1e9c7195aa36dba2d0b7b35600f844f61a54c1a80e4590c987257411f8e17a2fb9252849fd8c5ab9fb40f14ae288159a0e98c337020fb8679a1d" + "content" : "d376c184a6df071c4e93b913d175b5c2e63deac37105dc20342c19bdda62e4e9598ca1e8bfb4f4fd5cdee6dd5ac3b8af49e2c5193e324d59a59ce1f7adeab627" } ], "licenses" : [ @@ -4161,411 +3862,537 @@ } } ], - "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.16.1?type=jar", + "purl" : "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://github.com/FasterXML/jackson-core" + "url" : "https://github.com/google/j2objc/" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, - { - "type" : "issue-tracker", - "url" : "https://github.com/FasterXML/jackson-core/issues" - }, { "type" : "vcs", - "url" : "https://github.com/FasterXML/jackson-core" + "url" : "http://svn.sonatype.org/spice/trunk/oss/oss-parent-9/j2objc-annotations" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.16.1?type=jar" + "bom-ref" : "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar" }, { - "publisher" : "FasterXML", - "group" : "com.fasterxml.jackson.core", - "name" : "jackson-annotations", - "version" : "2.16.1", - "description" : "Core annotations used for value types, used by Jackson data binding package.", + "publisher" : "cbomkit", + "group" : "com.ibm", + "name" : "common", + "version" : "2.0.0-SNAPSHOT", + "licenses" : [ + { + "license" : { + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" + } + } + ], + "purl" : "pkg:maven/com.ibm/common@2.0.0-SNAPSHOT?type=jar", + "externalReferences" : [ + { + "type" : "distribution-intake", + "url" : "https://maven.pkg.github.com/cbomkit/sonar-cryptography" + } + ], + "type" : "library", + "bom-ref" : "pkg:maven/com.ibm/common@2.0.0-SNAPSHOT?type=jar" + }, + { + "publisher" : "cbomkit", + "group" : "com.ibm", + "name" : "engine", + "version" : "2.0.0-SNAPSHOT", + "licenses" : [ + { + "license" : { + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" + } + } + ], + "purl" : "pkg:maven/com.ibm/engine@2.0.0-SNAPSHOT?type=jar", + "externalReferences" : [ + { + "type" : "distribution-intake", + "url" : "https://maven.pkg.github.com/cbomkit/sonar-cryptography" + } + ], + "type" : "library", + "bom-ref" : "pkg:maven/com.ibm/engine@2.0.0-SNAPSHOT?type=jar" + }, + { + "publisher" : "cbomkit", + "group" : "com.ibm", + "name" : "mapper", + "version" : "2.0.0-SNAPSHOT", + "licenses" : [ + { + "license" : { + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" + } + } + ], + "purl" : "pkg:maven/com.ibm/mapper@2.0.0-SNAPSHOT?type=jar", + "externalReferences" : [ + { + "type" : "distribution-intake", + "url" : "https://maven.pkg.github.com/cbomkit/sonar-cryptography" + } + ], + "type" : "library", + "bom-ref" : "pkg:maven/com.ibm/mapper@2.0.0-SNAPSHOT?type=jar" + }, + { + "publisher" : "cbomkit", + "group" : "com.ibm", + "name" : "output", + "version" : "2.0.0-SNAPSHOT", + "licenses" : [ + { + "license" : { + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" + } + } + ], + "purl" : "pkg:maven/com.ibm/output@2.0.0-SNAPSHOT?type=jar", + "externalReferences" : [ + { + "type" : "distribution-intake", + "url" : "https://maven.pkg.github.com/cbomkit/sonar-cryptography" + } + ], + "type" : "library", + "bom-ref" : "pkg:maven/com.ibm/output@2.0.0-SNAPSHOT?type=jar" + }, + { + "publisher" : "OWASP Foundation", + "group" : "org.cyclonedx", + "name" : "cyclonedx-core-java", + "version" : "11.0.1", + "description" : "The CycloneDX core module provides a model representation of the BOM along with utilities to assist in creating, parsing, and validating BOMs.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "1c1e081b6b61ee1f1cb0ef52eef45d61" + "content" : "2939896ee374a5f6d45ca70157e58113" }, { "alg" : "SHA-1", - "content" : "fd441d574a71e7d10a4f73de6609f881d8cdfeec" + "content" : "c5e6a5bdd203c23063db37d5db69bfd5e037d5d2" }, { "alg" : "SHA-256", - "content" : "a4730771e6a495dd3793a42cdb8ce6bddb96c77e15f40c98fd8d9a7ae09e7286" + "content" : "989348cc6d385629a3ccb735d450b0f0f022167cb702c2fcb0e6f2bdd989dde7" }, { "alg" : "SHA-512", - "content" : "2e268340c11ff606df14cc963e5a4c97b22c69dbe09b9ee96873b6553aa97ba703f94dd85cc05704a35c4ae1651fc37d23d87e94bbad39f2a3a63fc2b3f754b1" + "content" : "20a3fee94682c23a57c52bdd1678f877f1b8f2a8c3a2e2aa1ade2be5e74c70da1171aa2f08af40a5a9362eba94fbb52d8a824b3bf6b9591d765ecf6b3c43463c" }, { "alg" : "SHA-384", - "content" : "27d294ee2a7519f851bd9da37eefd432b13e2ba2ee94e5bcc8587d8d251c8d00537fe583912681f5d43fc92f29dc23ac" + "content" : "d85aedd5d4e7f7ed6ee0093870e8fea36cd5fc21c825325e5240ea6773b072173429230f4dd12f5ac70146f39f4ff0fe" }, { "alg" : "SHA3-384", - "content" : "f80ca2f1d7b49ca06c999f287249874979295312ad61fae7dba101a084825c2f7200b0a252c67e36b8f185cb5b70b490" + "content" : "705238526713babce1ce21922a1d7229ef6e0106a3fe91395757b8fcd5955b83e6001679fa8eb38c0e8960238b1a6514" }, { "alg" : "SHA3-256", - "content" : "28db760c602a501079b88e94eb4cea2e59895a688e6ea66e447b51adac113e0a" + "content" : "dbf916ece6434dd0b46d71ab060fc55c6fff2867ed89b5093d7aaf9514a2d2f1" }, { "alg" : "SHA3-512", - "content" : "acc6d03c8674438bac5e2b09e1615b11d202c12aa720e9205d820543cc2762f9a3497bf9de9f8239844db23ccf0b52cbd3255aff422c03de490c60ce2c4787ee" + "content" : "5cc758b4c5049d792f97296a89009088332c1e2abc180e8f2251f49961a6d6d02b4a9bb4d4fffea0e91ef8cb4530b2f9a70cfd62bc334f47be2f667c2d8a9e0f" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0" + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], - "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.16.1?type=jar", + "purl" : "pkg:maven/org.cyclonedx/cyclonedx-core-java@11.0.1?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://github.com/FasterXML/jackson" + "url" : "https://github.com/CycloneDX/cyclonedx-core-java" }, { - "type" : "distribution-intake", - "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" + "type" : "build-system", + "url" : "https://github.com/CycloneDX/cyclonedx-core-java/actions" }, { "type" : "issue-tracker", - "url" : "https://github.com/FasterXML/jackson-annotations/issues" + "url" : "https://github.com/CycloneDX/cyclonedx-core-java/issues" }, { "type" : "vcs", - "url" : "https://github.com/FasterXML/jackson-annotations" + "url" : "https://github.com/CycloneDX/cyclonedx-core-java.git" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.16.1?type=jar" + "bom-ref" : "pkg:maven/org.cyclonedx/cyclonedx-core-java@11.0.1?type=jar" }, { - "publisher" : "FasterXML", - "group" : "com.fasterxml.jackson.core", - "name" : "jackson-databind", - "version" : "2.16.1", - "description" : "General data-binding functionality for Jackson: works on core streaming API", + "publisher" : "The Apache Software Foundation", + "group" : "commons-codec", + "name" : "commons-codec", + "version" : "1.20.0", + "description" : "The Apache Commons Codec component contains encoders and decoders for formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "ac71b868569d329136f2c63f34dd2c89" + "content" : "3fb10a4c7cc664241cc4ca8a0e10b0b8" }, { "alg" : "SHA-1", - "content" : "02a16efeb840c45af1e2f31753dfe76795278b73" + "content" : "6a671d1c456a875ff61abec63216f754078bb0ed" }, { "alg" : "SHA-256", - "content" : "baf8a8ebee8f45ef68cdd5e2dd3923b3e296c0937b96ec0b4806aa3a31bccd1d" + "content" : "6af66595f9f6a7bb58ce66518d6888d40b547c366d2262f06676eee19528ff66" }, { "alg" : "SHA-512", - "content" : "e826126759ef714b35c546a524d0fc82e8ae38ad19d0502a58d360926aef3d13492092372302fcea19e78b24432838a40023ebf5dfae4e8c566478c4833ea998" + "content" : "6a71738f99031685050aadf8579a6ff67ae5fa5b779d7f35e6b9fffcdd524c29ce6d9ba055f2a88b481e80552ae9e61daf09ae8f467c048afb475a763a643097" }, { "alg" : "SHA-384", - "content" : "6e46bf61e034085444b1a708fbb6926ddd46ccaa75c20c9765c1a98c266449169d7a28e6197224f46cc4c15201187ab6" + "content" : "7fe601e80a50fde9085da26dc45f34c4c53117357755a41097546dd0d0be781665d4e0ef9c71a96177caea7794366e49" }, { "alg" : "SHA3-384", - "content" : "649d02e2265bc92d75876b31006f1cb2fe33788da8edb06ebc5b798e964ba7a8d6b96d21053b01e5fe3cf27a63a8b66c" + "content" : "bb89bd7ccad8b1fed73b1018909aeb2bc8e0bfab087a7b5bed682db81c6fe01715dad87a5b6b99bc9f80245e7939637c" }, { "alg" : "SHA3-256", - "content" : "d58b494fb40bb93c799c315293daf81fb6d0bf418d38b912aab1c37b4de1db77" + "content" : "9c609bbbc0842a2699f8237fb87d6aba984b11cbf94876b1a8c58000b13b3af2" }, { "alg" : "SHA3-512", - "content" : "c3950b04417dee7450b36f3428005a2f118c8ce0388f2c2470f5543cac3106215b6b591848775176892951f2ea7a608c7d02280067d5cfae1634e0f3e306e628" + "content" : "fde70430f4279c6f09c60091dcb16576f4f6bc204871f548a428a6e7a0434b799726cbcdf8ad60c6953006cebad911aca14065c0e69b4d8da3289aee2de8e6d1" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0" + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], - "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.16.1?type=jar", + "purl" : "pkg:maven/commons-codec/commons-codec@1.20.0?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://github.com/FasterXML/jackson" + "url" : "https://commons.apache.org/proper/commons-codec/" + }, + { + "type" : "build-system", + "url" : "https://github.com/apache/commons-cli/actions" }, { "type" : "distribution-intake", - "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" + "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", - "url" : "https://github.com/FasterXML/jackson-databind/issues" + "url" : "https://issues.apache.org/jira/browse/CODEC" + }, + { + "type" : "mailing-list", + "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/" }, { "type" : "vcs", - "url" : "https://github.com/FasterXML/jackson-databind" + "url" : "https://github.com/apache/commons-codec" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.16.1?type=jar" + "bom-ref" : "pkg:maven/commons-codec/commons-codec@1.20.0?type=jar" }, { - "publisher" : "FasterXML", - "group" : "com.fasterxml.woodstox", - "name" : "woodstox-core", - "version" : "6.5.1", - "description" : "Woodstox is a high-performance XML processor that implements Stax (JSR-173), SAX2 and Stax2 APIs", + "publisher" : "The Apache Software Foundation", + "group" : "commons-io", + "name" : "commons-io", + "version" : "2.21.0", + "description" : "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "961dd4b2afedf95293dfdd8adfc8f211" + "content" : "bc7e020873f086ede85f97bd9f013215" }, { "alg" : "SHA-1", - "content" : "c6e52e84fe959e69a243c83ec7d24cd889444ddf" + "content" : "52a6f68fe5afe335cde95461dd5c3412f04996f7" }, { "alg" : "SHA-256", - "content" : "c928d60665c6415fb1c39775cf95cfc44f7f4580cf5ab01b1c380ebffd76887f" + "content" : "7d643a2afea8b058b762aa6fb90e5b256f6c729739f8b3784c3370ddc609e88d" }, { "alg" : "SHA-512", - "content" : "d9b3cf6aaac85d8c349e7a24ad30f7e23b7765f1b7ce2fdf301bf2240b9c7ee184bdd938e58be6df9ac90e97e3b8c7b34f8fa9da27d1ed8de78765a8345b18f2" + "content" : "7ac1aa4d834cd7cdecaee223a64c63d481810c73dfdb5109f402234a05cadf754e414cead99072f5140d4f7042ee084161935fb28129a631d908d989c5bbac5d" }, { "alg" : "SHA-384", - "content" : "d51e67aae26449a2cdffa90a08b09cc805b85da3e758011a0945fc8b0ee8c18e98c6f94f0c0cf46b7a49e7370073068c" + "content" : "97c07e5c4f62484c98b6777f63ab032ee09eeb1c9ddae8332890126df9c665afb9cd554db02495171738720d23c53732" }, { "alg" : "SHA3-384", - "content" : "2e731b74e4814647b1a320cd2f1b9f9914db1cb07510e69fb4dda33c6b1586fb2ee9e3f5af027c98dd0d33e2ed4b19de" + "content" : "e3e44c9f4a5f4075fb62a438a84015fe2abf878e9793835a7816dc3c35141bb79fe96dfdc6bb5aef96b7c5bbbcf453c1" }, { "alg" : "SHA3-256", - "content" : "f84ca4c9bb77abb6e61930c7debee48497b2febc30d48329c6b15546dd00371b" + "content" : "1f8f4ce25b7169452dabb10ce843b3246378ea55c1971acd2300e417747b3a68" }, { "alg" : "SHA3-512", - "content" : "257aea7a23c4631eaaa942763e639d239660f29cfb7190f0b112abf6301a214fcc8e84b118ba73d92861a5f441bee479908a4831352ce2278d3d40ef51067894" + "content" : "175630adf10305aeb31d737f833021a25582ffe2ef66fda6e7f694598af9c68cebbd205ade469eca4faaf6b9d349244289e62179d9cf48d93427090e2c008cf8" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0" + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], - "purl" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.5.1?type=jar", + "purl" : "pkg:maven/commons-io/commons-io@2.21.0?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://github.com/FasterXML/woodstox" + "url" : "https://commons.apache.org/proper/commons-io/" + }, + { + "type" : "build-system", + "url" : "https://github.com/apache/commons-io/actions" }, { "type" : "distribution-intake", - "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" + "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", - "url" : "https://github.com/FasterXML/woodstox/issues" + "url" : "https://issues.apache.org/jira/browse/IO" + }, + { + "type" : "mailing-list", + "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/" }, { "type" : "vcs", - "url" : "https://github.com/FasterXML/woodstox" + "url" : "https://gitbox.apache.org/repos/asf?p=commons-io.git" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.5.1?type=jar" + "bom-ref" : "pkg:maven/commons-io/commons-io@2.21.0?type=jar" }, { - "group" : "com.networknt", - "name" : "json-schema-validator", - "version" : "1.0.87", - "description" : "A json schema validator that supports draft v4, v6, v7, v2019-09 and v2020-12", + "publisher" : "The Apache Software Foundation", + "group" : "org.apache.commons", + "name" : "commons-collections4", + "version" : "4.5.0", + "description" : "The Apache Commons Collections package contains types that extend and augment the Java Collections Framework.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "f0d3df7d661e41708e264ea82bd0ad4a" + "content" : "d564105594035b363b193d8ce3c18b98" }, { "alg" : "SHA-1", - "content" : "59861a488ba2b977ef444c03e3c8c8c9f96c0734" + "content" : "e5cf89f0c6e132fc970bd9a465fdcb8dbe94f75a" }, { "alg" : "SHA-256", - "content" : "d2c00a6c4515a4adecbec813c4b994b720782207258d49cb537478edec1ada89" + "content" : "00f93263c267be201b8ae521b44a7137271b16688435340bf629db1bac0a5845" }, { "alg" : "SHA-512", - "content" : "ca1419376baf5bfd13163e7787085134c46b196eb6fbb19099eedb56d153b37dc7b709d7e771088421c567c45066d209f37e5782706f798a228e7e4f21b7c522" + "content" : "ee43c513ac9dcbd7dd23b5cbb4ea5f65a2e10cdfbb403d080b87e778b3b45062315522297c41eca514a9a946228ad7650f0a572d5b78effb8260dd8084131988" }, { "alg" : "SHA-384", - "content" : "e454ab9b970e4cb4b2f6f595495e0ad43d455b7fb10d474607f19fdef4569acc08a4f935625451d118e0496682ff33a4" + "content" : "73db8eb3e79569b3fa62aefdce413e6ea250b9853953cb75b9d5ce0f2f35b59b6e86ef708326a608ff20d95bdade8522" }, { "alg" : "SHA3-384", - "content" : "ae83744bb3d0cc751059cd8fda72df351cd5127187a16c3c99ea679c3433f240f90c13de4e2c5c11206d325375e48c59" + "content" : "7a9c035fa846cdcebd4331eb86ed31a67595518299a8bee54597c1eb663aee63214553a561a510b929035266c2a4800b" }, { "alg" : "SHA3-256", - "content" : "34685e96c0c011463bb57551b03f66b522eedf3d306e7181b5823a2036e87964" + "content" : "614c41bfd8f9c6c1c1e5667c5be45587c3021b780937ad62f54d17051f425086" }, { "alg" : "SHA3-512", - "content" : "764183cf1e2de9fbe52d6f228957015ab7cc0f051aa3a289ecaed9b0c37093d791786f55bb141083beff08cd78aad282fec4e9d8e470cbde3ad18ad3ec7d6383" + "content" : "3cfd12ec2d03ed29b682123cedae422a4c6dc459034a7e0ab5f00ccd422cb9a2ec423a08b953119c426569b888157a6d80aa0e0c63debea50c5c54c481e2eff5" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0" + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], - "purl" : "pkg:maven/com.networknt/json-schema-validator@1.0.87?type=jar", + "purl" : "pkg:maven/org.apache.commons/commons-collections4@4.5.0?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://github.com/networknt/json-schema-validator" + "url" : "https://commons.apache.org/proper/commons-collections/" + }, + { + "type" : "build-system", + "url" : "https://github.com/apache/commons-parent/actions" }, { "type" : "distribution-intake", - "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" + "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", - "url" : "https://github.com/networknt/json-schema-validator/issues" + "url" : "https://issues.apache.org/jira/browse/COLLECTIONS" + }, + { + "type" : "mailing-list", + "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/" }, { "type" : "vcs", - "url" : "https://github.com:networknt/json-schema-validator.git" + "url" : "https://gitbox.apache.org/repos/asf?p=commons-collections.git" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.networknt/json-schema-validator@1.0.87?type=jar" + "bom-ref" : "pkg:maven/org.apache.commons/commons-collections4@4.5.0?type=jar" }, { - "group" : "com.ethlo.time", - "name" : "itu", - "version" : "1.7.0", - "description" : "Extremely fast date/time parser and formatter - RFC 3339 (ISO 8601 profile) and W3C format", + "group" : "com.github.package-url", + "name" : "packageurl-java", + "version" : "1.5.0", + "description" : "The official Java implementation of the PackageURL specification. PackageURL (purl) is a minimal specification for describing a package via a \"mostly universal\" URL.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "4f9277e3108caa3314836d8f20f9cf94" + "content" : "90856d8bb5b17e08fdf03b6a2f93b81c" }, { "alg" : "SHA-1", - "content" : "00c6977b9d42efa3f8c95c31db5313a96ffc1724" + "content" : "e6bf530f52feab911f4032604ca0b8216f7ff337" }, { "alg" : "SHA-256", - "content" : "55ceb418c9e8138c4fcf62e213c4c814d89e8a84c827d395407cbecba5d791e7" + "content" : "e45551727707acc0c56ac62d56964332ea0f138d6cc3656d988b9369150f5247" }, { "alg" : "SHA-512", - "content" : "b29808a998e120d6fa97a19ea92402e57d06b92ddb98b892ae7c9de044b9e1d805dca2f7c0fe7faaa1fced7eecbda927d709113727a050972f24a75aa29525b8" + "content" : "8064df400154caa110b8845bd17e6cea2683307e575ce88e40d7c0c8965ea0af6c150a376d8b9ba7354676c41b52c94535f30c6e830447613299ccf5fc7aa959" }, { "alg" : "SHA-384", - "content" : "f63cbcc14966028fc81feec87bb5f948e0acc0a1683e9147eafe71c98cf3bb38d871bdccfdf70d94c985e1727b00ae7a" + "content" : "0597100022f72e020c9d929bf57ecef91af7574610fb03b4019feba4b25f491a076f03577be2009e66d9001c4c0f8ab0" }, { "alg" : "SHA3-384", - "content" : "f95deb0a7c863dfc3e595a1398beecfd4baa7c3b5c8f43c3324e374de58d8e13891b32cb62d67d0e44df384fa320246e" + "content" : "bbdd55a31a4755ef589bcb176283fe03e3c9089d315eab577fef3a9c2d02e632c6ac3fdebbc90a2f0f8ed7974b9f397c" }, { "alg" : "SHA3-256", - "content" : "37b170afbaa74ad33e4dfb402aae14a2a026fbde83cbad0e61aee65b5a01f55d" + "content" : "c9881b69bde35ea6ff4006877b9fbf91462f911b5b142aa699a45a00867d413a" }, { "alg" : "SHA3-512", - "content" : "f87bbab20f0ffd19ad27225b623b44cfa693fc83b27eb828acf0beeda846a13a9139a11e32d59cf81aa93da08af02335dddf59b2afc5a36900478a04c09c6218" + "content" : "2b9caf58deef687a9bf01abd61a7af4abdb61247a8a966683a18157ee948f1ea424602598dc8f665bf24f7e1e516866298ef0507e9d697cb20dcf60eff2095ca" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0" + "id" : "MIT", + "url" : "https://opensource.org/licenses/MIT" } } ], - "purl" : "pkg:maven/com.ethlo.time/itu@1.7.0?type=jar", + "purl" : "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://github.com/ethlo/itu" + "url" : "https://github.com/package-url/packageurl-java" + }, + { + "type" : "build-system", + "url" : "https://travis-ci.com/package-url/packageurl-java" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, + { + "type" : "issue-tracker", + "url" : "https://github.com/package-url/packageurl-java/issues" + }, { "type" : "vcs", - "url" : "https://github.com:ethlo/itu" + "url" : "https://github.com/package-url/packageurl-java.git" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.ethlo.time/itu@1.7.0?type=jar" + "bom-ref" : "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar" }, { "publisher" : "FasterXML", "group" : "com.fasterxml.jackson.dataformat", - "name" : "jackson-dataformat-yaml", - "version" : "2.15.2", - "description" : "Support for reading and writing YAML-encoded data via Jackson abstractions.", + "name" : "jackson-dataformat-xml", + "version" : "2.20.1", + "description" : "Data format extension for Jackson to offer alternative support for serializing POJOs as XML and deserializing XML as POJOs.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "8b854304b3f56fcb85f9815f420b13fc" + "content" : "55a13effaac5ed19e8393cba5e05f195" }, { "alg" : "SHA-1", - "content" : "58194ff9f51915ad6bf6b6f24818232d7566418a" + "content" : "3a8e1f06f8bdfd9f2c29f1b2bdad970b02dff4c9" }, { "alg" : "SHA-256", - "content" : "37795cc1e8cb94b18d860dc3abd2e593617ce402149ae45aa89ed8bfb881c851" + "content" : "190ad4eba35d89dba3517da279e0690681c4745174b94b09ea78f81ceae140f0" }, { "alg" : "SHA-512", - "content" : "0e7e444bb04159967945a131e15131304e667370ba118d4d9d300ad10ab68c85f250bc7ce31d46bc72ef381f99f7f6352fd866debf700e85995063cbd6bcb728" + "content" : "a4383994ae40d74e70d3966fab9ad8412e1a40709ab58f34311f8056a7d8620545302015c0aa9c74c3aa8844f7f2248494979c5387c016107bcc46917bf71b75" }, { "alg" : "SHA-384", - "content" : "ebd84ccc50f2986468a62028fcaaae53520ba5eb64f008bd086b10e4ffb1ca33af8a4aded7572e09a6eb9419da36485a" + "content" : "606497cf60a7bfbc27e3fcb528b577046f15a0b4efae68b105800bcf11d8c29114aa151776e26a924908449fca682dde" }, { "alg" : "SHA3-384", - "content" : "3881fbd843d0351c51ccd33f4c85a4c8f2949165c19e4ff44caa3ca7418505366af75c1f73711d85f666d7095f18939c" + "content" : "9afd1c3a77fb44529532607ced0b727d25c6493dac7ed450c922813542a0f8cbf8d2921f2b0ff82d5f486512f850dba5" }, { "alg" : "SHA3-256", - "content" : "e9e2e7b894cf982c5bc43a490bd784cf01a8c4123a5b1f2a0b73133104bdfff3" + "content" : "4cbb817483e92d68904c169fa4a48d9479dc2be64a52ed6c72ff01d547d14acc" }, { "alg" : "SHA3-512", - "content" : "9154b0c38ef860cd89bc2338afb85d26f225aac039fb284c29ac034cd27fb34074044400264058153184ecbff214d2611b7647ae06defa9611766c893e7a857c" + "content" : "c430e0d54fc913c28c199f0d6f935196cdac069c3abcc8cc66fa8ced61dd50c3d3ebf2c2a15d9c4c3e399d7a6184e94e2bb4874e61822d02e9d874b101df84d2" } ], "licenses" : [ @@ -4575,66 +4402,67 @@ } } ], - "purl" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.15.2?type=jar", + "purl" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.20.1?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://github.com/FasterXML/jackson-dataformats-text" + "url" : "https://github.com/FasterXML/jackson-dataformat-xml" }, { "type" : "distribution-intake", - "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" + "url" : "https://central.sonatype.com/api/v1/publisher" }, { "type" : "issue-tracker", - "url" : "https://github.com/FasterXML/jackson-dataformats-text/issues" + "url" : "https://github.com/FasterXML/jackson-dataformat-xml/issues" }, { "type" : "vcs", - "url" : "https://github.com/FasterXML/jackson-dataformats-text/jackson-dataformat-yaml" + "url" : "http://github.com/FasterXML/jackson-dataformat-xml" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.15.2?type=jar" + "bom-ref" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.20.1?type=jar" }, { - "group" : "org.yaml", - "name" : "snakeyaml", - "version" : "2.0", - "description" : "YAML 1.1 parser and emitter for Java", + "publisher" : "FasterXML", + "group" : "com.fasterxml.woodstox", + "name" : "woodstox-core", + "version" : "7.1.1", + "description" : "Woodstox is a high-performance XML processor that implements Stax (JSR-173), SAX2 and Stax2 APIs", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "caf24b81b9d57e6d4f68b1ccd36e00a3" + "content" : "971ff236679f7b35a7c13c0d02c0170e" }, { "alg" : "SHA-1", - "content" : "3aab2116756442bf0d4cd1c089b24d34c3baa253" + "content" : "76baad1b94513ea896e0a17388890a4c81edd0e0" }, { "alg" : "SHA-256", - "content" : "880c9d896e4b74a06c549c15ca496450165d6909fa15d7e662bee8f6a66d7afa" + "content" : "02b9d022e9d47704ff8a7a859a0dbfd3b2882a8311eb7ff1e180f760ccda2712" }, { "alg" : "SHA-512", - "content" : "93567558444365c436027bd1064b67ae99abde77fa89b33ac7c586ab83e4dbf02b7610669fd00ccd258bca6ba3fa078954c92d918b989317dce7bf9ce18836b8" + "content" : "28105d6409766966123d4e212dba555c4776bfeb538093d3739ef113de5c6d6e92453aabc16915bfb76124a5dcc82b57f3cd13b42ea2e4038a4495285c642d3a" }, { "alg" : "SHA-384", - "content" : "63c0ec40f4e3f24786031fb8a9477071c86e69247dce283ff725e328e26fba7bdfbb0ab52027b9b0988b3978703a95fe" + "content" : "ca02f505f335a975e71c4a549bc3707c35b3592d2ac2fc2cf8887dfde44ae76b753ad2174e4971bb33bb1ab6c8c6b3c7" }, { "alg" : "SHA3-384", - "content" : "fedd091de2b63c38fb04cb8e2d657bc7b37193ef065b18058be892d6b816d7cb68e5445819c3f3f8fca116311adc9760" + "content" : "1efac262497c761e493337361dbc388ac01634dbda5322a8ee7742b0b25a26cc039c3e3653bf2302fbc31883c8030703" }, { "alg" : "SHA3-256", - "content" : "66264c5c5f4703942a959310c14f22df9c2b1c304ddca1d1c211da58af5623f4" + "content" : "10a216995fc4e318dcb0be7b9ae00c07536fbc81e6119f0bf1e36716146f674d" }, { "alg" : "SHA3-512", - "content" : "0c4c5807880025a22791114253443d2166218760d63b80cd72eb3fdd71a19fdadb27d392b47de9c6b7ca2a2dc312273f0b8c97012ff277d2cab0fd06f3902573" + "content" : "924b1cb6ba79666c4fc13f1b057b376de471cfe60e68daca71ed51355abbd0de6799441ddd81df786317dd2c533cc1d3a9671f759e3a480d99c2d772eaa5ddda" } ], "licenses" : [ @@ -4644,550 +4472,550 @@ } } ], - "purl" : "pkg:maven/org.yaml/snakeyaml@2.0?type=jar", + "purl" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@7.1.1?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://bitbucket.org/snakeyaml/snakeyaml" + "url" : "https://github.com/FasterXML/woodstox" }, { "type" : "distribution-intake", - "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" + "url" : "https://central.sonatype.com/api/v1/publisher" }, { "type" : "issue-tracker", - "url" : "https://bitbucket.org/snakeyaml/snakeyaml/issues" + "url" : "https://github.com/FasterXML/woodstox/issues" }, { "type" : "vcs", - "url" : "https://bitbucket.org/snakeyaml/snakeyaml/src" + "url" : "https://github.com/FasterXML/woodstox" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.yaml/snakeyaml@2.0?type=jar" + "bom-ref" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@7.1.1?type=jar" }, { - "publisher" : "QOS.ch", - "group" : "org.slf4j", - "name" : "slf4j-api", - "version" : "2.0.7", - "description" : "The slf4j API", + "group" : "com.networknt", + "name" : "json-schema-validator", + "version" : "1.5.9", + "description" : "A json schema validator that supports draft v4, v6, v7, v2019-09 and v2020-12", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "403dffa46cdd2e3c82da19df4f394a4c" + "content" : "84622292ac5001bac8f16dc5002a8b94" }, { "alg" : "SHA-1", - "content" : "41eb7184ea9d556f23e18b5cb99cad1f8581fc00" + "content" : "6a2f9fe324b9dc8d8e0c3d7b435f7ae99595a556" }, { "alg" : "SHA-256", - "content" : "5d6298b93a1905c32cda6478808ac14c2d4a47e91535e53c41f7feeb85d946f4" + "content" : "e0b8baeb78fd1ba027454ee3974d8a02f54447eaa510d3052820a7d2160d9ae4" }, { "alg" : "SHA-512", - "content" : "216d2cac27d501972c888f94dfa747d700b80d60813884b6ab4b12c6a3b17ed0c21a1d27e1aa4332c97c828f20039e3913d2763d7e1a3cef36ae4389a276e7a8" + "content" : "5ba210c135717a6ed043e0889d96f6381b3668f9e2a011bd0def8138ad327813f792259858ae5ed192cb8ec0645308113769aa8ebee903db1ccd82e98cb3009d" }, { "alg" : "SHA-384", - "content" : "c25b39f418aa726ba8405dfd9b356131f89984e2ef5a55a724a2abf3b7c78443f671105835161d2414d602cf03da9f2d" + "content" : "21a4f4fb586959241ce92ad788cb4326d62232aafcddf6953ef7769efa5c6936487ffea51693ff44206f4d66c83ee753" }, { "alg" : "SHA3-384", - "content" : "f33abfaac21badae6f85d3ebbc6c1204fd7fda3bb15173e763fa8cee95bce6a8270eec2c8f49343c66c8d2767bc317e1" + "content" : "36bb0b96a34254780e991440e879c1f44a0a62362e115a5c761df0ec1c8f2a9f64a7421ea3cb50a589ae501619fd3942" }, { "alg" : "SHA3-256", - "content" : "6e00d4b264a2afc4ca4e98f716ecece66c32c626ca3f8c5d56b22092b6fe417b" + "content" : "c97a2638d46c235056bacfe90d8e0b88a823a5622e88b608a31f481f3adb9ccf" }, { "alg" : "SHA3-512", - "content" : "ad7b9142d370fc532a07cdd43881a129b012ff50e2bede3ac27d9bd31ec707bf2f45e82002fa59e962955cc38ab73cdd77713fca50cedc926c046f5617c1285b" + "content" : "08b256bb3ac49102d87c0e635d025699154bfa7785916d591173af6ec14dfde885e34500a7bd13159a00a7fe78dc859aefa9dc930d0719a64ea08209ccffb20a" } ], "licenses" : [ { "license" : { - "id" : "MIT", - "url" : "https://opensource.org/licenses/MIT" + "id" : "Apache-2.0" } } ], - "purl" : "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar", + "purl" : "pkg:maven/com.networknt/json-schema-validator@1.5.9?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://www.slf4j.org" + "url" : "https://github.com/networknt/json-schema-validator" }, { "type" : "distribution-intake", - "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" + "url" : "https://central.sonatype.com/service/local/staging/deploy/maven2/" }, { - "type" : "vcs", - "url" : "https://github.com/qos-ch/slf4j/slf4j-api" - } - ], - "type" : "library", - "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar" - }, - { - "publisher" : "IBM", - "group" : "com.ibm", - "name" : "enricher", - "version" : "1.0.3-SNAPSHOT", - "licenses" : [ - { - "license" : { - "name" : "GNU LGPL 3", - "url" : "https://www.gnu.org/licenses/lgpl.txt" - } - } - ], - "purl" : "pkg:maven/com.ibm/enricher@1.0.3-SNAPSHOT?type=jar", - "externalReferences" : [ - { - "type" : "distribution-intake", - "url" : "https://eu.artifactory.swg-devops.com/artifactory/res-cryptoagility-team-maven-local" - } - ], - "type" : "library", - "bom-ref" : "pkg:maven/com.ibm/enricher@1.0.3-SNAPSHOT?type=jar" - }, - { - "publisher" : "IBM", - "group" : "com.ibm", - "name" : "java", - "version" : "1.0.3-SNAPSHOT", - "licenses" : [ - { - "license" : { - "name" : "GNU LGPL 3", - "url" : "https://www.gnu.org/licenses/lgpl.txt" - } - } - ], - "purl" : "pkg:maven/com.ibm/java@1.0.3-SNAPSHOT?type=jar", - "externalReferences" : [ + "type" : "issue-tracker", + "url" : "https://github.com/networknt/json-schema-validator/issues" + }, { - "type" : "distribution-intake", - "url" : "https://eu.artifactory.swg-devops.com/artifactory/res-cryptoagility-team-maven-local" + "type" : "vcs", + "url" : "https://github.com/networknt/json-schema-validator.git" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.ibm/java@1.0.3-SNAPSHOT?type=jar" + "bom-ref" : "pkg:maven/com.networknt/json-schema-validator@1.5.9?type=jar" }, { - "group" : "org.bouncycastle", - "name" : "bcpkix-jdk18on", - "version" : "1.78", - "description" : "The Bouncy Castle Java APIs for CMS, PKCS, EAC, TSP, CMP, CRMF, OCSP, and certificate generation. This jar contains APIs for JDK 1.8 and up. The APIs can be used in conjunction with a JCE/JCA provider such as the one provided with the Bouncy Castle Cryptography APIs.", + "group" : "com.ethlo.time", + "name" : "itu", + "version" : "1.14.0", + "description" : "Extremely fast date-time parser and formatter - RFC 3339 (ISO 8601 profile) and W3C format", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "9553f65f617b0deb8efcbc131262706b" + "content" : "e537d0a2bc8066726f7e4654c253cf84" }, { "alg" : "SHA-1", - "content" : "dd61bcdb87678451dd42d42e267979bd4b4451a1" + "content" : "c0f9f9d4f4404787e992ab3af5ae95f2fad79e47" }, { "alg" : "SHA-256", - "content" : "ce36b14a90e6b3e9a2c9964e67440d4c758bd257189e7cd745d29a3817611861" + "content" : "5cf40ab0cc77828ab2b875b1f3ecd71c8295d7721933476abc2e08fddcea164a" }, { "alg" : "SHA-512", - "content" : "c5460e4e53d08765fedc4402b8785677bd062f32ad928a151f9590941f463d9016af898b9ab3a38761d74e8f25d9368be9824bc8ef3279eab54adb2abd9e0ae4" + "content" : "aa69a6af3a7123eb41425bbaf6834e16dc3323172709e2338b8a21b970fd21333d996515f42da4aa0225251e30542ad7d9c8332bdf7d62ed96b42fadc8a1520d" }, { "alg" : "SHA-384", - "content" : "a730ed33aa0ff4b5c6595fd75d50dd88136b273a4654274edc2d89e166b5ee22df3dc86c898e75d65668fb642736bd8d" + "content" : "8d201334c39b68d13d66fc9df2440fa848b055a9b901e1c630ff66a47e70c8816484d106ae18c642d4257034f33e55f2" }, { "alg" : "SHA3-384", - "content" : "8e4d70a67d45d728854f950c660f34751667403e70f9416818fe314e1b78d196bb780f5bf7d884c506acded0af84d337" + "content" : "033715e1422cb3f22c1073bc7b058fd16d1436c6314f49f13480d81c86b656cb77a4d852cbba35542bc8f2ce49244ba6" }, { "alg" : "SHA3-256", - "content" : "47b760ec891f693389d6c2fd966d3f3ff70c669cd88c8e8e3dafac621ba189ce" + "content" : "f18d275dd2a0038a82432e06bb9f396151310136e3a316a869ef54d7fae834c5" }, { "alg" : "SHA3-512", - "content" : "a77f6916d5a8c9965c2f1909b4c65bc8bd8cc18e22bcc4bd846e9a0b1e52f9c89a2f6e93a76b08fda8b4d22d80105cdb4b88102ca1492475a3a2c2dfebebebf8" + "content" : "8a51b3c6144eb2e363f8804da316d9e3dc246be07af4c0bb55e9540c2a0deb5eb9beb825120d3d203e3a561fd8a605ad64f3af5d233725e1b9c7e06232deaea9" } ], "licenses" : [ { "license" : { - "name" : "Bouncy Castle Licence", - "url" : "https://www.bouncycastle.org/licence.html" + "id" : "Apache-2.0" } } ], - "purl" : "pkg:maven/org.bouncycastle/bcpkix-jdk18on@1.78?type=jar", + "purl" : "pkg:maven/com.ethlo.time/itu@1.14.0?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://www.bouncycastle.org/java.html" + "url" : "https://github.com/ethlo/itu" }, { - "type" : "issue-tracker", - "url" : "https://github.com/bcgit/bc-java/issues" + "type" : "distribution-intake", + "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "vcs", - "url" : "https://github.com/bcgit/bc-java" + "url" : "https://github.com/ethlo/itu" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.bouncycastle/bcpkix-jdk18on@1.78?type=jar" + "bom-ref" : "pkg:maven/com.ethlo.time/itu@1.14.0?type=jar" }, { - "group" : "org.bouncycastle", - "name" : "bcprov-jdk18on", - "version" : "1.78", - "description" : "The Bouncy Castle Crypto package is a Java implementation of cryptographic algorithms. This jar contains JCE provider and lightweight API for the Bouncy Castle Cryptography APIs for JDK 1.8 and up.", + "publisher" : "FasterXML", + "group" : "com.fasterxml.jackson.dataformat", + "name" : "jackson-dataformat-yaml", + "version" : "2.18.3", + "description" : "Support for reading and writing YAML-encoded data via Jackson abstractions.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "54b851711aea718aa835739bc23f7b90" + "content" : "96671888dd42efee72d555b537558977" }, { "alg" : "SHA-1", - "content" : "619aafb92dc0b4c6cc4cf86c487ca48ee2d67a8e" + "content" : "66658356a375664262c227dad09adc51dbc09c54" }, { "alg" : "SHA-256", - "content" : "1bf721b09758b3f55f2a5c875b6178ec6c41dddad854b0dead4b27a236f1943a" + "content" : "3ca00e47cfcb43e79438ddcfc8fc735e9ebac3824fb7769138609be6bd56e483" }, { "alg" : "SHA-512", - "content" : "5c2707f611fe4f80d7775bd0b19953384f963dc63128c16583d02c37a5f556938bd8c86fafe82849f11d45d1baa5e8ca405a89f008557e4d9ba476ee6bc05104" + "content" : "a4696ab6e7161a5aa913ca0d22ff99aae12828104df3169753cb60ed69a8ed29c776c4beb1c938caad57344ef649572b0ef21fa45f3e58b3321b25b5d073939a" }, { "alg" : "SHA-384", - "content" : "56c70dfe6ee8f01066bbc24d1ffe63ea75b775d35b18dbaab4010502864e9eaf96fc4f8453507be9c6412cd93bf4ed0a" + "content" : "064eddddc868cac85768a2149fc291d35e429737c223f7b6495c28b3872ccc7101eb21672f6b2d0637777fe42050efd1" }, { "alg" : "SHA3-384", - "content" : "b77d9d509f9d55bcc46825930846d1bba60040f21be38081ae1ed5394ae1d7647466ec73a96f3d556c076994e6b5a40a" + "content" : "c817c948326114e676267e97cb87f9eea44f8042f03cc32c02299097683d5d12f538a337f716a6f1fed2e41ef33cdc5f" }, { "alg" : "SHA3-256", - "content" : "b70981e53ef280f94c025fd1f790f493d52d04ccc9e2b4261405114747ca5983" + "content" : "b13168ea825b0f2c3b7084b34263e051e6cb2ce36faccb4f4661370746100af9" }, { "alg" : "SHA3-512", - "content" : "33840c1b2613b941215f88a865ac94a38e36655ed9f7f05693b77591ea7a5f3f2c8c8ea167875de2b4ae69d5a4e00a8fd788eedc0a17c3cd86a69a0dd80bb61a" + "content" : "84a42a102dbc9761fa2c4e5ebe85deb1b5d475bc4f2b3e7d025edaa4e331c87460904d0707673eca186c705c72762bf38364dc1f21f958f76f0518ea4e7d38a4" } ], "licenses" : [ { "license" : { - "name" : "Bouncy Castle Licence", - "url" : "https://www.bouncycastle.org/licence.html" + "id" : "Apache-2.0" } } ], - "purl" : "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.78?type=jar", + "purl" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.18.3?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://www.bouncycastle.org/java.html" + "url" : "https://github.com/FasterXML/jackson-dataformats-text" + }, + { + "type" : "distribution-intake", + "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", - "url" : "https://github.com/bcgit/bc-java/issues" + "url" : "https://github.com/FasterXML/jackson-dataformats-text/issues" }, { "type" : "vcs", - "url" : "https://github.com/bcgit/bc-java" + "url" : "https://github.com/FasterXML/jackson-dataformats-text/jackson-dataformat-yaml" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.78?type=jar" + "bom-ref" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.18.3?type=jar" }, { - "group" : "org.bouncycastle", - "name" : "bcutil-jdk18on", - "version" : "1.78", - "description" : "The Bouncy Castle Java APIs for ASN.1 extension and utility APIs used to support bcpkix and bctls. This jar contains APIs for JDK 1.8 and up.", + "group" : "org.yaml", + "name" : "snakeyaml", + "version" : "2.3", + "description" : "YAML 1.1 parser and emitter for Java", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "281b9eb6391a1bfb064142eb05470e94" + "content" : "2a1c2ee8923dcd6bd6d025751af5df37" }, { "alg" : "SHA-1", - "content" : "81c1f5e06f206be5dad137d563609dbe66c81d31" + "content" : "936b36210e27320f920536f695cf1af210c44586" }, { "alg" : "SHA-256", - "content" : "f584cf9ba2c64a9255160ec8a3be72a112f50c4b5e9e456671d1805ed159eb50" + "content" : "63a76fe66b652360bd4c2c107e6f0258daa7d4bb492008ba8c26fcd230ff9146" }, { "alg" : "SHA-512", - "content" : "4bb734d6a6e42a1a16560e7d68fb7ff68f47588c64792bc4523eb40c377d568ee00ed0428c6f354c18c3277c79481d6eb1f955b1132cd3f065082199ac57108b" + "content" : "1c9c78f0d102ae49a7c06f9e20c6a79a4fb9a2af962230ee6e136bda0caf10dcbb9deadc1c3ab15f74a4982ec8f8266217115e357329fde5b3f4f1858882de0c" }, { "alg" : "SHA-384", - "content" : "a254f7aef8080bec355dd299c70c253aca89c8480fdb70281f96fe3f66d901d9ff286270fdd45f5df21241bef0c8c3f5" + "content" : "77b1d06e83fd51b83b13372d5ef2eb43c5a66f193db857cee947ae4e900e4a4a0c66a8074435984b9a0b007a69cc2b4f" }, { "alg" : "SHA3-384", - "content" : "8331f9fc5d040331bd6d1fb8954abcf548f57f99505dc9aaa08783428a71cd55dae789c03ee482ec0764c48bce9b1c43" + "content" : "550c4e7a119fd690f750317dc0e20ad7bfc7fa28fa0409fc572bc745d51340a60e9e2ce2af97f458daa561155130bb97" }, { "alg" : "SHA3-256", - "content" : "6dd72dd00b58b6fb03f2fc4462c5050e2ebfedc6b395cfefbd779f00031a72f5" + "content" : "d1b540ee39c34ab1484be27d2dd56a14aa48f88668905f9ad176932f4b2cd5d6" }, { "alg" : "SHA3-512", - "content" : "a72d6a0bf892e3652df05d35a7213b4d785e1cec1fed180982538baa43eac532f84b4c44d4a187d79b1df30d6e19d349617329ca6dd4c08a3a1d7b67249bdb8b" + "content" : "879ccb34343ebd4ac4888091d97f393c5f75cbb066cf8cf1b9b3eb03a3442cb17326c60bd0db1403aa66ed1f0a5a0d548c96dbce74ebc5c3d6d93950f24b417f" } ], "licenses" : [ { "license" : { - "name" : "Bouncy Castle Licence", - "url" : "https://www.bouncycastle.org/licence.html" + "id" : "Apache-2.0" } } ], - "purl" : "pkg:maven/org.bouncycastle/bcutil-jdk18on@1.78?type=jar", + "purl" : "pkg:maven/org.yaml/snakeyaml@2.3?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://www.bouncycastle.org/java.html" + "url" : "https://bitbucket.org/snakeyaml/snakeyaml" + }, + { + "type" : "distribution-intake", + "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", - "url" : "https://github.com/bcgit/bc-java/issues" + "url" : "https://bitbucket.org/snakeyaml/snakeyaml/issues" }, { - "type" : "vcs", - "url" : "https://github.com/bcgit/bc-java" + "type" : "vcs", + "url" : "https://bitbucket.org/snakeyaml/snakeyaml/src" + } + ], + "type" : "library", + "bom-ref" : "pkg:maven/org.yaml/snakeyaml@2.3?type=jar" + }, + { + "publisher" : "cbomkit", + "group" : "com.ibm", + "name" : "enricher", + "version" : "2.0.0-SNAPSHOT", + "licenses" : [ + { + "license" : { + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" + } + } + ], + "purl" : "pkg:maven/com.ibm/enricher@2.0.0-SNAPSHOT?type=jar", + "externalReferences" : [ + { + "type" : "distribution-intake", + "url" : "https://maven.pkg.github.com/cbomkit/sonar-cryptography" + } + ], + "type" : "library", + "bom-ref" : "pkg:maven/com.ibm/enricher@2.0.0-SNAPSHOT?type=jar" + }, + { + "publisher" : "cbomkit", + "group" : "com.ibm", + "name" : "rules", + "version" : "2.0.0-SNAPSHOT", + "licenses" : [ + { + "license" : { + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" + } + } + ], + "purl" : "pkg:maven/com.ibm/rules@2.0.0-SNAPSHOT?type=jar", + "externalReferences" : [ + { + "type" : "distribution-intake", + "url" : "https://maven.pkg.github.com/cbomkit/sonar-cryptography" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.bouncycastle/bcutil-jdk18on@1.78?type=jar" + "bom-ref" : "pkg:maven/com.ibm/rules@2.0.0-SNAPSHOT?type=jar" }, { - "publisher" : "IBM", + "publisher" : "cbomkit", "group" : "com.ibm", - "name" : "python", - "version" : "1.0.3-SNAPSHOT", + "name" : "java", + "version" : "2.0.0-SNAPSHOT", "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "https://www.gnu.org/licenses/lgpl.txt" + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], - "purl" : "pkg:maven/com.ibm/python@1.0.3-SNAPSHOT?type=jar", + "purl" : "pkg:maven/com.ibm/java@2.0.0-SNAPSHOT?type=jar", "externalReferences" : [ { "type" : "distribution-intake", - "url" : "https://eu.artifactory.swg-devops.com/artifactory/res-cryptoagility-team-maven-local" + "url" : "https://maven.pkg.github.com/cbomkit/sonar-cryptography" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.ibm/python@1.0.3-SNAPSHOT?type=jar" + "bom-ref" : "pkg:maven/com.ibm/java@2.0.0-SNAPSHOT?type=jar" }, { - "publisher" : "SonarSource", - "group" : "org.sonarsource.sslr", - "name" : "sslr-core", - "version" : "1.23", - "description" : "", + "group" : "com.google.guava", + "name" : "guava", + "version" : "33.5.0-jre", + "description" : "Guava is a suite of core and expanded libraries that include utility classes, Google's collections, I/O classes, and much more.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "f89a00d0f4e4acdddf54c95b69aa7675" + "content" : "d9fbf39a41a5bab891348f07668e18c5" }, { "alg" : "SHA-1", - "content" : "79a22d2691a6060e11a8bc6134962b1c47087617" + "content" : "8699de25f2f979108d6c1b804a7ba38cda1116bc" }, { "alg" : "SHA-256", - "content" : "84bd856420ba37ae35df7a5d4d867000f7d622245d5ba349c3784f528577c8dd" + "content" : "1e301f0c52ac248b0b14fdc3d12283c77252d4d6f48521d572e7d8c4c2cc4ac7" }, { "alg" : "SHA-512", - "content" : "8096f5cddfba041225b325d03123b535c83f1bd88afb7fe0d01c13fc8463be52c046756901fb550847548d7cb4ff3a24c47bcb9b5d1a53c900ba069be5f7d983" + "content" : "994a4dbcbd8e528ad3b4a7acf49b631a40dcebb03d9a8f5e1d3b74351f805f77774e9a19f7233e42036cb415b7838710f207ac1e18335e4a219b7f99ea22a44f" }, { "alg" : "SHA-384", - "content" : "377a73cee1789edec1176d32a6f56e30aebdc9b902bfbe061c6c65014915a94e2a3a025cfb084e919bb5dbf7f96fb646" + "content" : "9dabff6e543ead881b20d38a533e9151aaa83999239cf0ace3e712cf678e7976c3a50d79e3f3c57afc05a3b9ff14ad90" }, { "alg" : "SHA3-384", - "content" : "691b64b1e4a29461b5ee2e929a9e60f8cbeffd924ac9f9fe039ffe1de44ead0ad9c6d2d65e8edcc84edbe5a626f156ee" + "content" : "9f65d4d942113facb2eb25229c1530b79dd3b8994574034b8d4a1c2b39ed8ee5bb4d415ec690d3d87cee0d8cb2283564" }, { "alg" : "SHA3-256", - "content" : "e0ec34bac214240137f93145be8082bae46db2aac4e6e6b79dd71b931a58c189" + "content" : "fedafab2279bdf6eff66314fc61b056e92312695678e66dc1e25fe1d18af5a36" }, { "alg" : "SHA3-512", - "content" : "741453b30ec787f69d79986a2ef39a598de74db0411e42ffa4bf14905bb2201a455c1d93779c5006b8e1fae0a834d569bcaff4aeebf370ba37eb6b10bcfeef9e" + "content" : "e64f3c49f9030358554bb0b8abdff729394988f1e3247b05a86302014eeff4a2855acf46d9bf1c683cbecc33a24173a20a103d3c82c94f8cabd6676a01b40fb6" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "id" : "Apache-2.0" } } ], - "purl" : "pkg:maven/org.sonarsource.sslr/sslr-core@1.23?type=jar", + "purl" : "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar", "externalReferences" : [ { - "type" : "build-system", - "url" : "https://travis-ci.org/SonarSource/sslr" + "type" : "website", + "url" : "https://github.com/google/guava" }, { - "type" : "distribution-intake", - "url" : "https://api.bintray.com/maven/sonarsource/SonarQube/org.sonarsource.sslr/;publish=1" + "type" : "build-system", + "url" : "https://github.com/google/guava/actions" }, { "type" : "issue-tracker", - "url" : "http://jira.sonarsource.com/browse/SSLR" - }, - { - "type" : "mailing-list", - "url" : "sonarqube+subscribe@googlegroups.com" + "url" : "https://github.com/google/guava/issues" }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sslr/sslr-core" + "url" : "https://github.com/google/guava/guava" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.sslr/sslr-core@1.23?type=jar" + "bom-ref" : "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar" }, { - "publisher" : "SonarSource", - "group" : "org.sonarsource.analyzer-commons", - "name" : "sonar-regex-parsing", - "version" : "2.7.0.1482", - "description" : "Logic useful to read and analyze regular expressions", + "group" : "com.google.guava", + "name" : "failureaccess", + "version" : "1.0.3", + "description" : "Contains com.google.common.util.concurrent.internal.InternalFutureFailureAccess and InternalFutures. Most users will never need to use this artifact. Its classes are conceptually a part of Guava, but they're in this separate artifact so that Android libraries can use them without pulling in all of Guava (just as they can use ListenableFuture by depending on the listenablefuture artifact).", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "eb44e77429b0c670bd02c692b9b9d136" + "content" : "29a782e90f6b37218b18bb880d2a8f4a" }, { "alg" : "SHA-1", - "content" : "910a8d677db776702263b61dbcc37cca510050cf" + "content" : "aeaffd00d57023a2c947393ed251f0354f0985fc" }, { "alg" : "SHA-256", - "content" : "3bab2bf7d97cf368c5c352c1725b3de3954612c39488fde5d6d461e12df93c20" + "content" : "cbfc3906b19b8f55dd7cfd6dfe0aa4532e834250d7f080bd8d211a3e246b59cb" }, { "alg" : "SHA-512", - "content" : "fb07be9e9ecb8db11b54b80ec558c356ddea938c780abbe7a82722538d46a147e5ed7b2cdcd436bacc421dee341469bd7409d7765e36f9f6bba05784966830ce" + "content" : "72be228e7805da5623e42bf024ded7d9147023c66b22f4dbd04ac6898201af46ee82e1f92ea51eb0595f1b49151c4b8ecb862653d4906c17609c42544ee97abf" }, { "alg" : "SHA-384", - "content" : "9823d8146ffba7208034c9b9d92265e991b12261070bb42a5c6d6853972fc1a61133fb39d7cb4b9dffa354608c85bfdb" + "content" : "9dd1a2a08efda311604992d3e7cee64873bc8c64de3b423b1b3a3dcc1f7f0810bb03901fbfe39a5f835accb0646f4ad8" }, { "alg" : "SHA3-384", - "content" : "77192be90d0be39614445f295808749155043508de9bda7efea6fa41765925b32a2a1c57d7c774b1df5682029c9bf79a" + "content" : "ffd67766c165ee77e96824e06de2c19864a6e61f785b2085eb825f308f173d71f2555559d90d910f33f3367378ace0e3" }, { "alg" : "SHA3-256", - "content" : "708a623ce1122ac3c9e0b49d13a46288f81660ff8772e2f5abb245a041a3fe04" + "content" : "08a77b528a72ca412b36e4004692705ebfd75cfb4897c88632d367d08a34b09f" }, { "alg" : "SHA3-512", - "content" : "0d4da73a042eda089bd7e4ce22ddf424d7dcac353e5c900f7aea68e3151bc49c00ad528a02b986e5239d642905aa71b5406a8881c6fe4fa4b6c8d91b2b553c93" + "content" : "7cba6c266babbe8272f029eea6e2cbddadee96eb1a16916a6eb2441a55837867ce717385d4388735fd83f2f6555931077c0ebda011a1ee9a37ac38c8c0c43a65" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "id" : "Apache-2.0" } } ], - "purl" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.7.0.1482?type=jar", + "purl" : "pkg:maven/com.google.guava/failureaccess@1.0.3?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://docs.sonarqube.org/display/PLUG/Plugin+Library/sonar-analyzer-commons-parent/sonar-regex-parsing" + "url" : "https://github.com/google/guava/failureaccess" }, { "type" : "build-system", - "url" : "https://cirrus-ci.com/github/SonarSource/" + "url" : "https://github.com/google/guava/actions" }, { - "type" : "issue-tracker", - "url" : "http://jira.sonarsource.com" + "type" : "distribution-intake", + "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { - "type" : "mailing-list", - "url" : "https://community.sonarsource.com" + "type" : "issue-tracker", + "url" : "https://github.com/google/guava/issues" }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-analyzer-commons/sonar-regex-parsing" + "url" : "https://github.com/google/guava/failureaccess" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.7.0.1482?type=jar" + "bom-ref" : "pkg:maven/com.google.guava/failureaccess@1.0.3?type=jar" }, { - "group" : "com.google.guava", - "name" : "guava", - "version" : "32.0.1-jre", - "description" : "Guava is a suite of core and expanded libraries that include utility classes, Google's collections, I/O classes, and much more.", + "group" : "com.google.j2objc", + "name" : "j2objc-annotations", + "version" : "3.1", + "description" : "A set of annotations that provide additional information to the J2ObjC translator to modify the result of translation.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "6951895e804b36322214c95917e598d4" + "content" : "abe8bd3abff622b9a8b15c3a737aa741" }, { "alg" : "SHA-1", - "content" : "6e5d51a72d142f2d40a57dfb897188b36a95b489" + "content" : "a892ca9507839bbdb900d64310ac98256cab992f" }, { "alg" : "SHA-256", - "content" : "bd7fa227591fb8509677d0d1122cf95158f3b8a9f45653f58281d879f6dc48c5" + "content" : "84d3a150518485f8140ea99b8a985656749629f6433c92b80c75b36aba3b099b" }, { "alg" : "SHA-512", - "content" : "5dbe7a697511cfbe44f3ffb954e32e997677ecc61f03bb7bb374f1b8fa4a931a95cd9d1f5288eb5d42e2aa380e3241b35059786c07edc48e5aa67c30cddad8a5" + "content" : "34ee5aad57b0b507e89c897306f73043f80fa0eb02b453e54d9052feb0808a0d2ed835d888946211921d2bf733780b19ff636479ce19b9f48814ba6008733ce1" }, { "alg" : "SHA-384", - "content" : "abad4556e073fb38062c636b6599ceed992302c7d98150e3842d32ce92f6aac7d630633c56efa581523d591361fcf898" + "content" : "7b760a346a586d6a3fa4477807e2f02f091e61898fc9a6ff449e43c55b6465fbbc17720663183c84c41d4d8814085e51" }, { "alg" : "SHA3-384", - "content" : "c7b02d77e04c567e8870674f71a60141e83ca9e5e9180138450ede78ad7f2be8b6636c514096e15ba2921c2889427852" + "content" : "a2166c1c08f947c0e60aa7c9167602942e7bac37ba45863d34c0132a1f352e7807a382588d350b93bdbbbbe315a3573f" }, { "alg" : "SHA3-256", - "content" : "17f18d8631c9bff9234c214522ce89eb1feef27a4dfe990760d4943ad3de710d" + "content" : "3d4d3b8bfd2ad13351a53610aa4bf1c5a69d2bde4272c281003120ed9bcddb8c" }, { "alg" : "SHA3-512", - "content" : "7cf7847812b47cc232ef3c27719457dd19610b3e3bb25c1be640821a3a2be67781047f41e34491b5c8ed68010bbb1d53c5f7706633f3a3f44f3f3133bb7635ec" + "content" : "0a574b379a3f8022f0b88252c87d0e6b6cfa434fdb981efd1b24387025a962d7ac4e90161e8bd048df142bf52f4fc41e4a0c1d45e4eeb872c5954aad552988e9" } ], "licenses" : [ @@ -5197,258 +5025,328 @@ } } ], - "purl" : "pkg:maven/com.google.guava/guava@32.0.1-jre?type=jar", + "purl" : "pkg:maven/com.google.j2objc/j2objc-annotations@3.1?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://github.com/google/guava" - }, - { - "type" : "build-system", - "url" : "https://github.com/google/guava/actions" + "url" : "https://github.com/google/j2objc/" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, - { - "type" : "issue-tracker", - "url" : "https://github.com/google/guava/issues" - }, { "type" : "vcs", - "url" : "https://github.com/google/guava/guava" + "url" : "http://github.com/google/j2objc" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.google.guava/guava@32.0.1-jre?type=jar" + "bom-ref" : "pkg:maven/com.google.j2objc/j2objc-annotations@3.1?type=jar" }, { - "group" : "org.checkerframework", - "name" : "checker-qual", - "version" : "3.33.0", - "description" : "checker-qual contains annotations (type qualifiers) that a programmer writes to specify Java code for type-checking by the Checker Framework.", + "publisher" : "cbomkit", + "group" : "com.ibm", + "name" : "python", + "version" : "2.0.0-SNAPSHOT", + "licenses" : [ + { + "license" : { + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" + } + } + ], + "purl" : "pkg:maven/com.ibm/python@2.0.0-SNAPSHOT?type=jar", + "externalReferences" : [ + { + "type" : "distribution-intake", + "url" : "https://maven.pkg.github.com/cbomkit/sonar-cryptography" + } + ], + "type" : "library", + "bom-ref" : "pkg:maven/com.ibm/python@2.0.0-SNAPSHOT?type=jar" + }, + { + "publisher" : "OW2", + "group" : "org.ow2.asm", + "name" : "asm", + "version" : "9.0", + "description" : "ASM, a very small and fast Java bytecode manipulation framework", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "fc9418b779d9d57dcd52197006cbdb9b" + "content" : "e87284e4421437854ba938179cf803e7" }, { "alg" : "SHA-1", - "content" : "de2b60b62da487644fc11f734e73c8b0b431238f" + "content" : "af582ff60bc567c42d931500c3fdc20e0141ddf9" }, { "alg" : "SHA-256", - "content" : "e316255bbfcd9fe50d165314b85abb2b33cb2a66a93c491db648e498a82c2de1" + "content" : "0df97574914aee92fd349d0cb4e00f3345d45b2c239e0bb50f0a90ead47888e0" }, { "alg" : "SHA-512", - "content" : "049c446677b7b386f3fb501bf65e032bdf2b1b29a3f545848035fff2b683cd275380cf302e30eea641af7f0801f779bcda3d82a71d928e4176f564f796640a64" + "content" : "135f0be16323936ef10a291df4e5d13ab8e488f41cc2835e9ccdddb3f6b65e948ef3b79eb12636c97815380455a32ece7fa9dd094f04b192a3e8752bbcb83463" }, { "alg" : "SHA-384", - "content" : "ddf7a0f70421d1ed75e93c0a30434a4862c3905e433223e19861323cf0994e843392b746003040f10a7db6fc960b8aa6" + "content" : "d6da11983245a34ad4fc6bd25c894b8d125e8ae98b62d7130cafe483acc27d3d59598b2e4cc05930c1fed84ff819ada5" }, { "alg" : "SHA3-384", - "content" : "edf079834fdd23317851318504b2fcc10b055cdb5cc4ada9c773d1b6c815ed6dd193c433d2b83103f070fd521021ff33" + "content" : "423ca9cf704ea268b33297e79bda67bb4b14eb27eff1910d99886846ef8f5a8dee49862e42cd95ab1fb6c52b0631222a" }, { "alg" : "SHA3-256", - "content" : "56244f45b03fc2a472b35489324e392e6001fac088d19f33629a87adb74a0575" + "content" : "1beb0e93ad7e629c54d900dea3ebb394fb62301152e7aa39ede520f9c348bba2" }, { "alg" : "SHA3-512", - "content" : "e0516c11fe613f258bf9ad39358a8d9fb7c8df57ff9aaca5d6d16055c196fac4ed3b4185f2501a3bdf7aeb1fe142693b1d788bdaa73366be1af15762bb3591a4" + "content" : "8beb13f69f431fb921bf00d6ebd84b22cd6092aab97808aed464caad1e6863958cb32ec199f542d60d630a798ce42d0fe237cb74e97c33157fb6cefed1721173" } ], "licenses" : [ { "license" : { - "id" : "MIT" + "id" : "BSD-3-Clause", + "url" : "https://opensource.org/licenses/BSD-3-Clause" } } ], - "purl" : "pkg:maven/org.checkerframework/checker-qual@3.33.0?type=jar", + "purl" : "pkg:maven/org.ow2.asm/asm@9.0?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://checkerframework.org/" + "url" : "http://asm.ow2.io/" + }, + { + "type" : "distribution-intake", + "url" : "http://repository.ow2.org/nexus/service/local/staging/deploy/maven2" + }, + { + "type" : "issue-tracker", + "url" : "https://gitlab.ow2.org/asm/asm/issues" + }, + { + "type" : "mailing-list", + "url" : "https://mail.ow2.org/wws/arc/asm/" }, { "type" : "vcs", - "url" : "https://github.com/typetools/checker-framework.git" + "url" : "https://gitlab.ow2.org/asm/asm/" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.checkerframework/checker-qual@3.33.0?type=jar" + "bom-ref" : "pkg:maven/org.ow2.asm/asm@9.0?type=jar" }, { - "publisher" : "Google LLC", - "group" : "com.google.errorprone", - "name" : "error_prone_annotations", - "version" : "2.18.0", - "description" : "Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.", + "publisher" : "SonarSource", + "group" : "org.sonarsource.analyzer-commons", + "name" : "sonar-regex-parsing", + "version" : "2.20.0.4607", + "description" : "Logic useful to read and analyze regular expressions", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "64145d0e7fee5a69ed7b84cf402de998" + "content" : "4eccf95bb15e9aec54a88a17f6c8a606" }, { "alg" : "SHA-1", - "content" : "89b684257096f548fa39a7df9fdaa409d4d4df91" + "content" : "b9db0a78e410732a3430d0278cd36a69a149e60a" }, { "alg" : "SHA-256", - "content" : "9e6814cb71816988a4fd1b07a993a8f21bb7058d522c162b1de849e19bea54ae" + "content" : "b5c8140f69878e9264ba5de71adff98e5126e8458281eb2ce0c0900b954c1bed" }, { "alg" : "SHA-512", - "content" : "3cea86be94bb8ae40d21ad4bf7d7f6b2233e89593b7b741ad84c78840cd3837bb5136f52e62fe9ae0953d7b190c46ad3edc102dfa97b4c7ea472a80206bf5db7" + "content" : "802a82a2baebb7aaaab78393630b6b304135a33196db5308231d5938bd2c21152b5fe41ddd1ec06ed7fce16ac3baf7c9cdd57a03e6ddbcc3b8a8c2883f37a657" }, { "alg" : "SHA-384", - "content" : "7622eb33f83f03ab32b710b36c2fe836e24c5318f65fb8c0631a99507ca3ae65c2df8e33b63a5ce853b9cab6d9cb32e5" + "content" : "d64513d0bc0afb9c3ff9cb069f10c2a14975ed78277b4b803b8162142c10754aa9bf8ab52e59c78cc77108e7732fc555" }, { "alg" : "SHA3-384", - "content" : "1ea52a5ce2a9ee1a960dc2a1bbe4b009d4d6a4448498e4cd76401605fa877662911e8c93b2b8bfda57bedc56c83f10a0" + "content" : "fd090152655286d83bfc685b18db5ee8d8a7314b52e12584883104485100cdedc66037d5536a40d0d3a2a8de4d6c7f06" }, { "alg" : "SHA3-256", - "content" : "ed53f4295da75753267f241315352c4a39e60796f04e1c0c12d29c3a38be48ed" + "content" : "9fe6b60c76b3b26780f738436118bb88a6eec1b6901917c79476dd43dbfc91ad" }, { "alg" : "SHA3-512", - "content" : "8266b313bd4e1170daf60642e838841370d99bc24b2a1f91825ca22037a6a30ff15cc76069f8e8770f1dc12772c277ee1320de67e815041697d93d6d7ba884fb" + "content" : "61415108ab48e8653675b0167a3e8f6e844d12d63a143e3bf97f037484e7ae8dab45f9919f318d94d687827ac863d51d14e2f34d60909ddb1d57dbf66f3456b1" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0" + "name" : "GNU LGPL 3", + "url" : "http://www.gnu.org/licenses/lgpl.txt" } } ], - "purl" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar", + "purl" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.20.0.4607?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://errorprone.info/error_prone_annotations" + "url" : "https://docs.sonarsource.com/sonarqube-server/latest/extension-guide/developing-a-plugin/plugin-basics/sonar-analyzer-commons-parent/sonar-regex-parsing/" + }, + { + "type" : "build-system", + "url" : "https://cirrus-ci.com/github/SonarSource/" + }, + { + "type" : "issue-tracker", + "url" : "http://jira.sonarsource.com" + }, + { + "type" : "mailing-list", + "url" : "https://community.sonarsource.com" }, { "type" : "vcs", - "url" : "https://github.com/google/error-prone/error_prone_annotations" + "url" : "https://github.com/SonarSource/sonar-analyzer-commons/sonar-regex-parsing" + } + ], + "type" : "library", + "bom-ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.20.0.4607?type=jar" + }, + { + "publisher" : "cbomkit", + "group" : "com.ibm", + "name" : "go", + "version" : "2.0.0-SNAPSHOT", + "licenses" : [ + { + "license" : { + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" + } + } + ], + "purl" : "pkg:maven/com.ibm/go@2.0.0-SNAPSHOT?type=jar", + "externalReferences" : [ + { + "type" : "distribution-intake", + "url" : "https://maven.pkg.github.com/cbomkit/sonar-cryptography" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar" + "bom-ref" : "pkg:maven/com.ibm/go@2.0.0-SNAPSHOT?type=jar" }, { - "publisher" : "IBM", + "publisher" : "cbomkit", "group" : "com.ibm", "name" : "sonar-cryptography-plugin", - "version" : "1.0.3-SNAPSHOT", + "version" : "2.0.0-SNAPSHOT", "description" : "A SonarQube Plugin to detect cryptographic assets in applications", "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "https://www.gnu.org/licenses/lgpl.txt" + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], - "purl" : "pkg:maven/com.ibm/sonar-cryptography-plugin@1.0.3-SNAPSHOT?type=sonar-plugin", + "purl" : "pkg:maven/com.ibm/sonar-cryptography-plugin@2.0.0-SNAPSHOT?type=sonar-plugin", "externalReferences" : [ { "type" : "distribution-intake", - "url" : "https://eu.artifactory.swg-devops.com/artifactory/res-cryptoagility-team-maven-local" + "url" : "https://maven.pkg.github.com/cbomkit/sonar-cryptography" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.ibm/sonar-cryptography-plugin@1.0.3-SNAPSHOT?type=sonar-plugin" + "bom-ref" : "pkg:maven/com.ibm/sonar-cryptography-plugin@2.0.0-SNAPSHOT?type=sonar-plugin" } ], "dependencies" : [ { - "ref" : "pkg:maven/com.ibm/sonar-cryptography@1.0.3-SNAPSHOT?type=pom", + "ref" : "pkg:maven/com.ibm/sonar-cryptography@2.0.0-SNAPSHOT?type=pom", "dependsOn" : [ - "pkg:maven/org.jetbrains/annotations@24.1.0?type=jar", - "pkg:maven/org.sonarsource.api.plugin/sonar-plugin-api@9.13.0.360?type=jar", - "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", - "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar", - "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar", - "pkg:maven/org.sonarsource.java/sonar-java-plugin@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.python/sonar-python-plugin@4.17.0.14845?type=jar", - "pkg:maven/com.google.googlejavaformat/google-java-format@1.22.0?type=jar", - "pkg:maven/com.ibm/common@1.0.3-SNAPSHOT?type=jar", - "pkg:maven/com.ibm/engine@1.0.3-SNAPSHOT?type=jar", - "pkg:maven/com.ibm/mapper@1.0.3-SNAPSHOT?type=jar", - "pkg:maven/com.ibm/output@1.0.3-SNAPSHOT?type=jar", - "pkg:maven/com.ibm/enricher@1.0.3-SNAPSHOT?type=jar", - "pkg:maven/com.ibm/java@1.0.3-SNAPSHOT?type=jar", - "pkg:maven/com.ibm/python@1.0.3-SNAPSHOT?type=jar", - "pkg:maven/com.ibm/sonar-cryptography-plugin@1.0.3-SNAPSHOT?type=sonar-plugin" + "pkg:maven/org.sonarsource.api.plugin/sonar-plugin-api@13.4.3.4290?type=jar", + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", + "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar", + "pkg:maven/org.sonarsource.java/sonar-java-plugin@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.python/sonar-python-plugin@5.16.0.29940?type=jar", + "pkg:maven/org.sonarsource.go/sonar-go-plugin@1.32.0.5128?type=jar", + "pkg:maven/com.google.googlejavaformat/google-java-format@1.28.0?type=jar", + "pkg:maven/com.ibm/common@2.0.0-SNAPSHOT?type=jar", + "pkg:maven/com.ibm/engine@2.0.0-SNAPSHOT?type=jar", + "pkg:maven/com.ibm/mapper@2.0.0-SNAPSHOT?type=jar", + "pkg:maven/com.ibm/output@2.0.0-SNAPSHOT?type=jar", + "pkg:maven/com.ibm/enricher@2.0.0-SNAPSHOT?type=jar", + "pkg:maven/com.ibm/rules@2.0.0-SNAPSHOT?type=jar", + "pkg:maven/com.ibm/java@2.0.0-SNAPSHOT?type=jar", + "pkg:maven/com.ibm/python@2.0.0-SNAPSHOT?type=jar", + "pkg:maven/com.ibm/go@2.0.0-SNAPSHOT?type=jar", + "pkg:maven/com.ibm/sonar-cryptography-plugin@2.0.0-SNAPSHOT?type=sonar-plugin" ] }, { - "ref" : "pkg:maven/org.jetbrains/annotations@24.1.0?type=jar", - "dependsOn" : [ ] + "ref" : "pkg:maven/org.sonarsource.api.plugin/sonar-plugin-api@13.4.3.4290?type=jar", + "dependsOn" : [ + "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar" + ] }, { - "ref" : "pkg:maven/org.sonarsource.api.plugin/sonar-plugin-api@9.13.0.360?type=jar", + "ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", + "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar", - "dependsOn" : [ ] + "ref" : "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar", + "dependsOn" : [ + "pkg:maven/com.google.errorprone/error_prone_annotations@2.41.0?type=jar" + ] }, { - "ref" : "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar", + "ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.41.0?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/org.sonarsource.java/sonar-java-plugin@7.33.0.35775?type=jar", + "ref" : "pkg:maven/org.sonarsource.java/sonar-java-plugin@8.18.0.40025?type=jar", "dependsOn" : [ - "pkg:maven/org.sonarsource.java/java-surefire@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.java/java-frontend@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.java/java-symbolic-execution@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.java/java-checks@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.java/java-checks-aws@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.java/external-reports@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.java/java-jsp@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.8.0.2699?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.8.0.2699?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.8.0.2699?type=jar" + "pkg:maven/org.sonarsource.java/java-surefire@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.java/java-frontend@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.java/java-checks@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.java/java-checks-aws@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.java/check-list@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.java/external-reports@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.java/java-jsp@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.18.0.3393?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.18.0.3393?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.18.0.3393?type=jar" ] }, { - "ref" : "pkg:maven/org.sonarsource.java/java-surefire@7.33.0.35775?type=jar", + "ref" : "pkg:maven/org.sonarsource.java/java-surefire@8.18.0.40025?type=jar", "dependsOn" : [ - "pkg:maven/org.sonarsource.java/java-frontend@7.33.0.35775?type=jar", + "pkg:maven/org.sonarsource.java/java-frontend@8.18.0.40025?type=jar", "pkg:maven/com.fasterxml.staxmate/staxmate@2.4.1?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.8.0.2699?type=jar" + "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.18.0.3393?type=jar" ] }, { - "ref" : "pkg:maven/org.sonarsource.java/java-frontend@7.33.0.35775?type=jar", + "ref" : "pkg:maven/org.sonarsource.java/java-frontend@8.18.0.40025?type=jar", "dependsOn" : [ - "pkg:maven/org.sonarsource.java/jdt-package@1.1.0.34?type=jar", + "pkg:maven/org.sonarsource.java/jdt-package@1.6.0.160?type=jar", "pkg:maven/org.sonarsource.sslr/sslr-core@1.24.0.633?type=jar", - "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.8.0.2699?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.8.0.2699?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.8.0.2699?type=jar" + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.18.0.3393?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.18.0.3393?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.18.0.3393?type=jar" ] }, { - "ref" : "pkg:maven/org.sonarsource.java/jdt-package@1.1.0.34?type=jar", + "ref" : "pkg:maven/org.sonarsource.java/jdt-package@1.6.0.160?type=jar", "dependsOn" : [ ] }, { @@ -5458,20 +5356,24 @@ ] }, { - "ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.8.0.2699?type=jar", + "ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", + "dependsOn" : [ ] + }, + { + "ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.18.0.3393?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.8.0.2699?type=jar", + "ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.18.0.3393?type=jar", "dependsOn" : [ "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar" ] }, { - "ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.8.0.2699?type=jar", + "ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.18.0.3393?type=jar", "dependsOn" : [ "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", - "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar" + "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar" ] }, { @@ -5485,7 +5387,7 @@ "dependsOn" : [ ] }, { - "ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.8.0.2699?type=jar", + "ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.18.0.3393?type=jar", "dependsOn" : [ "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", "pkg:maven/xerces/xercesImpl@2.12.2?type=jar", @@ -5510,117 +5412,97 @@ ] }, { - "ref" : "pkg:maven/org.sonarsource.java/java-symbolic-execution@7.33.0.35775?type=jar", + "ref" : "pkg:maven/org.sonarsource.java/java-checks@8.18.0.40025?type=jar", "dependsOn" : [ - "pkg:maven/org.sonarsource.java/java-frontend@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.8.0.2699?type=jar" + "pkg:maven/org.sonarsource.java/java-frontend@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.java/java-checks-common@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.18.0.3393?type=jar", + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", + "pkg:maven/org.springframework/spring-expression@6.1.21?type=jar" ] }, { - "ref" : "pkg:maven/org.sonarsource.java/java-checks@7.33.0.35775?type=jar", + "ref" : "pkg:maven/org.sonarsource.java/java-checks-common@8.18.0.40025?type=jar", "dependsOn" : [ - "pkg:maven/org.sonarsource.java/java-frontend@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.java/java-checks-common@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.java/java-symbolic-execution@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.8.0.2699?type=jar", - "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar", - "pkg:maven/org.springframework/spring-expression@6.1.5?type=jar" + "pkg:maven/org.sonarsource.java/java-frontend@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.18.0.3393?type=jar", + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar" ] }, { - "ref" : "pkg:maven/org.sonarsource.java/java-checks-common@7.33.0.35775?type=jar", - "dependsOn" : [ - "pkg:maven/org.sonarsource.java/java-frontend@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.8.0.2699?type=jar", - "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar" - ] - }, - { - "ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.8.0.2699?type=jar", + "ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.18.0.3393?type=jar", "dependsOn" : [ "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar" ] }, { - "ref" : "pkg:maven/org.springframework/spring-expression@6.1.5?type=jar", + "ref" : "pkg:maven/org.springframework/spring-expression@6.1.21?type=jar", "dependsOn" : [ - "pkg:maven/org.springframework/spring-core@6.1.5?type=jar" + "pkg:maven/org.springframework/spring-core@6.1.21?type=jar" ] }, { - "ref" : "pkg:maven/org.springframework/spring-core@6.1.5?type=jar", + "ref" : "pkg:maven/org.springframework/spring-core@6.1.21?type=jar", "dependsOn" : [ - "pkg:maven/org.springframework/spring-jcl@6.1.5?type=jar" + "pkg:maven/org.springframework/spring-jcl@6.1.21?type=jar" ] }, { - "ref" : "pkg:maven/org.springframework/spring-jcl@6.1.5?type=jar", + "ref" : "pkg:maven/org.springframework/spring-jcl@6.1.21?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/org.sonarsource.java/java-checks-aws@7.33.0.35775?type=jar", - "dependsOn" : [ - "pkg:maven/org.sonarsource.java/java-frontend@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.java/java-checks-common@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.8.0.2699?type=jar", - "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar" - ] - }, - { - "ref" : "pkg:maven/org.sonarsource.java/external-reports@7.33.0.35775?type=jar", + "ref" : "pkg:maven/org.sonarsource.java/java-checks-aws@8.18.0.40025?type=jar", "dependsOn" : [ - "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.8.0.2699?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.8.0.2699?type=jar" + "pkg:maven/org.sonarsource.java/java-frontend@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.java/java-checks-common@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.18.0.3393?type=jar", + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar" ] }, { - "ref" : "pkg:maven/org.sonarsource.java/java-jsp@7.33.0.35775?type=jar", + "ref" : "pkg:maven/org.sonarsource.java/check-list@8.18.0.40025?type=jar", "dependsOn" : [ - "pkg:maven/org.sonarsource.java/java-frontend@7.33.0.35775?type=jar", - "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@9.0.84?type=jar" + "pkg:maven/org.sonarsource.java/java-checks@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.java/java-checks-aws@8.18.0.40025?type=jar", + "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar" ] }, { - "ref" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@9.0.84?type=jar", + "ref" : "pkg:maven/org.sonarsource.java/external-reports@8.18.0.40025?type=jar", "dependsOn" : [ - "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.84?type=jar", - "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.84?type=jar" + "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.18.0.3393?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.18.0.3393?type=jar" ] }, { - "ref" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.84?type=jar", + "ref" : "pkg:maven/org.sonarsource.java/java-jsp@8.18.0.40025?type=jar", "dependsOn" : [ - "pkg:maven/org.apache.tomcat/tomcat-annotations-api@9.0.84?type=jar" + "pkg:maven/org.sonarsource.java/java-frontend@8.18.0.40025?type=jar" ] }, { - "ref" : "pkg:maven/org.apache.tomcat/tomcat-annotations-api@9.0.84?type=jar", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.84?type=jar", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:maven/org.sonarsource.python/sonar-python-plugin@4.17.0.14845?type=jar", + "ref" : "pkg:maven/org.sonarsource.python/sonar-python-plugin@5.16.0.29940?type=jar", "dependsOn" : [ - "pkg:maven/org.sonarsource.python/python-frontend@4.17.0.14845?type=jar", - "pkg:maven/org.sonarsource.python/python-checks@4.17.0.14845?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.8.0.2699?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.8.0.2699?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.8.0.2699?type=jar", - "pkg:maven/commons-lang/commons-lang@2.6?type=jar", + "pkg:maven/org.sonarsource.python/python-frontend@5.16.0.29940?type=jar", + "pkg:maven/org.sonarsource.python/python-checks@5.16.0.29940?type=jar", + "pkg:maven/org.sonarsource.python/python-commons@5.16.0.29940?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.18.0.3393?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.18.0.3393?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.18.0.3393?type=jar", + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", "pkg:maven/org.codehaus.staxmate/staxmate@2.0.1?type=jar" ] }, { - "ref" : "pkg:maven/org.sonarsource.python/python-frontend@4.17.0.14845?type=jar", + "ref" : "pkg:maven/org.sonarsource.python/python-frontend@5.16.0.29940?type=jar", "dependsOn" : [ "pkg:maven/org.sonarsource.sslr/sslr-core@1.24.0.633?type=jar", "pkg:maven/com.google.guava/guava@32.1.3-jre?type=jar", - "pkg:maven/com.google.protobuf/protobuf-java@3.25.1?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.8.0.2699?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.8.0.2699?type=jar" + "pkg:maven/com.google.protobuf/protobuf-java@4.29.0?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.18.0.3393?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.18.0.3393?type=jar", + "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1?type=jar" ] }, { @@ -5630,7 +5512,7 @@ "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar", "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", "pkg:maven/org.checkerframework/checker-qual@3.37.0?type=jar", - "pkg:maven/com.google.errorprone/error_prone_annotations@2.21.1?type=jar", + "pkg:maven/com.google.errorprone/error_prone_annotations@2.41.0?type=jar", "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar" ] }, @@ -5647,33 +5529,75 @@ "dependsOn" : [ ] }, { - "ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.21.1?type=jar", + "ref" : "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar", + "ref" : "pkg:maven/com.google.protobuf/protobuf-java@4.29.0?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/com.google.protobuf/protobuf-java@3.25.1?type=jar", + "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1?type=jar", + "dependsOn" : [ + "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.20?type=jar", + "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.1?type=jar" + ] + }, + { + "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.20?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/org.sonarsource.python/python-checks@4.17.0.14845?type=jar", + "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.1?type=jar", + "dependsOn" : [ ] + }, + { + "ref" : "pkg:maven/org.sonarsource.python/python-checks@5.16.0.29940?type=jar", "dependsOn" : [ - "pkg:maven/org.sonarsource.python/python-frontend@4.17.0.14845?type=jar", - "pkg:maven/commons-io/commons-io@2.11.0?type=jar", - "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.8.0.2699?type=jar" + "pkg:maven/org.sonarsource.python/python-frontend@5.16.0.29940?type=jar", + "pkg:maven/commons-io/commons-io@2.20.0?type=jar", + "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.18.0.3393?type=jar" ] }, { - "ref" : "pkg:maven/commons-io/commons-io@2.11.0?type=jar", + "ref" : "pkg:maven/commons-io/commons-io@2.20.0?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/commons-lang/commons-lang@2.6?type=jar", - "dependsOn" : [ ] + "ref" : "pkg:maven/org.sonarsource.python/python-commons@5.16.0.29940?type=jar", + "dependsOn" : [ + "pkg:maven/org.sonarsource.python/python-frontend@5.16.0.29940?type=jar", + "pkg:maven/org.sonarsource.python/python-checks@5.16.0.29940?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.18.0.3393?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.18.0.3393?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.18.0.3393?type=jar", + "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-toml@2.20.1?type=jar", + "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.20.1?type=jar", + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", + "pkg:maven/org.apache.commons/commons-text@1.14.0?type=jar", + "pkg:maven/org.codehaus.staxmate/staxmate@2.0.1?type=jar" + ] + }, + { + "ref" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-toml@2.20.1?type=jar", + "dependsOn" : [ + "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1?type=jar", + "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.1?type=jar" + ] + }, + { + "ref" : "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.20.1?type=jar", + "dependsOn" : [ + "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.1?type=jar", + "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1?type=jar" + ] + }, + { + "ref" : "pkg:maven/org.apache.commons/commons-text@1.14.0?type=jar", + "dependsOn" : [ + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar" + ] }, { "ref" : "pkg:maven/org.codehaus.staxmate/staxmate@2.0.1?type=jar", @@ -5687,90 +5611,90 @@ "dependsOn" : [ ] }, { - "ref" : "pkg:maven/com.google.googlejavaformat/google-java-format@1.22.0?type=jar", + "ref" : "pkg:maven/org.sonarsource.go/sonar-go-plugin@1.32.0.5128?type=jar", + "dependsOn" : [ ] + }, + { + "ref" : "pkg:maven/com.google.googlejavaformat/google-java-format@1.28.0?type=jar", "dependsOn" : [ "pkg:maven/com.google.guava/guava@32.1.3-jre?type=jar" ] }, { - "ref" : "pkg:maven/com.ibm/common@1.0.3-SNAPSHOT?type=jar", + "ref" : "pkg:maven/com.ibm/common@2.0.0-SNAPSHOT?type=jar", "dependsOn" : [ - "pkg:maven/org.jetbrains/annotations@24.1.0?type=jar", - "pkg:maven/org.sonarsource.api.plugin/sonar-plugin-api@9.13.0.360?type=jar", - "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", - "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar", - "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar", - "pkg:maven/org.sonarsource.java/sonar-java-plugin@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.python/sonar-python-plugin@4.17.0.14845?type=jar", - "pkg:maven/com.google.googlejavaformat/google-java-format@1.22.0?type=jar" + "pkg:maven/org.sonarsource.api.plugin/sonar-plugin-api@13.4.3.4290?type=jar", + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", + "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar", + "pkg:maven/org.sonarsource.java/sonar-java-plugin@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.python/sonar-python-plugin@5.16.0.29940?type=jar", + "pkg:maven/org.sonarsource.go/sonar-go-plugin@1.32.0.5128?type=jar", + "pkg:maven/com.google.googlejavaformat/google-java-format@1.28.0?type=jar" ] }, { - "ref" : "pkg:maven/com.ibm/engine@1.0.3-SNAPSHOT?type=jar", + "ref" : "pkg:maven/com.ibm/engine@2.0.0-SNAPSHOT?type=jar", "dependsOn" : [ - "pkg:maven/com.ibm/common@1.0.3-SNAPSHOT?type=jar", - "pkg:maven/org.jetbrains/annotations@24.1.0?type=jar", - "pkg:maven/org.sonarsource.api.plugin/sonar-plugin-api@9.13.0.360?type=jar", - "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", - "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar", - "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar", - "pkg:maven/org.sonarsource.java/sonar-java-plugin@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.python/sonar-python-plugin@4.17.0.14845?type=jar", - "pkg:maven/com.google.googlejavaformat/google-java-format@1.22.0?type=jar" + "pkg:maven/com.ibm/common@2.0.0-SNAPSHOT?type=jar", + "pkg:maven/org.sonarsource.api.plugin/sonar-plugin-api@13.4.3.4290?type=jar", + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", + "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar", + "pkg:maven/org.sonarsource.java/sonar-java-plugin@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.python/sonar-python-plugin@5.16.0.29940?type=jar", + "pkg:maven/org.sonarsource.go/sonar-go-plugin@1.32.0.5128?type=jar", + "pkg:maven/com.google.googlejavaformat/google-java-format@1.28.0?type=jar" ] }, { - "ref" : "pkg:maven/com.ibm/mapper@1.0.3-SNAPSHOT?type=jar", + "ref" : "pkg:maven/com.ibm/mapper@2.0.0-SNAPSHOT?type=jar", "dependsOn" : [ - "pkg:maven/com.ibm/engine@1.0.3-SNAPSHOT?type=jar", - "pkg:maven/org.jetbrains/annotations@24.1.0?type=jar", - "pkg:maven/org.sonarsource.api.plugin/sonar-plugin-api@9.13.0.360?type=jar", - "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", - "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar", - "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar", - "pkg:maven/org.sonarsource.java/sonar-java-plugin@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.python/sonar-python-plugin@4.17.0.14845?type=jar", - "pkg:maven/com.google.googlejavaformat/google-java-format@1.22.0?type=jar" + "pkg:maven/com.ibm/engine@2.0.0-SNAPSHOT?type=jar", + "pkg:maven/org.sonarsource.api.plugin/sonar-plugin-api@13.4.3.4290?type=jar", + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", + "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar", + "pkg:maven/org.sonarsource.java/sonar-java-plugin@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.python/sonar-python-plugin@5.16.0.29940?type=jar", + "pkg:maven/org.sonarsource.go/sonar-go-plugin@1.32.0.5128?type=jar", + "pkg:maven/com.google.googlejavaformat/google-java-format@1.28.0?type=jar" ] }, { - "ref" : "pkg:maven/com.ibm/output@1.0.3-SNAPSHOT?type=jar", + "ref" : "pkg:maven/com.ibm/output@2.0.0-SNAPSHOT?type=jar", "dependsOn" : [ - "pkg:maven/org.cyclonedx/cyclonedx-core-java@8.1.0-SNAPSHOT?type=jar", - "pkg:maven/com.ibm/mapper@1.0.3-SNAPSHOT?type=jar", - "pkg:maven/com.ibm/engine@1.0.3-SNAPSHOT?type=jar", - "pkg:maven/org.jetbrains/annotations@24.1.0?type=jar", - "pkg:maven/org.sonarsource.api.plugin/sonar-plugin-api@9.13.0.360?type=jar", - "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", - "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar", - "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar", - "pkg:maven/org.sonarsource.java/sonar-java-plugin@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.python/sonar-python-plugin@4.17.0.14845?type=jar", - "pkg:maven/com.google.googlejavaformat/google-java-format@1.22.0?type=jar" + "pkg:maven/org.cyclonedx/cyclonedx-core-java@11.0.1?type=jar", + "pkg:maven/com.ibm/mapper@2.0.0-SNAPSHOT?type=jar", + "pkg:maven/com.ibm/engine@2.0.0-SNAPSHOT?type=jar", + "pkg:maven/org.sonarsource.api.plugin/sonar-plugin-api@13.4.3.4290?type=jar", + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", + "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar", + "pkg:maven/org.sonarsource.java/sonar-java-plugin@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.python/sonar-python-plugin@5.16.0.29940?type=jar", + "pkg:maven/org.sonarsource.go/sonar-go-plugin@1.32.0.5128?type=jar", + "pkg:maven/com.google.googlejavaformat/google-java-format@1.28.0?type=jar" ] }, { - "ref" : "pkg:maven/org.cyclonedx/cyclonedx-core-java@8.1.0-SNAPSHOT?type=jar", + "ref" : "pkg:maven/org.cyclonedx/cyclonedx-core-java@11.0.1?type=jar", "dependsOn" : [ - "pkg:maven/commons-codec/commons-codec@1.16.0?type=jar", - "pkg:maven/commons-io/commons-io@2.15.1?type=jar", - "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar", - "pkg:maven/org.apache.commons/commons-collections4@4.4?type=jar", + "pkg:maven/commons-codec/commons-codec@1.20.0?type=jar", + "pkg:maven/commons-io/commons-io@2.21.0?type=jar", + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", + "pkg:maven/org.apache.commons/commons-collections4@4.5.0?type=jar", "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar", - "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.16.1?type=jar", - "pkg:maven/com.networknt/json-schema-validator@1.0.87?type=jar" + "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.20.1?type=jar", + "pkg:maven/com.networknt/json-schema-validator@1.5.9?type=jar" ] }, { - "ref" : "pkg:maven/commons-codec/commons-codec@1.16.0?type=jar", + "ref" : "pkg:maven/commons-codec/commons-codec@1.20.0?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/commons-io/commons-io@2.15.1?type=jar", + "ref" : "pkg:maven/commons-io/commons-io@2.21.0?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/org.apache.commons/commons-collections4@4.4?type=jar", + "ref" : "pkg:maven/org.apache.commons/commons-collections4@4.5.0?type=jar", "dependsOn" : [ ] }, { @@ -5778,177 +5702,169 @@ "dependsOn" : [ ] }, { - "ref" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.16.1?type=jar", + "ref" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.20.1?type=jar", "dependsOn" : [ - "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.16.1?type=jar", - "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.16.1?type=jar", - "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.16.1?type=jar", + "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.1?type=jar", + "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.20?type=jar", + "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1?type=jar", "pkg:maven/org.codehaus.woodstox/stax2-api@3.1.4?type=jar", - "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.5.1?type=jar" - ] - }, - { - "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.16.1?type=jar", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.16.1?type=jar", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.16.1?type=jar", - "dependsOn" : [ - "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.16.1?type=jar", - "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.16.1?type=jar" + "pkg:maven/com.fasterxml.woodstox/woodstox-core@7.1.1?type=jar" ] }, { - "ref" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.5.1?type=jar", + "ref" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@7.1.1?type=jar", "dependsOn" : [ "pkg:maven/org.codehaus.woodstox/stax2-api@3.1.4?type=jar" ] }, { - "ref" : "pkg:maven/com.networknt/json-schema-validator@1.0.87?type=jar", + "ref" : "pkg:maven/com.networknt/json-schema-validator@1.5.9?type=jar", "dependsOn" : [ - "pkg:maven/com.ethlo.time/itu@1.7.0?type=jar", - "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.16.1?type=jar", - "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.15.2?type=jar", - "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar" + "pkg:maven/com.ethlo.time/itu@1.14.0?type=jar", + "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1?type=jar", + "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.18.3?type=jar", + "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar" ] }, { - "ref" : "pkg:maven/com.ethlo.time/itu@1.7.0?type=jar", + "ref" : "pkg:maven/com.ethlo.time/itu@1.14.0?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.15.2?type=jar", + "ref" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.18.3?type=jar", "dependsOn" : [ - "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.16.1?type=jar", - "pkg:maven/org.yaml/snakeyaml@2.0?type=jar", - "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.16.1?type=jar" + "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1?type=jar", + "pkg:maven/org.yaml/snakeyaml@2.3?type=jar", + "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.1?type=jar" ] }, { - "ref" : "pkg:maven/org.yaml/snakeyaml@2.0?type=jar", + "ref" : "pkg:maven/org.yaml/snakeyaml@2.3?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar", - "dependsOn" : [ ] + "ref" : "pkg:maven/com.ibm/enricher@2.0.0-SNAPSHOT?type=jar", + "dependsOn" : [ + "pkg:maven/com.ibm/mapper@2.0.0-SNAPSHOT?type=jar", + "pkg:maven/org.sonarsource.api.plugin/sonar-plugin-api@13.4.3.4290?type=jar", + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", + "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar", + "pkg:maven/org.sonarsource.java/sonar-java-plugin@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.python/sonar-python-plugin@5.16.0.29940?type=jar", + "pkg:maven/org.sonarsource.go/sonar-go-plugin@1.32.0.5128?type=jar", + "pkg:maven/com.google.googlejavaformat/google-java-format@1.28.0?type=jar" + ] }, { - "ref" : "pkg:maven/com.ibm/enricher@1.0.3-SNAPSHOT?type=jar", + "ref" : "pkg:maven/com.ibm/rules@2.0.0-SNAPSHOT?type=jar", "dependsOn" : [ - "pkg:maven/com.ibm/mapper@1.0.3-SNAPSHOT?type=jar", - "pkg:maven/org.jetbrains/annotations@24.1.0?type=jar", - "pkg:maven/org.sonarsource.api.plugin/sonar-plugin-api@9.13.0.360?type=jar", - "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", - "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar", - "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar", - "pkg:maven/org.sonarsource.java/sonar-java-plugin@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.python/sonar-python-plugin@4.17.0.14845?type=jar", - "pkg:maven/com.google.googlejavaformat/google-java-format@1.22.0?type=jar" + "pkg:maven/com.ibm/mapper@2.0.0-SNAPSHOT?type=jar", + "pkg:maven/org.sonarsource.api.plugin/sonar-plugin-api@13.4.3.4290?type=jar", + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", + "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar", + "pkg:maven/org.sonarsource.java/sonar-java-plugin@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.python/sonar-python-plugin@5.16.0.29940?type=jar", + "pkg:maven/org.sonarsource.go/sonar-go-plugin@1.32.0.5128?type=jar", + "pkg:maven/com.google.googlejavaformat/google-java-format@1.28.0?type=jar" ] }, { - "ref" : "pkg:maven/com.ibm/java@1.0.3-SNAPSHOT?type=jar", + "ref" : "pkg:maven/com.ibm/java@2.0.0-SNAPSHOT?type=jar", "dependsOn" : [ - "pkg:maven/com.ibm/engine@1.0.3-SNAPSHOT?type=jar", - "pkg:maven/com.ibm/output@1.0.3-SNAPSHOT?type=jar", - "pkg:maven/com.ibm/enricher@1.0.3-SNAPSHOT?type=jar", - "pkg:maven/org.bouncycastle/bcpkix-jdk18on@1.78?type=jar", - "pkg:maven/org.jetbrains/annotations@24.1.0?type=jar", - "pkg:maven/org.sonarsource.api.plugin/sonar-plugin-api@9.13.0.360?type=jar", - "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", - "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar", - "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar", - "pkg:maven/org.sonarsource.java/sonar-java-plugin@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.python/sonar-python-plugin@4.17.0.14845?type=jar", - "pkg:maven/com.google.googlejavaformat/google-java-format@1.22.0?type=jar" + "pkg:maven/com.ibm/engine@2.0.0-SNAPSHOT?type=jar", + "pkg:maven/com.ibm/output@2.0.0-SNAPSHOT?type=jar", + "pkg:maven/com.ibm/enricher@2.0.0-SNAPSHOT?type=jar", + "pkg:maven/com.ibm/rules@2.0.0-SNAPSHOT?type=jar", + "pkg:maven/org.sonarsource.api.plugin/sonar-plugin-api@13.4.3.4290?type=jar", + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", + "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar", + "pkg:maven/org.sonarsource.java/sonar-java-plugin@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.python/sonar-python-plugin@5.16.0.29940?type=jar", + "pkg:maven/org.sonarsource.go/sonar-go-plugin@1.32.0.5128?type=jar", + "pkg:maven/com.google.googlejavaformat/google-java-format@1.28.0?type=jar" + ] + }, + { + "ref" : "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar", + "dependsOn" : [ + "pkg:maven/com.google.guava/failureaccess@1.0.3?type=jar", + "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar", + "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar", + "pkg:maven/com.google.errorprone/error_prone_annotations@2.41.0?type=jar", + "pkg:maven/com.google.j2objc/j2objc-annotations@3.1?type=jar" ] }, { - "ref" : "pkg:maven/commons-codec/commons-codec@1.15?type=jar", + "ref" : "pkg:maven/com.google.guava/failureaccess@1.0.3?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/org.bouncycastle/bcpkix-jdk18on@1.78?type=jar", - "dependsOn" : [ - "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.78?type=jar", - "pkg:maven/org.bouncycastle/bcutil-jdk18on@1.78?type=jar" - ] + "ref" : "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar", + "dependsOn" : [ ] }, { - "ref" : "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.78?type=jar", + "ref" : "pkg:maven/com.google.j2objc/j2objc-annotations@3.1?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/org.bouncycastle/bcutil-jdk18on@1.78?type=jar", - "dependsOn" : [ - "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.78?type=jar" - ] + "ref" : "pkg:maven/commons-codec/commons-codec@1.19.0?type=jar", + "dependsOn" : [ ] }, { - "ref" : "pkg:maven/com.ibm/python@1.0.3-SNAPSHOT?type=jar", + "ref" : "pkg:maven/com.ibm/python@2.0.0-SNAPSHOT?type=jar", "dependsOn" : [ - "pkg:maven/com.ibm/engine@1.0.3-SNAPSHOT?type=jar", - "pkg:maven/com.ibm/output@1.0.3-SNAPSHOT?type=jar", - "pkg:maven/com.ibm/enricher@1.0.3-SNAPSHOT?type=jar", - "pkg:maven/org.jetbrains/annotations@24.1.0?type=jar", - "pkg:maven/org.sonarsource.api.plugin/sonar-plugin-api@9.13.0.360?type=jar", - "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", - "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar", - "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar", - "pkg:maven/org.sonarsource.java/sonar-java-plugin@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.python/sonar-python-plugin@4.17.0.14845?type=jar", - "pkg:maven/com.google.googlejavaformat/google-java-format@1.22.0?type=jar" + "pkg:maven/com.ibm/engine@2.0.0-SNAPSHOT?type=jar", + "pkg:maven/com.ibm/output@2.0.0-SNAPSHOT?type=jar", + "pkg:maven/com.ibm/enricher@2.0.0-SNAPSHOT?type=jar", + "pkg:maven/com.ibm/rules@2.0.0-SNAPSHOT?type=jar", + "pkg:maven/org.sonarsource.api.plugin/sonar-plugin-api@13.4.3.4290?type=jar", + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", + "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar", + "pkg:maven/org.sonarsource.java/sonar-java-plugin@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.python/sonar-python-plugin@5.16.0.29940?type=jar", + "pkg:maven/org.sonarsource.go/sonar-go-plugin@1.32.0.5128?type=jar", + "pkg:maven/com.google.googlejavaformat/google-java-format@1.28.0?type=jar" ] }, { - "ref" : "pkg:maven/org.sonarsource.sslr/sslr-core@1.23?type=jar", - "dependsOn" : [ - "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar" - ] + "ref" : "pkg:maven/org.ow2.asm/asm@9.0?type=jar", + "dependsOn" : [ ] }, { - "ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.7.0.1482?type=jar", + "ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.20.0.4607?type=jar", "dependsOn" : [ "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar" ] }, { - "ref" : "pkg:maven/com.google.guava/guava@32.0.1-jre?type=jar", + "ref" : "pkg:maven/com.ibm/go@2.0.0-SNAPSHOT?type=jar", "dependsOn" : [ - "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar", - "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar", - "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", - "pkg:maven/org.checkerframework/checker-qual@3.33.0?type=jar", - "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar", - "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar" + "pkg:maven/com.ibm/engine@2.0.0-SNAPSHOT?type=jar", + "pkg:maven/com.ibm/output@2.0.0-SNAPSHOT?type=jar", + "pkg:maven/com.ibm/enricher@2.0.0-SNAPSHOT?type=jar", + "pkg:maven/com.ibm/rules@2.0.0-SNAPSHOT?type=jar", + "pkg:maven/org.sonarsource.api.plugin/sonar-plugin-api@13.4.3.4290?type=jar", + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", + "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar", + "pkg:maven/org.sonarsource.java/sonar-java-plugin@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.python/sonar-python-plugin@5.16.0.29940?type=jar", + "pkg:maven/org.sonarsource.go/sonar-go-plugin@1.32.0.5128?type=jar", + "pkg:maven/com.google.googlejavaformat/google-java-format@1.28.0?type=jar" ] }, { - "ref" : "pkg:maven/org.checkerframework/checker-qual@3.33.0?type=jar", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:maven/com.ibm/sonar-cryptography-plugin@1.0.3-SNAPSHOT?type=sonar-plugin", + "ref" : "pkg:maven/com.ibm/sonar-cryptography-plugin@2.0.0-SNAPSHOT?type=sonar-plugin", "dependsOn" : [ - "pkg:maven/com.ibm/java@1.0.3-SNAPSHOT?type=jar", - "pkg:maven/com.ibm/python@1.0.3-SNAPSHOT?type=jar", - "pkg:maven/org.jetbrains/annotations@24.1.0?type=jar", - "pkg:maven/org.sonarsource.api.plugin/sonar-plugin-api@9.13.0.360?type=jar", - "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", - "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar", - "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar", - "pkg:maven/org.sonarsource.java/sonar-java-plugin@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.python/sonar-python-plugin@4.17.0.14845?type=jar", - "pkg:maven/com.google.googlejavaformat/google-java-format@1.22.0?type=jar" + "pkg:maven/com.ibm/java@2.0.0-SNAPSHOT?type=jar", + "pkg:maven/com.ibm/python@2.0.0-SNAPSHOT?type=jar", + "pkg:maven/com.ibm/go@2.0.0-SNAPSHOT?type=jar", + "pkg:maven/org.sonarsource.api.plugin/sonar-plugin-api@13.4.3.4290?type=jar", + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", + "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar", + "pkg:maven/org.sonarsource.java/sonar-java-plugin@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.python/sonar-python-plugin@5.16.0.29940?type=jar", + "pkg:maven/org.sonarsource.go/sonar-go-plugin@1.32.0.5128?type=jar", + "pkg:maven/com.google.googlejavaformat/google-java-format@1.28.0?type=jar" ] } ] diff --git a/common/bom/bom.json b/common/bom/bom.json index 579f9dbc..fbd3fb6b 100644 --- a/common/bom/bom.json +++ b/common/bom/bom.json @@ -1,10 +1,10 @@ { "bomFormat" : "CycloneDX", "specVersion" : "1.5", - "serialNumber" : "urn:uuid:22e25c77-d5f5-31a2-9138-73c232ad41cd", + "serialNumber" : "urn:uuid:1701adc9-2eaf-3b90-93e6-b431de6d9815", "version" : 1, "metadata" : { - "timestamp" : "2024-04-12T08:16:44Z", + "timestamp" : "2026-01-28T14:17:50Z", "lifecycles" : [ { "phase" : "build" @@ -52,32 +52,32 @@ } ], "component" : { - "publisher" : "IBM", + "publisher" : "cbomkit", "group" : "com.ibm", "name" : "common", - "version" : "1.0.3-SNAPSHOT", + "version" : "2.0.0-SNAPSHOT", "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "https://www.gnu.org/licenses/lgpl.txt" + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], - "purl" : "pkg:maven/com.ibm/common@1.0.3-SNAPSHOT?type=jar", + "purl" : "pkg:maven/com.ibm/common@2.0.0-SNAPSHOT?type=jar", "externalReferences" : [ { "type" : "distribution-intake", - "url" : "https://eu.artifactory.swg-devops.com/artifactory/res-cryptoagility-team-maven-local" + "url" : "https://maven.pkg.github.com/cbomkit/sonar-cryptography" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.ibm/common@1.0.3-SNAPSHOT?type=jar" + "bom-ref" : "pkg:maven/com.ibm/common@2.0.0-SNAPSHOT?type=jar" }, "properties" : [ { "name" : "maven.goal", - "value" : "makeBom" + "value" : "makeAggregateBom" }, { "name" : "maven.scopes", @@ -87,233 +87,252 @@ }, "components" : [ { - "group" : "org.jetbrains", - "name" : "annotations", - "version" : "24.1.0", - "description" : "A set of annotations used for code inspection support and code documentation.", + "publisher" : "SonarSource", + "group" : "org.sonarsource.api.plugin", + "name" : "sonar-plugin-api", + "version" : "13.4.3.4290", + "description" : "Plugin API for SonarQube, SonarCloud and SonarLint", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "38673abe87d12508cd05498eff0b9731" + "content" : "9121c8851ff1af1153c8dd4fa94c9ce7" }, { "alg" : "SHA-1", - "content" : "7af6a669488450c4a07c2c3254e2151df42d7d04" + "content" : "64194b3b6336b78df92f9fa5a58682c85ec5626b" }, { "alg" : "SHA-256", - "content" : "27a770dc7ce50500918bb8c3c0660c98290630ec796b5e3cf6b90f403b3033c6" + "content" : "ce1c77307f81897f3c8f901d81a0169db9f2ec614d65723679bc8bfedceb56dd" }, { "alg" : "SHA-512", - "content" : "663395a885561cc97eed411c67b496c06ec9a54906185a871de8743bf53e92152f4bc7c2a0118b7f3cfe85cc0a6c408ac6d589839b8d25c851637f85880331f2" + "content" : "8a9f34a03acbe05d9086119287ab2b2d84c8bff43367f75d42ca5bd5f66c54e4007d1affe247f7f3a0cb710328705b6a0db0db2e211b46e8979ea9e3eee6c401" }, { "alg" : "SHA-384", - "content" : "85779b72d864894f1d3cdd489b0a419c0620281c4fd22a061f4a3fe2aee91015681889573200cd2124c3add48a3216a6" + "content" : "7f1d268c151ad6fda7e5c5b21abb74b5a4b2bcb3e43fb4d3eceef01cab5e28e12b0d019d6d7da39a977f1fd8a6260ed2" }, { "alg" : "SHA3-384", - "content" : "0cfce80b012ba441be96368fe8af54e805100f7680fdbb7defae4dd07ff3c75cd0f89b993a61bef139a405637a73236f" + "content" : "c4ab8215fb558662a98375c9f347636f4e27fa912a23acadf804c5661caa2899529a6777f8c9f9a133c5a6e676ec0bf4" }, { "alg" : "SHA3-256", - "content" : "f7c5e25c9c16aad9f5482f3853660238db4f32be72c20f40383a1d20e0306f42" + "content" : "acb5c5fb43a612de73d7562499398bfb7678b878de04ecb697590fac4ed2e61c" }, { "alg" : "SHA3-512", - "content" : "0f74369cdb67a58c0f89033723665320eb535d1c1e66049347f6b3e25cbf7d1f80b8fa3a7b3e0b4fa8eae8d9ec8c30510b65bab581adeaff3f94651fa214105a" + "content" : "bf256b0cd721c685cc677bc5ab0af2eb68e469b7cdcd9e9bae7b60baa718b159b0e2cc9ca489a088b8d4556cef33da26d1bdf7fb1b952014b61e4b282aface76" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0" + "name" : "GNU LGPL 3", + "url" : "https://www.gnu.org/licenses/lgpl-3.0.txt" } } ], - "purl" : "pkg:maven/org.jetbrains/annotations@24.1.0?type=jar", + "purl" : "pkg:maven/org.sonarsource.api.plugin/sonar-plugin-api@13.4.3.4290?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://github.com/JetBrains/java-annotations" + "url" : "https://www.sonarqube.org/" }, { "type" : "vcs", - "url" : "https://github.com/JetBrains/java-annotations" + "url" : "https://github.com/SonarSource/sonar-plugin-api" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.jetbrains/annotations@24.1.0?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.api.plugin/sonar-plugin-api@13.4.3.4290?type=jar" }, { - "publisher" : "SonarSource", - "group" : "org.sonarsource.api.plugin", - "name" : "sonar-plugin-api", - "version" : "9.13.0.360", - "description" : "Plugin API for SonarQube, SonarCloud and SonarLint", + "publisher" : "QOS.ch", + "group" : "org.slf4j", + "name" : "slf4j-api", + "version" : "2.0.17", + "description" : "The slf4j API", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "b401a934655540b37bf6765778a7b759" + "content" : "b6480d114a23683498ac3f746f959d2f" }, { "alg" : "SHA-1", - "content" : "64b99cf118b048da0fa98a397b2e03f11c6970e9" + "content" : "d9e58ac9c7779ba3bf8142aff6c830617a7fe60f" }, { "alg" : "SHA-256", - "content" : "f20ae1d944f84a611583c33900d8788aa855a0d9ea66493e1046539715d53c0c" + "content" : "7b751d952061954d5abfed7181c1f645d336091b679891591d63329c622eb832" }, { "alg" : "SHA-512", - "content" : "f6b8fa7447300c1f95e14e9be12d36419b302d1844bd069ceaae134b3caa54d546a337be3c66e8e25ca5dd78fb95e76f92306cf5c26ba0730e3c730d443c2822" + "content" : "9a3e79db6666a6096a3021bb2e1d918f30f589d8de51d6b600f8ebd92515a510ae2d8f87919cc2dfa8365d64f10194cac8dfa0fb950160eef0e9da06f6caaeb9" }, { "alg" : "SHA-384", - "content" : "5cbdc17456d4ab1959cd8ad59d64a733224a3d03aa0f1e12968e0e7c86785e465d3f27f7c54b13c858326b4ee8bd60a7" + "content" : "6ea24f814a9b6ece428cfd0535e2f3b8927005745ef61006b50fdb5a90126ee5ea05650155382b3b755c5bce38ef3944" }, { "alg" : "SHA3-384", - "content" : "8930616bed39525c4c5c0396f8c541268b46b1df45432ee66ca6af8609a6ebd1e904493f025ba4b045401930a3ea2a2d" + "content" : "9b1015052f0ec43f9be09764e131834157599611cb52f6fe591c4ac6a8ab4817518f2a4b8871e5e738c8678e93af5557" }, { "alg" : "SHA3-256", - "content" : "4fb1225cc1bed06656fa92422d0425b44032725e6afb8d980c4af8cd8efc4b40" + "content" : "00559b4f4066b4917ba4fe2a6f23111eaeada321112d030910d218ced9084b5e" }, { "alg" : "SHA3-512", - "content" : "3a505b03e37ff9bd00248bf77344b880f206042a81b90eccbb42a78fe2496ff4f61c519f4ec77ded65d1f488b4caf6a69afae97a9a5a59f915ec8068176a0cbb" + "content" : "9579c2f7e7516e177c2d493ccc9eb8150978cf19f6f09b28d116f6935239fd56dc6af2b62b3336f79b0b462445550cd1fb5377a07001a6f44aaab6a32fa2fa47" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "https://www.gnu.org/licenses/lgpl-3.0.txt" + "id" : "MIT", + "url" : "https://opensource.org/licenses/MIT" } } ], - "purl" : "pkg:maven/org.sonarsource.api.plugin/sonar-plugin-api@9.13.0.360?type=jar", + "purl" : "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://www.sonarqube.org/" + "url" : "http://www.slf4j.org" + }, + { + "type" : "distribution-intake", + "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-plugin-api" + "url" : "https://github.com/qos-ch/slf4j/slf4j-parent/slf4j-api" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.api.plugin/sonar-plugin-api@9.13.0.360?type=jar" + "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar" }, { - "group" : "com.google.code.findbugs", - "name" : "jsr305", - "version" : "3.0.2", - "description" : "JSR305 Annotations for Findbugs", + "publisher" : "The Apache Software Foundation", + "group" : "org.apache.commons", + "name" : "commons-lang3", + "version" : "3.18.0", + "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang. The code is tested using the latest revision of the JDK for supported LTS releases: 8, 11, 17 and 21 currently. See https://github.com/apache/commons-lang/blob/master/.github/workflows/maven.yml Please ensure your build environment is up-to-date and kindly report any build issues.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "dd83accb899363c32b07d7a1b2e4ce40" + "content" : "48b9886957920a4cdb602780ca345087" }, { "alg" : "SHA-1", - "content" : "25ea2e8b0c338a877313bd4672d3fe056ea78f0d" + "content" : "fb14946f0e39748a6571de0635acbe44e7885491" }, { "alg" : "SHA-256", - "content" : "766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7" + "content" : "4eeeae8d20c078abb64b015ec158add383ac581571cddc45c68f0c9ae0230720" }, { "alg" : "SHA-512", - "content" : "bb09db62919a50fa5b55906013be6ca4fc7acb2e87455fac5eaf9ede2e41ce8bbafc0e5a385a561264ea4cd71bbbd3ef5a45e02d63277a201d06a0ae1636f804" + "content" : "c2c9d497fc1be411050f4011b2407764b78aa098eb42925af8a197eabdbc25b507f09fb898805e9bed4815f35236a508ee5b096e36f363df4d407232d50fc832" }, { "alg" : "SHA-384", - "content" : "ca0b169d3eb2d0922dc031133a021f861a043bb3e405a88728215fd6ff00fa52fdc7347842dcc2031472e3726164bdc4" + "content" : "4fb3f101106e4ce3666d5c15d276ba86f7683a0ef35f0384edfcd579ea454275edbb7400795d265ec3a38e39997e79b8" }, { "alg" : "SHA3-384", - "content" : "9903fd7505218999f8262efedb3d935d64bcef84aae781064ab5e1b24755466b269517cada562fa140cd1d417ede57a1" + "content" : "aada7e3612cf3f6190a19fa7c3db74df1e13ec56b300be9bb4317d261d5877c84ab59ba9a09168becdbd82cd41961395" }, { "alg" : "SHA3-256", - "content" : "223fda9a89a461afaae73b177a2dc20ed4a90f2f8757f5c65f3241b0510f00ff" + "content" : "306d286d0bd7549c203cc802fd755d354c4f7926fa023f4e83623ba1a6261250" }, { "alg" : "SHA3-512", - "content" : "3996b5af57a5d5c6a0cd62b11773360fb051dd86a2ba968476806a2a5d32049b82d69a24a3c694e8fe4d735be6a28e41000cc500cc2a9fb577e058045855d2d6" + "content" : "f6f1ecc684e309d7b9fc5c343792508fee935cd2119d962721662c5af88e4864ba6f47a863e083714f315f926c156de1970cd2fb577449bdfdc7bf98a4a451fa" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0" + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], - "purl" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", + "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://findbugs.sourceforge.net/" + "url" : "https://commons.apache.org/proper/commons-lang/" + }, + { + "type" : "build-system", + "url" : "https://github.com/apache/commons-lang/actions" }, { "type" : "distribution-intake", - "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" + "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" + }, + { + "type" : "issue-tracker", + "url" : "https://issues.apache.org/jira/browse/LANG" + }, + { + "type" : "mailing-list", + "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/" }, { "type" : "vcs", - "url" : "https://code.google.com/p/jsr-305/" + "url" : "https://gitbox.apache.org/repos/asf/commons-lang.git" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar" + "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar" }, { - "publisher" : "The Apache Software Foundation", - "group" : "org.apache.commons", - "name" : "commons-lang3", - "version" : "3.14.0", - "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.", + "group" : "com.google.code.gson", + "name" : "gson", + "version" : "2.13.2", + "description" : "Gson JSON library", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "4e5c3f5e6b0b965ef241d7d72ac8971f" + "content" : "a2c47e14ce5e956105458fe455f5d542" }, { "alg" : "SHA-1", - "content" : "1ed471194b02f2c6cb734a0cd6f6f107c673afae" + "content" : "48b8230771e573b54ce6e867a9001e75977fe78e" }, { "alg" : "SHA-256", - "content" : "7b96bf3ee68949abb5bc465559ac270e0551596fa34523fddf890ec418dde13c" + "content" : "dd0ce1b55a3ed2080cb70f9c655850cda86c206862310009dcb5e5c95265a5e0" }, { "alg" : "SHA-512", - "content" : "0338b50767166e5746ada6d6aa2e071e7221d699323bfb629f7f204b294c1dc4cad140610a129ed751798443b43e74e0818989c7df7d33c5915aa29742be9ba8" + "content" : "8974a052656d2e5ec968b6bac2edf51413ffc62040fdc65f14f00597e738ab544d22487f8579ba90618b5a7f94ef33773510fac67b408fee6ed274b38f3d9947" }, { "alg" : "SHA-384", - "content" : "908d0a22dc17aaa04caa5104cff7cad5b88b77eecb78dd5b3b3fefa22ff71ac50a4fb9e31c897ac243f9d841e4b3453d" + "content" : "98e8afe5b23c43b84e7a57e0e27f683a182fcf97ee3eeb6a1311582f7fecd846c806ffb092b620088dc03d256d8eaf27" }, { "alg" : "SHA3-384", - "content" : "8a7f2e061b998780870eddd571620fbf3d3c70bcb54e24539d0db504f59d65bc6bda58136284498babe29fcc5eabb7a6" + "content" : "d61d6b1cf6997c75287f454e536f855db8404e5fb9d0b8faa4dcc1e7a60ffefc05c2f92f3514e091808a8677b29f3619" }, { "alg" : "SHA3-256", - "content" : "022bf1f8039fcea717e9e34dd96eb80cfff05b43c9cbb76e9739b2421e2d027c" + "content" : "1c051cfe5e630b35d003f96e135de7c5d5cab145b6e1159143570cb246426a0d" }, { "alg" : "SHA3-512", - "content" : "0bcbc4edce974ea970c46e2da12ec98d9fd962c2cf64f757ac97136dec5623ca52af0c225895303c17ffabb57090e6772d7bd326d5e7438cef5454f8bbaeecfa" + "content" : "55ddee7f6c1659ffa82e5c308a0181b459cfeb3442f1f9868ff7e9a3c83376bd2ad527b16d5131df442ffd03d06c35dbd64458df6b02a111c1654f01db381ba5" } ], "licenses" : [ @@ -324,161 +343,137 @@ } } ], - "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar", + "purl" : "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://commons.apache.org/proper/commons-lang/" - }, - { - "type" : "build-system", - "url" : "https://github.com/apache/commons-parent/actions" - }, - { - "type" : "distribution-intake", - "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" + "url" : "https://github.com/google/gson" }, { "type" : "issue-tracker", - "url" : "https://issues.apache.org/jira/browse/LANG" - }, - { - "type" : "mailing-list", - "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/" + "url" : "https://github.com/google/gson/issues" }, { "type" : "vcs", - "url" : "https://gitbox.apache.org/repos/asf?p=commons-lang.git" + "url" : "https://github.com/google/gson/" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar" + "bom-ref" : "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar" }, { - "group" : "com.google.code.gson", - "name" : "gson", - "version" : "2.10.1", - "description" : "Gson JSON library", + "publisher" : "Google LLC", + "group" : "com.google.errorprone", + "name" : "error_prone_annotations", + "version" : "2.41.0", + "description" : "Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "df6097815738cb31fc56391553210843" + "content" : "75e3b25da8b8a2136463c4674f5e49bf" }, { "alg" : "SHA-1", - "content" : "b3add478d4382b78ea20b1671390a858002feb6c" + "content" : "4381275efdef6ddfae38f002c31e84cd001c97f0" }, { "alg" : "SHA-256", - "content" : "4241c14a7727c34feea6507ec801318a3d4a90f070e4525681079fb94ee4c593" + "content" : "a56e782b5b50811ac204073a355a21d915a2107fce13ec711331ad036f660fcc" }, { "alg" : "SHA-512", - "content" : "7503e4b8d05c6cc0ecb3a94c5a2e070e049083a441003a79a0cdf474f4286699b4ba1d2a655ddabb8ba10c50e7c36a7045cccdaee465166d4630db647aba2727" + "content" : "e2eb4bf9f36f95a4d4c5ea344db5cd90a456e63bef8e52932b8f6f4ecfdd59cb2f6c2ce9e67b0070c82177e42885688b95afef591b16001f789b378f18afdf30" }, { "alg" : "SHA-384", - "content" : "48a4786bd6e1867f058ee4fb676fc82d9d9f64a6d7420d4a47ae2398504c9de73222636614aeb4a9fbf10ee143d72226" + "content" : "43700b378624aa37197ef03a6b5ea40b5fbb6c0aa667eadf810ad36f0707dffaf3ea23471f2553327c3f5644cc875ee7" }, { "alg" : "SHA3-384", - "content" : "3df9a0332c2766124fe7c915cfea665d2e318ccaa7212415fabd9e93e6eb77de538725fd2ef313cde46f6d814c9566ea" + "content" : "8bf3293cf4b72c9a999948f8812190636ef3b0c35bab8dbf9a54c263eeab2a3b3d0774fdcab52c6d114551ff74a8aea2" }, { "alg" : "SHA3-256", - "content" : "d3374006d76d4f9acdf3d3a1a4f47899570f52442b2188f80c09a74f22139ecb" + "content" : "2ca1a59f4fdc37a3c83501542c63842fa4fe40c06f69a59a2a072e4af442a16a" }, { "alg" : "SHA3-512", - "content" : "2b10c2f4fe39d8712b430ff171823d7172c0a06685c1eb7de511e90159cec0e094fb2a9b50b747c5b039cb10f1fce9edf82ecbf9c47f76a6f31c4e3cb7586cce" + "content" : "6d1f419996b15e5a2bd9b268d166046e38fe9cc6c58fe56aaacbe71b95e3db8c8fe1d226e7f549ea227956feaf3087706bdfa79930fe432298bba9ec06c26a90" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0", - "url" : "https://www.apache.org/licenses/LICENSE-2.0" + "id" : "Apache-2.0" } } ], - "purl" : "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar", + "purl" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.41.0?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://github.com/google/gson/gson" - }, - { - "type" : "distribution-intake", - "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" - }, - { - "type" : "issue-tracker", - "url" : "https://github.com/google/gson/issues" + "url" : "https://errorprone.info/error_prone_annotations" }, { "type" : "vcs", - "url" : "https://github.com/google/gson/gson/" + "url" : "https://github.com/google/error-prone/error_prone_annotations" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar" + "bom-ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.41.0?type=jar" }, { "publisher" : "SonarSource", "group" : "org.sonarsource.java", "name" : "sonar-java-plugin", - "version" : "7.33.0.35775", + "version" : "8.18.0.40025", "description" : "Code Analyzer for Java", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "1b7d9cc6384c6be9b2b2be09d39a4409" + "content" : "b1a9179feade38e76fb3bd484426ed87" }, { "alg" : "SHA-1", - "content" : "74549fd0b22373ba0db5f5d8c9e83c4e1d4859d6" + "content" : "869cc6db9898899450852a5d89e77649dbc2e545" }, { "alg" : "SHA-256", - "content" : "84d7f2cce4bf4e66bacd053fd350489792519d83c292c2f4d5d8df0404450959" + "content" : "27dbc832bbeb28c70947d4d35fcc4a36b384911761831d8d5fc947cc1732d114" }, { "alg" : "SHA-512", - "content" : "f70839584286b4141cb252727f299be7a6f27cc8714d66b9c8b4a97d19030c5e39277ed85019cb2ffd9cd59f4b5c7780dd2bdd8cccd14d49a7aa618640069eca" + "content" : "b38980fb48ee7720a297190197e1ff20025ccaffad858a195234d4747773f4ed2ff2806b253ccd9d2121cddc71d1ac1fcc75ece9a07365db2089df89773add48" }, { "alg" : "SHA-384", - "content" : "ab79904167297307834e85b850b012fbdd22d6dbb938567ca8525219f8cd1cc2b725cc9ca781bca94dbab340580130ff" + "content" : "700d2a57ebc1672779fc11da69c29c822f8b0382bfb07afa5ef984abd2e38863b1ce8c2129c3ad173f796abebc14af96" }, { "alg" : "SHA3-384", - "content" : "5b177240092d00c9399f08b3148b58a299f0bb7a2a82458e5d4f4d5d0e4b5f6eba4f8b6f82c02369e8343c4bb0aea360" + "content" : "de424a453da7d8c708948d8bf9cffcabb6f00fac592f0be36b3d53fa41b95bc42ab6e1fcb4525c3c15793de00ad34478" }, { "alg" : "SHA3-256", - "content" : "f5829afa58615feeb89cdea0b96fa63ffda9c1401d5ac33d1420398ff42e59f9" + "content" : "3f2edc3ae30c79ac6e5db6bc7f968dd164f252b173bd3780ef1e06f68fec2962" }, { "alg" : "SHA3-512", - "content" : "4dc73ffee4b763a67a89b13a7574c03c9b7bfd08591088c30c64f9cb2aacd028d9c1bbbb4e5a68e5751635d9a3547e798eb4577b555187f410476a38e10ed9fc" + "content" : "73060df15758e595f9ad23967b9632b3b25584660362b8a660c699d7bfa092927edb2334ec711a2eca8394b03f0d32878e64b6b20411816b239f808747e7bcc2" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.sonarsource.java/sonar-java-plugin@7.33.0.35775?type=jar", + "purl" : "pkg:maven/org.sonarsource.java/sonar-java-plugin@8.18.0.40025?type=jar", "externalReferences" : [ - { - "type" : "website", - "url" : "http://redirect.sonarsource.com/plugins/java.html" - }, { "type" : "build-system", "url" : "https://cirrus-ci.com/github/SonarSource/sonar-java" @@ -494,65 +489,61 @@ { "type" : "mailing-list", "url" : "https://community.sonarsource.com" - }, - { - "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-java" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.java/sonar-java-plugin@7.33.0.35775?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.java/sonar-java-plugin@8.18.0.40025?type=jar" }, { "publisher" : "SonarSource", "group" : "org.sonarsource.java", "name" : "java-surefire", - "version" : "7.33.0.35775", - "description" : "Code Analyzer for Java", + "version" : "8.18.0.40025", + "description" : "Code Analyzer for Java :: Plugin to import JUnit report files", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "ebad97c089ab298bbf410b83645b5c91" + "content" : "8ec0e95937cd6bad70824f4fcbcdfd13" }, { "alg" : "SHA-1", - "content" : "1d6e25230cb5a0818e76cbf250b1f443c1117fe9" + "content" : "74166214d6bc038b62ac39fb6068ee92a7cc2377" }, { "alg" : "SHA-256", - "content" : "547a33116a008789a640ac520aca61b4aee460baf32d880f35ecbc247be17cf5" + "content" : "e5b3e323d65d5d1e07c67f2a3c231d976665dd36a755e4a25a529e020ecf246e" }, { "alg" : "SHA-512", - "content" : "79967a8394b8bada006fe03ed3519f73f9f4856d09cfaef3db91ab1e0dbd828bb9c69178a8151b678420e95489ace27ce9a59693be65fc3511696b446118c572" + "content" : "5f8666b8cabc3605c88d1066b3a4f102677a4592a055cddbd0857667a4c97da0b5963d4b6e9b9443bfa9a9f8eb5122bea5230c54d1948a8829137e0adfda2c53" }, { "alg" : "SHA-384", - "content" : "a3926f55e7e691e558e8fd2bed7da6f71cae00174987d108c5ccb5e4bff67052c1a7294ff83f93fecc89f0d37e72d2f2" + "content" : "7f91179e70d48c4f157b7c21e2d66043f197f5e77e93ca22cc514121f8aeb904f0be2d41cca33e026b79a6954b93620a" }, { "alg" : "SHA3-384", - "content" : "197a92ee27d6b823fe39f896604e292864f8e563ee9eebc8b7b8f98b5811c3bd3d31d1d991f91f305d61e78376c792fb" + "content" : "1181d83f7f281f38d1fd32a113cf36d0aafc3315b0f96394d1509a55cb71107a32dffc689991f08ea34d24afa146de4d" }, { "alg" : "SHA3-256", - "content" : "421298125883242fc4173246fd9f114c55e086270f0482a5b92f88462bf18f99" + "content" : "ee3151b15fa3040368071c28b161c21ffb9d0f0053ca3a869a8633790a8dbcb6" }, { "alg" : "SHA3-512", - "content" : "ff3c88c85a17e2983655e522450641dd191aa2f8818734af99b576778662e7025c6d635c6edc3052b3c42415693b7ba5c2137c7cac7140460d9405fb0d2780f9" + "content" : "94b7e5bc75cd127797485f48d5acca3853cefa2e8c433487268f12b177cd06e4aa4783f009f7a835099f406ccf1a22b69d0c3c523f3ab84fe8b348da312bd677" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.sonarsource.java/java-surefire@7.33.0.35775?type=jar", + "purl" : "pkg:maven/org.sonarsource.java/java-surefire@8.18.0.40025?type=jar", "externalReferences" : [ { "type" : "website", @@ -580,7 +571,7 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.java/java-surefire@7.33.0.35775?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.java/java-surefire@8.18.0.40025?type=jar" }, { "publisher" : "FasterXML", @@ -656,52 +647,52 @@ "publisher" : "SonarSource", "group" : "org.sonarsource.java", "name" : "java-frontend", - "version" : "7.33.0.35775", - "description" : "Code Analyzer for Java", + "version" : "8.18.0.40025", + "description" : "Code Analyzer for Java :: Front-end (Java Parser)", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "43bc91e0b5a11258625288f075b54633" + "content" : "a30b3194ba4e4aaf19e64afaf2c0cd9d" }, { "alg" : "SHA-1", - "content" : "2f748efd6e152c3526efd52a446cc8930381a16d" + "content" : "6c781ad5452a9f6c40efa651ec1514efd4956de0" }, { "alg" : "SHA-256", - "content" : "f22c60ed403f37c5378f2241c110d5f1427d9f8ac88710236a1662887a0961a5" + "content" : "6da24fc369a912c40bad484b580d15e8df7fd4a603e999b79952c1e88f1a10a4" }, { "alg" : "SHA-512", - "content" : "5ab1acc211dec17121948a678e59be6f050b1ba5360bf93fb724b51ff6160a29892c3847e5b0ad1deb450472bbdd5387f28403504670537b82477348dd97ca41" + "content" : "77fcb592867445be61fb472dc11eb2ed91e4d7675f6050728fe34fef4488bad75cf5fbb128bdbe6874820ece7e752f684065b98a6b0690bcbbc081f0efdf7a9c" }, { "alg" : "SHA-384", - "content" : "9d57998dcddbcbbf9ebcf79a68b928ce6aa9c8770c2b7565771b457ed299545f5ddbcc99a13889af53ab12e391c618d6" + "content" : "827447252ad585c8ef98e9f737d2b5ec4529f6f68f0fd571bfae08f3264186a4a5c9d864b488b66d933877c8d13f7863" }, { "alg" : "SHA3-384", - "content" : "64b3e663d553d1c3aa38d9e3b34cad8b38d440dc937bdb6e80edab6621f3c519d38ce4ec04f5353bf7e103cf315a808b" + "content" : "2eaeb68497c50d4bcd38ba010ab33f4833310fdf4c057d32ce622f01febd34d37d4b353b31ad53040a6dce7b1c287bf6" }, { "alg" : "SHA3-256", - "content" : "3febae6771046e4a5909ec72a2b6cd1749f384c910f3a090443a26d4651a1953" + "content" : "a2c28164e5d0c37e00f10f6b5187a6b8c31f87d2d3d86b12f9721516f91034e7" }, { "alg" : "SHA3-512", - "content" : "7555011fd0167dd38b798556104d02f2c5bd4b7e035065234f44ae22c7779c1a7fef4f3b17769d49deaf0635c99d211cb219ffac05da6c50ae1313f032565526" + "content" : "9163b1eac48b627a86db9c7b93fe258657561540fb605d926c645cb59e82fe6f72d1fb7d97120b4bc1488e27ede2420dbacb1ed021ff76642d10a2bc3cc54612" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.sonarsource.java/java-frontend@7.33.0.35775?type=jar", + "purl" : "pkg:maven/org.sonarsource.java/java-frontend@8.18.0.40025?type=jar", "externalReferences" : [ { "type" : "website", @@ -729,47 +720,47 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.java/java-frontend@7.33.0.35775?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.java/java-frontend@8.18.0.40025?type=jar" }, { "publisher" : "SonarSource", "group" : "org.sonarsource.java", "name" : "jdt-package", - "version" : "1.1.0.34", - "description" : "Parent pom of SonarSource public projects", + "version" : "1.6.0.160", + "description" : "Packaging of Eclipse JDT Core for SonarQube Java Analyzer", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "b37dc58a62e2d0cf93c0721fd974c31c" + "content" : "1df75f474b6bdb538899d8704b84757a" }, { "alg" : "SHA-1", - "content" : "505fc262c9e9347ff10f5c2e095a008db26a538b" + "content" : "1f8abb9d709c6ba2ab7ce3aa933857cb3735a1ce" }, { "alg" : "SHA-256", - "content" : "7ac622acdb900de5bb04529b822412731308f1f02a610e596b8a7789c28bde07" + "content" : "5efd84c8e2e39a310e9139b503355e9f31eeb3bcce779860ce96944096cf064f" }, { "alg" : "SHA-512", - "content" : "c264a6a75e00b39325e2be6e9cc4cc9903fcbb97e1e60766f09a42bad4d00ef0bc76b741a9c76ca76bf60fe0052987362f4f564a78e0ef3a654fdad833a00cf4" + "content" : "fcb097a96b7c6903ed8e50c95cea915cdb4ab2f4398869b812489d8f639509f970646adcd66afc8004b0c14807e05510d4406d7215726775695b0abcbe602dc5" }, { "alg" : "SHA-384", - "content" : "1f17c8e14bf19d6f93cd61f745ca681e2bf3ec5a2566a9233553e7d2c71f7896c7ee770c37db46536b98fd5cbb19f687" + "content" : "e500ad2d02142aa1fbbe1b9436f9e5bbb74d5c208b0c6aa0191725b126c9a3a4d2a21c708b2bd26a4f11a9ef880fbe07" }, { "alg" : "SHA3-384", - "content" : "40d04d2a79475f774b6a2b2a08b02387e2ac2c17e4b9b220fc1e59baf0554c569573d9abe22af1cff8e5fef69b4a43dd" + "content" : "60bd6cd889de6164963d49fe557e13456d962893e74d56bda559c6b57bd18ab1e8a065e64a2d8317e13dd754052d3f23" }, { "alg" : "SHA3-256", - "content" : "7bdaedda0da1edc3e63e8e62bcf3651b4d4169c24efa0baba01c368d2c6b7b74" + "content" : "32c6d9249b541d8ff7b488f8c584d8f068caace22037ec0e2340e6e850b919b7" }, { "alg" : "SHA3-512", - "content" : "11854f8cb06c601f4e54488b0943a8eac7790dfacd3355e52b274e8a39fe0aec36fd25da6c5711c7c294eaf540958c88013a4b57e7399f76c51b9e75d451c0a5" + "content" : "8378364906e74189f4255964961c90273743b41af7859c8bb946a092965b5787f37718ce6dccbed3cb531501361293fa96175327bd62d29a7ffe18be70caab78" } ], "licenses" : [ @@ -779,7 +770,7 @@ } } ], - "purl" : "pkg:maven/org.sonarsource.java/jdt-package@1.1.0.34?type=jar", + "purl" : "pkg:maven/org.sonarsource.java/jdt-package@1.6.0.160?type=jar", "externalReferences" : [ { "type" : "website", @@ -803,7 +794,7 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.java/jdt-package@1.1.0.34?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.java/jdt-package@1.6.0.160?type=jar" }, { "publisher" : "SonarSource", @@ -884,41 +875,41 @@ "publisher" : "SonarSource", "group" : "org.sonarsource.analyzer-commons", "name" : "sonar-regex-parsing", - "version" : "2.8.0.2699", + "version" : "2.18.0.3393", "description" : "Logic useful to read and analyze regular expressions", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "35a3545ee8cc01b7630817c10d3ad63b" + "content" : "c9c38681ffebe27c85c27119dcbac4e2" }, { "alg" : "SHA-1", - "content" : "f30c693d63d35e55921b600d1cc02f6ab45fb162" + "content" : "887b8fb94772af059501ce252122d572da041615" }, { "alg" : "SHA-256", - "content" : "83710ff002b9faf8afb413a05a08b0530a3cf8ef130815d5a46c955c478664b5" + "content" : "0c3ea5153be8a0766373b1992a18c91702a48b37647ca400a5cd077b2d78e9ba" }, { "alg" : "SHA-512", - "content" : "0a10e363e24117e86650a1a8e9a10a637c4f99cee64405607be5da8c4bf4ecc413e67ed78acbd174b699b5c7325db5f0d623c10ded7e642a3e98f1f74e680f11" + "content" : "830bd069a1714fd24676db83114479961e3baea2abd4884c549f147edb6b83eafe4c9230f429818a9adfba89a0c4a21d39eddbcf4c1b937cc65a65b09d1a00ef" }, { "alg" : "SHA-384", - "content" : "c3775396d6d0c3001eb244d062e0f5262b78aae72a9d0ba5760dfa8eb5310112c403d0889cc73ade62a9fafcb515c635" + "content" : "ab21ccd7f07b9bceac88e85180e1f1643b43c30db4d8cdff030cd7cbc53753987284bfc1d412d7def8ec5380244fcfad" }, { "alg" : "SHA3-384", - "content" : "87bd8e6f2545740da80e5ad7c17600f1a3d0bd86aab07557e5f2fc3cdeccfc5654f030b0fe11c93e084da7a1e8b1d95b" + "content" : "ae43098f0c1a4939136f8f285cf9ca44663c2c77fd1120dd338239e70799b713af401a1c334559565263a1dc7f8613ae" }, { "alg" : "SHA3-256", - "content" : "85d791fcc5a6001f15ca84efff8a03c55b791a88745deca215c8108c8318ad1d" + "content" : "546a71b50a13237407e76548bf1fe5d61bf08df21dfa086bd17c2e3a103d25a0" }, { "alg" : "SHA3-512", - "content" : "024d92e865992b92d5c29a65ebec60a706ea8f0859de1c55312377ef22188396855b4403033d1e03a05208f37c3a24ea2e948f463cb3c5c9bc53c8d4266e5e03" + "content" : "18dbb41e4e61ece31c96cd50cc7a1d85799119cd5a88fef79ac4553071a363f485161ada5324cd8ef8b4204d60f000f5fff39c4db0eba2d15e9babf59a01f889" } ], "licenses" : [ @@ -929,7 +920,7 @@ } } ], - "purl" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.8.0.2699?type=jar", + "purl" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.18.0.3393?type=jar", "externalReferences" : [ { "type" : "website", @@ -953,62 +944,62 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.8.0.2699?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.18.0.3393?type=jar" }, { "publisher" : "SonarSource", "group" : "org.sonarsource.java", - "name" : "java-symbolic-execution", - "version" : "7.33.0.35775", - "description" : "Code Analyzer for Java", + "name" : "java-checks", + "version" : "8.18.0.40025", + "description" : "Code Analyzer for Java :: Analyzer's checks", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "232f45616c57791e1376b309b99d6bf3" + "content" : "1ac68532191b336b9c760c596dbabf9f" }, { "alg" : "SHA-1", - "content" : "ea12ce7dc955bbafca59c3463ea1f44ad82e42ab" + "content" : "6165e4a7c0bc4dd5bd6bdc8b74184f167bb5436b" }, { "alg" : "SHA-256", - "content" : "8ac28a32e08e60c451cc153bee71bc028f3c72e4ab0e3a9c91bdc5b131ad0f57" + "content" : "78b31d837169a372353c0b91ff2776590039996d8d50dbf033b774f6930d3b8c" }, { "alg" : "SHA-512", - "content" : "6ad5b4c6b85757346f203924c26e908d5557ab4d03147afbf58e33e0f25fdb3999f94aee6973366d2441565466473c30c0861a1512c79f240cd35a9a97f0d35e" + "content" : "07b461fd5a923bbd6a60379e61fc73924ad7bc3e1623257fbb16fee3390eb61e0d930dd80cb4e290da538c958546d8206a66fb433889665312df60b63aeccb1f" }, { "alg" : "SHA-384", - "content" : "dbc472dd1173bcac5ba03e4a1165ed35bd7db93511cc8b99e5407aaaa65a56a92027d79c551a4df7120c2a8d87705797" + "content" : "d1227c576fd2372fdcb0240ef2c0fc5497aaca1251df248eabf8e767765e8023ad5e727fecdd3ade31b5af2022a9f519" }, { "alg" : "SHA3-384", - "content" : "1912414c5430f6b4711e20bb73e1076b5ad85babae3e8374fbb65f1dd3232ae380d9bc52891184befed50777dace89f9" + "content" : "5a6b215207811609717d9b39ddaa332369918cf91fbe3bba94ebfff23408624b1bade52b5cf03062d16364fd9c792ea8" }, { "alg" : "SHA3-256", - "content" : "a5cbfac546a7aaf0a2211c3f1beceb36e2ed3384c9d7d4ece2195d2932fba345" + "content" : "030d53c3182415e2896ffc5898b155cac52587a006b327a51c6c5ab59714c012" }, { "alg" : "SHA3-512", - "content" : "4f6974c7877b90dfb0acf4a6f8f412ea4f391164165ce3de75973c871e356a55fdc5ad4de3322a7e30e57f4d7caa87871b3671a63e19ca51a6f5b3cec949d281" + "content" : "a5a4a3f41c1ba65066554808baeff26551c033ccb31ec561ab622e535984db16d9742107f5d07b7d3bc6f25ec92c410600eca7cdf1d9e36fd23a6246d1220db7" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.sonarsource.java/java-symbolic-execution@7.33.0.35775?type=jar", + "purl" : "pkg:maven/org.sonarsource.java/java-checks@8.18.0.40025?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://redirect.sonarsource.com/plugins/java.html/java-symbolic-execution" + "url" : "http://redirect.sonarsource.com/plugins/java.html/java-checks" }, { "type" : "build-system", @@ -1028,66 +1019,66 @@ }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-java/java-symbolic-execution" + "url" : "https://github.com/SonarSource/sonar-java/java-checks" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.java/java-symbolic-execution@7.33.0.35775?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.java/java-checks@8.18.0.40025?type=jar" }, { "publisher" : "SonarSource", "group" : "org.sonarsource.java", - "name" : "java-checks", - "version" : "7.33.0.35775", - "description" : "Code Analyzer for Java", + "name" : "java-checks-common", + "version" : "8.18.0.40025", + "description" : "Code Analyzer for Java :: Common utilities for analyzer's checks", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "eaeb082ff51df115aaf0f3116faf4b84" + "content" : "5514880c7701b527cdcc574edae88dc7" }, { "alg" : "SHA-1", - "content" : "f11567226d2a4c2efcadf5545c3e0b1bb5f8142c" + "content" : "5e3906963a6aee9229c0d5735ec5b0caba9c7a36" }, { "alg" : "SHA-256", - "content" : "1eeb30e79298fa3cff7e7265a0d313a5572bdd726b8d83e83dcb1d144421c24b" + "content" : "89aadedaaa0bd0e788c55b3a78a5b086fd0dbc4935e1ca9e8d15266c81dbc1eb" }, { "alg" : "SHA-512", - "content" : "0034e5bf2e95fb181c476a3d1a5b111efcd22131f62d75eb6daf21da645b4e3ad8e35096274e3898e042a7463d831caea46a7840f843c10442d5f48b75041687" + "content" : "c7e5eea32cd08b004728418429b1b1255751a50a33f5a58712ee7ebddb2f15883cbbc9a999d3d388274662e1b398f2121bdd8e28465a7b86b5702be57a211e0a" }, { "alg" : "SHA-384", - "content" : "c2e5daa8bb17411f2ad282755de82c02d98a4940a81a76c26167713a1b5f55f7551875ae8459b5b77934d42f37f5e8e5" + "content" : "74603a766b61c433df59fa6df8c140018dc181c84af0476242c22c4fefea6f3437cde005c253c21301be0209797ef6c8" }, { "alg" : "SHA3-384", - "content" : "7de6a308f476947ec7a132968be161ea98ab1f135d6286129fde8ee5f8a1044a295c9febf482d7f5a5f83b65e1ccd36f" + "content" : "a9a28120b1353f47a2aff96a032d95d8988eb0b2c940bff0bcef27dc352b19950d0b1eb0de8a521f8c232cfc0b3abea5" }, { "alg" : "SHA3-256", - "content" : "8033896b6e57169054031f9d386f00cc0194f1cf930782becea1b12a5f5421f7" + "content" : "eeb22c67995bfa542c898dc47195590c37da85116f30df4b367bd970c162084a" }, { "alg" : "SHA3-512", - "content" : "789208a299ff2cbfe4ac9f6c647b0d703ff77040fce20e269b33a6d0712011d214704496d27ee8b63adf5778e4d8b58fde286e5a8f043f3b1813ec4c15a06fce" + "content" : "27adbd9adbd039453b3f8fc762117222650d45147cfb4ea26ad6daf65b994fd618f4b5a2173f0860fdaa5b1e096af32faa100c902377b811892d8664c094684a" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.sonarsource.java/java-checks@7.33.0.35775?type=jar", + "purl" : "pkg:maven/org.sonarsource.java/java-checks-common@8.18.0.40025?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://redirect.sonarsource.com/plugins/java.html/java-checks" + "url" : "http://redirect.sonarsource.com/plugins/java.html/java-checks-common" }, { "type" : "build-system", @@ -1107,51 +1098,51 @@ }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-java/java-checks" + "url" : "https://github.com/SonarSource/sonar-java/java-checks-common" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.java/java-checks@7.33.0.35775?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.java/java-checks-common@8.18.0.40025?type=jar" }, { "publisher" : "SonarSource", - "group" : "org.sonarsource.java", - "name" : "java-checks-common", - "version" : "7.33.0.35775", - "description" : "Code Analyzer for Java", + "group" : "org.sonarsource.analyzer-commons", + "name" : "sonar-analyzer-recognizers", + "version" : "2.18.0.3393", + "description" : "Shared code recognizers", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "377bec0957fff4818de779185dc9d46b" + "content" : "c8fea2140f3d18005b73ba0cd39ac3cf" }, { "alg" : "SHA-1", - "content" : "64e48e3a5d4bdc7ed674b21f8ddb393e548c9947" + "content" : "f741f10d470867172afa510990c16877ede70222" }, { "alg" : "SHA-256", - "content" : "a5db4cf127e982760c049faf6a3df99fafccdd5e1d58b59afba30b206bde96b2" + "content" : "0b4ef58f3bba93170f115ec2a73eb5596276abc21219b7fa733240b6bc3f7d52" }, { "alg" : "SHA-512", - "content" : "ebb84100013c73fd13cd502e5ea56a557568f5404b1b60d015ba5529c955c7ae70c612437cbb249068c7437d2dd4ef7f249a20f4f2090ea22c414123df062838" + "content" : "8edf444d67195ff181307c7f27744833b7fa47ff54ee2c687c92761cd7e0900e302f71541d2ccb84a0436ac04fc28ccc79c4700452455db6c155c6ac774bf26d" }, { "alg" : "SHA-384", - "content" : "a3e9a9cf69e639b84e22ef84a9937d8c8e829628ae2b203ec722394ad3b50e0c07fc1b6265d4bf8df3a86cac424125ef" + "content" : "821446711dedcdcb0a20bae33560f7f5d86ca528b7277170b3fe539bc20ab41f90096c6d6cb6cb9b67a7738cf56029fd" }, { "alg" : "SHA3-384", - "content" : "abe29bc0a84ab6ec1dc55fe8d349f72e37865e46a7eb114d85328882711f00f344cb7252ef9adc449009b62a4350f7bd" + "content" : "c036fd79d7730afa956adbabd42edfd0fb5473e5b4534d2ecc480b2b587099d923ee97a9ee51e40e1e027a413fb7b33d" }, { "alg" : "SHA3-256", - "content" : "2bfc0c71aef10df37be7c91fea1ab5e1d90f018c859aa7e3f0844ce2246137fa" + "content" : "aafdbc0fc6e44a212ee7cb7eb10d9cb4b23ceb25a532ea0a6508ea32141cb581" }, { "alg" : "SHA3-512", - "content" : "0e7d60391152b9fbc7b7238967dbf3c4c4c32e776f065b65e456c5ba5b88550723709c82125334fb749167231d602fd6bf3c610a7e83e2d34f3e339f139f71b6" + "content" : "747d1f9f8a556ff1c67bfa46aa1e8e8b9c7b76114e141845751376c7bb34d841349491766e6ed221938f6d64e8aed91663515d23283668711177d076f12eb852" } ], "licenses" : [ @@ -1162,23 +1153,19 @@ } } ], - "purl" : "pkg:maven/org.sonarsource.java/java-checks-common@7.33.0.35775?type=jar", + "purl" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.18.0.3393?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://redirect.sonarsource.com/plugins/java.html/java-checks-common" + "url" : "http://docs.sonarqube.org/display/PLUG/Plugin+Library/sonar-analyzer-commons-parent/sonar-analyzer-recognizers" }, { "type" : "build-system", - "url" : "https://cirrus-ci.com/github/SonarSource/sonar-java" - }, - { - "type" : "distribution-intake", - "url" : "file:./local-deployment" + "url" : "https://cirrus-ci.com/github/SonarSource/" }, { "type" : "issue-tracker", - "url" : "https://jira.sonarsource.com/browse/SONARJAVA" + "url" : "http://jira.sonarsource.com" }, { "type" : "mailing-list", @@ -1186,126 +1173,117 @@ }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-java/java-checks-common" + "url" : "https://github.com/SonarSource/sonar-analyzer-commons/sonar-analyzer-recognizers" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.java/java-checks-common@7.33.0.35775?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.18.0.3393?type=jar" }, { - "publisher" : "SonarSource", - "group" : "org.sonarsource.analyzer-commons", - "name" : "sonar-analyzer-recognizers", - "version" : "2.8.0.2699", - "description" : "Shared code recognizers", + "publisher" : "Spring IO", + "group" : "org.springframework", + "name" : "spring-expression", + "version" : "6.1.21", + "description" : "Spring Expression Language (SpEL)", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "f9c0e3225c8cd152cd8385ab211c1211" + "content" : "9ea32c5135a59a1264f13d8f8d5f355c" }, { "alg" : "SHA-1", - "content" : "10fa0ef13f09632cc2d8a97990512a36252b2e2c" + "content" : "72da3b3521a6788e143a47b0f7273ce7cf98c6f0" }, { "alg" : "SHA-256", - "content" : "5ba42aefbd8cf715575a9f40293a53b47cc82ba67943215a5382487e4042da50" + "content" : "29597c579b6b051d0dd2f56775c6e0078ac5252eab5c940ae687bd5e1fcafbd7" }, { "alg" : "SHA-512", - "content" : "0659ad40421f8be0d492fedf4cee72c531d264d8b9aa9327e789b9277de0a5b037c0dba25a25bc1efb5a858a959941e7e6fa3c7e166ff908db1ea272b5f05486" + "content" : "e54e346271cbc327b138f7a16d6c086f68290688c293753cc5513bc26a20ddd91ee194de32d91122432dae785692468d9d68971202e05c0571a65a44f0a518e1" }, { "alg" : "SHA-384", - "content" : "7b629d1b28bab3012d347760905c7235e579c868460098c2f4e9e9127e3eef1fd08be8f8cff2400552a2f6ba3c735d18" + "content" : "eb0349b3f3b4952f088a4243ab58b7167087e01a719babbe15e54c25d5b6cc3e8f52203542e447a465c3002a3588e6ec" }, { "alg" : "SHA3-384", - "content" : "e3f76485b0c60e07e0a8d93716847e12279c8914590d06000a95df859b952d2b1348a2c1b74a434f92aa36ae711ad858" + "content" : "a2d39ba6e734731a7588f70fac0ab312d835674427c384e7bc7fde62340d2d1c48217ec0bbdc953b3f436550aa0dc796" }, { "alg" : "SHA3-256", - "content" : "af4025e146ba6f1982d1351d1adcabee0a2acb8b90f7a7e8e76f019e408adc1f" + "content" : "be4aa16518c2a8cae7deb0b7f867a2a4be88a7a9b3030db00558615eae43d27c" }, { "alg" : "SHA3-512", - "content" : "ec20e48bda7e839e8c30bdb52156bd42a856f176282c3b1fd3241a268e1674b582acee92f83d72b0247a03634e46a2a740326dda9c089b704605b45c69322606" + "content" : "c4e3742d1ba2111bc4b72c1f9fcebff0d47c8466dd732d5f66ef2c7303a60d7da4e1a63fbf469df27075bf0f5174302dfa921722079425540151fd5e16fdfbfb" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "id" : "Apache-2.0" } } ], - "purl" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.8.0.2699?type=jar", + "purl" : "pkg:maven/org.springframework/spring-expression@6.1.21?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://docs.sonarqube.org/display/PLUG/Plugin+Library/sonar-analyzer-commons-parent/sonar-analyzer-recognizers" - }, - { - "type" : "build-system", - "url" : "https://cirrus-ci.com/github/SonarSource/" + "url" : "https://github.com/spring-projects/spring-framework" }, { "type" : "issue-tracker", - "url" : "http://jira.sonarsource.com" - }, - { - "type" : "mailing-list", - "url" : "https://community.sonarsource.com" + "url" : "https://github.com/spring-projects/spring-framework/issues" }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-analyzer-commons/sonar-analyzer-recognizers" + "url" : "https://github.com/spring-projects/spring-framework" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.8.0.2699?type=jar" + "bom-ref" : "pkg:maven/org.springframework/spring-expression@6.1.21?type=jar" }, { "publisher" : "Spring IO", "group" : "org.springframework", - "name" : "spring-expression", - "version" : "6.1.5", - "description" : "Spring Expression Language (SpEL)", + "name" : "spring-core", + "version" : "6.1.21", + "description" : "Spring Core", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "1f268a22bb7c0cb80958953ffbc21125" + "content" : "3c233d75937864d95e9051eafa9205f1" }, { "alg" : "SHA-1", - "content" : "7e21cb1c6bbef1509e12d485b75ffc61278d9fa7" + "content" : "dcc8607ee792439389e19111d83737b6b06ca4ac" }, { "alg" : "SHA-256", - "content" : "1f37b50dcaf091a43bb10d946178fff4082674497fd821438327815da14f7fd0" + "content" : "0729b69e52ac8d9a8d03991315690f632bb0984620a0595e52580d7f3557298d" }, { "alg" : "SHA-512", - "content" : "d5a13856a7f4619eaf1c9593f7739ec5cde37a555a98f0da4cb21aa591e87fb0bcdbd2a5da67d9b69a0dab0016f806c9d3f096bc8841c32bb98810daf1e5e7b7" + "content" : "8d926d38d47cc510378bff4cbd59a951660e8b813a22ffe662490631eb0f85668b007a0ee6961f4a6db2a80dab75181e13196fac10076510dc155c897a6aa999" }, { "alg" : "SHA-384", - "content" : "1e0c29ba819c5c8f5eb278a8f308a0119a476e81998ff5c7658b150352d357ef53c408566bd7a0b8023b7b41cabf4636" + "content" : "b8d3fff87f154bd509d1844c68a005787729112fac80512fa5d6df43d32b1f2fde0bd33e6ba6038e5d57e6265c8b97e5" }, { "alg" : "SHA3-384", - "content" : "f9cefe146557fe266e6e38bc8fbe157c7ef10fc606edafaf901d393ab140d25dabf4e60ff79c6a45a83c7eff890d3cac" + "content" : "d68af409a439cedb3b7da43946892d6012fb3000e849e929221a994cdd7ed1fd2791b1fbcc2b5903415ec6612f679cb9" }, { "alg" : "SHA3-256", - "content" : "ba29e269a74f3c452a64bd9e7a680c84c5c26b96397683c22435e4fcea8ecb9e" + "content" : "2a8bcfdbaae2b6c617f4896069b188e279faf8d169932c17f90c0e0ed4223fc0" }, { "alg" : "SHA3-512", - "content" : "8de364ab79572c8d2af2dc22ea5768d323b7268e03ae977701024f17e6fede13f03e248ef44c6789dea3007723beb1454c7795b45f3834b6040510661b6dee54" + "content" : "2890d9f8375e68786ea993d22ea2d9fd7c45bcbcce07949013857d7a3ff89da0aadb22a34493180c0d1fe905e744b453510b1f87631bbce8eda84c7844389884" } ], "licenses" : [ @@ -1315,7 +1293,7 @@ } } ], - "purl" : "pkg:maven/org.springframework/spring-expression@6.1.5?type=jar", + "purl" : "pkg:maven/org.springframework/spring-core@6.1.21?type=jar", "externalReferences" : [ { "type" : "website", @@ -1331,47 +1309,47 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/org.springframework/spring-expression@6.1.5?type=jar" + "bom-ref" : "pkg:maven/org.springframework/spring-core@6.1.21?type=jar" }, { "publisher" : "Spring IO", "group" : "org.springframework", - "name" : "spring-core", - "version" : "6.1.5", - "description" : "Spring Core", + "name" : "spring-jcl", + "version" : "6.1.21", + "description" : "Spring Commons Logging Bridge", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "6eeff94b635753591e74d979ffc2f793" + "content" : "0e017885cab7225c3859aaf24d3a96cb" }, { "alg" : "SHA-1", - "content" : "6dae1b06ffacbb9abab636be2dbc6acd3b6e5d68" + "content" : "fa75fc86c26dbbc6fb816e5b7aa5fc83f4494423" }, { "alg" : "SHA-256", - "content" : "476dac28509b3f47d0b5e895a639fa75ac2218f074ce214e44832a836c469f7e" + "content" : "f77ae10f41eaf02bc94a6424a3bad1d80a58b168e6af032ecb40a474d9e4f82d" }, { "alg" : "SHA-512", - "content" : "067d31ab99c842a586fbc1bf7aa7ac9aad0fa36d70f0e5bdb7e355514d66b1f6106dbb74ce15959a8dff8223a3e447ae30735e40f376e67f0ef8b70ed1a85002" + "content" : "b0821cb6220914b2bc517f858d21c4a3b98b5a487ee94f29acf044153ba5a568a44fead4d003f71ffbad65f61791d01e33ec05859cdf2a3a1bb853469dc37753" }, { "alg" : "SHA-384", - "content" : "25728b0246bc11715c8b1fec2a704b74a6c2bd6e41851b44aead5c76d0ad1493929bdbcef51dee8005404099388c03ee" + "content" : "84188cf73912ff5372b4ebc58fd0bc63ecc282240c896a987ebf3cfcbbc57cfeacd1a63ea5a9cd6fbcd3ea45e11a001a" }, { "alg" : "SHA3-384", - "content" : "ba98714211e0a6d8337b876cd6452216d1752b5274671f476fa06a63931da1e8ff0d7d0b4105967ab68e6f967aa8b43e" + "content" : "a787e5682a3d41e20e726caf3e0eabd9fd0b33beff448bdd8915c5d1755eec973d7e9ea229a806b00a1d969941364614" }, { "alg" : "SHA3-256", - "content" : "70c250de2d49aec369e3abf959c980036051ca0f54ddfc774840c95a8eabccae" + "content" : "9ab47bf24ddfbb2dbe03a02e131d4b9bd7ada2da72badba7a7fadd0363895247" }, { "alg" : "SHA3-512", - "content" : "c4d9cb5d1a7a738f6a762bd8f9a0fbd2455f3900e702b77d5d1d76079ab1b614b7993f992473ea57639a57fdb46e985a3b29191b3d8a18215b97e82b31cdb3e7" + "content" : "3d537771c6060078daca6cb556d0a1571f9a685e0287c8c186f3f8e441ce0d7460040de7368c7a51d4dd99faa0d6216baa1013c8acc7f3b981eb30e25cccdaa3" } ], "licenses" : [ @@ -1381,7 +1359,7 @@ } } ], - "purl" : "pkg:maven/org.springframework/spring-core@6.1.5?type=jar", + "purl" : "pkg:maven/org.springframework/spring-jcl@6.1.21?type=jar", "externalReferences" : [ { "type" : "website", @@ -1397,128 +1375,141 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/org.springframework/spring-core@6.1.5?type=jar" + "bom-ref" : "pkg:maven/org.springframework/spring-jcl@6.1.21?type=jar" }, { - "publisher" : "Spring IO", - "group" : "org.springframework", - "name" : "spring-jcl", - "version" : "6.1.5", - "description" : "Spring Commons Logging Bridge", + "publisher" : "SonarSource", + "group" : "org.sonarsource.java", + "name" : "java-checks-aws", + "version" : "8.18.0.40025", + "description" : "Code Analyzer for Java :: Analyzer's checks for AWS", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "4b7724c57ea12f13ce3fc49a18209b6c" + "content" : "8aed826c7d8696ce3699588cd6ff952b" }, { "alg" : "SHA-1", - "content" : "896ae3519327731589c6e77521656b50ae32d5b3" + "content" : "6cc1bba5a36b3eef6230e273866fc6dc309189af" }, { "alg" : "SHA-256", - "content" : "c53540419e482242c815db6d6a8cd80af85a6a895e38329b9d9bd6b4616503eb" + "content" : "5ee06300e5427acf74b378cf181a697b548a477ffcf1edfc216ae5345e40c1e0" }, { "alg" : "SHA-512", - "content" : "0de5bdae17924ab55ed7e6e97acbfeb60406fa99b10c1fd8a391f9f81c475691638535a297636fb79b51f02cf07d98ac613049235e9fdbf1186672c8b64c5967" + "content" : "47ecef1096030771bb0c24c2b3c15ebe51ab8a6f66d76ae2683ea4b54821f9c914ecd694b877a186c26650db463aedfa57e9a172fe509de26ca4f0a19867be61" }, { "alg" : "SHA-384", - "content" : "2844ddc317d6fed2c80c5090e3b4b976a063ad5fce4bf8dbfa7c1034cb647497a830142ff7e70b7eb0c8cf742a091071" + "content" : "242495b1e08269988e57a0e08730bb23d18fe614cf37af2ede8aa489a7a3ad581c0d5f970b7d25aee2db35f658649c26" }, { "alg" : "SHA3-384", - "content" : "dfc30f87671459ea2bdc8c25aa6ed814dd53a0ab60df4b98b44eb96ab28cd7bfce358c32b5ab8255d0c0d7ebba1a28b0" + "content" : "f8f74f485da5f891e8a98701cc7d7267548ebeb2d04861239a891547abebdda1951cc16de0003c60db18fa48ad9696f9" }, { "alg" : "SHA3-256", - "content" : "a7a4153deabf0b46852c6539f1d0d63bac5963eaf9ef73209097c3bd4b2118c3" + "content" : "b60ad5ee6b83beabd93c21866b2bd05eaf340ead9ef9f4d1f38492546d103d89" }, { "alg" : "SHA3-512", - "content" : "62add3aa8ea534168ba2eb4e811628e35970e17a2ae350de376fd95e8e0d70045dc9f6748075bafe4f74ebec4278bb3e36243478e08b4329840c8f068b30cde9" + "content" : "8bd74670d07ae07f638e31a27a8f8a00eb0fabd40337f3b601595c86769e31da58b969f08ca5424dbb48adc4d7c8477503a1d795cb8eeec3179f276273997685" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.springframework/spring-jcl@6.1.5?type=jar", + "purl" : "pkg:maven/org.sonarsource.java/java-checks-aws@8.18.0.40025?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://github.com/spring-projects/spring-framework" + "url" : "http://redirect.sonarsource.com/plugins/java.html/java-checks-aws" + }, + { + "type" : "build-system", + "url" : "https://cirrus-ci.com/github/SonarSource/sonar-java" + }, + { + "type" : "distribution-intake", + "url" : "file:./local-deployment" }, { "type" : "issue-tracker", - "url" : "https://github.com/spring-projects/spring-framework/issues" + "url" : "https://jira.sonarsource.com/browse/SONARJAVA" + }, + { + "type" : "mailing-list", + "url" : "https://community.sonarsource.com" }, { "type" : "vcs", - "url" : "https://github.com/spring-projects/spring-framework" + "url" : "https://github.com/SonarSource/sonar-java/java-checks-aws" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.springframework/spring-jcl@6.1.5?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.java/java-checks-aws@8.18.0.40025?type=jar" }, { "publisher" : "SonarSource", "group" : "org.sonarsource.java", - "name" : "java-checks-aws", - "version" : "7.33.0.35775", - "description" : "Code Analyzer for Java", + "name" : "check-list", + "version" : "8.18.0.40025", + "description" : "Code Analyzer for Java :: Generate the list of checks at build time", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "14dfa924e3e61569475db951d81dff71" + "content" : "523e390cec46df34c6686d8f61181bef" }, { "alg" : "SHA-1", - "content" : "2af499d9be4ebd5d898db1eb13eb34ad3b2fb8e9" + "content" : "93c3737e36e776e9c9ba43293256d3ade559e656" }, { "alg" : "SHA-256", - "content" : "62148c334e45df290a958dd438ef662ba5fd29c4023de832d425e674f7c585fd" + "content" : "aa62feaefd959fe9c4a75280ddbee6ffe9b59181296c521e8d876676812ddf5a" }, { "alg" : "SHA-512", - "content" : "f9365f6002c6a51295e7a00a4255ad9eb693d52de2e4c3aa0161e722c58f57a565f97bd3e03e53f3fcc2b1b1af3753471b0ba707e8416f6d2c21f17fcb1b7071" + "content" : "bba574e1f4a05a5fc7a70cb5f9deb5a1f68d8bcb6b2ad4859799e94ca18f622b15075f454e00e3d8fd5ac64827c06afc660ec73bc0db1402bdc3f5e4ebb16bbe" }, { "alg" : "SHA-384", - "content" : "45f68667d8e7543d39b51ebf451513bd085a573edfcee9b89c8154a61bda72d55f7085a1ccb132b306bb2dcebcb9b899" + "content" : "a87fc3e9946eef5166f6393ca2ee064caf3763d19e3415779f0e5269b267790a897485fb8cf085ba84f535e2112fbbe3" }, { "alg" : "SHA3-384", - "content" : "5a6ef9e7483108b215e37833d6d4321ae9ca11f2a2df09d02563d008228dd469e2ce9d9b307679fe16fc229a1a90f588" + "content" : "9e9584346c363abd4a0aad992c54f60dfec95d7a7e8c3cc2834d878c72d1b8a5460c834eaeafc6045a7115af424bcacf" }, { "alg" : "SHA3-256", - "content" : "2c6b29354a7077d0a34a9c742a2e0a95310e2dbc40cab29527ec59aed9ac7b22" + "content" : "9ddbb48896bde9c6d4457d250d207daef592fe257f10ff0ed88cbb38990c9209" }, { "alg" : "SHA3-512", - "content" : "d19b4dfeca42f8ff8821621d241b12aec49fd8012cac5ccffefac6bd55ca2dca60ef40ee15a81460051fbf1797631a34c70fb4600a9e4182a581f082b8c5028e" + "content" : "7a3b54a4fd3db04d97df4040f10c27fb9993071eed45f1caac906d989b213995fddd8b7e74b92d68c6cc99709fc69b789f1a55bd55d1226adccaf80493869b8f" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.sonarsource.java/java-checks-aws@7.33.0.35775?type=jar", + "purl" : "pkg:maven/org.sonarsource.java/check-list@8.18.0.40025?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://redirect.sonarsource.com/plugins/java.html/java-checks-aws" + "url" : "http://redirect.sonarsource.com/plugins/java.html/check-list" }, { "type" : "build-system", @@ -1538,62 +1529,62 @@ }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-java/java-checks-aws" + "url" : "https://github.com/SonarSource/sonar-java/check-list" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.java/java-checks-aws@7.33.0.35775?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.java/check-list@8.18.0.40025?type=jar" }, { "publisher" : "SonarSource", "group" : "org.sonarsource.java", "name" : "external-reports", - "version" : "7.33.0.35775", - "description" : "Code Analyzer for Java", + "version" : "8.18.0.40025", + "description" : "Code Analyzer for Java :: External Reports Plugin", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "b07b7b394b1de4dadcdd41bf472bff97" + "content" : "0a2d44b03fd1c355461dd30c436d3097" }, { "alg" : "SHA-1", - "content" : "bc9c1e1cb3f4abca42ddb1b6ffc027eb2fd4c68e" + "content" : "6374bd720414018d7ed56f80b2ed918ec94e6b2f" }, { "alg" : "SHA-256", - "content" : "aabc8b03f2c9c042ad4d1d25ada8281dd029480e9f59831d98e91adca67fee08" + "content" : "38eb3bbdd4857c485d41a0a9deab123e2c9c4cba4e187dd1997efe72cdafdccc" }, { "alg" : "SHA-512", - "content" : "b60270c2b3d038cc3b3387ba052a79c2e5fad1b0536a5a1f2e4bfa98da3046ae451503f7837a214359dd6c6052cdbdf5d8776fbab5648bcc31ac974830a6c16d" + "content" : "ec05b2b58d09641b89777d15383f8ec27873aa1e2d97977af5365840b322e1a3e38a8d65c71dd7bf5b87fbca59e49bfc6e71dc7400efad987c51dcc5e9bd5e89" }, { "alg" : "SHA-384", - "content" : "943d62b27e66b0b7472c0115f9749fe109343ee1409eb6ba57ffd3776eddfb92bf28c4c1f664aefc08e891d29d5ea2e8" + "content" : "dfde96d508de66a673c9e13298c958dfc2c6fb32e85c0b42450b3263ba4f3a09a254d893f08ae4b9f39d707e4cee22c7" }, { "alg" : "SHA3-384", - "content" : "ff834b86b09d0b11bd4fd9da2245b52c76d540af4bbc858d2478f40444c2a632ca671eac45b65097c0014456a7d553ba" + "content" : "41b976778dec610536e3b9eb679754ef9568cc8bb2beb7c7fe1d852c5d5879c682d8844a0c035ebe0b095626ea43203f" }, { "alg" : "SHA3-256", - "content" : "b632f307cefea8b5fafe516db380b7160da28677ed0657db17332250ee40b26d" + "content" : "42ddf81281e703791ae6f8c8d8adcc96da58390d4cb4b49668b4d3e3d1ba4bec" }, { "alg" : "SHA3-512", - "content" : "81ae57ff106ae7f468dfa23a5d7fd828915cbe1bcc6b21ba988a255287a7d40858979aaede906f3cf277f93117eb7ec919e003083622d061b3149a2d15eb765b" + "content" : "586377b8e12c4b960ef1a3a5cf335e8e19db4da10de7346f140bf3eb56243229be4271603c2400a6bcedb87d06dce5f95cb11581e8eceb80e88a6ddb3e00a564" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.sonarsource.java/external-reports@7.33.0.35775?type=jar", + "purl" : "pkg:maven/org.sonarsource.java/external-reports@8.18.0.40025?type=jar", "externalReferences" : [ { "type" : "website", @@ -1621,58 +1612,58 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.java/external-reports@7.33.0.35775?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.java/external-reports@8.18.0.40025?type=jar" }, { "publisher" : "SonarSource", "group" : "org.sonarsource.java", "name" : "java-jsp", - "version" : "7.33.0.35775", - "description" : "Code Analyzer for Java", + "version" : "8.18.0.40025", + "description" : "Code Analyzer for Java :: JSP parser", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "e0890ace531478ef8ac18849d78cd9e5" + "content" : "7ad6c8d9c8472d350359adbb1bb2a117" }, { "alg" : "SHA-1", - "content" : "a8cecb5145490f15b35742712345b5919726ad89" + "content" : "bf1f05662d4aa017bfab919bee32c6e985aea49b" }, { "alg" : "SHA-256", - "content" : "ae1ee6f32a16217667ea46a973f7c93a6f66ef7052a2d1e24d6e8f78c02f96bf" + "content" : "85520636a757ac333fb349873dada3386a2a89352bb6443a552612323a898e3a" }, { "alg" : "SHA-512", - "content" : "b7fcefd8fa7174db020947db1a41aff0e5c25191fbd8feb8c53438a42604a50b342ac072f571eaf6b0d54915e9106dc5bc6304d5899dbee90e20dcfc08139ca9" + "content" : "34e2e4fd545dfab31f0f0dba626b61648a2daadfaa7f32483cb3b31aa2010e90639bcae4b2b3ac669d60ae3d0490ef59bf6d87ee61098d593c15b043ad8e43e1" }, { "alg" : "SHA-384", - "content" : "39420fa5bb00153057946a5b667877475bdb65923dd9af86acc6db63f3bbb9471de9735e4ed16a03b3c3a2c6da3118df" + "content" : "acb14999bcc8e0347f71ee453d3c58426e60de8f576904058391dbab16da82bfb0ac7083cdd73b6f26862b2ca06912cb" }, { "alg" : "SHA3-384", - "content" : "6defb43802dfd77c5a549fd7d28ffdf85711623dd24d28520e1e2d96677e47a69c5661029a028d7ca13ea3fa75697a00" + "content" : "75c0fed98b9486927c2c767745222e6b93e7c8af00727abbc871380d5bb2b9d71ba9a9bede424aedfc0c057e5c564d02" }, { "alg" : "SHA3-256", - "content" : "54265f768ea5687f500b148e81ac1c3a41c0ac1d9eeb3e2154ebe4507bef46f6" + "content" : "3ff452bc563a50565843c16d94fd729cdd4f76ce6b1847c5fd61d6504a6fb2a7" }, { "alg" : "SHA3-512", - "content" : "8530ff5df32f8250d5d3a68e81bf4f1e0d0add2a69fe6c2de5dc94b01bbe2e99a86fec11494f4d95239040ee2f736ae305c94b23376475ea7c981cdad6054c85" + "content" : "96ad4a5625e3d8c3b6df8a224e75597da826ca3438e1e0c6fe805cfc0d246822ab98794250913691ed1c5ce201b9e938ca6af648e9d2f5f842efdaad78599341" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.sonarsource.java/java-jsp@7.33.0.35775?type=jar", + "purl" : "pkg:maven/org.sonarsource.java/java-jsp@8.18.0.40025?type=jar", "externalReferences" : [ { "type" : "website", @@ -1700,160 +1691,261 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.java/java-jsp@7.33.0.35775?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.java/java-jsp@8.18.0.40025?type=jar" }, { - "group" : "org.apache.tomcat.embed", - "name" : "tomcat-embed-jasper", - "version" : "9.0.84", - "description" : "Core Tomcat implementation", + "publisher" : "SonarSource", + "group" : "org.sonarsource.analyzer-commons", + "name" : "sonar-analyzer-commons", + "version" : "2.18.0.3393", + "description" : "Logic useful for a language plugin", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "22b13ffeab24c14943b58adaee3d15f6" + "content" : "86c3f760a4c1790b1af5c16eb246f8e0" }, { "alg" : "SHA-1", - "content" : "5fcf71c9c39e54c9ca51c304dd7bb2f5558e3286" + "content" : "612043286321caa05aa4e7670b36dd41e826ae2d" }, { "alg" : "SHA-256", - "content" : "3f08ff872bf83defa70c20274ab597aaf23ea95c1ff50f4b98e0c9a2a25c1106" + "content" : "f7babd94546594b9d0427b1bf32cd8f60065b8e8d0a1436f6ac443b9faaa1bf0" }, { "alg" : "SHA-512", - "content" : "89d83d9250be2cfc2d1471133461107dd4fdab532439f7827771f7d2ac202a4c9d57aabed5a7f84fa7a5b1474ce67b60ccdfbd08e2fd4980af1cf133ac69a2c1" + "content" : "b1d166c1ea81d0c89afc9b27e6d9457e6cf0c45afc8de7fa37607ed14b379ddbc1cb1c31bd2ebc25be3c980f1cf145686256dc1b0217f8af73c69d5eb11bb0a3" }, { "alg" : "SHA-384", - "content" : "688680dcea5c8c055cfd461a29c601f0533bf448b9659d0491ee60107c9f8080fb91e2705cc319ab83cdc791f79b916e" + "content" : "1d1bde067e0de39df2d0a35bfda18e9082c4f208411d45488a632a61b0acb04270a4016ad481a7aab1107608d121b90a" }, { "alg" : "SHA3-384", - "content" : "0afb2f67992e9b3d891729c4f65c1804259180f459056f9e608c29d479eb5661a2eb23b46a240ff08d834c0940068f2b" + "content" : "74a471351b75abc4d02989bde9e597307c807683bbac455a3b50aa98928d7dbf3f85db1d4c090c7c7b87299603d1f568" }, { "alg" : "SHA3-256", - "content" : "58917d6995c9fc52fd102c6e26dad93af8e43ef5b8ee1dee7932c2aa947d261c" + "content" : "8a6c33facfe7d600d45ca3db4ef0e545e7bfa75a383ac9d05fe49df6ab695197" }, { "alg" : "SHA3-512", - "content" : "453c585ccdeb65f90a65d3e9d7aedfc0ef6d68cd3a905f24584802d7029b1d79d7bab4a28b2b0f9d12cc41d2c395b87ddcc8e6568e98aae21fd076ed1c4b7bb7" + "content" : "68308ba7a0a3196f866436123817431cda045808cf617084af2efb84f53aa6907841ba67653fad166a347f92de0de2b2fea573e5e2fda734306cb3ca3ecf3319" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0" + "name" : "GNU LGPL 3", + "url" : "http://www.gnu.org/licenses/lgpl.txt" } } ], - "purl" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@9.0.84?type=jar", + "purl" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.18.0.3393?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://tomcat.apache.org/" + "url" : "http://docs.sonarqube.org/display/PLUG/Plugin+Library/sonar-analyzer-commons-parent/sonar-analyzer-commons" + }, + { + "type" : "build-system", + "url" : "https://cirrus-ci.com/github/SonarSource/" + }, + { + "type" : "issue-tracker", + "url" : "http://jira.sonarsource.com" + }, + { + "type" : "mailing-list", + "url" : "https://community.sonarsource.com" + }, + { + "type" : "vcs", + "url" : "https://github.com/SonarSource/sonar-analyzer-commons/sonar-analyzer-commons" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@9.0.84?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.18.0.3393?type=jar" }, { - "group" : "org.apache.tomcat.embed", - "name" : "tomcat-embed-core", - "version" : "9.0.84", - "description" : "Core Tomcat implementation", + "publisher" : "SonarSource", + "group" : "org.sonarsource.analyzer-commons", + "name" : "sonar-xml-parsing", + "version" : "2.18.0.3393", + "description" : "Logic useful to read and analyze XML files", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "2a5bc72d7f698bc42784cb7afa20e808" + "content" : "42a57e652799b8d75ed82ed71af3e8a8" }, { "alg" : "SHA-1", - "content" : "d0cd4045defc2ecf7ccfdc901925eed427bcba3e" + "content" : "d776689581869043b0d5225d9def870872530ab9" }, { "alg" : "SHA-256", - "content" : "29daf71c4b5f5ed0c0983a83ebd96ee74df905e406534b4c5412cc92c2aca2b7" + "content" : "b383b5147a2b186d91f3efcca0cfa9be9e87371e79c0e61f38332b24f152286f" }, { "alg" : "SHA-512", - "content" : "e28752b186c5eaad6df750719e70bd9ab33f4924f293b622ed4a7198ad15fe5e998b6b7ddee230ce564e7ec0b71871fa5c2362f6c4cb65b2872e3f25ef0840e6" + "content" : "04334f2ed4bd53436f9ca5755f836df11147951e5e09ba375e7217a9ddb629172f550eddb978c1ecc3a9e76764db7c82aa05c925f53cb720ca6f0684c2d95197" }, { "alg" : "SHA-384", - "content" : "0df38c977446ce1bb1b6d17b544f3778b4891d6ef499bb1f53dfe8cca457ec8afdb8c061f17e966574d4fd9859517580" + "content" : "5cbbd8a9a784f94c77bac285538e6894c6cf67f5e5da50745633dab13583e6027c7b2620df4c0412cdcbb4bbf7dfb33f" }, { "alg" : "SHA3-384", - "content" : "eb18577b10a3e3cdabd0483e4545226f4fa8d8c2c3d8eb88b9782aeee1ae9d9bc03d76d19c6b5e886b668fe795d38975" + "content" : "3d74f27c2a90595595c59d4f3551e11037f70de03afb7669a59217a42c32e41318ccf53a4911e97c94d4ef7c5d909498" }, { "alg" : "SHA3-256", - "content" : "58006ad9c9fc8e3b18472ad550d72bcd7c9364ecdc586db3f194116694179bb8" + "content" : "e798859717811fa3dd11cdc3e7c518593dad3f1eea35e7880250c832cdb6c51e" }, { "alg" : "SHA3-512", - "content" : "bda4e7479e4b6015f78b24ffca33be9d99d0606acff96f4d18d8e713f261835e16cf26cce800657c28a279fcd1c3e8aa6e5050d5463e1850526364306e003e2a" + "content" : "757eb040f0c6dc7a39dfba5f3842962b27433593e7993fc755ecd2d2ab362ee58b04c95ea9f4817b43a518f51144f18cd1e9f85875a79c6234ef0f667f1ff536" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0" + "name" : "GNU LGPL 3", + "url" : "http://www.gnu.org/licenses/lgpl.txt" } } ], - "purl" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.84?type=jar", + "purl" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.18.0.3393?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://tomcat.apache.org/" - } - ], - "type" : "library", - "bom-ref" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.84?type=jar" - }, - { - "group" : "org.apache.tomcat", - "name" : "tomcat-annotations-api", - "version" : "9.0.84", - "description" : "Annotations Package", - "scope" : "required", + "url" : "http://docs.sonarqube.org/display/PLUG/Plugin+Library/sonar-analyzer-commons-parent/sonar-xml-parsing" + }, + { + "type" : "build-system", + "url" : "https://cirrus-ci.com/github/SonarSource/" + }, + { + "type" : "issue-tracker", + "url" : "http://jira.sonarsource.com" + }, + { + "type" : "mailing-list", + "url" : "https://community.sonarsource.com" + }, + { + "type" : "vcs", + "url" : "https://github.com/SonarSource/sonar-analyzer-commons/sonar-xml-parsing" + } + ], + "type" : "library", + "bom-ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.18.0.3393?type=jar" + }, + { + "group" : "com.google.code.findbugs", + "name" : "jsr305", + "version" : "3.0.2", + "description" : "JSR305 Annotations for Findbugs", + "scope" : "required", + "hashes" : [ + { + "alg" : "MD5", + "content" : "dd83accb899363c32b07d7a1b2e4ce40" + }, + { + "alg" : "SHA-1", + "content" : "25ea2e8b0c338a877313bd4672d3fe056ea78f0d" + }, + { + "alg" : "SHA-256", + "content" : "766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7" + }, + { + "alg" : "SHA-512", + "content" : "bb09db62919a50fa5b55906013be6ca4fc7acb2e87455fac5eaf9ede2e41ce8bbafc0e5a385a561264ea4cd71bbbd3ef5a45e02d63277a201d06a0ae1636f804" + }, + { + "alg" : "SHA-384", + "content" : "ca0b169d3eb2d0922dc031133a021f861a043bb3e405a88728215fd6ff00fa52fdc7347842dcc2031472e3726164bdc4" + }, + { + "alg" : "SHA3-384", + "content" : "9903fd7505218999f8262efedb3d935d64bcef84aae781064ab5e1b24755466b269517cada562fa140cd1d417ede57a1" + }, + { + "alg" : "SHA3-256", + "content" : "223fda9a89a461afaae73b177a2dc20ed4a90f2f8757f5c65f3241b0510f00ff" + }, + { + "alg" : "SHA3-512", + "content" : "3996b5af57a5d5c6a0cd62b11773360fb051dd86a2ba968476806a2a5d32049b82d69a24a3c694e8fe4d735be6a28e41000cc500cc2a9fb577e058045855d2d6" + } + ], + "licenses" : [ + { + "license" : { + "id" : "Apache-2.0" + } + } + ], + "purl" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", + "externalReferences" : [ + { + "type" : "website", + "url" : "http://findbugs.sourceforge.net/" + }, + { + "type" : "distribution-intake", + "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" + }, + { + "type" : "vcs", + "url" : "https://code.google.com/p/jsr-305/" + } + ], + "type" : "library", + "bom-ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar" + }, + { + "group" : "xerces", + "name" : "xercesImpl", + "version" : "2.12.2", + "description" : "Xerces2 provides high performance, fully compliant XML parsers in the Apache Xerces family. This new version of Xerces continues to build upon the Xerces Native Interface (XNI), a complete framework for building parser components and configurations that is extremely modular and easy to program. The Apache Xerces2 parser is the reference implementation of XNI but other parser components, configurations, and parsers can be written using the Xerces Native Interface. For complete design and implementation documents, refer to the XNI Manual. Xerces2 provides fully conforming XML Schema 1.0 and 1.1 processors. An experimental implementation of the \"XML Schema Definition Language (XSD): Component Designators (SCD) Candidate Recommendation (January 2010)\" is also provided for evaluation. For more information, refer to the XML Schema page. Xerces2 also provides a complete implementation of the Document Object Model Level 3 Core and Load/Save W3C Recommendations and provides a complete implementation of the XML Inclusions (XInclude) W3C Recommendation. It also provides support for OASIS XML Catalogs v1.1. Xerces2 is able to parse documents written according to the XML 1.1 Recommendation, except that it does not yet provide an option to enable normalization checking as described in section 2.13 of this specification. It also handles namespaces according to the XML Namespaces 1.1 Recommendation, and will correctly serialize XML 1.1 documents if the DOM level 3 load/save APIs are in use.", + "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "f590e2b4b16de6e9bc4b7f48380a79d3" + "content" : "40e4f2d5aacfbf51a9a1572d77a0e5e9" }, { "alg" : "SHA-1", - "content" : "86186a099bb355a174243f812d58aaf113768b91" + "content" : "f051f988aa2c9b4d25d05f95742ab0cc3ed789e2" }, { "alg" : "SHA-256", - "content" : "b801c2be650483f7a91a6c50a2a93768c0fddc7ec54d0ca0d5e69bc92ef2758a" + "content" : "6fc991829af1708d15aea50c66f0beadcd2cfeb6968e0b2f55c1b0909883fe16" }, { "alg" : "SHA-512", - "content" : "bfe97892d8e218adcd01a473ca51d7bc3a59bec953fca3752e19d73519972eb7665cf9fc098a74cafb8cdff8fc773ac32424af7b3e865d6bfdaafaab59cb9fb1" + "content" : "bfd21f2350bf0bb546a68d3303f28c6a15cee1e630138c169344c3f65fe39a15e61c6ff4e5239f38f2f1f9e488eff4d5565a4a0774263064ab6a30aa9fcaaed3" }, { "alg" : "SHA-384", - "content" : "7a97a614983641796ef33723f036bfba309c4f6d1fdf860058c795d826ebe311248822a705880de9d48e5a6d456bc471" + "content" : "0a35ae0744f05973997b0710cc8d1d774867bc1c1b63ef5bf5f554d1b4c4ab42033f7819430e05ac623e7c8630aa7c52" }, { "alg" : "SHA3-384", - "content" : "4af95a177b0bd0b0477b61a15b167592cf5e8ea0973f756d7850a6792e0da215b2ac1995cdec027169f0e78dc6fa5487" + "content" : "b016ed02d907b21c90b4a2560aa4c778e8aad1b5ecb0ba62777f668166c6e7b8a0c0deef7d1e63b7a9b1092c64c8a4a6" }, { "alg" : "SHA3-256", - "content" : "8c4a3599140a0e684eb0f5aac9cea0857687d00d8bb3dc175cc88ae26ffe8337" + "content" : "875856aafff433840ee9933c01018cd18c0a13b46bd4472853698ef1dff83168" }, { "alg" : "SHA3-512", - "content" : "559a0b35852d37bc7115cd09ffb1684c6613eb5fde071e7503c483b46e32be0a7e2bc62d7386a999ac9e8c9d2548fed4c8d420465d0b8125f15fc554bf659a38" + "content" : "1587332fb01515a72b7856b1f566070dcd26fef33c5070039c28684215466a9b9d3a4625cf7181443e3c3a67a313a938cf0775f39b96daf43f5edd4772143c23" } ], "licenses" : [ @@ -1863,54 +1955,140 @@ } } ], - "purl" : "pkg:maven/org.apache.tomcat/tomcat-annotations-api@9.0.84?type=jar", + "purl" : "pkg:maven/xerces/xercesImpl@2.12.2?type=jar", + "externalReferences" : [ + { + "type" : "website", + "url" : "https://xerces.apache.org/xerces2-j/" + }, + { + "type" : "vcs", + "url" : "https://svn.apache.org/repos/asf/xerces/java/" + } + ], + "type" : "library", + "bom-ref" : "pkg:maven/xerces/xercesImpl@2.12.2?type=jar" + }, + { + "group" : "xml-apis", + "name" : "xml-apis", + "version" : "1.4.01", + "description" : "xml-commons provides an Apache-hosted set of DOM, SAX, and JAXP interfaces for use in other xml-based projects. Our hope is that we can standardize on both a common version and packaging scheme for these critical XML standards interfaces to make the lives of both our developers and users easier. The External Components portion of xml-commons contains interfaces that are defined by external standards organizations. For DOM, that's the W3C; for SAX it's David Megginson and sax.sourceforge.net; for JAXP it's Sun.", + "scope" : "required", + "hashes" : [ + { + "alg" : "MD5", + "content" : "7eaad6fea5925cca6c36ee8b3e02ac9d" + }, + { + "alg" : "SHA-1", + "content" : "3789d9fada2d3d458c4ba2de349d48780f381ee3" + }, + { + "alg" : "SHA-256", + "content" : "a840968176645684bb01aed376e067ab39614885f9eee44abe35a5f20ebe7fad" + }, + { + "alg" : "SHA-512", + "content" : "8db0283b6840cd6407957d296b802e3edf90653e2722f8e29f86c1c0b60996c4b43e9e065e6864dab89b2138ddb0174d9b4fdda4a93f94eeb884783db82f3268" + }, + { + "alg" : "SHA-384", + "content" : "bce0ec0f0f692213a1110197c4a11c333673ae0630481255d12b441a8cba70aecfaf104c3d8d9b500ed2a0a19a2bfcce" + }, + { + "alg" : "SHA3-384", + "content" : "c1d8154ef6eee57dfe6ae9a1c1a2525e9ec2aab3631911a53c064ea6480c0b3b1ce8dd079db7b3693d7ef81daba28ace" + }, + { + "alg" : "SHA3-256", + "content" : "09eb76497eac5012ce1000c52f4e597c4941a44b9d960b1ac58a19beb2dd63fc" + }, + { + "alg" : "SHA3-512", + "content" : "1e4eb902e50b3388da4d161ee49f4d47b61dddd2ad10e6ef6cbb67c4ebc9043e0b65ae59a4a0c8eb03dd28814ce4aedd7e0d4962a0aedc3bdcf7de37cde38f66" + } + ], + "licenses" : [ + { + "license" : { + "id" : "Apache-2.0" + } + }, + { + "license" : { + "id" : "SAX-PD", + "url" : "http://www.saxproject.org/copying.html" + } + }, + { + "license" : { + "name" : "The W3C License", + "url" : "http://www.w3.org/TR/2004/REC-DOM-Level-3-Core-20040407/java-binding.zip" + } + } + ], + "purl" : "pkg:maven/xml-apis/xml-apis@1.4.01?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://tomcat.apache.org/" + "url" : "http://xml.apache.org/commons/components/external/" + }, + { + "type" : "issue-tracker", + "url" : "http://issues.apache.org/bugzilla/" + }, + { + "type" : "mailing-list", + "url" : "http://mail-archives.apache.org/mod_mbox/xml-commons-dev/" + }, + { + "type" : "vcs", + "url" : "https://svn.apache.org/viewvc/xml/commons/tags/xml-commons-external-1_4_01/" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.apache.tomcat/tomcat-annotations-api@9.0.84?type=jar" + "bom-ref" : "pkg:maven/xml-apis/xml-apis@1.4.01?type=jar" }, { - "group" : "org.apache.tomcat.embed", - "name" : "tomcat-embed-el", - "version" : "9.0.84", - "description" : "Core Tomcat implementation", + "publisher" : "FasterXML", + "group" : "com.fasterxml.woodstox", + "name" : "woodstox-core", + "version" : "6.4.0", + "description" : "Woodstox is a high-performance XML processor that implements Stax (JSR-173), SAX2 and Stax2 APIs", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "3a0cd4945a15ee8d37f4b23cf2216e3d" + "content" : "afcba1114fca8199ef26346dd6011e90" }, { "alg" : "SHA-1", - "content" : "3fc7c06e3f2c23baf8bfd64320376fa701633602" + "content" : "c47579857bbf12c85499f431d4ecf27d77976b7c" }, { "alg" : "SHA-256", - "content" : "22370f6a152da44c9a7ea15e597f22ef6b057a8d3278f69ff50cc3452473bf97" + "content" : "d6eb9f2f40049a7a808baf11ffba0737648e62ff52fde9271d808e5d57a27279" }, { "alg" : "SHA-512", - "content" : "3373ff62438698fc3223e7474efca16bdc2a9dc9759e5815ccb8a0e3cc722ba2d581292b60b52eb1d86beb7c705b2640c81d69dfa7162f477d6ed1be8928d748" + "content" : "7da4cd51f7082e59b3cb78988cda78bf162e2b02457caf17242cb9cea9b8002ada15d4dfe774ca0355acdea95c88b67c4d06a27a61653cb84c9a46d27b2726c6" }, { "alg" : "SHA-384", - "content" : "7d018a18156839d5c3c92ac091a53710944e00955443f1a0b051b3cb40f0c7fc9a925efc776ab09f1f0a569102cca101" + "content" : "6e25d32eb4c127f7129ccd912ff882625d3fa43e8eba9bc55013a27a61806d1b865ec809bd21d58d3dbfa3d9e2a3d516" }, { "alg" : "SHA3-384", - "content" : "4f300a9fd6932daa3ff4db977860f66a7f88157e72e1481f1981d5597a4666daf76a309d5ff10312ba0968b56f0e4bbd" + "content" : "d384bf82404b7642340eb1a3f88e2d1e366bf3282534943f98c5f4946656f7e6ea86ba6c7bfeed7c4fda1678afdd282e" }, { "alg" : "SHA3-256", - "content" : "ac2d6743eafb0210717527467f014d8fd8ac97a12c5f2aaccf1922b01c4d268d" + "content" : "7d1e5fbd3f4197fcf6f4d097bc742a0b3f02fe9ae36ef4385362afab6cc85bee" }, { "alg" : "SHA3-512", - "content" : "656900dad4ca2261cdc8ffa7febfbf4edfe87e2cb32a8a34b830f0f3248ae707a473a82f69487a70003c3b2c0e92ed998c082ec22f172c86b8565b62b7df74ad" + "content" : "6020db3580dac2d5c0b7656a062b982d234952fc3feac5dfbb12f91bc019b6af430123ad46e5b5de28d7cb9562aec582febdbbfae8ce35ebc2ce0b837a335af6" } ], "licenses" : [ @@ -1920,55 +2098,67 @@ } } ], - "purl" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.84?type=jar", + "purl" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.4.0?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://tomcat.apache.org/" + "url" : "https://github.com/FasterXML/woodstox" + }, + { + "type" : "distribution-intake", + "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" + }, + { + "type" : "issue-tracker", + "url" : "https://github.com/FasterXML/woodstox/issues" + }, + { + "type" : "vcs", + "url" : "https://github.com/FasterXML/woodstox" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.84?type=jar" + "bom-ref" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.4.0?type=jar" }, { "publisher" : "SonarSource", "group" : "org.sonarsource.analyzer-commons", - "name" : "sonar-analyzer-commons", - "version" : "2.8.0.2699", - "description" : "Logic useful for a language plugin", + "name" : "sonar-performance-measure", + "version" : "2.18.0.3393", + "description" : "Logic to capture a hierarchy of performance measures, save it into a file, and merge files", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "e1a59ec0809b06b3f5e2c8e97a76b218" + "content" : "1854d57f67661c6950374be29145a017" }, { "alg" : "SHA-1", - "content" : "cada74c92a33d57d5bdb70b8178a9006754e601c" + "content" : "eb02954016253fd34551a4641e3215fdafc239c6" }, { "alg" : "SHA-256", - "content" : "e9e17c3b6e02624cc1981dc7c2100f9ea67b96aec66e6a785e0ed5202febd854" + "content" : "4a3f60003f00a88695158a522cfbb7119c2c696991f13b7ca391e7c1eaf46d34" }, { "alg" : "SHA-512", - "content" : "9197a2c16edd4ccbc39a33fe75e4a4175700306d9d1df2f4e146de37728aa8483a3355993bb8e8fb77ef9ff17490427cf55566d81364d82495f3e49c62ee21f2" + "content" : "f3f2cc2211f00a66c33cd81ef996557fda3ee89421b2fc4565c376dadc22dc2a25eb327e5dfa041f3c48b8fa8620b797ec6762fd74d3ddde0184e6598c211d39" }, { "alg" : "SHA-384", - "content" : "8385239d7eb9d7bc972fbb63ed5d887b2089129844037c957f0cc5bcd34b8a20deea0531022af0832193f020e94ad5fe" + "content" : "54138af00ebd5d85cb2f776d75d2455de1a058e657dff84d8e19a563d720fa819a1efd4d432a1d3c2dcb2fa31158c184" }, { "alg" : "SHA3-384", - "content" : "ce192d54341470644acee6f91217ddeb62f28d1ac2da58b0f73fb8ec9e5278463457f74dc4a264349051b6fc3dc25c3a" + "content" : "7855e1aba9691493ebd9a5d79ace4cbccdc1f9fd9194a8300f6b71367014e7fdaf04a7aa9db87ed195b7d738552e6080" }, { "alg" : "SHA3-256", - "content" : "a521179e465dec4a69e93e393df68d9c6719f393654a1e584bd3ff7a0cd39891" + "content" : "f65d3d9a6737a6bd62c31d2d463d011512c3aa434d0575d6e54a95dc00bc5c6e" }, { "alg" : "SHA3-512", - "content" : "36968ac582180921cb12e613073d261111b81ca042e47624bc07176f6926c6f7a40a11077e51d5e460add84747348b4a962cda95c6b6c1ffe372e032c570ad89" + "content" : "34d64169af99b65d4ee59cfd414e189af6ea00ae5118aae5976e1ec76752631138c08eae42b96e95f9668123bbe44a17907c7556003e0dfd988723fc50db0d31" } ], "licenses" : [ @@ -1979,11 +2169,11 @@ } } ], - "purl" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.8.0.2699?type=jar", + "purl" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.18.0.3393?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://docs.sonarqube.org/display/PLUG/Plugin+Library/sonar-analyzer-commons-parent/sonar-analyzer-commons" + "url" : "http://docs.sonarqube.org/display/PLUG/Plugin+Library/sonar-analyzer-commons-parent/sonar-performance-measure" }, { "type" : "build-system", @@ -1999,74 +2189,74 @@ }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-analyzer-commons/sonar-analyzer-commons" + "url" : "https://github.com/SonarSource/sonar-analyzer-commons/sonar-performance-measure" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.8.0.2699?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.18.0.3393?type=jar" }, { "publisher" : "SonarSource", - "group" : "org.sonarsource.analyzer-commons", - "name" : "sonar-xml-parsing", - "version" : "2.8.0.2699", - "description" : "Logic useful to read and analyze XML files", + "group" : "org.sonarsource.python", + "name" : "sonar-python-plugin", + "version" : "5.16.0.29940", + "description" : "Code Analyzer for Python", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "eeb2d8b488da7bd7c98cfb49b3d06830" + "content" : "96af3be952506f19faa9797702af83d2" }, { "alg" : "SHA-1", - "content" : "03e14b69bc7a2abbc0a595851f8f31540b208dd6" + "content" : "7358996b700859eefb489750874f6b276555ae44" }, { "alg" : "SHA-256", - "content" : "408ec4b66b8fda3fe8a333858aed7cbb3340f570790468f8a789de4cbf2c8c91" + "content" : "161047717514eb4299847263ccb553df5e5be8fc9ceb081aaf4015fa834c734a" }, { "alg" : "SHA-512", - "content" : "35be20dfa7f82d0ba024c2614359e4b52ac295a2c416d854103b3a7f9739d04e2eb3bb927064fe9ac11ed9dbe5f91f8a266fd16a2ed40675b50c43836d132829" + "content" : "09689460be8675a15d4f1c2cecb868563c94a54c311f992bdd190aef37300a80760966216f73c12824765d7a7562735799b9c08f0606f465b03c299778110b31" }, { "alg" : "SHA-384", - "content" : "426ea2055c0c9f6642b68a7b2eccbf4d7ee802dd3bfc010564b108a8c5cf54a3a9ce7fd3d07ab4adbbd54fa52bee64b5" + "content" : "bc18a99dabb6a1f04cd2bfdaffd3e1ba70688d16716b8cf40c9a751e94c6312b721b31478d7ea1baf3095da0654e6ae1" }, { "alg" : "SHA3-384", - "content" : "9bfe10431714c647f99ce6b8e4d8eaaa6b80862985380a5ce4da37cdcf95cf324f9008b9dd46e81e8ecaacd19fa8e1c3" + "content" : "5d4803f25bb278676d6aa3ec55c6fd4db93fb42d5966fe73f0d7c6ecc2edcd2633154defacccd021b82574399e095c6c" }, { "alg" : "SHA3-256", - "content" : "2c47cf7bd11d40d40d1da9406bbd00a578bee08621cf341598d8fad4c4e8f7d9" + "content" : "b5898d3547c883a1aeaeb1175ed6bf9b691ae896210df2a0ce22b74295ddc004" }, { "alg" : "SHA3-512", - "content" : "4eb5a2b0f0b527231f0bfb1bae4c798713e615a7c5929c0ac09f49b3d9fa5eb12cee0775842e6b7033d7163803a3737595fdf9f221eeaef69e43875c87b6c3bf" + "content" : "22c2445b64a2d200eb021df6bf93ef083c5487bde5c7923df897941445fd7f77eb9eac76542924195c8fdf17d43a3336a9b91f7c507ce8c36265447d8b77472c" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.8.0.2699?type=jar", + "purl" : "pkg:maven/org.sonarsource.python/sonar-python-plugin@5.16.0.29940?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://docs.sonarqube.org/display/PLUG/Plugin+Library/sonar-analyzer-commons-parent/sonar-xml-parsing" + "url" : "http://redirect.sonarsource.com/plugins/python.html" }, { "type" : "build-system", - "url" : "https://cirrus-ci.com/github/SonarSource/" + "url" : "https://cirrus-ci.com/github/SonarSource/sonar-python" }, { "type" : "issue-tracker", - "url" : "http://jira.sonarsource.com" + "url" : "https://jira.sonarsource.com/browse/SONARPY" }, { "type" : "mailing-list", @@ -2074,193 +2264,262 @@ }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-analyzer-commons/sonar-xml-parsing" + "url" : "https://github.com/SonarCommunity/sonar-python" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.8.0.2699?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.python/sonar-python-plugin@5.16.0.29940?type=jar" }, { - "group" : "xerces", - "name" : "xercesImpl", - "version" : "2.12.2", - "description" : "Xerces2 provides high performance, fully compliant XML parsers in the Apache Xerces family. This new version of Xerces continues to build upon the Xerces Native Interface (XNI), a complete framework for building parser components and configurations that is extremely modular and easy to program. The Apache Xerces2 parser is the reference implementation of XNI but other parser components, configurations, and parsers can be written using the Xerces Native Interface. For complete design and implementation documents, refer to the XNI Manual. Xerces2 provides fully conforming XML Schema 1.0 and 1.1 processors. An experimental implementation of the \"XML Schema Definition Language (XSD): Component Designators (SCD) Candidate Recommendation (January 2010)\" is also provided for evaluation. For more information, refer to the XML Schema page. Xerces2 also provides a complete implementation of the Document Object Model Level 3 Core and Load/Save W3C Recommendations and provides a complete implementation of the XML Inclusions (XInclude) W3C Recommendation. It also provides support for OASIS XML Catalogs v1.1. Xerces2 is able to parse documents written according to the XML 1.1 Recommendation, except that it does not yet provide an option to enable normalization checking as described in section 2.13 of this specification. It also handles namespaces according to the XML Namespaces 1.1 Recommendation, and will correctly serialize XML 1.1 documents if the DOM level 3 load/save APIs are in use.", + "publisher" : "SonarSource", + "group" : "org.sonarsource.python", + "name" : "python-frontend", + "version" : "5.16.0.29940", + "description" : "Parent pom of SonarSource public projects", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "40e4f2d5aacfbf51a9a1572d77a0e5e9" + "content" : "af8fb4754bb34b00450e1886e6e35f24" }, { "alg" : "SHA-1", - "content" : "f051f988aa2c9b4d25d05f95742ab0cc3ed789e2" + "content" : "3d29bbb908e0740432fd9e29f6f9fef3b61fa8bf" }, { "alg" : "SHA-256", - "content" : "6fc991829af1708d15aea50c66f0beadcd2cfeb6968e0b2f55c1b0909883fe16" + "content" : "2bf0a615cb8804200e9de8c3b407b6a928a16b34349f43c76bf9f6c548e8000c" }, { "alg" : "SHA-512", - "content" : "bfd21f2350bf0bb546a68d3303f28c6a15cee1e630138c169344c3f65fe39a15e61c6ff4e5239f38f2f1f9e488eff4d5565a4a0774263064ab6a30aa9fcaaed3" + "content" : "0b42071f37c0cf8dfc46c3a3ed915bdc1d99b0bc41706200305c7f962f7b14c79e19eb42f99488b874d45267015de3f9762d903d6c03c7fb1c4bd1ac331c45d8" }, { "alg" : "SHA-384", - "content" : "0a35ae0744f05973997b0710cc8d1d774867bc1c1b63ef5bf5f554d1b4c4ab42033f7819430e05ac623e7c8630aa7c52" + "content" : "5411758030a57ffedc16b7b9f93592107920e01b27b8b6b98c3cb0cec1bbb3eecfc0dfc36ba130b2616507a703938560" }, { "alg" : "SHA3-384", - "content" : "b016ed02d907b21c90b4a2560aa4c778e8aad1b5ecb0ba62777f668166c6e7b8a0c0deef7d1e63b7a9b1092c64c8a4a6" + "content" : "d2054bd5b799463c0364aebef1024584f37fc63b122b0d9a137d5d052b152ef3b23ebb64961222adc72f30e49ccdbe3d" }, { "alg" : "SHA3-256", - "content" : "875856aafff433840ee9933c01018cd18c0a13b46bd4472853698ef1dff83168" + "content" : "6eaa8027ba8e0f7c11c2a2da14084630735110429505016fd92d8292c33637f4" }, { "alg" : "SHA3-512", - "content" : "1587332fb01515a72b7856b1f566070dcd26fef33c5070039c28684215466a9b9d3a4625cf7181443e3c3a67a313a938cf0775f39b96daf43f5edd4772143c23" + "content" : "35de0af96a078f4bc7709776d051b3d40c5f965647096114d33cb47c2fda0aacef5453af4475302a074e351c796b30315daa182fc69f780f515ac046a19e9ff0" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/xerces/xercesImpl@2.12.2?type=jar", + "purl" : "pkg:maven/org.sonarsource.python/python-frontend@5.16.0.29940?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://xerces.apache.org/xerces2-j/" + "url" : "https://docs.sonarsource.com/sonarqube-server/latest/extension-guide/developing-a-plugin/plugin-basics/python/python-frontend/" + }, + { + "type" : "build-system", + "url" : "https://cirrus-ci.com/github/SonarSource/sonar-python" + }, + { + "type" : "issue-tracker", + "url" : "https://jira.sonarsource.com/browse/SONARPY" + }, + { + "type" : "mailing-list", + "url" : "https://community.sonarsource.com" }, { "type" : "vcs", - "url" : "https://svn.apache.org/repos/asf/xerces/java/" + "url" : "https://github.com/SonarSource/sonar-python/python-frontend" } ], "type" : "library", - "bom-ref" : "pkg:maven/xerces/xercesImpl@2.12.2?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.python/python-frontend@5.16.0.29940?type=jar" }, { - "group" : "xml-apis", - "name" : "xml-apis", - "version" : "1.4.01", - "description" : "xml-commons provides an Apache-hosted set of DOM, SAX, and JAXP interfaces for use in other xml-based projects. Our hope is that we can standardize on both a common version and packaging scheme for these critical XML standards interfaces to make the lives of both our developers and users easier. The External Components portion of xml-commons contains interfaces that are defined by external standards organizations. For DOM, that's the W3C; for SAX it's David Megginson and sax.sourceforge.net; for JAXP it's Sun.", + "group" : "com.google.protobuf", + "name" : "protobuf-java", + "version" : "4.29.0", + "description" : "Core Protocol Buffers library. Protocol Buffers are a way of encoding structured data in an efficient yet extensible format.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "7eaad6fea5925cca6c36ee8b3e02ac9d" + "content" : "5de9c1cc9a647278ab03d76ccfb8ff9d" }, { "alg" : "SHA-1", - "content" : "3789d9fada2d3d458c4ba2de349d48780f381ee3" + "content" : "ffea90ab158435d68de76951857ef5f8b0f98365" }, { "alg" : "SHA-256", - "content" : "a840968176645684bb01aed376e067ab39614885f9eee44abe35a5f20ebe7fad" + "content" : "16901851ebe5e89fe88aaad3c26866373695bc2e30627bb8932847e2f5fc2e76" }, { "alg" : "SHA-512", - "content" : "8db0283b6840cd6407957d296b802e3edf90653e2722f8e29f86c1c0b60996c4b43e9e065e6864dab89b2138ddb0174d9b4fdda4a93f94eeb884783db82f3268" + "content" : "ed9aae4faa56c04dc086af07078db3734f675eb4188bb2be98c94cc59a8e4e77b74195c47d70c7b697bc3b938e106fdc137ffda5358b3029795f28e7d9216d68" }, { "alg" : "SHA-384", - "content" : "bce0ec0f0f692213a1110197c4a11c333673ae0630481255d12b441a8cba70aecfaf104c3d8d9b500ed2a0a19a2bfcce" + "content" : "d204ff730ba5eff0eddd9439f05ab89e87194fc6c69d50054da593ab7537495207374840701867856ea1e9aa87ef1e14" }, { "alg" : "SHA3-384", - "content" : "c1d8154ef6eee57dfe6ae9a1c1a2525e9ec2aab3631911a53c064ea6480c0b3b1ce8dd079db7b3693d7ef81daba28ace" + "content" : "9a3dc4e7ef4e1488b6ee4a653d9f47569bb3f543012ec20fe695d1bba2a7da8e329ffe70d5ef8e43fd9da1721fe3f3c1" }, { "alg" : "SHA3-256", - "content" : "09eb76497eac5012ce1000c52f4e597c4941a44b9d960b1ac58a19beb2dd63fc" + "content" : "16fec3a2d08bcc363c69d2a260a78020636d94dd4ed929050d8e8b51d37960f0" }, { "alg" : "SHA3-512", - "content" : "1e4eb902e50b3388da4d161ee49f4d47b61dddd2ad10e6ef6cbb67c4ebc9043e0b65ae59a4a0c8eb03dd28814ce4aedd7e0d4962a0aedc3bdcf7de37cde38f66" + "content" : "37c5a864aa97fd50a88a5c9b2a9c7eedd646eb4655ec041502e1892efb55b2f22e9f2292dcca120e74755a11f92dc41616e1dc6919d8906fe2c5802e25ed1187" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0" + "id" : "BSD-3-Clause", + "url" : "https://opensource.org/licenses/BSD-3-Clause" } + } + ], + "purl" : "pkg:maven/com.google.protobuf/protobuf-java@4.29.0?type=jar", + "externalReferences" : [ + { + "type" : "website", + "url" : "https://developers.google.com/protocol-buffers/protobuf-java/" }, { - "license" : { - "id" : "SAX-PD", - "url" : "http://www.saxproject.org/copying.html" - } + "type" : "distribution-intake", + "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" + }, + { + "type" : "vcs", + "url" : "https://github.com/protocolbuffers/protobuf/protobuf-java" + } + ], + "type" : "library", + "bom-ref" : "pkg:maven/com.google.protobuf/protobuf-java@4.29.0?type=jar" + }, + { + "publisher" : "FasterXML", + "group" : "com.fasterxml.jackson.core", + "name" : "jackson-databind", + "version" : "2.20.1", + "description" : "General data-binding functionality for Jackson: works on core streaming API", + "scope" : "required", + "hashes" : [ + { + "alg" : "MD5", + "content" : "49d7b7226df5ed4a036e48997a03d066" + }, + { + "alg" : "SHA-1", + "content" : "9586a7fe0e1775de0e54237fa6a2c8455c93ac06" + }, + { + "alg" : "SHA-256", + "content" : "34bbeb4526fff4f8565b12106bf85a6afcbae858966d489b54214ac46b2e26e8" + }, + { + "alg" : "SHA-512", + "content" : "16906e9c2f1962649eb21de148f362fedf2ce903c7ca0e6d68a01d43dbe8402b70cc537c104f36bc40a2bed6601162e7c21663735582e25bff7e27852be1405d" + }, + { + "alg" : "SHA-384", + "content" : "0591935cdfed1d65fa4a2820133ba129384f71921228ffe093f343d3ebf0b699762810d9208641726111015f0e35753b" }, + { + "alg" : "SHA3-384", + "content" : "855ccd449944e7884f8088c8c5b224e6e2f63bcd3123502618b4f5ded025e5978143af8c5d31215276932bc3bb089472" + }, + { + "alg" : "SHA3-256", + "content" : "53732171c9f2bdeaa40017a34683a00ac11e8a8c1bcefaed07eb91e629e20376" + }, + { + "alg" : "SHA3-512", + "content" : "05017efae94bc3c83131aaaa7911f20e7c367502cd2cd05c6cedabc877b55724bcde2521ba1da15bf1c1c3ccb1a235124b39b2d4860142f2b89d4df197cf5c83" + } + ], + "licenses" : [ { "license" : { - "name" : "The W3C License", - "url" : "http://www.w3.org/TR/2004/REC-DOM-Level-3-Core-20040407/java-binding.zip" + "id" : "Apache-2.0" } } ], - "purl" : "pkg:maven/xml-apis/xml-apis@1.4.01?type=jar", + "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://xml.apache.org/commons/components/external/" + "url" : "https://github.com/FasterXML/jackson" }, { - "type" : "issue-tracker", - "url" : "http://issues.apache.org/bugzilla/" + "type" : "distribution-intake", + "url" : "https://central.sonatype.com/api/v1/publisher" }, { - "type" : "mailing-list", - "url" : "http://mail-archives.apache.org/mod_mbox/xml-commons-dev/" + "type" : "issue-tracker", + "url" : "https://github.com/FasterXML/jackson-databind/issues" }, { "type" : "vcs", - "url" : "https://svn.apache.org/viewvc/xml/commons/tags/xml-commons-external-1_4_01/" + "url" : "https://github.com/FasterXML/jackson-databind" } ], "type" : "library", - "bom-ref" : "pkg:maven/xml-apis/xml-apis@1.4.01?type=jar" + "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1?type=jar" }, { "publisher" : "FasterXML", - "group" : "com.fasterxml.woodstox", - "name" : "woodstox-core", - "version" : "6.4.0", - "description" : "Woodstox is a high-performance XML processor that implements Stax (JSR-173), SAX2 and Stax2 APIs", + "group" : "com.fasterxml.jackson.core", + "name" : "jackson-annotations", + "version" : "2.20", + "description" : "Core annotations used for value types, used by Jackson data binding package.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "afcba1114fca8199ef26346dd6011e90" + "content" : "b901def3c20752817f27130e4b8d6640" }, { "alg" : "SHA-1", - "content" : "c47579857bbf12c85499f431d4ecf27d77976b7c" + "content" : "6a5e7291ea3f2b590a7ce400adb7b3aea4d7e12c" }, { "alg" : "SHA-256", - "content" : "d6eb9f2f40049a7a808baf11ffba0737648e62ff52fde9271d808e5d57a27279" + "content" : "959a2ffb2d591436f51f183c6a521fc89347912f711bf0cae008cdf045d95319" }, { "alg" : "SHA-512", - "content" : "7da4cd51f7082e59b3cb78988cda78bf162e2b02457caf17242cb9cea9b8002ada15d4dfe774ca0355acdea95c88b67c4d06a27a61653cb84c9a46d27b2726c6" + "content" : "8926d89bfe7f427c7793f6af619249540f23f82eae055dd03d4cb163ff603a43dd6a3ebe43528d00789aed3df0dd2f10e08552fdec53e2691849b9769f57f0c9" }, { "alg" : "SHA-384", - "content" : "6e25d32eb4c127f7129ccd912ff882625d3fa43e8eba9bc55013a27a61806d1b865ec809bd21d58d3dbfa3d9e2a3d516" + "content" : "40ee4c1438a5a190624dff9deca83377f7e60690b4535359b2a79924f736bff7c8d077e5b01c6c8972735dc152f2ccf4" }, { "alg" : "SHA3-384", - "content" : "d384bf82404b7642340eb1a3f88e2d1e366bf3282534943f98c5f4946656f7e6ea86ba6c7bfeed7c4fda1678afdd282e" + "content" : "0fc0f697d03692b63c2b11fcabac51c630278ed6df15420975263ea4ad19418b3b71b7889497ed20a150035f9bcba79d" }, { "alg" : "SHA3-256", - "content" : "7d1e5fbd3f4197fcf6f4d097bc742a0b3f02fe9ae36ef4385362afab6cc85bee" + "content" : "6bf49e384735969af020f758b255ceed26af92d4cf456f6e7b83e8de53289f93" }, { "alg" : "SHA3-512", - "content" : "6020db3580dac2d5c0b7656a062b982d234952fc3feac5dfbb12f91bc019b6af430123ad46e5b5de28d7cb9562aec582febdbbfae8ce35ebc2ce0b837a335af6" + "content" : "3372f6c456a7f6a33ebc3ecc65daaf36288be2a14b1f2cb9fcd7387c07acab1c69ae803a366e5d12adf4934970ffd2e34017917c5f16a6d563bc94810f228ab3" } ], "licenses" : [ @@ -2270,157 +2529,152 @@ } } ], - "purl" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.4.0?type=jar", + "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.20?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://github.com/FasterXML/woodstox" + "url" : "https://github.com/FasterXML/jackson" }, { "type" : "distribution-intake", - "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" + "url" : "https://central.sonatype.com/api/v1/publisher" }, { "type" : "issue-tracker", - "url" : "https://github.com/FasterXML/woodstox/issues" + "url" : "https://github.com/FasterXML/jackson-annotations/issues" }, { "type" : "vcs", - "url" : "https://github.com/FasterXML/woodstox" + "url" : "https://github.com/FasterXML/jackson-annotations" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.4.0?type=jar" + "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.20?type=jar" }, { - "publisher" : "SonarSource", - "group" : "org.sonarsource.analyzer-commons", - "name" : "sonar-performance-measure", - "version" : "2.8.0.2699", - "description" : "Logic to capture a hierarchy of performance measures, save it into a file, and merge files", + "publisher" : "FasterXML", + "group" : "com.fasterxml.jackson.core", + "name" : "jackson-core", + "version" : "2.20.1", + "description" : "Core Jackson processing abstractions (aka Streaming API), implementation for JSON", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "bfdcb3a88a97fe66b288f61921bab1ae" + "content" : "889b2c417b61c9f4f460b06957147234" }, { "alg" : "SHA-1", - "content" : "0ecfd7e49341de39ad53f9608c31f30b6a10c441" + "content" : "5734323adfece72111769b0ae38a6cf803e3d178" }, { "alg" : "SHA-256", - "content" : "ebba386ff08f8bbe6e9a37a0666e91c8c8561af5e8b24de484a520e828ec64e7" + "content" : "ffab4d957daa2796cf24cb66d0b78a7090f1bcbe17c3a4578f09affaaf137089" }, { "alg" : "SHA-512", - "content" : "02d37166706b1a93248cfb82731318304950162814292a295f0252d0f5d7ec734cedaf4a9f960d30c85dc8bac0ee59d75089f5ae10c88212b98e4de7ef7c4d8b" + "content" : "0463e1c2e1d8e8cfa4954dfce491583f0ec9ec1de6e6f342d1e5f0c63dcfb959673552a279ec4e6b6cc69e6ac2de6d42dd512149ceb76620b5d780db7325e6a7" }, { "alg" : "SHA-384", - "content" : "84f70dfb7e80d7a6c1dad5ac31ce743f0da036e683881acf172d35f7d21ccbb3296165b88fcd4b2167cdc1234956bcdb" + "content" : "a279b2d57d019a05f65762ce670ce23e02466b11276d8c0687f3bb5ed40a8a1854bfe6dd2dc157d0f5695186f7d9a65a" }, { "alg" : "SHA3-384", - "content" : "e89f15bf1b1ff83ce691bd755daab7a6ac6cfb416ccdc12ebd1a7f427da2224c4b8371062ebaa3fa63ba878473e7a8d2" + "content" : "06b9f33e030a99fa95d171118ab668bee42e32b35b85e05750f8514128dbadc94026afde16dbadc0ff786027b09712a4" }, { "alg" : "SHA3-256", - "content" : "c08c9694411c5561032ace350fb1bb2201f3bfd0aa217e48047a399eb26e26c2" + "content" : "3e83a1a349d8ba3a4e76ee983f04b259a85263dda5090f55aae5535109c4b6c0" }, { "alg" : "SHA3-512", - "content" : "a47781adf6a0dd209579e9c09ddb1f53c88bf89dadd4a7829655599eaea3399f9a71cf7e3b9c831c0f7e86904d5de2e97a6c3df8c0c0126ce8f4f4ad73cda1a3" + "content" : "87b3a61a71a625adfc6b9b402079c26b223e19535ca5af07e4130932d479f9c22e90696911050d8ab8a09a6209651fe2f25f54d7d9a1493b6dab6f8acb76203d" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "id" : "Apache-2.0" } } ], - "purl" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.8.0.2699?type=jar", + "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.1?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://docs.sonarqube.org/display/PLUG/Plugin+Library/sonar-analyzer-commons-parent/sonar-performance-measure" + "url" : "https://github.com/FasterXML/jackson-core" }, { - "type" : "build-system", - "url" : "https://cirrus-ci.com/github/SonarSource/" + "type" : "distribution-intake", + "url" : "https://central.sonatype.com/api/v1/publisher" }, { "type" : "issue-tracker", - "url" : "http://jira.sonarsource.com" - }, - { - "type" : "mailing-list", - "url" : "https://community.sonarsource.com" + "url" : "https://github.com/FasterXML/jackson-core/issues" }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-analyzer-commons/sonar-performance-measure" + "url" : "https://github.com/FasterXML/jackson-core" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.8.0.2699?type=jar" + "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.1?type=jar" }, { - "publisher" : "SonarSource and Waleri Enns", + "publisher" : "SonarSource", "group" : "org.sonarsource.python", - "name" : "sonar-python-plugin", - "version" : "4.17.0.14845", - "description" : "Code Analyzer for Python", + "name" : "python-checks", + "version" : "5.16.0.29940", + "description" : "Parent pom of SonarSource public projects", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "a1f37ca54b6407c29e14d6a84ef527be" + "content" : "c6a6f14dd43b2ca777639d045d371686" }, { "alg" : "SHA-1", - "content" : "d2a19e1624695b1a8bf7691c028be1c1d795c3b4" + "content" : "7420c64bb23358297f8fb465d194b0abc81a268d" }, { "alg" : "SHA-256", - "content" : "4745222f0e3ff47ae4bef17fe6e6c8f50234c69d4992e81628c52217f3443564" + "content" : "8d71a04ae268809a329169124e821538409f323c25738a787f1004691830947a" }, { "alg" : "SHA-512", - "content" : "7fb3dc79348493ea5a16c8a436db16665126137f0dfcc146fd75dac317a686c26f81499e5a370341e87374fe28006670f48d7424ab2c7988e8e51a842872fc4a" + "content" : "49cc6c1c1f6d4ab7691e52ee582edc2dc4320706f0cba8b0264232bb8c648e0c1411fc349480d4126909275bc722a26ce7dc1d0442b0fe800d68e43dd502e8e0" }, { "alg" : "SHA-384", - "content" : "55bff9b2c2d2fede0efcaa6c64835bb2e42e94d4ba6196168d4d5b2f7fbd65cd8c03ae85f39937d27f873edcc359d565" + "content" : "0ec195c2cd805ba066715992213efab8234ad4fea211d38c11621b764ce81a82ec4eb13f372c3a6ae77663319de497ca" }, { "alg" : "SHA3-384", - "content" : "f38a0bc3cfd4b5d024c210e71fc0b63f41cc4bbac4bc501905fad95ceda64f81e39c3a53ca50b5c1e25250e802ce8a92" + "content" : "d59fe66bc7a1621385b1a8e6d9e7e9aba25f5bcd1bf7460aaeea718a9fdefa1f01d65bc6bbf08c4ea20d6ff5533321d5" }, { "alg" : "SHA3-256", - "content" : "2a9a49aac638a35dbc0ec3d31a79cb92a87bb148ce46ca7072bbb4d732a0cda6" + "content" : "6b6d15ca4b8e534cfb0a5b3a9dc4ea328d07647a6a5029cc5bc36cc0e33f4ae7" }, { "alg" : "SHA3-512", - "content" : "5861b8fa999a2e4117429bf16c4ee05f765050a41ca59fd6beb2499ac24020a0693f366b6807bce569cf789be4ef075ab320aa02580712ad32d0b10a0b1b34d4" + "content" : "258f4367d5303ee344945915f54637c52cdfd441d3ec1a642172dd417815e38993f14b35154b0d9c7d3f49dfad666e9cb2ca26a9993f52815180b4bb6bdf8dce" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.sonarsource.python/sonar-python-plugin@4.17.0.14845?type=jar", + "purl" : "pkg:maven/org.sonarsource.python/python-checks@5.16.0.29940?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://redirect.sonarsource.com/plugins/python.html" + "url" : "https://docs.sonarsource.com/sonarqube-server/latest/extension-guide/developing-a-plugin/plugin-basics/python/python-checks/" }, { "type" : "build-system", @@ -2436,66 +2690,66 @@ }, { "type" : "vcs", - "url" : "https://github.com/SonarCommunity/sonar-python" + "url" : "https://github.com/SonarSource/sonar-python/python-checks" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.python/sonar-python-plugin@4.17.0.14845?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.python/python-checks@5.16.0.29940?type=jar" }, { - "publisher" : "SonarSource and Waleri Enns", + "publisher" : "SonarSource", "group" : "org.sonarsource.python", - "name" : "python-frontend", - "version" : "4.17.0.14845", + "name" : "python-commons", + "version" : "5.16.0.29940", "description" : "Parent pom of SonarSource public projects", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "c55cb48cedabf79f2877ebb9d88f6b58" + "content" : "9d94ffb59a75cf874e054eb124bc1815" }, { "alg" : "SHA-1", - "content" : "4ff8dfa5ea7d5ad5847562d95396b919308caea3" + "content" : "0c4756f9dd9cc5caf3acc856171694e2fa033bcc" }, { "alg" : "SHA-256", - "content" : "437b54530740f33ae5e46bdf8348d1440684f7d1cb318a7ee058689bd9b97c76" + "content" : "5fb75ed5d0f7767f3d5877e1fc44a2cb4498b83c482e1e4cefd5c878f118225e" }, { "alg" : "SHA-512", - "content" : "4928573b4dde5237b3056a25d01fdcaa0d8477f66517d0939d332ff8ba434b6a03d884095701f4b571af131b3afc6b57feee148d69d86b8e62a3a4d39d2d1001" + "content" : "d8aa8345c5a55aa6a9cbcb261277e0f36e4756ea4a4d9dc99410053781a6305f9c98e1d0c2f0253e9e6140c40f6f9f19da26e7e85913407b42b20808aebfe9f0" }, { "alg" : "SHA-384", - "content" : "859f11ab3b6590bc07f6a082ef8d87775939341e064abd4c840ad326640c71b84e99a8ae281f0bece8bd5b8196db1c0d" + "content" : "ee39919d1c32d29c16e41ef2259b5b71f5670244c9c9b1224972eb4d38c90e963dedb6108ce8c0243e322086e585a3da" }, { "alg" : "SHA3-384", - "content" : "7dc1a501021011058c6e46cf0e069103aca9687de27aea29c42196af8d74c09ed668ec77284abafc12d635f4e0c9154e" + "content" : "ddc8bf3b9b5d30bb0916c90f676061729666587f674827a29dcb21a08fe4d59e42f5ce818c5730e2aa21f1befa74c130" }, { "alg" : "SHA3-256", - "content" : "84a8def8e68682978bda393edba28e6caa7d4c333fffce5c09a24e54a4104d20" + "content" : "da0ff73c07625578b2d3d55fcc5cd16406762ad670a77c46e7128f6c4e90ec3b" }, { "alg" : "SHA3-512", - "content" : "b44fdef1e3482a1f65d0d5345c69fb78ed32cee27f96abab033ae1e3e26923efd69e8b213ae7c9c367c0e9a87df3785154ecc58961a5261513dc1fb3e260d50d" + "content" : "624e8aaaee39fcad526d4e2699174f8aa9804fc1cb08418dd742374a91fdc3fd474173f59e64508a74029080e9e56d9c6c32e311b71533eba3eead882c4a736f" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.sonarsource.python/python-frontend@4.17.0.14845?type=jar", + "purl" : "pkg:maven/org.sonarsource.python/python-commons@5.16.0.29940?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://docs.sonarqube.org/display/PLUG/Plugin+Library/python/python-frontend" + "url" : "https://docs.sonarsource.com/sonarqube-server/latest/extension-guide/developing-a-plugin/plugin-basics/python/python-commons/" }, { "type" : "build-system", @@ -2511,210 +2765,210 @@ }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-python/python-frontend" + "url" : "https://github.com/SonarSource/sonar-python/python-commons" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.python/python-frontend@4.17.0.14845?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.python/python-commons@5.16.0.29940?type=jar" }, { - "group" : "com.google.protobuf", - "name" : "protobuf-java", - "version" : "3.25.1", - "description" : "Core Protocol Buffers library. Protocol Buffers are a way of encoding structured data in an efficient yet extensible format.", + "publisher" : "FasterXML", + "group" : "com.fasterxml.jackson.dataformat", + "name" : "jackson-dataformat-toml", + "version" : "2.20.1", + "description" : "Support for reading and writing TOML-encoded data via Jackson abstractions.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "7dc81d3c2187ce5627d134a37df88cc0" + "content" : "f3d12c27f5c0744054e8716f3ee4b3d2" }, { "alg" : "SHA-1", - "content" : "2933a5c3f022456d8842323fe0d7fb2d25a7e3c7" + "content" : "1f4f7249289053551eac7bc8ac6e646576d03e1a" }, { "alg" : "SHA-256", - "content" : "48a8e58a1a8f82eff141a7a388d38dfe77d7a48d5e57c9066ee37f19147e20df" + "content" : "3936e3fb83edd2754bb317d17a63cded43b5fac4fb82eabb4aaa502bb52f9835" }, { "alg" : "SHA-512", - "content" : "d4adb935097c4fee13838ea7c166b41a9c34977e436d2fa5e5e92aac1a95462846463895ad994858a442079627696ca14618ff97a0039abd3fcb8671d7961d3a" + "content" : "cd31529a28ff83585d8d5944943c528d4d26e0f547c5ed804c90a8c642b0cd34553d2f4b7878903312a06d4ad86351aa6591294dba4f61b0bb03da317aeef870" }, { "alg" : "SHA-384", - "content" : "2fc41e52f529bcbbe4d8938d262153ee7e7a098d51fc84a2720bade27aff0247af47629c3caa630b706001d769714d1c" + "content" : "e2f0cbd883ee0745e6c27d0cf83c1e48869f89cb444c099e553f25105d7800949b1db37fc5db5055e321fdce8b13ebde" }, { "alg" : "SHA3-384", - "content" : "9ff49c91b6ca5e5ebc8005b6179d171f3bb549b9ef667c694ea6cebe842bccbea1bedb2bab69d97e89270900915f125b" + "content" : "fd0c36a837dd0b756c3622606b1490218cba364f30d148bac78dfee7dbb1117a9f1504a2e0cac8d83cf6cdb17f0ecf7b" }, { "alg" : "SHA3-256", - "content" : "e3794da30f03c61b916aeb9aa2af625792dc7f236bf2bd16cbfffbf3ef186d59" + "content" : "58d572441da65e6c63de352d608a144b280bd3754a06128d1da840494c70ce6b" }, { "alg" : "SHA3-512", - "content" : "1d3bfb11f6cae1912bd5cd04aef53ae725d705e598fafaa185903d2c534ca2f88ad919321ec4bcdca36c9b1515097c5d47aa6868f5bd3b93732337bd564b3bb7" + "content" : "bdbc867b3d2a993b277d19c230f84dd52a8db5f6638f9a90f6d613b9eb7b2f49e3404dc78dba4877fdad3ed5bd255f27be808ec287898c833ee2347ee44a94f4" } ], "licenses" : [ { "license" : { - "id" : "BSD-3-Clause", - "url" : "https://opensource.org/licenses/BSD-3-Clause" + "id" : "Apache-2.0" } } ], - "purl" : "pkg:maven/com.google.protobuf/protobuf-java@3.25.1?type=jar", + "purl" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-toml@2.20.1?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://developers.google.com/protocol-buffers/protobuf-java/" + "url" : "https://github.com/FasterXML/jackson-dataformats-text" }, { "type" : "distribution-intake", - "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" + "url" : "https://central.sonatype.com/api/v1/publisher" + }, + { + "type" : "issue-tracker", + "url" : "https://github.com/FasterXML/jackson-dataformats-text/issues" }, { "type" : "vcs", - "url" : "https://github.com/protocolbuffers/protobuf/protobuf-java" + "url" : "https://github.com/FasterXML/jackson-dataformats-text/jackson-dataformat-toml" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.google.protobuf/protobuf-java@3.25.1?type=jar" + "bom-ref" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-toml@2.20.1?type=jar" }, { - "publisher" : "SonarSource and Waleri Enns", - "group" : "org.sonarsource.python", - "name" : "python-checks", - "version" : "4.17.0.14845", - "description" : "Parent pom of SonarSource public projects", + "publisher" : "FasterXML", + "group" : "com.fasterxml.jackson.datatype", + "name" : "jackson-datatype-jdk8", + "version" : "2.20.1", + "description" : "Add-on module for Jackson (https://github.com/FasterXML/jackson) to support JDK 8 data types.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "077f9306a20f8a6eca092f54a53a26e3" + "content" : "9360afe5a78d29ce5510f670b3286e77" }, { "alg" : "SHA-1", - "content" : "ef43f45c57346b910ac422d7aff2ab4b6fe25894" + "content" : "6a8bbc260ba834f67220117d9f08510d69c4a3f0" }, { "alg" : "SHA-256", - "content" : "7d6e1743538dbfa7310bc54fbb7e511a6fd8633549018d7e2b4ba67019a3123e" + "content" : "6821cdd695e95c4e6853ec855a7432c71f2f4be318b3ca190fbbf8a2e5f981f2" }, { "alg" : "SHA-512", - "content" : "f628f82e470f9af8e0da159464ef41996b5edbbab7ead94db853afc54992d8f155994becbb9acdfe4af46a41fbf5e3ae01ba6b17078d1e20861da5e4eedccafc" + "content" : "9aceae6ea4ac56a038982fc45e91942cc15d68b7e07e044c1e75a71760b2eb02e23a344f36966093be670a2d1f656146492f11148da06a4044b4a5d78e523beb" }, { "alg" : "SHA-384", - "content" : "43302f43c32c5b35c4f7b85e901c457ad7ce7c1d0cc8d891dceb828018d0fa06c09fd7b6a34764f187b0deb8f002db96" + "content" : "c55990a25083046bd3881b656d5fa351e5d2115ce861427cc8bdc64acbf85f9a3ea739f3510eedfc0372f226ed7ebd2a" }, { "alg" : "SHA3-384", - "content" : "2c847248451a6f0874fa6d91dedd203c7492db05161c15235d709e9e9bc6d8ff5900b7c60e0aeea74fb7566cb1a3db3e" + "content" : "9556b354a7fdf5324aa22d6a00b308508bfb55555c2a31ca159c2b9f35f8a3d4e904a7eb15388f6532bb464fcc642db5" }, { "alg" : "SHA3-256", - "content" : "32f3d74c14e3918b8af6c98cc32304cc5d0b835348cd15734033307e4e871d2f" + "content" : "b4018fdef370f16380205cf366a9b84f4721b5ff0a800e72e0a1a23f4a58848a" }, { "alg" : "SHA3-512", - "content" : "2429a23270a66433e76eade81bb8b8acd3d91b55a587c6230ecc1282e71b2fcd61d9867d100fe04b74d387516a7c0df4124d8aa82f300c07a82dba20b4c01920" + "content" : "9f9db93cecb859df97455ddfa61136406700ae786715a3754e0ac9f9993deb9df62c44e08233dcf463e792fcbba9a25e7472e34dba5970d9df7eecf959c71875" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "id" : "Apache-2.0" } } ], - "purl" : "pkg:maven/org.sonarsource.python/python-checks@4.17.0.14845?type=jar", + "purl" : "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.20.1?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://docs.sonarqube.org/display/PLUG/Plugin+Library/python/python-checks" + "url" : "https://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jdk8" }, { - "type" : "build-system", - "url" : "https://cirrus-ci.com/github/SonarSource/sonar-python" + "type" : "distribution-intake", + "url" : "https://central.sonatype.com/api/v1/publisher" }, { "type" : "issue-tracker", - "url" : "https://jira.sonarsource.com/browse/SONARPY" - }, - { - "type" : "mailing-list", - "url" : "https://community.sonarsource.com" + "url" : "https://github.com/FasterXML/jackson-modules-java8/issues" }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-python/python-checks" + "url" : "http://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jdk8" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.python/python-checks@4.17.0.14845?type=jar" + "bom-ref" : "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.20.1?type=jar" }, { "publisher" : "The Apache Software Foundation", - "group" : "commons-lang", - "name" : "commons-lang", - "version" : "2.6", - "description" : "Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.", + "group" : "org.apache.commons", + "name" : "commons-text", + "version" : "1.14.0", + "description" : "Apache Commons Text is a set of utility functions and reusable components for processing and manipulating text in a Java environment.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "4d5c1693079575b362edf41500630bbd" + "content" : "54960a12a82d52df3d5548d6934d87b2" }, { "alg" : "SHA-1", - "content" : "0ce1edb914c94ebc388f086c6827e8bdeec71ac2" + "content" : "adcb0d4c67eabc79682604b47eb852aaff21138a" }, { "alg" : "SHA-256", - "content" : "50f11b09f877c294d56f24463f47d28f929cf5044f648661c0f0cfbae9a2f49c" + "content" : "121fce2282910c8f0c3ba793a5436b31beb710423cbe2d574a3fb7a73c508e92" }, { "alg" : "SHA-512", - "content" : "4a5a3dbe4941c645e2cca068cca5c1882cfe988b02e7cd981d1e51784900767d1deab0e0e0566f559c9fcabb4a180e436d5bb948902d4f4106f37360466afb42" + "content" : "4975879372241025bd0a47fe540ed7d0cd3e5eba474b12af67a8c6016be0fbb4f4a3a4a0064f4d2b6aebce67d88ee814da345a5ba3a6ee4f6293b3b4e7bbd065" }, { "alg" : "SHA-384", - "content" : "9725bc421adc1dbcd6f937eca0f3075d186a2b353ece4cef66b0fe81bb8d3f7d7641c43e86d657ef526c719f0c2a8c90" + "content" : "a038f1a8b58bb7ec17ba55238d3e40f5d9386dfb17870630a728b22741a9592819374e9abbbc6402a439eea4db5b739a" }, { "alg" : "SHA3-384", - "content" : "4bc4eaaf2580ded6d552b96ae5261c936de95f69a1d137c47279c51bf2aa1406ae44f69ccc94486267b8441e53c4bd74" + "content" : "5325922bb72aa73d2d51cb3fb5592fc77097614fd3ab3ac77e3acdc0fe1dc8c18893cdd9a05768bb725fa40dd8c14527" }, { "alg" : "SHA3-256", - "content" : "b68d49ef037d428ea0c3e67a7a20f3d68a134bef30a1639ec08d28886b9f5629" + "content" : "31008266592ec8503bcc7f6b4e7125b0e377f57f3a697cdcb02ee7f20f84ddf1" }, { "alg" : "SHA3-512", - "content" : "2e9ffc0608827cffc0b48b7a0f35d371c66586c99fea2910f7c2a237c7c57d9ae4d65de7c8e018362c2e4f963c2f70a9196cebf35457f1dd0cea6c65c256f673" + "content" : "385249425d8c6ab181039195a03c6337f393a1e1419527e9f072d695367bc0bd6546e752d1912df557bd8788329f7609aa1c63ce42eb135e2d27b6141ce9280f" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0" + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], - "purl" : "pkg:maven/commons-lang/commons-lang@2.6?type=jar", + "purl" : "pkg:maven/org.apache.commons/commons-text@1.14.0?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://commons.apache.org/lang/" + "url" : "https://commons.apache.org/proper/commons-text" }, { "type" : "build-system", - "url" : "http://vmbuild.apache.org/continuum/" + "url" : "https://github.com/apache/commons-text/actions" }, { "type" : "distribution-intake", @@ -2722,19 +2976,19 @@ }, { "type" : "issue-tracker", - "url" : "http://issues.apache.org/jira/browse/LANG" + "url" : "https://issues.apache.org/jira/browse/TEXT" }, { "type" : "mailing-list", - "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/" + "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/" }, { "type" : "vcs", - "url" : "http://svn.apache.org/viewvc/commons/proper/lang/branches/LANG_2_X" + "url" : "https://gitbox.apache.org/repos/asf?p=commons-text.git" } ], "type" : "library", - "bom-ref" : "pkg:maven/commons-lang/commons-lang@2.6?type=jar" + "bom-ref" : "pkg:maven/org.apache.commons/commons-text@1.14.0?type=jar" }, { "publisher" : "Codehaus", @@ -2933,55 +3187,119 @@ "type" : "library", "bom-ref" : "pkg:maven/org.codehaus.woodstox/stax2-api@3.1.4?type=jar" }, + { + "publisher" : "SonarSource", + "group" : "org.sonarsource.go", + "name" : "sonar-go-plugin", + "version" : "1.32.0.5128", + "description" : "Code Analyzer for Go", + "scope" : "required", + "hashes" : [ + { + "alg" : "MD5", + "content" : "ea2de97a8b1020865b993afe78aff72f" + }, + { + "alg" : "SHA-1", + "content" : "daa3ce9acfba33b2dba823c64d72bf3a0fa2b25d" + }, + { + "alg" : "SHA-256", + "content" : "7ad9dd5e478be53d58ad12d060f0e4aaa5e5eb9f5fcb28411c8083da2d5e0b19" + }, + { + "alg" : "SHA-512", + "content" : "3176550be29c19e7fb8b90b6993b29f3b8b4b51ddfa4509bab6de91edc4d7b40e3384dc48df7731262cb671379d2c4163eef78565389a391a43d450dcba56996" + }, + { + "alg" : "SHA-384", + "content" : "b1e7333047001ad10c6058a5ede6bc27651bae3335c0faadc1a6bda3ba1b66b90f45aec62389eaa9ec41eba836dc0d52" + }, + { + "alg" : "SHA3-384", + "content" : "18184263d523ab59b12019479a129e608f201e2c096745e869d72e029c78d41409d64934307b1f1a343ab0e1475978f3" + }, + { + "alg" : "SHA3-256", + "content" : "3fddc018fee60147c78382440a963bf6812bf496bb1d25090b50475e185a0844" + }, + { + "alg" : "SHA3-512", + "content" : "c1fc155244473f90fcc327f33055b06cb2fb35a203421b832f627d12150d851640a407a84dd47498b372ad0337bb1881ffa8aeab9fec85cb5e04b924989c5db5" + } + ], + "licenses" : [ + { + "license" : { + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" + } + } + ], + "purl" : "pkg:maven/org.sonarsource.go/sonar-go-plugin@1.32.0.5128?type=jar", + "externalReferences" : [ + { + "type" : "website", + "url" : "http://www.sonarqube.org/" + }, + { + "type" : "vcs", + "url" : "https://github.com/SonarSource/sonar-go" + } + ], + "type" : "library", + "bom-ref" : "pkg:maven/org.sonarsource.go/sonar-go-plugin@1.32.0.5128?type=jar" + }, { "publisher" : "The Apache Software Foundation", "group" : "commons-io", "name" : "commons-io", - "version" : "2.11.0", + "version" : "2.20.0", "description" : "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "3b4b7ccfaeceeac240b804839ee1a1ca" + "content" : "94e7e6b9b5fe82388687b584d3571081" }, { "alg" : "SHA-1", - "content" : "a2503f302b11ebde7ebc3df41daebe0e4eea3689" + "content" : "36f3474daec2849c149e877614e7f979b2082cd2" }, { "alg" : "SHA-256", - "content" : "961b2f6d87dbacc5d54abf45ab7a6e2495f89b75598962d8c723cea9bc210908" + "content" : "df90bba0fe3cb586b7f164e78fe8f8f4da3f2dd5c27fa645f888100ccc25dd72" }, { "alg" : "SHA-512", - "content" : "5bd78eed456ede30119319c5bed8e3e4c443b6fd7bdb3a7a5686647bd83094d0c3e2832a7575cfb60e4ef25f08106b93476939d3adcfecf5533cc030b3039e10" + "content" : "fea08e150473673b0608eaee3ae1cb4e73834039db80d3b758710d6baf3a5840a0878a4eb64739ae9bb21ccc7148c8520fe873616a3f6d5cdb4305deabdd015c" }, { "alg" : "SHA-384", - "content" : "114f1e324d90ad887c177876d410f5787a8e8da6c48d4b2862d365802c0efded3a88cb24046976bf6276cadad3712f0f" + "content" : "22db5e18e3512ed44474e75a124a052d5a1a6f35ce458f6a201a5ccc9510c57c10c117dba80ac6ce91745cf2b51e63f2" }, { "alg" : "SHA3-384", - "content" : "80288c03ad4d80d69f91d056ffc5570d49a9c76bf54ad2dff0121ecde26a560df76d05156f281f5c6db2a38ff07a873d" + "content" : "a70700d24df3c276ff387c359e0e940b834e413b72a49917de9a82615836eca8cca1bee1ed71790606c795da795e9151" }, { "alg" : "SHA3-256", - "content" : "5adfb5ccaf5f21a549422f426118a9542673926fcd18c68390cf813e791dcf6c" + "content" : "a8d044d3a4a069d0f20d24112b6427a3a6f02a925b31b932721d1f545ff32cec" }, { "alg" : "SHA3-512", - "content" : "7573f47f0babb53cefdc7c2309a0b982d800139064537b0797da442853d081010ad7c3c74a500598a0f800639a5d540eca21963ea652c68613907059bd4278c2" + "content" : "3417bf811d7e5fc1e71b8540f3379751434ea8540c421ff2c8bb5f5ce34401cd0ad8a829b65aa55e055c57141181762c4827099352c2bba453e48ad2df67526a" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0" + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], - "purl" : "pkg:maven/commons-io/commons-io@2.11.0?type=jar", + "purl" : "pkg:maven/commons-io/commons-io@2.20.0?type=jar", "externalReferences" : [ { "type" : "website", @@ -2989,7 +3307,7 @@ }, { "type" : "build-system", - "url" : "https://builds.apache.org/" + "url" : "https://github.com/apache/commons-io/actions" }, { "type" : "distribution-intake", @@ -3009,47 +3327,47 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/commons-io/commons-io@2.11.0?type=jar" + "bom-ref" : "pkg:maven/commons-io/commons-io@2.20.0?type=jar" }, { "publisher" : "Google Inc.", "group" : "com.google.googlejavaformat", "name" : "google-java-format", - "version" : "1.22.0", + "version" : "1.28.0", "description" : "A Java source code formatter that follows Google Java Style.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "fd1fbd4edf5d8eaca565217ff981b94b" + "content" : "8e2d4037e876b608ab0356477b5ead98" }, { "alg" : "SHA-1", - "content" : "6e31a0877a51e91076c857794a0b1df7af876b2d" + "content" : "f57d0ad670cc32c4d4a4ffb2cbef44a3dfddeecd" }, { "alg" : "SHA-256", - "content" : "4f4bdba0f2a3d7e84be47683a0c2a4ba69024d29d906d09784181f68f04af792" + "content" : "41dfe4d1012794ed15e0ffd70f89fd4fa65d5f15ce0bc0c70f8c2c127d6d010d" }, { "alg" : "SHA-512", - "content" : "d2006def13e5144e12568298014a23c86299a62e2bb7757c63f5f25405b1adb6f60b3f2f54bed9583cdd24cae71088e9f7aa846a10a089cce2a25972e48c7649" + "content" : "87bf18026e543bc9135d58153f05b8bf58b48bd59cec96e774e3f68bc8d601b9789924a9917b9a4f57b8a69bbe24dd20aef0a65543a63e7101b39317469346d2" }, { "alg" : "SHA-384", - "content" : "4aed1de35a09b196347064d45a5996fd7467c9b5cca0faf4655cbeb756053810cd3af2e45d74401aee626e30b1693ca7" + "content" : "bfd9e42e51d696fa079aa12d3541645873724ce48989615723533aba58fc3e4f77a37e9102bad2b391dc0252b449bad9" }, { "alg" : "SHA3-384", - "content" : "28fc6265d1886418ca44d1c7eea8709a2f38ba5b3f8cedb6a44d1a36f676e533662b61105db8b8d1f69fc4796fbcc8bd" + "content" : "b48a456db7981843ffc51f60511d4a5d52072bbe89da4dda6560cee4414493236e94ad1af4c5564449fb000501ca6ef4" }, { "alg" : "SHA3-256", - "content" : "08098285fccec01b2f3fce2e46ac210deb79862f21cb4ae96ff3a1a040df0809" + "content" : "ae18cf36a9212cdb243e3900cca7f9059273dfdf227fb97a189b5ae84cc989e4" }, { "alg" : "SHA3-512", - "content" : "122e32ab36408a79ed1153660ab1ba7639212d30921ea022da9affc19f76c5d874241a8584fc5c992ce74d2f01c2e06fddc784aee11c6d4238fc645ade3a1880" + "content" : "ac1207d9b7d8be02a222d1f11b44a5bcf1d95924404926698c8f23ba3688cfc49fc81e594e4f48d03ebbbf0ccc638706433ed462499b5b4d083538eb7e37541e" } ], "licenses" : [ @@ -3059,16 +3377,12 @@ } } ], - "purl" : "pkg:maven/com.google.googlejavaformat/google-java-format@1.22.0?type=jar", + "purl" : "pkg:maven/com.google.googlejavaformat/google-java-format@1.28.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/google/google-java-format/google-java-format" }, - { - "type" : "distribution-intake", - "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" - }, { "type" : "issue-tracker", "url" : "http://github.com/google/google-java-format/issues" @@ -3079,7 +3393,7 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/com.google.googlejavaformat/google-java-format@1.22.0?type=jar" + "bom-ref" : "pkg:maven/com.google.googlejavaformat/google-java-format@1.28.0?type=jar" }, { "group" : "com.google.guava", @@ -3361,68 +3675,6 @@ "type" : "library", "bom-ref" : "pkg:maven/org.checkerframework/checker-qual@3.37.0?type=jar" }, - { - "publisher" : "Google LLC", - "group" : "com.google.errorprone", - "name" : "error_prone_annotations", - "version" : "2.21.1", - "description" : "Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.", - "scope" : "required", - "hashes" : [ - { - "alg" : "MD5", - "content" : "75fe4fe33d308dd6cee3b601de902d27" - }, - { - "alg" : "SHA-1", - "content" : "6d9b10773b5237df178a7b3c1b4208df7d0e7f94" - }, - { - "alg" : "SHA-256", - "content" : "d1f3c66aa91ac52549e00ae3b208ba4b9af7d72d68f230643553beb38e6118ac" - }, - { - "alg" : "SHA-512", - "content" : "530318bcdf1ed8eeee408fc5a0775f1792cbf012b4ec55217a4498c8d2983b230a4d071b9e115565b0411faa51dd938823d9b619beb6786212c375ad3d1ebd8a" - }, - { - "alg" : "SHA-384", - "content" : "88e628431966a9b5cc19f96159874cefde1558e51d2ce233a0c2d47914eb9c6256f95882605a87cc6629a21ff70b72b4" - }, - { - "alg" : "SHA3-384", - "content" : "ebc750b211532fef9a84c3682d47f00b877e4082716ead1f4f883f02ab35bda8d5acfc475722215c4fe6ed9cfd54f43a" - }, - { - "alg" : "SHA3-256", - "content" : "9b4f193bf2f541844c6b1b5cf2d1c7f6e9465b97804d155f34530b203184e1ae" - }, - { - "alg" : "SHA3-512", - "content" : "1d76781cef387a185fd4fb69960394556062969bbbe0be74d0fb11f7c73758e5d35ff546ab04f6382c21c63705a1ffb975a549bf4d846fde54e412ecd4641485" - } - ], - "licenses" : [ - { - "license" : { - "id" : "Apache-2.0" - } - } - ], - "purl" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.21.1?type=jar", - "externalReferences" : [ - { - "type" : "website", - "url" : "https://errorprone.info/error_prone_annotations" - }, - { - "type" : "vcs", - "url" : "https://github.com/google/error-prone/error_prone_annotations" - } - ], - "type" : "library", - "bom-ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.21.1?type=jar" - }, { "group" : "com.google.j2objc", "name" : "j2objc-annotations", @@ -3491,74 +3743,77 @@ ], "dependencies" : [ { - "ref" : "pkg:maven/com.ibm/common@1.0.3-SNAPSHOT?type=jar", + "ref" : "pkg:maven/com.ibm/common@2.0.0-SNAPSHOT?type=jar", "dependsOn" : [ - "pkg:maven/org.jetbrains/annotations@24.1.0?type=jar", - "pkg:maven/org.sonarsource.api.plugin/sonar-plugin-api@9.13.0.360?type=jar", - "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", - "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar", - "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar", - "pkg:maven/org.sonarsource.java/sonar-java-plugin@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.python/sonar-python-plugin@4.17.0.14845?type=jar", - "pkg:maven/com.google.googlejavaformat/google-java-format@1.22.0?type=jar" + "pkg:maven/org.sonarsource.api.plugin/sonar-plugin-api@13.4.3.4290?type=jar", + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", + "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar", + "pkg:maven/org.sonarsource.java/sonar-java-plugin@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.python/sonar-python-plugin@5.16.0.29940?type=jar", + "pkg:maven/org.sonarsource.go/sonar-go-plugin@1.32.0.5128?type=jar", + "pkg:maven/com.google.googlejavaformat/google-java-format@1.28.0?type=jar" ] }, { - "ref" : "pkg:maven/org.jetbrains/annotations@24.1.0?type=jar", - "dependsOn" : [ ] + "ref" : "pkg:maven/org.sonarsource.api.plugin/sonar-plugin-api@13.4.3.4290?type=jar", + "dependsOn" : [ + "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar" + ] }, { - "ref" : "pkg:maven/org.sonarsource.api.plugin/sonar-plugin-api@9.13.0.360?type=jar", + "ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", + "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar", - "dependsOn" : [ ] + "ref" : "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar", + "dependsOn" : [ + "pkg:maven/com.google.errorprone/error_prone_annotations@2.41.0?type=jar" + ] }, { - "ref" : "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar", + "ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.41.0?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/org.sonarsource.java/sonar-java-plugin@7.33.0.35775?type=jar", + "ref" : "pkg:maven/org.sonarsource.java/sonar-java-plugin@8.18.0.40025?type=jar", "dependsOn" : [ - "pkg:maven/org.sonarsource.java/java-surefire@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.java/java-frontend@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.java/java-symbolic-execution@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.java/java-checks@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.java/java-checks-aws@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.java/external-reports@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.java/java-jsp@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.8.0.2699?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.8.0.2699?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.8.0.2699?type=jar" + "pkg:maven/org.sonarsource.java/java-surefire@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.java/java-frontend@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.java/java-checks@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.java/java-checks-aws@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.java/check-list@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.java/external-reports@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.java/java-jsp@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.18.0.3393?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.18.0.3393?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.18.0.3393?type=jar" ] }, { - "ref" : "pkg:maven/org.sonarsource.java/java-surefire@7.33.0.35775?type=jar", + "ref" : "pkg:maven/org.sonarsource.java/java-surefire@8.18.0.40025?type=jar", "dependsOn" : [ - "pkg:maven/org.sonarsource.java/java-frontend@7.33.0.35775?type=jar", + "pkg:maven/org.sonarsource.java/java-frontend@8.18.0.40025?type=jar", "pkg:maven/com.fasterxml.staxmate/staxmate@2.4.1?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.8.0.2699?type=jar" + "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.18.0.3393?type=jar" ] }, { - "ref" : "pkg:maven/org.sonarsource.java/java-frontend@7.33.0.35775?type=jar", + "ref" : "pkg:maven/org.sonarsource.java/java-frontend@8.18.0.40025?type=jar", "dependsOn" : [ - "pkg:maven/org.sonarsource.java/jdt-package@1.1.0.34?type=jar", + "pkg:maven/org.sonarsource.java/jdt-package@1.6.0.160?type=jar", "pkg:maven/org.sonarsource.sslr/sslr-core@1.24.0.633?type=jar", - "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.8.0.2699?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.8.0.2699?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.8.0.2699?type=jar" + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.18.0.3393?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.18.0.3393?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.18.0.3393?type=jar" ] }, { - "ref" : "pkg:maven/org.sonarsource.java/jdt-package@1.1.0.34?type=jar", + "ref" : "pkg:maven/org.sonarsource.java/jdt-package@1.6.0.160?type=jar", "dependsOn" : [ ] }, { @@ -3568,20 +3823,24 @@ ] }, { - "ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.8.0.2699?type=jar", + "ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", + "dependsOn" : [ ] + }, + { + "ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.18.0.3393?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.8.0.2699?type=jar", + "ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.18.0.3393?type=jar", "dependsOn" : [ "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar" ] }, { - "ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.8.0.2699?type=jar", + "ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.18.0.3393?type=jar", "dependsOn" : [ "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", - "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar" + "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar" ] }, { @@ -3595,7 +3854,7 @@ "dependsOn" : [ ] }, { - "ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.8.0.2699?type=jar", + "ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.18.0.3393?type=jar", "dependsOn" : [ "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", "pkg:maven/xerces/xercesImpl@2.12.2?type=jar", @@ -3620,117 +3879,97 @@ ] }, { - "ref" : "pkg:maven/org.sonarsource.java/java-symbolic-execution@7.33.0.35775?type=jar", - "dependsOn" : [ - "pkg:maven/org.sonarsource.java/java-frontend@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.8.0.2699?type=jar" - ] - }, - { - "ref" : "pkg:maven/org.sonarsource.java/java-checks@7.33.0.35775?type=jar", + "ref" : "pkg:maven/org.sonarsource.java/java-checks@8.18.0.40025?type=jar", "dependsOn" : [ - "pkg:maven/org.sonarsource.java/java-frontend@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.java/java-checks-common@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.java/java-symbolic-execution@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.8.0.2699?type=jar", - "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar", - "pkg:maven/org.springframework/spring-expression@6.1.5?type=jar" + "pkg:maven/org.sonarsource.java/java-frontend@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.java/java-checks-common@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.18.0.3393?type=jar", + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", + "pkg:maven/org.springframework/spring-expression@6.1.21?type=jar" ] }, { - "ref" : "pkg:maven/org.sonarsource.java/java-checks-common@7.33.0.35775?type=jar", + "ref" : "pkg:maven/org.sonarsource.java/java-checks-common@8.18.0.40025?type=jar", "dependsOn" : [ - "pkg:maven/org.sonarsource.java/java-frontend@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.8.0.2699?type=jar", - "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar" + "pkg:maven/org.sonarsource.java/java-frontend@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.18.0.3393?type=jar", + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar" ] }, { - "ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.8.0.2699?type=jar", + "ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.18.0.3393?type=jar", "dependsOn" : [ "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar" ] }, { - "ref" : "pkg:maven/org.springframework/spring-expression@6.1.5?type=jar", + "ref" : "pkg:maven/org.springframework/spring-expression@6.1.21?type=jar", "dependsOn" : [ - "pkg:maven/org.springframework/spring-core@6.1.5?type=jar" + "pkg:maven/org.springframework/spring-core@6.1.21?type=jar" ] }, { - "ref" : "pkg:maven/org.springframework/spring-core@6.1.5?type=jar", + "ref" : "pkg:maven/org.springframework/spring-core@6.1.21?type=jar", "dependsOn" : [ - "pkg:maven/org.springframework/spring-jcl@6.1.5?type=jar" + "pkg:maven/org.springframework/spring-jcl@6.1.21?type=jar" ] }, { - "ref" : "pkg:maven/org.springframework/spring-jcl@6.1.5?type=jar", + "ref" : "pkg:maven/org.springframework/spring-jcl@6.1.21?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/org.sonarsource.java/java-checks-aws@7.33.0.35775?type=jar", - "dependsOn" : [ - "pkg:maven/org.sonarsource.java/java-frontend@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.java/java-checks-common@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.8.0.2699?type=jar", - "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar" - ] - }, - { - "ref" : "pkg:maven/org.sonarsource.java/external-reports@7.33.0.35775?type=jar", + "ref" : "pkg:maven/org.sonarsource.java/java-checks-aws@8.18.0.40025?type=jar", "dependsOn" : [ - "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.8.0.2699?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.8.0.2699?type=jar" + "pkg:maven/org.sonarsource.java/java-frontend@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.java/java-checks-common@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.18.0.3393?type=jar", + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar" ] }, { - "ref" : "pkg:maven/org.sonarsource.java/java-jsp@7.33.0.35775?type=jar", + "ref" : "pkg:maven/org.sonarsource.java/check-list@8.18.0.40025?type=jar", "dependsOn" : [ - "pkg:maven/org.sonarsource.java/java-frontend@7.33.0.35775?type=jar", - "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@9.0.84?type=jar" + "pkg:maven/org.sonarsource.java/java-checks@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.java/java-checks-aws@8.18.0.40025?type=jar", + "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar" ] }, { - "ref" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@9.0.84?type=jar", + "ref" : "pkg:maven/org.sonarsource.java/external-reports@8.18.0.40025?type=jar", "dependsOn" : [ - "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.84?type=jar", - "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.84?type=jar" + "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.18.0.3393?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.18.0.3393?type=jar" ] }, { - "ref" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.84?type=jar", + "ref" : "pkg:maven/org.sonarsource.java/java-jsp@8.18.0.40025?type=jar", "dependsOn" : [ - "pkg:maven/org.apache.tomcat/tomcat-annotations-api@9.0.84?type=jar" + "pkg:maven/org.sonarsource.java/java-frontend@8.18.0.40025?type=jar" ] }, { - "ref" : "pkg:maven/org.apache.tomcat/tomcat-annotations-api@9.0.84?type=jar", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.84?type=jar", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:maven/org.sonarsource.python/sonar-python-plugin@4.17.0.14845?type=jar", + "ref" : "pkg:maven/org.sonarsource.python/sonar-python-plugin@5.16.0.29940?type=jar", "dependsOn" : [ - "pkg:maven/org.sonarsource.python/python-frontend@4.17.0.14845?type=jar", - "pkg:maven/org.sonarsource.python/python-checks@4.17.0.14845?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.8.0.2699?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.8.0.2699?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.8.0.2699?type=jar", - "pkg:maven/commons-lang/commons-lang@2.6?type=jar", + "pkg:maven/org.sonarsource.python/python-frontend@5.16.0.29940?type=jar", + "pkg:maven/org.sonarsource.python/python-checks@5.16.0.29940?type=jar", + "pkg:maven/org.sonarsource.python/python-commons@5.16.0.29940?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.18.0.3393?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.18.0.3393?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.18.0.3393?type=jar", + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", "pkg:maven/org.codehaus.staxmate/staxmate@2.0.1?type=jar" ] }, { - "ref" : "pkg:maven/org.sonarsource.python/python-frontend@4.17.0.14845?type=jar", + "ref" : "pkg:maven/org.sonarsource.python/python-frontend@5.16.0.29940?type=jar", "dependsOn" : [ "pkg:maven/org.sonarsource.sslr/sslr-core@1.24.0.633?type=jar", "pkg:maven/com.google.guava/guava@32.1.3-jre?type=jar", - "pkg:maven/com.google.protobuf/protobuf-java@3.25.1?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.8.0.2699?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.8.0.2699?type=jar" + "pkg:maven/com.google.protobuf/protobuf-java@4.29.0?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.18.0.3393?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.18.0.3393?type=jar", + "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1?type=jar" ] }, { @@ -3740,7 +3979,7 @@ "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar", "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", "pkg:maven/org.checkerframework/checker-qual@3.37.0?type=jar", - "pkg:maven/com.google.errorprone/error_prone_annotations@2.21.1?type=jar", + "pkg:maven/com.google.errorprone/error_prone_annotations@2.41.0?type=jar", "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar" ] }, @@ -3757,33 +3996,75 @@ "dependsOn" : [ ] }, { - "ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.21.1?type=jar", + "ref" : "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar", + "ref" : "pkg:maven/com.google.protobuf/protobuf-java@4.29.0?type=jar", + "dependsOn" : [ ] + }, + { + "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1?type=jar", + "dependsOn" : [ + "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.20?type=jar", + "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.1?type=jar" + ] + }, + { + "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.20?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/com.google.protobuf/protobuf-java@3.25.1?type=jar", + "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.1?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/org.sonarsource.python/python-checks@4.17.0.14845?type=jar", + "ref" : "pkg:maven/org.sonarsource.python/python-checks@5.16.0.29940?type=jar", "dependsOn" : [ - "pkg:maven/org.sonarsource.python/python-frontend@4.17.0.14845?type=jar", - "pkg:maven/commons-io/commons-io@2.11.0?type=jar", - "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.8.0.2699?type=jar" + "pkg:maven/org.sonarsource.python/python-frontend@5.16.0.29940?type=jar", + "pkg:maven/commons-io/commons-io@2.20.0?type=jar", + "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.18.0.3393?type=jar" ] }, { - "ref" : "pkg:maven/commons-io/commons-io@2.11.0?type=jar", + "ref" : "pkg:maven/commons-io/commons-io@2.20.0?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/commons-lang/commons-lang@2.6?type=jar", - "dependsOn" : [ ] + "ref" : "pkg:maven/org.sonarsource.python/python-commons@5.16.0.29940?type=jar", + "dependsOn" : [ + "pkg:maven/org.sonarsource.python/python-frontend@5.16.0.29940?type=jar", + "pkg:maven/org.sonarsource.python/python-checks@5.16.0.29940?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.18.0.3393?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.18.0.3393?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.18.0.3393?type=jar", + "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-toml@2.20.1?type=jar", + "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.20.1?type=jar", + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", + "pkg:maven/org.apache.commons/commons-text@1.14.0?type=jar", + "pkg:maven/org.codehaus.staxmate/staxmate@2.0.1?type=jar" + ] + }, + { + "ref" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-toml@2.20.1?type=jar", + "dependsOn" : [ + "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1?type=jar", + "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.1?type=jar" + ] + }, + { + "ref" : "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.20.1?type=jar", + "dependsOn" : [ + "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.1?type=jar", + "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1?type=jar" + ] + }, + { + "ref" : "pkg:maven/org.apache.commons/commons-text@1.14.0?type=jar", + "dependsOn" : [ + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar" + ] }, { "ref" : "pkg:maven/org.codehaus.staxmate/staxmate@2.0.1?type=jar", @@ -3797,7 +4078,11 @@ "dependsOn" : [ ] }, { - "ref" : "pkg:maven/com.google.googlejavaformat/google-java-format@1.22.0?type=jar", + "ref" : "pkg:maven/org.sonarsource.go/sonar-go-plugin@1.32.0.5128?type=jar", + "dependsOn" : [ ] + }, + { + "ref" : "pkg:maven/com.google.googlejavaformat/google-java-format@1.28.0?type=jar", "dependsOn" : [ "pkg:maven/com.google.guava/guava@32.1.3-jre?type=jar" ] diff --git a/engine/bom/bom.json b/engine/bom/bom.json index 9a66a31b..171a8a98 100644 --- a/engine/bom/bom.json +++ b/engine/bom/bom.json @@ -1,10 +1,10 @@ { "bomFormat" : "CycloneDX", "specVersion" : "1.5", - "serialNumber" : "urn:uuid:6e9cfceb-5e2e-33e1-90a7-9bf61c18b8b7", + "serialNumber" : "urn:uuid:2be77325-8254-3fa6-b787-7ee742bf0849", "version" : 1, "metadata" : { - "timestamp" : "2024-04-12T08:16:49Z", + "timestamp" : "2026-01-28T14:17:46Z", "lifecycles" : [ { "phase" : "build" @@ -52,32 +52,32 @@ } ], "component" : { - "publisher" : "IBM", + "publisher" : "cbomkit", "group" : "com.ibm", "name" : "engine", - "version" : "1.0.3-SNAPSHOT", + "version" : "2.0.0-SNAPSHOT", "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "https://www.gnu.org/licenses/lgpl.txt" + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], - "purl" : "pkg:maven/com.ibm/engine@1.0.3-SNAPSHOT?type=jar", + "purl" : "pkg:maven/com.ibm/engine@2.0.0-SNAPSHOT?type=jar", "externalReferences" : [ { "type" : "distribution-intake", - "url" : "https://eu.artifactory.swg-devops.com/artifactory/res-cryptoagility-team-maven-local" + "url" : "https://maven.pkg.github.com/cbomkit/sonar-cryptography" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.ibm/engine@1.0.3-SNAPSHOT?type=jar" + "bom-ref" : "pkg:maven/com.ibm/engine@2.0.0-SNAPSHOT?type=jar" }, "properties" : [ { "name" : "maven.goal", - "value" : "makeBom" + "value" : "makeAggregateBom" }, { "name" : "maven.scopes", @@ -87,291 +87,310 @@ }, "components" : [ { - "publisher" : "IBM", + "publisher" : "cbomkit", "group" : "com.ibm", "name" : "common", - "version" : "1.0.3-SNAPSHOT", + "version" : "2.0.0-SNAPSHOT", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "6b537a90ffd838bb65c5a9c2ff371dce" + "content" : "0bc212a0d7a96c40a0c6792249b21ee7" }, { "alg" : "SHA-1", - "content" : "76b39430ee28fd8962edae300a91d5ebc52c1076" + "content" : "70c6efeb7474e7b78595b6601584276bb7a90814" }, { "alg" : "SHA-256", - "content" : "1c9dcb0bdef66d58f48eebc5be6b625485ceba73f8e3310d8b72f5341094acea" + "content" : "aff8b56a14f886f07e502bf26baa476c3b6f3b79b8b6b003da2260435cda087f" }, { "alg" : "SHA-512", - "content" : "be406c24fb42f8595a51ff011041cb03271ff299d6c724961276f76ccc3c2a70a02e41726c188cd48081f064de989d16abf295658ac33a3d0f417a20eeb6c879" + "content" : "dcd37bc935a630965b07aa61633eb51e8ea58543a277f387edb93956a5153b447bd93a48ca2236a56ebf8df5b72b6f4e1759a4d222d1b12b480730f378ad87b1" }, { "alg" : "SHA-384", - "content" : "dcdf2d7e35abc1fc724ab290bbc10952df07a9b5ccd18373fb549c56bd14da38f529de16240e1fee98e083fc025876d8" + "content" : "8af172d828b3415fb085293a1788e04fe53cbba7ae53c2c4911f5333dc30cea9e3a11255922852f6269b09786b9fc8b4" }, { "alg" : "SHA3-384", - "content" : "113bf691c2e686f7b92e4b8c9a4bc788d6c14e77eb448d59a2532c2a0cfa35bdb8f9a87b3a02cc72052f0b0d65fa1ac4" + "content" : "8b03cb2f7fd323ad12fe42836a91697c8a74689b3fc732c16353eab599f709c88ca68dc05e1a4464990990bdd14000f2" }, { "alg" : "SHA3-256", - "content" : "b1103a71a3a027ab5c74986541390192f9c3e9aacc6c05bf6500b653b3b2e387" + "content" : "118e266f4ab89f83ee60b405959cdfb3f114d3f2553d16d5e34cf8791f8164f5" }, { "alg" : "SHA3-512", - "content" : "b03a0a66d302c49312991dd472959472afe74e62fea2b0fe725e4c34dad295a4ac7b34e9e13bcd916141836a2e00dde967da90844a5f65dd7120da3318092130" + "content" : "9af3f6a7540ea1567edea928cd5a7cec4dbea9e0726f9a03de4a0dbeb8eb7e0764ac1db432a816dd2f3d182a0102c7c866fc82f79212650825253055680ba09a" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "https://www.gnu.org/licenses/lgpl.txt" + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], - "purl" : "pkg:maven/com.ibm/common@1.0.3-SNAPSHOT?type=jar", + "purl" : "pkg:maven/com.ibm/common@2.0.0-SNAPSHOT?type=jar", "externalReferences" : [ { "type" : "distribution-intake", - "url" : "https://eu.artifactory.swg-devops.com/artifactory/res-cryptoagility-team-maven-local" + "url" : "https://maven.pkg.github.com/cbomkit/sonar-cryptography" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.ibm/common@1.0.3-SNAPSHOT?type=jar" + "bom-ref" : "pkg:maven/com.ibm/common@2.0.0-SNAPSHOT?type=jar" }, { - "group" : "org.jetbrains", - "name" : "annotations", - "version" : "24.1.0", - "description" : "A set of annotations used for code inspection support and code documentation.", + "publisher" : "SonarSource", + "group" : "org.sonarsource.api.plugin", + "name" : "sonar-plugin-api", + "version" : "13.4.3.4290", + "description" : "Plugin API for SonarQube, SonarCloud and SonarLint", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "38673abe87d12508cd05498eff0b9731" + "content" : "9121c8851ff1af1153c8dd4fa94c9ce7" }, { "alg" : "SHA-1", - "content" : "7af6a669488450c4a07c2c3254e2151df42d7d04" + "content" : "64194b3b6336b78df92f9fa5a58682c85ec5626b" }, { "alg" : "SHA-256", - "content" : "27a770dc7ce50500918bb8c3c0660c98290630ec796b5e3cf6b90f403b3033c6" + "content" : "ce1c77307f81897f3c8f901d81a0169db9f2ec614d65723679bc8bfedceb56dd" }, { "alg" : "SHA-512", - "content" : "663395a885561cc97eed411c67b496c06ec9a54906185a871de8743bf53e92152f4bc7c2a0118b7f3cfe85cc0a6c408ac6d589839b8d25c851637f85880331f2" + "content" : "8a9f34a03acbe05d9086119287ab2b2d84c8bff43367f75d42ca5bd5f66c54e4007d1affe247f7f3a0cb710328705b6a0db0db2e211b46e8979ea9e3eee6c401" }, { "alg" : "SHA-384", - "content" : "85779b72d864894f1d3cdd489b0a419c0620281c4fd22a061f4a3fe2aee91015681889573200cd2124c3add48a3216a6" + "content" : "7f1d268c151ad6fda7e5c5b21abb74b5a4b2bcb3e43fb4d3eceef01cab5e28e12b0d019d6d7da39a977f1fd8a6260ed2" }, { "alg" : "SHA3-384", - "content" : "0cfce80b012ba441be96368fe8af54e805100f7680fdbb7defae4dd07ff3c75cd0f89b993a61bef139a405637a73236f" + "content" : "c4ab8215fb558662a98375c9f347636f4e27fa912a23acadf804c5661caa2899529a6777f8c9f9a133c5a6e676ec0bf4" }, { "alg" : "SHA3-256", - "content" : "f7c5e25c9c16aad9f5482f3853660238db4f32be72c20f40383a1d20e0306f42" + "content" : "acb5c5fb43a612de73d7562499398bfb7678b878de04ecb697590fac4ed2e61c" }, { "alg" : "SHA3-512", - "content" : "0f74369cdb67a58c0f89033723665320eb535d1c1e66049347f6b3e25cbf7d1f80b8fa3a7b3e0b4fa8eae8d9ec8c30510b65bab581adeaff3f94651fa214105a" + "content" : "bf256b0cd721c685cc677bc5ab0af2eb68e469b7cdcd9e9bae7b60baa718b159b0e2cc9ca489a088b8d4556cef33da26d1bdf7fb1b952014b61e4b282aface76" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0" + "name" : "GNU LGPL 3", + "url" : "https://www.gnu.org/licenses/lgpl-3.0.txt" } } ], - "purl" : "pkg:maven/org.jetbrains/annotations@24.1.0?type=jar", + "purl" : "pkg:maven/org.sonarsource.api.plugin/sonar-plugin-api@13.4.3.4290?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://github.com/JetBrains/java-annotations" + "url" : "https://www.sonarqube.org/" }, { "type" : "vcs", - "url" : "https://github.com/JetBrains/java-annotations" + "url" : "https://github.com/SonarSource/sonar-plugin-api" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.jetbrains/annotations@24.1.0?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.api.plugin/sonar-plugin-api@13.4.3.4290?type=jar" }, { - "publisher" : "SonarSource", - "group" : "org.sonarsource.api.plugin", - "name" : "sonar-plugin-api", - "version" : "9.13.0.360", - "description" : "Plugin API for SonarQube, SonarCloud and SonarLint", + "publisher" : "QOS.ch", + "group" : "org.slf4j", + "name" : "slf4j-api", + "version" : "2.0.17", + "description" : "The slf4j API", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "b401a934655540b37bf6765778a7b759" + "content" : "b6480d114a23683498ac3f746f959d2f" }, { "alg" : "SHA-1", - "content" : "64b99cf118b048da0fa98a397b2e03f11c6970e9" + "content" : "d9e58ac9c7779ba3bf8142aff6c830617a7fe60f" }, { "alg" : "SHA-256", - "content" : "f20ae1d944f84a611583c33900d8788aa855a0d9ea66493e1046539715d53c0c" + "content" : "7b751d952061954d5abfed7181c1f645d336091b679891591d63329c622eb832" }, { "alg" : "SHA-512", - "content" : "f6b8fa7447300c1f95e14e9be12d36419b302d1844bd069ceaae134b3caa54d546a337be3c66e8e25ca5dd78fb95e76f92306cf5c26ba0730e3c730d443c2822" + "content" : "9a3e79db6666a6096a3021bb2e1d918f30f589d8de51d6b600f8ebd92515a510ae2d8f87919cc2dfa8365d64f10194cac8dfa0fb950160eef0e9da06f6caaeb9" }, { "alg" : "SHA-384", - "content" : "5cbdc17456d4ab1959cd8ad59d64a733224a3d03aa0f1e12968e0e7c86785e465d3f27f7c54b13c858326b4ee8bd60a7" + "content" : "6ea24f814a9b6ece428cfd0535e2f3b8927005745ef61006b50fdb5a90126ee5ea05650155382b3b755c5bce38ef3944" }, { "alg" : "SHA3-384", - "content" : "8930616bed39525c4c5c0396f8c541268b46b1df45432ee66ca6af8609a6ebd1e904493f025ba4b045401930a3ea2a2d" + "content" : "9b1015052f0ec43f9be09764e131834157599611cb52f6fe591c4ac6a8ab4817518f2a4b8871e5e738c8678e93af5557" }, { "alg" : "SHA3-256", - "content" : "4fb1225cc1bed06656fa92422d0425b44032725e6afb8d980c4af8cd8efc4b40" + "content" : "00559b4f4066b4917ba4fe2a6f23111eaeada321112d030910d218ced9084b5e" }, { "alg" : "SHA3-512", - "content" : "3a505b03e37ff9bd00248bf77344b880f206042a81b90eccbb42a78fe2496ff4f61c519f4ec77ded65d1f488b4caf6a69afae97a9a5a59f915ec8068176a0cbb" + "content" : "9579c2f7e7516e177c2d493ccc9eb8150978cf19f6f09b28d116f6935239fd56dc6af2b62b3336f79b0b462445550cd1fb5377a07001a6f44aaab6a32fa2fa47" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "https://www.gnu.org/licenses/lgpl-3.0.txt" + "id" : "MIT", + "url" : "https://opensource.org/licenses/MIT" } } ], - "purl" : "pkg:maven/org.sonarsource.api.plugin/sonar-plugin-api@9.13.0.360?type=jar", + "purl" : "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://www.sonarqube.org/" + "url" : "http://www.slf4j.org" + }, + { + "type" : "distribution-intake", + "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-plugin-api" + "url" : "https://github.com/qos-ch/slf4j/slf4j-parent/slf4j-api" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.api.plugin/sonar-plugin-api@9.13.0.360?type=jar" + "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar" }, { - "group" : "com.google.code.findbugs", - "name" : "jsr305", - "version" : "3.0.2", - "description" : "JSR305 Annotations for Findbugs", + "publisher" : "The Apache Software Foundation", + "group" : "org.apache.commons", + "name" : "commons-lang3", + "version" : "3.18.0", + "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang. The code is tested using the latest revision of the JDK for supported LTS releases: 8, 11, 17 and 21 currently. See https://github.com/apache/commons-lang/blob/master/.github/workflows/maven.yml Please ensure your build environment is up-to-date and kindly report any build issues.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "dd83accb899363c32b07d7a1b2e4ce40" + "content" : "48b9886957920a4cdb602780ca345087" }, { "alg" : "SHA-1", - "content" : "25ea2e8b0c338a877313bd4672d3fe056ea78f0d" + "content" : "fb14946f0e39748a6571de0635acbe44e7885491" }, { "alg" : "SHA-256", - "content" : "766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7" + "content" : "4eeeae8d20c078abb64b015ec158add383ac581571cddc45c68f0c9ae0230720" }, { "alg" : "SHA-512", - "content" : "bb09db62919a50fa5b55906013be6ca4fc7acb2e87455fac5eaf9ede2e41ce8bbafc0e5a385a561264ea4cd71bbbd3ef5a45e02d63277a201d06a0ae1636f804" + "content" : "c2c9d497fc1be411050f4011b2407764b78aa098eb42925af8a197eabdbc25b507f09fb898805e9bed4815f35236a508ee5b096e36f363df4d407232d50fc832" }, { "alg" : "SHA-384", - "content" : "ca0b169d3eb2d0922dc031133a021f861a043bb3e405a88728215fd6ff00fa52fdc7347842dcc2031472e3726164bdc4" + "content" : "4fb3f101106e4ce3666d5c15d276ba86f7683a0ef35f0384edfcd579ea454275edbb7400795d265ec3a38e39997e79b8" }, { "alg" : "SHA3-384", - "content" : "9903fd7505218999f8262efedb3d935d64bcef84aae781064ab5e1b24755466b269517cada562fa140cd1d417ede57a1" + "content" : "aada7e3612cf3f6190a19fa7c3db74df1e13ec56b300be9bb4317d261d5877c84ab59ba9a09168becdbd82cd41961395" }, { "alg" : "SHA3-256", - "content" : "223fda9a89a461afaae73b177a2dc20ed4a90f2f8757f5c65f3241b0510f00ff" + "content" : "306d286d0bd7549c203cc802fd755d354c4f7926fa023f4e83623ba1a6261250" }, { "alg" : "SHA3-512", - "content" : "3996b5af57a5d5c6a0cd62b11773360fb051dd86a2ba968476806a2a5d32049b82d69a24a3c694e8fe4d735be6a28e41000cc500cc2a9fb577e058045855d2d6" + "content" : "f6f1ecc684e309d7b9fc5c343792508fee935cd2119d962721662c5af88e4864ba6f47a863e083714f315f926c156de1970cd2fb577449bdfdc7bf98a4a451fa" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0" + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], - "purl" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", + "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://findbugs.sourceforge.net/" + "url" : "https://commons.apache.org/proper/commons-lang/" + }, + { + "type" : "build-system", + "url" : "https://github.com/apache/commons-lang/actions" }, { "type" : "distribution-intake", - "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" + "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" + }, + { + "type" : "issue-tracker", + "url" : "https://issues.apache.org/jira/browse/LANG" + }, + { + "type" : "mailing-list", + "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/" }, { "type" : "vcs", - "url" : "https://code.google.com/p/jsr-305/" + "url" : "https://gitbox.apache.org/repos/asf/commons-lang.git" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar" + "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar" }, { - "publisher" : "The Apache Software Foundation", - "group" : "org.apache.commons", - "name" : "commons-lang3", - "version" : "3.14.0", - "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.", + "group" : "com.google.code.gson", + "name" : "gson", + "version" : "2.13.2", + "description" : "Gson JSON library", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "4e5c3f5e6b0b965ef241d7d72ac8971f" + "content" : "a2c47e14ce5e956105458fe455f5d542" }, { "alg" : "SHA-1", - "content" : "1ed471194b02f2c6cb734a0cd6f6f107c673afae" + "content" : "48b8230771e573b54ce6e867a9001e75977fe78e" }, { "alg" : "SHA-256", - "content" : "7b96bf3ee68949abb5bc465559ac270e0551596fa34523fddf890ec418dde13c" + "content" : "dd0ce1b55a3ed2080cb70f9c655850cda86c206862310009dcb5e5c95265a5e0" }, { "alg" : "SHA-512", - "content" : "0338b50767166e5746ada6d6aa2e071e7221d699323bfb629f7f204b294c1dc4cad140610a129ed751798443b43e74e0818989c7df7d33c5915aa29742be9ba8" + "content" : "8974a052656d2e5ec968b6bac2edf51413ffc62040fdc65f14f00597e738ab544d22487f8579ba90618b5a7f94ef33773510fac67b408fee6ed274b38f3d9947" }, { "alg" : "SHA-384", - "content" : "908d0a22dc17aaa04caa5104cff7cad5b88b77eecb78dd5b3b3fefa22ff71ac50a4fb9e31c897ac243f9d841e4b3453d" + "content" : "98e8afe5b23c43b84e7a57e0e27f683a182fcf97ee3eeb6a1311582f7fecd846c806ffb092b620088dc03d256d8eaf27" }, { "alg" : "SHA3-384", - "content" : "8a7f2e061b998780870eddd571620fbf3d3c70bcb54e24539d0db504f59d65bc6bda58136284498babe29fcc5eabb7a6" + "content" : "d61d6b1cf6997c75287f454e536f855db8404e5fb9d0b8faa4dcc1e7a60ffefc05c2f92f3514e091808a8677b29f3619" }, { "alg" : "SHA3-256", - "content" : "022bf1f8039fcea717e9e34dd96eb80cfff05b43c9cbb76e9739b2421e2d027c" + "content" : "1c051cfe5e630b35d003f96e135de7c5d5cab145b6e1159143570cb246426a0d" }, { "alg" : "SHA3-512", - "content" : "0bcbc4edce974ea970c46e2da12ec98d9fd962c2cf64f757ac97136dec5623ca52af0c225895303c17ffabb57090e6772d7bd326d5e7438cef5454f8bbaeecfa" + "content" : "55ddee7f6c1659ffa82e5c308a0181b459cfeb3442f1f9868ff7e9a3c83376bd2ad527b16d5131df442ffd03d06c35dbd64458df6b02a111c1654f01db381ba5" } ], "licenses" : [ @@ -382,161 +401,137 @@ } } ], - "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar", + "purl" : "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://commons.apache.org/proper/commons-lang/" - }, - { - "type" : "build-system", - "url" : "https://github.com/apache/commons-parent/actions" - }, - { - "type" : "distribution-intake", - "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" + "url" : "https://github.com/google/gson" }, { "type" : "issue-tracker", - "url" : "https://issues.apache.org/jira/browse/LANG" - }, - { - "type" : "mailing-list", - "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/" + "url" : "https://github.com/google/gson/issues" }, { "type" : "vcs", - "url" : "https://gitbox.apache.org/repos/asf?p=commons-lang.git" + "url" : "https://github.com/google/gson/" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar" + "bom-ref" : "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar" }, { - "group" : "com.google.code.gson", - "name" : "gson", - "version" : "2.10.1", - "description" : "Gson JSON library", + "publisher" : "Google LLC", + "group" : "com.google.errorprone", + "name" : "error_prone_annotations", + "version" : "2.41.0", + "description" : "Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "df6097815738cb31fc56391553210843" + "content" : "75e3b25da8b8a2136463c4674f5e49bf" }, { "alg" : "SHA-1", - "content" : "b3add478d4382b78ea20b1671390a858002feb6c" + "content" : "4381275efdef6ddfae38f002c31e84cd001c97f0" }, { "alg" : "SHA-256", - "content" : "4241c14a7727c34feea6507ec801318a3d4a90f070e4525681079fb94ee4c593" + "content" : "a56e782b5b50811ac204073a355a21d915a2107fce13ec711331ad036f660fcc" }, { "alg" : "SHA-512", - "content" : "7503e4b8d05c6cc0ecb3a94c5a2e070e049083a441003a79a0cdf474f4286699b4ba1d2a655ddabb8ba10c50e7c36a7045cccdaee465166d4630db647aba2727" + "content" : "e2eb4bf9f36f95a4d4c5ea344db5cd90a456e63bef8e52932b8f6f4ecfdd59cb2f6c2ce9e67b0070c82177e42885688b95afef591b16001f789b378f18afdf30" }, { "alg" : "SHA-384", - "content" : "48a4786bd6e1867f058ee4fb676fc82d9d9f64a6d7420d4a47ae2398504c9de73222636614aeb4a9fbf10ee143d72226" + "content" : "43700b378624aa37197ef03a6b5ea40b5fbb6c0aa667eadf810ad36f0707dffaf3ea23471f2553327c3f5644cc875ee7" }, { "alg" : "SHA3-384", - "content" : "3df9a0332c2766124fe7c915cfea665d2e318ccaa7212415fabd9e93e6eb77de538725fd2ef313cde46f6d814c9566ea" + "content" : "8bf3293cf4b72c9a999948f8812190636ef3b0c35bab8dbf9a54c263eeab2a3b3d0774fdcab52c6d114551ff74a8aea2" }, { "alg" : "SHA3-256", - "content" : "d3374006d76d4f9acdf3d3a1a4f47899570f52442b2188f80c09a74f22139ecb" + "content" : "2ca1a59f4fdc37a3c83501542c63842fa4fe40c06f69a59a2a072e4af442a16a" }, { "alg" : "SHA3-512", - "content" : "2b10c2f4fe39d8712b430ff171823d7172c0a06685c1eb7de511e90159cec0e094fb2a9b50b747c5b039cb10f1fce9edf82ecbf9c47f76a6f31c4e3cb7586cce" + "content" : "6d1f419996b15e5a2bd9b268d166046e38fe9cc6c58fe56aaacbe71b95e3db8c8fe1d226e7f549ea227956feaf3087706bdfa79930fe432298bba9ec06c26a90" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0", - "url" : "https://www.apache.org/licenses/LICENSE-2.0" + "id" : "Apache-2.0" } } ], - "purl" : "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar", + "purl" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.41.0?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://github.com/google/gson/gson" - }, - { - "type" : "distribution-intake", - "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" - }, - { - "type" : "issue-tracker", - "url" : "https://github.com/google/gson/issues" + "url" : "https://errorprone.info/error_prone_annotations" }, { "type" : "vcs", - "url" : "https://github.com/google/gson/gson/" + "url" : "https://github.com/google/error-prone/error_prone_annotations" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar" + "bom-ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.41.0?type=jar" }, { "publisher" : "SonarSource", "group" : "org.sonarsource.java", "name" : "sonar-java-plugin", - "version" : "7.33.0.35775", + "version" : "8.18.0.40025", "description" : "Code Analyzer for Java", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "1b7d9cc6384c6be9b2b2be09d39a4409" + "content" : "b1a9179feade38e76fb3bd484426ed87" }, { "alg" : "SHA-1", - "content" : "74549fd0b22373ba0db5f5d8c9e83c4e1d4859d6" + "content" : "869cc6db9898899450852a5d89e77649dbc2e545" }, { "alg" : "SHA-256", - "content" : "84d7f2cce4bf4e66bacd053fd350489792519d83c292c2f4d5d8df0404450959" + "content" : "27dbc832bbeb28c70947d4d35fcc4a36b384911761831d8d5fc947cc1732d114" }, { "alg" : "SHA-512", - "content" : "f70839584286b4141cb252727f299be7a6f27cc8714d66b9c8b4a97d19030c5e39277ed85019cb2ffd9cd59f4b5c7780dd2bdd8cccd14d49a7aa618640069eca" + "content" : "b38980fb48ee7720a297190197e1ff20025ccaffad858a195234d4747773f4ed2ff2806b253ccd9d2121cddc71d1ac1fcc75ece9a07365db2089df89773add48" }, { "alg" : "SHA-384", - "content" : "ab79904167297307834e85b850b012fbdd22d6dbb938567ca8525219f8cd1cc2b725cc9ca781bca94dbab340580130ff" + "content" : "700d2a57ebc1672779fc11da69c29c822f8b0382bfb07afa5ef984abd2e38863b1ce8c2129c3ad173f796abebc14af96" }, { "alg" : "SHA3-384", - "content" : "5b177240092d00c9399f08b3148b58a299f0bb7a2a82458e5d4f4d5d0e4b5f6eba4f8b6f82c02369e8343c4bb0aea360" + "content" : "de424a453da7d8c708948d8bf9cffcabb6f00fac592f0be36b3d53fa41b95bc42ab6e1fcb4525c3c15793de00ad34478" }, { "alg" : "SHA3-256", - "content" : "f5829afa58615feeb89cdea0b96fa63ffda9c1401d5ac33d1420398ff42e59f9" + "content" : "3f2edc3ae30c79ac6e5db6bc7f968dd164f252b173bd3780ef1e06f68fec2962" }, { "alg" : "SHA3-512", - "content" : "4dc73ffee4b763a67a89b13a7574c03c9b7bfd08591088c30c64f9cb2aacd028d9c1bbbb4e5a68e5751635d9a3547e798eb4577b555187f410476a38e10ed9fc" + "content" : "73060df15758e595f9ad23967b9632b3b25584660362b8a660c699d7bfa092927edb2334ec711a2eca8394b03f0d32878e64b6b20411816b239f808747e7bcc2" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.sonarsource.java/sonar-java-plugin@7.33.0.35775?type=jar", + "purl" : "pkg:maven/org.sonarsource.java/sonar-java-plugin@8.18.0.40025?type=jar", "externalReferences" : [ - { - "type" : "website", - "url" : "http://redirect.sonarsource.com/plugins/java.html" - }, { "type" : "build-system", "url" : "https://cirrus-ci.com/github/SonarSource/sonar-java" @@ -552,65 +547,61 @@ { "type" : "mailing-list", "url" : "https://community.sonarsource.com" - }, - { - "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-java" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.java/sonar-java-plugin@7.33.0.35775?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.java/sonar-java-plugin@8.18.0.40025?type=jar" }, { "publisher" : "SonarSource", "group" : "org.sonarsource.java", "name" : "java-surefire", - "version" : "7.33.0.35775", - "description" : "Code Analyzer for Java", + "version" : "8.18.0.40025", + "description" : "Code Analyzer for Java :: Plugin to import JUnit report files", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "ebad97c089ab298bbf410b83645b5c91" + "content" : "8ec0e95937cd6bad70824f4fcbcdfd13" }, { "alg" : "SHA-1", - "content" : "1d6e25230cb5a0818e76cbf250b1f443c1117fe9" + "content" : "74166214d6bc038b62ac39fb6068ee92a7cc2377" }, { "alg" : "SHA-256", - "content" : "547a33116a008789a640ac520aca61b4aee460baf32d880f35ecbc247be17cf5" + "content" : "e5b3e323d65d5d1e07c67f2a3c231d976665dd36a755e4a25a529e020ecf246e" }, { "alg" : "SHA-512", - "content" : "79967a8394b8bada006fe03ed3519f73f9f4856d09cfaef3db91ab1e0dbd828bb9c69178a8151b678420e95489ace27ce9a59693be65fc3511696b446118c572" + "content" : "5f8666b8cabc3605c88d1066b3a4f102677a4592a055cddbd0857667a4c97da0b5963d4b6e9b9443bfa9a9f8eb5122bea5230c54d1948a8829137e0adfda2c53" }, { "alg" : "SHA-384", - "content" : "a3926f55e7e691e558e8fd2bed7da6f71cae00174987d108c5ccb5e4bff67052c1a7294ff83f93fecc89f0d37e72d2f2" + "content" : "7f91179e70d48c4f157b7c21e2d66043f197f5e77e93ca22cc514121f8aeb904f0be2d41cca33e026b79a6954b93620a" }, { "alg" : "SHA3-384", - "content" : "197a92ee27d6b823fe39f896604e292864f8e563ee9eebc8b7b8f98b5811c3bd3d31d1d991f91f305d61e78376c792fb" + "content" : "1181d83f7f281f38d1fd32a113cf36d0aafc3315b0f96394d1509a55cb71107a32dffc689991f08ea34d24afa146de4d" }, { "alg" : "SHA3-256", - "content" : "421298125883242fc4173246fd9f114c55e086270f0482a5b92f88462bf18f99" + "content" : "ee3151b15fa3040368071c28b161c21ffb9d0f0053ca3a869a8633790a8dbcb6" }, { "alg" : "SHA3-512", - "content" : "ff3c88c85a17e2983655e522450641dd191aa2f8818734af99b576778662e7025c6d635c6edc3052b3c42415693b7ba5c2137c7cac7140460d9405fb0d2780f9" + "content" : "94b7e5bc75cd127797485f48d5acca3853cefa2e8c433487268f12b177cd06e4aa4783f009f7a835099f406ccf1a22b69d0c3c523f3ab84fe8b348da312bd677" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.sonarsource.java/java-surefire@7.33.0.35775?type=jar", + "purl" : "pkg:maven/org.sonarsource.java/java-surefire@8.18.0.40025?type=jar", "externalReferences" : [ { "type" : "website", @@ -638,7 +629,7 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.java/java-surefire@7.33.0.35775?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.java/java-surefire@8.18.0.40025?type=jar" }, { "publisher" : "FasterXML", @@ -714,52 +705,52 @@ "publisher" : "SonarSource", "group" : "org.sonarsource.java", "name" : "java-frontend", - "version" : "7.33.0.35775", - "description" : "Code Analyzer for Java", + "version" : "8.18.0.40025", + "description" : "Code Analyzer for Java :: Front-end (Java Parser)", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "43bc91e0b5a11258625288f075b54633" + "content" : "a30b3194ba4e4aaf19e64afaf2c0cd9d" }, { "alg" : "SHA-1", - "content" : "2f748efd6e152c3526efd52a446cc8930381a16d" + "content" : "6c781ad5452a9f6c40efa651ec1514efd4956de0" }, { "alg" : "SHA-256", - "content" : "f22c60ed403f37c5378f2241c110d5f1427d9f8ac88710236a1662887a0961a5" + "content" : "6da24fc369a912c40bad484b580d15e8df7fd4a603e999b79952c1e88f1a10a4" }, { "alg" : "SHA-512", - "content" : "5ab1acc211dec17121948a678e59be6f050b1ba5360bf93fb724b51ff6160a29892c3847e5b0ad1deb450472bbdd5387f28403504670537b82477348dd97ca41" + "content" : "77fcb592867445be61fb472dc11eb2ed91e4d7675f6050728fe34fef4488bad75cf5fbb128bdbe6874820ece7e752f684065b98a6b0690bcbbc081f0efdf7a9c" }, { "alg" : "SHA-384", - "content" : "9d57998dcddbcbbf9ebcf79a68b928ce6aa9c8770c2b7565771b457ed299545f5ddbcc99a13889af53ab12e391c618d6" + "content" : "827447252ad585c8ef98e9f737d2b5ec4529f6f68f0fd571bfae08f3264186a4a5c9d864b488b66d933877c8d13f7863" }, { "alg" : "SHA3-384", - "content" : "64b3e663d553d1c3aa38d9e3b34cad8b38d440dc937bdb6e80edab6621f3c519d38ce4ec04f5353bf7e103cf315a808b" + "content" : "2eaeb68497c50d4bcd38ba010ab33f4833310fdf4c057d32ce622f01febd34d37d4b353b31ad53040a6dce7b1c287bf6" }, { "alg" : "SHA3-256", - "content" : "3febae6771046e4a5909ec72a2b6cd1749f384c910f3a090443a26d4651a1953" + "content" : "a2c28164e5d0c37e00f10f6b5187a6b8c31f87d2d3d86b12f9721516f91034e7" }, { "alg" : "SHA3-512", - "content" : "7555011fd0167dd38b798556104d02f2c5bd4b7e035065234f44ae22c7779c1a7fef4f3b17769d49deaf0635c99d211cb219ffac05da6c50ae1313f032565526" + "content" : "9163b1eac48b627a86db9c7b93fe258657561540fb605d926c645cb59e82fe6f72d1fb7d97120b4bc1488e27ede2420dbacb1ed021ff76642d10a2bc3cc54612" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.sonarsource.java/java-frontend@7.33.0.35775?type=jar", + "purl" : "pkg:maven/org.sonarsource.java/java-frontend@8.18.0.40025?type=jar", "externalReferences" : [ { "type" : "website", @@ -787,47 +778,47 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.java/java-frontend@7.33.0.35775?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.java/java-frontend@8.18.0.40025?type=jar" }, { "publisher" : "SonarSource", "group" : "org.sonarsource.java", "name" : "jdt-package", - "version" : "1.1.0.34", - "description" : "Parent pom of SonarSource public projects", + "version" : "1.6.0.160", + "description" : "Packaging of Eclipse JDT Core for SonarQube Java Analyzer", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "b37dc58a62e2d0cf93c0721fd974c31c" + "content" : "1df75f474b6bdb538899d8704b84757a" }, { "alg" : "SHA-1", - "content" : "505fc262c9e9347ff10f5c2e095a008db26a538b" + "content" : "1f8abb9d709c6ba2ab7ce3aa933857cb3735a1ce" }, { "alg" : "SHA-256", - "content" : "7ac622acdb900de5bb04529b822412731308f1f02a610e596b8a7789c28bde07" + "content" : "5efd84c8e2e39a310e9139b503355e9f31eeb3bcce779860ce96944096cf064f" }, { "alg" : "SHA-512", - "content" : "c264a6a75e00b39325e2be6e9cc4cc9903fcbb97e1e60766f09a42bad4d00ef0bc76b741a9c76ca76bf60fe0052987362f4f564a78e0ef3a654fdad833a00cf4" + "content" : "fcb097a96b7c6903ed8e50c95cea915cdb4ab2f4398869b812489d8f639509f970646adcd66afc8004b0c14807e05510d4406d7215726775695b0abcbe602dc5" }, { "alg" : "SHA-384", - "content" : "1f17c8e14bf19d6f93cd61f745ca681e2bf3ec5a2566a9233553e7d2c71f7896c7ee770c37db46536b98fd5cbb19f687" + "content" : "e500ad2d02142aa1fbbe1b9436f9e5bbb74d5c208b0c6aa0191725b126c9a3a4d2a21c708b2bd26a4f11a9ef880fbe07" }, { "alg" : "SHA3-384", - "content" : "40d04d2a79475f774b6a2b2a08b02387e2ac2c17e4b9b220fc1e59baf0554c569573d9abe22af1cff8e5fef69b4a43dd" + "content" : "60bd6cd889de6164963d49fe557e13456d962893e74d56bda559c6b57bd18ab1e8a065e64a2d8317e13dd754052d3f23" }, { "alg" : "SHA3-256", - "content" : "7bdaedda0da1edc3e63e8e62bcf3651b4d4169c24efa0baba01c368d2c6b7b74" + "content" : "32c6d9249b541d8ff7b488f8c584d8f068caace22037ec0e2340e6e850b919b7" }, { "alg" : "SHA3-512", - "content" : "11854f8cb06c601f4e54488b0943a8eac7790dfacd3355e52b274e8a39fe0aec36fd25da6c5711c7c294eaf540958c88013a4b57e7399f76c51b9e75d451c0a5" + "content" : "8378364906e74189f4255964961c90273743b41af7859c8bb946a092965b5787f37718ce6dccbed3cb531501361293fa96175327bd62d29a7ffe18be70caab78" } ], "licenses" : [ @@ -837,7 +828,7 @@ } } ], - "purl" : "pkg:maven/org.sonarsource.java/jdt-package@1.1.0.34?type=jar", + "purl" : "pkg:maven/org.sonarsource.java/jdt-package@1.6.0.160?type=jar", "externalReferences" : [ { "type" : "website", @@ -861,7 +852,7 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.java/jdt-package@1.1.0.34?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.java/jdt-package@1.6.0.160?type=jar" }, { "publisher" : "SonarSource", @@ -942,41 +933,41 @@ "publisher" : "SonarSource", "group" : "org.sonarsource.analyzer-commons", "name" : "sonar-regex-parsing", - "version" : "2.8.0.2699", + "version" : "2.18.0.3393", "description" : "Logic useful to read and analyze regular expressions", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "35a3545ee8cc01b7630817c10d3ad63b" + "content" : "c9c38681ffebe27c85c27119dcbac4e2" }, { "alg" : "SHA-1", - "content" : "f30c693d63d35e55921b600d1cc02f6ab45fb162" + "content" : "887b8fb94772af059501ce252122d572da041615" }, { "alg" : "SHA-256", - "content" : "83710ff002b9faf8afb413a05a08b0530a3cf8ef130815d5a46c955c478664b5" + "content" : "0c3ea5153be8a0766373b1992a18c91702a48b37647ca400a5cd077b2d78e9ba" }, { "alg" : "SHA-512", - "content" : "0a10e363e24117e86650a1a8e9a10a637c4f99cee64405607be5da8c4bf4ecc413e67ed78acbd174b699b5c7325db5f0d623c10ded7e642a3e98f1f74e680f11" + "content" : "830bd069a1714fd24676db83114479961e3baea2abd4884c549f147edb6b83eafe4c9230f429818a9adfba89a0c4a21d39eddbcf4c1b937cc65a65b09d1a00ef" }, { "alg" : "SHA-384", - "content" : "c3775396d6d0c3001eb244d062e0f5262b78aae72a9d0ba5760dfa8eb5310112c403d0889cc73ade62a9fafcb515c635" + "content" : "ab21ccd7f07b9bceac88e85180e1f1643b43c30db4d8cdff030cd7cbc53753987284bfc1d412d7def8ec5380244fcfad" }, { "alg" : "SHA3-384", - "content" : "87bd8e6f2545740da80e5ad7c17600f1a3d0bd86aab07557e5f2fc3cdeccfc5654f030b0fe11c93e084da7a1e8b1d95b" + "content" : "ae43098f0c1a4939136f8f285cf9ca44663c2c77fd1120dd338239e70799b713af401a1c334559565263a1dc7f8613ae" }, { "alg" : "SHA3-256", - "content" : "85d791fcc5a6001f15ca84efff8a03c55b791a88745deca215c8108c8318ad1d" + "content" : "546a71b50a13237407e76548bf1fe5d61bf08df21dfa086bd17c2e3a103d25a0" }, { "alg" : "SHA3-512", - "content" : "024d92e865992b92d5c29a65ebec60a706ea8f0859de1c55312377ef22188396855b4403033d1e03a05208f37c3a24ea2e948f463cb3c5c9bc53c8d4266e5e03" + "content" : "18dbb41e4e61ece31c96cd50cc7a1d85799119cd5a88fef79ac4553071a363f485161ada5324cd8ef8b4204d60f000f5fff39c4db0eba2d15e9babf59a01f889" } ], "licenses" : [ @@ -987,7 +978,7 @@ } } ], - "purl" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.8.0.2699?type=jar", + "purl" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.18.0.3393?type=jar", "externalReferences" : [ { "type" : "website", @@ -1011,62 +1002,62 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.8.0.2699?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.18.0.3393?type=jar" }, { "publisher" : "SonarSource", "group" : "org.sonarsource.java", - "name" : "java-symbolic-execution", - "version" : "7.33.0.35775", - "description" : "Code Analyzer for Java", + "name" : "java-checks", + "version" : "8.18.0.40025", + "description" : "Code Analyzer for Java :: Analyzer's checks", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "232f45616c57791e1376b309b99d6bf3" + "content" : "1ac68532191b336b9c760c596dbabf9f" }, { "alg" : "SHA-1", - "content" : "ea12ce7dc955bbafca59c3463ea1f44ad82e42ab" + "content" : "6165e4a7c0bc4dd5bd6bdc8b74184f167bb5436b" }, { "alg" : "SHA-256", - "content" : "8ac28a32e08e60c451cc153bee71bc028f3c72e4ab0e3a9c91bdc5b131ad0f57" + "content" : "78b31d837169a372353c0b91ff2776590039996d8d50dbf033b774f6930d3b8c" }, { "alg" : "SHA-512", - "content" : "6ad5b4c6b85757346f203924c26e908d5557ab4d03147afbf58e33e0f25fdb3999f94aee6973366d2441565466473c30c0861a1512c79f240cd35a9a97f0d35e" + "content" : "07b461fd5a923bbd6a60379e61fc73924ad7bc3e1623257fbb16fee3390eb61e0d930dd80cb4e290da538c958546d8206a66fb433889665312df60b63aeccb1f" }, { "alg" : "SHA-384", - "content" : "dbc472dd1173bcac5ba03e4a1165ed35bd7db93511cc8b99e5407aaaa65a56a92027d79c551a4df7120c2a8d87705797" + "content" : "d1227c576fd2372fdcb0240ef2c0fc5497aaca1251df248eabf8e767765e8023ad5e727fecdd3ade31b5af2022a9f519" }, { "alg" : "SHA3-384", - "content" : "1912414c5430f6b4711e20bb73e1076b5ad85babae3e8374fbb65f1dd3232ae380d9bc52891184befed50777dace89f9" + "content" : "5a6b215207811609717d9b39ddaa332369918cf91fbe3bba94ebfff23408624b1bade52b5cf03062d16364fd9c792ea8" }, { "alg" : "SHA3-256", - "content" : "a5cbfac546a7aaf0a2211c3f1beceb36e2ed3384c9d7d4ece2195d2932fba345" + "content" : "030d53c3182415e2896ffc5898b155cac52587a006b327a51c6c5ab59714c012" }, { "alg" : "SHA3-512", - "content" : "4f6974c7877b90dfb0acf4a6f8f412ea4f391164165ce3de75973c871e356a55fdc5ad4de3322a7e30e57f4d7caa87871b3671a63e19ca51a6f5b3cec949d281" + "content" : "a5a4a3f41c1ba65066554808baeff26551c033ccb31ec561ab622e535984db16d9742107f5d07b7d3bc6f25ec92c410600eca7cdf1d9e36fd23a6246d1220db7" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.sonarsource.java/java-symbolic-execution@7.33.0.35775?type=jar", + "purl" : "pkg:maven/org.sonarsource.java/java-checks@8.18.0.40025?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://redirect.sonarsource.com/plugins/java.html/java-symbolic-execution" + "url" : "http://redirect.sonarsource.com/plugins/java.html/java-checks" }, { "type" : "build-system", @@ -1086,66 +1077,66 @@ }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-java/java-symbolic-execution" + "url" : "https://github.com/SonarSource/sonar-java/java-checks" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.java/java-symbolic-execution@7.33.0.35775?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.java/java-checks@8.18.0.40025?type=jar" }, { "publisher" : "SonarSource", "group" : "org.sonarsource.java", - "name" : "java-checks", - "version" : "7.33.0.35775", - "description" : "Code Analyzer for Java", + "name" : "java-checks-common", + "version" : "8.18.0.40025", + "description" : "Code Analyzer for Java :: Common utilities for analyzer's checks", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "eaeb082ff51df115aaf0f3116faf4b84" + "content" : "5514880c7701b527cdcc574edae88dc7" }, { "alg" : "SHA-1", - "content" : "f11567226d2a4c2efcadf5545c3e0b1bb5f8142c" + "content" : "5e3906963a6aee9229c0d5735ec5b0caba9c7a36" }, { "alg" : "SHA-256", - "content" : "1eeb30e79298fa3cff7e7265a0d313a5572bdd726b8d83e83dcb1d144421c24b" + "content" : "89aadedaaa0bd0e788c55b3a78a5b086fd0dbc4935e1ca9e8d15266c81dbc1eb" }, { "alg" : "SHA-512", - "content" : "0034e5bf2e95fb181c476a3d1a5b111efcd22131f62d75eb6daf21da645b4e3ad8e35096274e3898e042a7463d831caea46a7840f843c10442d5f48b75041687" + "content" : "c7e5eea32cd08b004728418429b1b1255751a50a33f5a58712ee7ebddb2f15883cbbc9a999d3d388274662e1b398f2121bdd8e28465a7b86b5702be57a211e0a" }, { "alg" : "SHA-384", - "content" : "c2e5daa8bb17411f2ad282755de82c02d98a4940a81a76c26167713a1b5f55f7551875ae8459b5b77934d42f37f5e8e5" + "content" : "74603a766b61c433df59fa6df8c140018dc181c84af0476242c22c4fefea6f3437cde005c253c21301be0209797ef6c8" }, { "alg" : "SHA3-384", - "content" : "7de6a308f476947ec7a132968be161ea98ab1f135d6286129fde8ee5f8a1044a295c9febf482d7f5a5f83b65e1ccd36f" + "content" : "a9a28120b1353f47a2aff96a032d95d8988eb0b2c940bff0bcef27dc352b19950d0b1eb0de8a521f8c232cfc0b3abea5" }, { "alg" : "SHA3-256", - "content" : "8033896b6e57169054031f9d386f00cc0194f1cf930782becea1b12a5f5421f7" + "content" : "eeb22c67995bfa542c898dc47195590c37da85116f30df4b367bd970c162084a" }, { "alg" : "SHA3-512", - "content" : "789208a299ff2cbfe4ac9f6c647b0d703ff77040fce20e269b33a6d0712011d214704496d27ee8b63adf5778e4d8b58fde286e5a8f043f3b1813ec4c15a06fce" + "content" : "27adbd9adbd039453b3f8fc762117222650d45147cfb4ea26ad6daf65b994fd618f4b5a2173f0860fdaa5b1e096af32faa100c902377b811892d8664c094684a" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.sonarsource.java/java-checks@7.33.0.35775?type=jar", + "purl" : "pkg:maven/org.sonarsource.java/java-checks-common@8.18.0.40025?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://redirect.sonarsource.com/plugins/java.html/java-checks" + "url" : "http://redirect.sonarsource.com/plugins/java.html/java-checks-common" }, { "type" : "build-system", @@ -1165,51 +1156,51 @@ }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-java/java-checks" + "url" : "https://github.com/SonarSource/sonar-java/java-checks-common" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.java/java-checks@7.33.0.35775?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.java/java-checks-common@8.18.0.40025?type=jar" }, { "publisher" : "SonarSource", - "group" : "org.sonarsource.java", - "name" : "java-checks-common", - "version" : "7.33.0.35775", - "description" : "Code Analyzer for Java", + "group" : "org.sonarsource.analyzer-commons", + "name" : "sonar-analyzer-recognizers", + "version" : "2.18.0.3393", + "description" : "Shared code recognizers", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "377bec0957fff4818de779185dc9d46b" + "content" : "c8fea2140f3d18005b73ba0cd39ac3cf" }, { "alg" : "SHA-1", - "content" : "64e48e3a5d4bdc7ed674b21f8ddb393e548c9947" + "content" : "f741f10d470867172afa510990c16877ede70222" }, { "alg" : "SHA-256", - "content" : "a5db4cf127e982760c049faf6a3df99fafccdd5e1d58b59afba30b206bde96b2" + "content" : "0b4ef58f3bba93170f115ec2a73eb5596276abc21219b7fa733240b6bc3f7d52" }, { "alg" : "SHA-512", - "content" : "ebb84100013c73fd13cd502e5ea56a557568f5404b1b60d015ba5529c955c7ae70c612437cbb249068c7437d2dd4ef7f249a20f4f2090ea22c414123df062838" + "content" : "8edf444d67195ff181307c7f27744833b7fa47ff54ee2c687c92761cd7e0900e302f71541d2ccb84a0436ac04fc28ccc79c4700452455db6c155c6ac774bf26d" }, { "alg" : "SHA-384", - "content" : "a3e9a9cf69e639b84e22ef84a9937d8c8e829628ae2b203ec722394ad3b50e0c07fc1b6265d4bf8df3a86cac424125ef" + "content" : "821446711dedcdcb0a20bae33560f7f5d86ca528b7277170b3fe539bc20ab41f90096c6d6cb6cb9b67a7738cf56029fd" }, { "alg" : "SHA3-384", - "content" : "abe29bc0a84ab6ec1dc55fe8d349f72e37865e46a7eb114d85328882711f00f344cb7252ef9adc449009b62a4350f7bd" + "content" : "c036fd79d7730afa956adbabd42edfd0fb5473e5b4534d2ecc480b2b587099d923ee97a9ee51e40e1e027a413fb7b33d" }, { "alg" : "SHA3-256", - "content" : "2bfc0c71aef10df37be7c91fea1ab5e1d90f018c859aa7e3f0844ce2246137fa" + "content" : "aafdbc0fc6e44a212ee7cb7eb10d9cb4b23ceb25a532ea0a6508ea32141cb581" }, { "alg" : "SHA3-512", - "content" : "0e7d60391152b9fbc7b7238967dbf3c4c4c32e776f065b65e456c5ba5b88550723709c82125334fb749167231d602fd6bf3c610a7e83e2d34f3e339f139f71b6" + "content" : "747d1f9f8a556ff1c67bfa46aa1e8e8b9c7b76114e141845751376c7bb34d841349491766e6ed221938f6d64e8aed91663515d23283668711177d076f12eb852" } ], "licenses" : [ @@ -1220,23 +1211,19 @@ } } ], - "purl" : "pkg:maven/org.sonarsource.java/java-checks-common@7.33.0.35775?type=jar", + "purl" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.18.0.3393?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://redirect.sonarsource.com/plugins/java.html/java-checks-common" + "url" : "http://docs.sonarqube.org/display/PLUG/Plugin+Library/sonar-analyzer-commons-parent/sonar-analyzer-recognizers" }, { "type" : "build-system", - "url" : "https://cirrus-ci.com/github/SonarSource/sonar-java" - }, - { - "type" : "distribution-intake", - "url" : "file:./local-deployment" + "url" : "https://cirrus-ci.com/github/SonarSource/" }, { "type" : "issue-tracker", - "url" : "https://jira.sonarsource.com/browse/SONARJAVA" + "url" : "http://jira.sonarsource.com" }, { "type" : "mailing-list", @@ -1244,126 +1231,117 @@ }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-java/java-checks-common" + "url" : "https://github.com/SonarSource/sonar-analyzer-commons/sonar-analyzer-recognizers" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.java/java-checks-common@7.33.0.35775?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.18.0.3393?type=jar" }, { - "publisher" : "SonarSource", - "group" : "org.sonarsource.analyzer-commons", - "name" : "sonar-analyzer-recognizers", - "version" : "2.8.0.2699", - "description" : "Shared code recognizers", + "publisher" : "Spring IO", + "group" : "org.springframework", + "name" : "spring-expression", + "version" : "6.1.21", + "description" : "Spring Expression Language (SpEL)", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "f9c0e3225c8cd152cd8385ab211c1211" + "content" : "9ea32c5135a59a1264f13d8f8d5f355c" }, { "alg" : "SHA-1", - "content" : "10fa0ef13f09632cc2d8a97990512a36252b2e2c" + "content" : "72da3b3521a6788e143a47b0f7273ce7cf98c6f0" }, { "alg" : "SHA-256", - "content" : "5ba42aefbd8cf715575a9f40293a53b47cc82ba67943215a5382487e4042da50" + "content" : "29597c579b6b051d0dd2f56775c6e0078ac5252eab5c940ae687bd5e1fcafbd7" }, { "alg" : "SHA-512", - "content" : "0659ad40421f8be0d492fedf4cee72c531d264d8b9aa9327e789b9277de0a5b037c0dba25a25bc1efb5a858a959941e7e6fa3c7e166ff908db1ea272b5f05486" + "content" : "e54e346271cbc327b138f7a16d6c086f68290688c293753cc5513bc26a20ddd91ee194de32d91122432dae785692468d9d68971202e05c0571a65a44f0a518e1" }, { "alg" : "SHA-384", - "content" : "7b629d1b28bab3012d347760905c7235e579c868460098c2f4e9e9127e3eef1fd08be8f8cff2400552a2f6ba3c735d18" + "content" : "eb0349b3f3b4952f088a4243ab58b7167087e01a719babbe15e54c25d5b6cc3e8f52203542e447a465c3002a3588e6ec" }, { "alg" : "SHA3-384", - "content" : "e3f76485b0c60e07e0a8d93716847e12279c8914590d06000a95df859b952d2b1348a2c1b74a434f92aa36ae711ad858" + "content" : "a2d39ba6e734731a7588f70fac0ab312d835674427c384e7bc7fde62340d2d1c48217ec0bbdc953b3f436550aa0dc796" }, { "alg" : "SHA3-256", - "content" : "af4025e146ba6f1982d1351d1adcabee0a2acb8b90f7a7e8e76f019e408adc1f" + "content" : "be4aa16518c2a8cae7deb0b7f867a2a4be88a7a9b3030db00558615eae43d27c" }, { "alg" : "SHA3-512", - "content" : "ec20e48bda7e839e8c30bdb52156bd42a856f176282c3b1fd3241a268e1674b582acee92f83d72b0247a03634e46a2a740326dda9c089b704605b45c69322606" + "content" : "c4e3742d1ba2111bc4b72c1f9fcebff0d47c8466dd732d5f66ef2c7303a60d7da4e1a63fbf469df27075bf0f5174302dfa921722079425540151fd5e16fdfbfb" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "id" : "Apache-2.0" } } ], - "purl" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.8.0.2699?type=jar", + "purl" : "pkg:maven/org.springframework/spring-expression@6.1.21?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://docs.sonarqube.org/display/PLUG/Plugin+Library/sonar-analyzer-commons-parent/sonar-analyzer-recognizers" - }, - { - "type" : "build-system", - "url" : "https://cirrus-ci.com/github/SonarSource/" + "url" : "https://github.com/spring-projects/spring-framework" }, { "type" : "issue-tracker", - "url" : "http://jira.sonarsource.com" - }, - { - "type" : "mailing-list", - "url" : "https://community.sonarsource.com" + "url" : "https://github.com/spring-projects/spring-framework/issues" }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-analyzer-commons/sonar-analyzer-recognizers" + "url" : "https://github.com/spring-projects/spring-framework" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.8.0.2699?type=jar" + "bom-ref" : "pkg:maven/org.springframework/spring-expression@6.1.21?type=jar" }, { "publisher" : "Spring IO", "group" : "org.springframework", - "name" : "spring-expression", - "version" : "6.1.5", - "description" : "Spring Expression Language (SpEL)", + "name" : "spring-core", + "version" : "6.1.21", + "description" : "Spring Core", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "1f268a22bb7c0cb80958953ffbc21125" + "content" : "3c233d75937864d95e9051eafa9205f1" }, { "alg" : "SHA-1", - "content" : "7e21cb1c6bbef1509e12d485b75ffc61278d9fa7" + "content" : "dcc8607ee792439389e19111d83737b6b06ca4ac" }, { "alg" : "SHA-256", - "content" : "1f37b50dcaf091a43bb10d946178fff4082674497fd821438327815da14f7fd0" + "content" : "0729b69e52ac8d9a8d03991315690f632bb0984620a0595e52580d7f3557298d" }, { "alg" : "SHA-512", - "content" : "d5a13856a7f4619eaf1c9593f7739ec5cde37a555a98f0da4cb21aa591e87fb0bcdbd2a5da67d9b69a0dab0016f806c9d3f096bc8841c32bb98810daf1e5e7b7" + "content" : "8d926d38d47cc510378bff4cbd59a951660e8b813a22ffe662490631eb0f85668b007a0ee6961f4a6db2a80dab75181e13196fac10076510dc155c897a6aa999" }, { "alg" : "SHA-384", - "content" : "1e0c29ba819c5c8f5eb278a8f308a0119a476e81998ff5c7658b150352d357ef53c408566bd7a0b8023b7b41cabf4636" + "content" : "b8d3fff87f154bd509d1844c68a005787729112fac80512fa5d6df43d32b1f2fde0bd33e6ba6038e5d57e6265c8b97e5" }, { "alg" : "SHA3-384", - "content" : "f9cefe146557fe266e6e38bc8fbe157c7ef10fc606edafaf901d393ab140d25dabf4e60ff79c6a45a83c7eff890d3cac" + "content" : "d68af409a439cedb3b7da43946892d6012fb3000e849e929221a994cdd7ed1fd2791b1fbcc2b5903415ec6612f679cb9" }, { "alg" : "SHA3-256", - "content" : "ba29e269a74f3c452a64bd9e7a680c84c5c26b96397683c22435e4fcea8ecb9e" + "content" : "2a8bcfdbaae2b6c617f4896069b188e279faf8d169932c17f90c0e0ed4223fc0" }, { "alg" : "SHA3-512", - "content" : "8de364ab79572c8d2af2dc22ea5768d323b7268e03ae977701024f17e6fede13f03e248ef44c6789dea3007723beb1454c7795b45f3834b6040510661b6dee54" + "content" : "2890d9f8375e68786ea993d22ea2d9fd7c45bcbcce07949013857d7a3ff89da0aadb22a34493180c0d1fe905e744b453510b1f87631bbce8eda84c7844389884" } ], "licenses" : [ @@ -1373,7 +1351,7 @@ } } ], - "purl" : "pkg:maven/org.springframework/spring-expression@6.1.5?type=jar", + "purl" : "pkg:maven/org.springframework/spring-core@6.1.21?type=jar", "externalReferences" : [ { "type" : "website", @@ -1389,47 +1367,47 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/org.springframework/spring-expression@6.1.5?type=jar" + "bom-ref" : "pkg:maven/org.springframework/spring-core@6.1.21?type=jar" }, { "publisher" : "Spring IO", "group" : "org.springframework", - "name" : "spring-core", - "version" : "6.1.5", - "description" : "Spring Core", + "name" : "spring-jcl", + "version" : "6.1.21", + "description" : "Spring Commons Logging Bridge", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "6eeff94b635753591e74d979ffc2f793" + "content" : "0e017885cab7225c3859aaf24d3a96cb" }, { "alg" : "SHA-1", - "content" : "6dae1b06ffacbb9abab636be2dbc6acd3b6e5d68" + "content" : "fa75fc86c26dbbc6fb816e5b7aa5fc83f4494423" }, { "alg" : "SHA-256", - "content" : "476dac28509b3f47d0b5e895a639fa75ac2218f074ce214e44832a836c469f7e" + "content" : "f77ae10f41eaf02bc94a6424a3bad1d80a58b168e6af032ecb40a474d9e4f82d" }, { "alg" : "SHA-512", - "content" : "067d31ab99c842a586fbc1bf7aa7ac9aad0fa36d70f0e5bdb7e355514d66b1f6106dbb74ce15959a8dff8223a3e447ae30735e40f376e67f0ef8b70ed1a85002" + "content" : "b0821cb6220914b2bc517f858d21c4a3b98b5a487ee94f29acf044153ba5a568a44fead4d003f71ffbad65f61791d01e33ec05859cdf2a3a1bb853469dc37753" }, { "alg" : "SHA-384", - "content" : "25728b0246bc11715c8b1fec2a704b74a6c2bd6e41851b44aead5c76d0ad1493929bdbcef51dee8005404099388c03ee" + "content" : "84188cf73912ff5372b4ebc58fd0bc63ecc282240c896a987ebf3cfcbbc57cfeacd1a63ea5a9cd6fbcd3ea45e11a001a" }, { "alg" : "SHA3-384", - "content" : "ba98714211e0a6d8337b876cd6452216d1752b5274671f476fa06a63931da1e8ff0d7d0b4105967ab68e6f967aa8b43e" + "content" : "a787e5682a3d41e20e726caf3e0eabd9fd0b33beff448bdd8915c5d1755eec973d7e9ea229a806b00a1d969941364614" }, { "alg" : "SHA3-256", - "content" : "70c250de2d49aec369e3abf959c980036051ca0f54ddfc774840c95a8eabccae" + "content" : "9ab47bf24ddfbb2dbe03a02e131d4b9bd7ada2da72badba7a7fadd0363895247" }, { "alg" : "SHA3-512", - "content" : "c4d9cb5d1a7a738f6a762bd8f9a0fbd2455f3900e702b77d5d1d76079ab1b614b7993f992473ea57639a57fdb46e985a3b29191b3d8a18215b97e82b31cdb3e7" + "content" : "3d537771c6060078daca6cb556d0a1571f9a685e0287c8c186f3f8e441ce0d7460040de7368c7a51d4dd99faa0d6216baa1013c8acc7f3b981eb30e25cccdaa3" } ], "licenses" : [ @@ -1439,7 +1417,7 @@ } } ], - "purl" : "pkg:maven/org.springframework/spring-core@6.1.5?type=jar", + "purl" : "pkg:maven/org.springframework/spring-jcl@6.1.21?type=jar", "externalReferences" : [ { "type" : "website", @@ -1455,128 +1433,141 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/org.springframework/spring-core@6.1.5?type=jar" + "bom-ref" : "pkg:maven/org.springframework/spring-jcl@6.1.21?type=jar" }, { - "publisher" : "Spring IO", - "group" : "org.springframework", - "name" : "spring-jcl", - "version" : "6.1.5", - "description" : "Spring Commons Logging Bridge", + "publisher" : "SonarSource", + "group" : "org.sonarsource.java", + "name" : "java-checks-aws", + "version" : "8.18.0.40025", + "description" : "Code Analyzer for Java :: Analyzer's checks for AWS", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "4b7724c57ea12f13ce3fc49a18209b6c" + "content" : "8aed826c7d8696ce3699588cd6ff952b" }, { "alg" : "SHA-1", - "content" : "896ae3519327731589c6e77521656b50ae32d5b3" + "content" : "6cc1bba5a36b3eef6230e273866fc6dc309189af" }, { "alg" : "SHA-256", - "content" : "c53540419e482242c815db6d6a8cd80af85a6a895e38329b9d9bd6b4616503eb" + "content" : "5ee06300e5427acf74b378cf181a697b548a477ffcf1edfc216ae5345e40c1e0" }, { "alg" : "SHA-512", - "content" : "0de5bdae17924ab55ed7e6e97acbfeb60406fa99b10c1fd8a391f9f81c475691638535a297636fb79b51f02cf07d98ac613049235e9fdbf1186672c8b64c5967" + "content" : "47ecef1096030771bb0c24c2b3c15ebe51ab8a6f66d76ae2683ea4b54821f9c914ecd694b877a186c26650db463aedfa57e9a172fe509de26ca4f0a19867be61" }, { "alg" : "SHA-384", - "content" : "2844ddc317d6fed2c80c5090e3b4b976a063ad5fce4bf8dbfa7c1034cb647497a830142ff7e70b7eb0c8cf742a091071" + "content" : "242495b1e08269988e57a0e08730bb23d18fe614cf37af2ede8aa489a7a3ad581c0d5f970b7d25aee2db35f658649c26" }, { "alg" : "SHA3-384", - "content" : "dfc30f87671459ea2bdc8c25aa6ed814dd53a0ab60df4b98b44eb96ab28cd7bfce358c32b5ab8255d0c0d7ebba1a28b0" + "content" : "f8f74f485da5f891e8a98701cc7d7267548ebeb2d04861239a891547abebdda1951cc16de0003c60db18fa48ad9696f9" }, { "alg" : "SHA3-256", - "content" : "a7a4153deabf0b46852c6539f1d0d63bac5963eaf9ef73209097c3bd4b2118c3" + "content" : "b60ad5ee6b83beabd93c21866b2bd05eaf340ead9ef9f4d1f38492546d103d89" }, { "alg" : "SHA3-512", - "content" : "62add3aa8ea534168ba2eb4e811628e35970e17a2ae350de376fd95e8e0d70045dc9f6748075bafe4f74ebec4278bb3e36243478e08b4329840c8f068b30cde9" + "content" : "8bd74670d07ae07f638e31a27a8f8a00eb0fabd40337f3b601595c86769e31da58b969f08ca5424dbb48adc4d7c8477503a1d795cb8eeec3179f276273997685" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.springframework/spring-jcl@6.1.5?type=jar", + "purl" : "pkg:maven/org.sonarsource.java/java-checks-aws@8.18.0.40025?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://github.com/spring-projects/spring-framework" + "url" : "http://redirect.sonarsource.com/plugins/java.html/java-checks-aws" + }, + { + "type" : "build-system", + "url" : "https://cirrus-ci.com/github/SonarSource/sonar-java" + }, + { + "type" : "distribution-intake", + "url" : "file:./local-deployment" }, { "type" : "issue-tracker", - "url" : "https://github.com/spring-projects/spring-framework/issues" + "url" : "https://jira.sonarsource.com/browse/SONARJAVA" + }, + { + "type" : "mailing-list", + "url" : "https://community.sonarsource.com" }, { "type" : "vcs", - "url" : "https://github.com/spring-projects/spring-framework" + "url" : "https://github.com/SonarSource/sonar-java/java-checks-aws" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.springframework/spring-jcl@6.1.5?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.java/java-checks-aws@8.18.0.40025?type=jar" }, { "publisher" : "SonarSource", "group" : "org.sonarsource.java", - "name" : "java-checks-aws", - "version" : "7.33.0.35775", - "description" : "Code Analyzer for Java", + "name" : "check-list", + "version" : "8.18.0.40025", + "description" : "Code Analyzer for Java :: Generate the list of checks at build time", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "14dfa924e3e61569475db951d81dff71" + "content" : "523e390cec46df34c6686d8f61181bef" }, { "alg" : "SHA-1", - "content" : "2af499d9be4ebd5d898db1eb13eb34ad3b2fb8e9" + "content" : "93c3737e36e776e9c9ba43293256d3ade559e656" }, { "alg" : "SHA-256", - "content" : "62148c334e45df290a958dd438ef662ba5fd29c4023de832d425e674f7c585fd" + "content" : "aa62feaefd959fe9c4a75280ddbee6ffe9b59181296c521e8d876676812ddf5a" }, { "alg" : "SHA-512", - "content" : "f9365f6002c6a51295e7a00a4255ad9eb693d52de2e4c3aa0161e722c58f57a565f97bd3e03e53f3fcc2b1b1af3753471b0ba707e8416f6d2c21f17fcb1b7071" + "content" : "bba574e1f4a05a5fc7a70cb5f9deb5a1f68d8bcb6b2ad4859799e94ca18f622b15075f454e00e3d8fd5ac64827c06afc660ec73bc0db1402bdc3f5e4ebb16bbe" }, { "alg" : "SHA-384", - "content" : "45f68667d8e7543d39b51ebf451513bd085a573edfcee9b89c8154a61bda72d55f7085a1ccb132b306bb2dcebcb9b899" + "content" : "a87fc3e9946eef5166f6393ca2ee064caf3763d19e3415779f0e5269b267790a897485fb8cf085ba84f535e2112fbbe3" }, { "alg" : "SHA3-384", - "content" : "5a6ef9e7483108b215e37833d6d4321ae9ca11f2a2df09d02563d008228dd469e2ce9d9b307679fe16fc229a1a90f588" + "content" : "9e9584346c363abd4a0aad992c54f60dfec95d7a7e8c3cc2834d878c72d1b8a5460c834eaeafc6045a7115af424bcacf" }, { "alg" : "SHA3-256", - "content" : "2c6b29354a7077d0a34a9c742a2e0a95310e2dbc40cab29527ec59aed9ac7b22" + "content" : "9ddbb48896bde9c6d4457d250d207daef592fe257f10ff0ed88cbb38990c9209" }, { "alg" : "SHA3-512", - "content" : "d19b4dfeca42f8ff8821621d241b12aec49fd8012cac5ccffefac6bd55ca2dca60ef40ee15a81460051fbf1797631a34c70fb4600a9e4182a581f082b8c5028e" + "content" : "7a3b54a4fd3db04d97df4040f10c27fb9993071eed45f1caac906d989b213995fddd8b7e74b92d68c6cc99709fc69b789f1a55bd55d1226adccaf80493869b8f" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.sonarsource.java/java-checks-aws@7.33.0.35775?type=jar", + "purl" : "pkg:maven/org.sonarsource.java/check-list@8.18.0.40025?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://redirect.sonarsource.com/plugins/java.html/java-checks-aws" + "url" : "http://redirect.sonarsource.com/plugins/java.html/check-list" }, { "type" : "build-system", @@ -1596,62 +1587,62 @@ }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-java/java-checks-aws" + "url" : "https://github.com/SonarSource/sonar-java/check-list" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.java/java-checks-aws@7.33.0.35775?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.java/check-list@8.18.0.40025?type=jar" }, { "publisher" : "SonarSource", "group" : "org.sonarsource.java", "name" : "external-reports", - "version" : "7.33.0.35775", - "description" : "Code Analyzer for Java", + "version" : "8.18.0.40025", + "description" : "Code Analyzer for Java :: External Reports Plugin", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "b07b7b394b1de4dadcdd41bf472bff97" + "content" : "0a2d44b03fd1c355461dd30c436d3097" }, { "alg" : "SHA-1", - "content" : "bc9c1e1cb3f4abca42ddb1b6ffc027eb2fd4c68e" + "content" : "6374bd720414018d7ed56f80b2ed918ec94e6b2f" }, { "alg" : "SHA-256", - "content" : "aabc8b03f2c9c042ad4d1d25ada8281dd029480e9f59831d98e91adca67fee08" + "content" : "38eb3bbdd4857c485d41a0a9deab123e2c9c4cba4e187dd1997efe72cdafdccc" }, { "alg" : "SHA-512", - "content" : "b60270c2b3d038cc3b3387ba052a79c2e5fad1b0536a5a1f2e4bfa98da3046ae451503f7837a214359dd6c6052cdbdf5d8776fbab5648bcc31ac974830a6c16d" + "content" : "ec05b2b58d09641b89777d15383f8ec27873aa1e2d97977af5365840b322e1a3e38a8d65c71dd7bf5b87fbca59e49bfc6e71dc7400efad987c51dcc5e9bd5e89" }, { "alg" : "SHA-384", - "content" : "943d62b27e66b0b7472c0115f9749fe109343ee1409eb6ba57ffd3776eddfb92bf28c4c1f664aefc08e891d29d5ea2e8" + "content" : "dfde96d508de66a673c9e13298c958dfc2c6fb32e85c0b42450b3263ba4f3a09a254d893f08ae4b9f39d707e4cee22c7" }, { "alg" : "SHA3-384", - "content" : "ff834b86b09d0b11bd4fd9da2245b52c76d540af4bbc858d2478f40444c2a632ca671eac45b65097c0014456a7d553ba" + "content" : "41b976778dec610536e3b9eb679754ef9568cc8bb2beb7c7fe1d852c5d5879c682d8844a0c035ebe0b095626ea43203f" }, { "alg" : "SHA3-256", - "content" : "b632f307cefea8b5fafe516db380b7160da28677ed0657db17332250ee40b26d" + "content" : "42ddf81281e703791ae6f8c8d8adcc96da58390d4cb4b49668b4d3e3d1ba4bec" }, { "alg" : "SHA3-512", - "content" : "81ae57ff106ae7f468dfa23a5d7fd828915cbe1bcc6b21ba988a255287a7d40858979aaede906f3cf277f93117eb7ec919e003083622d061b3149a2d15eb765b" + "content" : "586377b8e12c4b960ef1a3a5cf335e8e19db4da10de7346f140bf3eb56243229be4271603c2400a6bcedb87d06dce5f95cb11581e8eceb80e88a6ddb3e00a564" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.sonarsource.java/external-reports@7.33.0.35775?type=jar", + "purl" : "pkg:maven/org.sonarsource.java/external-reports@8.18.0.40025?type=jar", "externalReferences" : [ { "type" : "website", @@ -1679,58 +1670,58 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.java/external-reports@7.33.0.35775?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.java/external-reports@8.18.0.40025?type=jar" }, { "publisher" : "SonarSource", "group" : "org.sonarsource.java", "name" : "java-jsp", - "version" : "7.33.0.35775", - "description" : "Code Analyzer for Java", + "version" : "8.18.0.40025", + "description" : "Code Analyzer for Java :: JSP parser", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "e0890ace531478ef8ac18849d78cd9e5" + "content" : "7ad6c8d9c8472d350359adbb1bb2a117" }, { "alg" : "SHA-1", - "content" : "a8cecb5145490f15b35742712345b5919726ad89" + "content" : "bf1f05662d4aa017bfab919bee32c6e985aea49b" }, { "alg" : "SHA-256", - "content" : "ae1ee6f32a16217667ea46a973f7c93a6f66ef7052a2d1e24d6e8f78c02f96bf" + "content" : "85520636a757ac333fb349873dada3386a2a89352bb6443a552612323a898e3a" }, { "alg" : "SHA-512", - "content" : "b7fcefd8fa7174db020947db1a41aff0e5c25191fbd8feb8c53438a42604a50b342ac072f571eaf6b0d54915e9106dc5bc6304d5899dbee90e20dcfc08139ca9" + "content" : "34e2e4fd545dfab31f0f0dba626b61648a2daadfaa7f32483cb3b31aa2010e90639bcae4b2b3ac669d60ae3d0490ef59bf6d87ee61098d593c15b043ad8e43e1" }, { "alg" : "SHA-384", - "content" : "39420fa5bb00153057946a5b667877475bdb65923dd9af86acc6db63f3bbb9471de9735e4ed16a03b3c3a2c6da3118df" + "content" : "acb14999bcc8e0347f71ee453d3c58426e60de8f576904058391dbab16da82bfb0ac7083cdd73b6f26862b2ca06912cb" }, { "alg" : "SHA3-384", - "content" : "6defb43802dfd77c5a549fd7d28ffdf85711623dd24d28520e1e2d96677e47a69c5661029a028d7ca13ea3fa75697a00" + "content" : "75c0fed98b9486927c2c767745222e6b93e7c8af00727abbc871380d5bb2b9d71ba9a9bede424aedfc0c057e5c564d02" }, { "alg" : "SHA3-256", - "content" : "54265f768ea5687f500b148e81ac1c3a41c0ac1d9eeb3e2154ebe4507bef46f6" + "content" : "3ff452bc563a50565843c16d94fd729cdd4f76ce6b1847c5fd61d6504a6fb2a7" }, { "alg" : "SHA3-512", - "content" : "8530ff5df32f8250d5d3a68e81bf4f1e0d0add2a69fe6c2de5dc94b01bbe2e99a86fec11494f4d95239040ee2f736ae305c94b23376475ea7c981cdad6054c85" + "content" : "96ad4a5625e3d8c3b6df8a224e75597da826ca3438e1e0c6fe805cfc0d246822ab98794250913691ed1c5ce201b9e938ca6af648e9d2f5f842efdaad78599341" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.sonarsource.java/java-jsp@7.33.0.35775?type=jar", + "purl" : "pkg:maven/org.sonarsource.java/java-jsp@8.18.0.40025?type=jar", "externalReferences" : [ { "type" : "website", @@ -1758,160 +1749,196 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.java/java-jsp@7.33.0.35775?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.java/java-jsp@8.18.0.40025?type=jar" }, { - "group" : "org.apache.tomcat.embed", - "name" : "tomcat-embed-jasper", - "version" : "9.0.84", - "description" : "Core Tomcat implementation", + "publisher" : "SonarSource", + "group" : "org.sonarsource.analyzer-commons", + "name" : "sonar-analyzer-commons", + "version" : "2.18.0.3393", + "description" : "Logic useful for a language plugin", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "22b13ffeab24c14943b58adaee3d15f6" + "content" : "86c3f760a4c1790b1af5c16eb246f8e0" }, { "alg" : "SHA-1", - "content" : "5fcf71c9c39e54c9ca51c304dd7bb2f5558e3286" + "content" : "612043286321caa05aa4e7670b36dd41e826ae2d" }, { "alg" : "SHA-256", - "content" : "3f08ff872bf83defa70c20274ab597aaf23ea95c1ff50f4b98e0c9a2a25c1106" + "content" : "f7babd94546594b9d0427b1bf32cd8f60065b8e8d0a1436f6ac443b9faaa1bf0" }, { "alg" : "SHA-512", - "content" : "89d83d9250be2cfc2d1471133461107dd4fdab532439f7827771f7d2ac202a4c9d57aabed5a7f84fa7a5b1474ce67b60ccdfbd08e2fd4980af1cf133ac69a2c1" + "content" : "b1d166c1ea81d0c89afc9b27e6d9457e6cf0c45afc8de7fa37607ed14b379ddbc1cb1c31bd2ebc25be3c980f1cf145686256dc1b0217f8af73c69d5eb11bb0a3" }, { "alg" : "SHA-384", - "content" : "688680dcea5c8c055cfd461a29c601f0533bf448b9659d0491ee60107c9f8080fb91e2705cc319ab83cdc791f79b916e" + "content" : "1d1bde067e0de39df2d0a35bfda18e9082c4f208411d45488a632a61b0acb04270a4016ad481a7aab1107608d121b90a" }, { "alg" : "SHA3-384", - "content" : "0afb2f67992e9b3d891729c4f65c1804259180f459056f9e608c29d479eb5661a2eb23b46a240ff08d834c0940068f2b" + "content" : "74a471351b75abc4d02989bde9e597307c807683bbac455a3b50aa98928d7dbf3f85db1d4c090c7c7b87299603d1f568" }, { "alg" : "SHA3-256", - "content" : "58917d6995c9fc52fd102c6e26dad93af8e43ef5b8ee1dee7932c2aa947d261c" + "content" : "8a6c33facfe7d600d45ca3db4ef0e545e7bfa75a383ac9d05fe49df6ab695197" }, { "alg" : "SHA3-512", - "content" : "453c585ccdeb65f90a65d3e9d7aedfc0ef6d68cd3a905f24584802d7029b1d79d7bab4a28b2b0f9d12cc41d2c395b87ddcc8e6568e98aae21fd076ed1c4b7bb7" + "content" : "68308ba7a0a3196f866436123817431cda045808cf617084af2efb84f53aa6907841ba67653fad166a347f92de0de2b2fea573e5e2fda734306cb3ca3ecf3319" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0" + "name" : "GNU LGPL 3", + "url" : "http://www.gnu.org/licenses/lgpl.txt" } } ], - "purl" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@9.0.84?type=jar", + "purl" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.18.0.3393?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://tomcat.apache.org/" + "url" : "http://docs.sonarqube.org/display/PLUG/Plugin+Library/sonar-analyzer-commons-parent/sonar-analyzer-commons" + }, + { + "type" : "build-system", + "url" : "https://cirrus-ci.com/github/SonarSource/" + }, + { + "type" : "issue-tracker", + "url" : "http://jira.sonarsource.com" + }, + { + "type" : "mailing-list", + "url" : "https://community.sonarsource.com" + }, + { + "type" : "vcs", + "url" : "https://github.com/SonarSource/sonar-analyzer-commons/sonar-analyzer-commons" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@9.0.84?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.18.0.3393?type=jar" }, { - "group" : "org.apache.tomcat.embed", - "name" : "tomcat-embed-core", - "version" : "9.0.84", - "description" : "Core Tomcat implementation", + "publisher" : "SonarSource", + "group" : "org.sonarsource.analyzer-commons", + "name" : "sonar-xml-parsing", + "version" : "2.18.0.3393", + "description" : "Logic useful to read and analyze XML files", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "2a5bc72d7f698bc42784cb7afa20e808" + "content" : "42a57e652799b8d75ed82ed71af3e8a8" }, { "alg" : "SHA-1", - "content" : "d0cd4045defc2ecf7ccfdc901925eed427bcba3e" + "content" : "d776689581869043b0d5225d9def870872530ab9" }, { "alg" : "SHA-256", - "content" : "29daf71c4b5f5ed0c0983a83ebd96ee74df905e406534b4c5412cc92c2aca2b7" + "content" : "b383b5147a2b186d91f3efcca0cfa9be9e87371e79c0e61f38332b24f152286f" }, { "alg" : "SHA-512", - "content" : "e28752b186c5eaad6df750719e70bd9ab33f4924f293b622ed4a7198ad15fe5e998b6b7ddee230ce564e7ec0b71871fa5c2362f6c4cb65b2872e3f25ef0840e6" + "content" : "04334f2ed4bd53436f9ca5755f836df11147951e5e09ba375e7217a9ddb629172f550eddb978c1ecc3a9e76764db7c82aa05c925f53cb720ca6f0684c2d95197" }, { "alg" : "SHA-384", - "content" : "0df38c977446ce1bb1b6d17b544f3778b4891d6ef499bb1f53dfe8cca457ec8afdb8c061f17e966574d4fd9859517580" + "content" : "5cbbd8a9a784f94c77bac285538e6894c6cf67f5e5da50745633dab13583e6027c7b2620df4c0412cdcbb4bbf7dfb33f" }, { "alg" : "SHA3-384", - "content" : "eb18577b10a3e3cdabd0483e4545226f4fa8d8c2c3d8eb88b9782aeee1ae9d9bc03d76d19c6b5e886b668fe795d38975" + "content" : "3d74f27c2a90595595c59d4f3551e11037f70de03afb7669a59217a42c32e41318ccf53a4911e97c94d4ef7c5d909498" }, { "alg" : "SHA3-256", - "content" : "58006ad9c9fc8e3b18472ad550d72bcd7c9364ecdc586db3f194116694179bb8" + "content" : "e798859717811fa3dd11cdc3e7c518593dad3f1eea35e7880250c832cdb6c51e" }, { "alg" : "SHA3-512", - "content" : "bda4e7479e4b6015f78b24ffca33be9d99d0606acff96f4d18d8e713f261835e16cf26cce800657c28a279fcd1c3e8aa6e5050d5463e1850526364306e003e2a" + "content" : "757eb040f0c6dc7a39dfba5f3842962b27433593e7993fc755ecd2d2ab362ee58b04c95ea9f4817b43a518f51144f18cd1e9f85875a79c6234ef0f667f1ff536" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0" + "name" : "GNU LGPL 3", + "url" : "http://www.gnu.org/licenses/lgpl.txt" } } ], - "purl" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.84?type=jar", + "purl" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.18.0.3393?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://tomcat.apache.org/" - } - ], - "type" : "library", - "bom-ref" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.84?type=jar" + "url" : "http://docs.sonarqube.org/display/PLUG/Plugin+Library/sonar-analyzer-commons-parent/sonar-xml-parsing" + }, + { + "type" : "build-system", + "url" : "https://cirrus-ci.com/github/SonarSource/" + }, + { + "type" : "issue-tracker", + "url" : "http://jira.sonarsource.com" + }, + { + "type" : "mailing-list", + "url" : "https://community.sonarsource.com" + }, + { + "type" : "vcs", + "url" : "https://github.com/SonarSource/sonar-analyzer-commons/sonar-xml-parsing" + } + ], + "type" : "library", + "bom-ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.18.0.3393?type=jar" }, { - "group" : "org.apache.tomcat", - "name" : "tomcat-annotations-api", - "version" : "9.0.84", - "description" : "Annotations Package", + "group" : "com.google.code.findbugs", + "name" : "jsr305", + "version" : "3.0.2", + "description" : "JSR305 Annotations for Findbugs", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "f590e2b4b16de6e9bc4b7f48380a79d3" + "content" : "dd83accb899363c32b07d7a1b2e4ce40" }, { "alg" : "SHA-1", - "content" : "86186a099bb355a174243f812d58aaf113768b91" + "content" : "25ea2e8b0c338a877313bd4672d3fe056ea78f0d" }, { "alg" : "SHA-256", - "content" : "b801c2be650483f7a91a6c50a2a93768c0fddc7ec54d0ca0d5e69bc92ef2758a" + "content" : "766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7" }, { "alg" : "SHA-512", - "content" : "bfe97892d8e218adcd01a473ca51d7bc3a59bec953fca3752e19d73519972eb7665cf9fc098a74cafb8cdff8fc773ac32424af7b3e865d6bfdaafaab59cb9fb1" + "content" : "bb09db62919a50fa5b55906013be6ca4fc7acb2e87455fac5eaf9ede2e41ce8bbafc0e5a385a561264ea4cd71bbbd3ef5a45e02d63277a201d06a0ae1636f804" }, { "alg" : "SHA-384", - "content" : "7a97a614983641796ef33723f036bfba309c4f6d1fdf860058c795d826ebe311248822a705880de9d48e5a6d456bc471" + "content" : "ca0b169d3eb2d0922dc031133a021f861a043bb3e405a88728215fd6ff00fa52fdc7347842dcc2031472e3726164bdc4" }, { "alg" : "SHA3-384", - "content" : "4af95a177b0bd0b0477b61a15b167592cf5e8ea0973f756d7850a6792e0da215b2ac1995cdec027169f0e78dc6fa5487" + "content" : "9903fd7505218999f8262efedb3d935d64bcef84aae781064ab5e1b24755466b269517cada562fa140cd1d417ede57a1" }, { "alg" : "SHA3-256", - "content" : "8c4a3599140a0e684eb0f5aac9cea0857687d00d8bb3dc175cc88ae26ffe8337" + "content" : "223fda9a89a461afaae73b177a2dc20ed4a90f2f8757f5c65f3241b0510f00ff" }, { "alg" : "SHA3-512", - "content" : "559a0b35852d37bc7115cd09ffb1684c6613eb5fde071e7503c483b46e32be0a7e2bc62d7386a999ac9e8c9d2548fed4c8d420465d0b8125f15fc554bf659a38" + "content" : "3996b5af57a5d5c6a0cd62b11773360fb051dd86a2ba968476806a2a5d32049b82d69a24a3c694e8fe4d735be6a28e41000cc500cc2a9fb577e058045855d2d6" } ], "licenses" : [ @@ -1921,54 +1948,205 @@ } } ], - "purl" : "pkg:maven/org.apache.tomcat/tomcat-annotations-api@9.0.84?type=jar", + "purl" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", + "externalReferences" : [ + { + "type" : "website", + "url" : "http://findbugs.sourceforge.net/" + }, + { + "type" : "distribution-intake", + "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" + }, + { + "type" : "vcs", + "url" : "https://code.google.com/p/jsr-305/" + } + ], + "type" : "library", + "bom-ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar" + }, + { + "group" : "xerces", + "name" : "xercesImpl", + "version" : "2.12.2", + "description" : "Xerces2 provides high performance, fully compliant XML parsers in the Apache Xerces family. This new version of Xerces continues to build upon the Xerces Native Interface (XNI), a complete framework for building parser components and configurations that is extremely modular and easy to program. The Apache Xerces2 parser is the reference implementation of XNI but other parser components, configurations, and parsers can be written using the Xerces Native Interface. For complete design and implementation documents, refer to the XNI Manual. Xerces2 provides fully conforming XML Schema 1.0 and 1.1 processors. An experimental implementation of the \"XML Schema Definition Language (XSD): Component Designators (SCD) Candidate Recommendation (January 2010)\" is also provided for evaluation. For more information, refer to the XML Schema page. Xerces2 also provides a complete implementation of the Document Object Model Level 3 Core and Load/Save W3C Recommendations and provides a complete implementation of the XML Inclusions (XInclude) W3C Recommendation. It also provides support for OASIS XML Catalogs v1.1. Xerces2 is able to parse documents written according to the XML 1.1 Recommendation, except that it does not yet provide an option to enable normalization checking as described in section 2.13 of this specification. It also handles namespaces according to the XML Namespaces 1.1 Recommendation, and will correctly serialize XML 1.1 documents if the DOM level 3 load/save APIs are in use.", + "scope" : "required", + "hashes" : [ + { + "alg" : "MD5", + "content" : "40e4f2d5aacfbf51a9a1572d77a0e5e9" + }, + { + "alg" : "SHA-1", + "content" : "f051f988aa2c9b4d25d05f95742ab0cc3ed789e2" + }, + { + "alg" : "SHA-256", + "content" : "6fc991829af1708d15aea50c66f0beadcd2cfeb6968e0b2f55c1b0909883fe16" + }, + { + "alg" : "SHA-512", + "content" : "bfd21f2350bf0bb546a68d3303f28c6a15cee1e630138c169344c3f65fe39a15e61c6ff4e5239f38f2f1f9e488eff4d5565a4a0774263064ab6a30aa9fcaaed3" + }, + { + "alg" : "SHA-384", + "content" : "0a35ae0744f05973997b0710cc8d1d774867bc1c1b63ef5bf5f554d1b4c4ab42033f7819430e05ac623e7c8630aa7c52" + }, + { + "alg" : "SHA3-384", + "content" : "b016ed02d907b21c90b4a2560aa4c778e8aad1b5ecb0ba62777f668166c6e7b8a0c0deef7d1e63b7a9b1092c64c8a4a6" + }, + { + "alg" : "SHA3-256", + "content" : "875856aafff433840ee9933c01018cd18c0a13b46bd4472853698ef1dff83168" + }, + { + "alg" : "SHA3-512", + "content" : "1587332fb01515a72b7856b1f566070dcd26fef33c5070039c28684215466a9b9d3a4625cf7181443e3c3a67a313a938cf0775f39b96daf43f5edd4772143c23" + } + ], + "licenses" : [ + { + "license" : { + "id" : "Apache-2.0" + } + } + ], + "purl" : "pkg:maven/xerces/xercesImpl@2.12.2?type=jar", + "externalReferences" : [ + { + "type" : "website", + "url" : "https://xerces.apache.org/xerces2-j/" + }, + { + "type" : "vcs", + "url" : "https://svn.apache.org/repos/asf/xerces/java/" + } + ], + "type" : "library", + "bom-ref" : "pkg:maven/xerces/xercesImpl@2.12.2?type=jar" + }, + { + "group" : "xml-apis", + "name" : "xml-apis", + "version" : "1.4.01", + "description" : "xml-commons provides an Apache-hosted set of DOM, SAX, and JAXP interfaces for use in other xml-based projects. Our hope is that we can standardize on both a common version and packaging scheme for these critical XML standards interfaces to make the lives of both our developers and users easier. The External Components portion of xml-commons contains interfaces that are defined by external standards organizations. For DOM, that's the W3C; for SAX it's David Megginson and sax.sourceforge.net; for JAXP it's Sun.", + "scope" : "required", + "hashes" : [ + { + "alg" : "MD5", + "content" : "7eaad6fea5925cca6c36ee8b3e02ac9d" + }, + { + "alg" : "SHA-1", + "content" : "3789d9fada2d3d458c4ba2de349d48780f381ee3" + }, + { + "alg" : "SHA-256", + "content" : "a840968176645684bb01aed376e067ab39614885f9eee44abe35a5f20ebe7fad" + }, + { + "alg" : "SHA-512", + "content" : "8db0283b6840cd6407957d296b802e3edf90653e2722f8e29f86c1c0b60996c4b43e9e065e6864dab89b2138ddb0174d9b4fdda4a93f94eeb884783db82f3268" + }, + { + "alg" : "SHA-384", + "content" : "bce0ec0f0f692213a1110197c4a11c333673ae0630481255d12b441a8cba70aecfaf104c3d8d9b500ed2a0a19a2bfcce" + }, + { + "alg" : "SHA3-384", + "content" : "c1d8154ef6eee57dfe6ae9a1c1a2525e9ec2aab3631911a53c064ea6480c0b3b1ce8dd079db7b3693d7ef81daba28ace" + }, + { + "alg" : "SHA3-256", + "content" : "09eb76497eac5012ce1000c52f4e597c4941a44b9d960b1ac58a19beb2dd63fc" + }, + { + "alg" : "SHA3-512", + "content" : "1e4eb902e50b3388da4d161ee49f4d47b61dddd2ad10e6ef6cbb67c4ebc9043e0b65ae59a4a0c8eb03dd28814ce4aedd7e0d4962a0aedc3bdcf7de37cde38f66" + } + ], + "licenses" : [ + { + "license" : { + "id" : "Apache-2.0" + } + }, + { + "license" : { + "id" : "SAX-PD", + "url" : "http://www.saxproject.org/copying.html" + } + }, + { + "license" : { + "name" : "The W3C License", + "url" : "http://www.w3.org/TR/2004/REC-DOM-Level-3-Core-20040407/java-binding.zip" + } + } + ], + "purl" : "pkg:maven/xml-apis/xml-apis@1.4.01?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://tomcat.apache.org/" + "url" : "http://xml.apache.org/commons/components/external/" + }, + { + "type" : "issue-tracker", + "url" : "http://issues.apache.org/bugzilla/" + }, + { + "type" : "mailing-list", + "url" : "http://mail-archives.apache.org/mod_mbox/xml-commons-dev/" + }, + { + "type" : "vcs", + "url" : "https://svn.apache.org/viewvc/xml/commons/tags/xml-commons-external-1_4_01/" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.apache.tomcat/tomcat-annotations-api@9.0.84?type=jar" + "bom-ref" : "pkg:maven/xml-apis/xml-apis@1.4.01?type=jar" }, { - "group" : "org.apache.tomcat.embed", - "name" : "tomcat-embed-el", - "version" : "9.0.84", - "description" : "Core Tomcat implementation", + "publisher" : "FasterXML", + "group" : "com.fasterxml.woodstox", + "name" : "woodstox-core", + "version" : "6.4.0", + "description" : "Woodstox is a high-performance XML processor that implements Stax (JSR-173), SAX2 and Stax2 APIs", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "3a0cd4945a15ee8d37f4b23cf2216e3d" + "content" : "afcba1114fca8199ef26346dd6011e90" }, { "alg" : "SHA-1", - "content" : "3fc7c06e3f2c23baf8bfd64320376fa701633602" + "content" : "c47579857bbf12c85499f431d4ecf27d77976b7c" }, { "alg" : "SHA-256", - "content" : "22370f6a152da44c9a7ea15e597f22ef6b057a8d3278f69ff50cc3452473bf97" + "content" : "d6eb9f2f40049a7a808baf11ffba0737648e62ff52fde9271d808e5d57a27279" }, { "alg" : "SHA-512", - "content" : "3373ff62438698fc3223e7474efca16bdc2a9dc9759e5815ccb8a0e3cc722ba2d581292b60b52eb1d86beb7c705b2640c81d69dfa7162f477d6ed1be8928d748" + "content" : "7da4cd51f7082e59b3cb78988cda78bf162e2b02457caf17242cb9cea9b8002ada15d4dfe774ca0355acdea95c88b67c4d06a27a61653cb84c9a46d27b2726c6" }, { "alg" : "SHA-384", - "content" : "7d018a18156839d5c3c92ac091a53710944e00955443f1a0b051b3cb40f0c7fc9a925efc776ab09f1f0a569102cca101" + "content" : "6e25d32eb4c127f7129ccd912ff882625d3fa43e8eba9bc55013a27a61806d1b865ec809bd21d58d3dbfa3d9e2a3d516" }, { "alg" : "SHA3-384", - "content" : "4f300a9fd6932daa3ff4db977860f66a7f88157e72e1481f1981d5597a4666daf76a309d5ff10312ba0968b56f0e4bbd" + "content" : "d384bf82404b7642340eb1a3f88e2d1e366bf3282534943f98c5f4946656f7e6ea86ba6c7bfeed7c4fda1678afdd282e" }, { "alg" : "SHA3-256", - "content" : "ac2d6743eafb0210717527467f014d8fd8ac97a12c5f2aaccf1922b01c4d268d" + "content" : "7d1e5fbd3f4197fcf6f4d097bc742a0b3f02fe9ae36ef4385362afab6cc85bee" }, { "alg" : "SHA3-512", - "content" : "656900dad4ca2261cdc8ffa7febfbf4edfe87e2cb32a8a34b830f0f3248ae707a473a82f69487a70003c3b2c0e92ed998c082ec22f172c86b8565b62b7df74ad" + "content" : "6020db3580dac2d5c0b7656a062b982d234952fc3feac5dfbb12f91bc019b6af430123ad46e5b5de28d7cb9562aec582febdbbfae8ce35ebc2ce0b837a335af6" } ], "licenses" : [ @@ -1978,55 +2156,67 @@ } } ], - "purl" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.84?type=jar", + "purl" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.4.0?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://tomcat.apache.org/" + "url" : "https://github.com/FasterXML/woodstox" + }, + { + "type" : "distribution-intake", + "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" + }, + { + "type" : "issue-tracker", + "url" : "https://github.com/FasterXML/woodstox/issues" + }, + { + "type" : "vcs", + "url" : "https://github.com/FasterXML/woodstox" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.84?type=jar" + "bom-ref" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.4.0?type=jar" }, { "publisher" : "SonarSource", "group" : "org.sonarsource.analyzer-commons", - "name" : "sonar-analyzer-commons", - "version" : "2.8.0.2699", - "description" : "Logic useful for a language plugin", + "name" : "sonar-performance-measure", + "version" : "2.18.0.3393", + "description" : "Logic to capture a hierarchy of performance measures, save it into a file, and merge files", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "e1a59ec0809b06b3f5e2c8e97a76b218" + "content" : "1854d57f67661c6950374be29145a017" }, { "alg" : "SHA-1", - "content" : "cada74c92a33d57d5bdb70b8178a9006754e601c" + "content" : "eb02954016253fd34551a4641e3215fdafc239c6" }, { "alg" : "SHA-256", - "content" : "e9e17c3b6e02624cc1981dc7c2100f9ea67b96aec66e6a785e0ed5202febd854" + "content" : "4a3f60003f00a88695158a522cfbb7119c2c696991f13b7ca391e7c1eaf46d34" }, { "alg" : "SHA-512", - "content" : "9197a2c16edd4ccbc39a33fe75e4a4175700306d9d1df2f4e146de37728aa8483a3355993bb8e8fb77ef9ff17490427cf55566d81364d82495f3e49c62ee21f2" + "content" : "f3f2cc2211f00a66c33cd81ef996557fda3ee89421b2fc4565c376dadc22dc2a25eb327e5dfa041f3c48b8fa8620b797ec6762fd74d3ddde0184e6598c211d39" }, { "alg" : "SHA-384", - "content" : "8385239d7eb9d7bc972fbb63ed5d887b2089129844037c957f0cc5bcd34b8a20deea0531022af0832193f020e94ad5fe" + "content" : "54138af00ebd5d85cb2f776d75d2455de1a058e657dff84d8e19a563d720fa819a1efd4d432a1d3c2dcb2fa31158c184" }, { "alg" : "SHA3-384", - "content" : "ce192d54341470644acee6f91217ddeb62f28d1ac2da58b0f73fb8ec9e5278463457f74dc4a264349051b6fc3dc25c3a" + "content" : "7855e1aba9691493ebd9a5d79ace4cbccdc1f9fd9194a8300f6b71367014e7fdaf04a7aa9db87ed195b7d738552e6080" }, { "alg" : "SHA3-256", - "content" : "a521179e465dec4a69e93e393df68d9c6719f393654a1e584bd3ff7a0cd39891" + "content" : "f65d3d9a6737a6bd62c31d2d463d011512c3aa434d0575d6e54a95dc00bc5c6e" }, { "alg" : "SHA3-512", - "content" : "36968ac582180921cb12e613073d261111b81ca042e47624bc07176f6926c6f7a40a11077e51d5e460add84747348b4a962cda95c6b6c1ffe372e032c570ad89" + "content" : "34d64169af99b65d4ee59cfd414e189af6ea00ae5118aae5976e1ec76752631138c08eae42b96e95f9668123bbe44a17907c7556003e0dfd988723fc50db0d31" } ], "licenses" : [ @@ -2037,11 +2227,11 @@ } } ], - "purl" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.8.0.2699?type=jar", + "purl" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.18.0.3393?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://docs.sonarqube.org/display/PLUG/Plugin+Library/sonar-analyzer-commons-parent/sonar-analyzer-commons" + "url" : "http://docs.sonarqube.org/display/PLUG/Plugin+Library/sonar-analyzer-commons-parent/sonar-performance-measure" }, { "type" : "build-system", @@ -2057,74 +2247,74 @@ }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-analyzer-commons/sonar-analyzer-commons" + "url" : "https://github.com/SonarSource/sonar-analyzer-commons/sonar-performance-measure" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.8.0.2699?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.18.0.3393?type=jar" }, { "publisher" : "SonarSource", - "group" : "org.sonarsource.analyzer-commons", - "name" : "sonar-xml-parsing", - "version" : "2.8.0.2699", - "description" : "Logic useful to read and analyze XML files", + "group" : "org.sonarsource.python", + "name" : "sonar-python-plugin", + "version" : "5.16.0.29940", + "description" : "Code Analyzer for Python", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "eeb2d8b488da7bd7c98cfb49b3d06830" + "content" : "96af3be952506f19faa9797702af83d2" }, { "alg" : "SHA-1", - "content" : "03e14b69bc7a2abbc0a595851f8f31540b208dd6" + "content" : "7358996b700859eefb489750874f6b276555ae44" }, { "alg" : "SHA-256", - "content" : "408ec4b66b8fda3fe8a333858aed7cbb3340f570790468f8a789de4cbf2c8c91" + "content" : "161047717514eb4299847263ccb553df5e5be8fc9ceb081aaf4015fa834c734a" }, { "alg" : "SHA-512", - "content" : "35be20dfa7f82d0ba024c2614359e4b52ac295a2c416d854103b3a7f9739d04e2eb3bb927064fe9ac11ed9dbe5f91f8a266fd16a2ed40675b50c43836d132829" + "content" : "09689460be8675a15d4f1c2cecb868563c94a54c311f992bdd190aef37300a80760966216f73c12824765d7a7562735799b9c08f0606f465b03c299778110b31" }, { "alg" : "SHA-384", - "content" : "426ea2055c0c9f6642b68a7b2eccbf4d7ee802dd3bfc010564b108a8c5cf54a3a9ce7fd3d07ab4adbbd54fa52bee64b5" + "content" : "bc18a99dabb6a1f04cd2bfdaffd3e1ba70688d16716b8cf40c9a751e94c6312b721b31478d7ea1baf3095da0654e6ae1" }, { "alg" : "SHA3-384", - "content" : "9bfe10431714c647f99ce6b8e4d8eaaa6b80862985380a5ce4da37cdcf95cf324f9008b9dd46e81e8ecaacd19fa8e1c3" + "content" : "5d4803f25bb278676d6aa3ec55c6fd4db93fb42d5966fe73f0d7c6ecc2edcd2633154defacccd021b82574399e095c6c" }, { "alg" : "SHA3-256", - "content" : "2c47cf7bd11d40d40d1da9406bbd00a578bee08621cf341598d8fad4c4e8f7d9" + "content" : "b5898d3547c883a1aeaeb1175ed6bf9b691ae896210df2a0ce22b74295ddc004" }, { "alg" : "SHA3-512", - "content" : "4eb5a2b0f0b527231f0bfb1bae4c798713e615a7c5929c0ac09f49b3d9fa5eb12cee0775842e6b7033d7163803a3737595fdf9f221eeaef69e43875c87b6c3bf" + "content" : "22c2445b64a2d200eb021df6bf93ef083c5487bde5c7923df897941445fd7f77eb9eac76542924195c8fdf17d43a3336a9b91f7c507ce8c36265447d8b77472c" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.8.0.2699?type=jar", + "purl" : "pkg:maven/org.sonarsource.python/sonar-python-plugin@5.16.0.29940?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://docs.sonarqube.org/display/PLUG/Plugin+Library/sonar-analyzer-commons-parent/sonar-xml-parsing" + "url" : "http://redirect.sonarsource.com/plugins/python.html" }, { "type" : "build-system", - "url" : "https://cirrus-ci.com/github/SonarSource/" + "url" : "https://cirrus-ci.com/github/SonarSource/sonar-python" }, { "type" : "issue-tracker", - "url" : "http://jira.sonarsource.com" + "url" : "https://jira.sonarsource.com/browse/SONARPY" }, { "type" : "mailing-list", @@ -2132,193 +2322,262 @@ }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-analyzer-commons/sonar-xml-parsing" + "url" : "https://github.com/SonarCommunity/sonar-python" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.8.0.2699?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.python/sonar-python-plugin@5.16.0.29940?type=jar" }, { - "group" : "xerces", - "name" : "xercesImpl", - "version" : "2.12.2", - "description" : "Xerces2 provides high performance, fully compliant XML parsers in the Apache Xerces family. This new version of Xerces continues to build upon the Xerces Native Interface (XNI), a complete framework for building parser components and configurations that is extremely modular and easy to program. The Apache Xerces2 parser is the reference implementation of XNI but other parser components, configurations, and parsers can be written using the Xerces Native Interface. For complete design and implementation documents, refer to the XNI Manual. Xerces2 provides fully conforming XML Schema 1.0 and 1.1 processors. An experimental implementation of the \"XML Schema Definition Language (XSD): Component Designators (SCD) Candidate Recommendation (January 2010)\" is also provided for evaluation. For more information, refer to the XML Schema page. Xerces2 also provides a complete implementation of the Document Object Model Level 3 Core and Load/Save W3C Recommendations and provides a complete implementation of the XML Inclusions (XInclude) W3C Recommendation. It also provides support for OASIS XML Catalogs v1.1. Xerces2 is able to parse documents written according to the XML 1.1 Recommendation, except that it does not yet provide an option to enable normalization checking as described in section 2.13 of this specification. It also handles namespaces according to the XML Namespaces 1.1 Recommendation, and will correctly serialize XML 1.1 documents if the DOM level 3 load/save APIs are in use.", + "publisher" : "SonarSource", + "group" : "org.sonarsource.python", + "name" : "python-frontend", + "version" : "5.16.0.29940", + "description" : "Parent pom of SonarSource public projects", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "40e4f2d5aacfbf51a9a1572d77a0e5e9" + "content" : "af8fb4754bb34b00450e1886e6e35f24" }, { "alg" : "SHA-1", - "content" : "f051f988aa2c9b4d25d05f95742ab0cc3ed789e2" + "content" : "3d29bbb908e0740432fd9e29f6f9fef3b61fa8bf" }, { "alg" : "SHA-256", - "content" : "6fc991829af1708d15aea50c66f0beadcd2cfeb6968e0b2f55c1b0909883fe16" + "content" : "2bf0a615cb8804200e9de8c3b407b6a928a16b34349f43c76bf9f6c548e8000c" }, { "alg" : "SHA-512", - "content" : "bfd21f2350bf0bb546a68d3303f28c6a15cee1e630138c169344c3f65fe39a15e61c6ff4e5239f38f2f1f9e488eff4d5565a4a0774263064ab6a30aa9fcaaed3" + "content" : "0b42071f37c0cf8dfc46c3a3ed915bdc1d99b0bc41706200305c7f962f7b14c79e19eb42f99488b874d45267015de3f9762d903d6c03c7fb1c4bd1ac331c45d8" }, { "alg" : "SHA-384", - "content" : "0a35ae0744f05973997b0710cc8d1d774867bc1c1b63ef5bf5f554d1b4c4ab42033f7819430e05ac623e7c8630aa7c52" + "content" : "5411758030a57ffedc16b7b9f93592107920e01b27b8b6b98c3cb0cec1bbb3eecfc0dfc36ba130b2616507a703938560" }, { "alg" : "SHA3-384", - "content" : "b016ed02d907b21c90b4a2560aa4c778e8aad1b5ecb0ba62777f668166c6e7b8a0c0deef7d1e63b7a9b1092c64c8a4a6" + "content" : "d2054bd5b799463c0364aebef1024584f37fc63b122b0d9a137d5d052b152ef3b23ebb64961222adc72f30e49ccdbe3d" }, { "alg" : "SHA3-256", - "content" : "875856aafff433840ee9933c01018cd18c0a13b46bd4472853698ef1dff83168" + "content" : "6eaa8027ba8e0f7c11c2a2da14084630735110429505016fd92d8292c33637f4" }, { "alg" : "SHA3-512", - "content" : "1587332fb01515a72b7856b1f566070dcd26fef33c5070039c28684215466a9b9d3a4625cf7181443e3c3a67a313a938cf0775f39b96daf43f5edd4772143c23" + "content" : "35de0af96a078f4bc7709776d051b3d40c5f965647096114d33cb47c2fda0aacef5453af4475302a074e351c796b30315daa182fc69f780f515ac046a19e9ff0" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/xerces/xercesImpl@2.12.2?type=jar", + "purl" : "pkg:maven/org.sonarsource.python/python-frontend@5.16.0.29940?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://xerces.apache.org/xerces2-j/" + "url" : "https://docs.sonarsource.com/sonarqube-server/latest/extension-guide/developing-a-plugin/plugin-basics/python/python-frontend/" + }, + { + "type" : "build-system", + "url" : "https://cirrus-ci.com/github/SonarSource/sonar-python" + }, + { + "type" : "issue-tracker", + "url" : "https://jira.sonarsource.com/browse/SONARPY" + }, + { + "type" : "mailing-list", + "url" : "https://community.sonarsource.com" }, { "type" : "vcs", - "url" : "https://svn.apache.org/repos/asf/xerces/java/" + "url" : "https://github.com/SonarSource/sonar-python/python-frontend" } ], "type" : "library", - "bom-ref" : "pkg:maven/xerces/xercesImpl@2.12.2?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.python/python-frontend@5.16.0.29940?type=jar" }, { - "group" : "xml-apis", - "name" : "xml-apis", - "version" : "1.4.01", - "description" : "xml-commons provides an Apache-hosted set of DOM, SAX, and JAXP interfaces for use in other xml-based projects. Our hope is that we can standardize on both a common version and packaging scheme for these critical XML standards interfaces to make the lives of both our developers and users easier. The External Components portion of xml-commons contains interfaces that are defined by external standards organizations. For DOM, that's the W3C; for SAX it's David Megginson and sax.sourceforge.net; for JAXP it's Sun.", + "group" : "com.google.protobuf", + "name" : "protobuf-java", + "version" : "4.29.0", + "description" : "Core Protocol Buffers library. Protocol Buffers are a way of encoding structured data in an efficient yet extensible format.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "7eaad6fea5925cca6c36ee8b3e02ac9d" + "content" : "5de9c1cc9a647278ab03d76ccfb8ff9d" }, { "alg" : "SHA-1", - "content" : "3789d9fada2d3d458c4ba2de349d48780f381ee3" + "content" : "ffea90ab158435d68de76951857ef5f8b0f98365" }, { "alg" : "SHA-256", - "content" : "a840968176645684bb01aed376e067ab39614885f9eee44abe35a5f20ebe7fad" + "content" : "16901851ebe5e89fe88aaad3c26866373695bc2e30627bb8932847e2f5fc2e76" }, { "alg" : "SHA-512", - "content" : "8db0283b6840cd6407957d296b802e3edf90653e2722f8e29f86c1c0b60996c4b43e9e065e6864dab89b2138ddb0174d9b4fdda4a93f94eeb884783db82f3268" + "content" : "ed9aae4faa56c04dc086af07078db3734f675eb4188bb2be98c94cc59a8e4e77b74195c47d70c7b697bc3b938e106fdc137ffda5358b3029795f28e7d9216d68" }, { "alg" : "SHA-384", - "content" : "bce0ec0f0f692213a1110197c4a11c333673ae0630481255d12b441a8cba70aecfaf104c3d8d9b500ed2a0a19a2bfcce" + "content" : "d204ff730ba5eff0eddd9439f05ab89e87194fc6c69d50054da593ab7537495207374840701867856ea1e9aa87ef1e14" }, { "alg" : "SHA3-384", - "content" : "c1d8154ef6eee57dfe6ae9a1c1a2525e9ec2aab3631911a53c064ea6480c0b3b1ce8dd079db7b3693d7ef81daba28ace" + "content" : "9a3dc4e7ef4e1488b6ee4a653d9f47569bb3f543012ec20fe695d1bba2a7da8e329ffe70d5ef8e43fd9da1721fe3f3c1" }, { "alg" : "SHA3-256", - "content" : "09eb76497eac5012ce1000c52f4e597c4941a44b9d960b1ac58a19beb2dd63fc" + "content" : "16fec3a2d08bcc363c69d2a260a78020636d94dd4ed929050d8e8b51d37960f0" }, { "alg" : "SHA3-512", - "content" : "1e4eb902e50b3388da4d161ee49f4d47b61dddd2ad10e6ef6cbb67c4ebc9043e0b65ae59a4a0c8eb03dd28814ce4aedd7e0d4962a0aedc3bdcf7de37cde38f66" + "content" : "37c5a864aa97fd50a88a5c9b2a9c7eedd646eb4655ec041502e1892efb55b2f22e9f2292dcca120e74755a11f92dc41616e1dc6919d8906fe2c5802e25ed1187" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0" + "id" : "BSD-3-Clause", + "url" : "https://opensource.org/licenses/BSD-3-Clause" } + } + ], + "purl" : "pkg:maven/com.google.protobuf/protobuf-java@4.29.0?type=jar", + "externalReferences" : [ + { + "type" : "website", + "url" : "https://developers.google.com/protocol-buffers/protobuf-java/" }, { - "license" : { - "id" : "SAX-PD", - "url" : "http://www.saxproject.org/copying.html" - } + "type" : "distribution-intake", + "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" + }, + { + "type" : "vcs", + "url" : "https://github.com/protocolbuffers/protobuf/protobuf-java" + } + ], + "type" : "library", + "bom-ref" : "pkg:maven/com.google.protobuf/protobuf-java@4.29.0?type=jar" + }, + { + "publisher" : "FasterXML", + "group" : "com.fasterxml.jackson.core", + "name" : "jackson-databind", + "version" : "2.20.1", + "description" : "General data-binding functionality for Jackson: works on core streaming API", + "scope" : "required", + "hashes" : [ + { + "alg" : "MD5", + "content" : "49d7b7226df5ed4a036e48997a03d066" + }, + { + "alg" : "SHA-1", + "content" : "9586a7fe0e1775de0e54237fa6a2c8455c93ac06" + }, + { + "alg" : "SHA-256", + "content" : "34bbeb4526fff4f8565b12106bf85a6afcbae858966d489b54214ac46b2e26e8" }, + { + "alg" : "SHA-512", + "content" : "16906e9c2f1962649eb21de148f362fedf2ce903c7ca0e6d68a01d43dbe8402b70cc537c104f36bc40a2bed6601162e7c21663735582e25bff7e27852be1405d" + }, + { + "alg" : "SHA-384", + "content" : "0591935cdfed1d65fa4a2820133ba129384f71921228ffe093f343d3ebf0b699762810d9208641726111015f0e35753b" + }, + { + "alg" : "SHA3-384", + "content" : "855ccd449944e7884f8088c8c5b224e6e2f63bcd3123502618b4f5ded025e5978143af8c5d31215276932bc3bb089472" + }, + { + "alg" : "SHA3-256", + "content" : "53732171c9f2bdeaa40017a34683a00ac11e8a8c1bcefaed07eb91e629e20376" + }, + { + "alg" : "SHA3-512", + "content" : "05017efae94bc3c83131aaaa7911f20e7c367502cd2cd05c6cedabc877b55724bcde2521ba1da15bf1c1c3ccb1a235124b39b2d4860142f2b89d4df197cf5c83" + } + ], + "licenses" : [ { "license" : { - "name" : "The W3C License", - "url" : "http://www.w3.org/TR/2004/REC-DOM-Level-3-Core-20040407/java-binding.zip" + "id" : "Apache-2.0" } } ], - "purl" : "pkg:maven/xml-apis/xml-apis@1.4.01?type=jar", + "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://xml.apache.org/commons/components/external/" + "url" : "https://github.com/FasterXML/jackson" }, { - "type" : "issue-tracker", - "url" : "http://issues.apache.org/bugzilla/" + "type" : "distribution-intake", + "url" : "https://central.sonatype.com/api/v1/publisher" }, { - "type" : "mailing-list", - "url" : "http://mail-archives.apache.org/mod_mbox/xml-commons-dev/" + "type" : "issue-tracker", + "url" : "https://github.com/FasterXML/jackson-databind/issues" }, { "type" : "vcs", - "url" : "https://svn.apache.org/viewvc/xml/commons/tags/xml-commons-external-1_4_01/" + "url" : "https://github.com/FasterXML/jackson-databind" } ], "type" : "library", - "bom-ref" : "pkg:maven/xml-apis/xml-apis@1.4.01?type=jar" + "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1?type=jar" }, { "publisher" : "FasterXML", - "group" : "com.fasterxml.woodstox", - "name" : "woodstox-core", - "version" : "6.4.0", - "description" : "Woodstox is a high-performance XML processor that implements Stax (JSR-173), SAX2 and Stax2 APIs", + "group" : "com.fasterxml.jackson.core", + "name" : "jackson-annotations", + "version" : "2.20", + "description" : "Core annotations used for value types, used by Jackson data binding package.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "afcba1114fca8199ef26346dd6011e90" + "content" : "b901def3c20752817f27130e4b8d6640" }, { "alg" : "SHA-1", - "content" : "c47579857bbf12c85499f431d4ecf27d77976b7c" + "content" : "6a5e7291ea3f2b590a7ce400adb7b3aea4d7e12c" }, { "alg" : "SHA-256", - "content" : "d6eb9f2f40049a7a808baf11ffba0737648e62ff52fde9271d808e5d57a27279" + "content" : "959a2ffb2d591436f51f183c6a521fc89347912f711bf0cae008cdf045d95319" }, { "alg" : "SHA-512", - "content" : "7da4cd51f7082e59b3cb78988cda78bf162e2b02457caf17242cb9cea9b8002ada15d4dfe774ca0355acdea95c88b67c4d06a27a61653cb84c9a46d27b2726c6" + "content" : "8926d89bfe7f427c7793f6af619249540f23f82eae055dd03d4cb163ff603a43dd6a3ebe43528d00789aed3df0dd2f10e08552fdec53e2691849b9769f57f0c9" }, { "alg" : "SHA-384", - "content" : "6e25d32eb4c127f7129ccd912ff882625d3fa43e8eba9bc55013a27a61806d1b865ec809bd21d58d3dbfa3d9e2a3d516" + "content" : "40ee4c1438a5a190624dff9deca83377f7e60690b4535359b2a79924f736bff7c8d077e5b01c6c8972735dc152f2ccf4" }, { "alg" : "SHA3-384", - "content" : "d384bf82404b7642340eb1a3f88e2d1e366bf3282534943f98c5f4946656f7e6ea86ba6c7bfeed7c4fda1678afdd282e" + "content" : "0fc0f697d03692b63c2b11fcabac51c630278ed6df15420975263ea4ad19418b3b71b7889497ed20a150035f9bcba79d" }, { "alg" : "SHA3-256", - "content" : "7d1e5fbd3f4197fcf6f4d097bc742a0b3f02fe9ae36ef4385362afab6cc85bee" + "content" : "6bf49e384735969af020f758b255ceed26af92d4cf456f6e7b83e8de53289f93" }, { "alg" : "SHA3-512", - "content" : "6020db3580dac2d5c0b7656a062b982d234952fc3feac5dfbb12f91bc019b6af430123ad46e5b5de28d7cb9562aec582febdbbfae8ce35ebc2ce0b837a335af6" + "content" : "3372f6c456a7f6a33ebc3ecc65daaf36288be2a14b1f2cb9fcd7387c07acab1c69ae803a366e5d12adf4934970ffd2e34017917c5f16a6d563bc94810f228ab3" } ], "licenses" : [ @@ -2328,157 +2587,152 @@ } } ], - "purl" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.4.0?type=jar", + "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.20?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://github.com/FasterXML/woodstox" + "url" : "https://github.com/FasterXML/jackson" }, { "type" : "distribution-intake", - "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" + "url" : "https://central.sonatype.com/api/v1/publisher" }, { "type" : "issue-tracker", - "url" : "https://github.com/FasterXML/woodstox/issues" + "url" : "https://github.com/FasterXML/jackson-annotations/issues" }, { "type" : "vcs", - "url" : "https://github.com/FasterXML/woodstox" + "url" : "https://github.com/FasterXML/jackson-annotations" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.4.0?type=jar" + "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.20?type=jar" }, { - "publisher" : "SonarSource", - "group" : "org.sonarsource.analyzer-commons", - "name" : "sonar-performance-measure", - "version" : "2.8.0.2699", - "description" : "Logic to capture a hierarchy of performance measures, save it into a file, and merge files", + "publisher" : "FasterXML", + "group" : "com.fasterxml.jackson.core", + "name" : "jackson-core", + "version" : "2.20.1", + "description" : "Core Jackson processing abstractions (aka Streaming API), implementation for JSON", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "bfdcb3a88a97fe66b288f61921bab1ae" + "content" : "889b2c417b61c9f4f460b06957147234" }, { "alg" : "SHA-1", - "content" : "0ecfd7e49341de39ad53f9608c31f30b6a10c441" + "content" : "5734323adfece72111769b0ae38a6cf803e3d178" }, { "alg" : "SHA-256", - "content" : "ebba386ff08f8bbe6e9a37a0666e91c8c8561af5e8b24de484a520e828ec64e7" + "content" : "ffab4d957daa2796cf24cb66d0b78a7090f1bcbe17c3a4578f09affaaf137089" }, { "alg" : "SHA-512", - "content" : "02d37166706b1a93248cfb82731318304950162814292a295f0252d0f5d7ec734cedaf4a9f960d30c85dc8bac0ee59d75089f5ae10c88212b98e4de7ef7c4d8b" + "content" : "0463e1c2e1d8e8cfa4954dfce491583f0ec9ec1de6e6f342d1e5f0c63dcfb959673552a279ec4e6b6cc69e6ac2de6d42dd512149ceb76620b5d780db7325e6a7" }, { "alg" : "SHA-384", - "content" : "84f70dfb7e80d7a6c1dad5ac31ce743f0da036e683881acf172d35f7d21ccbb3296165b88fcd4b2167cdc1234956bcdb" + "content" : "a279b2d57d019a05f65762ce670ce23e02466b11276d8c0687f3bb5ed40a8a1854bfe6dd2dc157d0f5695186f7d9a65a" }, { "alg" : "SHA3-384", - "content" : "e89f15bf1b1ff83ce691bd755daab7a6ac6cfb416ccdc12ebd1a7f427da2224c4b8371062ebaa3fa63ba878473e7a8d2" + "content" : "06b9f33e030a99fa95d171118ab668bee42e32b35b85e05750f8514128dbadc94026afde16dbadc0ff786027b09712a4" }, { "alg" : "SHA3-256", - "content" : "c08c9694411c5561032ace350fb1bb2201f3bfd0aa217e48047a399eb26e26c2" + "content" : "3e83a1a349d8ba3a4e76ee983f04b259a85263dda5090f55aae5535109c4b6c0" }, { "alg" : "SHA3-512", - "content" : "a47781adf6a0dd209579e9c09ddb1f53c88bf89dadd4a7829655599eaea3399f9a71cf7e3b9c831c0f7e86904d5de2e97a6c3df8c0c0126ce8f4f4ad73cda1a3" + "content" : "87b3a61a71a625adfc6b9b402079c26b223e19535ca5af07e4130932d479f9c22e90696911050d8ab8a09a6209651fe2f25f54d7d9a1493b6dab6f8acb76203d" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "id" : "Apache-2.0" } } ], - "purl" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.8.0.2699?type=jar", + "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.1?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://docs.sonarqube.org/display/PLUG/Plugin+Library/sonar-analyzer-commons-parent/sonar-performance-measure" + "url" : "https://github.com/FasterXML/jackson-core" }, { - "type" : "build-system", - "url" : "https://cirrus-ci.com/github/SonarSource/" + "type" : "distribution-intake", + "url" : "https://central.sonatype.com/api/v1/publisher" }, { "type" : "issue-tracker", - "url" : "http://jira.sonarsource.com" - }, - { - "type" : "mailing-list", - "url" : "https://community.sonarsource.com" + "url" : "https://github.com/FasterXML/jackson-core/issues" }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-analyzer-commons/sonar-performance-measure" + "url" : "https://github.com/FasterXML/jackson-core" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.8.0.2699?type=jar" + "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.1?type=jar" }, { - "publisher" : "SonarSource and Waleri Enns", + "publisher" : "SonarSource", "group" : "org.sonarsource.python", - "name" : "sonar-python-plugin", - "version" : "4.17.0.14845", - "description" : "Code Analyzer for Python", + "name" : "python-checks", + "version" : "5.16.0.29940", + "description" : "Parent pom of SonarSource public projects", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "a1f37ca54b6407c29e14d6a84ef527be" + "content" : "c6a6f14dd43b2ca777639d045d371686" }, { "alg" : "SHA-1", - "content" : "d2a19e1624695b1a8bf7691c028be1c1d795c3b4" + "content" : "7420c64bb23358297f8fb465d194b0abc81a268d" }, { "alg" : "SHA-256", - "content" : "4745222f0e3ff47ae4bef17fe6e6c8f50234c69d4992e81628c52217f3443564" + "content" : "8d71a04ae268809a329169124e821538409f323c25738a787f1004691830947a" }, { "alg" : "SHA-512", - "content" : "7fb3dc79348493ea5a16c8a436db16665126137f0dfcc146fd75dac317a686c26f81499e5a370341e87374fe28006670f48d7424ab2c7988e8e51a842872fc4a" + "content" : "49cc6c1c1f6d4ab7691e52ee582edc2dc4320706f0cba8b0264232bb8c648e0c1411fc349480d4126909275bc722a26ce7dc1d0442b0fe800d68e43dd502e8e0" }, { "alg" : "SHA-384", - "content" : "55bff9b2c2d2fede0efcaa6c64835bb2e42e94d4ba6196168d4d5b2f7fbd65cd8c03ae85f39937d27f873edcc359d565" + "content" : "0ec195c2cd805ba066715992213efab8234ad4fea211d38c11621b764ce81a82ec4eb13f372c3a6ae77663319de497ca" }, { "alg" : "SHA3-384", - "content" : "f38a0bc3cfd4b5d024c210e71fc0b63f41cc4bbac4bc501905fad95ceda64f81e39c3a53ca50b5c1e25250e802ce8a92" + "content" : "d59fe66bc7a1621385b1a8e6d9e7e9aba25f5bcd1bf7460aaeea718a9fdefa1f01d65bc6bbf08c4ea20d6ff5533321d5" }, { "alg" : "SHA3-256", - "content" : "2a9a49aac638a35dbc0ec3d31a79cb92a87bb148ce46ca7072bbb4d732a0cda6" + "content" : "6b6d15ca4b8e534cfb0a5b3a9dc4ea328d07647a6a5029cc5bc36cc0e33f4ae7" }, { "alg" : "SHA3-512", - "content" : "5861b8fa999a2e4117429bf16c4ee05f765050a41ca59fd6beb2499ac24020a0693f366b6807bce569cf789be4ef075ab320aa02580712ad32d0b10a0b1b34d4" + "content" : "258f4367d5303ee344945915f54637c52cdfd441d3ec1a642172dd417815e38993f14b35154b0d9c7d3f49dfad666e9cb2ca26a9993f52815180b4bb6bdf8dce" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.sonarsource.python/sonar-python-plugin@4.17.0.14845?type=jar", + "purl" : "pkg:maven/org.sonarsource.python/python-checks@5.16.0.29940?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://redirect.sonarsource.com/plugins/python.html" + "url" : "https://docs.sonarsource.com/sonarqube-server/latest/extension-guide/developing-a-plugin/plugin-basics/python/python-checks/" }, { "type" : "build-system", @@ -2494,66 +2748,66 @@ }, { "type" : "vcs", - "url" : "https://github.com/SonarCommunity/sonar-python" + "url" : "https://github.com/SonarSource/sonar-python/python-checks" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.python/sonar-python-plugin@4.17.0.14845?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.python/python-checks@5.16.0.29940?type=jar" }, { - "publisher" : "SonarSource and Waleri Enns", + "publisher" : "SonarSource", "group" : "org.sonarsource.python", - "name" : "python-frontend", - "version" : "4.17.0.14845", + "name" : "python-commons", + "version" : "5.16.0.29940", "description" : "Parent pom of SonarSource public projects", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "c55cb48cedabf79f2877ebb9d88f6b58" + "content" : "9d94ffb59a75cf874e054eb124bc1815" }, { "alg" : "SHA-1", - "content" : "4ff8dfa5ea7d5ad5847562d95396b919308caea3" + "content" : "0c4756f9dd9cc5caf3acc856171694e2fa033bcc" }, { "alg" : "SHA-256", - "content" : "437b54530740f33ae5e46bdf8348d1440684f7d1cb318a7ee058689bd9b97c76" + "content" : "5fb75ed5d0f7767f3d5877e1fc44a2cb4498b83c482e1e4cefd5c878f118225e" }, { "alg" : "SHA-512", - "content" : "4928573b4dde5237b3056a25d01fdcaa0d8477f66517d0939d332ff8ba434b6a03d884095701f4b571af131b3afc6b57feee148d69d86b8e62a3a4d39d2d1001" + "content" : "d8aa8345c5a55aa6a9cbcb261277e0f36e4756ea4a4d9dc99410053781a6305f9c98e1d0c2f0253e9e6140c40f6f9f19da26e7e85913407b42b20808aebfe9f0" }, { "alg" : "SHA-384", - "content" : "859f11ab3b6590bc07f6a082ef8d87775939341e064abd4c840ad326640c71b84e99a8ae281f0bece8bd5b8196db1c0d" + "content" : "ee39919d1c32d29c16e41ef2259b5b71f5670244c9c9b1224972eb4d38c90e963dedb6108ce8c0243e322086e585a3da" }, { "alg" : "SHA3-384", - "content" : "7dc1a501021011058c6e46cf0e069103aca9687de27aea29c42196af8d74c09ed668ec77284abafc12d635f4e0c9154e" + "content" : "ddc8bf3b9b5d30bb0916c90f676061729666587f674827a29dcb21a08fe4d59e42f5ce818c5730e2aa21f1befa74c130" }, { "alg" : "SHA3-256", - "content" : "84a8def8e68682978bda393edba28e6caa7d4c333fffce5c09a24e54a4104d20" + "content" : "da0ff73c07625578b2d3d55fcc5cd16406762ad670a77c46e7128f6c4e90ec3b" }, { "alg" : "SHA3-512", - "content" : "b44fdef1e3482a1f65d0d5345c69fb78ed32cee27f96abab033ae1e3e26923efd69e8b213ae7c9c367c0e9a87df3785154ecc58961a5261513dc1fb3e260d50d" + "content" : "624e8aaaee39fcad526d4e2699174f8aa9804fc1cb08418dd742374a91fdc3fd474173f59e64508a74029080e9e56d9c6c32e311b71533eba3eead882c4a736f" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.sonarsource.python/python-frontend@4.17.0.14845?type=jar", + "purl" : "pkg:maven/org.sonarsource.python/python-commons@5.16.0.29940?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://docs.sonarqube.org/display/PLUG/Plugin+Library/python/python-frontend" + "url" : "https://docs.sonarsource.com/sonarqube-server/latest/extension-guide/developing-a-plugin/plugin-basics/python/python-commons/" }, { "type" : "build-system", @@ -2569,210 +2823,210 @@ }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-python/python-frontend" + "url" : "https://github.com/SonarSource/sonar-python/python-commons" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.python/python-frontend@4.17.0.14845?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.python/python-commons@5.16.0.29940?type=jar" }, { - "group" : "com.google.protobuf", - "name" : "protobuf-java", - "version" : "3.25.1", - "description" : "Core Protocol Buffers library. Protocol Buffers are a way of encoding structured data in an efficient yet extensible format.", + "publisher" : "FasterXML", + "group" : "com.fasterxml.jackson.dataformat", + "name" : "jackson-dataformat-toml", + "version" : "2.20.1", + "description" : "Support for reading and writing TOML-encoded data via Jackson abstractions.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "7dc81d3c2187ce5627d134a37df88cc0" + "content" : "f3d12c27f5c0744054e8716f3ee4b3d2" }, { "alg" : "SHA-1", - "content" : "2933a5c3f022456d8842323fe0d7fb2d25a7e3c7" + "content" : "1f4f7249289053551eac7bc8ac6e646576d03e1a" }, { "alg" : "SHA-256", - "content" : "48a8e58a1a8f82eff141a7a388d38dfe77d7a48d5e57c9066ee37f19147e20df" + "content" : "3936e3fb83edd2754bb317d17a63cded43b5fac4fb82eabb4aaa502bb52f9835" }, { "alg" : "SHA-512", - "content" : "d4adb935097c4fee13838ea7c166b41a9c34977e436d2fa5e5e92aac1a95462846463895ad994858a442079627696ca14618ff97a0039abd3fcb8671d7961d3a" + "content" : "cd31529a28ff83585d8d5944943c528d4d26e0f547c5ed804c90a8c642b0cd34553d2f4b7878903312a06d4ad86351aa6591294dba4f61b0bb03da317aeef870" }, { "alg" : "SHA-384", - "content" : "2fc41e52f529bcbbe4d8938d262153ee7e7a098d51fc84a2720bade27aff0247af47629c3caa630b706001d769714d1c" + "content" : "e2f0cbd883ee0745e6c27d0cf83c1e48869f89cb444c099e553f25105d7800949b1db37fc5db5055e321fdce8b13ebde" }, { "alg" : "SHA3-384", - "content" : "9ff49c91b6ca5e5ebc8005b6179d171f3bb549b9ef667c694ea6cebe842bccbea1bedb2bab69d97e89270900915f125b" + "content" : "fd0c36a837dd0b756c3622606b1490218cba364f30d148bac78dfee7dbb1117a9f1504a2e0cac8d83cf6cdb17f0ecf7b" }, { "alg" : "SHA3-256", - "content" : "e3794da30f03c61b916aeb9aa2af625792dc7f236bf2bd16cbfffbf3ef186d59" + "content" : "58d572441da65e6c63de352d608a144b280bd3754a06128d1da840494c70ce6b" }, { "alg" : "SHA3-512", - "content" : "1d3bfb11f6cae1912bd5cd04aef53ae725d705e598fafaa185903d2c534ca2f88ad919321ec4bcdca36c9b1515097c5d47aa6868f5bd3b93732337bd564b3bb7" + "content" : "bdbc867b3d2a993b277d19c230f84dd52a8db5f6638f9a90f6d613b9eb7b2f49e3404dc78dba4877fdad3ed5bd255f27be808ec287898c833ee2347ee44a94f4" } ], "licenses" : [ { "license" : { - "id" : "BSD-3-Clause", - "url" : "https://opensource.org/licenses/BSD-3-Clause" + "id" : "Apache-2.0" } } ], - "purl" : "pkg:maven/com.google.protobuf/protobuf-java@3.25.1?type=jar", + "purl" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-toml@2.20.1?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://developers.google.com/protocol-buffers/protobuf-java/" + "url" : "https://github.com/FasterXML/jackson-dataformats-text" }, { "type" : "distribution-intake", - "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" + "url" : "https://central.sonatype.com/api/v1/publisher" + }, + { + "type" : "issue-tracker", + "url" : "https://github.com/FasterXML/jackson-dataformats-text/issues" }, { "type" : "vcs", - "url" : "https://github.com/protocolbuffers/protobuf/protobuf-java" + "url" : "https://github.com/FasterXML/jackson-dataformats-text/jackson-dataformat-toml" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.google.protobuf/protobuf-java@3.25.1?type=jar" + "bom-ref" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-toml@2.20.1?type=jar" }, { - "publisher" : "SonarSource and Waleri Enns", - "group" : "org.sonarsource.python", - "name" : "python-checks", - "version" : "4.17.0.14845", - "description" : "Parent pom of SonarSource public projects", + "publisher" : "FasterXML", + "group" : "com.fasterxml.jackson.datatype", + "name" : "jackson-datatype-jdk8", + "version" : "2.20.1", + "description" : "Add-on module for Jackson (https://github.com/FasterXML/jackson) to support JDK 8 data types.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "077f9306a20f8a6eca092f54a53a26e3" + "content" : "9360afe5a78d29ce5510f670b3286e77" }, { "alg" : "SHA-1", - "content" : "ef43f45c57346b910ac422d7aff2ab4b6fe25894" + "content" : "6a8bbc260ba834f67220117d9f08510d69c4a3f0" }, { "alg" : "SHA-256", - "content" : "7d6e1743538dbfa7310bc54fbb7e511a6fd8633549018d7e2b4ba67019a3123e" + "content" : "6821cdd695e95c4e6853ec855a7432c71f2f4be318b3ca190fbbf8a2e5f981f2" }, { "alg" : "SHA-512", - "content" : "f628f82e470f9af8e0da159464ef41996b5edbbab7ead94db853afc54992d8f155994becbb9acdfe4af46a41fbf5e3ae01ba6b17078d1e20861da5e4eedccafc" + "content" : "9aceae6ea4ac56a038982fc45e91942cc15d68b7e07e044c1e75a71760b2eb02e23a344f36966093be670a2d1f656146492f11148da06a4044b4a5d78e523beb" }, { "alg" : "SHA-384", - "content" : "43302f43c32c5b35c4f7b85e901c457ad7ce7c1d0cc8d891dceb828018d0fa06c09fd7b6a34764f187b0deb8f002db96" + "content" : "c55990a25083046bd3881b656d5fa351e5d2115ce861427cc8bdc64acbf85f9a3ea739f3510eedfc0372f226ed7ebd2a" }, { "alg" : "SHA3-384", - "content" : "2c847248451a6f0874fa6d91dedd203c7492db05161c15235d709e9e9bc6d8ff5900b7c60e0aeea74fb7566cb1a3db3e" + "content" : "9556b354a7fdf5324aa22d6a00b308508bfb55555c2a31ca159c2b9f35f8a3d4e904a7eb15388f6532bb464fcc642db5" }, { "alg" : "SHA3-256", - "content" : "32f3d74c14e3918b8af6c98cc32304cc5d0b835348cd15734033307e4e871d2f" + "content" : "b4018fdef370f16380205cf366a9b84f4721b5ff0a800e72e0a1a23f4a58848a" }, { "alg" : "SHA3-512", - "content" : "2429a23270a66433e76eade81bb8b8acd3d91b55a587c6230ecc1282e71b2fcd61d9867d100fe04b74d387516a7c0df4124d8aa82f300c07a82dba20b4c01920" + "content" : "9f9db93cecb859df97455ddfa61136406700ae786715a3754e0ac9f9993deb9df62c44e08233dcf463e792fcbba9a25e7472e34dba5970d9df7eecf959c71875" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "id" : "Apache-2.0" } } ], - "purl" : "pkg:maven/org.sonarsource.python/python-checks@4.17.0.14845?type=jar", + "purl" : "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.20.1?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://docs.sonarqube.org/display/PLUG/Plugin+Library/python/python-checks" + "url" : "https://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jdk8" }, { - "type" : "build-system", - "url" : "https://cirrus-ci.com/github/SonarSource/sonar-python" + "type" : "distribution-intake", + "url" : "https://central.sonatype.com/api/v1/publisher" }, { "type" : "issue-tracker", - "url" : "https://jira.sonarsource.com/browse/SONARPY" - }, - { - "type" : "mailing-list", - "url" : "https://community.sonarsource.com" + "url" : "https://github.com/FasterXML/jackson-modules-java8/issues" }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-python/python-checks" + "url" : "http://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jdk8" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.python/python-checks@4.17.0.14845?type=jar" + "bom-ref" : "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.20.1?type=jar" }, { "publisher" : "The Apache Software Foundation", - "group" : "commons-lang", - "name" : "commons-lang", - "version" : "2.6", - "description" : "Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.", + "group" : "org.apache.commons", + "name" : "commons-text", + "version" : "1.14.0", + "description" : "Apache Commons Text is a set of utility functions and reusable components for processing and manipulating text in a Java environment.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "4d5c1693079575b362edf41500630bbd" + "content" : "54960a12a82d52df3d5548d6934d87b2" }, { "alg" : "SHA-1", - "content" : "0ce1edb914c94ebc388f086c6827e8bdeec71ac2" + "content" : "adcb0d4c67eabc79682604b47eb852aaff21138a" }, { "alg" : "SHA-256", - "content" : "50f11b09f877c294d56f24463f47d28f929cf5044f648661c0f0cfbae9a2f49c" + "content" : "121fce2282910c8f0c3ba793a5436b31beb710423cbe2d574a3fb7a73c508e92" }, { "alg" : "SHA-512", - "content" : "4a5a3dbe4941c645e2cca068cca5c1882cfe988b02e7cd981d1e51784900767d1deab0e0e0566f559c9fcabb4a180e436d5bb948902d4f4106f37360466afb42" + "content" : "4975879372241025bd0a47fe540ed7d0cd3e5eba474b12af67a8c6016be0fbb4f4a3a4a0064f4d2b6aebce67d88ee814da345a5ba3a6ee4f6293b3b4e7bbd065" }, { "alg" : "SHA-384", - "content" : "9725bc421adc1dbcd6f937eca0f3075d186a2b353ece4cef66b0fe81bb8d3f7d7641c43e86d657ef526c719f0c2a8c90" + "content" : "a038f1a8b58bb7ec17ba55238d3e40f5d9386dfb17870630a728b22741a9592819374e9abbbc6402a439eea4db5b739a" }, { "alg" : "SHA3-384", - "content" : "4bc4eaaf2580ded6d552b96ae5261c936de95f69a1d137c47279c51bf2aa1406ae44f69ccc94486267b8441e53c4bd74" + "content" : "5325922bb72aa73d2d51cb3fb5592fc77097614fd3ab3ac77e3acdc0fe1dc8c18893cdd9a05768bb725fa40dd8c14527" }, { "alg" : "SHA3-256", - "content" : "b68d49ef037d428ea0c3e67a7a20f3d68a134bef30a1639ec08d28886b9f5629" + "content" : "31008266592ec8503bcc7f6b4e7125b0e377f57f3a697cdcb02ee7f20f84ddf1" }, { "alg" : "SHA3-512", - "content" : "2e9ffc0608827cffc0b48b7a0f35d371c66586c99fea2910f7c2a237c7c57d9ae4d65de7c8e018362c2e4f963c2f70a9196cebf35457f1dd0cea6c65c256f673" + "content" : "385249425d8c6ab181039195a03c6337f393a1e1419527e9f072d695367bc0bd6546e752d1912df557bd8788329f7609aa1c63ce42eb135e2d27b6141ce9280f" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0" + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], - "purl" : "pkg:maven/commons-lang/commons-lang@2.6?type=jar", + "purl" : "pkg:maven/org.apache.commons/commons-text@1.14.0?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://commons.apache.org/lang/" + "url" : "https://commons.apache.org/proper/commons-text" }, { "type" : "build-system", - "url" : "http://vmbuild.apache.org/continuum/" + "url" : "https://github.com/apache/commons-text/actions" }, { "type" : "distribution-intake", @@ -2780,19 +3034,19 @@ }, { "type" : "issue-tracker", - "url" : "http://issues.apache.org/jira/browse/LANG" + "url" : "https://issues.apache.org/jira/browse/TEXT" }, { "type" : "mailing-list", - "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/" + "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/" }, { "type" : "vcs", - "url" : "http://svn.apache.org/viewvc/commons/proper/lang/branches/LANG_2_X" + "url" : "https://gitbox.apache.org/repos/asf?p=commons-text.git" } ], "type" : "library", - "bom-ref" : "pkg:maven/commons-lang/commons-lang@2.6?type=jar" + "bom-ref" : "pkg:maven/org.apache.commons/commons-text@1.14.0?type=jar" }, { "publisher" : "Codehaus", @@ -2991,55 +3245,119 @@ "type" : "library", "bom-ref" : "pkg:maven/org.codehaus.woodstox/stax2-api@3.1.4?type=jar" }, + { + "publisher" : "SonarSource", + "group" : "org.sonarsource.go", + "name" : "sonar-go-plugin", + "version" : "1.32.0.5128", + "description" : "Code Analyzer for Go", + "scope" : "required", + "hashes" : [ + { + "alg" : "MD5", + "content" : "ea2de97a8b1020865b993afe78aff72f" + }, + { + "alg" : "SHA-1", + "content" : "daa3ce9acfba33b2dba823c64d72bf3a0fa2b25d" + }, + { + "alg" : "SHA-256", + "content" : "7ad9dd5e478be53d58ad12d060f0e4aaa5e5eb9f5fcb28411c8083da2d5e0b19" + }, + { + "alg" : "SHA-512", + "content" : "3176550be29c19e7fb8b90b6993b29f3b8b4b51ddfa4509bab6de91edc4d7b40e3384dc48df7731262cb671379d2c4163eef78565389a391a43d450dcba56996" + }, + { + "alg" : "SHA-384", + "content" : "b1e7333047001ad10c6058a5ede6bc27651bae3335c0faadc1a6bda3ba1b66b90f45aec62389eaa9ec41eba836dc0d52" + }, + { + "alg" : "SHA3-384", + "content" : "18184263d523ab59b12019479a129e608f201e2c096745e869d72e029c78d41409d64934307b1f1a343ab0e1475978f3" + }, + { + "alg" : "SHA3-256", + "content" : "3fddc018fee60147c78382440a963bf6812bf496bb1d25090b50475e185a0844" + }, + { + "alg" : "SHA3-512", + "content" : "c1fc155244473f90fcc327f33055b06cb2fb35a203421b832f627d12150d851640a407a84dd47498b372ad0337bb1881ffa8aeab9fec85cb5e04b924989c5db5" + } + ], + "licenses" : [ + { + "license" : { + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" + } + } + ], + "purl" : "pkg:maven/org.sonarsource.go/sonar-go-plugin@1.32.0.5128?type=jar", + "externalReferences" : [ + { + "type" : "website", + "url" : "http://www.sonarqube.org/" + }, + { + "type" : "vcs", + "url" : "https://github.com/SonarSource/sonar-go" + } + ], + "type" : "library", + "bom-ref" : "pkg:maven/org.sonarsource.go/sonar-go-plugin@1.32.0.5128?type=jar" + }, { "publisher" : "The Apache Software Foundation", "group" : "commons-io", "name" : "commons-io", - "version" : "2.11.0", + "version" : "2.20.0", "description" : "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "3b4b7ccfaeceeac240b804839ee1a1ca" + "content" : "94e7e6b9b5fe82388687b584d3571081" }, { "alg" : "SHA-1", - "content" : "a2503f302b11ebde7ebc3df41daebe0e4eea3689" + "content" : "36f3474daec2849c149e877614e7f979b2082cd2" }, { "alg" : "SHA-256", - "content" : "961b2f6d87dbacc5d54abf45ab7a6e2495f89b75598962d8c723cea9bc210908" + "content" : "df90bba0fe3cb586b7f164e78fe8f8f4da3f2dd5c27fa645f888100ccc25dd72" }, { "alg" : "SHA-512", - "content" : "5bd78eed456ede30119319c5bed8e3e4c443b6fd7bdb3a7a5686647bd83094d0c3e2832a7575cfb60e4ef25f08106b93476939d3adcfecf5533cc030b3039e10" + "content" : "fea08e150473673b0608eaee3ae1cb4e73834039db80d3b758710d6baf3a5840a0878a4eb64739ae9bb21ccc7148c8520fe873616a3f6d5cdb4305deabdd015c" }, { "alg" : "SHA-384", - "content" : "114f1e324d90ad887c177876d410f5787a8e8da6c48d4b2862d365802c0efded3a88cb24046976bf6276cadad3712f0f" + "content" : "22db5e18e3512ed44474e75a124a052d5a1a6f35ce458f6a201a5ccc9510c57c10c117dba80ac6ce91745cf2b51e63f2" }, { "alg" : "SHA3-384", - "content" : "80288c03ad4d80d69f91d056ffc5570d49a9c76bf54ad2dff0121ecde26a560df76d05156f281f5c6db2a38ff07a873d" + "content" : "a70700d24df3c276ff387c359e0e940b834e413b72a49917de9a82615836eca8cca1bee1ed71790606c795da795e9151" }, { "alg" : "SHA3-256", - "content" : "5adfb5ccaf5f21a549422f426118a9542673926fcd18c68390cf813e791dcf6c" + "content" : "a8d044d3a4a069d0f20d24112b6427a3a6f02a925b31b932721d1f545ff32cec" }, { "alg" : "SHA3-512", - "content" : "7573f47f0babb53cefdc7c2309a0b982d800139064537b0797da442853d081010ad7c3c74a500598a0f800639a5d540eca21963ea652c68613907059bd4278c2" + "content" : "3417bf811d7e5fc1e71b8540f3379751434ea8540c421ff2c8bb5f5ce34401cd0ad8a829b65aa55e055c57141181762c4827099352c2bba453e48ad2df67526a" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0" + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], - "purl" : "pkg:maven/commons-io/commons-io@2.11.0?type=jar", + "purl" : "pkg:maven/commons-io/commons-io@2.20.0?type=jar", "externalReferences" : [ { "type" : "website", @@ -3047,7 +3365,7 @@ }, { "type" : "build-system", - "url" : "https://builds.apache.org/" + "url" : "https://github.com/apache/commons-io/actions" }, { "type" : "distribution-intake", @@ -3067,47 +3385,47 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/commons-io/commons-io@2.11.0?type=jar" + "bom-ref" : "pkg:maven/commons-io/commons-io@2.20.0?type=jar" }, { "publisher" : "Google Inc.", "group" : "com.google.googlejavaformat", "name" : "google-java-format", - "version" : "1.22.0", + "version" : "1.28.0", "description" : "A Java source code formatter that follows Google Java Style.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "fd1fbd4edf5d8eaca565217ff981b94b" + "content" : "8e2d4037e876b608ab0356477b5ead98" }, { "alg" : "SHA-1", - "content" : "6e31a0877a51e91076c857794a0b1df7af876b2d" + "content" : "f57d0ad670cc32c4d4a4ffb2cbef44a3dfddeecd" }, { "alg" : "SHA-256", - "content" : "4f4bdba0f2a3d7e84be47683a0c2a4ba69024d29d906d09784181f68f04af792" + "content" : "41dfe4d1012794ed15e0ffd70f89fd4fa65d5f15ce0bc0c70f8c2c127d6d010d" }, { "alg" : "SHA-512", - "content" : "d2006def13e5144e12568298014a23c86299a62e2bb7757c63f5f25405b1adb6f60b3f2f54bed9583cdd24cae71088e9f7aa846a10a089cce2a25972e48c7649" + "content" : "87bf18026e543bc9135d58153f05b8bf58b48bd59cec96e774e3f68bc8d601b9789924a9917b9a4f57b8a69bbe24dd20aef0a65543a63e7101b39317469346d2" }, { "alg" : "SHA-384", - "content" : "4aed1de35a09b196347064d45a5996fd7467c9b5cca0faf4655cbeb756053810cd3af2e45d74401aee626e30b1693ca7" + "content" : "bfd9e42e51d696fa079aa12d3541645873724ce48989615723533aba58fc3e4f77a37e9102bad2b391dc0252b449bad9" }, { "alg" : "SHA3-384", - "content" : "28fc6265d1886418ca44d1c7eea8709a2f38ba5b3f8cedb6a44d1a36f676e533662b61105db8b8d1f69fc4796fbcc8bd" + "content" : "b48a456db7981843ffc51f60511d4a5d52072bbe89da4dda6560cee4414493236e94ad1af4c5564449fb000501ca6ef4" }, { "alg" : "SHA3-256", - "content" : "08098285fccec01b2f3fce2e46ac210deb79862f21cb4ae96ff3a1a040df0809" + "content" : "ae18cf36a9212cdb243e3900cca7f9059273dfdf227fb97a189b5ae84cc989e4" }, { "alg" : "SHA3-512", - "content" : "122e32ab36408a79ed1153660ab1ba7639212d30921ea022da9affc19f76c5d874241a8584fc5c992ce74d2f01c2e06fddc784aee11c6d4238fc645ade3a1880" + "content" : "ac1207d9b7d8be02a222d1f11b44a5bcf1d95924404926698c8f23ba3688cfc49fc81e594e4f48d03ebbbf0ccc638706433ed462499b5b4d083538eb7e37541e" } ], "licenses" : [ @@ -3117,16 +3435,12 @@ } } ], - "purl" : "pkg:maven/com.google.googlejavaformat/google-java-format@1.22.0?type=jar", + "purl" : "pkg:maven/com.google.googlejavaformat/google-java-format@1.28.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/google/google-java-format/google-java-format" }, - { - "type" : "distribution-intake", - "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" - }, { "type" : "issue-tracker", "url" : "http://github.com/google/google-java-format/issues" @@ -3137,7 +3451,7 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/com.google.googlejavaformat/google-java-format@1.22.0?type=jar" + "bom-ref" : "pkg:maven/com.google.googlejavaformat/google-java-format@1.28.0?type=jar" }, { "group" : "com.google.guava", @@ -3419,68 +3733,6 @@ "type" : "library", "bom-ref" : "pkg:maven/org.checkerframework/checker-qual@3.37.0?type=jar" }, - { - "publisher" : "Google LLC", - "group" : "com.google.errorprone", - "name" : "error_prone_annotations", - "version" : "2.21.1", - "description" : "Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.", - "scope" : "required", - "hashes" : [ - { - "alg" : "MD5", - "content" : "75fe4fe33d308dd6cee3b601de902d27" - }, - { - "alg" : "SHA-1", - "content" : "6d9b10773b5237df178a7b3c1b4208df7d0e7f94" - }, - { - "alg" : "SHA-256", - "content" : "d1f3c66aa91ac52549e00ae3b208ba4b9af7d72d68f230643553beb38e6118ac" - }, - { - "alg" : "SHA-512", - "content" : "530318bcdf1ed8eeee408fc5a0775f1792cbf012b4ec55217a4498c8d2983b230a4d071b9e115565b0411faa51dd938823d9b619beb6786212c375ad3d1ebd8a" - }, - { - "alg" : "SHA-384", - "content" : "88e628431966a9b5cc19f96159874cefde1558e51d2ce233a0c2d47914eb9c6256f95882605a87cc6629a21ff70b72b4" - }, - { - "alg" : "SHA3-384", - "content" : "ebc750b211532fef9a84c3682d47f00b877e4082716ead1f4f883f02ab35bda8d5acfc475722215c4fe6ed9cfd54f43a" - }, - { - "alg" : "SHA3-256", - "content" : "9b4f193bf2f541844c6b1b5cf2d1c7f6e9465b97804d155f34530b203184e1ae" - }, - { - "alg" : "SHA3-512", - "content" : "1d76781cef387a185fd4fb69960394556062969bbbe0be74d0fb11f7c73758e5d35ff546ab04f6382c21c63705a1ffb975a549bf4d846fde54e412ecd4641485" - } - ], - "licenses" : [ - { - "license" : { - "id" : "Apache-2.0" - } - } - ], - "purl" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.21.1?type=jar", - "externalReferences" : [ - { - "type" : "website", - "url" : "https://errorprone.info/error_prone_annotations" - }, - { - "type" : "vcs", - "url" : "https://github.com/google/error-prone/error_prone_annotations" - } - ], - "type" : "library", - "bom-ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.21.1?type=jar" - }, { "group" : "com.google.j2objc", "name" : "j2objc-annotations", @@ -3549,83 +3801,79 @@ ], "dependencies" : [ { - "ref" : "pkg:maven/com.ibm/engine@1.0.3-SNAPSHOT?type=jar", + "ref" : "pkg:maven/com.ibm/engine@2.0.0-SNAPSHOT?type=jar", "dependsOn" : [ - "pkg:maven/com.ibm/common@1.0.3-SNAPSHOT?type=jar", - "pkg:maven/org.jetbrains/annotations@24.1.0?type=jar", - "pkg:maven/org.sonarsource.api.plugin/sonar-plugin-api@9.13.0.360?type=jar", - "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", - "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar", - "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar", - "pkg:maven/org.sonarsource.java/sonar-java-plugin@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.python/sonar-python-plugin@4.17.0.14845?type=jar", - "pkg:maven/com.google.googlejavaformat/google-java-format@1.22.0?type=jar" + "pkg:maven/com.ibm/common@2.0.0-SNAPSHOT?type=jar", + "pkg:maven/org.sonarsource.api.plugin/sonar-plugin-api@13.4.3.4290?type=jar", + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", + "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar", + "pkg:maven/org.sonarsource.java/sonar-java-plugin@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.python/sonar-python-plugin@5.16.0.29940?type=jar", + "pkg:maven/org.sonarsource.go/sonar-go-plugin@1.32.0.5128?type=jar", + "pkg:maven/com.google.googlejavaformat/google-java-format@1.28.0?type=jar" ] }, { - "ref" : "pkg:maven/com.ibm/common@1.0.3-SNAPSHOT?type=jar", + "ref" : "pkg:maven/com.ibm/common@2.0.0-SNAPSHOT?type=jar", "dependsOn" : [ - "pkg:maven/org.jetbrains/annotations@24.1.0?type=jar", - "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", - "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar", - "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar", - "pkg:maven/org.sonarsource.java/sonar-java-plugin@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.python/sonar-python-plugin@4.17.0.14845?type=jar", - "pkg:maven/com.google.googlejavaformat/google-java-format@1.22.0?type=jar" + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", + "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar", + "pkg:maven/org.sonarsource.java/sonar-java-plugin@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.python/sonar-python-plugin@5.16.0.29940?type=jar", + "pkg:maven/org.sonarsource.go/sonar-go-plugin@1.32.0.5128?type=jar", + "pkg:maven/com.google.googlejavaformat/google-java-format@1.28.0?type=jar" ] }, { - "ref" : "pkg:maven/org.jetbrains/annotations@24.1.0?type=jar", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", + "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar", - "dependsOn" : [ ] + "ref" : "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar", + "dependsOn" : [ + "pkg:maven/com.google.errorprone/error_prone_annotations@2.41.0?type=jar" + ] }, { - "ref" : "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar", + "ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.41.0?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/org.sonarsource.java/sonar-java-plugin@7.33.0.35775?type=jar", + "ref" : "pkg:maven/org.sonarsource.java/sonar-java-plugin@8.18.0.40025?type=jar", "dependsOn" : [ - "pkg:maven/org.sonarsource.java/java-surefire@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.java/java-frontend@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.java/java-symbolic-execution@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.java/java-checks@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.java/java-checks-aws@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.java/external-reports@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.java/java-jsp@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.8.0.2699?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.8.0.2699?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.8.0.2699?type=jar" + "pkg:maven/org.sonarsource.java/java-surefire@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.java/java-frontend@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.java/java-checks@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.java/java-checks-aws@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.java/check-list@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.java/external-reports@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.java/java-jsp@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.18.0.3393?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.18.0.3393?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.18.0.3393?type=jar" ] }, { - "ref" : "pkg:maven/org.sonarsource.java/java-surefire@7.33.0.35775?type=jar", + "ref" : "pkg:maven/org.sonarsource.java/java-surefire@8.18.0.40025?type=jar", "dependsOn" : [ - "pkg:maven/org.sonarsource.java/java-frontend@7.33.0.35775?type=jar", + "pkg:maven/org.sonarsource.java/java-frontend@8.18.0.40025?type=jar", "pkg:maven/com.fasterxml.staxmate/staxmate@2.4.1?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.8.0.2699?type=jar" + "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.18.0.3393?type=jar" ] }, { - "ref" : "pkg:maven/org.sonarsource.java/java-frontend@7.33.0.35775?type=jar", + "ref" : "pkg:maven/org.sonarsource.java/java-frontend@8.18.0.40025?type=jar", "dependsOn" : [ - "pkg:maven/org.sonarsource.java/jdt-package@1.1.0.34?type=jar", + "pkg:maven/org.sonarsource.java/jdt-package@1.6.0.160?type=jar", "pkg:maven/org.sonarsource.sslr/sslr-core@1.24.0.633?type=jar", - "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.8.0.2699?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.8.0.2699?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.8.0.2699?type=jar" + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.18.0.3393?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.18.0.3393?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.18.0.3393?type=jar" ] }, { - "ref" : "pkg:maven/org.sonarsource.java/jdt-package@1.1.0.34?type=jar", + "ref" : "pkg:maven/org.sonarsource.java/jdt-package@1.6.0.160?type=jar", "dependsOn" : [ ] }, { @@ -3635,20 +3883,24 @@ ] }, { - "ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.8.0.2699?type=jar", + "ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", + "dependsOn" : [ ] + }, + { + "ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.18.0.3393?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.8.0.2699?type=jar", + "ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.18.0.3393?type=jar", "dependsOn" : [ "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar" ] }, { - "ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.8.0.2699?type=jar", + "ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.18.0.3393?type=jar", "dependsOn" : [ "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", - "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar" + "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar" ] }, { @@ -3662,7 +3914,7 @@ "dependsOn" : [ ] }, { - "ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.8.0.2699?type=jar", + "ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.18.0.3393?type=jar", "dependsOn" : [ "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", "pkg:maven/xerces/xercesImpl@2.12.2?type=jar", @@ -3687,117 +3939,97 @@ ] }, { - "ref" : "pkg:maven/org.sonarsource.java/java-symbolic-execution@7.33.0.35775?type=jar", - "dependsOn" : [ - "pkg:maven/org.sonarsource.java/java-frontend@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.8.0.2699?type=jar" - ] - }, - { - "ref" : "pkg:maven/org.sonarsource.java/java-checks@7.33.0.35775?type=jar", + "ref" : "pkg:maven/org.sonarsource.java/java-checks@8.18.0.40025?type=jar", "dependsOn" : [ - "pkg:maven/org.sonarsource.java/java-frontend@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.java/java-checks-common@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.java/java-symbolic-execution@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.8.0.2699?type=jar", - "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar", - "pkg:maven/org.springframework/spring-expression@6.1.5?type=jar" + "pkg:maven/org.sonarsource.java/java-frontend@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.java/java-checks-common@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.18.0.3393?type=jar", + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", + "pkg:maven/org.springframework/spring-expression@6.1.21?type=jar" ] }, { - "ref" : "pkg:maven/org.sonarsource.java/java-checks-common@7.33.0.35775?type=jar", + "ref" : "pkg:maven/org.sonarsource.java/java-checks-common@8.18.0.40025?type=jar", "dependsOn" : [ - "pkg:maven/org.sonarsource.java/java-frontend@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.8.0.2699?type=jar", - "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar" + "pkg:maven/org.sonarsource.java/java-frontend@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.18.0.3393?type=jar", + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar" ] }, { - "ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.8.0.2699?type=jar", + "ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.18.0.3393?type=jar", "dependsOn" : [ "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar" ] }, { - "ref" : "pkg:maven/org.springframework/spring-expression@6.1.5?type=jar", + "ref" : "pkg:maven/org.springframework/spring-expression@6.1.21?type=jar", "dependsOn" : [ - "pkg:maven/org.springframework/spring-core@6.1.5?type=jar" + "pkg:maven/org.springframework/spring-core@6.1.21?type=jar" ] }, { - "ref" : "pkg:maven/org.springframework/spring-core@6.1.5?type=jar", + "ref" : "pkg:maven/org.springframework/spring-core@6.1.21?type=jar", "dependsOn" : [ - "pkg:maven/org.springframework/spring-jcl@6.1.5?type=jar" + "pkg:maven/org.springframework/spring-jcl@6.1.21?type=jar" ] }, { - "ref" : "pkg:maven/org.springframework/spring-jcl@6.1.5?type=jar", + "ref" : "pkg:maven/org.springframework/spring-jcl@6.1.21?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/org.sonarsource.java/java-checks-aws@7.33.0.35775?type=jar", - "dependsOn" : [ - "pkg:maven/org.sonarsource.java/java-frontend@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.java/java-checks-common@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.8.0.2699?type=jar", - "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar" - ] - }, - { - "ref" : "pkg:maven/org.sonarsource.java/external-reports@7.33.0.35775?type=jar", + "ref" : "pkg:maven/org.sonarsource.java/java-checks-aws@8.18.0.40025?type=jar", "dependsOn" : [ - "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.8.0.2699?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.8.0.2699?type=jar" + "pkg:maven/org.sonarsource.java/java-frontend@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.java/java-checks-common@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.18.0.3393?type=jar", + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar" ] }, { - "ref" : "pkg:maven/org.sonarsource.java/java-jsp@7.33.0.35775?type=jar", + "ref" : "pkg:maven/org.sonarsource.java/check-list@8.18.0.40025?type=jar", "dependsOn" : [ - "pkg:maven/org.sonarsource.java/java-frontend@7.33.0.35775?type=jar", - "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@9.0.84?type=jar" + "pkg:maven/org.sonarsource.java/java-checks@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.java/java-checks-aws@8.18.0.40025?type=jar", + "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar" ] }, { - "ref" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@9.0.84?type=jar", + "ref" : "pkg:maven/org.sonarsource.java/external-reports@8.18.0.40025?type=jar", "dependsOn" : [ - "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.84?type=jar", - "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.84?type=jar" + "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.18.0.3393?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.18.0.3393?type=jar" ] }, { - "ref" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.84?type=jar", + "ref" : "pkg:maven/org.sonarsource.java/java-jsp@8.18.0.40025?type=jar", "dependsOn" : [ - "pkg:maven/org.apache.tomcat/tomcat-annotations-api@9.0.84?type=jar" + "pkg:maven/org.sonarsource.java/java-frontend@8.18.0.40025?type=jar" ] }, { - "ref" : "pkg:maven/org.apache.tomcat/tomcat-annotations-api@9.0.84?type=jar", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.84?type=jar", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:maven/org.sonarsource.python/sonar-python-plugin@4.17.0.14845?type=jar", + "ref" : "pkg:maven/org.sonarsource.python/sonar-python-plugin@5.16.0.29940?type=jar", "dependsOn" : [ - "pkg:maven/org.sonarsource.python/python-frontend@4.17.0.14845?type=jar", - "pkg:maven/org.sonarsource.python/python-checks@4.17.0.14845?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.8.0.2699?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.8.0.2699?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.8.0.2699?type=jar", - "pkg:maven/commons-lang/commons-lang@2.6?type=jar", + "pkg:maven/org.sonarsource.python/python-frontend@5.16.0.29940?type=jar", + "pkg:maven/org.sonarsource.python/python-checks@5.16.0.29940?type=jar", + "pkg:maven/org.sonarsource.python/python-commons@5.16.0.29940?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.18.0.3393?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.18.0.3393?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.18.0.3393?type=jar", + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", "pkg:maven/org.codehaus.staxmate/staxmate@2.0.1?type=jar" ] }, { - "ref" : "pkg:maven/org.sonarsource.python/python-frontend@4.17.0.14845?type=jar", + "ref" : "pkg:maven/org.sonarsource.python/python-frontend@5.16.0.29940?type=jar", "dependsOn" : [ "pkg:maven/org.sonarsource.sslr/sslr-core@1.24.0.633?type=jar", "pkg:maven/com.google.guava/guava@32.1.3-jre?type=jar", - "pkg:maven/com.google.protobuf/protobuf-java@3.25.1?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.8.0.2699?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.8.0.2699?type=jar" + "pkg:maven/com.google.protobuf/protobuf-java@4.29.0?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.18.0.3393?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.18.0.3393?type=jar", + "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1?type=jar" ] }, { @@ -3807,7 +4039,7 @@ "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar", "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", "pkg:maven/org.checkerframework/checker-qual@3.37.0?type=jar", - "pkg:maven/com.google.errorprone/error_prone_annotations@2.21.1?type=jar", + "pkg:maven/com.google.errorprone/error_prone_annotations@2.41.0?type=jar", "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar" ] }, @@ -3824,33 +4056,75 @@ "dependsOn" : [ ] }, { - "ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.21.1?type=jar", + "ref" : "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar", + "ref" : "pkg:maven/com.google.protobuf/protobuf-java@4.29.0?type=jar", + "dependsOn" : [ ] + }, + { + "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1?type=jar", + "dependsOn" : [ + "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.20?type=jar", + "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.1?type=jar" + ] + }, + { + "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.20?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/com.google.protobuf/protobuf-java@3.25.1?type=jar", + "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.1?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/org.sonarsource.python/python-checks@4.17.0.14845?type=jar", + "ref" : "pkg:maven/org.sonarsource.python/python-checks@5.16.0.29940?type=jar", "dependsOn" : [ - "pkg:maven/org.sonarsource.python/python-frontend@4.17.0.14845?type=jar", - "pkg:maven/commons-io/commons-io@2.11.0?type=jar", - "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.8.0.2699?type=jar" + "pkg:maven/org.sonarsource.python/python-frontend@5.16.0.29940?type=jar", + "pkg:maven/commons-io/commons-io@2.20.0?type=jar", + "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.18.0.3393?type=jar" ] }, { - "ref" : "pkg:maven/commons-io/commons-io@2.11.0?type=jar", + "ref" : "pkg:maven/commons-io/commons-io@2.20.0?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/commons-lang/commons-lang@2.6?type=jar", - "dependsOn" : [ ] + "ref" : "pkg:maven/org.sonarsource.python/python-commons@5.16.0.29940?type=jar", + "dependsOn" : [ + "pkg:maven/org.sonarsource.python/python-frontend@5.16.0.29940?type=jar", + "pkg:maven/org.sonarsource.python/python-checks@5.16.0.29940?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.18.0.3393?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.18.0.3393?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.18.0.3393?type=jar", + "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-toml@2.20.1?type=jar", + "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.20.1?type=jar", + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", + "pkg:maven/org.apache.commons/commons-text@1.14.0?type=jar", + "pkg:maven/org.codehaus.staxmate/staxmate@2.0.1?type=jar" + ] + }, + { + "ref" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-toml@2.20.1?type=jar", + "dependsOn" : [ + "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1?type=jar", + "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.1?type=jar" + ] + }, + { + "ref" : "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.20.1?type=jar", + "dependsOn" : [ + "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.1?type=jar", + "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1?type=jar" + ] + }, + { + "ref" : "pkg:maven/org.apache.commons/commons-text@1.14.0?type=jar", + "dependsOn" : [ + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar" + ] }, { "ref" : "pkg:maven/org.codehaus.staxmate/staxmate@2.0.1?type=jar", @@ -3864,13 +4138,23 @@ "dependsOn" : [ ] }, { - "ref" : "pkg:maven/com.google.googlejavaformat/google-java-format@1.22.0?type=jar", + "ref" : "pkg:maven/org.sonarsource.go/sonar-go-plugin@1.32.0.5128?type=jar", + "dependsOn" : [ ] + }, + { + "ref" : "pkg:maven/com.google.googlejavaformat/google-java-format@1.28.0?type=jar", "dependsOn" : [ "pkg:maven/com.google.guava/guava@32.1.3-jre?type=jar" ] }, { - "ref" : "pkg:maven/org.sonarsource.api.plugin/sonar-plugin-api@9.13.0.360?type=jar", + "ref" : "pkg:maven/org.sonarsource.api.plugin/sonar-plugin-api@13.4.3.4290?type=jar", + "dependsOn" : [ + "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar" + ] + }, + { + "ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar", "dependsOn" : [ ] } ] diff --git a/engine/src/main/java/com/ibm/engine/language/go/GoDetectionEngine.java b/engine/src/main/java/com/ibm/engine/language/go/GoDetectionEngine.java index d985101a..392b57e2 100644 --- a/engine/src/main/java/com/ibm/engine/language/go/GoDetectionEngine.java +++ b/engine/src/main/java/com/ibm/engine/language/go/GoDetectionEngine.java @@ -34,6 +34,12 @@ import com.ibm.engine.rule.DetectionRule; import com.ibm.engine.rule.MethodDetectionRule; import com.ibm.engine.rule.Parameter; +import java.util.Collections; +import java.util.LinkedList; +import java.util.List; +import java.util.Optional; +import javax.annotation.Nonnull; +import javax.annotation.Nullable; import org.sonar.go.symbols.Symbol; import org.sonar.go.symbols.Usage; import org.sonar.go.symbols.Usage.UsageType; @@ -52,13 +58,6 @@ import org.sonar.plugins.go.api.VariableDeclarationTree; import org.sonar.plugins.go.api.checks.GoCheck; -import javax.annotation.Nonnull; -import javax.annotation.Nullable; -import java.util.Collections; -import java.util.LinkedList; -import java.util.List; -import java.util.Optional; - /** * Detection engine implementation for Go. Handles detection of cryptographic patterns in Go AST. */ diff --git a/enricher/bom/bom.json b/enricher/bom/bom.json index 288b16a3..6854d453 100644 --- a/enricher/bom/bom.json +++ b/enricher/bom/bom.json @@ -1,10 +1,10 @@ { "bomFormat" : "CycloneDX", "specVersion" : "1.5", - "serialNumber" : "urn:uuid:6b9e68b0-e7ff-3655-8e6c-02e3fee2130f", + "serialNumber" : "urn:uuid:f9499a90-fb9e-327e-9c4a-3b454afb1c1a", "version" : 1, "metadata" : { - "timestamp" : "2024-04-12T08:16:54Z", + "timestamp" : "2026-01-28T14:17:43Z", "lifecycles" : [ { "phase" : "build" @@ -52,32 +52,32 @@ } ], "component" : { - "publisher" : "IBM", + "publisher" : "cbomkit", "group" : "com.ibm", "name" : "enricher", - "version" : "1.0.3-SNAPSHOT", + "version" : "2.0.0-SNAPSHOT", "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "https://www.gnu.org/licenses/lgpl.txt" + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], - "purl" : "pkg:maven/com.ibm/enricher@1.0.3-SNAPSHOT?type=jar", + "purl" : "pkg:maven/com.ibm/enricher@2.0.0-SNAPSHOT?type=jar", "externalReferences" : [ { "type" : "distribution-intake", - "url" : "https://eu.artifactory.swg-devops.com/artifactory/res-cryptoagility-team-maven-local" + "url" : "https://maven.pkg.github.com/cbomkit/sonar-cryptography" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.ibm/enricher@1.0.3-SNAPSHOT?type=jar" + "bom-ref" : "pkg:maven/com.ibm/enricher@2.0.0-SNAPSHOT?type=jar" }, "properties" : [ { "name" : "maven.goal", - "value" : "makeBom" + "value" : "makeAggregateBom" }, { "name" : "maven.scopes", @@ -87,407 +87,426 @@ }, "components" : [ { - "publisher" : "IBM", + "publisher" : "cbomkit", "group" : "com.ibm", "name" : "mapper", - "version" : "1.0.3-SNAPSHOT", + "version" : "2.0.0-SNAPSHOT", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "f77ba78b00e389feb00739f8f39381f5" + "content" : "8266e2e8bdbc19492b73a641829b77f7" }, { "alg" : "SHA-1", - "content" : "3527ba5c2addbdbe28ceabafc99fb63ed1f19598" + "content" : "0a577009d07ae2dd201dd12db7de534a95132822" }, { "alg" : "SHA-256", - "content" : "c18a94c325cc96ea9e1abdd8d7ff1f030f0d414e14d19978ba4e97f3851dbfd5" + "content" : "309909b57fdefcf60f7a775579f13961f2bf5b0993c4ca0bfb45849d1c1d3e4e" }, { "alg" : "SHA-512", - "content" : "a3db5622d4a4e3ad7db2567fb8caa8d7c77ec8cc6a5a0108041964e8400801757bc8a5760798299f224ec6dad2e8c3e460f25224d3c7854768fefaa82bb41c55" + "content" : "be39a43306537c59940b629f953bbe60d6dc4f86ed05d4e3f85a0a00a6176f87d4035335bc376f7dcf4edccd9f7721ea885c00936d6ed15ff3bd263b6afbeeb0" }, { "alg" : "SHA-384", - "content" : "8b74ab21024e508b4c00a57fdce5aa0e61567ea3712185f6dffb3662f7bb8319bb878e0f004ae712d98d0d766a43ae63" + "content" : "f568108df2411dae89b7bb0a420f7c1947d732ce7892d497d3d99d5eda151d87bf68a142e575d19b561914fac4d85a75" }, { "alg" : "SHA3-384", - "content" : "ec4e1425c94578e1e96fd1c2b10baa47ba6f1cffaa7a569d3f4c50ca18dc433492c5641cdd379c89a4b41361f1eda6a9" + "content" : "f9ed8e4a5c42c2eaaa4af32f36589139571237a4aa85b5353f5c8ff1bfcf90f2d227e77e4ccb1716bb85e9a9b9a5ad7a" }, { "alg" : "SHA3-256", - "content" : "b8dd34534aeef2ca45902fa7e047c7965db3d82cd8cbb31fe87c71911d3b2957" + "content" : "5d5aae940db911e26128b08abd03d0db1071c821345d019ba9c144aa45cb9f8d" }, { "alg" : "SHA3-512", - "content" : "676519218fc4c944296be985e14098e41ea69bb84e3ee92ac62315810301fa7cfb48d6036789ea2aae727e84811183646e5cb98b95c312a3a50b86b9e7c1fbc3" + "content" : "34e93b78ae899aca9010cd2bed9ea1db4d479ef92715d92a245910f57be8f74b299f25f593ff216d0f484a068007846006bc0a7ad5d22e8485f0b4a7aff1e297" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "https://www.gnu.org/licenses/lgpl.txt" + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], - "purl" : "pkg:maven/com.ibm/mapper@1.0.3-SNAPSHOT?type=jar", + "purl" : "pkg:maven/com.ibm/mapper@2.0.0-SNAPSHOT?type=jar", "externalReferences" : [ { "type" : "distribution-intake", - "url" : "https://eu.artifactory.swg-devops.com/artifactory/res-cryptoagility-team-maven-local" + "url" : "https://maven.pkg.github.com/cbomkit/sonar-cryptography" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.ibm/mapper@1.0.3-SNAPSHOT?type=jar" + "bom-ref" : "pkg:maven/com.ibm/mapper@2.0.0-SNAPSHOT?type=jar" }, { - "publisher" : "IBM", + "publisher" : "cbomkit", "group" : "com.ibm", "name" : "engine", - "version" : "1.0.3-SNAPSHOT", + "version" : "2.0.0-SNAPSHOT", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "67ae457c13ac566ea59b295a59cb7e95" + "content" : "82d71013150d0cc35b2f86c047257ea5" }, { "alg" : "SHA-1", - "content" : "174f4581fdccafe44ba8b06ca8776250a7cbd6be" + "content" : "d8aa90c2d6a5d43a659f77c8106d2638f2fa9b46" }, { "alg" : "SHA-256", - "content" : "e516d0b5fab931fc1f1c39d1ea892f2a07503ec2a245bbc9dcb1c6804adbafd2" + "content" : "a30d5984faeef0722b4cfc6b96e0680e11807dd0e058b791ea2ce803526851f9" }, { "alg" : "SHA-512", - "content" : "914b26f230b80175d70655604c16a5d2f0c34c95be27f5eaedcb01ccd71680c4723f8978c05bf7127f74f2d56beec3cbb98c18b372dfee525d07b7a0b88cd43e" + "content" : "4e2c67e7f337c49c43299da83b8707bac597304ce744a08fc3105e8679a9c1d0908b06a73557ae5b33e3f3cde36dffa11bae79a63b90bccc676cf690ea46be22" }, { "alg" : "SHA-384", - "content" : "0b224db460fdd73a412e39107df54b1bf11c43c424032ad00a73b7f695ba693b4e18a4cc3865f3b42d85840c703b2f1a" + "content" : "c259f83084de03dfb95efb15da1bb5e89a70453ca58df5929ad51fbebc3f4a46e7964249f1bcb71e099167511772bf77" }, { "alg" : "SHA3-384", - "content" : "a4980534f8d193ee0e6c984d540af540221d481fa955c7262eedccdb97afd92701478c32dec4bb874545524c95e4ae4a" + "content" : "aafaf842f747bd36b202cba133419618398debf30bef80ace36629d995c510f045a5227181b98e22685865fd59559080" }, { "alg" : "SHA3-256", - "content" : "b10c75d6a28044f378a59270380d20f7032b80146c669292c31e9140f1cd6548" + "content" : "98c5eb98fa32698d7f1070c731ed32053f8528393a9696f983ae285f9054831d" }, { "alg" : "SHA3-512", - "content" : "a93f4b34a1818b9eb6675e31b810583ff28f6e76470494819d5a7c831d987474bd4c600f297655dfb8c379d3af3861634e7668bfa22c4eddfacf2539cee17ec7" + "content" : "a695852c9a2886e19fde16679d404d92be3ae62617ca460852c29a16601c97385a494b3865b92864f125bed747d7e5836f13153ae86a6c3b7179317d22fa2070" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "https://www.gnu.org/licenses/lgpl.txt" + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], - "purl" : "pkg:maven/com.ibm/engine@1.0.3-SNAPSHOT?type=jar", + "purl" : "pkg:maven/com.ibm/engine@2.0.0-SNAPSHOT?type=jar", "externalReferences" : [ { "type" : "distribution-intake", - "url" : "https://eu.artifactory.swg-devops.com/artifactory/res-cryptoagility-team-maven-local" + "url" : "https://maven.pkg.github.com/cbomkit/sonar-cryptography" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.ibm/engine@1.0.3-SNAPSHOT?type=jar" + "bom-ref" : "pkg:maven/com.ibm/engine@2.0.0-SNAPSHOT?type=jar" }, { - "publisher" : "IBM", + "publisher" : "cbomkit", "group" : "com.ibm", "name" : "common", - "version" : "1.0.3-SNAPSHOT", + "version" : "2.0.0-SNAPSHOT", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "6b537a90ffd838bb65c5a9c2ff371dce" + "content" : "0bc212a0d7a96c40a0c6792249b21ee7" }, { "alg" : "SHA-1", - "content" : "76b39430ee28fd8962edae300a91d5ebc52c1076" + "content" : "70c6efeb7474e7b78595b6601584276bb7a90814" }, { "alg" : "SHA-256", - "content" : "1c9dcb0bdef66d58f48eebc5be6b625485ceba73f8e3310d8b72f5341094acea" + "content" : "aff8b56a14f886f07e502bf26baa476c3b6f3b79b8b6b003da2260435cda087f" }, { "alg" : "SHA-512", - "content" : "be406c24fb42f8595a51ff011041cb03271ff299d6c724961276f76ccc3c2a70a02e41726c188cd48081f064de989d16abf295658ac33a3d0f417a20eeb6c879" + "content" : "dcd37bc935a630965b07aa61633eb51e8ea58543a277f387edb93956a5153b447bd93a48ca2236a56ebf8df5b72b6f4e1759a4d222d1b12b480730f378ad87b1" }, { "alg" : "SHA-384", - "content" : "dcdf2d7e35abc1fc724ab290bbc10952df07a9b5ccd18373fb549c56bd14da38f529de16240e1fee98e083fc025876d8" + "content" : "8af172d828b3415fb085293a1788e04fe53cbba7ae53c2c4911f5333dc30cea9e3a11255922852f6269b09786b9fc8b4" }, { "alg" : "SHA3-384", - "content" : "113bf691c2e686f7b92e4b8c9a4bc788d6c14e77eb448d59a2532c2a0cfa35bdb8f9a87b3a02cc72052f0b0d65fa1ac4" + "content" : "8b03cb2f7fd323ad12fe42836a91697c8a74689b3fc732c16353eab599f709c88ca68dc05e1a4464990990bdd14000f2" }, { "alg" : "SHA3-256", - "content" : "b1103a71a3a027ab5c74986541390192f9c3e9aacc6c05bf6500b653b3b2e387" + "content" : "118e266f4ab89f83ee60b405959cdfb3f114d3f2553d16d5e34cf8791f8164f5" }, { "alg" : "SHA3-512", - "content" : "b03a0a66d302c49312991dd472959472afe74e62fea2b0fe725e4c34dad295a4ac7b34e9e13bcd916141836a2e00dde967da90844a5f65dd7120da3318092130" + "content" : "9af3f6a7540ea1567edea928cd5a7cec4dbea9e0726f9a03de4a0dbeb8eb7e0764ac1db432a816dd2f3d182a0102c7c866fc82f79212650825253055680ba09a" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "https://www.gnu.org/licenses/lgpl.txt" + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], - "purl" : "pkg:maven/com.ibm/common@1.0.3-SNAPSHOT?type=jar", + "purl" : "pkg:maven/com.ibm/common@2.0.0-SNAPSHOT?type=jar", "externalReferences" : [ { "type" : "distribution-intake", - "url" : "https://eu.artifactory.swg-devops.com/artifactory/res-cryptoagility-team-maven-local" + "url" : "https://maven.pkg.github.com/cbomkit/sonar-cryptography" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.ibm/common@1.0.3-SNAPSHOT?type=jar" + "bom-ref" : "pkg:maven/com.ibm/common@2.0.0-SNAPSHOT?type=jar" }, { - "group" : "org.jetbrains", - "name" : "annotations", - "version" : "24.1.0", - "description" : "A set of annotations used for code inspection support and code documentation.", + "publisher" : "SonarSource", + "group" : "org.sonarsource.api.plugin", + "name" : "sonar-plugin-api", + "version" : "13.4.3.4290", + "description" : "Plugin API for SonarQube, SonarCloud and SonarLint", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "38673abe87d12508cd05498eff0b9731" + "content" : "9121c8851ff1af1153c8dd4fa94c9ce7" }, { "alg" : "SHA-1", - "content" : "7af6a669488450c4a07c2c3254e2151df42d7d04" + "content" : "64194b3b6336b78df92f9fa5a58682c85ec5626b" }, { "alg" : "SHA-256", - "content" : "27a770dc7ce50500918bb8c3c0660c98290630ec796b5e3cf6b90f403b3033c6" + "content" : "ce1c77307f81897f3c8f901d81a0169db9f2ec614d65723679bc8bfedceb56dd" }, { "alg" : "SHA-512", - "content" : "663395a885561cc97eed411c67b496c06ec9a54906185a871de8743bf53e92152f4bc7c2a0118b7f3cfe85cc0a6c408ac6d589839b8d25c851637f85880331f2" + "content" : "8a9f34a03acbe05d9086119287ab2b2d84c8bff43367f75d42ca5bd5f66c54e4007d1affe247f7f3a0cb710328705b6a0db0db2e211b46e8979ea9e3eee6c401" }, { "alg" : "SHA-384", - "content" : "85779b72d864894f1d3cdd489b0a419c0620281c4fd22a061f4a3fe2aee91015681889573200cd2124c3add48a3216a6" + "content" : "7f1d268c151ad6fda7e5c5b21abb74b5a4b2bcb3e43fb4d3eceef01cab5e28e12b0d019d6d7da39a977f1fd8a6260ed2" }, { "alg" : "SHA3-384", - "content" : "0cfce80b012ba441be96368fe8af54e805100f7680fdbb7defae4dd07ff3c75cd0f89b993a61bef139a405637a73236f" + "content" : "c4ab8215fb558662a98375c9f347636f4e27fa912a23acadf804c5661caa2899529a6777f8c9f9a133c5a6e676ec0bf4" }, { "alg" : "SHA3-256", - "content" : "f7c5e25c9c16aad9f5482f3853660238db4f32be72c20f40383a1d20e0306f42" + "content" : "acb5c5fb43a612de73d7562499398bfb7678b878de04ecb697590fac4ed2e61c" }, { "alg" : "SHA3-512", - "content" : "0f74369cdb67a58c0f89033723665320eb535d1c1e66049347f6b3e25cbf7d1f80b8fa3a7b3e0b4fa8eae8d9ec8c30510b65bab581adeaff3f94651fa214105a" + "content" : "bf256b0cd721c685cc677bc5ab0af2eb68e469b7cdcd9e9bae7b60baa718b159b0e2cc9ca489a088b8d4556cef33da26d1bdf7fb1b952014b61e4b282aface76" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0" + "name" : "GNU LGPL 3", + "url" : "https://www.gnu.org/licenses/lgpl-3.0.txt" } } ], - "purl" : "pkg:maven/org.jetbrains/annotations@24.1.0?type=jar", + "purl" : "pkg:maven/org.sonarsource.api.plugin/sonar-plugin-api@13.4.3.4290?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://github.com/JetBrains/java-annotations" + "url" : "https://www.sonarqube.org/" }, { "type" : "vcs", - "url" : "https://github.com/JetBrains/java-annotations" + "url" : "https://github.com/SonarSource/sonar-plugin-api" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.jetbrains/annotations@24.1.0?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.api.plugin/sonar-plugin-api@13.4.3.4290?type=jar" }, { - "publisher" : "SonarSource", - "group" : "org.sonarsource.api.plugin", - "name" : "sonar-plugin-api", - "version" : "9.13.0.360", - "description" : "Plugin API for SonarQube, SonarCloud and SonarLint", + "publisher" : "QOS.ch", + "group" : "org.slf4j", + "name" : "slf4j-api", + "version" : "2.0.17", + "description" : "The slf4j API", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "b401a934655540b37bf6765778a7b759" + "content" : "b6480d114a23683498ac3f746f959d2f" }, { "alg" : "SHA-1", - "content" : "64b99cf118b048da0fa98a397b2e03f11c6970e9" + "content" : "d9e58ac9c7779ba3bf8142aff6c830617a7fe60f" }, { "alg" : "SHA-256", - "content" : "f20ae1d944f84a611583c33900d8788aa855a0d9ea66493e1046539715d53c0c" + "content" : "7b751d952061954d5abfed7181c1f645d336091b679891591d63329c622eb832" }, { "alg" : "SHA-512", - "content" : "f6b8fa7447300c1f95e14e9be12d36419b302d1844bd069ceaae134b3caa54d546a337be3c66e8e25ca5dd78fb95e76f92306cf5c26ba0730e3c730d443c2822" + "content" : "9a3e79db6666a6096a3021bb2e1d918f30f589d8de51d6b600f8ebd92515a510ae2d8f87919cc2dfa8365d64f10194cac8dfa0fb950160eef0e9da06f6caaeb9" }, { "alg" : "SHA-384", - "content" : "5cbdc17456d4ab1959cd8ad59d64a733224a3d03aa0f1e12968e0e7c86785e465d3f27f7c54b13c858326b4ee8bd60a7" + "content" : "6ea24f814a9b6ece428cfd0535e2f3b8927005745ef61006b50fdb5a90126ee5ea05650155382b3b755c5bce38ef3944" }, { "alg" : "SHA3-384", - "content" : "8930616bed39525c4c5c0396f8c541268b46b1df45432ee66ca6af8609a6ebd1e904493f025ba4b045401930a3ea2a2d" + "content" : "9b1015052f0ec43f9be09764e131834157599611cb52f6fe591c4ac6a8ab4817518f2a4b8871e5e738c8678e93af5557" }, { "alg" : "SHA3-256", - "content" : "4fb1225cc1bed06656fa92422d0425b44032725e6afb8d980c4af8cd8efc4b40" + "content" : "00559b4f4066b4917ba4fe2a6f23111eaeada321112d030910d218ced9084b5e" }, { "alg" : "SHA3-512", - "content" : "3a505b03e37ff9bd00248bf77344b880f206042a81b90eccbb42a78fe2496ff4f61c519f4ec77ded65d1f488b4caf6a69afae97a9a5a59f915ec8068176a0cbb" + "content" : "9579c2f7e7516e177c2d493ccc9eb8150978cf19f6f09b28d116f6935239fd56dc6af2b62b3336f79b0b462445550cd1fb5377a07001a6f44aaab6a32fa2fa47" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "https://www.gnu.org/licenses/lgpl-3.0.txt" + "id" : "MIT", + "url" : "https://opensource.org/licenses/MIT" } } ], - "purl" : "pkg:maven/org.sonarsource.api.plugin/sonar-plugin-api@9.13.0.360?type=jar", + "purl" : "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://www.sonarqube.org/" + "url" : "http://www.slf4j.org" + }, + { + "type" : "distribution-intake", + "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-plugin-api" + "url" : "https://github.com/qos-ch/slf4j/slf4j-parent/slf4j-api" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.api.plugin/sonar-plugin-api@9.13.0.360?type=jar" + "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar" }, { - "group" : "com.google.code.findbugs", - "name" : "jsr305", - "version" : "3.0.2", - "description" : "JSR305 Annotations for Findbugs", + "publisher" : "The Apache Software Foundation", + "group" : "org.apache.commons", + "name" : "commons-lang3", + "version" : "3.18.0", + "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang. The code is tested using the latest revision of the JDK for supported LTS releases: 8, 11, 17 and 21 currently. See https://github.com/apache/commons-lang/blob/master/.github/workflows/maven.yml Please ensure your build environment is up-to-date and kindly report any build issues.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "dd83accb899363c32b07d7a1b2e4ce40" + "content" : "48b9886957920a4cdb602780ca345087" }, { "alg" : "SHA-1", - "content" : "25ea2e8b0c338a877313bd4672d3fe056ea78f0d" + "content" : "fb14946f0e39748a6571de0635acbe44e7885491" }, { "alg" : "SHA-256", - "content" : "766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7" + "content" : "4eeeae8d20c078abb64b015ec158add383ac581571cddc45c68f0c9ae0230720" }, { "alg" : "SHA-512", - "content" : "bb09db62919a50fa5b55906013be6ca4fc7acb2e87455fac5eaf9ede2e41ce8bbafc0e5a385a561264ea4cd71bbbd3ef5a45e02d63277a201d06a0ae1636f804" + "content" : "c2c9d497fc1be411050f4011b2407764b78aa098eb42925af8a197eabdbc25b507f09fb898805e9bed4815f35236a508ee5b096e36f363df4d407232d50fc832" }, { "alg" : "SHA-384", - "content" : "ca0b169d3eb2d0922dc031133a021f861a043bb3e405a88728215fd6ff00fa52fdc7347842dcc2031472e3726164bdc4" + "content" : "4fb3f101106e4ce3666d5c15d276ba86f7683a0ef35f0384edfcd579ea454275edbb7400795d265ec3a38e39997e79b8" }, { "alg" : "SHA3-384", - "content" : "9903fd7505218999f8262efedb3d935d64bcef84aae781064ab5e1b24755466b269517cada562fa140cd1d417ede57a1" + "content" : "aada7e3612cf3f6190a19fa7c3db74df1e13ec56b300be9bb4317d261d5877c84ab59ba9a09168becdbd82cd41961395" }, { "alg" : "SHA3-256", - "content" : "223fda9a89a461afaae73b177a2dc20ed4a90f2f8757f5c65f3241b0510f00ff" + "content" : "306d286d0bd7549c203cc802fd755d354c4f7926fa023f4e83623ba1a6261250" }, { "alg" : "SHA3-512", - "content" : "3996b5af57a5d5c6a0cd62b11773360fb051dd86a2ba968476806a2a5d32049b82d69a24a3c694e8fe4d735be6a28e41000cc500cc2a9fb577e058045855d2d6" + "content" : "f6f1ecc684e309d7b9fc5c343792508fee935cd2119d962721662c5af88e4864ba6f47a863e083714f315f926c156de1970cd2fb577449bdfdc7bf98a4a451fa" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0" + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], - "purl" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", + "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://findbugs.sourceforge.net/" + "url" : "https://commons.apache.org/proper/commons-lang/" + }, + { + "type" : "build-system", + "url" : "https://github.com/apache/commons-lang/actions" }, { "type" : "distribution-intake", - "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" + "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" + }, + { + "type" : "issue-tracker", + "url" : "https://issues.apache.org/jira/browse/LANG" + }, + { + "type" : "mailing-list", + "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/" }, { "type" : "vcs", - "url" : "https://code.google.com/p/jsr-305/" + "url" : "https://gitbox.apache.org/repos/asf/commons-lang.git" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar" + "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar" }, { - "publisher" : "The Apache Software Foundation", - "group" : "org.apache.commons", - "name" : "commons-lang3", - "version" : "3.14.0", - "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.", + "group" : "com.google.code.gson", + "name" : "gson", + "version" : "2.13.2", + "description" : "Gson JSON library", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "4e5c3f5e6b0b965ef241d7d72ac8971f" + "content" : "a2c47e14ce5e956105458fe455f5d542" }, { "alg" : "SHA-1", - "content" : "1ed471194b02f2c6cb734a0cd6f6f107c673afae" + "content" : "48b8230771e573b54ce6e867a9001e75977fe78e" }, { "alg" : "SHA-256", - "content" : "7b96bf3ee68949abb5bc465559ac270e0551596fa34523fddf890ec418dde13c" + "content" : "dd0ce1b55a3ed2080cb70f9c655850cda86c206862310009dcb5e5c95265a5e0" }, { "alg" : "SHA-512", - "content" : "0338b50767166e5746ada6d6aa2e071e7221d699323bfb629f7f204b294c1dc4cad140610a129ed751798443b43e74e0818989c7df7d33c5915aa29742be9ba8" + "content" : "8974a052656d2e5ec968b6bac2edf51413ffc62040fdc65f14f00597e738ab544d22487f8579ba90618b5a7f94ef33773510fac67b408fee6ed274b38f3d9947" }, { "alg" : "SHA-384", - "content" : "908d0a22dc17aaa04caa5104cff7cad5b88b77eecb78dd5b3b3fefa22ff71ac50a4fb9e31c897ac243f9d841e4b3453d" + "content" : "98e8afe5b23c43b84e7a57e0e27f683a182fcf97ee3eeb6a1311582f7fecd846c806ffb092b620088dc03d256d8eaf27" }, { "alg" : "SHA3-384", - "content" : "8a7f2e061b998780870eddd571620fbf3d3c70bcb54e24539d0db504f59d65bc6bda58136284498babe29fcc5eabb7a6" + "content" : "d61d6b1cf6997c75287f454e536f855db8404e5fb9d0b8faa4dcc1e7a60ffefc05c2f92f3514e091808a8677b29f3619" }, { "alg" : "SHA3-256", - "content" : "022bf1f8039fcea717e9e34dd96eb80cfff05b43c9cbb76e9739b2421e2d027c" + "content" : "1c051cfe5e630b35d003f96e135de7c5d5cab145b6e1159143570cb246426a0d" }, { "alg" : "SHA3-512", - "content" : "0bcbc4edce974ea970c46e2da12ec98d9fd962c2cf64f757ac97136dec5623ca52af0c225895303c17ffabb57090e6772d7bd326d5e7438cef5454f8bbaeecfa" + "content" : "55ddee7f6c1659ffa82e5c308a0181b459cfeb3442f1f9868ff7e9a3c83376bd2ad527b16d5131df442ffd03d06c35dbd64458df6b02a111c1654f01db381ba5" } ], "licenses" : [ @@ -498,161 +517,137 @@ } } ], - "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar", + "purl" : "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://commons.apache.org/proper/commons-lang/" - }, - { - "type" : "build-system", - "url" : "https://github.com/apache/commons-parent/actions" - }, - { - "type" : "distribution-intake", - "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" + "url" : "https://github.com/google/gson" }, { "type" : "issue-tracker", - "url" : "https://issues.apache.org/jira/browse/LANG" - }, - { - "type" : "mailing-list", - "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/" + "url" : "https://github.com/google/gson/issues" }, { "type" : "vcs", - "url" : "https://gitbox.apache.org/repos/asf?p=commons-lang.git" + "url" : "https://github.com/google/gson/" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar" + "bom-ref" : "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar" }, { - "group" : "com.google.code.gson", - "name" : "gson", - "version" : "2.10.1", - "description" : "Gson JSON library", + "publisher" : "Google LLC", + "group" : "com.google.errorprone", + "name" : "error_prone_annotations", + "version" : "2.41.0", + "description" : "Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "df6097815738cb31fc56391553210843" + "content" : "75e3b25da8b8a2136463c4674f5e49bf" }, { "alg" : "SHA-1", - "content" : "b3add478d4382b78ea20b1671390a858002feb6c" + "content" : "4381275efdef6ddfae38f002c31e84cd001c97f0" }, { "alg" : "SHA-256", - "content" : "4241c14a7727c34feea6507ec801318a3d4a90f070e4525681079fb94ee4c593" + "content" : "a56e782b5b50811ac204073a355a21d915a2107fce13ec711331ad036f660fcc" }, { "alg" : "SHA-512", - "content" : "7503e4b8d05c6cc0ecb3a94c5a2e070e049083a441003a79a0cdf474f4286699b4ba1d2a655ddabb8ba10c50e7c36a7045cccdaee465166d4630db647aba2727" + "content" : "e2eb4bf9f36f95a4d4c5ea344db5cd90a456e63bef8e52932b8f6f4ecfdd59cb2f6c2ce9e67b0070c82177e42885688b95afef591b16001f789b378f18afdf30" }, { "alg" : "SHA-384", - "content" : "48a4786bd6e1867f058ee4fb676fc82d9d9f64a6d7420d4a47ae2398504c9de73222636614aeb4a9fbf10ee143d72226" + "content" : "43700b378624aa37197ef03a6b5ea40b5fbb6c0aa667eadf810ad36f0707dffaf3ea23471f2553327c3f5644cc875ee7" }, { "alg" : "SHA3-384", - "content" : "3df9a0332c2766124fe7c915cfea665d2e318ccaa7212415fabd9e93e6eb77de538725fd2ef313cde46f6d814c9566ea" + "content" : "8bf3293cf4b72c9a999948f8812190636ef3b0c35bab8dbf9a54c263eeab2a3b3d0774fdcab52c6d114551ff74a8aea2" }, { "alg" : "SHA3-256", - "content" : "d3374006d76d4f9acdf3d3a1a4f47899570f52442b2188f80c09a74f22139ecb" + "content" : "2ca1a59f4fdc37a3c83501542c63842fa4fe40c06f69a59a2a072e4af442a16a" }, { "alg" : "SHA3-512", - "content" : "2b10c2f4fe39d8712b430ff171823d7172c0a06685c1eb7de511e90159cec0e094fb2a9b50b747c5b039cb10f1fce9edf82ecbf9c47f76a6f31c4e3cb7586cce" + "content" : "6d1f419996b15e5a2bd9b268d166046e38fe9cc6c58fe56aaacbe71b95e3db8c8fe1d226e7f549ea227956feaf3087706bdfa79930fe432298bba9ec06c26a90" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0", - "url" : "https://www.apache.org/licenses/LICENSE-2.0" + "id" : "Apache-2.0" } } ], - "purl" : "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar", + "purl" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.41.0?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://github.com/google/gson/gson" - }, - { - "type" : "distribution-intake", - "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" - }, - { - "type" : "issue-tracker", - "url" : "https://github.com/google/gson/issues" + "url" : "https://errorprone.info/error_prone_annotations" }, { "type" : "vcs", - "url" : "https://github.com/google/gson/gson/" + "url" : "https://github.com/google/error-prone/error_prone_annotations" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar" + "bom-ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.41.0?type=jar" }, { "publisher" : "SonarSource", "group" : "org.sonarsource.java", "name" : "sonar-java-plugin", - "version" : "7.33.0.35775", + "version" : "8.18.0.40025", "description" : "Code Analyzer for Java", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "1b7d9cc6384c6be9b2b2be09d39a4409" + "content" : "b1a9179feade38e76fb3bd484426ed87" }, { "alg" : "SHA-1", - "content" : "74549fd0b22373ba0db5f5d8c9e83c4e1d4859d6" + "content" : "869cc6db9898899450852a5d89e77649dbc2e545" }, { "alg" : "SHA-256", - "content" : "84d7f2cce4bf4e66bacd053fd350489792519d83c292c2f4d5d8df0404450959" + "content" : "27dbc832bbeb28c70947d4d35fcc4a36b384911761831d8d5fc947cc1732d114" }, { "alg" : "SHA-512", - "content" : "f70839584286b4141cb252727f299be7a6f27cc8714d66b9c8b4a97d19030c5e39277ed85019cb2ffd9cd59f4b5c7780dd2bdd8cccd14d49a7aa618640069eca" + "content" : "b38980fb48ee7720a297190197e1ff20025ccaffad858a195234d4747773f4ed2ff2806b253ccd9d2121cddc71d1ac1fcc75ece9a07365db2089df89773add48" }, { "alg" : "SHA-384", - "content" : "ab79904167297307834e85b850b012fbdd22d6dbb938567ca8525219f8cd1cc2b725cc9ca781bca94dbab340580130ff" + "content" : "700d2a57ebc1672779fc11da69c29c822f8b0382bfb07afa5ef984abd2e38863b1ce8c2129c3ad173f796abebc14af96" }, { "alg" : "SHA3-384", - "content" : "5b177240092d00c9399f08b3148b58a299f0bb7a2a82458e5d4f4d5d0e4b5f6eba4f8b6f82c02369e8343c4bb0aea360" + "content" : "de424a453da7d8c708948d8bf9cffcabb6f00fac592f0be36b3d53fa41b95bc42ab6e1fcb4525c3c15793de00ad34478" }, { "alg" : "SHA3-256", - "content" : "f5829afa58615feeb89cdea0b96fa63ffda9c1401d5ac33d1420398ff42e59f9" + "content" : "3f2edc3ae30c79ac6e5db6bc7f968dd164f252b173bd3780ef1e06f68fec2962" }, { "alg" : "SHA3-512", - "content" : "4dc73ffee4b763a67a89b13a7574c03c9b7bfd08591088c30c64f9cb2aacd028d9c1bbbb4e5a68e5751635d9a3547e798eb4577b555187f410476a38e10ed9fc" + "content" : "73060df15758e595f9ad23967b9632b3b25584660362b8a660c699d7bfa092927edb2334ec711a2eca8394b03f0d32878e64b6b20411816b239f808747e7bcc2" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.sonarsource.java/sonar-java-plugin@7.33.0.35775?type=jar", + "purl" : "pkg:maven/org.sonarsource.java/sonar-java-plugin@8.18.0.40025?type=jar", "externalReferences" : [ - { - "type" : "website", - "url" : "http://redirect.sonarsource.com/plugins/java.html" - }, { "type" : "build-system", "url" : "https://cirrus-ci.com/github/SonarSource/sonar-java" @@ -668,65 +663,61 @@ { "type" : "mailing-list", "url" : "https://community.sonarsource.com" - }, - { - "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-java" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.java/sonar-java-plugin@7.33.0.35775?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.java/sonar-java-plugin@8.18.0.40025?type=jar" }, { "publisher" : "SonarSource", "group" : "org.sonarsource.java", "name" : "java-surefire", - "version" : "7.33.0.35775", - "description" : "Code Analyzer for Java", + "version" : "8.18.0.40025", + "description" : "Code Analyzer for Java :: Plugin to import JUnit report files", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "ebad97c089ab298bbf410b83645b5c91" + "content" : "8ec0e95937cd6bad70824f4fcbcdfd13" }, { "alg" : "SHA-1", - "content" : "1d6e25230cb5a0818e76cbf250b1f443c1117fe9" + "content" : "74166214d6bc038b62ac39fb6068ee92a7cc2377" }, { "alg" : "SHA-256", - "content" : "547a33116a008789a640ac520aca61b4aee460baf32d880f35ecbc247be17cf5" + "content" : "e5b3e323d65d5d1e07c67f2a3c231d976665dd36a755e4a25a529e020ecf246e" }, { "alg" : "SHA-512", - "content" : "79967a8394b8bada006fe03ed3519f73f9f4856d09cfaef3db91ab1e0dbd828bb9c69178a8151b678420e95489ace27ce9a59693be65fc3511696b446118c572" + "content" : "5f8666b8cabc3605c88d1066b3a4f102677a4592a055cddbd0857667a4c97da0b5963d4b6e9b9443bfa9a9f8eb5122bea5230c54d1948a8829137e0adfda2c53" }, { "alg" : "SHA-384", - "content" : "a3926f55e7e691e558e8fd2bed7da6f71cae00174987d108c5ccb5e4bff67052c1a7294ff83f93fecc89f0d37e72d2f2" + "content" : "7f91179e70d48c4f157b7c21e2d66043f197f5e77e93ca22cc514121f8aeb904f0be2d41cca33e026b79a6954b93620a" }, { "alg" : "SHA3-384", - "content" : "197a92ee27d6b823fe39f896604e292864f8e563ee9eebc8b7b8f98b5811c3bd3d31d1d991f91f305d61e78376c792fb" + "content" : "1181d83f7f281f38d1fd32a113cf36d0aafc3315b0f96394d1509a55cb71107a32dffc689991f08ea34d24afa146de4d" }, { "alg" : "SHA3-256", - "content" : "421298125883242fc4173246fd9f114c55e086270f0482a5b92f88462bf18f99" + "content" : "ee3151b15fa3040368071c28b161c21ffb9d0f0053ca3a869a8633790a8dbcb6" }, { "alg" : "SHA3-512", - "content" : "ff3c88c85a17e2983655e522450641dd191aa2f8818734af99b576778662e7025c6d635c6edc3052b3c42415693b7ba5c2137c7cac7140460d9405fb0d2780f9" + "content" : "94b7e5bc75cd127797485f48d5acca3853cefa2e8c433487268f12b177cd06e4aa4783f009f7a835099f406ccf1a22b69d0c3c523f3ab84fe8b348da312bd677" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.sonarsource.java/java-surefire@7.33.0.35775?type=jar", + "purl" : "pkg:maven/org.sonarsource.java/java-surefire@8.18.0.40025?type=jar", "externalReferences" : [ { "type" : "website", @@ -754,7 +745,7 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.java/java-surefire@7.33.0.35775?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.java/java-surefire@8.18.0.40025?type=jar" }, { "publisher" : "FasterXML", @@ -830,52 +821,52 @@ "publisher" : "SonarSource", "group" : "org.sonarsource.java", "name" : "java-frontend", - "version" : "7.33.0.35775", - "description" : "Code Analyzer for Java", + "version" : "8.18.0.40025", + "description" : "Code Analyzer for Java :: Front-end (Java Parser)", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "43bc91e0b5a11258625288f075b54633" + "content" : "a30b3194ba4e4aaf19e64afaf2c0cd9d" }, { "alg" : "SHA-1", - "content" : "2f748efd6e152c3526efd52a446cc8930381a16d" + "content" : "6c781ad5452a9f6c40efa651ec1514efd4956de0" }, { "alg" : "SHA-256", - "content" : "f22c60ed403f37c5378f2241c110d5f1427d9f8ac88710236a1662887a0961a5" + "content" : "6da24fc369a912c40bad484b580d15e8df7fd4a603e999b79952c1e88f1a10a4" }, { "alg" : "SHA-512", - "content" : "5ab1acc211dec17121948a678e59be6f050b1ba5360bf93fb724b51ff6160a29892c3847e5b0ad1deb450472bbdd5387f28403504670537b82477348dd97ca41" + "content" : "77fcb592867445be61fb472dc11eb2ed91e4d7675f6050728fe34fef4488bad75cf5fbb128bdbe6874820ece7e752f684065b98a6b0690bcbbc081f0efdf7a9c" }, { "alg" : "SHA-384", - "content" : "9d57998dcddbcbbf9ebcf79a68b928ce6aa9c8770c2b7565771b457ed299545f5ddbcc99a13889af53ab12e391c618d6" + "content" : "827447252ad585c8ef98e9f737d2b5ec4529f6f68f0fd571bfae08f3264186a4a5c9d864b488b66d933877c8d13f7863" }, { "alg" : "SHA3-384", - "content" : "64b3e663d553d1c3aa38d9e3b34cad8b38d440dc937bdb6e80edab6621f3c519d38ce4ec04f5353bf7e103cf315a808b" + "content" : "2eaeb68497c50d4bcd38ba010ab33f4833310fdf4c057d32ce622f01febd34d37d4b353b31ad53040a6dce7b1c287bf6" }, { "alg" : "SHA3-256", - "content" : "3febae6771046e4a5909ec72a2b6cd1749f384c910f3a090443a26d4651a1953" + "content" : "a2c28164e5d0c37e00f10f6b5187a6b8c31f87d2d3d86b12f9721516f91034e7" }, { "alg" : "SHA3-512", - "content" : "7555011fd0167dd38b798556104d02f2c5bd4b7e035065234f44ae22c7779c1a7fef4f3b17769d49deaf0635c99d211cb219ffac05da6c50ae1313f032565526" + "content" : "9163b1eac48b627a86db9c7b93fe258657561540fb605d926c645cb59e82fe6f72d1fb7d97120b4bc1488e27ede2420dbacb1ed021ff76642d10a2bc3cc54612" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.sonarsource.java/java-frontend@7.33.0.35775?type=jar", + "purl" : "pkg:maven/org.sonarsource.java/java-frontend@8.18.0.40025?type=jar", "externalReferences" : [ { "type" : "website", @@ -903,47 +894,47 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.java/java-frontend@7.33.0.35775?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.java/java-frontend@8.18.0.40025?type=jar" }, { "publisher" : "SonarSource", "group" : "org.sonarsource.java", "name" : "jdt-package", - "version" : "1.1.0.34", - "description" : "Parent pom of SonarSource public projects", + "version" : "1.6.0.160", + "description" : "Packaging of Eclipse JDT Core for SonarQube Java Analyzer", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "b37dc58a62e2d0cf93c0721fd974c31c" + "content" : "1df75f474b6bdb538899d8704b84757a" }, { "alg" : "SHA-1", - "content" : "505fc262c9e9347ff10f5c2e095a008db26a538b" + "content" : "1f8abb9d709c6ba2ab7ce3aa933857cb3735a1ce" }, { "alg" : "SHA-256", - "content" : "7ac622acdb900de5bb04529b822412731308f1f02a610e596b8a7789c28bde07" + "content" : "5efd84c8e2e39a310e9139b503355e9f31eeb3bcce779860ce96944096cf064f" }, { "alg" : "SHA-512", - "content" : "c264a6a75e00b39325e2be6e9cc4cc9903fcbb97e1e60766f09a42bad4d00ef0bc76b741a9c76ca76bf60fe0052987362f4f564a78e0ef3a654fdad833a00cf4" + "content" : "fcb097a96b7c6903ed8e50c95cea915cdb4ab2f4398869b812489d8f639509f970646adcd66afc8004b0c14807e05510d4406d7215726775695b0abcbe602dc5" }, { "alg" : "SHA-384", - "content" : "1f17c8e14bf19d6f93cd61f745ca681e2bf3ec5a2566a9233553e7d2c71f7896c7ee770c37db46536b98fd5cbb19f687" + "content" : "e500ad2d02142aa1fbbe1b9436f9e5bbb74d5c208b0c6aa0191725b126c9a3a4d2a21c708b2bd26a4f11a9ef880fbe07" }, { "alg" : "SHA3-384", - "content" : "40d04d2a79475f774b6a2b2a08b02387e2ac2c17e4b9b220fc1e59baf0554c569573d9abe22af1cff8e5fef69b4a43dd" + "content" : "60bd6cd889de6164963d49fe557e13456d962893e74d56bda559c6b57bd18ab1e8a065e64a2d8317e13dd754052d3f23" }, { "alg" : "SHA3-256", - "content" : "7bdaedda0da1edc3e63e8e62bcf3651b4d4169c24efa0baba01c368d2c6b7b74" + "content" : "32c6d9249b541d8ff7b488f8c584d8f068caace22037ec0e2340e6e850b919b7" }, { "alg" : "SHA3-512", - "content" : "11854f8cb06c601f4e54488b0943a8eac7790dfacd3355e52b274e8a39fe0aec36fd25da6c5711c7c294eaf540958c88013a4b57e7399f76c51b9e75d451c0a5" + "content" : "8378364906e74189f4255964961c90273743b41af7859c8bb946a092965b5787f37718ce6dccbed3cb531501361293fa96175327bd62d29a7ffe18be70caab78" } ], "licenses" : [ @@ -953,7 +944,7 @@ } } ], - "purl" : "pkg:maven/org.sonarsource.java/jdt-package@1.1.0.34?type=jar", + "purl" : "pkg:maven/org.sonarsource.java/jdt-package@1.6.0.160?type=jar", "externalReferences" : [ { "type" : "website", @@ -977,7 +968,7 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.java/jdt-package@1.1.0.34?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.java/jdt-package@1.6.0.160?type=jar" }, { "publisher" : "SonarSource", @@ -1058,41 +1049,41 @@ "publisher" : "SonarSource", "group" : "org.sonarsource.analyzer-commons", "name" : "sonar-regex-parsing", - "version" : "2.8.0.2699", + "version" : "2.18.0.3393", "description" : "Logic useful to read and analyze regular expressions", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "35a3545ee8cc01b7630817c10d3ad63b" + "content" : "c9c38681ffebe27c85c27119dcbac4e2" }, { "alg" : "SHA-1", - "content" : "f30c693d63d35e55921b600d1cc02f6ab45fb162" + "content" : "887b8fb94772af059501ce252122d572da041615" }, { "alg" : "SHA-256", - "content" : "83710ff002b9faf8afb413a05a08b0530a3cf8ef130815d5a46c955c478664b5" + "content" : "0c3ea5153be8a0766373b1992a18c91702a48b37647ca400a5cd077b2d78e9ba" }, { "alg" : "SHA-512", - "content" : "0a10e363e24117e86650a1a8e9a10a637c4f99cee64405607be5da8c4bf4ecc413e67ed78acbd174b699b5c7325db5f0d623c10ded7e642a3e98f1f74e680f11" + "content" : "830bd069a1714fd24676db83114479961e3baea2abd4884c549f147edb6b83eafe4c9230f429818a9adfba89a0c4a21d39eddbcf4c1b937cc65a65b09d1a00ef" }, { "alg" : "SHA-384", - "content" : "c3775396d6d0c3001eb244d062e0f5262b78aae72a9d0ba5760dfa8eb5310112c403d0889cc73ade62a9fafcb515c635" + "content" : "ab21ccd7f07b9bceac88e85180e1f1643b43c30db4d8cdff030cd7cbc53753987284bfc1d412d7def8ec5380244fcfad" }, { "alg" : "SHA3-384", - "content" : "87bd8e6f2545740da80e5ad7c17600f1a3d0bd86aab07557e5f2fc3cdeccfc5654f030b0fe11c93e084da7a1e8b1d95b" + "content" : "ae43098f0c1a4939136f8f285cf9ca44663c2c77fd1120dd338239e70799b713af401a1c334559565263a1dc7f8613ae" }, { "alg" : "SHA3-256", - "content" : "85d791fcc5a6001f15ca84efff8a03c55b791a88745deca215c8108c8318ad1d" + "content" : "546a71b50a13237407e76548bf1fe5d61bf08df21dfa086bd17c2e3a103d25a0" }, { "alg" : "SHA3-512", - "content" : "024d92e865992b92d5c29a65ebec60a706ea8f0859de1c55312377ef22188396855b4403033d1e03a05208f37c3a24ea2e948f463cb3c5c9bc53c8d4266e5e03" + "content" : "18dbb41e4e61ece31c96cd50cc7a1d85799119cd5a88fef79ac4553071a363f485161ada5324cd8ef8b4204d60f000f5fff39c4db0eba2d15e9babf59a01f889" } ], "licenses" : [ @@ -1103,7 +1094,7 @@ } } ], - "purl" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.8.0.2699?type=jar", + "purl" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.18.0.3393?type=jar", "externalReferences" : [ { "type" : "website", @@ -1127,62 +1118,62 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.8.0.2699?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.18.0.3393?type=jar" }, { "publisher" : "SonarSource", "group" : "org.sonarsource.java", - "name" : "java-symbolic-execution", - "version" : "7.33.0.35775", - "description" : "Code Analyzer for Java", + "name" : "java-checks", + "version" : "8.18.0.40025", + "description" : "Code Analyzer for Java :: Analyzer's checks", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "232f45616c57791e1376b309b99d6bf3" + "content" : "1ac68532191b336b9c760c596dbabf9f" }, { "alg" : "SHA-1", - "content" : "ea12ce7dc955bbafca59c3463ea1f44ad82e42ab" + "content" : "6165e4a7c0bc4dd5bd6bdc8b74184f167bb5436b" }, { "alg" : "SHA-256", - "content" : "8ac28a32e08e60c451cc153bee71bc028f3c72e4ab0e3a9c91bdc5b131ad0f57" + "content" : "78b31d837169a372353c0b91ff2776590039996d8d50dbf033b774f6930d3b8c" }, { "alg" : "SHA-512", - "content" : "6ad5b4c6b85757346f203924c26e908d5557ab4d03147afbf58e33e0f25fdb3999f94aee6973366d2441565466473c30c0861a1512c79f240cd35a9a97f0d35e" + "content" : "07b461fd5a923bbd6a60379e61fc73924ad7bc3e1623257fbb16fee3390eb61e0d930dd80cb4e290da538c958546d8206a66fb433889665312df60b63aeccb1f" }, { "alg" : "SHA-384", - "content" : "dbc472dd1173bcac5ba03e4a1165ed35bd7db93511cc8b99e5407aaaa65a56a92027d79c551a4df7120c2a8d87705797" + "content" : "d1227c576fd2372fdcb0240ef2c0fc5497aaca1251df248eabf8e767765e8023ad5e727fecdd3ade31b5af2022a9f519" }, { "alg" : "SHA3-384", - "content" : "1912414c5430f6b4711e20bb73e1076b5ad85babae3e8374fbb65f1dd3232ae380d9bc52891184befed50777dace89f9" + "content" : "5a6b215207811609717d9b39ddaa332369918cf91fbe3bba94ebfff23408624b1bade52b5cf03062d16364fd9c792ea8" }, { "alg" : "SHA3-256", - "content" : "a5cbfac546a7aaf0a2211c3f1beceb36e2ed3384c9d7d4ece2195d2932fba345" + "content" : "030d53c3182415e2896ffc5898b155cac52587a006b327a51c6c5ab59714c012" }, { "alg" : "SHA3-512", - "content" : "4f6974c7877b90dfb0acf4a6f8f412ea4f391164165ce3de75973c871e356a55fdc5ad4de3322a7e30e57f4d7caa87871b3671a63e19ca51a6f5b3cec949d281" + "content" : "a5a4a3f41c1ba65066554808baeff26551c033ccb31ec561ab622e535984db16d9742107f5d07b7d3bc6f25ec92c410600eca7cdf1d9e36fd23a6246d1220db7" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.sonarsource.java/java-symbolic-execution@7.33.0.35775?type=jar", + "purl" : "pkg:maven/org.sonarsource.java/java-checks@8.18.0.40025?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://redirect.sonarsource.com/plugins/java.html/java-symbolic-execution" + "url" : "http://redirect.sonarsource.com/plugins/java.html/java-checks" }, { "type" : "build-system", @@ -1202,66 +1193,66 @@ }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-java/java-symbolic-execution" + "url" : "https://github.com/SonarSource/sonar-java/java-checks" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.java/java-symbolic-execution@7.33.0.35775?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.java/java-checks@8.18.0.40025?type=jar" }, { "publisher" : "SonarSource", "group" : "org.sonarsource.java", - "name" : "java-checks", - "version" : "7.33.0.35775", - "description" : "Code Analyzer for Java", + "name" : "java-checks-common", + "version" : "8.18.0.40025", + "description" : "Code Analyzer for Java :: Common utilities for analyzer's checks", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "eaeb082ff51df115aaf0f3116faf4b84" + "content" : "5514880c7701b527cdcc574edae88dc7" }, { "alg" : "SHA-1", - "content" : "f11567226d2a4c2efcadf5545c3e0b1bb5f8142c" + "content" : "5e3906963a6aee9229c0d5735ec5b0caba9c7a36" }, { "alg" : "SHA-256", - "content" : "1eeb30e79298fa3cff7e7265a0d313a5572bdd726b8d83e83dcb1d144421c24b" + "content" : "89aadedaaa0bd0e788c55b3a78a5b086fd0dbc4935e1ca9e8d15266c81dbc1eb" }, { "alg" : "SHA-512", - "content" : "0034e5bf2e95fb181c476a3d1a5b111efcd22131f62d75eb6daf21da645b4e3ad8e35096274e3898e042a7463d831caea46a7840f843c10442d5f48b75041687" + "content" : "c7e5eea32cd08b004728418429b1b1255751a50a33f5a58712ee7ebddb2f15883cbbc9a999d3d388274662e1b398f2121bdd8e28465a7b86b5702be57a211e0a" }, { "alg" : "SHA-384", - "content" : "c2e5daa8bb17411f2ad282755de82c02d98a4940a81a76c26167713a1b5f55f7551875ae8459b5b77934d42f37f5e8e5" + "content" : "74603a766b61c433df59fa6df8c140018dc181c84af0476242c22c4fefea6f3437cde005c253c21301be0209797ef6c8" }, { "alg" : "SHA3-384", - "content" : "7de6a308f476947ec7a132968be161ea98ab1f135d6286129fde8ee5f8a1044a295c9febf482d7f5a5f83b65e1ccd36f" + "content" : "a9a28120b1353f47a2aff96a032d95d8988eb0b2c940bff0bcef27dc352b19950d0b1eb0de8a521f8c232cfc0b3abea5" }, { "alg" : "SHA3-256", - "content" : "8033896b6e57169054031f9d386f00cc0194f1cf930782becea1b12a5f5421f7" + "content" : "eeb22c67995bfa542c898dc47195590c37da85116f30df4b367bd970c162084a" }, { "alg" : "SHA3-512", - "content" : "789208a299ff2cbfe4ac9f6c647b0d703ff77040fce20e269b33a6d0712011d214704496d27ee8b63adf5778e4d8b58fde286e5a8f043f3b1813ec4c15a06fce" + "content" : "27adbd9adbd039453b3f8fc762117222650d45147cfb4ea26ad6daf65b994fd618f4b5a2173f0860fdaa5b1e096af32faa100c902377b811892d8664c094684a" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.sonarsource.java/java-checks@7.33.0.35775?type=jar", + "purl" : "pkg:maven/org.sonarsource.java/java-checks-common@8.18.0.40025?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://redirect.sonarsource.com/plugins/java.html/java-checks" + "url" : "http://redirect.sonarsource.com/plugins/java.html/java-checks-common" }, { "type" : "build-system", @@ -1281,51 +1272,51 @@ }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-java/java-checks" + "url" : "https://github.com/SonarSource/sonar-java/java-checks-common" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.java/java-checks@7.33.0.35775?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.java/java-checks-common@8.18.0.40025?type=jar" }, { "publisher" : "SonarSource", - "group" : "org.sonarsource.java", - "name" : "java-checks-common", - "version" : "7.33.0.35775", - "description" : "Code Analyzer for Java", + "group" : "org.sonarsource.analyzer-commons", + "name" : "sonar-analyzer-recognizers", + "version" : "2.18.0.3393", + "description" : "Shared code recognizers", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "377bec0957fff4818de779185dc9d46b" + "content" : "c8fea2140f3d18005b73ba0cd39ac3cf" }, { "alg" : "SHA-1", - "content" : "64e48e3a5d4bdc7ed674b21f8ddb393e548c9947" + "content" : "f741f10d470867172afa510990c16877ede70222" }, { "alg" : "SHA-256", - "content" : "a5db4cf127e982760c049faf6a3df99fafccdd5e1d58b59afba30b206bde96b2" + "content" : "0b4ef58f3bba93170f115ec2a73eb5596276abc21219b7fa733240b6bc3f7d52" }, { "alg" : "SHA-512", - "content" : "ebb84100013c73fd13cd502e5ea56a557568f5404b1b60d015ba5529c955c7ae70c612437cbb249068c7437d2dd4ef7f249a20f4f2090ea22c414123df062838" + "content" : "8edf444d67195ff181307c7f27744833b7fa47ff54ee2c687c92761cd7e0900e302f71541d2ccb84a0436ac04fc28ccc79c4700452455db6c155c6ac774bf26d" }, { "alg" : "SHA-384", - "content" : "a3e9a9cf69e639b84e22ef84a9937d8c8e829628ae2b203ec722394ad3b50e0c07fc1b6265d4bf8df3a86cac424125ef" + "content" : "821446711dedcdcb0a20bae33560f7f5d86ca528b7277170b3fe539bc20ab41f90096c6d6cb6cb9b67a7738cf56029fd" }, { "alg" : "SHA3-384", - "content" : "abe29bc0a84ab6ec1dc55fe8d349f72e37865e46a7eb114d85328882711f00f344cb7252ef9adc449009b62a4350f7bd" + "content" : "c036fd79d7730afa956adbabd42edfd0fb5473e5b4534d2ecc480b2b587099d923ee97a9ee51e40e1e027a413fb7b33d" }, { "alg" : "SHA3-256", - "content" : "2bfc0c71aef10df37be7c91fea1ab5e1d90f018c859aa7e3f0844ce2246137fa" + "content" : "aafdbc0fc6e44a212ee7cb7eb10d9cb4b23ceb25a532ea0a6508ea32141cb581" }, { "alg" : "SHA3-512", - "content" : "0e7d60391152b9fbc7b7238967dbf3c4c4c32e776f065b65e456c5ba5b88550723709c82125334fb749167231d602fd6bf3c610a7e83e2d34f3e339f139f71b6" + "content" : "747d1f9f8a556ff1c67bfa46aa1e8e8b9c7b76114e141845751376c7bb34d841349491766e6ed221938f6d64e8aed91663515d23283668711177d076f12eb852" } ], "licenses" : [ @@ -1336,23 +1327,19 @@ } } ], - "purl" : "pkg:maven/org.sonarsource.java/java-checks-common@7.33.0.35775?type=jar", + "purl" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.18.0.3393?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://redirect.sonarsource.com/plugins/java.html/java-checks-common" + "url" : "http://docs.sonarqube.org/display/PLUG/Plugin+Library/sonar-analyzer-commons-parent/sonar-analyzer-recognizers" }, { "type" : "build-system", - "url" : "https://cirrus-ci.com/github/SonarSource/sonar-java" - }, - { - "type" : "distribution-intake", - "url" : "file:./local-deployment" + "url" : "https://cirrus-ci.com/github/SonarSource/" }, { "type" : "issue-tracker", - "url" : "https://jira.sonarsource.com/browse/SONARJAVA" + "url" : "http://jira.sonarsource.com" }, { "type" : "mailing-list", @@ -1360,126 +1347,117 @@ }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-java/java-checks-common" + "url" : "https://github.com/SonarSource/sonar-analyzer-commons/sonar-analyzer-recognizers" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.java/java-checks-common@7.33.0.35775?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.18.0.3393?type=jar" }, { - "publisher" : "SonarSource", - "group" : "org.sonarsource.analyzer-commons", - "name" : "sonar-analyzer-recognizers", - "version" : "2.8.0.2699", - "description" : "Shared code recognizers", + "publisher" : "Spring IO", + "group" : "org.springframework", + "name" : "spring-expression", + "version" : "6.1.21", + "description" : "Spring Expression Language (SpEL)", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "f9c0e3225c8cd152cd8385ab211c1211" + "content" : "9ea32c5135a59a1264f13d8f8d5f355c" }, { "alg" : "SHA-1", - "content" : "10fa0ef13f09632cc2d8a97990512a36252b2e2c" + "content" : "72da3b3521a6788e143a47b0f7273ce7cf98c6f0" }, { "alg" : "SHA-256", - "content" : "5ba42aefbd8cf715575a9f40293a53b47cc82ba67943215a5382487e4042da50" + "content" : "29597c579b6b051d0dd2f56775c6e0078ac5252eab5c940ae687bd5e1fcafbd7" }, { "alg" : "SHA-512", - "content" : "0659ad40421f8be0d492fedf4cee72c531d264d8b9aa9327e789b9277de0a5b037c0dba25a25bc1efb5a858a959941e7e6fa3c7e166ff908db1ea272b5f05486" + "content" : "e54e346271cbc327b138f7a16d6c086f68290688c293753cc5513bc26a20ddd91ee194de32d91122432dae785692468d9d68971202e05c0571a65a44f0a518e1" }, { "alg" : "SHA-384", - "content" : "7b629d1b28bab3012d347760905c7235e579c868460098c2f4e9e9127e3eef1fd08be8f8cff2400552a2f6ba3c735d18" + "content" : "eb0349b3f3b4952f088a4243ab58b7167087e01a719babbe15e54c25d5b6cc3e8f52203542e447a465c3002a3588e6ec" }, { "alg" : "SHA3-384", - "content" : "e3f76485b0c60e07e0a8d93716847e12279c8914590d06000a95df859b952d2b1348a2c1b74a434f92aa36ae711ad858" + "content" : "a2d39ba6e734731a7588f70fac0ab312d835674427c384e7bc7fde62340d2d1c48217ec0bbdc953b3f436550aa0dc796" }, { "alg" : "SHA3-256", - "content" : "af4025e146ba6f1982d1351d1adcabee0a2acb8b90f7a7e8e76f019e408adc1f" + "content" : "be4aa16518c2a8cae7deb0b7f867a2a4be88a7a9b3030db00558615eae43d27c" }, { "alg" : "SHA3-512", - "content" : "ec20e48bda7e839e8c30bdb52156bd42a856f176282c3b1fd3241a268e1674b582acee92f83d72b0247a03634e46a2a740326dda9c089b704605b45c69322606" + "content" : "c4e3742d1ba2111bc4b72c1f9fcebff0d47c8466dd732d5f66ef2c7303a60d7da4e1a63fbf469df27075bf0f5174302dfa921722079425540151fd5e16fdfbfb" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "id" : "Apache-2.0" } } ], - "purl" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.8.0.2699?type=jar", + "purl" : "pkg:maven/org.springframework/spring-expression@6.1.21?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://docs.sonarqube.org/display/PLUG/Plugin+Library/sonar-analyzer-commons-parent/sonar-analyzer-recognizers" - }, - { - "type" : "build-system", - "url" : "https://cirrus-ci.com/github/SonarSource/" + "url" : "https://github.com/spring-projects/spring-framework" }, { "type" : "issue-tracker", - "url" : "http://jira.sonarsource.com" - }, - { - "type" : "mailing-list", - "url" : "https://community.sonarsource.com" + "url" : "https://github.com/spring-projects/spring-framework/issues" }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-analyzer-commons/sonar-analyzer-recognizers" + "url" : "https://github.com/spring-projects/spring-framework" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.8.0.2699?type=jar" + "bom-ref" : "pkg:maven/org.springframework/spring-expression@6.1.21?type=jar" }, { "publisher" : "Spring IO", "group" : "org.springframework", - "name" : "spring-expression", - "version" : "6.1.5", - "description" : "Spring Expression Language (SpEL)", + "name" : "spring-core", + "version" : "6.1.21", + "description" : "Spring Core", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "1f268a22bb7c0cb80958953ffbc21125" + "content" : "3c233d75937864d95e9051eafa9205f1" }, { "alg" : "SHA-1", - "content" : "7e21cb1c6bbef1509e12d485b75ffc61278d9fa7" + "content" : "dcc8607ee792439389e19111d83737b6b06ca4ac" }, { "alg" : "SHA-256", - "content" : "1f37b50dcaf091a43bb10d946178fff4082674497fd821438327815da14f7fd0" + "content" : "0729b69e52ac8d9a8d03991315690f632bb0984620a0595e52580d7f3557298d" }, { "alg" : "SHA-512", - "content" : "d5a13856a7f4619eaf1c9593f7739ec5cde37a555a98f0da4cb21aa591e87fb0bcdbd2a5da67d9b69a0dab0016f806c9d3f096bc8841c32bb98810daf1e5e7b7" + "content" : "8d926d38d47cc510378bff4cbd59a951660e8b813a22ffe662490631eb0f85668b007a0ee6961f4a6db2a80dab75181e13196fac10076510dc155c897a6aa999" }, { "alg" : "SHA-384", - "content" : "1e0c29ba819c5c8f5eb278a8f308a0119a476e81998ff5c7658b150352d357ef53c408566bd7a0b8023b7b41cabf4636" + "content" : "b8d3fff87f154bd509d1844c68a005787729112fac80512fa5d6df43d32b1f2fde0bd33e6ba6038e5d57e6265c8b97e5" }, { "alg" : "SHA3-384", - "content" : "f9cefe146557fe266e6e38bc8fbe157c7ef10fc606edafaf901d393ab140d25dabf4e60ff79c6a45a83c7eff890d3cac" + "content" : "d68af409a439cedb3b7da43946892d6012fb3000e849e929221a994cdd7ed1fd2791b1fbcc2b5903415ec6612f679cb9" }, { "alg" : "SHA3-256", - "content" : "ba29e269a74f3c452a64bd9e7a680c84c5c26b96397683c22435e4fcea8ecb9e" + "content" : "2a8bcfdbaae2b6c617f4896069b188e279faf8d169932c17f90c0e0ed4223fc0" }, { "alg" : "SHA3-512", - "content" : "8de364ab79572c8d2af2dc22ea5768d323b7268e03ae977701024f17e6fede13f03e248ef44c6789dea3007723beb1454c7795b45f3834b6040510661b6dee54" + "content" : "2890d9f8375e68786ea993d22ea2d9fd7c45bcbcce07949013857d7a3ff89da0aadb22a34493180c0d1fe905e744b453510b1f87631bbce8eda84c7844389884" } ], "licenses" : [ @@ -1489,7 +1467,7 @@ } } ], - "purl" : "pkg:maven/org.springframework/spring-expression@6.1.5?type=jar", + "purl" : "pkg:maven/org.springframework/spring-core@6.1.21?type=jar", "externalReferences" : [ { "type" : "website", @@ -1505,47 +1483,47 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/org.springframework/spring-expression@6.1.5?type=jar" + "bom-ref" : "pkg:maven/org.springframework/spring-core@6.1.21?type=jar" }, { "publisher" : "Spring IO", "group" : "org.springframework", - "name" : "spring-core", - "version" : "6.1.5", - "description" : "Spring Core", + "name" : "spring-jcl", + "version" : "6.1.21", + "description" : "Spring Commons Logging Bridge", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "6eeff94b635753591e74d979ffc2f793" + "content" : "0e017885cab7225c3859aaf24d3a96cb" }, { "alg" : "SHA-1", - "content" : "6dae1b06ffacbb9abab636be2dbc6acd3b6e5d68" + "content" : "fa75fc86c26dbbc6fb816e5b7aa5fc83f4494423" }, { "alg" : "SHA-256", - "content" : "476dac28509b3f47d0b5e895a639fa75ac2218f074ce214e44832a836c469f7e" + "content" : "f77ae10f41eaf02bc94a6424a3bad1d80a58b168e6af032ecb40a474d9e4f82d" }, { "alg" : "SHA-512", - "content" : "067d31ab99c842a586fbc1bf7aa7ac9aad0fa36d70f0e5bdb7e355514d66b1f6106dbb74ce15959a8dff8223a3e447ae30735e40f376e67f0ef8b70ed1a85002" + "content" : "b0821cb6220914b2bc517f858d21c4a3b98b5a487ee94f29acf044153ba5a568a44fead4d003f71ffbad65f61791d01e33ec05859cdf2a3a1bb853469dc37753" }, { "alg" : "SHA-384", - "content" : "25728b0246bc11715c8b1fec2a704b74a6c2bd6e41851b44aead5c76d0ad1493929bdbcef51dee8005404099388c03ee" + "content" : "84188cf73912ff5372b4ebc58fd0bc63ecc282240c896a987ebf3cfcbbc57cfeacd1a63ea5a9cd6fbcd3ea45e11a001a" }, { "alg" : "SHA3-384", - "content" : "ba98714211e0a6d8337b876cd6452216d1752b5274671f476fa06a63931da1e8ff0d7d0b4105967ab68e6f967aa8b43e" + "content" : "a787e5682a3d41e20e726caf3e0eabd9fd0b33beff448bdd8915c5d1755eec973d7e9ea229a806b00a1d969941364614" }, { "alg" : "SHA3-256", - "content" : "70c250de2d49aec369e3abf959c980036051ca0f54ddfc774840c95a8eabccae" + "content" : "9ab47bf24ddfbb2dbe03a02e131d4b9bd7ada2da72badba7a7fadd0363895247" }, { "alg" : "SHA3-512", - "content" : "c4d9cb5d1a7a738f6a762bd8f9a0fbd2455f3900e702b77d5d1d76079ab1b614b7993f992473ea57639a57fdb46e985a3b29191b3d8a18215b97e82b31cdb3e7" + "content" : "3d537771c6060078daca6cb556d0a1571f9a685e0287c8c186f3f8e441ce0d7460040de7368c7a51d4dd99faa0d6216baa1013c8acc7f3b981eb30e25cccdaa3" } ], "licenses" : [ @@ -1555,7 +1533,7 @@ } } ], - "purl" : "pkg:maven/org.springframework/spring-core@6.1.5?type=jar", + "purl" : "pkg:maven/org.springframework/spring-jcl@6.1.21?type=jar", "externalReferences" : [ { "type" : "website", @@ -1571,128 +1549,141 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/org.springframework/spring-core@6.1.5?type=jar" + "bom-ref" : "pkg:maven/org.springframework/spring-jcl@6.1.21?type=jar" }, { - "publisher" : "Spring IO", - "group" : "org.springframework", - "name" : "spring-jcl", - "version" : "6.1.5", - "description" : "Spring Commons Logging Bridge", + "publisher" : "SonarSource", + "group" : "org.sonarsource.java", + "name" : "java-checks-aws", + "version" : "8.18.0.40025", + "description" : "Code Analyzer for Java :: Analyzer's checks for AWS", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "4b7724c57ea12f13ce3fc49a18209b6c" + "content" : "8aed826c7d8696ce3699588cd6ff952b" }, { "alg" : "SHA-1", - "content" : "896ae3519327731589c6e77521656b50ae32d5b3" + "content" : "6cc1bba5a36b3eef6230e273866fc6dc309189af" }, { "alg" : "SHA-256", - "content" : "c53540419e482242c815db6d6a8cd80af85a6a895e38329b9d9bd6b4616503eb" + "content" : "5ee06300e5427acf74b378cf181a697b548a477ffcf1edfc216ae5345e40c1e0" }, { "alg" : "SHA-512", - "content" : "0de5bdae17924ab55ed7e6e97acbfeb60406fa99b10c1fd8a391f9f81c475691638535a297636fb79b51f02cf07d98ac613049235e9fdbf1186672c8b64c5967" + "content" : "47ecef1096030771bb0c24c2b3c15ebe51ab8a6f66d76ae2683ea4b54821f9c914ecd694b877a186c26650db463aedfa57e9a172fe509de26ca4f0a19867be61" }, { "alg" : "SHA-384", - "content" : "2844ddc317d6fed2c80c5090e3b4b976a063ad5fce4bf8dbfa7c1034cb647497a830142ff7e70b7eb0c8cf742a091071" + "content" : "242495b1e08269988e57a0e08730bb23d18fe614cf37af2ede8aa489a7a3ad581c0d5f970b7d25aee2db35f658649c26" }, { "alg" : "SHA3-384", - "content" : "dfc30f87671459ea2bdc8c25aa6ed814dd53a0ab60df4b98b44eb96ab28cd7bfce358c32b5ab8255d0c0d7ebba1a28b0" + "content" : "f8f74f485da5f891e8a98701cc7d7267548ebeb2d04861239a891547abebdda1951cc16de0003c60db18fa48ad9696f9" }, { "alg" : "SHA3-256", - "content" : "a7a4153deabf0b46852c6539f1d0d63bac5963eaf9ef73209097c3bd4b2118c3" + "content" : "b60ad5ee6b83beabd93c21866b2bd05eaf340ead9ef9f4d1f38492546d103d89" }, { "alg" : "SHA3-512", - "content" : "62add3aa8ea534168ba2eb4e811628e35970e17a2ae350de376fd95e8e0d70045dc9f6748075bafe4f74ebec4278bb3e36243478e08b4329840c8f068b30cde9" + "content" : "8bd74670d07ae07f638e31a27a8f8a00eb0fabd40337f3b601595c86769e31da58b969f08ca5424dbb48adc4d7c8477503a1d795cb8eeec3179f276273997685" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.springframework/spring-jcl@6.1.5?type=jar", + "purl" : "pkg:maven/org.sonarsource.java/java-checks-aws@8.18.0.40025?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://github.com/spring-projects/spring-framework" + "url" : "http://redirect.sonarsource.com/plugins/java.html/java-checks-aws" + }, + { + "type" : "build-system", + "url" : "https://cirrus-ci.com/github/SonarSource/sonar-java" + }, + { + "type" : "distribution-intake", + "url" : "file:./local-deployment" }, { "type" : "issue-tracker", - "url" : "https://github.com/spring-projects/spring-framework/issues" + "url" : "https://jira.sonarsource.com/browse/SONARJAVA" + }, + { + "type" : "mailing-list", + "url" : "https://community.sonarsource.com" }, { "type" : "vcs", - "url" : "https://github.com/spring-projects/spring-framework" + "url" : "https://github.com/SonarSource/sonar-java/java-checks-aws" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.springframework/spring-jcl@6.1.5?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.java/java-checks-aws@8.18.0.40025?type=jar" }, { "publisher" : "SonarSource", "group" : "org.sonarsource.java", - "name" : "java-checks-aws", - "version" : "7.33.0.35775", - "description" : "Code Analyzer for Java", + "name" : "check-list", + "version" : "8.18.0.40025", + "description" : "Code Analyzer for Java :: Generate the list of checks at build time", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "14dfa924e3e61569475db951d81dff71" + "content" : "523e390cec46df34c6686d8f61181bef" }, { "alg" : "SHA-1", - "content" : "2af499d9be4ebd5d898db1eb13eb34ad3b2fb8e9" + "content" : "93c3737e36e776e9c9ba43293256d3ade559e656" }, { "alg" : "SHA-256", - "content" : "62148c334e45df290a958dd438ef662ba5fd29c4023de832d425e674f7c585fd" + "content" : "aa62feaefd959fe9c4a75280ddbee6ffe9b59181296c521e8d876676812ddf5a" }, { "alg" : "SHA-512", - "content" : "f9365f6002c6a51295e7a00a4255ad9eb693d52de2e4c3aa0161e722c58f57a565f97bd3e03e53f3fcc2b1b1af3753471b0ba707e8416f6d2c21f17fcb1b7071" + "content" : "bba574e1f4a05a5fc7a70cb5f9deb5a1f68d8bcb6b2ad4859799e94ca18f622b15075f454e00e3d8fd5ac64827c06afc660ec73bc0db1402bdc3f5e4ebb16bbe" }, { "alg" : "SHA-384", - "content" : "45f68667d8e7543d39b51ebf451513bd085a573edfcee9b89c8154a61bda72d55f7085a1ccb132b306bb2dcebcb9b899" + "content" : "a87fc3e9946eef5166f6393ca2ee064caf3763d19e3415779f0e5269b267790a897485fb8cf085ba84f535e2112fbbe3" }, { "alg" : "SHA3-384", - "content" : "5a6ef9e7483108b215e37833d6d4321ae9ca11f2a2df09d02563d008228dd469e2ce9d9b307679fe16fc229a1a90f588" + "content" : "9e9584346c363abd4a0aad992c54f60dfec95d7a7e8c3cc2834d878c72d1b8a5460c834eaeafc6045a7115af424bcacf" }, { "alg" : "SHA3-256", - "content" : "2c6b29354a7077d0a34a9c742a2e0a95310e2dbc40cab29527ec59aed9ac7b22" + "content" : "9ddbb48896bde9c6d4457d250d207daef592fe257f10ff0ed88cbb38990c9209" }, { "alg" : "SHA3-512", - "content" : "d19b4dfeca42f8ff8821621d241b12aec49fd8012cac5ccffefac6bd55ca2dca60ef40ee15a81460051fbf1797631a34c70fb4600a9e4182a581f082b8c5028e" + "content" : "7a3b54a4fd3db04d97df4040f10c27fb9993071eed45f1caac906d989b213995fddd8b7e74b92d68c6cc99709fc69b789f1a55bd55d1226adccaf80493869b8f" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.sonarsource.java/java-checks-aws@7.33.0.35775?type=jar", + "purl" : "pkg:maven/org.sonarsource.java/check-list@8.18.0.40025?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://redirect.sonarsource.com/plugins/java.html/java-checks-aws" + "url" : "http://redirect.sonarsource.com/plugins/java.html/check-list" }, { "type" : "build-system", @@ -1712,62 +1703,62 @@ }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-java/java-checks-aws" + "url" : "https://github.com/SonarSource/sonar-java/check-list" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.java/java-checks-aws@7.33.0.35775?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.java/check-list@8.18.0.40025?type=jar" }, { "publisher" : "SonarSource", "group" : "org.sonarsource.java", "name" : "external-reports", - "version" : "7.33.0.35775", - "description" : "Code Analyzer for Java", + "version" : "8.18.0.40025", + "description" : "Code Analyzer for Java :: External Reports Plugin", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "b07b7b394b1de4dadcdd41bf472bff97" + "content" : "0a2d44b03fd1c355461dd30c436d3097" }, { "alg" : "SHA-1", - "content" : "bc9c1e1cb3f4abca42ddb1b6ffc027eb2fd4c68e" + "content" : "6374bd720414018d7ed56f80b2ed918ec94e6b2f" }, { "alg" : "SHA-256", - "content" : "aabc8b03f2c9c042ad4d1d25ada8281dd029480e9f59831d98e91adca67fee08" + "content" : "38eb3bbdd4857c485d41a0a9deab123e2c9c4cba4e187dd1997efe72cdafdccc" }, { "alg" : "SHA-512", - "content" : "b60270c2b3d038cc3b3387ba052a79c2e5fad1b0536a5a1f2e4bfa98da3046ae451503f7837a214359dd6c6052cdbdf5d8776fbab5648bcc31ac974830a6c16d" + "content" : "ec05b2b58d09641b89777d15383f8ec27873aa1e2d97977af5365840b322e1a3e38a8d65c71dd7bf5b87fbca59e49bfc6e71dc7400efad987c51dcc5e9bd5e89" }, { "alg" : "SHA-384", - "content" : "943d62b27e66b0b7472c0115f9749fe109343ee1409eb6ba57ffd3776eddfb92bf28c4c1f664aefc08e891d29d5ea2e8" + "content" : "dfde96d508de66a673c9e13298c958dfc2c6fb32e85c0b42450b3263ba4f3a09a254d893f08ae4b9f39d707e4cee22c7" }, { "alg" : "SHA3-384", - "content" : "ff834b86b09d0b11bd4fd9da2245b52c76d540af4bbc858d2478f40444c2a632ca671eac45b65097c0014456a7d553ba" + "content" : "41b976778dec610536e3b9eb679754ef9568cc8bb2beb7c7fe1d852c5d5879c682d8844a0c035ebe0b095626ea43203f" }, { "alg" : "SHA3-256", - "content" : "b632f307cefea8b5fafe516db380b7160da28677ed0657db17332250ee40b26d" + "content" : "42ddf81281e703791ae6f8c8d8adcc96da58390d4cb4b49668b4d3e3d1ba4bec" }, { "alg" : "SHA3-512", - "content" : "81ae57ff106ae7f468dfa23a5d7fd828915cbe1bcc6b21ba988a255287a7d40858979aaede906f3cf277f93117eb7ec919e003083622d061b3149a2d15eb765b" + "content" : "586377b8e12c4b960ef1a3a5cf335e8e19db4da10de7346f140bf3eb56243229be4271603c2400a6bcedb87d06dce5f95cb11581e8eceb80e88a6ddb3e00a564" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.sonarsource.java/external-reports@7.33.0.35775?type=jar", + "purl" : "pkg:maven/org.sonarsource.java/external-reports@8.18.0.40025?type=jar", "externalReferences" : [ { "type" : "website", @@ -1795,58 +1786,58 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.java/external-reports@7.33.0.35775?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.java/external-reports@8.18.0.40025?type=jar" }, { "publisher" : "SonarSource", "group" : "org.sonarsource.java", "name" : "java-jsp", - "version" : "7.33.0.35775", - "description" : "Code Analyzer for Java", + "version" : "8.18.0.40025", + "description" : "Code Analyzer for Java :: JSP parser", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "e0890ace531478ef8ac18849d78cd9e5" + "content" : "7ad6c8d9c8472d350359adbb1bb2a117" }, { "alg" : "SHA-1", - "content" : "a8cecb5145490f15b35742712345b5919726ad89" + "content" : "bf1f05662d4aa017bfab919bee32c6e985aea49b" }, { "alg" : "SHA-256", - "content" : "ae1ee6f32a16217667ea46a973f7c93a6f66ef7052a2d1e24d6e8f78c02f96bf" + "content" : "85520636a757ac333fb349873dada3386a2a89352bb6443a552612323a898e3a" }, { "alg" : "SHA-512", - "content" : "b7fcefd8fa7174db020947db1a41aff0e5c25191fbd8feb8c53438a42604a50b342ac072f571eaf6b0d54915e9106dc5bc6304d5899dbee90e20dcfc08139ca9" + "content" : "34e2e4fd545dfab31f0f0dba626b61648a2daadfaa7f32483cb3b31aa2010e90639bcae4b2b3ac669d60ae3d0490ef59bf6d87ee61098d593c15b043ad8e43e1" }, { "alg" : "SHA-384", - "content" : "39420fa5bb00153057946a5b667877475bdb65923dd9af86acc6db63f3bbb9471de9735e4ed16a03b3c3a2c6da3118df" + "content" : "acb14999bcc8e0347f71ee453d3c58426e60de8f576904058391dbab16da82bfb0ac7083cdd73b6f26862b2ca06912cb" }, { "alg" : "SHA3-384", - "content" : "6defb43802dfd77c5a549fd7d28ffdf85711623dd24d28520e1e2d96677e47a69c5661029a028d7ca13ea3fa75697a00" + "content" : "75c0fed98b9486927c2c767745222e6b93e7c8af00727abbc871380d5bb2b9d71ba9a9bede424aedfc0c057e5c564d02" }, { "alg" : "SHA3-256", - "content" : "54265f768ea5687f500b148e81ac1c3a41c0ac1d9eeb3e2154ebe4507bef46f6" + "content" : "3ff452bc563a50565843c16d94fd729cdd4f76ce6b1847c5fd61d6504a6fb2a7" }, { "alg" : "SHA3-512", - "content" : "8530ff5df32f8250d5d3a68e81bf4f1e0d0add2a69fe6c2de5dc94b01bbe2e99a86fec11494f4d95239040ee2f736ae305c94b23376475ea7c981cdad6054c85" + "content" : "96ad4a5625e3d8c3b6df8a224e75597da826ca3438e1e0c6fe805cfc0d246822ab98794250913691ed1c5ce201b9e938ca6af648e9d2f5f842efdaad78599341" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.sonarsource.java/java-jsp@7.33.0.35775?type=jar", + "purl" : "pkg:maven/org.sonarsource.java/java-jsp@8.18.0.40025?type=jar", "externalReferences" : [ { "type" : "website", @@ -1874,103 +1865,261 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.java/java-jsp@7.33.0.35775?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.java/java-jsp@8.18.0.40025?type=jar" }, { - "group" : "org.apache.tomcat.embed", - "name" : "tomcat-embed-jasper", - "version" : "9.0.84", - "description" : "Core Tomcat implementation", + "publisher" : "SonarSource", + "group" : "org.sonarsource.analyzer-commons", + "name" : "sonar-analyzer-commons", + "version" : "2.18.0.3393", + "description" : "Logic useful for a language plugin", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "22b13ffeab24c14943b58adaee3d15f6" + "content" : "86c3f760a4c1790b1af5c16eb246f8e0" }, { "alg" : "SHA-1", - "content" : "5fcf71c9c39e54c9ca51c304dd7bb2f5558e3286" + "content" : "612043286321caa05aa4e7670b36dd41e826ae2d" }, { "alg" : "SHA-256", - "content" : "3f08ff872bf83defa70c20274ab597aaf23ea95c1ff50f4b98e0c9a2a25c1106" + "content" : "f7babd94546594b9d0427b1bf32cd8f60065b8e8d0a1436f6ac443b9faaa1bf0" }, { "alg" : "SHA-512", - "content" : "89d83d9250be2cfc2d1471133461107dd4fdab532439f7827771f7d2ac202a4c9d57aabed5a7f84fa7a5b1474ce67b60ccdfbd08e2fd4980af1cf133ac69a2c1" + "content" : "b1d166c1ea81d0c89afc9b27e6d9457e6cf0c45afc8de7fa37607ed14b379ddbc1cb1c31bd2ebc25be3c980f1cf145686256dc1b0217f8af73c69d5eb11bb0a3" }, { "alg" : "SHA-384", - "content" : "688680dcea5c8c055cfd461a29c601f0533bf448b9659d0491ee60107c9f8080fb91e2705cc319ab83cdc791f79b916e" + "content" : "1d1bde067e0de39df2d0a35bfda18e9082c4f208411d45488a632a61b0acb04270a4016ad481a7aab1107608d121b90a" }, { "alg" : "SHA3-384", - "content" : "0afb2f67992e9b3d891729c4f65c1804259180f459056f9e608c29d479eb5661a2eb23b46a240ff08d834c0940068f2b" + "content" : "74a471351b75abc4d02989bde9e597307c807683bbac455a3b50aa98928d7dbf3f85db1d4c090c7c7b87299603d1f568" }, { "alg" : "SHA3-256", - "content" : "58917d6995c9fc52fd102c6e26dad93af8e43ef5b8ee1dee7932c2aa947d261c" + "content" : "8a6c33facfe7d600d45ca3db4ef0e545e7bfa75a383ac9d05fe49df6ab695197" }, { "alg" : "SHA3-512", - "content" : "453c585ccdeb65f90a65d3e9d7aedfc0ef6d68cd3a905f24584802d7029b1d79d7bab4a28b2b0f9d12cc41d2c395b87ddcc8e6568e98aae21fd076ed1c4b7bb7" + "content" : "68308ba7a0a3196f866436123817431cda045808cf617084af2efb84f53aa6907841ba67653fad166a347f92de0de2b2fea573e5e2fda734306cb3ca3ecf3319" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0" + "name" : "GNU LGPL 3", + "url" : "http://www.gnu.org/licenses/lgpl.txt" } } ], - "purl" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@9.0.84?type=jar", + "purl" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.18.0.3393?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://tomcat.apache.org/" + "url" : "http://docs.sonarqube.org/display/PLUG/Plugin+Library/sonar-analyzer-commons-parent/sonar-analyzer-commons" + }, + { + "type" : "build-system", + "url" : "https://cirrus-ci.com/github/SonarSource/" + }, + { + "type" : "issue-tracker", + "url" : "http://jira.sonarsource.com" + }, + { + "type" : "mailing-list", + "url" : "https://community.sonarsource.com" + }, + { + "type" : "vcs", + "url" : "https://github.com/SonarSource/sonar-analyzer-commons/sonar-analyzer-commons" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@9.0.84?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.18.0.3393?type=jar" }, { - "group" : "org.apache.tomcat.embed", - "name" : "tomcat-embed-core", - "version" : "9.0.84", - "description" : "Core Tomcat implementation", + "publisher" : "SonarSource", + "group" : "org.sonarsource.analyzer-commons", + "name" : "sonar-xml-parsing", + "version" : "2.18.0.3393", + "description" : "Logic useful to read and analyze XML files", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "2a5bc72d7f698bc42784cb7afa20e808" + "content" : "42a57e652799b8d75ed82ed71af3e8a8" }, { "alg" : "SHA-1", - "content" : "d0cd4045defc2ecf7ccfdc901925eed427bcba3e" + "content" : "d776689581869043b0d5225d9def870872530ab9" }, { "alg" : "SHA-256", - "content" : "29daf71c4b5f5ed0c0983a83ebd96ee74df905e406534b4c5412cc92c2aca2b7" + "content" : "b383b5147a2b186d91f3efcca0cfa9be9e87371e79c0e61f38332b24f152286f" }, { "alg" : "SHA-512", - "content" : "e28752b186c5eaad6df750719e70bd9ab33f4924f293b622ed4a7198ad15fe5e998b6b7ddee230ce564e7ec0b71871fa5c2362f6c4cb65b2872e3f25ef0840e6" + "content" : "04334f2ed4bd53436f9ca5755f836df11147951e5e09ba375e7217a9ddb629172f550eddb978c1ecc3a9e76764db7c82aa05c925f53cb720ca6f0684c2d95197" }, { "alg" : "SHA-384", - "content" : "0df38c977446ce1bb1b6d17b544f3778b4891d6ef499bb1f53dfe8cca457ec8afdb8c061f17e966574d4fd9859517580" + "content" : "5cbbd8a9a784f94c77bac285538e6894c6cf67f5e5da50745633dab13583e6027c7b2620df4c0412cdcbb4bbf7dfb33f" }, { "alg" : "SHA3-384", - "content" : "eb18577b10a3e3cdabd0483e4545226f4fa8d8c2c3d8eb88b9782aeee1ae9d9bc03d76d19c6b5e886b668fe795d38975" + "content" : "3d74f27c2a90595595c59d4f3551e11037f70de03afb7669a59217a42c32e41318ccf53a4911e97c94d4ef7c5d909498" }, { "alg" : "SHA3-256", - "content" : "58006ad9c9fc8e3b18472ad550d72bcd7c9364ecdc586db3f194116694179bb8" + "content" : "e798859717811fa3dd11cdc3e7c518593dad3f1eea35e7880250c832cdb6c51e" }, { "alg" : "SHA3-512", - "content" : "bda4e7479e4b6015f78b24ffca33be9d99d0606acff96f4d18d8e713f261835e16cf26cce800657c28a279fcd1c3e8aa6e5050d5463e1850526364306e003e2a" + "content" : "757eb040f0c6dc7a39dfba5f3842962b27433593e7993fc755ecd2d2ab362ee58b04c95ea9f4817b43a518f51144f18cd1e9f85875a79c6234ef0f667f1ff536" + } + ], + "licenses" : [ + { + "license" : { + "name" : "GNU LGPL 3", + "url" : "http://www.gnu.org/licenses/lgpl.txt" + } + } + ], + "purl" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.18.0.3393?type=jar", + "externalReferences" : [ + { + "type" : "website", + "url" : "http://docs.sonarqube.org/display/PLUG/Plugin+Library/sonar-analyzer-commons-parent/sonar-xml-parsing" + }, + { + "type" : "build-system", + "url" : "https://cirrus-ci.com/github/SonarSource/" + }, + { + "type" : "issue-tracker", + "url" : "http://jira.sonarsource.com" + }, + { + "type" : "mailing-list", + "url" : "https://community.sonarsource.com" + }, + { + "type" : "vcs", + "url" : "https://github.com/SonarSource/sonar-analyzer-commons/sonar-xml-parsing" + } + ], + "type" : "library", + "bom-ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.18.0.3393?type=jar" + }, + { + "group" : "com.google.code.findbugs", + "name" : "jsr305", + "version" : "3.0.2", + "description" : "JSR305 Annotations for Findbugs", + "scope" : "required", + "hashes" : [ + { + "alg" : "MD5", + "content" : "dd83accb899363c32b07d7a1b2e4ce40" + }, + { + "alg" : "SHA-1", + "content" : "25ea2e8b0c338a877313bd4672d3fe056ea78f0d" + }, + { + "alg" : "SHA-256", + "content" : "766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7" + }, + { + "alg" : "SHA-512", + "content" : "bb09db62919a50fa5b55906013be6ca4fc7acb2e87455fac5eaf9ede2e41ce8bbafc0e5a385a561264ea4cd71bbbd3ef5a45e02d63277a201d06a0ae1636f804" + }, + { + "alg" : "SHA-384", + "content" : "ca0b169d3eb2d0922dc031133a021f861a043bb3e405a88728215fd6ff00fa52fdc7347842dcc2031472e3726164bdc4" + }, + { + "alg" : "SHA3-384", + "content" : "9903fd7505218999f8262efedb3d935d64bcef84aae781064ab5e1b24755466b269517cada562fa140cd1d417ede57a1" + }, + { + "alg" : "SHA3-256", + "content" : "223fda9a89a461afaae73b177a2dc20ed4a90f2f8757f5c65f3241b0510f00ff" + }, + { + "alg" : "SHA3-512", + "content" : "3996b5af57a5d5c6a0cd62b11773360fb051dd86a2ba968476806a2a5d32049b82d69a24a3c694e8fe4d735be6a28e41000cc500cc2a9fb577e058045855d2d6" + } + ], + "licenses" : [ + { + "license" : { + "id" : "Apache-2.0" + } + } + ], + "purl" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", + "externalReferences" : [ + { + "type" : "website", + "url" : "http://findbugs.sourceforge.net/" + }, + { + "type" : "distribution-intake", + "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" + }, + { + "type" : "vcs", + "url" : "https://code.google.com/p/jsr-305/" + } + ], + "type" : "library", + "bom-ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar" + }, + { + "group" : "xerces", + "name" : "xercesImpl", + "version" : "2.12.2", + "description" : "Xerces2 provides high performance, fully compliant XML parsers in the Apache Xerces family. This new version of Xerces continues to build upon the Xerces Native Interface (XNI), a complete framework for building parser components and configurations that is extremely modular and easy to program. The Apache Xerces2 parser is the reference implementation of XNI but other parser components, configurations, and parsers can be written using the Xerces Native Interface. For complete design and implementation documents, refer to the XNI Manual. Xerces2 provides fully conforming XML Schema 1.0 and 1.1 processors. An experimental implementation of the \"XML Schema Definition Language (XSD): Component Designators (SCD) Candidate Recommendation (January 2010)\" is also provided for evaluation. For more information, refer to the XML Schema page. Xerces2 also provides a complete implementation of the Document Object Model Level 3 Core and Load/Save W3C Recommendations and provides a complete implementation of the XML Inclusions (XInclude) W3C Recommendation. It also provides support for OASIS XML Catalogs v1.1. Xerces2 is able to parse documents written according to the XML 1.1 Recommendation, except that it does not yet provide an option to enable normalization checking as described in section 2.13 of this specification. It also handles namespaces according to the XML Namespaces 1.1 Recommendation, and will correctly serialize XML 1.1 documents if the DOM level 3 load/save APIs are in use.", + "scope" : "required", + "hashes" : [ + { + "alg" : "MD5", + "content" : "40e4f2d5aacfbf51a9a1572d77a0e5e9" + }, + { + "alg" : "SHA-1", + "content" : "f051f988aa2c9b4d25d05f95742ab0cc3ed789e2" + }, + { + "alg" : "SHA-256", + "content" : "6fc991829af1708d15aea50c66f0beadcd2cfeb6968e0b2f55c1b0909883fe16" + }, + { + "alg" : "SHA-512", + "content" : "bfd21f2350bf0bb546a68d3303f28c6a15cee1e630138c169344c3f65fe39a15e61c6ff4e5239f38f2f1f9e488eff4d5565a4a0774263064ab6a30aa9fcaaed3" + }, + { + "alg" : "SHA-384", + "content" : "0a35ae0744f05973997b0710cc8d1d774867bc1c1b63ef5bf5f554d1b4c4ab42033f7819430e05ac623e7c8630aa7c52" + }, + { + "alg" : "SHA3-384", + "content" : "b016ed02d907b21c90b4a2560aa4c778e8aad1b5ecb0ba62777f668166c6e7b8a0c0deef7d1e63b7a9b1092c64c8a4a6" + }, + { + "alg" : "SHA3-256", + "content" : "875856aafff433840ee9933c01018cd18c0a13b46bd4472853698ef1dff83168" + }, + { + "alg" : "SHA3-512", + "content" : "1587332fb01515a72b7856b1f566070dcd26fef33c5070039c28684215466a9b9d3a4625cf7181443e3c3a67a313a938cf0775f39b96daf43f5edd4772143c23" } ], "licenses" : [ @@ -1980,54 +2129,58 @@ } } ], - "purl" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.84?type=jar", + "purl" : "pkg:maven/xerces/xercesImpl@2.12.2?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://tomcat.apache.org/" + "url" : "https://xerces.apache.org/xerces2-j/" + }, + { + "type" : "vcs", + "url" : "https://svn.apache.org/repos/asf/xerces/java/" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.84?type=jar" + "bom-ref" : "pkg:maven/xerces/xercesImpl@2.12.2?type=jar" }, { - "group" : "org.apache.tomcat", - "name" : "tomcat-annotations-api", - "version" : "9.0.84", - "description" : "Annotations Package", + "group" : "xml-apis", + "name" : "xml-apis", + "version" : "1.4.01", + "description" : "xml-commons provides an Apache-hosted set of DOM, SAX, and JAXP interfaces for use in other xml-based projects. Our hope is that we can standardize on both a common version and packaging scheme for these critical XML standards interfaces to make the lives of both our developers and users easier. The External Components portion of xml-commons contains interfaces that are defined by external standards organizations. For DOM, that's the W3C; for SAX it's David Megginson and sax.sourceforge.net; for JAXP it's Sun.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "f590e2b4b16de6e9bc4b7f48380a79d3" + "content" : "7eaad6fea5925cca6c36ee8b3e02ac9d" }, { "alg" : "SHA-1", - "content" : "86186a099bb355a174243f812d58aaf113768b91" + "content" : "3789d9fada2d3d458c4ba2de349d48780f381ee3" }, { "alg" : "SHA-256", - "content" : "b801c2be650483f7a91a6c50a2a93768c0fddc7ec54d0ca0d5e69bc92ef2758a" + "content" : "a840968176645684bb01aed376e067ab39614885f9eee44abe35a5f20ebe7fad" }, { "alg" : "SHA-512", - "content" : "bfe97892d8e218adcd01a473ca51d7bc3a59bec953fca3752e19d73519972eb7665cf9fc098a74cafb8cdff8fc773ac32424af7b3e865d6bfdaafaab59cb9fb1" + "content" : "8db0283b6840cd6407957d296b802e3edf90653e2722f8e29f86c1c0b60996c4b43e9e065e6864dab89b2138ddb0174d9b4fdda4a93f94eeb884783db82f3268" }, { "alg" : "SHA-384", - "content" : "7a97a614983641796ef33723f036bfba309c4f6d1fdf860058c795d826ebe311248822a705880de9d48e5a6d456bc471" + "content" : "bce0ec0f0f692213a1110197c4a11c333673ae0630481255d12b441a8cba70aecfaf104c3d8d9b500ed2a0a19a2bfcce" }, { "alg" : "SHA3-384", - "content" : "4af95a177b0bd0b0477b61a15b167592cf5e8ea0973f756d7850a6792e0da215b2ac1995cdec027169f0e78dc6fa5487" + "content" : "c1d8154ef6eee57dfe6ae9a1c1a2525e9ec2aab3631911a53c064ea6480c0b3b1ce8dd079db7b3693d7ef81daba28ace" }, { "alg" : "SHA3-256", - "content" : "8c4a3599140a0e684eb0f5aac9cea0857687d00d8bb3dc175cc88ae26ffe8337" + "content" : "09eb76497eac5012ce1000c52f4e597c4941a44b9d960b1ac58a19beb2dd63fc" }, { "alg" : "SHA3-512", - "content" : "559a0b35852d37bc7115cd09ffb1684c6613eb5fde071e7503c483b46e32be0a7e2bc62d7386a999ac9e8c9d2548fed4c8d420465d0b8125f15fc554bf659a38" + "content" : "1e4eb902e50b3388da4d161ee49f4d47b61dddd2ad10e6ef6cbb67c4ebc9043e0b65ae59a4a0c8eb03dd28814ce4aedd7e0d4962a0aedc3bdcf7de37cde38f66" } ], "licenses" : [ @@ -2035,56 +2188,81 @@ "license" : { "id" : "Apache-2.0" } + }, + { + "license" : { + "id" : "SAX-PD", + "url" : "http://www.saxproject.org/copying.html" + } + }, + { + "license" : { + "name" : "The W3C License", + "url" : "http://www.w3.org/TR/2004/REC-DOM-Level-3-Core-20040407/java-binding.zip" + } } ], - "purl" : "pkg:maven/org.apache.tomcat/tomcat-annotations-api@9.0.84?type=jar", + "purl" : "pkg:maven/xml-apis/xml-apis@1.4.01?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://tomcat.apache.org/" + "url" : "http://xml.apache.org/commons/components/external/" + }, + { + "type" : "issue-tracker", + "url" : "http://issues.apache.org/bugzilla/" + }, + { + "type" : "mailing-list", + "url" : "http://mail-archives.apache.org/mod_mbox/xml-commons-dev/" + }, + { + "type" : "vcs", + "url" : "https://svn.apache.org/viewvc/xml/commons/tags/xml-commons-external-1_4_01/" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.apache.tomcat/tomcat-annotations-api@9.0.84?type=jar" + "bom-ref" : "pkg:maven/xml-apis/xml-apis@1.4.01?type=jar" }, { - "group" : "org.apache.tomcat.embed", - "name" : "tomcat-embed-el", - "version" : "9.0.84", - "description" : "Core Tomcat implementation", + "publisher" : "FasterXML", + "group" : "com.fasterxml.woodstox", + "name" : "woodstox-core", + "version" : "6.4.0", + "description" : "Woodstox is a high-performance XML processor that implements Stax (JSR-173), SAX2 and Stax2 APIs", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "3a0cd4945a15ee8d37f4b23cf2216e3d" + "content" : "afcba1114fca8199ef26346dd6011e90" }, { "alg" : "SHA-1", - "content" : "3fc7c06e3f2c23baf8bfd64320376fa701633602" + "content" : "c47579857bbf12c85499f431d4ecf27d77976b7c" }, { "alg" : "SHA-256", - "content" : "22370f6a152da44c9a7ea15e597f22ef6b057a8d3278f69ff50cc3452473bf97" + "content" : "d6eb9f2f40049a7a808baf11ffba0737648e62ff52fde9271d808e5d57a27279" }, { "alg" : "SHA-512", - "content" : "3373ff62438698fc3223e7474efca16bdc2a9dc9759e5815ccb8a0e3cc722ba2d581292b60b52eb1d86beb7c705b2640c81d69dfa7162f477d6ed1be8928d748" + "content" : "7da4cd51f7082e59b3cb78988cda78bf162e2b02457caf17242cb9cea9b8002ada15d4dfe774ca0355acdea95c88b67c4d06a27a61653cb84c9a46d27b2726c6" }, { "alg" : "SHA-384", - "content" : "7d018a18156839d5c3c92ac091a53710944e00955443f1a0b051b3cb40f0c7fc9a925efc776ab09f1f0a569102cca101" + "content" : "6e25d32eb4c127f7129ccd912ff882625d3fa43e8eba9bc55013a27a61806d1b865ec809bd21d58d3dbfa3d9e2a3d516" }, { "alg" : "SHA3-384", - "content" : "4f300a9fd6932daa3ff4db977860f66a7f88157e72e1481f1981d5597a4666daf76a309d5ff10312ba0968b56f0e4bbd" + "content" : "d384bf82404b7642340eb1a3f88e2d1e366bf3282534943f98c5f4946656f7e6ea86ba6c7bfeed7c4fda1678afdd282e" }, { "alg" : "SHA3-256", - "content" : "ac2d6743eafb0210717527467f014d8fd8ac97a12c5f2aaccf1922b01c4d268d" + "content" : "7d1e5fbd3f4197fcf6f4d097bc742a0b3f02fe9ae36ef4385362afab6cc85bee" }, { "alg" : "SHA3-512", - "content" : "656900dad4ca2261cdc8ffa7febfbf4edfe87e2cb32a8a34b830f0f3248ae707a473a82f69487a70003c3b2c0e92ed998c082ec22f172c86b8565b62b7df74ad" + "content" : "6020db3580dac2d5c0b7656a062b982d234952fc3feac5dfbb12f91bc019b6af430123ad46e5b5de28d7cb9562aec582febdbbfae8ce35ebc2ce0b837a335af6" } ], "licenses" : [ @@ -2094,55 +2272,67 @@ } } ], - "purl" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.84?type=jar", + "purl" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.4.0?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://tomcat.apache.org/" + "url" : "https://github.com/FasterXML/woodstox" + }, + { + "type" : "distribution-intake", + "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" + }, + { + "type" : "issue-tracker", + "url" : "https://github.com/FasterXML/woodstox/issues" + }, + { + "type" : "vcs", + "url" : "https://github.com/FasterXML/woodstox" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.84?type=jar" + "bom-ref" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.4.0?type=jar" }, { "publisher" : "SonarSource", "group" : "org.sonarsource.analyzer-commons", - "name" : "sonar-analyzer-commons", - "version" : "2.8.0.2699", - "description" : "Logic useful for a language plugin", + "name" : "sonar-performance-measure", + "version" : "2.18.0.3393", + "description" : "Logic to capture a hierarchy of performance measures, save it into a file, and merge files", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "e1a59ec0809b06b3f5e2c8e97a76b218" + "content" : "1854d57f67661c6950374be29145a017" }, { "alg" : "SHA-1", - "content" : "cada74c92a33d57d5bdb70b8178a9006754e601c" + "content" : "eb02954016253fd34551a4641e3215fdafc239c6" }, { "alg" : "SHA-256", - "content" : "e9e17c3b6e02624cc1981dc7c2100f9ea67b96aec66e6a785e0ed5202febd854" + "content" : "4a3f60003f00a88695158a522cfbb7119c2c696991f13b7ca391e7c1eaf46d34" }, { "alg" : "SHA-512", - "content" : "9197a2c16edd4ccbc39a33fe75e4a4175700306d9d1df2f4e146de37728aa8483a3355993bb8e8fb77ef9ff17490427cf55566d81364d82495f3e49c62ee21f2" + "content" : "f3f2cc2211f00a66c33cd81ef996557fda3ee89421b2fc4565c376dadc22dc2a25eb327e5dfa041f3c48b8fa8620b797ec6762fd74d3ddde0184e6598c211d39" }, { "alg" : "SHA-384", - "content" : "8385239d7eb9d7bc972fbb63ed5d887b2089129844037c957f0cc5bcd34b8a20deea0531022af0832193f020e94ad5fe" + "content" : "54138af00ebd5d85cb2f776d75d2455de1a058e657dff84d8e19a563d720fa819a1efd4d432a1d3c2dcb2fa31158c184" }, { "alg" : "SHA3-384", - "content" : "ce192d54341470644acee6f91217ddeb62f28d1ac2da58b0f73fb8ec9e5278463457f74dc4a264349051b6fc3dc25c3a" + "content" : "7855e1aba9691493ebd9a5d79ace4cbccdc1f9fd9194a8300f6b71367014e7fdaf04a7aa9db87ed195b7d738552e6080" }, { "alg" : "SHA3-256", - "content" : "a521179e465dec4a69e93e393df68d9c6719f393654a1e584bd3ff7a0cd39891" + "content" : "f65d3d9a6737a6bd62c31d2d463d011512c3aa434d0575d6e54a95dc00bc5c6e" }, { "alg" : "SHA3-512", - "content" : "36968ac582180921cb12e613073d261111b81ca042e47624bc07176f6926c6f7a40a11077e51d5e460add84747348b4a962cda95c6b6c1ffe372e032c570ad89" + "content" : "34d64169af99b65d4ee59cfd414e189af6ea00ae5118aae5976e1ec76752631138c08eae42b96e95f9668123bbe44a17907c7556003e0dfd988723fc50db0d31" } ], "licenses" : [ @@ -2153,11 +2343,11 @@ } } ], - "purl" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.8.0.2699?type=jar", + "purl" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.18.0.3393?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://docs.sonarqube.org/display/PLUG/Plugin+Library/sonar-analyzer-commons-parent/sonar-analyzer-commons" + "url" : "http://docs.sonarqube.org/display/PLUG/Plugin+Library/sonar-analyzer-commons-parent/sonar-performance-measure" }, { "type" : "build-system", @@ -2173,74 +2363,74 @@ }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-analyzer-commons/sonar-analyzer-commons" + "url" : "https://github.com/SonarSource/sonar-analyzer-commons/sonar-performance-measure" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.8.0.2699?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.18.0.3393?type=jar" }, { "publisher" : "SonarSource", - "group" : "org.sonarsource.analyzer-commons", - "name" : "sonar-xml-parsing", - "version" : "2.8.0.2699", - "description" : "Logic useful to read and analyze XML files", + "group" : "org.sonarsource.python", + "name" : "sonar-python-plugin", + "version" : "5.16.0.29940", + "description" : "Code Analyzer for Python", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "eeb2d8b488da7bd7c98cfb49b3d06830" + "content" : "96af3be952506f19faa9797702af83d2" }, { "alg" : "SHA-1", - "content" : "03e14b69bc7a2abbc0a595851f8f31540b208dd6" + "content" : "7358996b700859eefb489750874f6b276555ae44" }, { "alg" : "SHA-256", - "content" : "408ec4b66b8fda3fe8a333858aed7cbb3340f570790468f8a789de4cbf2c8c91" + "content" : "161047717514eb4299847263ccb553df5e5be8fc9ceb081aaf4015fa834c734a" }, { "alg" : "SHA-512", - "content" : "35be20dfa7f82d0ba024c2614359e4b52ac295a2c416d854103b3a7f9739d04e2eb3bb927064fe9ac11ed9dbe5f91f8a266fd16a2ed40675b50c43836d132829" + "content" : "09689460be8675a15d4f1c2cecb868563c94a54c311f992bdd190aef37300a80760966216f73c12824765d7a7562735799b9c08f0606f465b03c299778110b31" }, { "alg" : "SHA-384", - "content" : "426ea2055c0c9f6642b68a7b2eccbf4d7ee802dd3bfc010564b108a8c5cf54a3a9ce7fd3d07ab4adbbd54fa52bee64b5" + "content" : "bc18a99dabb6a1f04cd2bfdaffd3e1ba70688d16716b8cf40c9a751e94c6312b721b31478d7ea1baf3095da0654e6ae1" }, { "alg" : "SHA3-384", - "content" : "9bfe10431714c647f99ce6b8e4d8eaaa6b80862985380a5ce4da37cdcf95cf324f9008b9dd46e81e8ecaacd19fa8e1c3" + "content" : "5d4803f25bb278676d6aa3ec55c6fd4db93fb42d5966fe73f0d7c6ecc2edcd2633154defacccd021b82574399e095c6c" }, { "alg" : "SHA3-256", - "content" : "2c47cf7bd11d40d40d1da9406bbd00a578bee08621cf341598d8fad4c4e8f7d9" + "content" : "b5898d3547c883a1aeaeb1175ed6bf9b691ae896210df2a0ce22b74295ddc004" }, { "alg" : "SHA3-512", - "content" : "4eb5a2b0f0b527231f0bfb1bae4c798713e615a7c5929c0ac09f49b3d9fa5eb12cee0775842e6b7033d7163803a3737595fdf9f221eeaef69e43875c87b6c3bf" + "content" : "22c2445b64a2d200eb021df6bf93ef083c5487bde5c7923df897941445fd7f77eb9eac76542924195c8fdf17d43a3336a9b91f7c507ce8c36265447d8b77472c" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.8.0.2699?type=jar", + "purl" : "pkg:maven/org.sonarsource.python/sonar-python-plugin@5.16.0.29940?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://docs.sonarqube.org/display/PLUG/Plugin+Library/sonar-analyzer-commons-parent/sonar-xml-parsing" + "url" : "http://redirect.sonarsource.com/plugins/python.html" }, { "type" : "build-system", - "url" : "https://cirrus-ci.com/github/SonarSource/" + "url" : "https://cirrus-ci.com/github/SonarSource/sonar-python" }, { "type" : "issue-tracker", - "url" : "http://jira.sonarsource.com" + "url" : "https://jira.sonarsource.com/browse/SONARPY" }, { "type" : "mailing-list", @@ -2248,193 +2438,262 @@ }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-analyzer-commons/sonar-xml-parsing" + "url" : "https://github.com/SonarCommunity/sonar-python" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.8.0.2699?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.python/sonar-python-plugin@5.16.0.29940?type=jar" }, { - "group" : "xerces", - "name" : "xercesImpl", - "version" : "2.12.2", - "description" : "Xerces2 provides high performance, fully compliant XML parsers in the Apache Xerces family. This new version of Xerces continues to build upon the Xerces Native Interface (XNI), a complete framework for building parser components and configurations that is extremely modular and easy to program. The Apache Xerces2 parser is the reference implementation of XNI but other parser components, configurations, and parsers can be written using the Xerces Native Interface. For complete design and implementation documents, refer to the XNI Manual. Xerces2 provides fully conforming XML Schema 1.0 and 1.1 processors. An experimental implementation of the \"XML Schema Definition Language (XSD): Component Designators (SCD) Candidate Recommendation (January 2010)\" is also provided for evaluation. For more information, refer to the XML Schema page. Xerces2 also provides a complete implementation of the Document Object Model Level 3 Core and Load/Save W3C Recommendations and provides a complete implementation of the XML Inclusions (XInclude) W3C Recommendation. It also provides support for OASIS XML Catalogs v1.1. Xerces2 is able to parse documents written according to the XML 1.1 Recommendation, except that it does not yet provide an option to enable normalization checking as described in section 2.13 of this specification. It also handles namespaces according to the XML Namespaces 1.1 Recommendation, and will correctly serialize XML 1.1 documents if the DOM level 3 load/save APIs are in use.", + "publisher" : "SonarSource", + "group" : "org.sonarsource.python", + "name" : "python-frontend", + "version" : "5.16.0.29940", + "description" : "Parent pom of SonarSource public projects", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "40e4f2d5aacfbf51a9a1572d77a0e5e9" + "content" : "af8fb4754bb34b00450e1886e6e35f24" }, { "alg" : "SHA-1", - "content" : "f051f988aa2c9b4d25d05f95742ab0cc3ed789e2" + "content" : "3d29bbb908e0740432fd9e29f6f9fef3b61fa8bf" }, { "alg" : "SHA-256", - "content" : "6fc991829af1708d15aea50c66f0beadcd2cfeb6968e0b2f55c1b0909883fe16" + "content" : "2bf0a615cb8804200e9de8c3b407b6a928a16b34349f43c76bf9f6c548e8000c" }, { "alg" : "SHA-512", - "content" : "bfd21f2350bf0bb546a68d3303f28c6a15cee1e630138c169344c3f65fe39a15e61c6ff4e5239f38f2f1f9e488eff4d5565a4a0774263064ab6a30aa9fcaaed3" + "content" : "0b42071f37c0cf8dfc46c3a3ed915bdc1d99b0bc41706200305c7f962f7b14c79e19eb42f99488b874d45267015de3f9762d903d6c03c7fb1c4bd1ac331c45d8" }, { "alg" : "SHA-384", - "content" : "0a35ae0744f05973997b0710cc8d1d774867bc1c1b63ef5bf5f554d1b4c4ab42033f7819430e05ac623e7c8630aa7c52" + "content" : "5411758030a57ffedc16b7b9f93592107920e01b27b8b6b98c3cb0cec1bbb3eecfc0dfc36ba130b2616507a703938560" }, { "alg" : "SHA3-384", - "content" : "b016ed02d907b21c90b4a2560aa4c778e8aad1b5ecb0ba62777f668166c6e7b8a0c0deef7d1e63b7a9b1092c64c8a4a6" + "content" : "d2054bd5b799463c0364aebef1024584f37fc63b122b0d9a137d5d052b152ef3b23ebb64961222adc72f30e49ccdbe3d" }, { "alg" : "SHA3-256", - "content" : "875856aafff433840ee9933c01018cd18c0a13b46bd4472853698ef1dff83168" + "content" : "6eaa8027ba8e0f7c11c2a2da14084630735110429505016fd92d8292c33637f4" }, { "alg" : "SHA3-512", - "content" : "1587332fb01515a72b7856b1f566070dcd26fef33c5070039c28684215466a9b9d3a4625cf7181443e3c3a67a313a938cf0775f39b96daf43f5edd4772143c23" + "content" : "35de0af96a078f4bc7709776d051b3d40c5f965647096114d33cb47c2fda0aacef5453af4475302a074e351c796b30315daa182fc69f780f515ac046a19e9ff0" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/xerces/xercesImpl@2.12.2?type=jar", + "purl" : "pkg:maven/org.sonarsource.python/python-frontend@5.16.0.29940?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://xerces.apache.org/xerces2-j/" + "url" : "https://docs.sonarsource.com/sonarqube-server/latest/extension-guide/developing-a-plugin/plugin-basics/python/python-frontend/" + }, + { + "type" : "build-system", + "url" : "https://cirrus-ci.com/github/SonarSource/sonar-python" + }, + { + "type" : "issue-tracker", + "url" : "https://jira.sonarsource.com/browse/SONARPY" + }, + { + "type" : "mailing-list", + "url" : "https://community.sonarsource.com" }, { "type" : "vcs", - "url" : "https://svn.apache.org/repos/asf/xerces/java/" + "url" : "https://github.com/SonarSource/sonar-python/python-frontend" } ], "type" : "library", - "bom-ref" : "pkg:maven/xerces/xercesImpl@2.12.2?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.python/python-frontend@5.16.0.29940?type=jar" }, { - "group" : "xml-apis", - "name" : "xml-apis", - "version" : "1.4.01", - "description" : "xml-commons provides an Apache-hosted set of DOM, SAX, and JAXP interfaces for use in other xml-based projects. Our hope is that we can standardize on both a common version and packaging scheme for these critical XML standards interfaces to make the lives of both our developers and users easier. The External Components portion of xml-commons contains interfaces that are defined by external standards organizations. For DOM, that's the W3C; for SAX it's David Megginson and sax.sourceforge.net; for JAXP it's Sun.", + "group" : "com.google.protobuf", + "name" : "protobuf-java", + "version" : "4.29.0", + "description" : "Core Protocol Buffers library. Protocol Buffers are a way of encoding structured data in an efficient yet extensible format.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "7eaad6fea5925cca6c36ee8b3e02ac9d" + "content" : "5de9c1cc9a647278ab03d76ccfb8ff9d" }, { "alg" : "SHA-1", - "content" : "3789d9fada2d3d458c4ba2de349d48780f381ee3" + "content" : "ffea90ab158435d68de76951857ef5f8b0f98365" }, { "alg" : "SHA-256", - "content" : "a840968176645684bb01aed376e067ab39614885f9eee44abe35a5f20ebe7fad" + "content" : "16901851ebe5e89fe88aaad3c26866373695bc2e30627bb8932847e2f5fc2e76" }, { "alg" : "SHA-512", - "content" : "8db0283b6840cd6407957d296b802e3edf90653e2722f8e29f86c1c0b60996c4b43e9e065e6864dab89b2138ddb0174d9b4fdda4a93f94eeb884783db82f3268" + "content" : "ed9aae4faa56c04dc086af07078db3734f675eb4188bb2be98c94cc59a8e4e77b74195c47d70c7b697bc3b938e106fdc137ffda5358b3029795f28e7d9216d68" }, { "alg" : "SHA-384", - "content" : "bce0ec0f0f692213a1110197c4a11c333673ae0630481255d12b441a8cba70aecfaf104c3d8d9b500ed2a0a19a2bfcce" + "content" : "d204ff730ba5eff0eddd9439f05ab89e87194fc6c69d50054da593ab7537495207374840701867856ea1e9aa87ef1e14" }, { "alg" : "SHA3-384", - "content" : "c1d8154ef6eee57dfe6ae9a1c1a2525e9ec2aab3631911a53c064ea6480c0b3b1ce8dd079db7b3693d7ef81daba28ace" + "content" : "9a3dc4e7ef4e1488b6ee4a653d9f47569bb3f543012ec20fe695d1bba2a7da8e329ffe70d5ef8e43fd9da1721fe3f3c1" }, { "alg" : "SHA3-256", - "content" : "09eb76497eac5012ce1000c52f4e597c4941a44b9d960b1ac58a19beb2dd63fc" + "content" : "16fec3a2d08bcc363c69d2a260a78020636d94dd4ed929050d8e8b51d37960f0" }, { "alg" : "SHA3-512", - "content" : "1e4eb902e50b3388da4d161ee49f4d47b61dddd2ad10e6ef6cbb67c4ebc9043e0b65ae59a4a0c8eb03dd28814ce4aedd7e0d4962a0aedc3bdcf7de37cde38f66" + "content" : "37c5a864aa97fd50a88a5c9b2a9c7eedd646eb4655ec041502e1892efb55b2f22e9f2292dcca120e74755a11f92dc41616e1dc6919d8906fe2c5802e25ed1187" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0" + "id" : "BSD-3-Clause", + "url" : "https://opensource.org/licenses/BSD-3-Clause" } + } + ], + "purl" : "pkg:maven/com.google.protobuf/protobuf-java@4.29.0?type=jar", + "externalReferences" : [ + { + "type" : "website", + "url" : "https://developers.google.com/protocol-buffers/protobuf-java/" }, { - "license" : { - "id" : "SAX-PD", - "url" : "http://www.saxproject.org/copying.html" - } + "type" : "distribution-intake", + "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" + }, + { + "type" : "vcs", + "url" : "https://github.com/protocolbuffers/protobuf/protobuf-java" + } + ], + "type" : "library", + "bom-ref" : "pkg:maven/com.google.protobuf/protobuf-java@4.29.0?type=jar" + }, + { + "publisher" : "FasterXML", + "group" : "com.fasterxml.jackson.core", + "name" : "jackson-databind", + "version" : "2.20.1", + "description" : "General data-binding functionality for Jackson: works on core streaming API", + "scope" : "required", + "hashes" : [ + { + "alg" : "MD5", + "content" : "49d7b7226df5ed4a036e48997a03d066" + }, + { + "alg" : "SHA-1", + "content" : "9586a7fe0e1775de0e54237fa6a2c8455c93ac06" }, + { + "alg" : "SHA-256", + "content" : "34bbeb4526fff4f8565b12106bf85a6afcbae858966d489b54214ac46b2e26e8" + }, + { + "alg" : "SHA-512", + "content" : "16906e9c2f1962649eb21de148f362fedf2ce903c7ca0e6d68a01d43dbe8402b70cc537c104f36bc40a2bed6601162e7c21663735582e25bff7e27852be1405d" + }, + { + "alg" : "SHA-384", + "content" : "0591935cdfed1d65fa4a2820133ba129384f71921228ffe093f343d3ebf0b699762810d9208641726111015f0e35753b" + }, + { + "alg" : "SHA3-384", + "content" : "855ccd449944e7884f8088c8c5b224e6e2f63bcd3123502618b4f5ded025e5978143af8c5d31215276932bc3bb089472" + }, + { + "alg" : "SHA3-256", + "content" : "53732171c9f2bdeaa40017a34683a00ac11e8a8c1bcefaed07eb91e629e20376" + }, + { + "alg" : "SHA3-512", + "content" : "05017efae94bc3c83131aaaa7911f20e7c367502cd2cd05c6cedabc877b55724bcde2521ba1da15bf1c1c3ccb1a235124b39b2d4860142f2b89d4df197cf5c83" + } + ], + "licenses" : [ { "license" : { - "name" : "The W3C License", - "url" : "http://www.w3.org/TR/2004/REC-DOM-Level-3-Core-20040407/java-binding.zip" + "id" : "Apache-2.0" } } ], - "purl" : "pkg:maven/xml-apis/xml-apis@1.4.01?type=jar", + "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://xml.apache.org/commons/components/external/" + "url" : "https://github.com/FasterXML/jackson" + }, + { + "type" : "distribution-intake", + "url" : "https://central.sonatype.com/api/v1/publisher" }, { "type" : "issue-tracker", - "url" : "http://issues.apache.org/bugzilla/" - }, - { - "type" : "mailing-list", - "url" : "http://mail-archives.apache.org/mod_mbox/xml-commons-dev/" + "url" : "https://github.com/FasterXML/jackson-databind/issues" }, { "type" : "vcs", - "url" : "https://svn.apache.org/viewvc/xml/commons/tags/xml-commons-external-1_4_01/" + "url" : "https://github.com/FasterXML/jackson-databind" } ], "type" : "library", - "bom-ref" : "pkg:maven/xml-apis/xml-apis@1.4.01?type=jar" + "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1?type=jar" }, { "publisher" : "FasterXML", - "group" : "com.fasterxml.woodstox", - "name" : "woodstox-core", - "version" : "6.4.0", - "description" : "Woodstox is a high-performance XML processor that implements Stax (JSR-173), SAX2 and Stax2 APIs", + "group" : "com.fasterxml.jackson.core", + "name" : "jackson-annotations", + "version" : "2.20", + "description" : "Core annotations used for value types, used by Jackson data binding package.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "afcba1114fca8199ef26346dd6011e90" + "content" : "b901def3c20752817f27130e4b8d6640" }, { "alg" : "SHA-1", - "content" : "c47579857bbf12c85499f431d4ecf27d77976b7c" + "content" : "6a5e7291ea3f2b590a7ce400adb7b3aea4d7e12c" }, { "alg" : "SHA-256", - "content" : "d6eb9f2f40049a7a808baf11ffba0737648e62ff52fde9271d808e5d57a27279" + "content" : "959a2ffb2d591436f51f183c6a521fc89347912f711bf0cae008cdf045d95319" }, { "alg" : "SHA-512", - "content" : "7da4cd51f7082e59b3cb78988cda78bf162e2b02457caf17242cb9cea9b8002ada15d4dfe774ca0355acdea95c88b67c4d06a27a61653cb84c9a46d27b2726c6" + "content" : "8926d89bfe7f427c7793f6af619249540f23f82eae055dd03d4cb163ff603a43dd6a3ebe43528d00789aed3df0dd2f10e08552fdec53e2691849b9769f57f0c9" }, { "alg" : "SHA-384", - "content" : "6e25d32eb4c127f7129ccd912ff882625d3fa43e8eba9bc55013a27a61806d1b865ec809bd21d58d3dbfa3d9e2a3d516" + "content" : "40ee4c1438a5a190624dff9deca83377f7e60690b4535359b2a79924f736bff7c8d077e5b01c6c8972735dc152f2ccf4" }, { "alg" : "SHA3-384", - "content" : "d384bf82404b7642340eb1a3f88e2d1e366bf3282534943f98c5f4946656f7e6ea86ba6c7bfeed7c4fda1678afdd282e" + "content" : "0fc0f697d03692b63c2b11fcabac51c630278ed6df15420975263ea4ad19418b3b71b7889497ed20a150035f9bcba79d" }, { "alg" : "SHA3-256", - "content" : "7d1e5fbd3f4197fcf6f4d097bc742a0b3f02fe9ae36ef4385362afab6cc85bee" + "content" : "6bf49e384735969af020f758b255ceed26af92d4cf456f6e7b83e8de53289f93" }, { "alg" : "SHA3-512", - "content" : "6020db3580dac2d5c0b7656a062b982d234952fc3feac5dfbb12f91bc019b6af430123ad46e5b5de28d7cb9562aec582febdbbfae8ce35ebc2ce0b837a335af6" + "content" : "3372f6c456a7f6a33ebc3ecc65daaf36288be2a14b1f2cb9fcd7387c07acab1c69ae803a366e5d12adf4934970ffd2e34017917c5f16a6d563bc94810f228ab3" } ], "licenses" : [ @@ -2444,157 +2703,152 @@ } } ], - "purl" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.4.0?type=jar", + "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.20?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://github.com/FasterXML/woodstox" + "url" : "https://github.com/FasterXML/jackson" }, { "type" : "distribution-intake", - "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" + "url" : "https://central.sonatype.com/api/v1/publisher" }, { "type" : "issue-tracker", - "url" : "https://github.com/FasterXML/woodstox/issues" + "url" : "https://github.com/FasterXML/jackson-annotations/issues" }, { "type" : "vcs", - "url" : "https://github.com/FasterXML/woodstox" + "url" : "https://github.com/FasterXML/jackson-annotations" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.4.0?type=jar" + "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.20?type=jar" }, { - "publisher" : "SonarSource", - "group" : "org.sonarsource.analyzer-commons", - "name" : "sonar-performance-measure", - "version" : "2.8.0.2699", - "description" : "Logic to capture a hierarchy of performance measures, save it into a file, and merge files", + "publisher" : "FasterXML", + "group" : "com.fasterxml.jackson.core", + "name" : "jackson-core", + "version" : "2.20.1", + "description" : "Core Jackson processing abstractions (aka Streaming API), implementation for JSON", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "bfdcb3a88a97fe66b288f61921bab1ae" + "content" : "889b2c417b61c9f4f460b06957147234" }, { "alg" : "SHA-1", - "content" : "0ecfd7e49341de39ad53f9608c31f30b6a10c441" + "content" : "5734323adfece72111769b0ae38a6cf803e3d178" }, { "alg" : "SHA-256", - "content" : "ebba386ff08f8bbe6e9a37a0666e91c8c8561af5e8b24de484a520e828ec64e7" + "content" : "ffab4d957daa2796cf24cb66d0b78a7090f1bcbe17c3a4578f09affaaf137089" }, { "alg" : "SHA-512", - "content" : "02d37166706b1a93248cfb82731318304950162814292a295f0252d0f5d7ec734cedaf4a9f960d30c85dc8bac0ee59d75089f5ae10c88212b98e4de7ef7c4d8b" + "content" : "0463e1c2e1d8e8cfa4954dfce491583f0ec9ec1de6e6f342d1e5f0c63dcfb959673552a279ec4e6b6cc69e6ac2de6d42dd512149ceb76620b5d780db7325e6a7" }, { "alg" : "SHA-384", - "content" : "84f70dfb7e80d7a6c1dad5ac31ce743f0da036e683881acf172d35f7d21ccbb3296165b88fcd4b2167cdc1234956bcdb" + "content" : "a279b2d57d019a05f65762ce670ce23e02466b11276d8c0687f3bb5ed40a8a1854bfe6dd2dc157d0f5695186f7d9a65a" }, { "alg" : "SHA3-384", - "content" : "e89f15bf1b1ff83ce691bd755daab7a6ac6cfb416ccdc12ebd1a7f427da2224c4b8371062ebaa3fa63ba878473e7a8d2" + "content" : "06b9f33e030a99fa95d171118ab668bee42e32b35b85e05750f8514128dbadc94026afde16dbadc0ff786027b09712a4" }, { "alg" : "SHA3-256", - "content" : "c08c9694411c5561032ace350fb1bb2201f3bfd0aa217e48047a399eb26e26c2" + "content" : "3e83a1a349d8ba3a4e76ee983f04b259a85263dda5090f55aae5535109c4b6c0" }, { "alg" : "SHA3-512", - "content" : "a47781adf6a0dd209579e9c09ddb1f53c88bf89dadd4a7829655599eaea3399f9a71cf7e3b9c831c0f7e86904d5de2e97a6c3df8c0c0126ce8f4f4ad73cda1a3" + "content" : "87b3a61a71a625adfc6b9b402079c26b223e19535ca5af07e4130932d479f9c22e90696911050d8ab8a09a6209651fe2f25f54d7d9a1493b6dab6f8acb76203d" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "id" : "Apache-2.0" } } ], - "purl" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.8.0.2699?type=jar", + "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.1?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://docs.sonarqube.org/display/PLUG/Plugin+Library/sonar-analyzer-commons-parent/sonar-performance-measure" + "url" : "https://github.com/FasterXML/jackson-core" }, { - "type" : "build-system", - "url" : "https://cirrus-ci.com/github/SonarSource/" + "type" : "distribution-intake", + "url" : "https://central.sonatype.com/api/v1/publisher" }, { "type" : "issue-tracker", - "url" : "http://jira.sonarsource.com" - }, - { - "type" : "mailing-list", - "url" : "https://community.sonarsource.com" + "url" : "https://github.com/FasterXML/jackson-core/issues" }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-analyzer-commons/sonar-performance-measure" + "url" : "https://github.com/FasterXML/jackson-core" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.8.0.2699?type=jar" + "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.1?type=jar" }, { - "publisher" : "SonarSource and Waleri Enns", + "publisher" : "SonarSource", "group" : "org.sonarsource.python", - "name" : "sonar-python-plugin", - "version" : "4.17.0.14845", - "description" : "Code Analyzer for Python", + "name" : "python-checks", + "version" : "5.16.0.29940", + "description" : "Parent pom of SonarSource public projects", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "a1f37ca54b6407c29e14d6a84ef527be" + "content" : "c6a6f14dd43b2ca777639d045d371686" }, { "alg" : "SHA-1", - "content" : "d2a19e1624695b1a8bf7691c028be1c1d795c3b4" + "content" : "7420c64bb23358297f8fb465d194b0abc81a268d" }, { "alg" : "SHA-256", - "content" : "4745222f0e3ff47ae4bef17fe6e6c8f50234c69d4992e81628c52217f3443564" + "content" : "8d71a04ae268809a329169124e821538409f323c25738a787f1004691830947a" }, { "alg" : "SHA-512", - "content" : "7fb3dc79348493ea5a16c8a436db16665126137f0dfcc146fd75dac317a686c26f81499e5a370341e87374fe28006670f48d7424ab2c7988e8e51a842872fc4a" + "content" : "49cc6c1c1f6d4ab7691e52ee582edc2dc4320706f0cba8b0264232bb8c648e0c1411fc349480d4126909275bc722a26ce7dc1d0442b0fe800d68e43dd502e8e0" }, { "alg" : "SHA-384", - "content" : "55bff9b2c2d2fede0efcaa6c64835bb2e42e94d4ba6196168d4d5b2f7fbd65cd8c03ae85f39937d27f873edcc359d565" + "content" : "0ec195c2cd805ba066715992213efab8234ad4fea211d38c11621b764ce81a82ec4eb13f372c3a6ae77663319de497ca" }, { "alg" : "SHA3-384", - "content" : "f38a0bc3cfd4b5d024c210e71fc0b63f41cc4bbac4bc501905fad95ceda64f81e39c3a53ca50b5c1e25250e802ce8a92" + "content" : "d59fe66bc7a1621385b1a8e6d9e7e9aba25f5bcd1bf7460aaeea718a9fdefa1f01d65bc6bbf08c4ea20d6ff5533321d5" }, { "alg" : "SHA3-256", - "content" : "2a9a49aac638a35dbc0ec3d31a79cb92a87bb148ce46ca7072bbb4d732a0cda6" + "content" : "6b6d15ca4b8e534cfb0a5b3a9dc4ea328d07647a6a5029cc5bc36cc0e33f4ae7" }, { "alg" : "SHA3-512", - "content" : "5861b8fa999a2e4117429bf16c4ee05f765050a41ca59fd6beb2499ac24020a0693f366b6807bce569cf789be4ef075ab320aa02580712ad32d0b10a0b1b34d4" + "content" : "258f4367d5303ee344945915f54637c52cdfd441d3ec1a642172dd417815e38993f14b35154b0d9c7d3f49dfad666e9cb2ca26a9993f52815180b4bb6bdf8dce" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.sonarsource.python/sonar-python-plugin@4.17.0.14845?type=jar", + "purl" : "pkg:maven/org.sonarsource.python/python-checks@5.16.0.29940?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://redirect.sonarsource.com/plugins/python.html" + "url" : "https://docs.sonarsource.com/sonarqube-server/latest/extension-guide/developing-a-plugin/plugin-basics/python/python-checks/" }, { "type" : "build-system", @@ -2610,66 +2864,66 @@ }, { "type" : "vcs", - "url" : "https://github.com/SonarCommunity/sonar-python" + "url" : "https://github.com/SonarSource/sonar-python/python-checks" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.python/sonar-python-plugin@4.17.0.14845?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.python/python-checks@5.16.0.29940?type=jar" }, { - "publisher" : "SonarSource and Waleri Enns", + "publisher" : "SonarSource", "group" : "org.sonarsource.python", - "name" : "python-frontend", - "version" : "4.17.0.14845", + "name" : "python-commons", + "version" : "5.16.0.29940", "description" : "Parent pom of SonarSource public projects", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "c55cb48cedabf79f2877ebb9d88f6b58" + "content" : "9d94ffb59a75cf874e054eb124bc1815" }, { "alg" : "SHA-1", - "content" : "4ff8dfa5ea7d5ad5847562d95396b919308caea3" + "content" : "0c4756f9dd9cc5caf3acc856171694e2fa033bcc" }, { "alg" : "SHA-256", - "content" : "437b54530740f33ae5e46bdf8348d1440684f7d1cb318a7ee058689bd9b97c76" + "content" : "5fb75ed5d0f7767f3d5877e1fc44a2cb4498b83c482e1e4cefd5c878f118225e" }, { "alg" : "SHA-512", - "content" : "4928573b4dde5237b3056a25d01fdcaa0d8477f66517d0939d332ff8ba434b6a03d884095701f4b571af131b3afc6b57feee148d69d86b8e62a3a4d39d2d1001" + "content" : "d8aa8345c5a55aa6a9cbcb261277e0f36e4756ea4a4d9dc99410053781a6305f9c98e1d0c2f0253e9e6140c40f6f9f19da26e7e85913407b42b20808aebfe9f0" }, { "alg" : "SHA-384", - "content" : "859f11ab3b6590bc07f6a082ef8d87775939341e064abd4c840ad326640c71b84e99a8ae281f0bece8bd5b8196db1c0d" + "content" : "ee39919d1c32d29c16e41ef2259b5b71f5670244c9c9b1224972eb4d38c90e963dedb6108ce8c0243e322086e585a3da" }, { "alg" : "SHA3-384", - "content" : "7dc1a501021011058c6e46cf0e069103aca9687de27aea29c42196af8d74c09ed668ec77284abafc12d635f4e0c9154e" + "content" : "ddc8bf3b9b5d30bb0916c90f676061729666587f674827a29dcb21a08fe4d59e42f5ce818c5730e2aa21f1befa74c130" }, { "alg" : "SHA3-256", - "content" : "84a8def8e68682978bda393edba28e6caa7d4c333fffce5c09a24e54a4104d20" + "content" : "da0ff73c07625578b2d3d55fcc5cd16406762ad670a77c46e7128f6c4e90ec3b" }, { "alg" : "SHA3-512", - "content" : "b44fdef1e3482a1f65d0d5345c69fb78ed32cee27f96abab033ae1e3e26923efd69e8b213ae7c9c367c0e9a87df3785154ecc58961a5261513dc1fb3e260d50d" + "content" : "624e8aaaee39fcad526d4e2699174f8aa9804fc1cb08418dd742374a91fdc3fd474173f59e64508a74029080e9e56d9c6c32e311b71533eba3eead882c4a736f" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.sonarsource.python/python-frontend@4.17.0.14845?type=jar", + "purl" : "pkg:maven/org.sonarsource.python/python-commons@5.16.0.29940?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://docs.sonarqube.org/display/PLUG/Plugin+Library/python/python-frontend" + "url" : "https://docs.sonarsource.com/sonarqube-server/latest/extension-guide/developing-a-plugin/plugin-basics/python/python-commons/" }, { "type" : "build-system", @@ -2685,210 +2939,210 @@ }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-python/python-frontend" + "url" : "https://github.com/SonarSource/sonar-python/python-commons" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.python/python-frontend@4.17.0.14845?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.python/python-commons@5.16.0.29940?type=jar" }, { - "group" : "com.google.protobuf", - "name" : "protobuf-java", - "version" : "3.25.1", - "description" : "Core Protocol Buffers library. Protocol Buffers are a way of encoding structured data in an efficient yet extensible format.", + "publisher" : "FasterXML", + "group" : "com.fasterxml.jackson.dataformat", + "name" : "jackson-dataformat-toml", + "version" : "2.20.1", + "description" : "Support for reading and writing TOML-encoded data via Jackson abstractions.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "7dc81d3c2187ce5627d134a37df88cc0" + "content" : "f3d12c27f5c0744054e8716f3ee4b3d2" }, { "alg" : "SHA-1", - "content" : "2933a5c3f022456d8842323fe0d7fb2d25a7e3c7" + "content" : "1f4f7249289053551eac7bc8ac6e646576d03e1a" }, { "alg" : "SHA-256", - "content" : "48a8e58a1a8f82eff141a7a388d38dfe77d7a48d5e57c9066ee37f19147e20df" + "content" : "3936e3fb83edd2754bb317d17a63cded43b5fac4fb82eabb4aaa502bb52f9835" }, { "alg" : "SHA-512", - "content" : "d4adb935097c4fee13838ea7c166b41a9c34977e436d2fa5e5e92aac1a95462846463895ad994858a442079627696ca14618ff97a0039abd3fcb8671d7961d3a" + "content" : "cd31529a28ff83585d8d5944943c528d4d26e0f547c5ed804c90a8c642b0cd34553d2f4b7878903312a06d4ad86351aa6591294dba4f61b0bb03da317aeef870" }, { "alg" : "SHA-384", - "content" : "2fc41e52f529bcbbe4d8938d262153ee7e7a098d51fc84a2720bade27aff0247af47629c3caa630b706001d769714d1c" + "content" : "e2f0cbd883ee0745e6c27d0cf83c1e48869f89cb444c099e553f25105d7800949b1db37fc5db5055e321fdce8b13ebde" }, { "alg" : "SHA3-384", - "content" : "9ff49c91b6ca5e5ebc8005b6179d171f3bb549b9ef667c694ea6cebe842bccbea1bedb2bab69d97e89270900915f125b" + "content" : "fd0c36a837dd0b756c3622606b1490218cba364f30d148bac78dfee7dbb1117a9f1504a2e0cac8d83cf6cdb17f0ecf7b" }, { "alg" : "SHA3-256", - "content" : "e3794da30f03c61b916aeb9aa2af625792dc7f236bf2bd16cbfffbf3ef186d59" + "content" : "58d572441da65e6c63de352d608a144b280bd3754a06128d1da840494c70ce6b" }, { "alg" : "SHA3-512", - "content" : "1d3bfb11f6cae1912bd5cd04aef53ae725d705e598fafaa185903d2c534ca2f88ad919321ec4bcdca36c9b1515097c5d47aa6868f5bd3b93732337bd564b3bb7" + "content" : "bdbc867b3d2a993b277d19c230f84dd52a8db5f6638f9a90f6d613b9eb7b2f49e3404dc78dba4877fdad3ed5bd255f27be808ec287898c833ee2347ee44a94f4" } ], "licenses" : [ { "license" : { - "id" : "BSD-3-Clause", - "url" : "https://opensource.org/licenses/BSD-3-Clause" + "id" : "Apache-2.0" } } ], - "purl" : "pkg:maven/com.google.protobuf/protobuf-java@3.25.1?type=jar", + "purl" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-toml@2.20.1?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://developers.google.com/protocol-buffers/protobuf-java/" + "url" : "https://github.com/FasterXML/jackson-dataformats-text" }, { "type" : "distribution-intake", - "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" + "url" : "https://central.sonatype.com/api/v1/publisher" + }, + { + "type" : "issue-tracker", + "url" : "https://github.com/FasterXML/jackson-dataformats-text/issues" }, { "type" : "vcs", - "url" : "https://github.com/protocolbuffers/protobuf/protobuf-java" + "url" : "https://github.com/FasterXML/jackson-dataformats-text/jackson-dataformat-toml" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.google.protobuf/protobuf-java@3.25.1?type=jar" + "bom-ref" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-toml@2.20.1?type=jar" }, { - "publisher" : "SonarSource and Waleri Enns", - "group" : "org.sonarsource.python", - "name" : "python-checks", - "version" : "4.17.0.14845", - "description" : "Parent pom of SonarSource public projects", + "publisher" : "FasterXML", + "group" : "com.fasterxml.jackson.datatype", + "name" : "jackson-datatype-jdk8", + "version" : "2.20.1", + "description" : "Add-on module for Jackson (https://github.com/FasterXML/jackson) to support JDK 8 data types.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "077f9306a20f8a6eca092f54a53a26e3" + "content" : "9360afe5a78d29ce5510f670b3286e77" }, { "alg" : "SHA-1", - "content" : "ef43f45c57346b910ac422d7aff2ab4b6fe25894" + "content" : "6a8bbc260ba834f67220117d9f08510d69c4a3f0" }, { "alg" : "SHA-256", - "content" : "7d6e1743538dbfa7310bc54fbb7e511a6fd8633549018d7e2b4ba67019a3123e" + "content" : "6821cdd695e95c4e6853ec855a7432c71f2f4be318b3ca190fbbf8a2e5f981f2" }, { "alg" : "SHA-512", - "content" : "f628f82e470f9af8e0da159464ef41996b5edbbab7ead94db853afc54992d8f155994becbb9acdfe4af46a41fbf5e3ae01ba6b17078d1e20861da5e4eedccafc" + "content" : "9aceae6ea4ac56a038982fc45e91942cc15d68b7e07e044c1e75a71760b2eb02e23a344f36966093be670a2d1f656146492f11148da06a4044b4a5d78e523beb" }, { "alg" : "SHA-384", - "content" : "43302f43c32c5b35c4f7b85e901c457ad7ce7c1d0cc8d891dceb828018d0fa06c09fd7b6a34764f187b0deb8f002db96" + "content" : "c55990a25083046bd3881b656d5fa351e5d2115ce861427cc8bdc64acbf85f9a3ea739f3510eedfc0372f226ed7ebd2a" }, { "alg" : "SHA3-384", - "content" : "2c847248451a6f0874fa6d91dedd203c7492db05161c15235d709e9e9bc6d8ff5900b7c60e0aeea74fb7566cb1a3db3e" + "content" : "9556b354a7fdf5324aa22d6a00b308508bfb55555c2a31ca159c2b9f35f8a3d4e904a7eb15388f6532bb464fcc642db5" }, { "alg" : "SHA3-256", - "content" : "32f3d74c14e3918b8af6c98cc32304cc5d0b835348cd15734033307e4e871d2f" + "content" : "b4018fdef370f16380205cf366a9b84f4721b5ff0a800e72e0a1a23f4a58848a" }, { "alg" : "SHA3-512", - "content" : "2429a23270a66433e76eade81bb8b8acd3d91b55a587c6230ecc1282e71b2fcd61d9867d100fe04b74d387516a7c0df4124d8aa82f300c07a82dba20b4c01920" + "content" : "9f9db93cecb859df97455ddfa61136406700ae786715a3754e0ac9f9993deb9df62c44e08233dcf463e792fcbba9a25e7472e34dba5970d9df7eecf959c71875" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "id" : "Apache-2.0" } } ], - "purl" : "pkg:maven/org.sonarsource.python/python-checks@4.17.0.14845?type=jar", + "purl" : "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.20.1?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://docs.sonarqube.org/display/PLUG/Plugin+Library/python/python-checks" + "url" : "https://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jdk8" }, { - "type" : "build-system", - "url" : "https://cirrus-ci.com/github/SonarSource/sonar-python" + "type" : "distribution-intake", + "url" : "https://central.sonatype.com/api/v1/publisher" }, { "type" : "issue-tracker", - "url" : "https://jira.sonarsource.com/browse/SONARPY" - }, - { - "type" : "mailing-list", - "url" : "https://community.sonarsource.com" + "url" : "https://github.com/FasterXML/jackson-modules-java8/issues" }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-python/python-checks" + "url" : "http://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jdk8" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.python/python-checks@4.17.0.14845?type=jar" + "bom-ref" : "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.20.1?type=jar" }, { "publisher" : "The Apache Software Foundation", - "group" : "commons-lang", - "name" : "commons-lang", - "version" : "2.6", - "description" : "Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.", + "group" : "org.apache.commons", + "name" : "commons-text", + "version" : "1.14.0", + "description" : "Apache Commons Text is a set of utility functions and reusable components for processing and manipulating text in a Java environment.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "4d5c1693079575b362edf41500630bbd" + "content" : "54960a12a82d52df3d5548d6934d87b2" }, { "alg" : "SHA-1", - "content" : "0ce1edb914c94ebc388f086c6827e8bdeec71ac2" + "content" : "adcb0d4c67eabc79682604b47eb852aaff21138a" }, { "alg" : "SHA-256", - "content" : "50f11b09f877c294d56f24463f47d28f929cf5044f648661c0f0cfbae9a2f49c" + "content" : "121fce2282910c8f0c3ba793a5436b31beb710423cbe2d574a3fb7a73c508e92" }, { "alg" : "SHA-512", - "content" : "4a5a3dbe4941c645e2cca068cca5c1882cfe988b02e7cd981d1e51784900767d1deab0e0e0566f559c9fcabb4a180e436d5bb948902d4f4106f37360466afb42" + "content" : "4975879372241025bd0a47fe540ed7d0cd3e5eba474b12af67a8c6016be0fbb4f4a3a4a0064f4d2b6aebce67d88ee814da345a5ba3a6ee4f6293b3b4e7bbd065" }, { "alg" : "SHA-384", - "content" : "9725bc421adc1dbcd6f937eca0f3075d186a2b353ece4cef66b0fe81bb8d3f7d7641c43e86d657ef526c719f0c2a8c90" + "content" : "a038f1a8b58bb7ec17ba55238d3e40f5d9386dfb17870630a728b22741a9592819374e9abbbc6402a439eea4db5b739a" }, { "alg" : "SHA3-384", - "content" : "4bc4eaaf2580ded6d552b96ae5261c936de95f69a1d137c47279c51bf2aa1406ae44f69ccc94486267b8441e53c4bd74" + "content" : "5325922bb72aa73d2d51cb3fb5592fc77097614fd3ab3ac77e3acdc0fe1dc8c18893cdd9a05768bb725fa40dd8c14527" }, { "alg" : "SHA3-256", - "content" : "b68d49ef037d428ea0c3e67a7a20f3d68a134bef30a1639ec08d28886b9f5629" + "content" : "31008266592ec8503bcc7f6b4e7125b0e377f57f3a697cdcb02ee7f20f84ddf1" }, { "alg" : "SHA3-512", - "content" : "2e9ffc0608827cffc0b48b7a0f35d371c66586c99fea2910f7c2a237c7c57d9ae4d65de7c8e018362c2e4f963c2f70a9196cebf35457f1dd0cea6c65c256f673" + "content" : "385249425d8c6ab181039195a03c6337f393a1e1419527e9f072d695367bc0bd6546e752d1912df557bd8788329f7609aa1c63ce42eb135e2d27b6141ce9280f" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0" + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], - "purl" : "pkg:maven/commons-lang/commons-lang@2.6?type=jar", + "purl" : "pkg:maven/org.apache.commons/commons-text@1.14.0?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://commons.apache.org/lang/" + "url" : "https://commons.apache.org/proper/commons-text" }, { "type" : "build-system", - "url" : "http://vmbuild.apache.org/continuum/" + "url" : "https://github.com/apache/commons-text/actions" }, { "type" : "distribution-intake", @@ -2896,19 +3150,19 @@ }, { "type" : "issue-tracker", - "url" : "http://issues.apache.org/jira/browse/LANG" + "url" : "https://issues.apache.org/jira/browse/TEXT" }, { "type" : "mailing-list", - "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/" + "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/" }, { "type" : "vcs", - "url" : "http://svn.apache.org/viewvc/commons/proper/lang/branches/LANG_2_X" + "url" : "https://gitbox.apache.org/repos/asf?p=commons-text.git" } ], "type" : "library", - "bom-ref" : "pkg:maven/commons-lang/commons-lang@2.6?type=jar" + "bom-ref" : "pkg:maven/org.apache.commons/commons-text@1.14.0?type=jar" }, { "publisher" : "Codehaus", @@ -3107,55 +3361,119 @@ "type" : "library", "bom-ref" : "pkg:maven/org.codehaus.woodstox/stax2-api@3.1.4?type=jar" }, + { + "publisher" : "SonarSource", + "group" : "org.sonarsource.go", + "name" : "sonar-go-plugin", + "version" : "1.32.0.5128", + "description" : "Code Analyzer for Go", + "scope" : "required", + "hashes" : [ + { + "alg" : "MD5", + "content" : "ea2de97a8b1020865b993afe78aff72f" + }, + { + "alg" : "SHA-1", + "content" : "daa3ce9acfba33b2dba823c64d72bf3a0fa2b25d" + }, + { + "alg" : "SHA-256", + "content" : "7ad9dd5e478be53d58ad12d060f0e4aaa5e5eb9f5fcb28411c8083da2d5e0b19" + }, + { + "alg" : "SHA-512", + "content" : "3176550be29c19e7fb8b90b6993b29f3b8b4b51ddfa4509bab6de91edc4d7b40e3384dc48df7731262cb671379d2c4163eef78565389a391a43d450dcba56996" + }, + { + "alg" : "SHA-384", + "content" : "b1e7333047001ad10c6058a5ede6bc27651bae3335c0faadc1a6bda3ba1b66b90f45aec62389eaa9ec41eba836dc0d52" + }, + { + "alg" : "SHA3-384", + "content" : "18184263d523ab59b12019479a129e608f201e2c096745e869d72e029c78d41409d64934307b1f1a343ab0e1475978f3" + }, + { + "alg" : "SHA3-256", + "content" : "3fddc018fee60147c78382440a963bf6812bf496bb1d25090b50475e185a0844" + }, + { + "alg" : "SHA3-512", + "content" : "c1fc155244473f90fcc327f33055b06cb2fb35a203421b832f627d12150d851640a407a84dd47498b372ad0337bb1881ffa8aeab9fec85cb5e04b924989c5db5" + } + ], + "licenses" : [ + { + "license" : { + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" + } + } + ], + "purl" : "pkg:maven/org.sonarsource.go/sonar-go-plugin@1.32.0.5128?type=jar", + "externalReferences" : [ + { + "type" : "website", + "url" : "http://www.sonarqube.org/" + }, + { + "type" : "vcs", + "url" : "https://github.com/SonarSource/sonar-go" + } + ], + "type" : "library", + "bom-ref" : "pkg:maven/org.sonarsource.go/sonar-go-plugin@1.32.0.5128?type=jar" + }, { "publisher" : "The Apache Software Foundation", "group" : "commons-io", "name" : "commons-io", - "version" : "2.11.0", + "version" : "2.20.0", "description" : "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "3b4b7ccfaeceeac240b804839ee1a1ca" + "content" : "94e7e6b9b5fe82388687b584d3571081" }, { "alg" : "SHA-1", - "content" : "a2503f302b11ebde7ebc3df41daebe0e4eea3689" + "content" : "36f3474daec2849c149e877614e7f979b2082cd2" }, { "alg" : "SHA-256", - "content" : "961b2f6d87dbacc5d54abf45ab7a6e2495f89b75598962d8c723cea9bc210908" + "content" : "df90bba0fe3cb586b7f164e78fe8f8f4da3f2dd5c27fa645f888100ccc25dd72" }, { "alg" : "SHA-512", - "content" : "5bd78eed456ede30119319c5bed8e3e4c443b6fd7bdb3a7a5686647bd83094d0c3e2832a7575cfb60e4ef25f08106b93476939d3adcfecf5533cc030b3039e10" + "content" : "fea08e150473673b0608eaee3ae1cb4e73834039db80d3b758710d6baf3a5840a0878a4eb64739ae9bb21ccc7148c8520fe873616a3f6d5cdb4305deabdd015c" }, { "alg" : "SHA-384", - "content" : "114f1e324d90ad887c177876d410f5787a8e8da6c48d4b2862d365802c0efded3a88cb24046976bf6276cadad3712f0f" + "content" : "22db5e18e3512ed44474e75a124a052d5a1a6f35ce458f6a201a5ccc9510c57c10c117dba80ac6ce91745cf2b51e63f2" }, { "alg" : "SHA3-384", - "content" : "80288c03ad4d80d69f91d056ffc5570d49a9c76bf54ad2dff0121ecde26a560df76d05156f281f5c6db2a38ff07a873d" + "content" : "a70700d24df3c276ff387c359e0e940b834e413b72a49917de9a82615836eca8cca1bee1ed71790606c795da795e9151" }, { "alg" : "SHA3-256", - "content" : "5adfb5ccaf5f21a549422f426118a9542673926fcd18c68390cf813e791dcf6c" + "content" : "a8d044d3a4a069d0f20d24112b6427a3a6f02a925b31b932721d1f545ff32cec" }, { "alg" : "SHA3-512", - "content" : "7573f47f0babb53cefdc7c2309a0b982d800139064537b0797da442853d081010ad7c3c74a500598a0f800639a5d540eca21963ea652c68613907059bd4278c2" + "content" : "3417bf811d7e5fc1e71b8540f3379751434ea8540c421ff2c8bb5f5ce34401cd0ad8a829b65aa55e055c57141181762c4827099352c2bba453e48ad2df67526a" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0" + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], - "purl" : "pkg:maven/commons-io/commons-io@2.11.0?type=jar", + "purl" : "pkg:maven/commons-io/commons-io@2.20.0?type=jar", "externalReferences" : [ { "type" : "website", @@ -3163,7 +3481,7 @@ }, { "type" : "build-system", - "url" : "https://builds.apache.org/" + "url" : "https://github.com/apache/commons-io/actions" }, { "type" : "distribution-intake", @@ -3183,47 +3501,47 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/commons-io/commons-io@2.11.0?type=jar" + "bom-ref" : "pkg:maven/commons-io/commons-io@2.20.0?type=jar" }, { "publisher" : "Google Inc.", "group" : "com.google.googlejavaformat", "name" : "google-java-format", - "version" : "1.22.0", + "version" : "1.28.0", "description" : "A Java source code formatter that follows Google Java Style.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "fd1fbd4edf5d8eaca565217ff981b94b" + "content" : "8e2d4037e876b608ab0356477b5ead98" }, { "alg" : "SHA-1", - "content" : "6e31a0877a51e91076c857794a0b1df7af876b2d" + "content" : "f57d0ad670cc32c4d4a4ffb2cbef44a3dfddeecd" }, { "alg" : "SHA-256", - "content" : "4f4bdba0f2a3d7e84be47683a0c2a4ba69024d29d906d09784181f68f04af792" + "content" : "41dfe4d1012794ed15e0ffd70f89fd4fa65d5f15ce0bc0c70f8c2c127d6d010d" }, { "alg" : "SHA-512", - "content" : "d2006def13e5144e12568298014a23c86299a62e2bb7757c63f5f25405b1adb6f60b3f2f54bed9583cdd24cae71088e9f7aa846a10a089cce2a25972e48c7649" + "content" : "87bf18026e543bc9135d58153f05b8bf58b48bd59cec96e774e3f68bc8d601b9789924a9917b9a4f57b8a69bbe24dd20aef0a65543a63e7101b39317469346d2" }, { "alg" : "SHA-384", - "content" : "4aed1de35a09b196347064d45a5996fd7467c9b5cca0faf4655cbeb756053810cd3af2e45d74401aee626e30b1693ca7" + "content" : "bfd9e42e51d696fa079aa12d3541645873724ce48989615723533aba58fc3e4f77a37e9102bad2b391dc0252b449bad9" }, { "alg" : "SHA3-384", - "content" : "28fc6265d1886418ca44d1c7eea8709a2f38ba5b3f8cedb6a44d1a36f676e533662b61105db8b8d1f69fc4796fbcc8bd" + "content" : "b48a456db7981843ffc51f60511d4a5d52072bbe89da4dda6560cee4414493236e94ad1af4c5564449fb000501ca6ef4" }, { "alg" : "SHA3-256", - "content" : "08098285fccec01b2f3fce2e46ac210deb79862f21cb4ae96ff3a1a040df0809" + "content" : "ae18cf36a9212cdb243e3900cca7f9059273dfdf227fb97a189b5ae84cc989e4" }, { "alg" : "SHA3-512", - "content" : "122e32ab36408a79ed1153660ab1ba7639212d30921ea022da9affc19f76c5d874241a8584fc5c992ce74d2f01c2e06fddc784aee11c6d4238fc645ade3a1880" + "content" : "ac1207d9b7d8be02a222d1f11b44a5bcf1d95924404926698c8f23ba3688cfc49fc81e594e4f48d03ebbbf0ccc638706433ed462499b5b4d083538eb7e37541e" } ], "licenses" : [ @@ -3233,16 +3551,12 @@ } } ], - "purl" : "pkg:maven/com.google.googlejavaformat/google-java-format@1.22.0?type=jar", + "purl" : "pkg:maven/com.google.googlejavaformat/google-java-format@1.28.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/google/google-java-format/google-java-format" }, - { - "type" : "distribution-intake", - "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" - }, { "type" : "issue-tracker", "url" : "http://github.com/google/google-java-format/issues" @@ -3253,7 +3567,7 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/com.google.googlejavaformat/google-java-format@1.22.0?type=jar" + "bom-ref" : "pkg:maven/com.google.googlejavaformat/google-java-format@1.28.0?type=jar" }, { "group" : "com.google.guava", @@ -3535,68 +3849,6 @@ "type" : "library", "bom-ref" : "pkg:maven/org.checkerframework/checker-qual@3.37.0?type=jar" }, - { - "publisher" : "Google LLC", - "group" : "com.google.errorprone", - "name" : "error_prone_annotations", - "version" : "2.21.1", - "description" : "Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.", - "scope" : "required", - "hashes" : [ - { - "alg" : "MD5", - "content" : "75fe4fe33d308dd6cee3b601de902d27" - }, - { - "alg" : "SHA-1", - "content" : "6d9b10773b5237df178a7b3c1b4208df7d0e7f94" - }, - { - "alg" : "SHA-256", - "content" : "d1f3c66aa91ac52549e00ae3b208ba4b9af7d72d68f230643553beb38e6118ac" - }, - { - "alg" : "SHA-512", - "content" : "530318bcdf1ed8eeee408fc5a0775f1792cbf012b4ec55217a4498c8d2983b230a4d071b9e115565b0411faa51dd938823d9b619beb6786212c375ad3d1ebd8a" - }, - { - "alg" : "SHA-384", - "content" : "88e628431966a9b5cc19f96159874cefde1558e51d2ce233a0c2d47914eb9c6256f95882605a87cc6629a21ff70b72b4" - }, - { - "alg" : "SHA3-384", - "content" : "ebc750b211532fef9a84c3682d47f00b877e4082716ead1f4f883f02ab35bda8d5acfc475722215c4fe6ed9cfd54f43a" - }, - { - "alg" : "SHA3-256", - "content" : "9b4f193bf2f541844c6b1b5cf2d1c7f6e9465b97804d155f34530b203184e1ae" - }, - { - "alg" : "SHA3-512", - "content" : "1d76781cef387a185fd4fb69960394556062969bbbe0be74d0fb11f7c73758e5d35ff546ab04f6382c21c63705a1ffb975a549bf4d846fde54e412ecd4641485" - } - ], - "licenses" : [ - { - "license" : { - "id" : "Apache-2.0" - } - } - ], - "purl" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.21.1?type=jar", - "externalReferences" : [ - { - "type" : "website", - "url" : "https://errorprone.info/error_prone_annotations" - }, - { - "type" : "vcs", - "url" : "https://github.com/google/error-prone/error_prone_annotations" - } - ], - "type" : "library", - "bom-ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.21.1?type=jar" - }, { "group" : "com.google.j2objc", "name" : "j2objc-annotations", @@ -3665,109 +3917,103 @@ ], "dependencies" : [ { - "ref" : "pkg:maven/com.ibm/enricher@1.0.3-SNAPSHOT?type=jar", + "ref" : "pkg:maven/com.ibm/enricher@2.0.0-SNAPSHOT?type=jar", "dependsOn" : [ - "pkg:maven/com.ibm/mapper@1.0.3-SNAPSHOT?type=jar", - "pkg:maven/org.jetbrains/annotations@24.1.0?type=jar", - "pkg:maven/org.sonarsource.api.plugin/sonar-plugin-api@9.13.0.360?type=jar", - "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", - "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar", - "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar", - "pkg:maven/org.sonarsource.java/sonar-java-plugin@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.python/sonar-python-plugin@4.17.0.14845?type=jar", - "pkg:maven/com.google.googlejavaformat/google-java-format@1.22.0?type=jar" + "pkg:maven/com.ibm/mapper@2.0.0-SNAPSHOT?type=jar", + "pkg:maven/org.sonarsource.api.plugin/sonar-plugin-api@13.4.3.4290?type=jar", + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", + "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar", + "pkg:maven/org.sonarsource.java/sonar-java-plugin@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.python/sonar-python-plugin@5.16.0.29940?type=jar", + "pkg:maven/org.sonarsource.go/sonar-go-plugin@1.32.0.5128?type=jar", + "pkg:maven/com.google.googlejavaformat/google-java-format@1.28.0?type=jar" ] }, { - "ref" : "pkg:maven/com.ibm/mapper@1.0.3-SNAPSHOT?type=jar", + "ref" : "pkg:maven/com.ibm/mapper@2.0.0-SNAPSHOT?type=jar", "dependsOn" : [ - "pkg:maven/com.ibm/engine@1.0.3-SNAPSHOT?type=jar", - "pkg:maven/org.jetbrains/annotations@24.1.0?type=jar", - "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", - "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar", - "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar", - "pkg:maven/org.sonarsource.java/sonar-java-plugin@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.python/sonar-python-plugin@4.17.0.14845?type=jar", - "pkg:maven/com.google.googlejavaformat/google-java-format@1.22.0?type=jar" + "pkg:maven/com.ibm/engine@2.0.0-SNAPSHOT?type=jar", + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", + "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar", + "pkg:maven/org.sonarsource.java/sonar-java-plugin@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.python/sonar-python-plugin@5.16.0.29940?type=jar", + "pkg:maven/org.sonarsource.go/sonar-go-plugin@1.32.0.5128?type=jar", + "pkg:maven/com.google.googlejavaformat/google-java-format@1.28.0?type=jar" ] }, { - "ref" : "pkg:maven/com.ibm/engine@1.0.3-SNAPSHOT?type=jar", + "ref" : "pkg:maven/com.ibm/engine@2.0.0-SNAPSHOT?type=jar", "dependsOn" : [ - "pkg:maven/com.ibm/common@1.0.3-SNAPSHOT?type=jar", - "pkg:maven/org.jetbrains/annotations@24.1.0?type=jar", - "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", - "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar", - "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar", - "pkg:maven/org.sonarsource.java/sonar-java-plugin@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.python/sonar-python-plugin@4.17.0.14845?type=jar", - "pkg:maven/com.google.googlejavaformat/google-java-format@1.22.0?type=jar" + "pkg:maven/com.ibm/common@2.0.0-SNAPSHOT?type=jar", + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", + "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar", + "pkg:maven/org.sonarsource.java/sonar-java-plugin@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.python/sonar-python-plugin@5.16.0.29940?type=jar", + "pkg:maven/org.sonarsource.go/sonar-go-plugin@1.32.0.5128?type=jar", + "pkg:maven/com.google.googlejavaformat/google-java-format@1.28.0?type=jar" ] }, { - "ref" : "pkg:maven/com.ibm/common@1.0.3-SNAPSHOT?type=jar", + "ref" : "pkg:maven/com.ibm/common@2.0.0-SNAPSHOT?type=jar", "dependsOn" : [ - "pkg:maven/org.jetbrains/annotations@24.1.0?type=jar", - "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", - "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar", - "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar", - "pkg:maven/org.sonarsource.java/sonar-java-plugin@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.python/sonar-python-plugin@4.17.0.14845?type=jar", - "pkg:maven/com.google.googlejavaformat/google-java-format@1.22.0?type=jar" + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", + "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar", + "pkg:maven/org.sonarsource.java/sonar-java-plugin@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.python/sonar-python-plugin@5.16.0.29940?type=jar", + "pkg:maven/org.sonarsource.go/sonar-go-plugin@1.32.0.5128?type=jar", + "pkg:maven/com.google.googlejavaformat/google-java-format@1.28.0?type=jar" ] }, { - "ref" : "pkg:maven/org.jetbrains/annotations@24.1.0?type=jar", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", + "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar", - "dependsOn" : [ ] + "ref" : "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar", + "dependsOn" : [ + "pkg:maven/com.google.errorprone/error_prone_annotations@2.41.0?type=jar" + ] }, { - "ref" : "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar", + "ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.41.0?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/org.sonarsource.java/sonar-java-plugin@7.33.0.35775?type=jar", + "ref" : "pkg:maven/org.sonarsource.java/sonar-java-plugin@8.18.0.40025?type=jar", "dependsOn" : [ - "pkg:maven/org.sonarsource.java/java-surefire@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.java/java-frontend@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.java/java-symbolic-execution@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.java/java-checks@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.java/java-checks-aws@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.java/external-reports@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.java/java-jsp@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.8.0.2699?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.8.0.2699?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.8.0.2699?type=jar" + "pkg:maven/org.sonarsource.java/java-surefire@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.java/java-frontend@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.java/java-checks@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.java/java-checks-aws@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.java/check-list@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.java/external-reports@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.java/java-jsp@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.18.0.3393?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.18.0.3393?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.18.0.3393?type=jar" ] }, { - "ref" : "pkg:maven/org.sonarsource.java/java-surefire@7.33.0.35775?type=jar", + "ref" : "pkg:maven/org.sonarsource.java/java-surefire@8.18.0.40025?type=jar", "dependsOn" : [ - "pkg:maven/org.sonarsource.java/java-frontend@7.33.0.35775?type=jar", + "pkg:maven/org.sonarsource.java/java-frontend@8.18.0.40025?type=jar", "pkg:maven/com.fasterxml.staxmate/staxmate@2.4.1?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.8.0.2699?type=jar" + "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.18.0.3393?type=jar" ] }, { - "ref" : "pkg:maven/org.sonarsource.java/java-frontend@7.33.0.35775?type=jar", + "ref" : "pkg:maven/org.sonarsource.java/java-frontend@8.18.0.40025?type=jar", "dependsOn" : [ - "pkg:maven/org.sonarsource.java/jdt-package@1.1.0.34?type=jar", + "pkg:maven/org.sonarsource.java/jdt-package@1.6.0.160?type=jar", "pkg:maven/org.sonarsource.sslr/sslr-core@1.24.0.633?type=jar", - "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.8.0.2699?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.8.0.2699?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.8.0.2699?type=jar" + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.18.0.3393?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.18.0.3393?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.18.0.3393?type=jar" ] }, { - "ref" : "pkg:maven/org.sonarsource.java/jdt-package@1.1.0.34?type=jar", + "ref" : "pkg:maven/org.sonarsource.java/jdt-package@1.6.0.160?type=jar", "dependsOn" : [ ] }, { @@ -3777,20 +4023,24 @@ ] }, { - "ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.8.0.2699?type=jar", + "ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", + "dependsOn" : [ ] + }, + { + "ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.18.0.3393?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.8.0.2699?type=jar", + "ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.18.0.3393?type=jar", "dependsOn" : [ "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar" ] }, { - "ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.8.0.2699?type=jar", + "ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.18.0.3393?type=jar", "dependsOn" : [ "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", - "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar" + "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar" ] }, { @@ -3804,7 +4054,7 @@ "dependsOn" : [ ] }, { - "ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.8.0.2699?type=jar", + "ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.18.0.3393?type=jar", "dependsOn" : [ "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", "pkg:maven/xerces/xercesImpl@2.12.2?type=jar", @@ -3829,117 +4079,97 @@ ] }, { - "ref" : "pkg:maven/org.sonarsource.java/java-symbolic-execution@7.33.0.35775?type=jar", - "dependsOn" : [ - "pkg:maven/org.sonarsource.java/java-frontend@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.8.0.2699?type=jar" - ] - }, - { - "ref" : "pkg:maven/org.sonarsource.java/java-checks@7.33.0.35775?type=jar", + "ref" : "pkg:maven/org.sonarsource.java/java-checks@8.18.0.40025?type=jar", "dependsOn" : [ - "pkg:maven/org.sonarsource.java/java-frontend@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.java/java-checks-common@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.java/java-symbolic-execution@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.8.0.2699?type=jar", - "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar", - "pkg:maven/org.springframework/spring-expression@6.1.5?type=jar" + "pkg:maven/org.sonarsource.java/java-frontend@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.java/java-checks-common@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.18.0.3393?type=jar", + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", + "pkg:maven/org.springframework/spring-expression@6.1.21?type=jar" ] }, { - "ref" : "pkg:maven/org.sonarsource.java/java-checks-common@7.33.0.35775?type=jar", + "ref" : "pkg:maven/org.sonarsource.java/java-checks-common@8.18.0.40025?type=jar", "dependsOn" : [ - "pkg:maven/org.sonarsource.java/java-frontend@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.8.0.2699?type=jar", - "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar" + "pkg:maven/org.sonarsource.java/java-frontend@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.18.0.3393?type=jar", + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar" ] }, { - "ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.8.0.2699?type=jar", + "ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.18.0.3393?type=jar", "dependsOn" : [ "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar" ] }, { - "ref" : "pkg:maven/org.springframework/spring-expression@6.1.5?type=jar", + "ref" : "pkg:maven/org.springframework/spring-expression@6.1.21?type=jar", "dependsOn" : [ - "pkg:maven/org.springframework/spring-core@6.1.5?type=jar" + "pkg:maven/org.springframework/spring-core@6.1.21?type=jar" ] }, { - "ref" : "pkg:maven/org.springframework/spring-core@6.1.5?type=jar", + "ref" : "pkg:maven/org.springframework/spring-core@6.1.21?type=jar", "dependsOn" : [ - "pkg:maven/org.springframework/spring-jcl@6.1.5?type=jar" + "pkg:maven/org.springframework/spring-jcl@6.1.21?type=jar" ] }, { - "ref" : "pkg:maven/org.springframework/spring-jcl@6.1.5?type=jar", + "ref" : "pkg:maven/org.springframework/spring-jcl@6.1.21?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/org.sonarsource.java/java-checks-aws@7.33.0.35775?type=jar", - "dependsOn" : [ - "pkg:maven/org.sonarsource.java/java-frontend@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.java/java-checks-common@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.8.0.2699?type=jar", - "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar" - ] - }, - { - "ref" : "pkg:maven/org.sonarsource.java/external-reports@7.33.0.35775?type=jar", + "ref" : "pkg:maven/org.sonarsource.java/java-checks-aws@8.18.0.40025?type=jar", "dependsOn" : [ - "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.8.0.2699?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.8.0.2699?type=jar" + "pkg:maven/org.sonarsource.java/java-frontend@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.java/java-checks-common@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.18.0.3393?type=jar", + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar" ] }, { - "ref" : "pkg:maven/org.sonarsource.java/java-jsp@7.33.0.35775?type=jar", + "ref" : "pkg:maven/org.sonarsource.java/check-list@8.18.0.40025?type=jar", "dependsOn" : [ - "pkg:maven/org.sonarsource.java/java-frontend@7.33.0.35775?type=jar", - "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@9.0.84?type=jar" + "pkg:maven/org.sonarsource.java/java-checks@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.java/java-checks-aws@8.18.0.40025?type=jar", + "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar" ] }, { - "ref" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@9.0.84?type=jar", + "ref" : "pkg:maven/org.sonarsource.java/external-reports@8.18.0.40025?type=jar", "dependsOn" : [ - "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.84?type=jar", - "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.84?type=jar" + "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.18.0.3393?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.18.0.3393?type=jar" ] }, { - "ref" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.84?type=jar", + "ref" : "pkg:maven/org.sonarsource.java/java-jsp@8.18.0.40025?type=jar", "dependsOn" : [ - "pkg:maven/org.apache.tomcat/tomcat-annotations-api@9.0.84?type=jar" + "pkg:maven/org.sonarsource.java/java-frontend@8.18.0.40025?type=jar" ] }, { - "ref" : "pkg:maven/org.apache.tomcat/tomcat-annotations-api@9.0.84?type=jar", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.84?type=jar", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:maven/org.sonarsource.python/sonar-python-plugin@4.17.0.14845?type=jar", + "ref" : "pkg:maven/org.sonarsource.python/sonar-python-plugin@5.16.0.29940?type=jar", "dependsOn" : [ - "pkg:maven/org.sonarsource.python/python-frontend@4.17.0.14845?type=jar", - "pkg:maven/org.sonarsource.python/python-checks@4.17.0.14845?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.8.0.2699?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.8.0.2699?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.8.0.2699?type=jar", - "pkg:maven/commons-lang/commons-lang@2.6?type=jar", + "pkg:maven/org.sonarsource.python/python-frontend@5.16.0.29940?type=jar", + "pkg:maven/org.sonarsource.python/python-checks@5.16.0.29940?type=jar", + "pkg:maven/org.sonarsource.python/python-commons@5.16.0.29940?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.18.0.3393?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.18.0.3393?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.18.0.3393?type=jar", + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", "pkg:maven/org.codehaus.staxmate/staxmate@2.0.1?type=jar" ] }, { - "ref" : "pkg:maven/org.sonarsource.python/python-frontend@4.17.0.14845?type=jar", + "ref" : "pkg:maven/org.sonarsource.python/python-frontend@5.16.0.29940?type=jar", "dependsOn" : [ "pkg:maven/org.sonarsource.sslr/sslr-core@1.24.0.633?type=jar", "pkg:maven/com.google.guava/guava@32.1.3-jre?type=jar", - "pkg:maven/com.google.protobuf/protobuf-java@3.25.1?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.8.0.2699?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.8.0.2699?type=jar" + "pkg:maven/com.google.protobuf/protobuf-java@4.29.0?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.18.0.3393?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.18.0.3393?type=jar", + "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1?type=jar" ] }, { @@ -3949,7 +4179,7 @@ "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar", "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", "pkg:maven/org.checkerframework/checker-qual@3.37.0?type=jar", - "pkg:maven/com.google.errorprone/error_prone_annotations@2.21.1?type=jar", + "pkg:maven/com.google.errorprone/error_prone_annotations@2.41.0?type=jar", "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar" ] }, @@ -3966,33 +4196,75 @@ "dependsOn" : [ ] }, { - "ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.21.1?type=jar", + "ref" : "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar", + "ref" : "pkg:maven/com.google.protobuf/protobuf-java@4.29.0?type=jar", + "dependsOn" : [ ] + }, + { + "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1?type=jar", + "dependsOn" : [ + "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.20?type=jar", + "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.1?type=jar" + ] + }, + { + "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.20?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/com.google.protobuf/protobuf-java@3.25.1?type=jar", + "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.1?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/org.sonarsource.python/python-checks@4.17.0.14845?type=jar", + "ref" : "pkg:maven/org.sonarsource.python/python-checks@5.16.0.29940?type=jar", "dependsOn" : [ - "pkg:maven/org.sonarsource.python/python-frontend@4.17.0.14845?type=jar", - "pkg:maven/commons-io/commons-io@2.11.0?type=jar", - "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.8.0.2699?type=jar" + "pkg:maven/org.sonarsource.python/python-frontend@5.16.0.29940?type=jar", + "pkg:maven/commons-io/commons-io@2.20.0?type=jar", + "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.18.0.3393?type=jar" ] }, { - "ref" : "pkg:maven/commons-io/commons-io@2.11.0?type=jar", + "ref" : "pkg:maven/commons-io/commons-io@2.20.0?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/commons-lang/commons-lang@2.6?type=jar", - "dependsOn" : [ ] + "ref" : "pkg:maven/org.sonarsource.python/python-commons@5.16.0.29940?type=jar", + "dependsOn" : [ + "pkg:maven/org.sonarsource.python/python-frontend@5.16.0.29940?type=jar", + "pkg:maven/org.sonarsource.python/python-checks@5.16.0.29940?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.18.0.3393?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.18.0.3393?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.18.0.3393?type=jar", + "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-toml@2.20.1?type=jar", + "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.20.1?type=jar", + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", + "pkg:maven/org.apache.commons/commons-text@1.14.0?type=jar", + "pkg:maven/org.codehaus.staxmate/staxmate@2.0.1?type=jar" + ] + }, + { + "ref" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-toml@2.20.1?type=jar", + "dependsOn" : [ + "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1?type=jar", + "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.1?type=jar" + ] + }, + { + "ref" : "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.20.1?type=jar", + "dependsOn" : [ + "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.1?type=jar", + "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1?type=jar" + ] + }, + { + "ref" : "pkg:maven/org.apache.commons/commons-text@1.14.0?type=jar", + "dependsOn" : [ + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar" + ] }, { "ref" : "pkg:maven/org.codehaus.staxmate/staxmate@2.0.1?type=jar", @@ -4006,13 +4278,23 @@ "dependsOn" : [ ] }, { - "ref" : "pkg:maven/com.google.googlejavaformat/google-java-format@1.22.0?type=jar", + "ref" : "pkg:maven/org.sonarsource.go/sonar-go-plugin@1.32.0.5128?type=jar", + "dependsOn" : [ ] + }, + { + "ref" : "pkg:maven/com.google.googlejavaformat/google-java-format@1.28.0?type=jar", "dependsOn" : [ "pkg:maven/com.google.guava/guava@32.1.3-jre?type=jar" ] }, { - "ref" : "pkg:maven/org.sonarsource.api.plugin/sonar-plugin-api@9.13.0.360?type=jar", + "ref" : "pkg:maven/org.sonarsource.api.plugin/sonar-plugin-api@13.4.3.4290?type=jar", + "dependsOn" : [ + "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar" + ] + }, + { + "ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar", "dependsOn" : [ ] } ] diff --git a/go/src/main/java/com/ibm/plugin/CryptoGoSensor.java b/go/src/main/java/com/ibm/plugin/CryptoGoSensor.java index 981940a0..9bb0c1c1 100644 --- a/go/src/main/java/com/ibm/plugin/CryptoGoSensor.java +++ b/go/src/main/java/com/ibm/plugin/CryptoGoSensor.java @@ -29,7 +29,6 @@ import java.util.stream.Collectors; import java.util.stream.StreamSupport; import javax.annotation.Nonnull; -import org.checkerframework.checker.nullness.qual.NonNull; import org.slf4j.Logger; import org.slf4j.LoggerFactory; import org.sonar.api.batch.fs.FileSystem; @@ -85,7 +84,7 @@ public class CryptoGoSensor implements Sensor { private final GoChecks checks; private final GoConverter goConverter; - public CryptoGoSensor(CheckFactory checkFactory, TempFolder tempFolder) { + public CryptoGoSensor(@Nonnull CheckFactory checkFactory, @Nonnull TempFolder tempFolder) { this.checks = new GoChecks(checkFactory) .addChecks(GoScannerRuleDefinition.REPOSITORY_KEY, GoRuleList.getChecks()); @@ -93,14 +92,18 @@ public CryptoGoSensor(CheckFactory checkFactory, TempFolder tempFolder) { } @Override - public void describe(SensorDescriptor descriptor) { + public void describe(@Nonnull SensorDescriptor descriptor) { descriptor.onlyOnLanguage("go").name("Cryptography for Go"); } @Override - public void execute(@NonNull SensorContext context) { - durationStatistics = new DurationStatistics(context.config()); - memoryMonitor = new MemoryMonitor(context.config()); + public void execute(@Nonnull SensorContext context) { + execute(context, this.goConverter, this.checks); + } + + public static void execute( + @Nonnull SensorContext context, GoConverter goConverter, GoChecks checks) { + DurationStatistics durationStatistics = new DurationStatistics(context.config()); Collection activeChecks = checks.all(); if (activeChecks.isEmpty()) { @@ -132,9 +135,15 @@ public void execute(@NonNull SensorContext context) { boolean success = false; try { - var visitors = visitors(durationStatistics, goModFileDataStore); + // Only run ChecksVisitor with our crypto checks. + // Other visitors (SymbolVisitor, CpdVisitor, SyntaxHighlighter, + // IssueSuppressionVisitor) + // are handled by the official sonar-go sensor and would cause NoSuchMethodError due to + // shading conflicts between internal types and API types. + List> visitors = + List.of(new ChecksVisitor(checks, durationStatistics, goModFileDataStore)); success = - analyseFiles( + CryptoGoSensor.analyseFiles( converter, context, inputFiles, @@ -152,17 +161,7 @@ public void execute(@NonNull SensorContext context) { } } - @Nonnull - private List> visitors( - DurationStatistics statistics, GoModFileDataStore goModFileDataStore) { - // Only run ChecksVisitor with our crypto checks. - // Other visitors (SymbolVisitor, CpdVisitor, SyntaxHighlighter, IssueSuppressionVisitor) - // are handled by the official sonar-go sensor and would cause NoSuchMethodError due to - // shading conflicts between internal types and API types. - return List.of(new ChecksVisitor(checks, statistics, goModFileDataStore)); - } - - protected boolean analyseFiles( + static boolean analyseFiles( ASTConverter converter, @Nonnull SensorContext sensorContext, @Nonnull List inputFiles, diff --git a/java/bom/bom.json b/java/bom/bom.json index 9811101e..1fb08003 100644 --- a/java/bom/bom.json +++ b/java/bom/bom.json @@ -1,10 +1,10 @@ { "bomFormat" : "CycloneDX", "specVersion" : "1.5", - "serialNumber" : "urn:uuid:8a42e8c5-81c3-32d7-8d4e-e0125a8539f9", + "serialNumber" : "urn:uuid:8095cadb-a809-3c85-b41e-5bae7de618b9", "version" : 1, "metadata" : { - "timestamp" : "2024-04-12T08:16:58Z", + "timestamp" : "2026-01-28T14:17:36Z", "lifecycles" : [ { "phase" : "build" @@ -52,32 +52,32 @@ } ], "component" : { - "publisher" : "IBM", + "publisher" : "cbomkit", "group" : "com.ibm", "name" : "java", - "version" : "1.0.3-SNAPSHOT", + "version" : "2.0.0-SNAPSHOT", "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "https://www.gnu.org/licenses/lgpl.txt" + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], - "purl" : "pkg:maven/com.ibm/java@1.0.3-SNAPSHOT?type=jar", + "purl" : "pkg:maven/com.ibm/java@2.0.0-SNAPSHOT?type=jar", "externalReferences" : [ { "type" : "distribution-intake", - "url" : "https://eu.artifactory.swg-devops.com/artifactory/res-cryptoagility-team-maven-local" + "url" : "https://maven.pkg.github.com/cbomkit/sonar-cryptography" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.ibm/java@1.0.3-SNAPSHOT?type=jar" + "bom-ref" : "pkg:maven/com.ibm/java@2.0.0-SNAPSHOT?type=jar" }, "properties" : [ { "name" : "maven.goal", - "value" : "makeBom" + "value" : "makeAggregateBom" }, { "name" : "maven.scopes", @@ -87,218 +87,218 @@ }, "components" : [ { - "publisher" : "IBM", + "publisher" : "cbomkit", "group" : "com.ibm", "name" : "engine", - "version" : "1.0.3-SNAPSHOT", + "version" : "2.0.0-SNAPSHOT", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "67ae457c13ac566ea59b295a59cb7e95" + "content" : "82d71013150d0cc35b2f86c047257ea5" }, { "alg" : "SHA-1", - "content" : "174f4581fdccafe44ba8b06ca8776250a7cbd6be" + "content" : "d8aa90c2d6a5d43a659f77c8106d2638f2fa9b46" }, { "alg" : "SHA-256", - "content" : "e516d0b5fab931fc1f1c39d1ea892f2a07503ec2a245bbc9dcb1c6804adbafd2" + "content" : "a30d5984faeef0722b4cfc6b96e0680e11807dd0e058b791ea2ce803526851f9" }, { "alg" : "SHA-512", - "content" : "914b26f230b80175d70655604c16a5d2f0c34c95be27f5eaedcb01ccd71680c4723f8978c05bf7127f74f2d56beec3cbb98c18b372dfee525d07b7a0b88cd43e" + "content" : "4e2c67e7f337c49c43299da83b8707bac597304ce744a08fc3105e8679a9c1d0908b06a73557ae5b33e3f3cde36dffa11bae79a63b90bccc676cf690ea46be22" }, { "alg" : "SHA-384", - "content" : "0b224db460fdd73a412e39107df54b1bf11c43c424032ad00a73b7f695ba693b4e18a4cc3865f3b42d85840c703b2f1a" + "content" : "c259f83084de03dfb95efb15da1bb5e89a70453ca58df5929ad51fbebc3f4a46e7964249f1bcb71e099167511772bf77" }, { "alg" : "SHA3-384", - "content" : "a4980534f8d193ee0e6c984d540af540221d481fa955c7262eedccdb97afd92701478c32dec4bb874545524c95e4ae4a" + "content" : "aafaf842f747bd36b202cba133419618398debf30bef80ace36629d995c510f045a5227181b98e22685865fd59559080" }, { "alg" : "SHA3-256", - "content" : "b10c75d6a28044f378a59270380d20f7032b80146c669292c31e9140f1cd6548" + "content" : "98c5eb98fa32698d7f1070c731ed32053f8528393a9696f983ae285f9054831d" }, { "alg" : "SHA3-512", - "content" : "a93f4b34a1818b9eb6675e31b810583ff28f6e76470494819d5a7c831d987474bd4c600f297655dfb8c379d3af3861634e7668bfa22c4eddfacf2539cee17ec7" + "content" : "a695852c9a2886e19fde16679d404d92be3ae62617ca460852c29a16601c97385a494b3865b92864f125bed747d7e5836f13153ae86a6c3b7179317d22fa2070" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "https://www.gnu.org/licenses/lgpl.txt" + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], - "purl" : "pkg:maven/com.ibm/engine@1.0.3-SNAPSHOT?type=jar", + "purl" : "pkg:maven/com.ibm/engine@2.0.0-SNAPSHOT?type=jar", "externalReferences" : [ { "type" : "distribution-intake", - "url" : "https://eu.artifactory.swg-devops.com/artifactory/res-cryptoagility-team-maven-local" + "url" : "https://maven.pkg.github.com/cbomkit/sonar-cryptography" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.ibm/engine@1.0.3-SNAPSHOT?type=jar" + "bom-ref" : "pkg:maven/com.ibm/engine@2.0.0-SNAPSHOT?type=jar" }, { - "publisher" : "IBM", + "publisher" : "cbomkit", "group" : "com.ibm", "name" : "common", - "version" : "1.0.3-SNAPSHOT", + "version" : "2.0.0-SNAPSHOT", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "6b537a90ffd838bb65c5a9c2ff371dce" + "content" : "0bc212a0d7a96c40a0c6792249b21ee7" }, { "alg" : "SHA-1", - "content" : "76b39430ee28fd8962edae300a91d5ebc52c1076" + "content" : "70c6efeb7474e7b78595b6601584276bb7a90814" }, { "alg" : "SHA-256", - "content" : "1c9dcb0bdef66d58f48eebc5be6b625485ceba73f8e3310d8b72f5341094acea" + "content" : "aff8b56a14f886f07e502bf26baa476c3b6f3b79b8b6b003da2260435cda087f" }, { "alg" : "SHA-512", - "content" : "be406c24fb42f8595a51ff011041cb03271ff299d6c724961276f76ccc3c2a70a02e41726c188cd48081f064de989d16abf295658ac33a3d0f417a20eeb6c879" + "content" : "dcd37bc935a630965b07aa61633eb51e8ea58543a277f387edb93956a5153b447bd93a48ca2236a56ebf8df5b72b6f4e1759a4d222d1b12b480730f378ad87b1" }, { "alg" : "SHA-384", - "content" : "dcdf2d7e35abc1fc724ab290bbc10952df07a9b5ccd18373fb549c56bd14da38f529de16240e1fee98e083fc025876d8" + "content" : "8af172d828b3415fb085293a1788e04fe53cbba7ae53c2c4911f5333dc30cea9e3a11255922852f6269b09786b9fc8b4" }, { "alg" : "SHA3-384", - "content" : "113bf691c2e686f7b92e4b8c9a4bc788d6c14e77eb448d59a2532c2a0cfa35bdb8f9a87b3a02cc72052f0b0d65fa1ac4" + "content" : "8b03cb2f7fd323ad12fe42836a91697c8a74689b3fc732c16353eab599f709c88ca68dc05e1a4464990990bdd14000f2" }, { "alg" : "SHA3-256", - "content" : "b1103a71a3a027ab5c74986541390192f9c3e9aacc6c05bf6500b653b3b2e387" + "content" : "118e266f4ab89f83ee60b405959cdfb3f114d3f2553d16d5e34cf8791f8164f5" }, { "alg" : "SHA3-512", - "content" : "b03a0a66d302c49312991dd472959472afe74e62fea2b0fe725e4c34dad295a4ac7b34e9e13bcd916141836a2e00dde967da90844a5f65dd7120da3318092130" + "content" : "9af3f6a7540ea1567edea928cd5a7cec4dbea9e0726f9a03de4a0dbeb8eb7e0764ac1db432a816dd2f3d182a0102c7c866fc82f79212650825253055680ba09a" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "https://www.gnu.org/licenses/lgpl.txt" + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], - "purl" : "pkg:maven/com.ibm/common@1.0.3-SNAPSHOT?type=jar", + "purl" : "pkg:maven/com.ibm/common@2.0.0-SNAPSHOT?type=jar", "externalReferences" : [ { "type" : "distribution-intake", - "url" : "https://eu.artifactory.swg-devops.com/artifactory/res-cryptoagility-team-maven-local" + "url" : "https://maven.pkg.github.com/cbomkit/sonar-cryptography" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.ibm/common@1.0.3-SNAPSHOT?type=jar" + "bom-ref" : "pkg:maven/com.ibm/common@2.0.0-SNAPSHOT?type=jar" }, { - "publisher" : "IBM", + "publisher" : "cbomkit", "group" : "com.ibm", "name" : "output", - "version" : "1.0.3-SNAPSHOT", + "version" : "2.0.0-SNAPSHOT", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "b27986fb1cf9f45dcf81b60215b308a6" + "content" : "b6eb9e7a1fd0343a3553986b06986b40" }, { "alg" : "SHA-1", - "content" : "3e712bc9ec7047b57b9ae148b8d5777939e6f9d0" + "content" : "43565f9073474581c103d10e78725f9a1d1653f4" }, { "alg" : "SHA-256", - "content" : "2b40ee3cb069d334e12975cbf18786d1ce45222b083b0113682f3a0120f3d727" + "content" : "8a9166ad957fcafc8da6eeb30a1e35f828e3d0db755992991fe778677062c0c5" }, { "alg" : "SHA-512", - "content" : "59c8384e84ce4586163114c552d51e6e629707b0d19741c3a3fcd02cf31bfe869cfdb41381382ceb6a058ae055bf398f64064183db6af975082a1faab56f3670" + "content" : "6d84d5b43d3e5ed1203bfba6b9d183678ea22898bf822326a598fcec3d24aaf5f59add68b9ac12bcf2a1fdc3181b5d1b433be16e2375d822061af892617d96a9" }, { "alg" : "SHA-384", - "content" : "ed38081f1133f6ccef7c59d167b9b123220edd330d5468cb9efa51f9cbd3aaf788b55314938260ba4d7a55acdf9b1c08" + "content" : "1e238e6a57e4c5171f8969b2f67ad27bc6368f73e40675aeaf54da38fa4060e2580302636b645b37c62dd267059883b9" }, { "alg" : "SHA3-384", - "content" : "f87d2e87088fb44d8efbcadc3f1e439623b3af7390df5a60e52d752a05131fa5f9ea295f362584c6956bdfb58a6c7392" + "content" : "96421d4fb4e8c9dfe8135d50e3930ecb6e3fd2f3c0c796cc8e8f156407bfc62b01a0c74966de91ff702a4dc5faf0930c" }, { "alg" : "SHA3-256", - "content" : "54f73feb09d9dd18b0893aa8b1275e03bda8fa537775506d86051ac2798005c6" + "content" : "5751f5452f415fedb2aa9c912c1cefa182afb93bcaba6672100948e17fd77354" }, { "alg" : "SHA3-512", - "content" : "91c117bc7b6bc4adeb55b86dfe6d1308ab5f718eb9ee56215c5e25398da0489fc42b796ea6b28f9a00624d6a6257208d0aaf20c38fbe99ff43d13d3088703d31" + "content" : "024f64264e3eb3460ded189c4fd595b72596aacadb174bd6f2e5f5fcc37cfc6d118ebb211ea2deb44d7a4d5d4e2857e72738b23905cfde2dbb0e16ca6a1858a7" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "https://www.gnu.org/licenses/lgpl.txt" + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], - "purl" : "pkg:maven/com.ibm/output@1.0.3-SNAPSHOT?type=jar", + "purl" : "pkg:maven/com.ibm/output@2.0.0-SNAPSHOT?type=jar", "externalReferences" : [ { "type" : "distribution-intake", - "url" : "https://eu.artifactory.swg-devops.com/artifactory/res-cryptoagility-team-maven-local" + "url" : "https://maven.pkg.github.com/cbomkit/sonar-cryptography" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.ibm/output@1.0.3-SNAPSHOT?type=jar" + "bom-ref" : "pkg:maven/com.ibm/output@2.0.0-SNAPSHOT?type=jar" }, { "publisher" : "OWASP Foundation", "group" : "org.cyclonedx", "name" : "cyclonedx-core-java", - "version" : "8.1.0-SNAPSHOT", + "version" : "11.0.1", "description" : "The CycloneDX core module provides a model representation of the BOM along with utilities to assist in creating, parsing, and validating BOMs.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "f15d85fa4d72d67dc40b0938e5a263b0" + "content" : "2939896ee374a5f6d45ca70157e58113" }, { "alg" : "SHA-1", - "content" : "89c94f4407141cc6216dc797eaa527b34e06eadf" + "content" : "c5e6a5bdd203c23063db37d5db69bfd5e037d5d2" }, { "alg" : "SHA-256", - "content" : "b186d0f488125cdc032616d0edff92c29bf9cda6dcbf556e5b24e858e1b6f1ee" + "content" : "989348cc6d385629a3ccb735d450b0f0f022167cb702c2fcb0e6f2bdd989dde7" }, { "alg" : "SHA-512", - "content" : "df89c78cde3e1db60c37877b607c0eab3489d825da5d5873c70e6d3592e73158684b76d5105ab93cfac8211b4bab4fff3e557e6cc700dc64698beb625f0ccf48" + "content" : "20a3fee94682c23a57c52bdd1678f877f1b8f2a8c3a2e2aa1ade2be5e74c70da1171aa2f08af40a5a9362eba94fbb52d8a824b3bf6b9591d765ecf6b3c43463c" }, { "alg" : "SHA-384", - "content" : "d51694f1fac1f99b703849b833d1c83f638c9b1a75cf5283ac4c9456bf624b2fcf829d2f4a5e037062b5b33056056e3c" + "content" : "d85aedd5d4e7f7ed6ee0093870e8fea36cd5fc21c825325e5240ea6773b072173429230f4dd12f5ac70146f39f4ff0fe" }, { "alg" : "SHA3-384", - "content" : "59de9d9679f6e05019952cc823fe03729a18d395653d8c7b2706b6d5052cdfa670c3b42a9a0aea5f831e889daea2b995" + "content" : "705238526713babce1ce21922a1d7229ef6e0106a3fe91395757b8fcd5955b83e6001679fa8eb38c0e8960238b1a6514" }, { "alg" : "SHA3-256", - "content" : "6c10f4f239f3e9827282b9e9acc81e1baba86c7ccea88f405470e197c8ec2dce" + "content" : "dbf916ece6434dd0b46d71ab060fc55c6fff2867ed89b5093d7aaf9514a2d2f1" }, { "alg" : "SHA3-512", - "content" : "0b7f570e648628beaae172d88e461aff57435dca352496f3b3537833edee3c217af8350c79ad701ff03655302def0567b3252965358e4929cc6e56ac179f32ee" + "content" : "5cc758b4c5049d792f97296a89009088332c1e2abc180e8f2251f49961a6d6d02b4a9bb4d4fffea0e91ef8cb4530b2f9a70cfd62bc334f47be2f667c2d8a9e0f" } ], "licenses" : [ @@ -309,7 +309,7 @@ } } ], - "purl" : "pkg:maven/org.cyclonedx/cyclonedx-core-java@8.1.0-SNAPSHOT?type=jar", + "purl" : "pkg:maven/org.cyclonedx/cyclonedx-core-java@11.0.1?type=jar", "externalReferences" : [ { "type" : "website", @@ -319,10 +319,6 @@ "type" : "build-system", "url" : "https://github.com/CycloneDX/cyclonedx-core-java/actions" }, - { - "type" : "distribution-intake", - "url" : "https://eu.artifactory.swg-devops.com/artifactory/res-cryptoagility-team-maven-local" - }, { "type" : "issue-tracker", "url" : "https://github.com/CycloneDX/cyclonedx-core-java/issues" @@ -333,57 +329,58 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/org.cyclonedx/cyclonedx-core-java@8.1.0-SNAPSHOT?type=jar" + "bom-ref" : "pkg:maven/org.cyclonedx/cyclonedx-core-java@11.0.1?type=jar" }, { "publisher" : "The Apache Software Foundation", "group" : "org.apache.commons", "name" : "commons-collections4", - "version" : "4.4", + "version" : "4.5.0", "description" : "The Apache Commons Collections package contains types that extend and augment the Java Collections Framework.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "4a37023740719b391f10030362c86be6" + "content" : "d564105594035b363b193d8ce3c18b98" }, { "alg" : "SHA-1", - "content" : "62ebe7544cb7164d87e0637a2a6a2bdc981395e8" + "content" : "e5cf89f0c6e132fc970bd9a465fdcb8dbe94f75a" }, { "alg" : "SHA-256", - "content" : "1df8b9430b5c8ed143d7815e403e33ef5371b2400aadbe9bda0883762e0846d1" + "content" : "00f93263c267be201b8ae521b44a7137271b16688435340bf629db1bac0a5845" }, { "alg" : "SHA-512", - "content" : "5939c9931eb9557caee3b45fe1dd9ce54cabdc4e6182ed7faac77e1a866dd0cb602bfa4ece2f3316d769913366106bd2b61bf3bb5faad1fa7d808124c06dec0f" + "content" : "ee43c513ac9dcbd7dd23b5cbb4ea5f65a2e10cdfbb403d080b87e778b3b45062315522297c41eca514a9a946228ad7650f0a572d5b78effb8260dd8084131988" }, { "alg" : "SHA-384", - "content" : "74059fd8f61c366ed448e102256fdbd1db0d690501c2c296c80f3657a2c0d8ade3dd9533b1431cc29786bbb624195f46" + "content" : "73db8eb3e79569b3fa62aefdce413e6ea250b9853953cb75b9d5ce0f2f35b59b6e86ef708326a608ff20d95bdade8522" }, { "alg" : "SHA3-384", - "content" : "15034fb39842620bf3b152cd90bce252644ebc6a29fafd6dcf5e1f3925f09ccea2ae4e195817450f996b25a7081a9a3f" + "content" : "7a9c035fa846cdcebd4331eb86ed31a67595518299a8bee54597c1eb663aee63214553a561a510b929035266c2a4800b" }, { "alg" : "SHA3-256", - "content" : "1716630a207a8f4a83bf9ef19245f46c87d62bfebbcfa1227101e6dd51da8fa5" + "content" : "614c41bfd8f9c6c1c1e5667c5be45587c3021b780937ad62f54d17051f425086" }, { "alg" : "SHA3-512", - "content" : "c290c98c7b5825d024644ec1162804a1f9ad4da3bb5324d147ddffee6cc79e3c0ecc3825d6116502f2ca292ec80c4e7f8d49a03542dda8f4d58b0dc8228923c5" + "content" : "3cfd12ec2d03ed29b682123cedae422a4c6dc459034a7e0ab5f00ccd422cb9a2ec423a08b953119c426569b888157a6d80aa0e0c63debea50c5c54c481e2eff5" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0" + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], - "purl" : "pkg:maven/org.apache.commons/commons-collections4@4.4?type=jar", + "purl" : "pkg:maven/org.apache.commons/commons-collections4@4.5.0?type=jar", "externalReferences" : [ { "type" : "website", @@ -391,7 +388,7 @@ }, { "type" : "build-system", - "url" : "https://builds.apache.org/" + "url" : "https://github.com/apache/commons-parent/actions" }, { "type" : "distribution-intake", @@ -399,7 +396,7 @@ }, { "type" : "issue-tracker", - "url" : "http://issues.apache.org/jira/browse/COLLECTIONS" + "url" : "https://issues.apache.org/jira/browse/COLLECTIONS" }, { "type" : "mailing-list", @@ -407,11 +404,11 @@ }, { "type" : "vcs", - "url" : "https://git-wip-us.apache.org/repos/asf?p=commons-collections.git" + "url" : "https://gitbox.apache.org/repos/asf?p=commons-collections.git" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.apache.commons/commons-collections4@4.4?type=jar" + "bom-ref" : "pkg:maven/org.apache.commons/commons-collections4@4.5.0?type=jar" }, { "group" : "com.github.package-url", @@ -491,41 +488,41 @@ "publisher" : "FasterXML", "group" : "com.fasterxml.jackson.dataformat", "name" : "jackson-dataformat-xml", - "version" : "2.16.1", - "description" : "Data format extension for Jackson to offer alternative support for serializing POJOs as XML and deserializing XML as pojos.", + "version" : "2.20.1", + "description" : "Data format extension for Jackson to offer alternative support for serializing POJOs as XML and deserializing XML as POJOs.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "ab3c4a4dcd1928d05f206c5d0e9fe36f" + "content" : "55a13effaac5ed19e8393cba5e05f195" }, { "alg" : "SHA-1", - "content" : "d952ad30d3f2d1220f39db175618414b56d14638" + "content" : "3a8e1f06f8bdfd9f2c29f1b2bdad970b02dff4c9" }, { "alg" : "SHA-256", - "content" : "b8e73fa171d1276832abbf20ebb4df597e377405f875ed39808cee9acca3d3ac" + "content" : "190ad4eba35d89dba3517da279e0690681c4745174b94b09ea78f81ceae140f0" }, { "alg" : "SHA-512", - "content" : "018a6e2d0ba7a102331015ec2d471d4565a7eb6d9ce4f339e7cf9f8919c4eb556617b3fa4de703cb7cc438997c7d35b77d100844b14dc1f797292937455c073a" + "content" : "a4383994ae40d74e70d3966fab9ad8412e1a40709ab58f34311f8056a7d8620545302015c0aa9c74c3aa8844f7f2248494979c5387c016107bcc46917bf71b75" }, { "alg" : "SHA-384", - "content" : "c6866f8dbf98a9586382dfe2a83a3640183ec8b9e2469e658f89b7f6c8ac236612994493fdcdaf4ef3b3c7df5dfc5315" + "content" : "606497cf60a7bfbc27e3fcb528b577046f15a0b4efae68b105800bcf11d8c29114aa151776e26a924908449fca682dde" }, { "alg" : "SHA3-384", - "content" : "4a685f29dd132abc7fad2732f6e6c82378cb23b7a8ce24d2c8b02dfbec05014c27d03ab5c573d893602e9be855bf0685" + "content" : "9afd1c3a77fb44529532607ced0b727d25c6493dac7ed450c922813542a0f8cbf8d2921f2b0ff82d5f486512f850dba5" }, { "alg" : "SHA3-256", - "content" : "26f157c5ea198ea4cd0ab454266b6e35577e29c3f8da79513f06d63a9e0e780d" + "content" : "4cbb817483e92d68904c169fa4a48d9479dc2be64a52ed6c72ff01d547d14acc" }, { "alg" : "SHA3-512", - "content" : "48bd2550e2f66c55c320faa91c12fbc001ee395362706096a2d6afbdc9b5e5857e87365349196c5bce7b3ceb3c831d4c328ab058b54e0e597388e7af828fb6cd" + "content" : "c430e0d54fc913c28c199f0d6f935196cdac069c3abcc8cc66fa8ced61dd50c3d3ebf2c2a15d9c4c3e399d7a6184e94e2bb4874e61822d02e9d874b101df84d2" } ], "licenses" : [ @@ -535,7 +532,7 @@ } } ], - "purl" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.16.1?type=jar", + "purl" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.20.1?type=jar", "externalReferences" : [ { "type" : "website", @@ -543,7 +540,7 @@ }, { "type" : "distribution-intake", - "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" + "url" : "https://central.sonatype.com/api/v1/publisher" }, { "type" : "issue-tracker", @@ -555,47 +552,47 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.16.1?type=jar" + "bom-ref" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.20.1?type=jar" }, { "publisher" : "FasterXML", "group" : "com.fasterxml.jackson.core", "name" : "jackson-core", - "version" : "2.16.1", + "version" : "2.20.1", "description" : "Core Jackson processing abstractions (aka Streaming API), implementation for JSON", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "0f51c6a7d713aed6e044cf1692bb59f4" + "content" : "889b2c417b61c9f4f460b06957147234" }, { "alg" : "SHA-1", - "content" : "9456bb3cdd0f79f91a5f730a1b1bb041a380c91f" + "content" : "5734323adfece72111769b0ae38a6cf803e3d178" }, { "alg" : "SHA-256", - "content" : "f5f8ef90609e64fec82eb908e497dc7d81b2eb983fe509b870292a193cde4dfb" + "content" : "ffab4d957daa2796cf24cb66d0b78a7090f1bcbe17c3a4578f09affaaf137089" }, { "alg" : "SHA-512", - "content" : "1f1551b0512a0ac3fc883db62472901c91051586616804daec24268ceaed409faaa1f1695df2f6220fa389aeb54802eb51dec439322bc7383507b45c08cbe17b" + "content" : "0463e1c2e1d8e8cfa4954dfce491583f0ec9ec1de6e6f342d1e5f0c63dcfb959673552a279ec4e6b6cc69e6ac2de6d42dd512149ceb76620b5d780db7325e6a7" }, { "alg" : "SHA-384", - "content" : "24b8435650ceba20008563d8bb9db4a8aca74d7ffa33e95efc6ac576d71f39d5ab228c133b413c6c852c34d905a249cf" + "content" : "a279b2d57d019a05f65762ce670ce23e02466b11276d8c0687f3bb5ed40a8a1854bfe6dd2dc157d0f5695186f7d9a65a" }, { "alg" : "SHA3-384", - "content" : "f15db08b5d9ff6b475507afeb587a30bf6fe050d216cadf1bcd9fccaac0a59fd6bb1e8533ee8a48bb6075801b6f617ce" + "content" : "06b9f33e030a99fa95d171118ab668bee42e32b35b85e05750f8514128dbadc94026afde16dbadc0ff786027b09712a4" }, { "alg" : "SHA3-256", - "content" : "5fc0bd6adc8b1f3e96b835acc703cb1a4a977deb1f44d0b9314ea25b83c2f36f" + "content" : "3e83a1a349d8ba3a4e76ee983f04b259a85263dda5090f55aae5535109c4b6c0" }, { "alg" : "SHA3-512", - "content" : "7273a7e983ef1e9c7195aa36dba2d0b7b35600f844f61a54c1a80e4590c987257411f8e17a2fb9252849fd8c5ab9fb40f14ae288159a0e98c337020fb8679a1d" + "content" : "87b3a61a71a625adfc6b9b402079c26b223e19535ca5af07e4130932d479f9c22e90696911050d8ab8a09a6209651fe2f25f54d7d9a1493b6dab6f8acb76203d" } ], "licenses" : [ @@ -605,7 +602,7 @@ } } ], - "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.16.1?type=jar", + "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.1?type=jar", "externalReferences" : [ { "type" : "website", @@ -613,7 +610,7 @@ }, { "type" : "distribution-intake", - "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" + "url" : "https://central.sonatype.com/api/v1/publisher" }, { "type" : "issue-tracker", @@ -625,47 +622,47 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.16.1?type=jar" + "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.1?type=jar" }, { "publisher" : "FasterXML", "group" : "com.fasterxml.jackson.core", "name" : "jackson-annotations", - "version" : "2.16.1", + "version" : "2.20", "description" : "Core annotations used for value types, used by Jackson data binding package.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "1c1e081b6b61ee1f1cb0ef52eef45d61" + "content" : "b901def3c20752817f27130e4b8d6640" }, { "alg" : "SHA-1", - "content" : "fd441d574a71e7d10a4f73de6609f881d8cdfeec" + "content" : "6a5e7291ea3f2b590a7ce400adb7b3aea4d7e12c" }, { "alg" : "SHA-256", - "content" : "a4730771e6a495dd3793a42cdb8ce6bddb96c77e15f40c98fd8d9a7ae09e7286" + "content" : "959a2ffb2d591436f51f183c6a521fc89347912f711bf0cae008cdf045d95319" }, { "alg" : "SHA-512", - "content" : "2e268340c11ff606df14cc963e5a4c97b22c69dbe09b9ee96873b6553aa97ba703f94dd85cc05704a35c4ae1651fc37d23d87e94bbad39f2a3a63fc2b3f754b1" + "content" : "8926d89bfe7f427c7793f6af619249540f23f82eae055dd03d4cb163ff603a43dd6a3ebe43528d00789aed3df0dd2f10e08552fdec53e2691849b9769f57f0c9" }, { "alg" : "SHA-384", - "content" : "27d294ee2a7519f851bd9da37eefd432b13e2ba2ee94e5bcc8587d8d251c8d00537fe583912681f5d43fc92f29dc23ac" + "content" : "40ee4c1438a5a190624dff9deca83377f7e60690b4535359b2a79924f736bff7c8d077e5b01c6c8972735dc152f2ccf4" }, { "alg" : "SHA3-384", - "content" : "f80ca2f1d7b49ca06c999f287249874979295312ad61fae7dba101a084825c2f7200b0a252c67e36b8f185cb5b70b490" + "content" : "0fc0f697d03692b63c2b11fcabac51c630278ed6df15420975263ea4ad19418b3b71b7889497ed20a150035f9bcba79d" }, { "alg" : "SHA3-256", - "content" : "28db760c602a501079b88e94eb4cea2e59895a688e6ea66e447b51adac113e0a" + "content" : "6bf49e384735969af020f758b255ceed26af92d4cf456f6e7b83e8de53289f93" }, { "alg" : "SHA3-512", - "content" : "acc6d03c8674438bac5e2b09e1615b11d202c12aa720e9205d820543cc2762f9a3497bf9de9f8239844db23ccf0b52cbd3255aff422c03de490c60ce2c4787ee" + "content" : "3372f6c456a7f6a33ebc3ecc65daaf36288be2a14b1f2cb9fcd7387c07acab1c69ae803a366e5d12adf4934970ffd2e34017917c5f16a6d563bc94810f228ab3" } ], "licenses" : [ @@ -675,7 +672,7 @@ } } ], - "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.16.1?type=jar", + "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.20?type=jar", "externalReferences" : [ { "type" : "website", @@ -683,7 +680,7 @@ }, { "type" : "distribution-intake", - "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" + "url" : "https://central.sonatype.com/api/v1/publisher" }, { "type" : "issue-tracker", @@ -695,116 +692,46 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.16.1?type=jar" - }, - { - "publisher" : "FasterXML", - "group" : "com.fasterxml.jackson.core", - "name" : "jackson-databind", - "version" : "2.16.1", - "description" : "General data-binding functionality for Jackson: works on core streaming API", - "scope" : "required", - "hashes" : [ - { - "alg" : "MD5", - "content" : "ac71b868569d329136f2c63f34dd2c89" - }, - { - "alg" : "SHA-1", - "content" : "02a16efeb840c45af1e2f31753dfe76795278b73" - }, - { - "alg" : "SHA-256", - "content" : "baf8a8ebee8f45ef68cdd5e2dd3923b3e296c0937b96ec0b4806aa3a31bccd1d" - }, - { - "alg" : "SHA-512", - "content" : "e826126759ef714b35c546a524d0fc82e8ae38ad19d0502a58d360926aef3d13492092372302fcea19e78b24432838a40023ebf5dfae4e8c566478c4833ea998" - }, - { - "alg" : "SHA-384", - "content" : "6e46bf61e034085444b1a708fbb6926ddd46ccaa75c20c9765c1a98c266449169d7a28e6197224f46cc4c15201187ab6" - }, - { - "alg" : "SHA3-384", - "content" : "649d02e2265bc92d75876b31006f1cb2fe33788da8edb06ebc5b798e964ba7a8d6b96d21053b01e5fe3cf27a63a8b66c" - }, - { - "alg" : "SHA3-256", - "content" : "d58b494fb40bb93c799c315293daf81fb6d0bf418d38b912aab1c37b4de1db77" - }, - { - "alg" : "SHA3-512", - "content" : "c3950b04417dee7450b36f3428005a2f118c8ce0388f2c2470f5543cac3106215b6b591848775176892951f2ea7a608c7d02280067d5cfae1634e0f3e306e628" - } - ], - "licenses" : [ - { - "license" : { - "id" : "Apache-2.0" - } - } - ], - "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.16.1?type=jar", - "externalReferences" : [ - { - "type" : "website", - "url" : "https://github.com/FasterXML/jackson" - }, - { - "type" : "distribution-intake", - "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" - }, - { - "type" : "issue-tracker", - "url" : "https://github.com/FasterXML/jackson-databind/issues" - }, - { - "type" : "vcs", - "url" : "https://github.com/FasterXML/jackson-databind" - } - ], - "type" : "library", - "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.16.1?type=jar" + "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.20?type=jar" }, { "group" : "com.networknt", "name" : "json-schema-validator", - "version" : "1.0.87", + "version" : "1.5.9", "description" : "A json schema validator that supports draft v4, v6, v7, v2019-09 and v2020-12", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "f0d3df7d661e41708e264ea82bd0ad4a" + "content" : "84622292ac5001bac8f16dc5002a8b94" }, { "alg" : "SHA-1", - "content" : "59861a488ba2b977ef444c03e3c8c8c9f96c0734" + "content" : "6a2f9fe324b9dc8d8e0c3d7b435f7ae99595a556" }, { "alg" : "SHA-256", - "content" : "d2c00a6c4515a4adecbec813c4b994b720782207258d49cb537478edec1ada89" + "content" : "e0b8baeb78fd1ba027454ee3974d8a02f54447eaa510d3052820a7d2160d9ae4" }, { "alg" : "SHA-512", - "content" : "ca1419376baf5bfd13163e7787085134c46b196eb6fbb19099eedb56d153b37dc7b709d7e771088421c567c45066d209f37e5782706f798a228e7e4f21b7c522" + "content" : "5ba210c135717a6ed043e0889d96f6381b3668f9e2a011bd0def8138ad327813f792259858ae5ed192cb8ec0645308113769aa8ebee903db1ccd82e98cb3009d" }, { "alg" : "SHA-384", - "content" : "e454ab9b970e4cb4b2f6f595495e0ad43d455b7fb10d474607f19fdef4569acc08a4f935625451d118e0496682ff33a4" + "content" : "21a4f4fb586959241ce92ad788cb4326d62232aafcddf6953ef7769efa5c6936487ffea51693ff44206f4d66c83ee753" }, { "alg" : "SHA3-384", - "content" : "ae83744bb3d0cc751059cd8fda72df351cd5127187a16c3c99ea679c3433f240f90c13de4e2c5c11206d325375e48c59" + "content" : "36bb0b96a34254780e991440e879c1f44a0a62362e115a5c761df0ec1c8f2a9f64a7421ea3cb50a589ae501619fd3942" }, { "alg" : "SHA3-256", - "content" : "34685e96c0c011463bb57551b03f66b522eedf3d306e7181b5823a2036e87964" + "content" : "c97a2638d46c235056bacfe90d8e0b88a823a5622e88b608a31f481f3adb9ccf" }, { "alg" : "SHA3-512", - "content" : "764183cf1e2de9fbe52d6f228957015ab7cc0f051aa3a289ecaed9b0c37093d791786f55bb141083beff08cd78aad282fec4e9d8e470cbde3ad18ad3ec7d6383" + "content" : "08b256bb3ac49102d87c0e635d025699154bfa7785916d591173af6ec14dfde885e34500a7bd13159a00a7fe78dc859aefa9dc930d0719a64ea08209ccffb20a" } ], "licenses" : [ @@ -814,7 +741,7 @@ } } ], - "purl" : "pkg:maven/com.networknt/json-schema-validator@1.0.87?type=jar", + "purl" : "pkg:maven/com.networknt/json-schema-validator@1.5.9?type=jar", "externalReferences" : [ { "type" : "website", @@ -822,7 +749,7 @@ }, { "type" : "distribution-intake", - "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" + "url" : "https://central.sonatype.com/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", @@ -830,50 +757,50 @@ }, { "type" : "vcs", - "url" : "https://github.com:networknt/json-schema-validator.git" + "url" : "https://github.com/networknt/json-schema-validator.git" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.networknt/json-schema-validator@1.0.87?type=jar" + "bom-ref" : "pkg:maven/com.networknt/json-schema-validator@1.5.9?type=jar" }, { "group" : "com.ethlo.time", "name" : "itu", - "version" : "1.7.0", - "description" : "Extremely fast date/time parser and formatter - RFC 3339 (ISO 8601 profile) and W3C format", + "version" : "1.14.0", + "description" : "Extremely fast date-time parser and formatter - RFC 3339 (ISO 8601 profile) and W3C format", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "4f9277e3108caa3314836d8f20f9cf94" + "content" : "e537d0a2bc8066726f7e4654c253cf84" }, { "alg" : "SHA-1", - "content" : "00c6977b9d42efa3f8c95c31db5313a96ffc1724" + "content" : "c0f9f9d4f4404787e992ab3af5ae95f2fad79e47" }, { "alg" : "SHA-256", - "content" : "55ceb418c9e8138c4fcf62e213c4c814d89e8a84c827d395407cbecba5d791e7" + "content" : "5cf40ab0cc77828ab2b875b1f3ecd71c8295d7721933476abc2e08fddcea164a" }, { "alg" : "SHA-512", - "content" : "b29808a998e120d6fa97a19ea92402e57d06b92ddb98b892ae7c9de044b9e1d805dca2f7c0fe7faaa1fced7eecbda927d709113727a050972f24a75aa29525b8" + "content" : "aa69a6af3a7123eb41425bbaf6834e16dc3323172709e2338b8a21b970fd21333d996515f42da4aa0225251e30542ad7d9c8332bdf7d62ed96b42fadc8a1520d" }, { "alg" : "SHA-384", - "content" : "f63cbcc14966028fc81feec87bb5f948e0acc0a1683e9147eafe71c98cf3bb38d871bdccfdf70d94c985e1727b00ae7a" + "content" : "8d201334c39b68d13d66fc9df2440fa848b055a9b901e1c630ff66a47e70c8816484d106ae18c642d4257034f33e55f2" }, { "alg" : "SHA3-384", - "content" : "f95deb0a7c863dfc3e595a1398beecfd4baa7c3b5c8f43c3324e374de58d8e13891b32cb62d67d0e44df384fa320246e" + "content" : "033715e1422cb3f22c1073bc7b058fd16d1436c6314f49f13480d81c86b656cb77a4d852cbba35542bc8f2ce49244ba6" }, { "alg" : "SHA3-256", - "content" : "37b170afbaa74ad33e4dfb402aae14a2a026fbde83cbad0e61aee65b5a01f55d" + "content" : "f18d275dd2a0038a82432e06bb9f396151310136e3a316a869ef54d7fae834c5" }, { "alg" : "SHA3-512", - "content" : "f87bbab20f0ffd19ad27225b623b44cfa693fc83b27eb828acf0beeda846a13a9139a11e32d59cf81aa93da08af02335dddf59b2afc5a36900478a04c09c6218" + "content" : "8a51b3c6144eb2e363f8804da316d9e3dc246be07af4c0bb55e9540c2a0deb5eb9beb825120d3d203e3a561fd8a605ad64f3af5d233725e1b9c7e06232deaea9" } ], "licenses" : [ @@ -883,7 +810,7 @@ } } ], - "purl" : "pkg:maven/com.ethlo.time/itu@1.7.0?type=jar", + "purl" : "pkg:maven/com.ethlo.time/itu@1.14.0?type=jar", "externalReferences" : [ { "type" : "website", @@ -895,51 +822,51 @@ }, { "type" : "vcs", - "url" : "https://github.com:ethlo/itu" + "url" : "https://github.com/ethlo/itu" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.ethlo.time/itu@1.7.0?type=jar" + "bom-ref" : "pkg:maven/com.ethlo.time/itu@1.14.0?type=jar" }, { "publisher" : "FasterXML", "group" : "com.fasterxml.jackson.dataformat", "name" : "jackson-dataformat-yaml", - "version" : "2.15.2", + "version" : "2.18.3", "description" : "Support for reading and writing YAML-encoded data via Jackson abstractions.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "8b854304b3f56fcb85f9815f420b13fc" + "content" : "96671888dd42efee72d555b537558977" }, { "alg" : "SHA-1", - "content" : "58194ff9f51915ad6bf6b6f24818232d7566418a" + "content" : "66658356a375664262c227dad09adc51dbc09c54" }, { "alg" : "SHA-256", - "content" : "37795cc1e8cb94b18d860dc3abd2e593617ce402149ae45aa89ed8bfb881c851" + "content" : "3ca00e47cfcb43e79438ddcfc8fc735e9ebac3824fb7769138609be6bd56e483" }, { "alg" : "SHA-512", - "content" : "0e7e444bb04159967945a131e15131304e667370ba118d4d9d300ad10ab68c85f250bc7ce31d46bc72ef381f99f7f6352fd866debf700e85995063cbd6bcb728" + "content" : "a4696ab6e7161a5aa913ca0d22ff99aae12828104df3169753cb60ed69a8ed29c776c4beb1c938caad57344ef649572b0ef21fa45f3e58b3321b25b5d073939a" }, { "alg" : "SHA-384", - "content" : "ebd84ccc50f2986468a62028fcaaae53520ba5eb64f008bd086b10e4ffb1ca33af8a4aded7572e09a6eb9419da36485a" + "content" : "064eddddc868cac85768a2149fc291d35e429737c223f7b6495c28b3872ccc7101eb21672f6b2d0637777fe42050efd1" }, { "alg" : "SHA3-384", - "content" : "3881fbd843d0351c51ccd33f4c85a4c8f2949165c19e4ff44caa3ca7418505366af75c1f73711d85f666d7095f18939c" + "content" : "c817c948326114e676267e97cb87f9eea44f8042f03cc32c02299097683d5d12f538a337f716a6f1fed2e41ef33cdc5f" }, { "alg" : "SHA3-256", - "content" : "e9e2e7b894cf982c5bc43a490bd784cf01a8c4123a5b1f2a0b73133104bdfff3" + "content" : "b13168ea825b0f2c3b7084b34263e051e6cb2ce36faccb4f4661370746100af9" }, { "alg" : "SHA3-512", - "content" : "9154b0c38ef860cd89bc2338afb85d26f225aac039fb284c29ac034cd27fb34074044400264058153184ecbff214d2611b7647ae06defa9611766c893e7a857c" + "content" : "84a42a102dbc9761fa2c4e5ebe85deb1b5d475bc4f2b3e7d025edaa4e331c87460904d0707673eca186c705c72762bf38364dc1f21f958f76f0518ea4e7d38a4" } ], "licenses" : [ @@ -949,7 +876,7 @@ } } ], - "purl" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.15.2?type=jar", + "purl" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.18.3?type=jar", "externalReferences" : [ { "type" : "website", @@ -969,46 +896,46 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.15.2?type=jar" + "bom-ref" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.18.3?type=jar" }, { "group" : "org.yaml", "name" : "snakeyaml", - "version" : "2.0", + "version" : "2.3", "description" : "YAML 1.1 parser and emitter for Java", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "caf24b81b9d57e6d4f68b1ccd36e00a3" + "content" : "2a1c2ee8923dcd6bd6d025751af5df37" }, { "alg" : "SHA-1", - "content" : "3aab2116756442bf0d4cd1c089b24d34c3baa253" + "content" : "936b36210e27320f920536f695cf1af210c44586" }, { "alg" : "SHA-256", - "content" : "880c9d896e4b74a06c549c15ca496450165d6909fa15d7e662bee8f6a66d7afa" + "content" : "63a76fe66b652360bd4c2c107e6f0258daa7d4bb492008ba8c26fcd230ff9146" }, { "alg" : "SHA-512", - "content" : "93567558444365c436027bd1064b67ae99abde77fa89b33ac7c586ab83e4dbf02b7610669fd00ccd258bca6ba3fa078954c92d918b989317dce7bf9ce18836b8" + "content" : "1c9c78f0d102ae49a7c06f9e20c6a79a4fb9a2af962230ee6e136bda0caf10dcbb9deadc1c3ab15f74a4982ec8f8266217115e357329fde5b3f4f1858882de0c" }, { "alg" : "SHA-384", - "content" : "63c0ec40f4e3f24786031fb8a9477071c86e69247dce283ff725e328e26fba7bdfbb0ab52027b9b0988b3978703a95fe" + "content" : "77b1d06e83fd51b83b13372d5ef2eb43c5a66f193db857cee947ae4e900e4a4a0c66a8074435984b9a0b007a69cc2b4f" }, { "alg" : "SHA3-384", - "content" : "fedd091de2b63c38fb04cb8e2d657bc7b37193ef065b18058be892d6b816d7cb68e5445819c3f3f8fca116311adc9760" + "content" : "550c4e7a119fd690f750317dc0e20ad7bfc7fa28fa0409fc572bc745d51340a60e9e2ce2af97f458daa561155130bb97" }, { "alg" : "SHA3-256", - "content" : "66264c5c5f4703942a959310c14f22df9c2b1c304ddca1d1c211da58af5623f4" + "content" : "d1b540ee39c34ab1484be27d2dd56a14aa48f88668905f9ad176932f4b2cd5d6" }, { "alg" : "SHA3-512", - "content" : "0c4c5807880025a22791114253443d2166218760d63b80cd72eb3fdd71a19fdadb27d392b47de9c6b7ca2a2dc312273f0b8c97012ff277d2cab0fd06f3902573" + "content" : "879ccb34343ebd4ac4888091d97f393c5f75cbb066cf8cf1b9b3eb03a3442cb17326c60bd0db1403aa66ed1f0a5a0d548c96dbce74ebc5c3d6d93950f24b417f" } ], "licenses" : [ @@ -1018,7 +945,7 @@ } } ], - "purl" : "pkg:maven/org.yaml/snakeyaml@2.0?type=jar", + "purl" : "pkg:maven/org.yaml/snakeyaml@2.3?type=jar", "externalReferences" : [ { "type" : "website", @@ -1038,183 +965,181 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/org.yaml/snakeyaml@2.0?type=jar" + "bom-ref" : "pkg:maven/org.yaml/snakeyaml@2.3?type=jar" }, { - "publisher" : "QOS.ch", - "group" : "org.slf4j", - "name" : "slf4j-api", - "version" : "2.0.7", - "description" : "The slf4j API", + "publisher" : "cbomkit", + "group" : "com.ibm", + "name" : "mapper", + "version" : "2.0.0-SNAPSHOT", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "403dffa46cdd2e3c82da19df4f394a4c" + "content" : "8266e2e8bdbc19492b73a641829b77f7" }, { "alg" : "SHA-1", - "content" : "41eb7184ea9d556f23e18b5cb99cad1f8581fc00" + "content" : "0a577009d07ae2dd201dd12db7de534a95132822" }, { "alg" : "SHA-256", - "content" : "5d6298b93a1905c32cda6478808ac14c2d4a47e91535e53c41f7feeb85d946f4" + "content" : "309909b57fdefcf60f7a775579f13961f2bf5b0993c4ca0bfb45849d1c1d3e4e" }, { "alg" : "SHA-512", - "content" : "216d2cac27d501972c888f94dfa747d700b80d60813884b6ab4b12c6a3b17ed0c21a1d27e1aa4332c97c828f20039e3913d2763d7e1a3cef36ae4389a276e7a8" + "content" : "be39a43306537c59940b629f953bbe60d6dc4f86ed05d4e3f85a0a00a6176f87d4035335bc376f7dcf4edccd9f7721ea885c00936d6ed15ff3bd263b6afbeeb0" }, { "alg" : "SHA-384", - "content" : "c25b39f418aa726ba8405dfd9b356131f89984e2ef5a55a724a2abf3b7c78443f671105835161d2414d602cf03da9f2d" + "content" : "f568108df2411dae89b7bb0a420f7c1947d732ce7892d497d3d99d5eda151d87bf68a142e575d19b561914fac4d85a75" }, { "alg" : "SHA3-384", - "content" : "f33abfaac21badae6f85d3ebbc6c1204fd7fda3bb15173e763fa8cee95bce6a8270eec2c8f49343c66c8d2767bc317e1" + "content" : "f9ed8e4a5c42c2eaaa4af32f36589139571237a4aa85b5353f5c8ff1bfcf90f2d227e77e4ccb1716bb85e9a9b9a5ad7a" }, { "alg" : "SHA3-256", - "content" : "6e00d4b264a2afc4ca4e98f716ecece66c32c626ca3f8c5d56b22092b6fe417b" + "content" : "5d5aae940db911e26128b08abd03d0db1071c821345d019ba9c144aa45cb9f8d" }, { "alg" : "SHA3-512", - "content" : "ad7b9142d370fc532a07cdd43881a129b012ff50e2bede3ac27d9bd31ec707bf2f45e82002fa59e962955cc38ab73cdd77713fca50cedc926c046f5617c1285b" + "content" : "34e93b78ae899aca9010cd2bed9ea1db4d479ef92715d92a245910f57be8f74b299f25f593ff216d0f484a068007846006bc0a7ad5d22e8485f0b4a7aff1e297" } ], "licenses" : [ { "license" : { - "id" : "MIT", - "url" : "https://opensource.org/licenses/MIT" + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], - "purl" : "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar", + "purl" : "pkg:maven/com.ibm/mapper@2.0.0-SNAPSHOT?type=jar", "externalReferences" : [ - { - "type" : "website", - "url" : "http://www.slf4j.org" - }, { "type" : "distribution-intake", - "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" - }, - { - "type" : "vcs", - "url" : "https://github.com/qos-ch/slf4j/slf4j-api" + "url" : "https://maven.pkg.github.com/cbomkit/sonar-cryptography" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar" + "bom-ref" : "pkg:maven/com.ibm/mapper@2.0.0-SNAPSHOT?type=jar" }, { - "publisher" : "IBM", - "group" : "com.ibm", - "name" : "mapper", - "version" : "1.0.3-SNAPSHOT", + "group" : "com.google.code.findbugs", + "name" : "jsr305", + "version" : "3.0.2", + "description" : "JSR305 Annotations for Findbugs", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "f77ba78b00e389feb00739f8f39381f5" + "content" : "dd83accb899363c32b07d7a1b2e4ce40" }, { "alg" : "SHA-1", - "content" : "3527ba5c2addbdbe28ceabafc99fb63ed1f19598" + "content" : "25ea2e8b0c338a877313bd4672d3fe056ea78f0d" }, { "alg" : "SHA-256", - "content" : "c18a94c325cc96ea9e1abdd8d7ff1f030f0d414e14d19978ba4e97f3851dbfd5" + "content" : "766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7" }, { "alg" : "SHA-512", - "content" : "a3db5622d4a4e3ad7db2567fb8caa8d7c77ec8cc6a5a0108041964e8400801757bc8a5760798299f224ec6dad2e8c3e460f25224d3c7854768fefaa82bb41c55" + "content" : "bb09db62919a50fa5b55906013be6ca4fc7acb2e87455fac5eaf9ede2e41ce8bbafc0e5a385a561264ea4cd71bbbd3ef5a45e02d63277a201d06a0ae1636f804" }, { "alg" : "SHA-384", - "content" : "8b74ab21024e508b4c00a57fdce5aa0e61567ea3712185f6dffb3662f7bb8319bb878e0f004ae712d98d0d766a43ae63" + "content" : "ca0b169d3eb2d0922dc031133a021f861a043bb3e405a88728215fd6ff00fa52fdc7347842dcc2031472e3726164bdc4" }, { "alg" : "SHA3-384", - "content" : "ec4e1425c94578e1e96fd1c2b10baa47ba6f1cffaa7a569d3f4c50ca18dc433492c5641cdd379c89a4b41361f1eda6a9" + "content" : "9903fd7505218999f8262efedb3d935d64bcef84aae781064ab5e1b24755466b269517cada562fa140cd1d417ede57a1" }, { "alg" : "SHA3-256", - "content" : "b8dd34534aeef2ca45902fa7e047c7965db3d82cd8cbb31fe87c71911d3b2957" + "content" : "223fda9a89a461afaae73b177a2dc20ed4a90f2f8757f5c65f3241b0510f00ff" }, { "alg" : "SHA3-512", - "content" : "676519218fc4c944296be985e14098e41ea69bb84e3ee92ac62315810301fa7cfb48d6036789ea2aae727e84811183646e5cb98b95c312a3a50b86b9e7c1fbc3" + "content" : "3996b5af57a5d5c6a0cd62b11773360fb051dd86a2ba968476806a2a5d32049b82d69a24a3c694e8fe4d735be6a28e41000cc500cc2a9fb577e058045855d2d6" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "https://www.gnu.org/licenses/lgpl.txt" + "id" : "Apache-2.0" } } ], - "purl" : "pkg:maven/com.ibm/mapper@1.0.3-SNAPSHOT?type=jar", + "purl" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", "externalReferences" : [ + { + "type" : "website", + "url" : "http://findbugs.sourceforge.net/" + }, { "type" : "distribution-intake", - "url" : "https://eu.artifactory.swg-devops.com/artifactory/res-cryptoagility-team-maven-local" + "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" + }, + { + "type" : "vcs", + "url" : "https://code.google.com/p/jsr-305/" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.ibm/mapper@1.0.3-SNAPSHOT?type=jar" + "bom-ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar" }, { "publisher" : "SonarSource", "group" : "org.sonarsource.java", "name" : "java-frontend", - "version" : "7.33.0.35775", - "description" : "Code Analyzer for Java", + "version" : "8.18.0.40025", + "description" : "Code Analyzer for Java :: Front-end (Java Parser)", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "43bc91e0b5a11258625288f075b54633" + "content" : "a30b3194ba4e4aaf19e64afaf2c0cd9d" }, { "alg" : "SHA-1", - "content" : "2f748efd6e152c3526efd52a446cc8930381a16d" + "content" : "6c781ad5452a9f6c40efa651ec1514efd4956de0" }, { "alg" : "SHA-256", - "content" : "f22c60ed403f37c5378f2241c110d5f1427d9f8ac88710236a1662887a0961a5" + "content" : "6da24fc369a912c40bad484b580d15e8df7fd4a603e999b79952c1e88f1a10a4" }, { "alg" : "SHA-512", - "content" : "5ab1acc211dec17121948a678e59be6f050b1ba5360bf93fb724b51ff6160a29892c3847e5b0ad1deb450472bbdd5387f28403504670537b82477348dd97ca41" + "content" : "77fcb592867445be61fb472dc11eb2ed91e4d7675f6050728fe34fef4488bad75cf5fbb128bdbe6874820ece7e752f684065b98a6b0690bcbbc081f0efdf7a9c" }, { "alg" : "SHA-384", - "content" : "9d57998dcddbcbbf9ebcf79a68b928ce6aa9c8770c2b7565771b457ed299545f5ddbcc99a13889af53ab12e391c618d6" + "content" : "827447252ad585c8ef98e9f737d2b5ec4529f6f68f0fd571bfae08f3264186a4a5c9d864b488b66d933877c8d13f7863" }, { "alg" : "SHA3-384", - "content" : "64b3e663d553d1c3aa38d9e3b34cad8b38d440dc937bdb6e80edab6621f3c519d38ce4ec04f5353bf7e103cf315a808b" + "content" : "2eaeb68497c50d4bcd38ba010ab33f4833310fdf4c057d32ce622f01febd34d37d4b353b31ad53040a6dce7b1c287bf6" }, { "alg" : "SHA3-256", - "content" : "3febae6771046e4a5909ec72a2b6cd1749f384c910f3a090443a26d4651a1953" + "content" : "a2c28164e5d0c37e00f10f6b5187a6b8c31f87d2d3d86b12f9721516f91034e7" }, { "alg" : "SHA3-512", - "content" : "7555011fd0167dd38b798556104d02f2c5bd4b7e035065234f44ae22c7779c1a7fef4f3b17769d49deaf0635c99d211cb219ffac05da6c50ae1313f032565526" + "content" : "9163b1eac48b627a86db9c7b93fe258657561540fb605d926c645cb59e82fe6f72d1fb7d97120b4bc1488e27ede2420dbacb1ed021ff76642d10a2bc3cc54612" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.sonarsource.java/java-frontend@7.33.0.35775?type=jar", + "purl" : "pkg:maven/org.sonarsource.java/java-frontend@8.18.0.40025?type=jar", "externalReferences" : [ { "type" : "website", @@ -1242,47 +1167,47 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.java/java-frontend@7.33.0.35775?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.java/java-frontend@8.18.0.40025?type=jar" }, { "publisher" : "SonarSource", "group" : "org.sonarsource.java", "name" : "jdt-package", - "version" : "1.1.0.34", - "description" : "Parent pom of SonarSource public projects", + "version" : "1.6.0.160", + "description" : "Packaging of Eclipse JDT Core for SonarQube Java Analyzer", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "b37dc58a62e2d0cf93c0721fd974c31c" + "content" : "1df75f474b6bdb538899d8704b84757a" }, { "alg" : "SHA-1", - "content" : "505fc262c9e9347ff10f5c2e095a008db26a538b" + "content" : "1f8abb9d709c6ba2ab7ce3aa933857cb3735a1ce" }, { "alg" : "SHA-256", - "content" : "7ac622acdb900de5bb04529b822412731308f1f02a610e596b8a7789c28bde07" + "content" : "5efd84c8e2e39a310e9139b503355e9f31eeb3bcce779860ce96944096cf064f" }, { "alg" : "SHA-512", - "content" : "c264a6a75e00b39325e2be6e9cc4cc9903fcbb97e1e60766f09a42bad4d00ef0bc76b741a9c76ca76bf60fe0052987362f4f564a78e0ef3a654fdad833a00cf4" + "content" : "fcb097a96b7c6903ed8e50c95cea915cdb4ab2f4398869b812489d8f639509f970646adcd66afc8004b0c14807e05510d4406d7215726775695b0abcbe602dc5" }, { "alg" : "SHA-384", - "content" : "1f17c8e14bf19d6f93cd61f745ca681e2bf3ec5a2566a9233553e7d2c71f7896c7ee770c37db46536b98fd5cbb19f687" + "content" : "e500ad2d02142aa1fbbe1b9436f9e5bbb74d5c208b0c6aa0191725b126c9a3a4d2a21c708b2bd26a4f11a9ef880fbe07" }, { "alg" : "SHA3-384", - "content" : "40d04d2a79475f774b6a2b2a08b02387e2ac2c17e4b9b220fc1e59baf0554c569573d9abe22af1cff8e5fef69b4a43dd" + "content" : "60bd6cd889de6164963d49fe557e13456d962893e74d56bda559c6b57bd18ab1e8a065e64a2d8317e13dd754052d3f23" }, { "alg" : "SHA3-256", - "content" : "7bdaedda0da1edc3e63e8e62bcf3651b4d4169c24efa0baba01c368d2c6b7b74" + "content" : "32c6d9249b541d8ff7b488f8c584d8f068caace22037ec0e2340e6e850b919b7" }, { "alg" : "SHA3-512", - "content" : "11854f8cb06c601f4e54488b0943a8eac7790dfacd3355e52b274e8a39fe0aec36fd25da6c5711c7c294eaf540958c88013a4b57e7399f76c51b9e75d451c0a5" + "content" : "8378364906e74189f4255964961c90273743b41af7859c8bb946a092965b5787f37718ce6dccbed3cb531501361293fa96175327bd62d29a7ffe18be70caab78" } ], "licenses" : [ @@ -1292,7 +1217,7 @@ } } ], - "purl" : "pkg:maven/org.sonarsource.java/jdt-package@1.1.0.34?type=jar", + "purl" : "pkg:maven/org.sonarsource.java/jdt-package@1.6.0.160?type=jar", "externalReferences" : [ { "type" : "website", @@ -1316,7 +1241,7 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.java/jdt-package@1.1.0.34?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.java/jdt-package@1.6.0.160?type=jar" }, { "publisher" : "SonarSource", @@ -1397,41 +1322,41 @@ "publisher" : "SonarSource", "group" : "org.sonarsource.analyzer-commons", "name" : "sonar-regex-parsing", - "version" : "2.8.0.2699", + "version" : "2.18.0.3393", "description" : "Logic useful to read and analyze regular expressions", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "35a3545ee8cc01b7630817c10d3ad63b" + "content" : "c9c38681ffebe27c85c27119dcbac4e2" }, { "alg" : "SHA-1", - "content" : "f30c693d63d35e55921b600d1cc02f6ab45fb162" + "content" : "887b8fb94772af059501ce252122d572da041615" }, { "alg" : "SHA-256", - "content" : "83710ff002b9faf8afb413a05a08b0530a3cf8ef130815d5a46c955c478664b5" + "content" : "0c3ea5153be8a0766373b1992a18c91702a48b37647ca400a5cd077b2d78e9ba" }, { "alg" : "SHA-512", - "content" : "0a10e363e24117e86650a1a8e9a10a637c4f99cee64405607be5da8c4bf4ecc413e67ed78acbd174b699b5c7325db5f0d623c10ded7e642a3e98f1f74e680f11" + "content" : "830bd069a1714fd24676db83114479961e3baea2abd4884c549f147edb6b83eafe4c9230f429818a9adfba89a0c4a21d39eddbcf4c1b937cc65a65b09d1a00ef" }, { "alg" : "SHA-384", - "content" : "c3775396d6d0c3001eb244d062e0f5262b78aae72a9d0ba5760dfa8eb5310112c403d0889cc73ade62a9fafcb515c635" + "content" : "ab21ccd7f07b9bceac88e85180e1f1643b43c30db4d8cdff030cd7cbc53753987284bfc1d412d7def8ec5380244fcfad" }, { "alg" : "SHA3-384", - "content" : "87bd8e6f2545740da80e5ad7c17600f1a3d0bd86aab07557e5f2fc3cdeccfc5654f030b0fe11c93e084da7a1e8b1d95b" + "content" : "ae43098f0c1a4939136f8f285cf9ca44663c2c77fd1120dd338239e70799b713af401a1c334559565263a1dc7f8613ae" }, { "alg" : "SHA3-256", - "content" : "85d791fcc5a6001f15ca84efff8a03c55b791a88745deca215c8108c8318ad1d" + "content" : "546a71b50a13237407e76548bf1fe5d61bf08df21dfa086bd17c2e3a103d25a0" }, { "alg" : "SHA3-512", - "content" : "024d92e865992b92d5c29a65ebec60a706ea8f0859de1c55312377ef22188396855b4403033d1e03a05208f37c3a24ea2e948f463cb3c5c9bc53c8d4266e5e03" + "content" : "18dbb41e4e61ece31c96cd50cc7a1d85799119cd5a88fef79ac4553071a363f485161ada5324cd8ef8b4204d60f000f5fff39c4db0eba2d15e9babf59a01f889" } ], "licenses" : [ @@ -1442,7 +1367,7 @@ } } ], - "purl" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.8.0.2699?type=jar", + "purl" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.18.0.3393?type=jar", "externalReferences" : [ { "type" : "website", @@ -1466,302 +1391,304 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.8.0.2699?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.18.0.3393?type=jar" }, { - "publisher" : "IBM", + "publisher" : "cbomkit", "group" : "com.ibm", "name" : "enricher", - "version" : "1.0.3-SNAPSHOT", + "version" : "2.0.0-SNAPSHOT", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "ab149929b86067137d9b3e6088980242" + "content" : "00d7c2f7423fee908b8cb27765971611" }, { "alg" : "SHA-1", - "content" : "1c46d73df827918655d53e22810abba87d2abead" + "content" : "a48f16b888963909ff9cdbf6e084e243e5976940" }, { "alg" : "SHA-256", - "content" : "1bdc36f18bf268014c86f3b723aa54fe3d6bfcca6e5e1cf5b0a5e8d8cac9df9c" + "content" : "5cbada4504b461582342ef5902100d0bebca490211ab89abf0807f83e6cbd4b8" }, { "alg" : "SHA-512", - "content" : "39061a336b260906ba1464db8c4016d5f4caf5335227365812f7ef9bbd4ac9439f101a324316733b1f0d1764b7882a52d51f4cbb245c3075ddb2b915772daf94" + "content" : "f44202d96665f6068ae2af5e2cd135c156fc28a5ce7e5c923c1b03874c78a1d00377cea8810dabf95baca38bfc1335083a781e5d0de726d5589a65c95689efa2" }, { "alg" : "SHA-384", - "content" : "d2d377fc38755a0ab145758429e4998f76602663b8be64dd4dffa346cfbd52b33a7eb0db2ae417b5df6fcc7ce9425e7f" + "content" : "8adf77fe24333492e4e498c7be9ef91bbb8b94b5cccb1e93bbb4f566dbd68953ce3149fcc2509870880f7420c5419e56" }, { "alg" : "SHA3-384", - "content" : "0e51949beb1b78c7a88500da6c3c8961c7b0d1ad92f09ae0be3572d71d1e220d4dea4a38b4ff7fc06c2d1223b7dca58d" + "content" : "923d1aa53e1e323d598da22783ca93356793cfb830cd8b99c0ed603f810bea68a3ad5629daa98cf4af9f8099bc158859" }, { "alg" : "SHA3-256", - "content" : "e3d5a512fda5691283a0977cd5cfe715500af578526b3a10af5f39ecd912a3e4" + "content" : "33118761988bae85c1a08aafcb4dafba126f3d894f528c7d706185d2556492ff" }, { "alg" : "SHA3-512", - "content" : "6ca0362a0c9acf97f0291ba29abe36fae66d259c3fda417615c89cc74fd7bda4f0a8f794242eac5ae255b46d009e8e0c5dd33917b95711256b383eb13c3fe372" + "content" : "b087c3b1d8f38c865f27269519b117fc7b7d74b4154a36a62e076231db260fe36e270cec272a74c1591ee6336ac4cc7d26504f9bfaa7d12b0c0546c648594ecd" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "https://www.gnu.org/licenses/lgpl.txt" + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], - "purl" : "pkg:maven/com.ibm/enricher@1.0.3-SNAPSHOT?type=jar", + "purl" : "pkg:maven/com.ibm/enricher@2.0.0-SNAPSHOT?type=jar", "externalReferences" : [ { "type" : "distribution-intake", - "url" : "https://eu.artifactory.swg-devops.com/artifactory/res-cryptoagility-team-maven-local" + "url" : "https://maven.pkg.github.com/cbomkit/sonar-cryptography" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.ibm/enricher@1.0.3-SNAPSHOT?type=jar" + "bom-ref" : "pkg:maven/com.ibm/enricher@2.0.0-SNAPSHOT?type=jar" }, { - "group" : "org.bouncycastle", - "name" : "bcpkix-jdk18on", - "version" : "1.78", - "description" : "The Bouncy Castle Java APIs for CMS, PKCS, EAC, TSP, CMP, CRMF, OCSP, and certificate generation. This jar contains APIs for JDK 1.8 and up. The APIs can be used in conjunction with a JCE/JCA provider such as the one provided with the Bouncy Castle Cryptography APIs.", + "publisher" : "cbomkit", + "group" : "com.ibm", + "name" : "rules", + "version" : "2.0.0-SNAPSHOT", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "9553f65f617b0deb8efcbc131262706b" + "content" : "d7ecc53f19d43c6f2a4b49e4176ca55c" }, { "alg" : "SHA-1", - "content" : "dd61bcdb87678451dd42d42e267979bd4b4451a1" + "content" : "c56bb5c149d3dfcab27b3cd46cff1417f6f8fb0a" }, { "alg" : "SHA-256", - "content" : "ce36b14a90e6b3e9a2c9964e67440d4c758bd257189e7cd745d29a3817611861" + "content" : "df50b46a93159b37559a368172ff36723491b105332dac34d30016617a1cae0a" }, { "alg" : "SHA-512", - "content" : "c5460e4e53d08765fedc4402b8785677bd062f32ad928a151f9590941f463d9016af898b9ab3a38761d74e8f25d9368be9824bc8ef3279eab54adb2abd9e0ae4" + "content" : "41d01c3b1af55b447c252540c6315181c51418f4c8da7d8e8e9941d137dbe4b3db8fddd29e80ee8a5aab44c5f0ca53064db6018225d1093915659f7d70f31e10" }, { "alg" : "SHA-384", - "content" : "a730ed33aa0ff4b5c6595fd75d50dd88136b273a4654274edc2d89e166b5ee22df3dc86c898e75d65668fb642736bd8d" + "content" : "548c8780f188b1f0474dc9fec03ddbd2db58e4559614094c0690bd1b9921b9f4f632bef951a1f1f290e883013d1e37a1" }, { "alg" : "SHA3-384", - "content" : "8e4d70a67d45d728854f950c660f34751667403e70f9416818fe314e1b78d196bb780f5bf7d884c506acded0af84d337" + "content" : "b91056be1f547eee5c1ea75182d1325cb010cfed29fcd20a766784f3cd02808d5463edbf8f46ced5c022b00a467bdf3c" }, { "alg" : "SHA3-256", - "content" : "47b760ec891f693389d6c2fd966d3f3ff70c669cd88c8e8e3dafac621ba189ce" + "content" : "ad7e4096af3a203f56bf433a5cf9a33c7ac109429a9fb8002162807413eca9f2" }, { "alg" : "SHA3-512", - "content" : "a77f6916d5a8c9965c2f1909b4c65bc8bd8cc18e22bcc4bd846e9a0b1e52f9c89a2f6e93a76b08fda8b4d22d80105cdb4b88102ca1492475a3a2c2dfebebebf8" + "content" : "ee8b8b71399966ed05fde682ddca8eabc55cb97be61e7225a3c7f8e2d9b934cc42e25ba503b0a9696309ddc5608cc7acae241c6209c7d401af9be00c3362646d" } ], "licenses" : [ { "license" : { - "name" : "Bouncy Castle Licence", - "url" : "https://www.bouncycastle.org/licence.html" + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], - "purl" : "pkg:maven/org.bouncycastle/bcpkix-jdk18on@1.78?type=jar", + "purl" : "pkg:maven/com.ibm/rules@2.0.0-SNAPSHOT?type=jar", "externalReferences" : [ { - "type" : "website", - "url" : "https://www.bouncycastle.org/java.html" - }, - { - "type" : "issue-tracker", - "url" : "https://github.com/bcgit/bc-java/issues" - }, - { - "type" : "vcs", - "url" : "https://github.com/bcgit/bc-java" + "type" : "distribution-intake", + "url" : "https://maven.pkg.github.com/cbomkit/sonar-cryptography" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.bouncycastle/bcpkix-jdk18on@1.78?type=jar" + "bom-ref" : "pkg:maven/com.ibm/rules@2.0.0-SNAPSHOT?type=jar" }, { - "group" : "org.bouncycastle", - "name" : "bcprov-jdk18on", - "version" : "1.78", - "description" : "The Bouncy Castle Crypto package is a Java implementation of cryptographic algorithms. This jar contains JCE provider and lightweight API for the Bouncy Castle Cryptography APIs for JDK 1.8 and up.", + "group" : "com.google.guava", + "name" : "guava", + "version" : "33.5.0-jre", + "description" : "Guava is a suite of core and expanded libraries that include utility classes, Google's collections, I/O classes, and much more.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "54b851711aea718aa835739bc23f7b90" + "content" : "d9fbf39a41a5bab891348f07668e18c5" }, { "alg" : "SHA-1", - "content" : "619aafb92dc0b4c6cc4cf86c487ca48ee2d67a8e" + "content" : "8699de25f2f979108d6c1b804a7ba38cda1116bc" }, { "alg" : "SHA-256", - "content" : "1bf721b09758b3f55f2a5c875b6178ec6c41dddad854b0dead4b27a236f1943a" + "content" : "1e301f0c52ac248b0b14fdc3d12283c77252d4d6f48521d572e7d8c4c2cc4ac7" }, { "alg" : "SHA-512", - "content" : "5c2707f611fe4f80d7775bd0b19953384f963dc63128c16583d02c37a5f556938bd8c86fafe82849f11d45d1baa5e8ca405a89f008557e4d9ba476ee6bc05104" + "content" : "994a4dbcbd8e528ad3b4a7acf49b631a40dcebb03d9a8f5e1d3b74351f805f77774e9a19f7233e42036cb415b7838710f207ac1e18335e4a219b7f99ea22a44f" }, { "alg" : "SHA-384", - "content" : "56c70dfe6ee8f01066bbc24d1ffe63ea75b775d35b18dbaab4010502864e9eaf96fc4f8453507be9c6412cd93bf4ed0a" + "content" : "9dabff6e543ead881b20d38a533e9151aaa83999239cf0ace3e712cf678e7976c3a50d79e3f3c57afc05a3b9ff14ad90" }, { "alg" : "SHA3-384", - "content" : "b77d9d509f9d55bcc46825930846d1bba60040f21be38081ae1ed5394ae1d7647466ec73a96f3d556c076994e6b5a40a" + "content" : "9f65d4d942113facb2eb25229c1530b79dd3b8994574034b8d4a1c2b39ed8ee5bb4d415ec690d3d87cee0d8cb2283564" }, { "alg" : "SHA3-256", - "content" : "b70981e53ef280f94c025fd1f790f493d52d04ccc9e2b4261405114747ca5983" + "content" : "fedafab2279bdf6eff66314fc61b056e92312695678e66dc1e25fe1d18af5a36" }, { "alg" : "SHA3-512", - "content" : "33840c1b2613b941215f88a865ac94a38e36655ed9f7f05693b77591ea7a5f3f2c8c8ea167875de2b4ae69d5a4e00a8fd788eedc0a17c3cd86a69a0dd80bb61a" + "content" : "e64f3c49f9030358554bb0b8abdff729394988f1e3247b05a86302014eeff4a2855acf46d9bf1c683cbecc33a24173a20a103d3c82c94f8cabd6676a01b40fb6" } ], "licenses" : [ { "license" : { - "name" : "Bouncy Castle Licence", - "url" : "https://www.bouncycastle.org/licence.html" + "id" : "Apache-2.0" } } ], - "purl" : "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.78?type=jar", + "purl" : "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://www.bouncycastle.org/java.html" + "url" : "https://github.com/google/guava" + }, + { + "type" : "build-system", + "url" : "https://github.com/google/guava/actions" }, { "type" : "issue-tracker", - "url" : "https://github.com/bcgit/bc-java/issues" + "url" : "https://github.com/google/guava/issues" }, { "type" : "vcs", - "url" : "https://github.com/bcgit/bc-java" + "url" : "https://github.com/google/guava/guava" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.78?type=jar" + "bom-ref" : "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar" }, { - "group" : "org.bouncycastle", - "name" : "bcutil-jdk18on", - "version" : "1.78", - "description" : "The Bouncy Castle Java APIs for ASN.1 extension and utility APIs used to support bcpkix and bctls. This jar contains APIs for JDK 1.8 and up.", + "group" : "com.google.guava", + "name" : "failureaccess", + "version" : "1.0.3", + "description" : "Contains com.google.common.util.concurrent.internal.InternalFutureFailureAccess and InternalFutures. Most users will never need to use this artifact. Its classes are conceptually a part of Guava, but they're in this separate artifact so that Android libraries can use them without pulling in all of Guava (just as they can use ListenableFuture by depending on the listenablefuture artifact).", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "281b9eb6391a1bfb064142eb05470e94" + "content" : "29a782e90f6b37218b18bb880d2a8f4a" }, { "alg" : "SHA-1", - "content" : "81c1f5e06f206be5dad137d563609dbe66c81d31" + "content" : "aeaffd00d57023a2c947393ed251f0354f0985fc" }, { "alg" : "SHA-256", - "content" : "f584cf9ba2c64a9255160ec8a3be72a112f50c4b5e9e456671d1805ed159eb50" + "content" : "cbfc3906b19b8f55dd7cfd6dfe0aa4532e834250d7f080bd8d211a3e246b59cb" }, { "alg" : "SHA-512", - "content" : "4bb734d6a6e42a1a16560e7d68fb7ff68f47588c64792bc4523eb40c377d568ee00ed0428c6f354c18c3277c79481d6eb1f955b1132cd3f065082199ac57108b" + "content" : "72be228e7805da5623e42bf024ded7d9147023c66b22f4dbd04ac6898201af46ee82e1f92ea51eb0595f1b49151c4b8ecb862653d4906c17609c42544ee97abf" }, { "alg" : "SHA-384", - "content" : "a254f7aef8080bec355dd299c70c253aca89c8480fdb70281f96fe3f66d901d9ff286270fdd45f5df21241bef0c8c3f5" + "content" : "9dd1a2a08efda311604992d3e7cee64873bc8c64de3b423b1b3a3dcc1f7f0810bb03901fbfe39a5f835accb0646f4ad8" }, { "alg" : "SHA3-384", - "content" : "8331f9fc5d040331bd6d1fb8954abcf548f57f99505dc9aaa08783428a71cd55dae789c03ee482ec0764c48bce9b1c43" + "content" : "ffd67766c165ee77e96824e06de2c19864a6e61f785b2085eb825f308f173d71f2555559d90d910f33f3367378ace0e3" }, { "alg" : "SHA3-256", - "content" : "6dd72dd00b58b6fb03f2fc4462c5050e2ebfedc6b395cfefbd779f00031a72f5" + "content" : "08a77b528a72ca412b36e4004692705ebfd75cfb4897c88632d367d08a34b09f" }, { "alg" : "SHA3-512", - "content" : "a72d6a0bf892e3652df05d35a7213b4d785e1cec1fed180982538baa43eac532f84b4c44d4a187d79b1df30d6e19d349617329ca6dd4c08a3a1d7b67249bdb8b" + "content" : "7cba6c266babbe8272f029eea6e2cbddadee96eb1a16916a6eb2441a55837867ce717385d4388735fd83f2f6555931077c0ebda011a1ee9a37ac38c8c0c43a65" } ], "licenses" : [ { "license" : { - "name" : "Bouncy Castle Licence", - "url" : "https://www.bouncycastle.org/licence.html" + "id" : "Apache-2.0" } } ], - "purl" : "pkg:maven/org.bouncycastle/bcutil-jdk18on@1.78?type=jar", + "purl" : "pkg:maven/com.google.guava/failureaccess@1.0.3?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://www.bouncycastle.org/java.html" + "url" : "https://github.com/google/guava/failureaccess" + }, + { + "type" : "build-system", + "url" : "https://github.com/google/guava/actions" + }, + { + "type" : "distribution-intake", + "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", - "url" : "https://github.com/bcgit/bc-java/issues" + "url" : "https://github.com/google/guava/issues" }, { "type" : "vcs", - "url" : "https://github.com/bcgit/bc-java" + "url" : "https://github.com/google/guava/failureaccess" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.bouncycastle/bcutil-jdk18on@1.78?type=jar" + "bom-ref" : "pkg:maven/com.google.guava/failureaccess@1.0.3?type=jar" }, { - "group" : "org.jetbrains", - "name" : "annotations", - "version" : "24.1.0", - "description" : "A set of annotations used for code inspection support and code documentation.", + "group" : "com.google.guava", + "name" : "listenablefuture", + "version" : "9999.0-empty-to-avoid-conflict-with-guava", + "description" : "An empty artifact that Guava depends on to signal that it is providing ListenableFuture -- but is also available in a second \"version\" that contains com.google.common.util.concurrent.ListenableFuture class, without any other Guava classes. The idea is: - If users want only ListenableFuture, they depend on listenablefuture-1.0. - If users want all of Guava, they depend on guava, which, as of Guava 27.0, depends on listenablefuture-9999.0-empty-to-avoid-conflict-with-guava. The 9999.0-... version number is enough for some build systems (notably, Gradle) to select that empty artifact over the \"real\" listenablefuture-1.0 -- avoiding a conflict with the copy of ListenableFuture in guava itself. If users are using an older version of Guava or a build system other than Gradle, they may see class conflicts. If so, they can solve them by manually excluding the listenablefuture artifact or manually forcing their build systems to use 9999.0-....", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "38673abe87d12508cd05498eff0b9731" + "content" : "d094c22570d65e132c19cea5d352e381" }, { "alg" : "SHA-1", - "content" : "7af6a669488450c4a07c2c3254e2151df42d7d04" + "content" : "b421526c5f297295adef1c886e5246c39d4ac629" }, { "alg" : "SHA-256", - "content" : "27a770dc7ce50500918bb8c3c0660c98290630ec796b5e3cf6b90f403b3033c6" + "content" : "b372a037d4230aa57fbeffdef30fd6123f9c0c2db85d0aced00c91b974f33f99" }, { "alg" : "SHA-512", - "content" : "663395a885561cc97eed411c67b496c06ec9a54906185a871de8743bf53e92152f4bc7c2a0118b7f3cfe85cc0a6c408ac6d589839b8d25c851637f85880331f2" + "content" : "c5987a979174cbacae2e78b319f080420cc71bcdbcf7893745731eeb93c23ed13bff8d4599441f373f3a246023d33df03e882de3015ee932a74a774afdd0782f" }, { "alg" : "SHA-384", - "content" : "85779b72d864894f1d3cdd489b0a419c0620281c4fd22a061f4a3fe2aee91015681889573200cd2124c3add48a3216a6" + "content" : "caff9b74079f95832ca7f6029346b34b606051cc8c5a4389fac263511d277ada0c55f28b0d43011055b268c6eb7184d5" }, { "alg" : "SHA3-384", - "content" : "0cfce80b012ba441be96368fe8af54e805100f7680fdbb7defae4dd07ff3c75cd0f89b993a61bef139a405637a73236f" + "content" : "e939f08df0545847ea0d3e4b04a114b08499ad069ba8ec9461d1779f87a56e0c37273630a0f4c14e78c348d3ac7eb97f" }, { "alg" : "SHA3-256", - "content" : "f7c5e25c9c16aad9f5482f3853660238db4f32be72c20f40383a1d20e0306f42" + "content" : "1f0a8b1177773b3a8ace839df5eed63cbf56b24a38714898a6e4ed065c42559f" }, { "alg" : "SHA3-512", - "content" : "0f74369cdb67a58c0f89033723665320eb535d1c1e66049347f6b3e25cbf7d1f80b8fa3a7b3e0b4fa8eae8d9ec8c30510b65bab581adeaff3f94651fa214105a" + "content" : "6b495ecc2a18b17365cb08d124a0da47f04bcdde81927b5245edf3edd8e498c3c3fb92ce6a4127f660bac851bb1d3e4510e5c20d03be47ce99dc296d360db285" } ], "licenses" : [ @@ -1771,121 +1698,132 @@ } } ], - "purl" : "pkg:maven/org.jetbrains/annotations@24.1.0?type=jar", + "purl" : "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://github.com/JetBrains/java-annotations" + "url" : "https://github.com/google/guava/listenablefuture" + }, + { + "type" : "build-system", + "url" : "https://travis-ci.org/google/guava" + }, + { + "type" : "distribution-intake", + "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" + }, + { + "type" : "issue-tracker", + "url" : "https://github.com/google/guava/issues" }, { "type" : "vcs", - "url" : "https://github.com/JetBrains/java-annotations" + "url" : "https://github.com/google/guava/listenablefuture" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.jetbrains/annotations@24.1.0?type=jar" + "bom-ref" : "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar" }, { - "publisher" : "SonarSource", - "group" : "org.sonarsource.api.plugin", - "name" : "sonar-plugin-api", - "version" : "9.13.0.360", - "description" : "Plugin API for SonarQube, SonarCloud and SonarLint", + "group" : "org.jspecify", + "name" : "jspecify", + "version" : "1.0.0", + "description" : "An artifact of well-named and well-specified annotations to power static analysis checks", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "b401a934655540b37bf6765778a7b759" + "content" : "9133aba420d0ca3b001dbb6ae9992cf6" }, { "alg" : "SHA-1", - "content" : "64b99cf118b048da0fa98a397b2e03f11c6970e9" + "content" : "7425a601c1c7ec76645a78d22b8c6a627edee507" }, { "alg" : "SHA-256", - "content" : "f20ae1d944f84a611583c33900d8788aa855a0d9ea66493e1046539715d53c0c" + "content" : "1fad6e6be7557781e4d33729d49ae1cdc8fdda6fe477bb0cc68ce351eafdfbab" }, { "alg" : "SHA-512", - "content" : "f6b8fa7447300c1f95e14e9be12d36419b302d1844bd069ceaae134b3caa54d546a337be3c66e8e25ca5dd78fb95e76f92306cf5c26ba0730e3c730d443c2822" + "content" : "efded31ef5b342f09422935076e599789076431e93a746685c0607e7de5592719ba6aacde0be670b3f064d1e85630d58d5bce6b34aed2a288fdb34f745efb7bc" }, { "alg" : "SHA-384", - "content" : "5cbdc17456d4ab1959cd8ad59d64a733224a3d03aa0f1e12968e0e7c86785e465d3f27f7c54b13c858326b4ee8bd60a7" + "content" : "814f860e5a44ead6c457676841eef471a8b87be31b84c60a8a4477a18a9cbcb6e3c2ae700969d5c5e52309d961e0537a" }, { "alg" : "SHA3-384", - "content" : "8930616bed39525c4c5c0396f8c541268b46b1df45432ee66ca6af8609a6ebd1e904493f025ba4b045401930a3ea2a2d" + "content" : "c8844e5b71e5ecfbb7366097ce34af2f5863d86d5ccc3f9ec384d8ade4b60ccc8124c7fc88664f1afd2b0962fc8775bf" }, { "alg" : "SHA3-256", - "content" : "4fb1225cc1bed06656fa92422d0425b44032725e6afb8d980c4af8cd8efc4b40" + "content" : "4b4f08ad7606a3ac62997779484919a302267b26d26ee19125f8a7eea60e8a71" }, { "alg" : "SHA3-512", - "content" : "3a505b03e37ff9bd00248bf77344b880f206042a81b90eccbb42a78fe2496ff4f61c519f4ec77ded65d1f488b4caf6a69afae97a9a5a59f915ec8068176a0cbb" + "content" : "65c6845ebae981cb81b61107707ced39f5b377dae970b47606ef482aaf10e3729def0da40d9377c43abbfb483a5ceae039b0d51c129c50a6d36ad351a5d6b01e" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "https://www.gnu.org/licenses/lgpl-3.0.txt" + "id" : "Apache-2.0" } } ], - "purl" : "pkg:maven/org.sonarsource.api.plugin/sonar-plugin-api@9.13.0.360?type=jar", + "purl" : "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://www.sonarqube.org/" + "url" : "http://jspecify.org/" }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-plugin-api" + "url" : "https://github.com/jspecify/jspecify/" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.api.plugin/sonar-plugin-api@9.13.0.360?type=jar" + "bom-ref" : "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar" }, { - "group" : "com.google.code.findbugs", - "name" : "jsr305", - "version" : "3.0.2", - "description" : "JSR305 Annotations for Findbugs", + "publisher" : "Google LLC", + "group" : "com.google.errorprone", + "name" : "error_prone_annotations", + "version" : "2.41.0", + "description" : "Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "dd83accb899363c32b07d7a1b2e4ce40" + "content" : "75e3b25da8b8a2136463c4674f5e49bf" }, { "alg" : "SHA-1", - "content" : "25ea2e8b0c338a877313bd4672d3fe056ea78f0d" + "content" : "4381275efdef6ddfae38f002c31e84cd001c97f0" }, { "alg" : "SHA-256", - "content" : "766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7" + "content" : "a56e782b5b50811ac204073a355a21d915a2107fce13ec711331ad036f660fcc" }, { "alg" : "SHA-512", - "content" : "bb09db62919a50fa5b55906013be6ca4fc7acb2e87455fac5eaf9ede2e41ce8bbafc0e5a385a561264ea4cd71bbbd3ef5a45e02d63277a201d06a0ae1636f804" + "content" : "e2eb4bf9f36f95a4d4c5ea344db5cd90a456e63bef8e52932b8f6f4ecfdd59cb2f6c2ce9e67b0070c82177e42885688b95afef591b16001f789b378f18afdf30" }, { "alg" : "SHA-384", - "content" : "ca0b169d3eb2d0922dc031133a021f861a043bb3e405a88728215fd6ff00fa52fdc7347842dcc2031472e3726164bdc4" + "content" : "43700b378624aa37197ef03a6b5ea40b5fbb6c0aa667eadf810ad36f0707dffaf3ea23471f2553327c3f5644cc875ee7" }, { "alg" : "SHA3-384", - "content" : "9903fd7505218999f8262efedb3d935d64bcef84aae781064ab5e1b24755466b269517cada562fa140cd1d417ede57a1" + "content" : "8bf3293cf4b72c9a999948f8812190636ef3b0c35bab8dbf9a54c263eeab2a3b3d0774fdcab52c6d114551ff74a8aea2" }, { "alg" : "SHA3-256", - "content" : "223fda9a89a461afaae73b177a2dc20ed4a90f2f8757f5c65f3241b0510f00ff" + "content" : "2ca1a59f4fdc37a3c83501542c63842fa4fe40c06f69a59a2a072e4af442a16a" }, { "alg" : "SHA3-512", - "content" : "3996b5af57a5d5c6a0cd62b11773360fb051dd86a2ba968476806a2a5d32049b82d69a24a3c694e8fe4d735be6a28e41000cc500cc2a9fb577e058045855d2d6" + "content" : "6d1f419996b15e5a2bd9b268d166046e38fe9cc6c58fe56aaacbe71b95e3db8c8fe1d226e7f549ea227956feaf3087706bdfa79930fe432298bba9ec06c26a90" } ], "licenses" : [ @@ -1895,455 +1833,485 @@ } } ], - "purl" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", + "purl" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.41.0?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://findbugs.sourceforge.net/" - }, - { - "type" : "distribution-intake", - "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" + "url" : "https://errorprone.info/error_prone_annotations" }, { "type" : "vcs", - "url" : "https://code.google.com/p/jsr-305/" + "url" : "https://github.com/google/error-prone/error_prone_annotations" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar" + "bom-ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.41.0?type=jar" }, { - "publisher" : "The Apache Software Foundation", - "group" : "org.apache.commons", - "name" : "commons-lang3", - "version" : "3.14.0", - "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.", + "group" : "com.google.j2objc", + "name" : "j2objc-annotations", + "version" : "3.1", + "description" : "A set of annotations that provide additional information to the J2ObjC translator to modify the result of translation.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "4e5c3f5e6b0b965ef241d7d72ac8971f" + "content" : "abe8bd3abff622b9a8b15c3a737aa741" }, { "alg" : "SHA-1", - "content" : "1ed471194b02f2c6cb734a0cd6f6f107c673afae" + "content" : "a892ca9507839bbdb900d64310ac98256cab992f" }, { "alg" : "SHA-256", - "content" : "7b96bf3ee68949abb5bc465559ac270e0551596fa34523fddf890ec418dde13c" + "content" : "84d3a150518485f8140ea99b8a985656749629f6433c92b80c75b36aba3b099b" }, { "alg" : "SHA-512", - "content" : "0338b50767166e5746ada6d6aa2e071e7221d699323bfb629f7f204b294c1dc4cad140610a129ed751798443b43e74e0818989c7df7d33c5915aa29742be9ba8" + "content" : "34ee5aad57b0b507e89c897306f73043f80fa0eb02b453e54d9052feb0808a0d2ed835d888946211921d2bf733780b19ff636479ce19b9f48814ba6008733ce1" }, { "alg" : "SHA-384", - "content" : "908d0a22dc17aaa04caa5104cff7cad5b88b77eecb78dd5b3b3fefa22ff71ac50a4fb9e31c897ac243f9d841e4b3453d" + "content" : "7b760a346a586d6a3fa4477807e2f02f091e61898fc9a6ff449e43c55b6465fbbc17720663183c84c41d4d8814085e51" }, { "alg" : "SHA3-384", - "content" : "8a7f2e061b998780870eddd571620fbf3d3c70bcb54e24539d0db504f59d65bc6bda58136284498babe29fcc5eabb7a6" + "content" : "a2166c1c08f947c0e60aa7c9167602942e7bac37ba45863d34c0132a1f352e7807a382588d350b93bdbbbbe315a3573f" }, { "alg" : "SHA3-256", - "content" : "022bf1f8039fcea717e9e34dd96eb80cfff05b43c9cbb76e9739b2421e2d027c" + "content" : "3d4d3b8bfd2ad13351a53610aa4bf1c5a69d2bde4272c281003120ed9bcddb8c" }, { "alg" : "SHA3-512", - "content" : "0bcbc4edce974ea970c46e2da12ec98d9fd962c2cf64f757ac97136dec5623ca52af0c225895303c17ffabb57090e6772d7bd326d5e7438cef5454f8bbaeecfa" + "content" : "0a574b379a3f8022f0b88252c87d0e6b6cfa434fdb981efd1b24387025a962d7ac4e90161e8bd048df142bf52f4fc41e4a0c1d45e4eeb872c5954aad552988e9" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0", - "url" : "https://www.apache.org/licenses/LICENSE-2.0" + "id" : "Apache-2.0" } } ], - "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar", + "purl" : "pkg:maven/com.google.j2objc/j2objc-annotations@3.1?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://commons.apache.org/proper/commons-lang/" - }, - { - "type" : "build-system", - "url" : "https://github.com/apache/commons-parent/actions" + "url" : "https://github.com/google/j2objc/" }, { "type" : "distribution-intake", - "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" - }, - { - "type" : "issue-tracker", - "url" : "https://issues.apache.org/jira/browse/LANG" + "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { - "type" : "mailing-list", - "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/" + "type" : "vcs", + "url" : "http://github.com/google/j2objc" + } + ], + "type" : "library", + "bom-ref" : "pkg:maven/com.google.j2objc/j2objc-annotations@3.1?type=jar" + }, + { + "publisher" : "SonarSource", + "group" : "org.sonarsource.api.plugin", + "name" : "sonar-plugin-api", + "version" : "13.4.3.4290", + "description" : "Plugin API for SonarQube, SonarCloud and SonarLint", + "scope" : "required", + "hashes" : [ + { + "alg" : "MD5", + "content" : "9121c8851ff1af1153c8dd4fa94c9ce7" + }, + { + "alg" : "SHA-1", + "content" : "64194b3b6336b78df92f9fa5a58682c85ec5626b" + }, + { + "alg" : "SHA-256", + "content" : "ce1c77307f81897f3c8f901d81a0169db9f2ec614d65723679bc8bfedceb56dd" + }, + { + "alg" : "SHA-512", + "content" : "8a9f34a03acbe05d9086119287ab2b2d84c8bff43367f75d42ca5bd5f66c54e4007d1affe247f7f3a0cb710328705b6a0db0db2e211b46e8979ea9e3eee6c401" + }, + { + "alg" : "SHA-384", + "content" : "7f1d268c151ad6fda7e5c5b21abb74b5a4b2bcb3e43fb4d3eceef01cab5e28e12b0d019d6d7da39a977f1fd8a6260ed2" + }, + { + "alg" : "SHA3-384", + "content" : "c4ab8215fb558662a98375c9f347636f4e27fa912a23acadf804c5661caa2899529a6777f8c9f9a133c5a6e676ec0bf4" + }, + { + "alg" : "SHA3-256", + "content" : "acb5c5fb43a612de73d7562499398bfb7678b878de04ecb697590fac4ed2e61c" + }, + { + "alg" : "SHA3-512", + "content" : "bf256b0cd721c685cc677bc5ab0af2eb68e469b7cdcd9e9bae7b60baa718b159b0e2cc9ca489a088b8d4556cef33da26d1bdf7fb1b952014b61e4b282aface76" + } + ], + "licenses" : [ + { + "license" : { + "name" : "GNU LGPL 3", + "url" : "https://www.gnu.org/licenses/lgpl-3.0.txt" + } + } + ], + "purl" : "pkg:maven/org.sonarsource.api.plugin/sonar-plugin-api@13.4.3.4290?type=jar", + "externalReferences" : [ + { + "type" : "website", + "url" : "https://www.sonarqube.org/" }, { "type" : "vcs", - "url" : "https://gitbox.apache.org/repos/asf?p=commons-lang.git" + "url" : "https://github.com/SonarSource/sonar-plugin-api" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.api.plugin/sonar-plugin-api@13.4.3.4290?type=jar" }, { - "group" : "com.google.code.gson", - "name" : "gson", - "version" : "2.10.1", - "description" : "Gson JSON library", + "publisher" : "QOS.ch", + "group" : "org.slf4j", + "name" : "slf4j-api", + "version" : "2.0.17", + "description" : "The slf4j API", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "df6097815738cb31fc56391553210843" + "content" : "b6480d114a23683498ac3f746f959d2f" }, { "alg" : "SHA-1", - "content" : "b3add478d4382b78ea20b1671390a858002feb6c" + "content" : "d9e58ac9c7779ba3bf8142aff6c830617a7fe60f" }, { "alg" : "SHA-256", - "content" : "4241c14a7727c34feea6507ec801318a3d4a90f070e4525681079fb94ee4c593" + "content" : "7b751d952061954d5abfed7181c1f645d336091b679891591d63329c622eb832" }, { "alg" : "SHA-512", - "content" : "7503e4b8d05c6cc0ecb3a94c5a2e070e049083a441003a79a0cdf474f4286699b4ba1d2a655ddabb8ba10c50e7c36a7045cccdaee465166d4630db647aba2727" + "content" : "9a3e79db6666a6096a3021bb2e1d918f30f589d8de51d6b600f8ebd92515a510ae2d8f87919cc2dfa8365d64f10194cac8dfa0fb950160eef0e9da06f6caaeb9" }, { "alg" : "SHA-384", - "content" : "48a4786bd6e1867f058ee4fb676fc82d9d9f64a6d7420d4a47ae2398504c9de73222636614aeb4a9fbf10ee143d72226" + "content" : "6ea24f814a9b6ece428cfd0535e2f3b8927005745ef61006b50fdb5a90126ee5ea05650155382b3b755c5bce38ef3944" }, { "alg" : "SHA3-384", - "content" : "3df9a0332c2766124fe7c915cfea665d2e318ccaa7212415fabd9e93e6eb77de538725fd2ef313cde46f6d814c9566ea" + "content" : "9b1015052f0ec43f9be09764e131834157599611cb52f6fe591c4ac6a8ab4817518f2a4b8871e5e738c8678e93af5557" }, { "alg" : "SHA3-256", - "content" : "d3374006d76d4f9acdf3d3a1a4f47899570f52442b2188f80c09a74f22139ecb" + "content" : "00559b4f4066b4917ba4fe2a6f23111eaeada321112d030910d218ced9084b5e" }, { "alg" : "SHA3-512", - "content" : "2b10c2f4fe39d8712b430ff171823d7172c0a06685c1eb7de511e90159cec0e094fb2a9b50b747c5b039cb10f1fce9edf82ecbf9c47f76a6f31c4e3cb7586cce" + "content" : "9579c2f7e7516e177c2d493ccc9eb8150978cf19f6f09b28d116f6935239fd56dc6af2b62b3336f79b0b462445550cd1fb5377a07001a6f44aaab6a32fa2fa47" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0", - "url" : "https://www.apache.org/licenses/LICENSE-2.0" + "id" : "MIT", + "url" : "https://opensource.org/licenses/MIT" } } ], - "purl" : "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar", + "purl" : "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://github.com/google/gson/gson" + "url" : "http://www.slf4j.org" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, - { - "type" : "issue-tracker", - "url" : "https://github.com/google/gson/issues" - }, { "type" : "vcs", - "url" : "https://github.com/google/gson/gson/" + "url" : "https://github.com/qos-ch/slf4j/slf4j-parent/slf4j-api" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar" + "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar" }, { - "publisher" : "SonarSource", - "group" : "org.sonarsource.java", - "name" : "sonar-java-plugin", - "version" : "7.33.0.35775", - "description" : "Code Analyzer for Java", + "publisher" : "The Apache Software Foundation", + "group" : "org.apache.commons", + "name" : "commons-lang3", + "version" : "3.18.0", + "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang. The code is tested using the latest revision of the JDK for supported LTS releases: 8, 11, 17 and 21 currently. See https://github.com/apache/commons-lang/blob/master/.github/workflows/maven.yml Please ensure your build environment is up-to-date and kindly report any build issues.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "1b7d9cc6384c6be9b2b2be09d39a4409" + "content" : "48b9886957920a4cdb602780ca345087" }, { "alg" : "SHA-1", - "content" : "74549fd0b22373ba0db5f5d8c9e83c4e1d4859d6" + "content" : "fb14946f0e39748a6571de0635acbe44e7885491" }, { "alg" : "SHA-256", - "content" : "84d7f2cce4bf4e66bacd053fd350489792519d83c292c2f4d5d8df0404450959" + "content" : "4eeeae8d20c078abb64b015ec158add383ac581571cddc45c68f0c9ae0230720" }, { "alg" : "SHA-512", - "content" : "f70839584286b4141cb252727f299be7a6f27cc8714d66b9c8b4a97d19030c5e39277ed85019cb2ffd9cd59f4b5c7780dd2bdd8cccd14d49a7aa618640069eca" + "content" : "c2c9d497fc1be411050f4011b2407764b78aa098eb42925af8a197eabdbc25b507f09fb898805e9bed4815f35236a508ee5b096e36f363df4d407232d50fc832" }, { "alg" : "SHA-384", - "content" : "ab79904167297307834e85b850b012fbdd22d6dbb938567ca8525219f8cd1cc2b725cc9ca781bca94dbab340580130ff" + "content" : "4fb3f101106e4ce3666d5c15d276ba86f7683a0ef35f0384edfcd579ea454275edbb7400795d265ec3a38e39997e79b8" }, { "alg" : "SHA3-384", - "content" : "5b177240092d00c9399f08b3148b58a299f0bb7a2a82458e5d4f4d5d0e4b5f6eba4f8b6f82c02369e8343c4bb0aea360" + "content" : "aada7e3612cf3f6190a19fa7c3db74df1e13ec56b300be9bb4317d261d5877c84ab59ba9a09168becdbd82cd41961395" }, { "alg" : "SHA3-256", - "content" : "f5829afa58615feeb89cdea0b96fa63ffda9c1401d5ac33d1420398ff42e59f9" + "content" : "306d286d0bd7549c203cc802fd755d354c4f7926fa023f4e83623ba1a6261250" }, { "alg" : "SHA3-512", - "content" : "4dc73ffee4b763a67a89b13a7574c03c9b7bfd08591088c30c64f9cb2aacd028d9c1bbbb4e5a68e5751635d9a3547e798eb4577b555187f410476a38e10ed9fc" + "content" : "f6f1ecc684e309d7b9fc5c343792508fee935cd2119d962721662c5af88e4864ba6f47a863e083714f315f926c156de1970cd2fb577449bdfdc7bf98a4a451fa" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], - "purl" : "pkg:maven/org.sonarsource.java/sonar-java-plugin@7.33.0.35775?type=jar", + "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://redirect.sonarsource.com/plugins/java.html" + "url" : "https://commons.apache.org/proper/commons-lang/" }, { "type" : "build-system", - "url" : "https://cirrus-ci.com/github/SonarSource/sonar-java" + "url" : "https://github.com/apache/commons-lang/actions" }, { "type" : "distribution-intake", - "url" : "file:./local-deployment" + "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", - "url" : "https://jira.sonarsource.com/browse/SONARJAVA" + "url" : "https://issues.apache.org/jira/browse/LANG" }, { "type" : "mailing-list", - "url" : "https://community.sonarsource.com" + "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/" }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-java" + "url" : "https://gitbox.apache.org/repos/asf/commons-lang.git" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.java/sonar-java-plugin@7.33.0.35775?type=jar" + "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar" }, { - "publisher" : "SonarSource", - "group" : "org.sonarsource.java", - "name" : "java-surefire", - "version" : "7.33.0.35775", - "description" : "Code Analyzer for Java", + "group" : "com.google.code.gson", + "name" : "gson", + "version" : "2.13.2", + "description" : "Gson JSON library", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "ebad97c089ab298bbf410b83645b5c91" + "content" : "a2c47e14ce5e956105458fe455f5d542" }, { "alg" : "SHA-1", - "content" : "1d6e25230cb5a0818e76cbf250b1f443c1117fe9" + "content" : "48b8230771e573b54ce6e867a9001e75977fe78e" }, { "alg" : "SHA-256", - "content" : "547a33116a008789a640ac520aca61b4aee460baf32d880f35ecbc247be17cf5" + "content" : "dd0ce1b55a3ed2080cb70f9c655850cda86c206862310009dcb5e5c95265a5e0" }, { "alg" : "SHA-512", - "content" : "79967a8394b8bada006fe03ed3519f73f9f4856d09cfaef3db91ab1e0dbd828bb9c69178a8151b678420e95489ace27ce9a59693be65fc3511696b446118c572" + "content" : "8974a052656d2e5ec968b6bac2edf51413ffc62040fdc65f14f00597e738ab544d22487f8579ba90618b5a7f94ef33773510fac67b408fee6ed274b38f3d9947" }, { "alg" : "SHA-384", - "content" : "a3926f55e7e691e558e8fd2bed7da6f71cae00174987d108c5ccb5e4bff67052c1a7294ff83f93fecc89f0d37e72d2f2" + "content" : "98e8afe5b23c43b84e7a57e0e27f683a182fcf97ee3eeb6a1311582f7fecd846c806ffb092b620088dc03d256d8eaf27" }, { "alg" : "SHA3-384", - "content" : "197a92ee27d6b823fe39f896604e292864f8e563ee9eebc8b7b8f98b5811c3bd3d31d1d991f91f305d61e78376c792fb" + "content" : "d61d6b1cf6997c75287f454e536f855db8404e5fb9d0b8faa4dcc1e7a60ffefc05c2f92f3514e091808a8677b29f3619" }, { "alg" : "SHA3-256", - "content" : "421298125883242fc4173246fd9f114c55e086270f0482a5b92f88462bf18f99" + "content" : "1c051cfe5e630b35d003f96e135de7c5d5cab145b6e1159143570cb246426a0d" }, { "alg" : "SHA3-512", - "content" : "ff3c88c85a17e2983655e522450641dd191aa2f8818734af99b576778662e7025c6d635c6edc3052b3c42415693b7ba5c2137c7cac7140460d9405fb0d2780f9" + "content" : "55ddee7f6c1659ffa82e5c308a0181b459cfeb3442f1f9868ff7e9a3c83376bd2ad527b16d5131df442ffd03d06c35dbd64458df6b02a111c1654f01db381ba5" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], - "purl" : "pkg:maven/org.sonarsource.java/java-surefire@7.33.0.35775?type=jar", + "purl" : "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://redirect.sonarsource.com/plugins/java.html/java-surefire" - }, - { - "type" : "build-system", - "url" : "https://cirrus-ci.com/github/SonarSource/sonar-java" - }, - { - "type" : "distribution-intake", - "url" : "file:./local-deployment" + "url" : "https://github.com/google/gson" }, { "type" : "issue-tracker", - "url" : "https://jira.sonarsource.com/browse/SONARJAVA" - }, - { - "type" : "mailing-list", - "url" : "https://community.sonarsource.com" + "url" : "https://github.com/google/gson/issues" }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-java/java-surefire" + "url" : "https://github.com/google/gson/" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.java/java-surefire@7.33.0.35775?type=jar" + "bom-ref" : "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar" }, { - "publisher" : "FasterXML", - "group" : "com.fasterxml.staxmate", - "name" : "staxmate", - "version" : "2.4.1", - "description" : "StaxMate is a light-weight framework that adds convenience to streaming XML-processing without significant additional overhead. It builds on top of a Stax (JSR-173) compliant XML processors such as Woodstox or Sjsxp (default Stax implementation of JDK 1.6) and offers two basic abstractions: Cursors, which build on XMLStreamReaders and Output objects, which build on XMLStreamWriters.", + "publisher" : "SonarSource", + "group" : "org.sonarsource.java", + "name" : "sonar-java-plugin", + "version" : "8.18.0.40025", + "description" : "Code Analyzer for Java", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "b79898a5756a297a63eb55af14e39a5d" + "content" : "b1a9179feade38e76fb3bd484426ed87" }, { "alg" : "SHA-1", - "content" : "1a61f6c66e732c05ca5d75269ac5d2ea288d22c9" + "content" : "869cc6db9898899450852a5d89e77649dbc2e545" }, { "alg" : "SHA-256", - "content" : "abfaceda67857ddcbd7e0c85fd54af393290b5b617cee4e4464dee8c24b13d0b" + "content" : "27dbc832bbeb28c70947d4d35fcc4a36b384911761831d8d5fc947cc1732d114" }, { "alg" : "SHA-512", - "content" : "1fb319e63b9537b9eb99dd162d333560c04f4855a58496d8e0826b1a6135cd423d0bc8e10e9a2c6bc946059089d3206af85b6f4618141632b1f1c50f41a49557" + "content" : "b38980fb48ee7720a297190197e1ff20025ccaffad858a195234d4747773f4ed2ff2806b253ccd9d2121cddc71d1ac1fcc75ece9a07365db2089df89773add48" }, { "alg" : "SHA-384", - "content" : "6f1f6f7a27fb10e7ee6847ac18986b3c54b651e79da1fea3d9617ced89b7d575f3e6017d0a8b3500d146b32be0ac0511" + "content" : "700d2a57ebc1672779fc11da69c29c822f8b0382bfb07afa5ef984abd2e38863b1ce8c2129c3ad173f796abebc14af96" }, { "alg" : "SHA3-384", - "content" : "8c12c3b529792653422d8d98a7a56d5ea2b483c835cdf28697f74059699f026883d59a9f29246ff66758b014e66221b1" + "content" : "de424a453da7d8c708948d8bf9cffcabb6f00fac592f0be36b3d53fa41b95bc42ab6e1fcb4525c3c15793de00ad34478" }, { "alg" : "SHA3-256", - "content" : "a80836256d62c04f79a6123c77af82ca926a0bdc3c5b3c619f793af273662a31" + "content" : "3f2edc3ae30c79ac6e5db6bc7f968dd164f252b173bd3780ef1e06f68fec2962" }, { "alg" : "SHA3-512", - "content" : "02a4e7752396dda6b0da136ee4743f7f7ff8211c6aa0a86276474cd17931135dc99f94780856171a4a2c5c0eaa02ca6ae79aedcaf3f35ec7b737e12455d45db4" + "content" : "73060df15758e595f9ad23967b9632b3b25584660362b8a660c699d7bfa092927edb2334ec711a2eca8394b03f0d32878e64b6b20411816b239f808747e7bcc2" } ], "licenses" : [ { "license" : { - "id" : "BSD-4-Clause" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/com.fasterxml.staxmate/staxmate@2.4.1?type=jar", + "purl" : "pkg:maven/org.sonarsource.java/sonar-java-plugin@8.18.0.40025?type=jar", "externalReferences" : [ { - "type" : "website", - "url" : "http://staxmate.codehaus.org" + "type" : "build-system", + "url" : "https://cirrus-ci.com/github/SonarSource/sonar-java" }, { "type" : "distribution-intake", - "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" + "url" : "file:./local-deployment" }, { "type" : "issue-tracker", - "url" : "https://github.com/FasterXML/StaxMate/issues" + "url" : "https://jira.sonarsource.com/browse/SONARJAVA" }, { - "type" : "vcs", - "url" : "http://github.com/FasterXML/StaxMate" + "type" : "mailing-list", + "url" : "https://community.sonarsource.com" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.fasterxml.staxmate/staxmate@2.4.1?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.java/sonar-java-plugin@8.18.0.40025?type=jar" }, { "publisher" : "SonarSource", "group" : "org.sonarsource.java", - "name" : "java-symbolic-execution", - "version" : "7.33.0.35775", - "description" : "Code Analyzer for Java", + "name" : "java-surefire", + "version" : "8.18.0.40025", + "description" : "Code Analyzer for Java :: Plugin to import JUnit report files", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "232f45616c57791e1376b309b99d6bf3" + "content" : "8ec0e95937cd6bad70824f4fcbcdfd13" }, { "alg" : "SHA-1", - "content" : "ea12ce7dc955bbafca59c3463ea1f44ad82e42ab" + "content" : "74166214d6bc038b62ac39fb6068ee92a7cc2377" }, { "alg" : "SHA-256", - "content" : "8ac28a32e08e60c451cc153bee71bc028f3c72e4ab0e3a9c91bdc5b131ad0f57" + "content" : "e5b3e323d65d5d1e07c67f2a3c231d976665dd36a755e4a25a529e020ecf246e" }, { "alg" : "SHA-512", - "content" : "6ad5b4c6b85757346f203924c26e908d5557ab4d03147afbf58e33e0f25fdb3999f94aee6973366d2441565466473c30c0861a1512c79f240cd35a9a97f0d35e" + "content" : "5f8666b8cabc3605c88d1066b3a4f102677a4592a055cddbd0857667a4c97da0b5963d4b6e9b9443bfa9a9f8eb5122bea5230c54d1948a8829137e0adfda2c53" }, { "alg" : "SHA-384", - "content" : "dbc472dd1173bcac5ba03e4a1165ed35bd7db93511cc8b99e5407aaaa65a56a92027d79c551a4df7120c2a8d87705797" + "content" : "7f91179e70d48c4f157b7c21e2d66043f197f5e77e93ca22cc514121f8aeb904f0be2d41cca33e026b79a6954b93620a" }, { "alg" : "SHA3-384", - "content" : "1912414c5430f6b4711e20bb73e1076b5ad85babae3e8374fbb65f1dd3232ae380d9bc52891184befed50777dace89f9" + "content" : "1181d83f7f281f38d1fd32a113cf36d0aafc3315b0f96394d1509a55cb71107a32dffc689991f08ea34d24afa146de4d" }, { "alg" : "SHA3-256", - "content" : "a5cbfac546a7aaf0a2211c3f1beceb36e2ed3384c9d7d4ece2195d2932fba345" + "content" : "ee3151b15fa3040368071c28b161c21ffb9d0f0053ca3a869a8633790a8dbcb6" }, { "alg" : "SHA3-512", - "content" : "4f6974c7877b90dfb0acf4a6f8f412ea4f391164165ce3de75973c871e356a55fdc5ad4de3322a7e30e57f4d7caa87871b3671a63e19ca51a6f5b3cec949d281" + "content" : "94b7e5bc75cd127797485f48d5acca3853cefa2e8c433487268f12b177cd06e4aa4783f009f7a835099f406ccf1a22b69d0c3c523f3ab84fe8b348da312bd677" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.sonarsource.java/java-symbolic-execution@7.33.0.35775?type=jar", + "purl" : "pkg:maven/org.sonarsource.java/java-surefire@8.18.0.40025?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://redirect.sonarsource.com/plugins/java.html/java-symbolic-execution" + "url" : "http://redirect.sonarsource.com/plugins/java.html/java-surefire" }, { "type" : "build-system", @@ -2363,62 +2331,132 @@ }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-java/java-symbolic-execution" + "url" : "https://github.com/SonarSource/sonar-java/java-surefire" + } + ], + "type" : "library", + "bom-ref" : "pkg:maven/org.sonarsource.java/java-surefire@8.18.0.40025?type=jar" + }, + { + "publisher" : "FasterXML", + "group" : "com.fasterxml.staxmate", + "name" : "staxmate", + "version" : "2.4.1", + "description" : "StaxMate is a light-weight framework that adds convenience to streaming XML-processing without significant additional overhead. It builds on top of a Stax (JSR-173) compliant XML processors such as Woodstox or Sjsxp (default Stax implementation of JDK 1.6) and offers two basic abstractions: Cursors, which build on XMLStreamReaders and Output objects, which build on XMLStreamWriters.", + "scope" : "required", + "hashes" : [ + { + "alg" : "MD5", + "content" : "b79898a5756a297a63eb55af14e39a5d" + }, + { + "alg" : "SHA-1", + "content" : "1a61f6c66e732c05ca5d75269ac5d2ea288d22c9" + }, + { + "alg" : "SHA-256", + "content" : "abfaceda67857ddcbd7e0c85fd54af393290b5b617cee4e4464dee8c24b13d0b" + }, + { + "alg" : "SHA-512", + "content" : "1fb319e63b9537b9eb99dd162d333560c04f4855a58496d8e0826b1a6135cd423d0bc8e10e9a2c6bc946059089d3206af85b6f4618141632b1f1c50f41a49557" + }, + { + "alg" : "SHA-384", + "content" : "6f1f6f7a27fb10e7ee6847ac18986b3c54b651e79da1fea3d9617ced89b7d575f3e6017d0a8b3500d146b32be0ac0511" + }, + { + "alg" : "SHA3-384", + "content" : "8c12c3b529792653422d8d98a7a56d5ea2b483c835cdf28697f74059699f026883d59a9f29246ff66758b014e66221b1" + }, + { + "alg" : "SHA3-256", + "content" : "a80836256d62c04f79a6123c77af82ca926a0bdc3c5b3c619f793af273662a31" + }, + { + "alg" : "SHA3-512", + "content" : "02a4e7752396dda6b0da136ee4743f7f7ff8211c6aa0a86276474cd17931135dc99f94780856171a4a2c5c0eaa02ca6ae79aedcaf3f35ec7b737e12455d45db4" + } + ], + "licenses" : [ + { + "license" : { + "id" : "BSD-4-Clause" + } + } + ], + "purl" : "pkg:maven/com.fasterxml.staxmate/staxmate@2.4.1?type=jar", + "externalReferences" : [ + { + "type" : "website", + "url" : "http://staxmate.codehaus.org" + }, + { + "type" : "distribution-intake", + "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" + }, + { + "type" : "issue-tracker", + "url" : "https://github.com/FasterXML/StaxMate/issues" + }, + { + "type" : "vcs", + "url" : "http://github.com/FasterXML/StaxMate" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.java/java-symbolic-execution@7.33.0.35775?type=jar" + "bom-ref" : "pkg:maven/com.fasterxml.staxmate/staxmate@2.4.1?type=jar" }, { "publisher" : "SonarSource", "group" : "org.sonarsource.java", "name" : "java-checks", - "version" : "7.33.0.35775", - "description" : "Code Analyzer for Java", + "version" : "8.18.0.40025", + "description" : "Code Analyzer for Java :: Analyzer's checks", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "eaeb082ff51df115aaf0f3116faf4b84" + "content" : "1ac68532191b336b9c760c596dbabf9f" }, { "alg" : "SHA-1", - "content" : "f11567226d2a4c2efcadf5545c3e0b1bb5f8142c" + "content" : "6165e4a7c0bc4dd5bd6bdc8b74184f167bb5436b" }, { "alg" : "SHA-256", - "content" : "1eeb30e79298fa3cff7e7265a0d313a5572bdd726b8d83e83dcb1d144421c24b" + "content" : "78b31d837169a372353c0b91ff2776590039996d8d50dbf033b774f6930d3b8c" }, { "alg" : "SHA-512", - "content" : "0034e5bf2e95fb181c476a3d1a5b111efcd22131f62d75eb6daf21da645b4e3ad8e35096274e3898e042a7463d831caea46a7840f843c10442d5f48b75041687" + "content" : "07b461fd5a923bbd6a60379e61fc73924ad7bc3e1623257fbb16fee3390eb61e0d930dd80cb4e290da538c958546d8206a66fb433889665312df60b63aeccb1f" }, { "alg" : "SHA-384", - "content" : "c2e5daa8bb17411f2ad282755de82c02d98a4940a81a76c26167713a1b5f55f7551875ae8459b5b77934d42f37f5e8e5" + "content" : "d1227c576fd2372fdcb0240ef2c0fc5497aaca1251df248eabf8e767765e8023ad5e727fecdd3ade31b5af2022a9f519" }, { "alg" : "SHA3-384", - "content" : "7de6a308f476947ec7a132968be161ea98ab1f135d6286129fde8ee5f8a1044a295c9febf482d7f5a5f83b65e1ccd36f" + "content" : "5a6b215207811609717d9b39ddaa332369918cf91fbe3bba94ebfff23408624b1bade52b5cf03062d16364fd9c792ea8" }, { "alg" : "SHA3-256", - "content" : "8033896b6e57169054031f9d386f00cc0194f1cf930782becea1b12a5f5421f7" + "content" : "030d53c3182415e2896ffc5898b155cac52587a006b327a51c6c5ab59714c012" }, { "alg" : "SHA3-512", - "content" : "789208a299ff2cbfe4ac9f6c647b0d703ff77040fce20e269b33a6d0712011d214704496d27ee8b63adf5778e4d8b58fde286e5a8f043f3b1813ec4c15a06fce" + "content" : "a5a4a3f41c1ba65066554808baeff26551c033ccb31ec561ab622e535984db16d9742107f5d07b7d3bc6f25ec92c410600eca7cdf1d9e36fd23a6246d1220db7" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.sonarsource.java/java-checks@7.33.0.35775?type=jar", + "purl" : "pkg:maven/org.sonarsource.java/java-checks@8.18.0.40025?type=jar", "externalReferences" : [ { "type" : "website", @@ -2446,58 +2484,58 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.java/java-checks@7.33.0.35775?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.java/java-checks@8.18.0.40025?type=jar" }, { "publisher" : "SonarSource", "group" : "org.sonarsource.java", "name" : "java-checks-common", - "version" : "7.33.0.35775", - "description" : "Code Analyzer for Java", + "version" : "8.18.0.40025", + "description" : "Code Analyzer for Java :: Common utilities for analyzer's checks", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "377bec0957fff4818de779185dc9d46b" + "content" : "5514880c7701b527cdcc574edae88dc7" }, { "alg" : "SHA-1", - "content" : "64e48e3a5d4bdc7ed674b21f8ddb393e548c9947" + "content" : "5e3906963a6aee9229c0d5735ec5b0caba9c7a36" }, { "alg" : "SHA-256", - "content" : "a5db4cf127e982760c049faf6a3df99fafccdd5e1d58b59afba30b206bde96b2" + "content" : "89aadedaaa0bd0e788c55b3a78a5b086fd0dbc4935e1ca9e8d15266c81dbc1eb" }, { "alg" : "SHA-512", - "content" : "ebb84100013c73fd13cd502e5ea56a557568f5404b1b60d015ba5529c955c7ae70c612437cbb249068c7437d2dd4ef7f249a20f4f2090ea22c414123df062838" + "content" : "c7e5eea32cd08b004728418429b1b1255751a50a33f5a58712ee7ebddb2f15883cbbc9a999d3d388274662e1b398f2121bdd8e28465a7b86b5702be57a211e0a" }, { "alg" : "SHA-384", - "content" : "a3e9a9cf69e639b84e22ef84a9937d8c8e829628ae2b203ec722394ad3b50e0c07fc1b6265d4bf8df3a86cac424125ef" + "content" : "74603a766b61c433df59fa6df8c140018dc181c84af0476242c22c4fefea6f3437cde005c253c21301be0209797ef6c8" }, { "alg" : "SHA3-384", - "content" : "abe29bc0a84ab6ec1dc55fe8d349f72e37865e46a7eb114d85328882711f00f344cb7252ef9adc449009b62a4350f7bd" + "content" : "a9a28120b1353f47a2aff96a032d95d8988eb0b2c940bff0bcef27dc352b19950d0b1eb0de8a521f8c232cfc0b3abea5" }, { "alg" : "SHA3-256", - "content" : "2bfc0c71aef10df37be7c91fea1ab5e1d90f018c859aa7e3f0844ce2246137fa" + "content" : "eeb22c67995bfa542c898dc47195590c37da85116f30df4b367bd970c162084a" }, { "alg" : "SHA3-512", - "content" : "0e7d60391152b9fbc7b7238967dbf3c4c4c32e776f065b65e456c5ba5b88550723709c82125334fb749167231d602fd6bf3c610a7e83e2d34f3e339f139f71b6" + "content" : "27adbd9adbd039453b3f8fc762117222650d45147cfb4ea26ad6daf65b994fd618f4b5a2173f0860fdaa5b1e096af32faa100c902377b811892d8664c094684a" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.sonarsource.java/java-checks-common@7.33.0.35775?type=jar", + "purl" : "pkg:maven/org.sonarsource.java/java-checks-common@8.18.0.40025?type=jar", "externalReferences" : [ { "type" : "website", @@ -2525,47 +2563,47 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.java/java-checks-common@7.33.0.35775?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.java/java-checks-common@8.18.0.40025?type=jar" }, { "publisher" : "SonarSource", "group" : "org.sonarsource.analyzer-commons", "name" : "sonar-analyzer-recognizers", - "version" : "2.8.0.2699", + "version" : "2.18.0.3393", "description" : "Shared code recognizers", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "f9c0e3225c8cd152cd8385ab211c1211" + "content" : "c8fea2140f3d18005b73ba0cd39ac3cf" }, { "alg" : "SHA-1", - "content" : "10fa0ef13f09632cc2d8a97990512a36252b2e2c" + "content" : "f741f10d470867172afa510990c16877ede70222" }, { "alg" : "SHA-256", - "content" : "5ba42aefbd8cf715575a9f40293a53b47cc82ba67943215a5382487e4042da50" + "content" : "0b4ef58f3bba93170f115ec2a73eb5596276abc21219b7fa733240b6bc3f7d52" }, { "alg" : "SHA-512", - "content" : "0659ad40421f8be0d492fedf4cee72c531d264d8b9aa9327e789b9277de0a5b037c0dba25a25bc1efb5a858a959941e7e6fa3c7e166ff908db1ea272b5f05486" + "content" : "8edf444d67195ff181307c7f27744833b7fa47ff54ee2c687c92761cd7e0900e302f71541d2ccb84a0436ac04fc28ccc79c4700452455db6c155c6ac774bf26d" }, { "alg" : "SHA-384", - "content" : "7b629d1b28bab3012d347760905c7235e579c868460098c2f4e9e9127e3eef1fd08be8f8cff2400552a2f6ba3c735d18" + "content" : "821446711dedcdcb0a20bae33560f7f5d86ca528b7277170b3fe539bc20ab41f90096c6d6cb6cb9b67a7738cf56029fd" }, { "alg" : "SHA3-384", - "content" : "e3f76485b0c60e07e0a8d93716847e12279c8914590d06000a95df859b952d2b1348a2c1b74a434f92aa36ae711ad858" + "content" : "c036fd79d7730afa956adbabd42edfd0fb5473e5b4534d2ecc480b2b587099d923ee97a9ee51e40e1e027a413fb7b33d" }, { "alg" : "SHA3-256", - "content" : "af4025e146ba6f1982d1351d1adcabee0a2acb8b90f7a7e8e76f019e408adc1f" + "content" : "aafdbc0fc6e44a212ee7cb7eb10d9cb4b23ceb25a532ea0a6508ea32141cb581" }, { "alg" : "SHA3-512", - "content" : "ec20e48bda7e839e8c30bdb52156bd42a856f176282c3b1fd3241a268e1674b582acee92f83d72b0247a03634e46a2a740326dda9c089b704605b45c69322606" + "content" : "747d1f9f8a556ff1c67bfa46aa1e8e8b9c7b76114e141845751376c7bb34d841349491766e6ed221938f6d64e8aed91663515d23283668711177d076f12eb852" } ], "licenses" : [ @@ -2576,7 +2614,7 @@ } } ], - "purl" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.8.0.2699?type=jar", + "purl" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.18.0.3393?type=jar", "externalReferences" : [ { "type" : "website", @@ -2600,47 +2638,47 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.8.0.2699?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.18.0.3393?type=jar" }, { "publisher" : "Spring IO", "group" : "org.springframework", "name" : "spring-expression", - "version" : "6.1.5", + "version" : "6.1.21", "description" : "Spring Expression Language (SpEL)", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "1f268a22bb7c0cb80958953ffbc21125" + "content" : "9ea32c5135a59a1264f13d8f8d5f355c" }, { "alg" : "SHA-1", - "content" : "7e21cb1c6bbef1509e12d485b75ffc61278d9fa7" + "content" : "72da3b3521a6788e143a47b0f7273ce7cf98c6f0" }, { "alg" : "SHA-256", - "content" : "1f37b50dcaf091a43bb10d946178fff4082674497fd821438327815da14f7fd0" + "content" : "29597c579b6b051d0dd2f56775c6e0078ac5252eab5c940ae687bd5e1fcafbd7" }, { "alg" : "SHA-512", - "content" : "d5a13856a7f4619eaf1c9593f7739ec5cde37a555a98f0da4cb21aa591e87fb0bcdbd2a5da67d9b69a0dab0016f806c9d3f096bc8841c32bb98810daf1e5e7b7" + "content" : "e54e346271cbc327b138f7a16d6c086f68290688c293753cc5513bc26a20ddd91ee194de32d91122432dae785692468d9d68971202e05c0571a65a44f0a518e1" }, { "alg" : "SHA-384", - "content" : "1e0c29ba819c5c8f5eb278a8f308a0119a476e81998ff5c7658b150352d357ef53c408566bd7a0b8023b7b41cabf4636" + "content" : "eb0349b3f3b4952f088a4243ab58b7167087e01a719babbe15e54c25d5b6cc3e8f52203542e447a465c3002a3588e6ec" }, { "alg" : "SHA3-384", - "content" : "f9cefe146557fe266e6e38bc8fbe157c7ef10fc606edafaf901d393ab140d25dabf4e60ff79c6a45a83c7eff890d3cac" + "content" : "a2d39ba6e734731a7588f70fac0ab312d835674427c384e7bc7fde62340d2d1c48217ec0bbdc953b3f436550aa0dc796" }, { "alg" : "SHA3-256", - "content" : "ba29e269a74f3c452a64bd9e7a680c84c5c26b96397683c22435e4fcea8ecb9e" + "content" : "be4aa16518c2a8cae7deb0b7f867a2a4be88a7a9b3030db00558615eae43d27c" }, { "alg" : "SHA3-512", - "content" : "8de364ab79572c8d2af2dc22ea5768d323b7268e03ae977701024f17e6fede13f03e248ef44c6789dea3007723beb1454c7795b45f3834b6040510661b6dee54" + "content" : "c4e3742d1ba2111bc4b72c1f9fcebff0d47c8466dd732d5f66ef2c7303a60d7da4e1a63fbf469df27075bf0f5174302dfa921722079425540151fd5e16fdfbfb" } ], "licenses" : [ @@ -2650,7 +2688,7 @@ } } ], - "purl" : "pkg:maven/org.springframework/spring-expression@6.1.5?type=jar", + "purl" : "pkg:maven/org.springframework/spring-expression@6.1.21?type=jar", "externalReferences" : [ { "type" : "website", @@ -2666,47 +2704,47 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/org.springframework/spring-expression@6.1.5?type=jar" + "bom-ref" : "pkg:maven/org.springframework/spring-expression@6.1.21?type=jar" }, { "publisher" : "Spring IO", "group" : "org.springframework", "name" : "spring-core", - "version" : "6.1.5", + "version" : "6.1.21", "description" : "Spring Core", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "6eeff94b635753591e74d979ffc2f793" + "content" : "3c233d75937864d95e9051eafa9205f1" }, { "alg" : "SHA-1", - "content" : "6dae1b06ffacbb9abab636be2dbc6acd3b6e5d68" + "content" : "dcc8607ee792439389e19111d83737b6b06ca4ac" }, { "alg" : "SHA-256", - "content" : "476dac28509b3f47d0b5e895a639fa75ac2218f074ce214e44832a836c469f7e" + "content" : "0729b69e52ac8d9a8d03991315690f632bb0984620a0595e52580d7f3557298d" }, { "alg" : "SHA-512", - "content" : "067d31ab99c842a586fbc1bf7aa7ac9aad0fa36d70f0e5bdb7e355514d66b1f6106dbb74ce15959a8dff8223a3e447ae30735e40f376e67f0ef8b70ed1a85002" + "content" : "8d926d38d47cc510378bff4cbd59a951660e8b813a22ffe662490631eb0f85668b007a0ee6961f4a6db2a80dab75181e13196fac10076510dc155c897a6aa999" }, { "alg" : "SHA-384", - "content" : "25728b0246bc11715c8b1fec2a704b74a6c2bd6e41851b44aead5c76d0ad1493929bdbcef51dee8005404099388c03ee" + "content" : "b8d3fff87f154bd509d1844c68a005787729112fac80512fa5d6df43d32b1f2fde0bd33e6ba6038e5d57e6265c8b97e5" }, { "alg" : "SHA3-384", - "content" : "ba98714211e0a6d8337b876cd6452216d1752b5274671f476fa06a63931da1e8ff0d7d0b4105967ab68e6f967aa8b43e" + "content" : "d68af409a439cedb3b7da43946892d6012fb3000e849e929221a994cdd7ed1fd2791b1fbcc2b5903415ec6612f679cb9" }, { "alg" : "SHA3-256", - "content" : "70c250de2d49aec369e3abf959c980036051ca0f54ddfc774840c95a8eabccae" + "content" : "2a8bcfdbaae2b6c617f4896069b188e279faf8d169932c17f90c0e0ed4223fc0" }, { "alg" : "SHA3-512", - "content" : "c4d9cb5d1a7a738f6a762bd8f9a0fbd2455f3900e702b77d5d1d76079ab1b614b7993f992473ea57639a57fdb46e985a3b29191b3d8a18215b97e82b31cdb3e7" + "content" : "2890d9f8375e68786ea993d22ea2d9fd7c45bcbcce07949013857d7a3ff89da0aadb22a34493180c0d1fe905e744b453510b1f87631bbce8eda84c7844389884" } ], "licenses" : [ @@ -2716,7 +2754,7 @@ } } ], - "purl" : "pkg:maven/org.springframework/spring-core@6.1.5?type=jar", + "purl" : "pkg:maven/org.springframework/spring-core@6.1.21?type=jar", "externalReferences" : [ { "type" : "website", @@ -2732,47 +2770,47 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/org.springframework/spring-core@6.1.5?type=jar" + "bom-ref" : "pkg:maven/org.springframework/spring-core@6.1.21?type=jar" }, { "publisher" : "Spring IO", "group" : "org.springframework", "name" : "spring-jcl", - "version" : "6.1.5", + "version" : "6.1.21", "description" : "Spring Commons Logging Bridge", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "4b7724c57ea12f13ce3fc49a18209b6c" + "content" : "0e017885cab7225c3859aaf24d3a96cb" }, { "alg" : "SHA-1", - "content" : "896ae3519327731589c6e77521656b50ae32d5b3" + "content" : "fa75fc86c26dbbc6fb816e5b7aa5fc83f4494423" }, { "alg" : "SHA-256", - "content" : "c53540419e482242c815db6d6a8cd80af85a6a895e38329b9d9bd6b4616503eb" + "content" : "f77ae10f41eaf02bc94a6424a3bad1d80a58b168e6af032ecb40a474d9e4f82d" }, { "alg" : "SHA-512", - "content" : "0de5bdae17924ab55ed7e6e97acbfeb60406fa99b10c1fd8a391f9f81c475691638535a297636fb79b51f02cf07d98ac613049235e9fdbf1186672c8b64c5967" + "content" : "b0821cb6220914b2bc517f858d21c4a3b98b5a487ee94f29acf044153ba5a568a44fead4d003f71ffbad65f61791d01e33ec05859cdf2a3a1bb853469dc37753" }, { "alg" : "SHA-384", - "content" : "2844ddc317d6fed2c80c5090e3b4b976a063ad5fce4bf8dbfa7c1034cb647497a830142ff7e70b7eb0c8cf742a091071" + "content" : "84188cf73912ff5372b4ebc58fd0bc63ecc282240c896a987ebf3cfcbbc57cfeacd1a63ea5a9cd6fbcd3ea45e11a001a" }, { "alg" : "SHA3-384", - "content" : "dfc30f87671459ea2bdc8c25aa6ed814dd53a0ab60df4b98b44eb96ab28cd7bfce358c32b5ab8255d0c0d7ebba1a28b0" + "content" : "a787e5682a3d41e20e726caf3e0eabd9fd0b33beff448bdd8915c5d1755eec973d7e9ea229a806b00a1d969941364614" }, { "alg" : "SHA3-256", - "content" : "a7a4153deabf0b46852c6539f1d0d63bac5963eaf9ef73209097c3bd4b2118c3" + "content" : "9ab47bf24ddfbb2dbe03a02e131d4b9bd7ada2da72badba7a7fadd0363895247" }, { "alg" : "SHA3-512", - "content" : "62add3aa8ea534168ba2eb4e811628e35970e17a2ae350de376fd95e8e0d70045dc9f6748075bafe4f74ebec4278bb3e36243478e08b4329840c8f068b30cde9" + "content" : "3d537771c6060078daca6cb556d0a1571f9a685e0287c8c186f3f8e441ce0d7460040de7368c7a51d4dd99faa0d6216baa1013c8acc7f3b981eb30e25cccdaa3" } ], "licenses" : [ @@ -2782,7 +2820,7 @@ } } ], - "purl" : "pkg:maven/org.springframework/spring-jcl@6.1.5?type=jar", + "purl" : "pkg:maven/org.springframework/spring-jcl@6.1.21?type=jar", "externalReferences" : [ { "type" : "website", @@ -2798,58 +2836,58 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/org.springframework/spring-jcl@6.1.5?type=jar" + "bom-ref" : "pkg:maven/org.springframework/spring-jcl@6.1.21?type=jar" }, { "publisher" : "SonarSource", "group" : "org.sonarsource.java", "name" : "java-checks-aws", - "version" : "7.33.0.35775", - "description" : "Code Analyzer for Java", + "version" : "8.18.0.40025", + "description" : "Code Analyzer for Java :: Analyzer's checks for AWS", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "14dfa924e3e61569475db951d81dff71" + "content" : "8aed826c7d8696ce3699588cd6ff952b" }, { "alg" : "SHA-1", - "content" : "2af499d9be4ebd5d898db1eb13eb34ad3b2fb8e9" + "content" : "6cc1bba5a36b3eef6230e273866fc6dc309189af" }, { "alg" : "SHA-256", - "content" : "62148c334e45df290a958dd438ef662ba5fd29c4023de832d425e674f7c585fd" + "content" : "5ee06300e5427acf74b378cf181a697b548a477ffcf1edfc216ae5345e40c1e0" }, { "alg" : "SHA-512", - "content" : "f9365f6002c6a51295e7a00a4255ad9eb693d52de2e4c3aa0161e722c58f57a565f97bd3e03e53f3fcc2b1b1af3753471b0ba707e8416f6d2c21f17fcb1b7071" + "content" : "47ecef1096030771bb0c24c2b3c15ebe51ab8a6f66d76ae2683ea4b54821f9c914ecd694b877a186c26650db463aedfa57e9a172fe509de26ca4f0a19867be61" }, { "alg" : "SHA-384", - "content" : "45f68667d8e7543d39b51ebf451513bd085a573edfcee9b89c8154a61bda72d55f7085a1ccb132b306bb2dcebcb9b899" + "content" : "242495b1e08269988e57a0e08730bb23d18fe614cf37af2ede8aa489a7a3ad581c0d5f970b7d25aee2db35f658649c26" }, { "alg" : "SHA3-384", - "content" : "5a6ef9e7483108b215e37833d6d4321ae9ca11f2a2df09d02563d008228dd469e2ce9d9b307679fe16fc229a1a90f588" + "content" : "f8f74f485da5f891e8a98701cc7d7267548ebeb2d04861239a891547abebdda1951cc16de0003c60db18fa48ad9696f9" }, { "alg" : "SHA3-256", - "content" : "2c6b29354a7077d0a34a9c742a2e0a95310e2dbc40cab29527ec59aed9ac7b22" + "content" : "b60ad5ee6b83beabd93c21866b2bd05eaf340ead9ef9f4d1f38492546d103d89" }, { "alg" : "SHA3-512", - "content" : "d19b4dfeca42f8ff8821621d241b12aec49fd8012cac5ccffefac6bd55ca2dca60ef40ee15a81460051fbf1797631a34c70fb4600a9e4182a581f082b8c5028e" + "content" : "8bd74670d07ae07f638e31a27a8f8a00eb0fabd40337f3b601595c86769e31da58b969f08ca5424dbb48adc4d7c8477503a1d795cb8eeec3179f276273997685" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.sonarsource.java/java-checks-aws@7.33.0.35775?type=jar", + "purl" : "pkg:maven/org.sonarsource.java/java-checks-aws@8.18.0.40025?type=jar", "externalReferences" : [ { "type" : "website", @@ -2877,62 +2915,62 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.java/java-checks-aws@7.33.0.35775?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.java/java-checks-aws@8.18.0.40025?type=jar" }, { "publisher" : "SonarSource", "group" : "org.sonarsource.java", - "name" : "external-reports", - "version" : "7.33.0.35775", - "description" : "Code Analyzer for Java", + "name" : "check-list", + "version" : "8.18.0.40025", + "description" : "Code Analyzer for Java :: Generate the list of checks at build time", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "b07b7b394b1de4dadcdd41bf472bff97" + "content" : "523e390cec46df34c6686d8f61181bef" }, { "alg" : "SHA-1", - "content" : "bc9c1e1cb3f4abca42ddb1b6ffc027eb2fd4c68e" + "content" : "93c3737e36e776e9c9ba43293256d3ade559e656" }, { "alg" : "SHA-256", - "content" : "aabc8b03f2c9c042ad4d1d25ada8281dd029480e9f59831d98e91adca67fee08" + "content" : "aa62feaefd959fe9c4a75280ddbee6ffe9b59181296c521e8d876676812ddf5a" }, { "alg" : "SHA-512", - "content" : "b60270c2b3d038cc3b3387ba052a79c2e5fad1b0536a5a1f2e4bfa98da3046ae451503f7837a214359dd6c6052cdbdf5d8776fbab5648bcc31ac974830a6c16d" + "content" : "bba574e1f4a05a5fc7a70cb5f9deb5a1f68d8bcb6b2ad4859799e94ca18f622b15075f454e00e3d8fd5ac64827c06afc660ec73bc0db1402bdc3f5e4ebb16bbe" }, { "alg" : "SHA-384", - "content" : "943d62b27e66b0b7472c0115f9749fe109343ee1409eb6ba57ffd3776eddfb92bf28c4c1f664aefc08e891d29d5ea2e8" + "content" : "a87fc3e9946eef5166f6393ca2ee064caf3763d19e3415779f0e5269b267790a897485fb8cf085ba84f535e2112fbbe3" }, { "alg" : "SHA3-384", - "content" : "ff834b86b09d0b11bd4fd9da2245b52c76d540af4bbc858d2478f40444c2a632ca671eac45b65097c0014456a7d553ba" + "content" : "9e9584346c363abd4a0aad992c54f60dfec95d7a7e8c3cc2834d878c72d1b8a5460c834eaeafc6045a7115af424bcacf" }, { "alg" : "SHA3-256", - "content" : "b632f307cefea8b5fafe516db380b7160da28677ed0657db17332250ee40b26d" + "content" : "9ddbb48896bde9c6d4457d250d207daef592fe257f10ff0ed88cbb38990c9209" }, { "alg" : "SHA3-512", - "content" : "81ae57ff106ae7f468dfa23a5d7fd828915cbe1bcc6b21ba988a255287a7d40858979aaede906f3cf277f93117eb7ec919e003083622d061b3149a2d15eb765b" + "content" : "7a3b54a4fd3db04d97df4040f10c27fb9993071eed45f1caac906d989b213995fddd8b7e74b92d68c6cc99709fc69b789f1a55bd55d1226adccaf80493869b8f" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.sonarsource.java/external-reports@7.33.0.35775?type=jar", + "purl" : "pkg:maven/org.sonarsource.java/check-list@8.18.0.40025?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://redirect.sonarsource.com/plugins/java.html/external-reports" + "url" : "http://redirect.sonarsource.com/plugins/java.html/check-list" }, { "type" : "build-system", @@ -2952,66 +2990,66 @@ }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-java/external-reports" + "url" : "https://github.com/SonarSource/sonar-java/check-list" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.java/external-reports@7.33.0.35775?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.java/check-list@8.18.0.40025?type=jar" }, { "publisher" : "SonarSource", "group" : "org.sonarsource.java", - "name" : "java-jsp", - "version" : "7.33.0.35775", - "description" : "Code Analyzer for Java", + "name" : "external-reports", + "version" : "8.18.0.40025", + "description" : "Code Analyzer for Java :: External Reports Plugin", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "e0890ace531478ef8ac18849d78cd9e5" + "content" : "0a2d44b03fd1c355461dd30c436d3097" }, { "alg" : "SHA-1", - "content" : "a8cecb5145490f15b35742712345b5919726ad89" + "content" : "6374bd720414018d7ed56f80b2ed918ec94e6b2f" }, { "alg" : "SHA-256", - "content" : "ae1ee6f32a16217667ea46a973f7c93a6f66ef7052a2d1e24d6e8f78c02f96bf" + "content" : "38eb3bbdd4857c485d41a0a9deab123e2c9c4cba4e187dd1997efe72cdafdccc" }, { "alg" : "SHA-512", - "content" : "b7fcefd8fa7174db020947db1a41aff0e5c25191fbd8feb8c53438a42604a50b342ac072f571eaf6b0d54915e9106dc5bc6304d5899dbee90e20dcfc08139ca9" + "content" : "ec05b2b58d09641b89777d15383f8ec27873aa1e2d97977af5365840b322e1a3e38a8d65c71dd7bf5b87fbca59e49bfc6e71dc7400efad987c51dcc5e9bd5e89" }, { "alg" : "SHA-384", - "content" : "39420fa5bb00153057946a5b667877475bdb65923dd9af86acc6db63f3bbb9471de9735e4ed16a03b3c3a2c6da3118df" + "content" : "dfde96d508de66a673c9e13298c958dfc2c6fb32e85c0b42450b3263ba4f3a09a254d893f08ae4b9f39d707e4cee22c7" }, { "alg" : "SHA3-384", - "content" : "6defb43802dfd77c5a549fd7d28ffdf85711623dd24d28520e1e2d96677e47a69c5661029a028d7ca13ea3fa75697a00" + "content" : "41b976778dec610536e3b9eb679754ef9568cc8bb2beb7c7fe1d852c5d5879c682d8844a0c035ebe0b095626ea43203f" }, { "alg" : "SHA3-256", - "content" : "54265f768ea5687f500b148e81ac1c3a41c0ac1d9eeb3e2154ebe4507bef46f6" + "content" : "42ddf81281e703791ae6f8c8d8adcc96da58390d4cb4b49668b4d3e3d1ba4bec" }, { "alg" : "SHA3-512", - "content" : "8530ff5df32f8250d5d3a68e81bf4f1e0d0add2a69fe6c2de5dc94b01bbe2e99a86fec11494f4d95239040ee2f736ae305c94b23376475ea7c981cdad6054c85" + "content" : "586377b8e12c4b960ef1a3a5cf335e8e19db4da10de7346f140bf3eb56243229be4271603c2400a6bcedb87d06dce5f95cb11581e8eceb80e88a6ddb3e00a564" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.sonarsource.java/java-jsp@7.33.0.35775?type=jar", + "purl" : "pkg:maven/org.sonarsource.java/external-reports@8.18.0.40025?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://redirect.sonarsource.com/plugins/java.html/java-jsp" + "url" : "http://redirect.sonarsource.com/plugins/java.html/external-reports" }, { "type" : "build-system", @@ -3031,279 +3069,130 @@ }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-java/java-jsp" + "url" : "https://github.com/SonarSource/sonar-java/external-reports" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.java/java-jsp@7.33.0.35775?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.java/external-reports@8.18.0.40025?type=jar" }, { - "group" : "org.apache.tomcat.embed", - "name" : "tomcat-embed-jasper", - "version" : "9.0.84", - "description" : "Core Tomcat implementation", + "publisher" : "SonarSource", + "group" : "org.sonarsource.java", + "name" : "java-jsp", + "version" : "8.18.0.40025", + "description" : "Code Analyzer for Java :: JSP parser", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "22b13ffeab24c14943b58adaee3d15f6" + "content" : "7ad6c8d9c8472d350359adbb1bb2a117" }, { "alg" : "SHA-1", - "content" : "5fcf71c9c39e54c9ca51c304dd7bb2f5558e3286" + "content" : "bf1f05662d4aa017bfab919bee32c6e985aea49b" }, { "alg" : "SHA-256", - "content" : "3f08ff872bf83defa70c20274ab597aaf23ea95c1ff50f4b98e0c9a2a25c1106" + "content" : "85520636a757ac333fb349873dada3386a2a89352bb6443a552612323a898e3a" }, { "alg" : "SHA-512", - "content" : "89d83d9250be2cfc2d1471133461107dd4fdab532439f7827771f7d2ac202a4c9d57aabed5a7f84fa7a5b1474ce67b60ccdfbd08e2fd4980af1cf133ac69a2c1" + "content" : "34e2e4fd545dfab31f0f0dba626b61648a2daadfaa7f32483cb3b31aa2010e90639bcae4b2b3ac669d60ae3d0490ef59bf6d87ee61098d593c15b043ad8e43e1" }, { "alg" : "SHA-384", - "content" : "688680dcea5c8c055cfd461a29c601f0533bf448b9659d0491ee60107c9f8080fb91e2705cc319ab83cdc791f79b916e" + "content" : "acb14999bcc8e0347f71ee453d3c58426e60de8f576904058391dbab16da82bfb0ac7083cdd73b6f26862b2ca06912cb" }, { "alg" : "SHA3-384", - "content" : "0afb2f67992e9b3d891729c4f65c1804259180f459056f9e608c29d479eb5661a2eb23b46a240ff08d834c0940068f2b" + "content" : "75c0fed98b9486927c2c767745222e6b93e7c8af00727abbc871380d5bb2b9d71ba9a9bede424aedfc0c057e5c564d02" }, { "alg" : "SHA3-256", - "content" : "58917d6995c9fc52fd102c6e26dad93af8e43ef5b8ee1dee7932c2aa947d261c" + "content" : "3ff452bc563a50565843c16d94fd729cdd4f76ce6b1847c5fd61d6504a6fb2a7" }, { "alg" : "SHA3-512", - "content" : "453c585ccdeb65f90a65d3e9d7aedfc0ef6d68cd3a905f24584802d7029b1d79d7bab4a28b2b0f9d12cc41d2c395b87ddcc8e6568e98aae21fd076ed1c4b7bb7" + "content" : "96ad4a5625e3d8c3b6df8a224e75597da826ca3438e1e0c6fe805cfc0d246822ab98794250913691ed1c5ce201b9e938ca6af648e9d2f5f842efdaad78599341" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@9.0.84?type=jar", + "purl" : "pkg:maven/org.sonarsource.java/java-jsp@8.18.0.40025?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://tomcat.apache.org/" - } - ], - "type" : "library", - "bom-ref" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@9.0.84?type=jar" - }, - { - "group" : "org.apache.tomcat.embed", - "name" : "tomcat-embed-core", - "version" : "9.0.84", - "description" : "Core Tomcat implementation", - "scope" : "required", - "hashes" : [ - { - "alg" : "MD5", - "content" : "2a5bc72d7f698bc42784cb7afa20e808" - }, - { - "alg" : "SHA-1", - "content" : "d0cd4045defc2ecf7ccfdc901925eed427bcba3e" - }, - { - "alg" : "SHA-256", - "content" : "29daf71c4b5f5ed0c0983a83ebd96ee74df905e406534b4c5412cc92c2aca2b7" - }, - { - "alg" : "SHA-512", - "content" : "e28752b186c5eaad6df750719e70bd9ab33f4924f293b622ed4a7198ad15fe5e998b6b7ddee230ce564e7ec0b71871fa5c2362f6c4cb65b2872e3f25ef0840e6" - }, - { - "alg" : "SHA-384", - "content" : "0df38c977446ce1bb1b6d17b544f3778b4891d6ef499bb1f53dfe8cca457ec8afdb8c061f17e966574d4fd9859517580" - }, - { - "alg" : "SHA3-384", - "content" : "eb18577b10a3e3cdabd0483e4545226f4fa8d8c2c3d8eb88b9782aeee1ae9d9bc03d76d19c6b5e886b668fe795d38975" - }, - { - "alg" : "SHA3-256", - "content" : "58006ad9c9fc8e3b18472ad550d72bcd7c9364ecdc586db3f194116694179bb8" - }, - { - "alg" : "SHA3-512", - "content" : "bda4e7479e4b6015f78b24ffca33be9d99d0606acff96f4d18d8e713f261835e16cf26cce800657c28a279fcd1c3e8aa6e5050d5463e1850526364306e003e2a" - } - ], - "licenses" : [ - { - "license" : { - "id" : "Apache-2.0" - } - } - ], - "purl" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.84?type=jar", - "externalReferences" : [ - { - "type" : "website", - "url" : "https://tomcat.apache.org/" - } - ], - "type" : "library", - "bom-ref" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.84?type=jar" - }, - { - "group" : "org.apache.tomcat", - "name" : "tomcat-annotations-api", - "version" : "9.0.84", - "description" : "Annotations Package", - "scope" : "required", - "hashes" : [ - { - "alg" : "MD5", - "content" : "f590e2b4b16de6e9bc4b7f48380a79d3" - }, - { - "alg" : "SHA-1", - "content" : "86186a099bb355a174243f812d58aaf113768b91" - }, - { - "alg" : "SHA-256", - "content" : "b801c2be650483f7a91a6c50a2a93768c0fddc7ec54d0ca0d5e69bc92ef2758a" - }, - { - "alg" : "SHA-512", - "content" : "bfe97892d8e218adcd01a473ca51d7bc3a59bec953fca3752e19d73519972eb7665cf9fc098a74cafb8cdff8fc773ac32424af7b3e865d6bfdaafaab59cb9fb1" - }, - { - "alg" : "SHA-384", - "content" : "7a97a614983641796ef33723f036bfba309c4f6d1fdf860058c795d826ebe311248822a705880de9d48e5a6d456bc471" - }, - { - "alg" : "SHA3-384", - "content" : "4af95a177b0bd0b0477b61a15b167592cf5e8ea0973f756d7850a6792e0da215b2ac1995cdec027169f0e78dc6fa5487" - }, - { - "alg" : "SHA3-256", - "content" : "8c4a3599140a0e684eb0f5aac9cea0857687d00d8bb3dc175cc88ae26ffe8337" - }, - { - "alg" : "SHA3-512", - "content" : "559a0b35852d37bc7115cd09ffb1684c6613eb5fde071e7503c483b46e32be0a7e2bc62d7386a999ac9e8c9d2548fed4c8d420465d0b8125f15fc554bf659a38" - } - ], - "licenses" : [ - { - "license" : { - "id" : "Apache-2.0" - } - } - ], - "purl" : "pkg:maven/org.apache.tomcat/tomcat-annotations-api@9.0.84?type=jar", - "externalReferences" : [ - { - "type" : "website", - "url" : "https://tomcat.apache.org/" - } - ], - "type" : "library", - "bom-ref" : "pkg:maven/org.apache.tomcat/tomcat-annotations-api@9.0.84?type=jar" - }, - { - "group" : "org.apache.tomcat.embed", - "name" : "tomcat-embed-el", - "version" : "9.0.84", - "description" : "Core Tomcat implementation", - "scope" : "required", - "hashes" : [ - { - "alg" : "MD5", - "content" : "3a0cd4945a15ee8d37f4b23cf2216e3d" - }, - { - "alg" : "SHA-1", - "content" : "3fc7c06e3f2c23baf8bfd64320376fa701633602" - }, - { - "alg" : "SHA-256", - "content" : "22370f6a152da44c9a7ea15e597f22ef6b057a8d3278f69ff50cc3452473bf97" + "url" : "http://redirect.sonarsource.com/plugins/java.html/java-jsp" }, { - "alg" : "SHA-512", - "content" : "3373ff62438698fc3223e7474efca16bdc2a9dc9759e5815ccb8a0e3cc722ba2d581292b60b52eb1d86beb7c705b2640c81d69dfa7162f477d6ed1be8928d748" + "type" : "build-system", + "url" : "https://cirrus-ci.com/github/SonarSource/sonar-java" }, { - "alg" : "SHA-384", - "content" : "7d018a18156839d5c3c92ac091a53710944e00955443f1a0b051b3cb40f0c7fc9a925efc776ab09f1f0a569102cca101" + "type" : "distribution-intake", + "url" : "file:./local-deployment" }, { - "alg" : "SHA3-384", - "content" : "4f300a9fd6932daa3ff4db977860f66a7f88157e72e1481f1981d5597a4666daf76a309d5ff10312ba0968b56f0e4bbd" + "type" : "issue-tracker", + "url" : "https://jira.sonarsource.com/browse/SONARJAVA" }, { - "alg" : "SHA3-256", - "content" : "ac2d6743eafb0210717527467f014d8fd8ac97a12c5f2aaccf1922b01c4d268d" + "type" : "mailing-list", + "url" : "https://community.sonarsource.com" }, { - "alg" : "SHA3-512", - "content" : "656900dad4ca2261cdc8ffa7febfbf4edfe87e2cb32a8a34b830f0f3248ae707a473a82f69487a70003c3b2c0e92ed998c082ec22f172c86b8565b62b7df74ad" - } - ], - "licenses" : [ - { - "license" : { - "id" : "Apache-2.0" - } - } - ], - "purl" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.84?type=jar", - "externalReferences" : [ - { - "type" : "website", - "url" : "https://tomcat.apache.org/" + "type" : "vcs", + "url" : "https://github.com/SonarSource/sonar-java/java-jsp" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.84?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.java/java-jsp@8.18.0.40025?type=jar" }, { "publisher" : "SonarSource", "group" : "org.sonarsource.analyzer-commons", "name" : "sonar-analyzer-commons", - "version" : "2.8.0.2699", + "version" : "2.18.0.3393", "description" : "Logic useful for a language plugin", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "e1a59ec0809b06b3f5e2c8e97a76b218" + "content" : "86c3f760a4c1790b1af5c16eb246f8e0" }, { "alg" : "SHA-1", - "content" : "cada74c92a33d57d5bdb70b8178a9006754e601c" + "content" : "612043286321caa05aa4e7670b36dd41e826ae2d" }, { "alg" : "SHA-256", - "content" : "e9e17c3b6e02624cc1981dc7c2100f9ea67b96aec66e6a785e0ed5202febd854" + "content" : "f7babd94546594b9d0427b1bf32cd8f60065b8e8d0a1436f6ac443b9faaa1bf0" }, { "alg" : "SHA-512", - "content" : "9197a2c16edd4ccbc39a33fe75e4a4175700306d9d1df2f4e146de37728aa8483a3355993bb8e8fb77ef9ff17490427cf55566d81364d82495f3e49c62ee21f2" + "content" : "b1d166c1ea81d0c89afc9b27e6d9457e6cf0c45afc8de7fa37607ed14b379ddbc1cb1c31bd2ebc25be3c980f1cf145686256dc1b0217f8af73c69d5eb11bb0a3" }, { "alg" : "SHA-384", - "content" : "8385239d7eb9d7bc972fbb63ed5d887b2089129844037c957f0cc5bcd34b8a20deea0531022af0832193f020e94ad5fe" + "content" : "1d1bde067e0de39df2d0a35bfda18e9082c4f208411d45488a632a61b0acb04270a4016ad481a7aab1107608d121b90a" }, { "alg" : "SHA3-384", - "content" : "ce192d54341470644acee6f91217ddeb62f28d1ac2da58b0f73fb8ec9e5278463457f74dc4a264349051b6fc3dc25c3a" + "content" : "74a471351b75abc4d02989bde9e597307c807683bbac455a3b50aa98928d7dbf3f85db1d4c090c7c7b87299603d1f568" }, { "alg" : "SHA3-256", - "content" : "a521179e465dec4a69e93e393df68d9c6719f393654a1e584bd3ff7a0cd39891" + "content" : "8a6c33facfe7d600d45ca3db4ef0e545e7bfa75a383ac9d05fe49df6ab695197" }, { "alg" : "SHA3-512", - "content" : "36968ac582180921cb12e613073d261111b81ca042e47624bc07176f6926c6f7a40a11077e51d5e460add84747348b4a962cda95c6b6c1ffe372e032c570ad89" + "content" : "68308ba7a0a3196f866436123817431cda045808cf617084af2efb84f53aa6907841ba67653fad166a347f92de0de2b2fea573e5e2fda734306cb3ca3ecf3319" } ], "licenses" : [ @@ -3314,7 +3203,7 @@ } } ], - "purl" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.8.0.2699?type=jar", + "purl" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.18.0.3393?type=jar", "externalReferences" : [ { "type" : "website", @@ -3338,47 +3227,47 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.8.0.2699?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.18.0.3393?type=jar" }, { "publisher" : "SonarSource", "group" : "org.sonarsource.analyzer-commons", "name" : "sonar-xml-parsing", - "version" : "2.8.0.2699", + "version" : "2.18.0.3393", "description" : "Logic useful to read and analyze XML files", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "eeb2d8b488da7bd7c98cfb49b3d06830" + "content" : "42a57e652799b8d75ed82ed71af3e8a8" }, { "alg" : "SHA-1", - "content" : "03e14b69bc7a2abbc0a595851f8f31540b208dd6" + "content" : "d776689581869043b0d5225d9def870872530ab9" }, { "alg" : "SHA-256", - "content" : "408ec4b66b8fda3fe8a333858aed7cbb3340f570790468f8a789de4cbf2c8c91" + "content" : "b383b5147a2b186d91f3efcca0cfa9be9e87371e79c0e61f38332b24f152286f" }, { "alg" : "SHA-512", - "content" : "35be20dfa7f82d0ba024c2614359e4b52ac295a2c416d854103b3a7f9739d04e2eb3bb927064fe9ac11ed9dbe5f91f8a266fd16a2ed40675b50c43836d132829" + "content" : "04334f2ed4bd53436f9ca5755f836df11147951e5e09ba375e7217a9ddb629172f550eddb978c1ecc3a9e76764db7c82aa05c925f53cb720ca6f0684c2d95197" }, { "alg" : "SHA-384", - "content" : "426ea2055c0c9f6642b68a7b2eccbf4d7ee802dd3bfc010564b108a8c5cf54a3a9ce7fd3d07ab4adbbd54fa52bee64b5" + "content" : "5cbbd8a9a784f94c77bac285538e6894c6cf67f5e5da50745633dab13583e6027c7b2620df4c0412cdcbb4bbf7dfb33f" }, { "alg" : "SHA3-384", - "content" : "9bfe10431714c647f99ce6b8e4d8eaaa6b80862985380a5ce4da37cdcf95cf324f9008b9dd46e81e8ecaacd19fa8e1c3" + "content" : "3d74f27c2a90595595c59d4f3551e11037f70de03afb7669a59217a42c32e41318ccf53a4911e97c94d4ef7c5d909498" }, { "alg" : "SHA3-256", - "content" : "2c47cf7bd11d40d40d1da9406bbd00a578bee08621cf341598d8fad4c4e8f7d9" + "content" : "e798859717811fa3dd11cdc3e7c518593dad3f1eea35e7880250c832cdb6c51e" }, { "alg" : "SHA3-512", - "content" : "4eb5a2b0f0b527231f0bfb1bae4c798713e615a7c5929c0ac09f49b3d9fa5eb12cee0775842e6b7033d7163803a3737595fdf9f221eeaef69e43875c87b6c3bf" + "content" : "757eb040f0c6dc7a39dfba5f3842962b27433593e7993fc755ecd2d2ab362ee58b04c95ea9f4817b43a518f51144f18cd1e9f85875a79c6234ef0f667f1ff536" } ], "licenses" : [ @@ -3389,7 +3278,7 @@ } } ], - "purl" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.8.0.2699?type=jar", + "purl" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.18.0.3393?type=jar", "externalReferences" : [ { "type" : "website", @@ -3413,7 +3302,7 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.8.0.2699?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.18.0.3393?type=jar" }, { "group" : "xerces", @@ -3631,41 +3520,41 @@ "publisher" : "SonarSource", "group" : "org.sonarsource.analyzer-commons", "name" : "sonar-performance-measure", - "version" : "2.8.0.2699", + "version" : "2.18.0.3393", "description" : "Logic to capture a hierarchy of performance measures, save it into a file, and merge files", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "bfdcb3a88a97fe66b288f61921bab1ae" + "content" : "1854d57f67661c6950374be29145a017" }, { "alg" : "SHA-1", - "content" : "0ecfd7e49341de39ad53f9608c31f30b6a10c441" + "content" : "eb02954016253fd34551a4641e3215fdafc239c6" }, { "alg" : "SHA-256", - "content" : "ebba386ff08f8bbe6e9a37a0666e91c8c8561af5e8b24de484a520e828ec64e7" + "content" : "4a3f60003f00a88695158a522cfbb7119c2c696991f13b7ca391e7c1eaf46d34" }, { "alg" : "SHA-512", - "content" : "02d37166706b1a93248cfb82731318304950162814292a295f0252d0f5d7ec734cedaf4a9f960d30c85dc8bac0ee59d75089f5ae10c88212b98e4de7ef7c4d8b" + "content" : "f3f2cc2211f00a66c33cd81ef996557fda3ee89421b2fc4565c376dadc22dc2a25eb327e5dfa041f3c48b8fa8620b797ec6762fd74d3ddde0184e6598c211d39" }, { "alg" : "SHA-384", - "content" : "84f70dfb7e80d7a6c1dad5ac31ce743f0da036e683881acf172d35f7d21ccbb3296165b88fcd4b2167cdc1234956bcdb" + "content" : "54138af00ebd5d85cb2f776d75d2455de1a058e657dff84d8e19a563d720fa819a1efd4d432a1d3c2dcb2fa31158c184" }, { "alg" : "SHA3-384", - "content" : "e89f15bf1b1ff83ce691bd755daab7a6ac6cfb416ccdc12ebd1a7f427da2224c4b8371062ebaa3fa63ba878473e7a8d2" + "content" : "7855e1aba9691493ebd9a5d79ace4cbccdc1f9fd9194a8300f6b71367014e7fdaf04a7aa9db87ed195b7d738552e6080" }, { "alg" : "SHA3-256", - "content" : "c08c9694411c5561032ace350fb1bb2201f3bfd0aa217e48047a399eb26e26c2" + "content" : "f65d3d9a6737a6bd62c31d2d463d011512c3aa434d0575d6e54a95dc00bc5c6e" }, { "alg" : "SHA3-512", - "content" : "a47781adf6a0dd209579e9c09ddb1f53c88bf89dadd4a7829655599eaea3399f9a71cf7e3b9c831c0f7e86904d5de2e97a6c3df8c0c0126ce8f4f4ad73cda1a3" + "content" : "34d64169af99b65d4ee59cfd414e189af6ea00ae5118aae5976e1ec76752631138c08eae42b96e95f9668123bbe44a17907c7556003e0dfd988723fc50db0d31" } ], "licenses" : [ @@ -3676,7 +3565,7 @@ } } ], - "purl" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.8.0.2699?type=jar", + "purl" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.18.0.3393?type=jar", "externalReferences" : [ { "type" : "website", @@ -3700,58 +3589,58 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.8.0.2699?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.18.0.3393?type=jar" }, { - "publisher" : "SonarSource and Waleri Enns", + "publisher" : "SonarSource", "group" : "org.sonarsource.python", "name" : "sonar-python-plugin", - "version" : "4.17.0.14845", + "version" : "5.16.0.29940", "description" : "Code Analyzer for Python", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "a1f37ca54b6407c29e14d6a84ef527be" + "content" : "96af3be952506f19faa9797702af83d2" }, { "alg" : "SHA-1", - "content" : "d2a19e1624695b1a8bf7691c028be1c1d795c3b4" + "content" : "7358996b700859eefb489750874f6b276555ae44" }, { "alg" : "SHA-256", - "content" : "4745222f0e3ff47ae4bef17fe6e6c8f50234c69d4992e81628c52217f3443564" + "content" : "161047717514eb4299847263ccb553df5e5be8fc9ceb081aaf4015fa834c734a" }, { "alg" : "SHA-512", - "content" : "7fb3dc79348493ea5a16c8a436db16665126137f0dfcc146fd75dac317a686c26f81499e5a370341e87374fe28006670f48d7424ab2c7988e8e51a842872fc4a" + "content" : "09689460be8675a15d4f1c2cecb868563c94a54c311f992bdd190aef37300a80760966216f73c12824765d7a7562735799b9c08f0606f465b03c299778110b31" }, { "alg" : "SHA-384", - "content" : "55bff9b2c2d2fede0efcaa6c64835bb2e42e94d4ba6196168d4d5b2f7fbd65cd8c03ae85f39937d27f873edcc359d565" + "content" : "bc18a99dabb6a1f04cd2bfdaffd3e1ba70688d16716b8cf40c9a751e94c6312b721b31478d7ea1baf3095da0654e6ae1" }, { "alg" : "SHA3-384", - "content" : "f38a0bc3cfd4b5d024c210e71fc0b63f41cc4bbac4bc501905fad95ceda64f81e39c3a53ca50b5c1e25250e802ce8a92" + "content" : "5d4803f25bb278676d6aa3ec55c6fd4db93fb42d5966fe73f0d7c6ecc2edcd2633154defacccd021b82574399e095c6c" }, { "alg" : "SHA3-256", - "content" : "2a9a49aac638a35dbc0ec3d31a79cb92a87bb148ce46ca7072bbb4d732a0cda6" + "content" : "b5898d3547c883a1aeaeb1175ed6bf9b691ae896210df2a0ce22b74295ddc004" }, { "alg" : "SHA3-512", - "content" : "5861b8fa999a2e4117429bf16c4ee05f765050a41ca59fd6beb2499ac24020a0693f366b6807bce569cf789be4ef075ab320aa02580712ad32d0b10a0b1b34d4" + "content" : "22c2445b64a2d200eb021df6bf93ef083c5487bde5c7923df897941445fd7f77eb9eac76542924195c8fdf17d43a3336a9b91f7c507ce8c36265447d8b77472c" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.sonarsource.python/sonar-python-plugin@4.17.0.14845?type=jar", + "purl" : "pkg:maven/org.sonarsource.python/sonar-python-plugin@5.16.0.29940?type=jar", "externalReferences" : [ { "type" : "website", @@ -3775,62 +3664,62 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.python/sonar-python-plugin@4.17.0.14845?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.python/sonar-python-plugin@5.16.0.29940?type=jar" }, { - "publisher" : "SonarSource and Waleri Enns", + "publisher" : "SonarSource", "group" : "org.sonarsource.python", "name" : "python-frontend", - "version" : "4.17.0.14845", + "version" : "5.16.0.29940", "description" : "Parent pom of SonarSource public projects", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "c55cb48cedabf79f2877ebb9d88f6b58" + "content" : "af8fb4754bb34b00450e1886e6e35f24" }, { "alg" : "SHA-1", - "content" : "4ff8dfa5ea7d5ad5847562d95396b919308caea3" + "content" : "3d29bbb908e0740432fd9e29f6f9fef3b61fa8bf" }, { "alg" : "SHA-256", - "content" : "437b54530740f33ae5e46bdf8348d1440684f7d1cb318a7ee058689bd9b97c76" + "content" : "2bf0a615cb8804200e9de8c3b407b6a928a16b34349f43c76bf9f6c548e8000c" }, { "alg" : "SHA-512", - "content" : "4928573b4dde5237b3056a25d01fdcaa0d8477f66517d0939d332ff8ba434b6a03d884095701f4b571af131b3afc6b57feee148d69d86b8e62a3a4d39d2d1001" + "content" : "0b42071f37c0cf8dfc46c3a3ed915bdc1d99b0bc41706200305c7f962f7b14c79e19eb42f99488b874d45267015de3f9762d903d6c03c7fb1c4bd1ac331c45d8" }, { "alg" : "SHA-384", - "content" : "859f11ab3b6590bc07f6a082ef8d87775939341e064abd4c840ad326640c71b84e99a8ae281f0bece8bd5b8196db1c0d" + "content" : "5411758030a57ffedc16b7b9f93592107920e01b27b8b6b98c3cb0cec1bbb3eecfc0dfc36ba130b2616507a703938560" }, { "alg" : "SHA3-384", - "content" : "7dc1a501021011058c6e46cf0e069103aca9687de27aea29c42196af8d74c09ed668ec77284abafc12d635f4e0c9154e" + "content" : "d2054bd5b799463c0364aebef1024584f37fc63b122b0d9a137d5d052b152ef3b23ebb64961222adc72f30e49ccdbe3d" }, { "alg" : "SHA3-256", - "content" : "84a8def8e68682978bda393edba28e6caa7d4c333fffce5c09a24e54a4104d20" + "content" : "6eaa8027ba8e0f7c11c2a2da14084630735110429505016fd92d8292c33637f4" }, { "alg" : "SHA3-512", - "content" : "b44fdef1e3482a1f65d0d5345c69fb78ed32cee27f96abab033ae1e3e26923efd69e8b213ae7c9c367c0e9a87df3785154ecc58961a5261513dc1fb3e260d50d" + "content" : "35de0af96a078f4bc7709776d051b3d40c5f965647096114d33cb47c2fda0aacef5453af4475302a074e351c796b30315daa182fc69f780f515ac046a19e9ff0" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.sonarsource.python/python-frontend@4.17.0.14845?type=jar", + "purl" : "pkg:maven/org.sonarsource.python/python-frontend@5.16.0.29940?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://docs.sonarqube.org/display/PLUG/Plugin+Library/python/python-frontend" + "url" : "https://docs.sonarsource.com/sonarqube-server/latest/extension-guide/developing-a-plugin/plugin-basics/python/python-frontend/" }, { "type" : "build-system", @@ -3850,46 +3739,46 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.python/python-frontend@4.17.0.14845?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.python/python-frontend@5.16.0.29940?type=jar" }, { "group" : "com.google.protobuf", "name" : "protobuf-java", - "version" : "3.25.1", + "version" : "4.29.0", "description" : "Core Protocol Buffers library. Protocol Buffers are a way of encoding structured data in an efficient yet extensible format.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "7dc81d3c2187ce5627d134a37df88cc0" + "content" : "5de9c1cc9a647278ab03d76ccfb8ff9d" }, { "alg" : "SHA-1", - "content" : "2933a5c3f022456d8842323fe0d7fb2d25a7e3c7" + "content" : "ffea90ab158435d68de76951857ef5f8b0f98365" }, { "alg" : "SHA-256", - "content" : "48a8e58a1a8f82eff141a7a388d38dfe77d7a48d5e57c9066ee37f19147e20df" + "content" : "16901851ebe5e89fe88aaad3c26866373695bc2e30627bb8932847e2f5fc2e76" }, { "alg" : "SHA-512", - "content" : "d4adb935097c4fee13838ea7c166b41a9c34977e436d2fa5e5e92aac1a95462846463895ad994858a442079627696ca14618ff97a0039abd3fcb8671d7961d3a" + "content" : "ed9aae4faa56c04dc086af07078db3734f675eb4188bb2be98c94cc59a8e4e77b74195c47d70c7b697bc3b938e106fdc137ffda5358b3029795f28e7d9216d68" }, { "alg" : "SHA-384", - "content" : "2fc41e52f529bcbbe4d8938d262153ee7e7a098d51fc84a2720bade27aff0247af47629c3caa630b706001d769714d1c" + "content" : "d204ff730ba5eff0eddd9439f05ab89e87194fc6c69d50054da593ab7537495207374840701867856ea1e9aa87ef1e14" }, { "alg" : "SHA3-384", - "content" : "9ff49c91b6ca5e5ebc8005b6179d171f3bb549b9ef667c694ea6cebe842bccbea1bedb2bab69d97e89270900915f125b" + "content" : "9a3dc4e7ef4e1488b6ee4a653d9f47569bb3f543012ec20fe695d1bba2a7da8e329ffe70d5ef8e43fd9da1721fe3f3c1" }, { "alg" : "SHA3-256", - "content" : "e3794da30f03c61b916aeb9aa2af625792dc7f236bf2bd16cbfffbf3ef186d59" + "content" : "16fec3a2d08bcc363c69d2a260a78020636d94dd4ed929050d8e8b51d37960f0" }, { "alg" : "SHA3-512", - "content" : "1d3bfb11f6cae1912bd5cd04aef53ae725d705e598fafaa185903d2c534ca2f88ad919321ec4bcdca36c9b1515097c5d47aa6868f5bd3b93732337bd564b3bb7" + "content" : "37c5a864aa97fd50a88a5c9b2a9c7eedd646eb4655ec041502e1892efb55b2f22e9f2292dcca120e74755a11f92dc41616e1dc6919d8906fe2c5802e25ed1187" } ], "licenses" : [ @@ -3900,7 +3789,7 @@ } } ], - "purl" : "pkg:maven/com.google.protobuf/protobuf-java@3.25.1?type=jar", + "purl" : "pkg:maven/com.google.protobuf/protobuf-java@4.29.0?type=jar", "externalReferences" : [ { "type" : "website", @@ -3916,265 +3805,267 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/com.google.protobuf/protobuf-java@3.25.1?type=jar" + "bom-ref" : "pkg:maven/com.google.protobuf/protobuf-java@4.29.0?type=jar" }, { - "publisher" : "SonarSource and Waleri Enns", - "group" : "org.sonarsource.python", - "name" : "python-checks", - "version" : "4.17.0.14845", - "description" : "Parent pom of SonarSource public projects", + "publisher" : "FasterXML", + "group" : "com.fasterxml.jackson.core", + "name" : "jackson-databind", + "version" : "2.20.1", + "description" : "General data-binding functionality for Jackson: works on core streaming API", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "077f9306a20f8a6eca092f54a53a26e3" + "content" : "49d7b7226df5ed4a036e48997a03d066" }, { "alg" : "SHA-1", - "content" : "ef43f45c57346b910ac422d7aff2ab4b6fe25894" + "content" : "9586a7fe0e1775de0e54237fa6a2c8455c93ac06" }, { "alg" : "SHA-256", - "content" : "7d6e1743538dbfa7310bc54fbb7e511a6fd8633549018d7e2b4ba67019a3123e" + "content" : "34bbeb4526fff4f8565b12106bf85a6afcbae858966d489b54214ac46b2e26e8" }, { "alg" : "SHA-512", - "content" : "f628f82e470f9af8e0da159464ef41996b5edbbab7ead94db853afc54992d8f155994becbb9acdfe4af46a41fbf5e3ae01ba6b17078d1e20861da5e4eedccafc" + "content" : "16906e9c2f1962649eb21de148f362fedf2ce903c7ca0e6d68a01d43dbe8402b70cc537c104f36bc40a2bed6601162e7c21663735582e25bff7e27852be1405d" }, { "alg" : "SHA-384", - "content" : "43302f43c32c5b35c4f7b85e901c457ad7ce7c1d0cc8d891dceb828018d0fa06c09fd7b6a34764f187b0deb8f002db96" + "content" : "0591935cdfed1d65fa4a2820133ba129384f71921228ffe093f343d3ebf0b699762810d9208641726111015f0e35753b" }, { "alg" : "SHA3-384", - "content" : "2c847248451a6f0874fa6d91dedd203c7492db05161c15235d709e9e9bc6d8ff5900b7c60e0aeea74fb7566cb1a3db3e" + "content" : "855ccd449944e7884f8088c8c5b224e6e2f63bcd3123502618b4f5ded025e5978143af8c5d31215276932bc3bb089472" }, { "alg" : "SHA3-256", - "content" : "32f3d74c14e3918b8af6c98cc32304cc5d0b835348cd15734033307e4e871d2f" + "content" : "53732171c9f2bdeaa40017a34683a00ac11e8a8c1bcefaed07eb91e629e20376" }, { "alg" : "SHA3-512", - "content" : "2429a23270a66433e76eade81bb8b8acd3d91b55a587c6230ecc1282e71b2fcd61d9867d100fe04b74d387516a7c0df4124d8aa82f300c07a82dba20b4c01920" + "content" : "05017efae94bc3c83131aaaa7911f20e7c367502cd2cd05c6cedabc877b55724bcde2521ba1da15bf1c1c3ccb1a235124b39b2d4860142f2b89d4df197cf5c83" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "id" : "Apache-2.0" } } ], - "purl" : "pkg:maven/org.sonarsource.python/python-checks@4.17.0.14845?type=jar", + "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://docs.sonarqube.org/display/PLUG/Plugin+Library/python/python-checks" + "url" : "https://github.com/FasterXML/jackson" }, { - "type" : "build-system", - "url" : "https://cirrus-ci.com/github/SonarSource/sonar-python" + "type" : "distribution-intake", + "url" : "https://central.sonatype.com/api/v1/publisher" }, { "type" : "issue-tracker", - "url" : "https://jira.sonarsource.com/browse/SONARPY" - }, - { - "type" : "mailing-list", - "url" : "https://community.sonarsource.com" + "url" : "https://github.com/FasterXML/jackson-databind/issues" }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-python/python-checks" + "url" : "https://github.com/FasterXML/jackson-databind" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.python/python-checks@4.17.0.14845?type=jar" + "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1?type=jar" }, { - "publisher" : "The Apache Software Foundation", - "group" : "commons-lang", - "name" : "commons-lang", - "version" : "2.6", - "description" : "Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.", + "publisher" : "SonarSource", + "group" : "org.sonarsource.python", + "name" : "python-checks", + "version" : "5.16.0.29940", + "description" : "Parent pom of SonarSource public projects", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "4d5c1693079575b362edf41500630bbd" + "content" : "c6a6f14dd43b2ca777639d045d371686" }, { "alg" : "SHA-1", - "content" : "0ce1edb914c94ebc388f086c6827e8bdeec71ac2" + "content" : "7420c64bb23358297f8fb465d194b0abc81a268d" }, { "alg" : "SHA-256", - "content" : "50f11b09f877c294d56f24463f47d28f929cf5044f648661c0f0cfbae9a2f49c" + "content" : "8d71a04ae268809a329169124e821538409f323c25738a787f1004691830947a" }, { "alg" : "SHA-512", - "content" : "4a5a3dbe4941c645e2cca068cca5c1882cfe988b02e7cd981d1e51784900767d1deab0e0e0566f559c9fcabb4a180e436d5bb948902d4f4106f37360466afb42" + "content" : "49cc6c1c1f6d4ab7691e52ee582edc2dc4320706f0cba8b0264232bb8c648e0c1411fc349480d4126909275bc722a26ce7dc1d0442b0fe800d68e43dd502e8e0" }, { "alg" : "SHA-384", - "content" : "9725bc421adc1dbcd6f937eca0f3075d186a2b353ece4cef66b0fe81bb8d3f7d7641c43e86d657ef526c719f0c2a8c90" + "content" : "0ec195c2cd805ba066715992213efab8234ad4fea211d38c11621b764ce81a82ec4eb13f372c3a6ae77663319de497ca" }, { "alg" : "SHA3-384", - "content" : "4bc4eaaf2580ded6d552b96ae5261c936de95f69a1d137c47279c51bf2aa1406ae44f69ccc94486267b8441e53c4bd74" + "content" : "d59fe66bc7a1621385b1a8e6d9e7e9aba25f5bcd1bf7460aaeea718a9fdefa1f01d65bc6bbf08c4ea20d6ff5533321d5" }, { "alg" : "SHA3-256", - "content" : "b68d49ef037d428ea0c3e67a7a20f3d68a134bef30a1639ec08d28886b9f5629" + "content" : "6b6d15ca4b8e534cfb0a5b3a9dc4ea328d07647a6a5029cc5bc36cc0e33f4ae7" }, { "alg" : "SHA3-512", - "content" : "2e9ffc0608827cffc0b48b7a0f35d371c66586c99fea2910f7c2a237c7c57d9ae4d65de7c8e018362c2e4f963c2f70a9196cebf35457f1dd0cea6c65c256f673" + "content" : "258f4367d5303ee344945915f54637c52cdfd441d3ec1a642172dd417815e38993f14b35154b0d9c7d3f49dfad666e9cb2ca26a9993f52815180b4bb6bdf8dce" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/commons-lang/commons-lang@2.6?type=jar", + "purl" : "pkg:maven/org.sonarsource.python/python-checks@5.16.0.29940?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://commons.apache.org/lang/" + "url" : "https://docs.sonarsource.com/sonarqube-server/latest/extension-guide/developing-a-plugin/plugin-basics/python/python-checks/" }, { "type" : "build-system", - "url" : "http://vmbuild.apache.org/continuum/" - }, - { - "type" : "distribution-intake", - "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" + "url" : "https://cirrus-ci.com/github/SonarSource/sonar-python" }, { "type" : "issue-tracker", - "url" : "http://issues.apache.org/jira/browse/LANG" + "url" : "https://jira.sonarsource.com/browse/SONARPY" }, { "type" : "mailing-list", - "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/" + "url" : "https://community.sonarsource.com" }, { "type" : "vcs", - "url" : "http://svn.apache.org/viewvc/commons/proper/lang/branches/LANG_2_X" + "url" : "https://github.com/SonarSource/sonar-python/python-checks" } ], "type" : "library", - "bom-ref" : "pkg:maven/commons-lang/commons-lang@2.6?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.python/python-checks@5.16.0.29940?type=jar" }, { - "publisher" : "Codehaus", - "group" : "org.codehaus.staxmate", - "name" : "staxmate", - "version" : "2.0.1", - "description" : "StaxMate is a light-weight framework that adds convenience to streaming XML-processing without significant additional overhead. It builds on top of a Stax (JSR-173) compliant XML processors such as Woodstox or Sjsxp (default Stax implementation of JDK 1.6) and offers two basic abstractions: Cursors, which build on XMLStreamReaders and Output objects, which build on XMLStreamWriters.", + "publisher" : "SonarSource", + "group" : "org.sonarsource.python", + "name" : "python-commons", + "version" : "5.16.0.29940", + "description" : "Parent pom of SonarSource public projects", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "cbc599b621abdb9fd93d0c0527b6e273" + "content" : "9d94ffb59a75cf874e054eb124bc1815" }, { "alg" : "SHA-1", - "content" : "b0b767fbc22683d7bf26a14ae1c5817561e21d00" + "content" : "0c4756f9dd9cc5caf3acc856171694e2fa033bcc" }, { "alg" : "SHA-256", - "content" : "18c8e8b0507afe307be25c825e058fe91514cb3d8616a11b37225bbb760a143e" + "content" : "5fb75ed5d0f7767f3d5877e1fc44a2cb4498b83c482e1e4cefd5c878f118225e" }, { "alg" : "SHA-512", - "content" : "8d8a336b79c83b8c229aba7cc56738271f7ca0b5387b09c246a18992299d0061015cde1f07da07b0ca6da8ac66eca4846269c48fd090968cf9f4f398d923dcb2" + "content" : "d8aa8345c5a55aa6a9cbcb261277e0f36e4756ea4a4d9dc99410053781a6305f9c98e1d0c2f0253e9e6140c40f6f9f19da26e7e85913407b42b20808aebfe9f0" }, { "alg" : "SHA-384", - "content" : "6f61dce2306717d3ba910ef8657977cfcc83d5e6f87b4fca30c96bb52feb416f187227963a5007f73ea120a93f7b4684" + "content" : "ee39919d1c32d29c16e41ef2259b5b71f5670244c9c9b1224972eb4d38c90e963dedb6108ce8c0243e322086e585a3da" }, { "alg" : "SHA3-384", - "content" : "165746fc80503b39ff6c3ecf7bd9516a30bb961270bb3ed1b2d009654d2c8ae1986261adadf6e7426eb00b283d8580bb" + "content" : "ddc8bf3b9b5d30bb0916c90f676061729666587f674827a29dcb21a08fe4d59e42f5ce818c5730e2aa21f1befa74c130" }, { "alg" : "SHA3-256", - "content" : "dc24cc41221fbcb753a407f0713ca0648861c7935e4ba2cf7e95accfb72ef434" + "content" : "da0ff73c07625578b2d3d55fcc5cd16406762ad670a77c46e7128f6c4e90ec3b" }, { "alg" : "SHA3-512", - "content" : "bd029443e45d4a57e9d36587b0155cca05324282c48d259c1eae7e34a999dcff4ccd44590ca6fea208cce07d7034dac87d3155e46d2241c9f09b8de530d60a5b" + "content" : "624e8aaaee39fcad526d4e2699174f8aa9804fc1cb08418dd742374a91fdc3fd474173f59e64508a74029080e9e56d9c6c32e311b71533eba3eead882c4a736f" } ], "licenses" : [ { "license" : { - "id" : "BSD-4-Clause" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.codehaus.staxmate/staxmate@2.0.1?type=jar", + "purl" : "pkg:maven/org.sonarsource.python/python-commons@5.16.0.29940?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://staxmate.codehaus.org" + "url" : "https://docs.sonarsource.com/sonarqube-server/latest/extension-guide/developing-a-plugin/plugin-basics/python/python-commons/" }, { - "type" : "distribution-intake", - "url" : "dav:https://dav.codehaus.org/repository/staxmate" + "type" : "build-system", + "url" : "https://cirrus-ci.com/github/SonarSource/sonar-python" }, { "type" : "issue-tracker", - "url" : "http://jira.codehaus.org/browse/STAXMATE" + "url" : "https://jira.sonarsource.com/browse/SONARPY" + }, + { + "type" : "mailing-list", + "url" : "https://community.sonarsource.com" + }, + { + "type" : "vcs", + "url" : "https://github.com/SonarSource/sonar-python/python-commons" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.codehaus.staxmate/staxmate@2.0.1?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.python/python-commons@5.16.0.29940?type=jar" }, { - "group" : "stax", - "name" : "stax-api", - "version" : "1.0.1", - "description" : "StAX API is the standard java XML processing API defined by JSR-173", + "publisher" : "FasterXML", + "group" : "com.fasterxml.jackson.dataformat", + "name" : "jackson-dataformat-toml", + "version" : "2.20.1", + "description" : "Support for reading and writing TOML-encoded data via Jackson abstractions.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "7d436a53c64490bee564c576babb36b4" + "content" : "f3d12c27f5c0744054e8716f3ee4b3d2" }, { "alg" : "SHA-1", - "content" : "49c100caf72d658aca8e58bd74a4ba90fa2b0d70" + "content" : "1f4f7249289053551eac7bc8ac6e646576d03e1a" }, { "alg" : "SHA-256", - "content" : "d1968436fc216c901fb9b82c7e878b50fd1d30091676da95b2edd3a9c0ccf92e" + "content" : "3936e3fb83edd2754bb317d17a63cded43b5fac4fb82eabb4aaa502bb52f9835" }, { "alg" : "SHA-512", - "content" : "43c24e8dbffa9b932492c8ccf2b91926b2ba3d1d34b5a9671c689bd24d4c220b996708a9667521641d1abbf29404b653755b6f6f3dc0ad0671f5c09db332ea06" + "content" : "cd31529a28ff83585d8d5944943c528d4d26e0f547c5ed804c90a8c642b0cd34553d2f4b7878903312a06d4ad86351aa6591294dba4f61b0bb03da317aeef870" }, { "alg" : "SHA-384", - "content" : "2e6c232d3012064dc17e10c2e5b281728a6771eb0d74868e730caf60fe6f96fdd6145759fbbf9d1aa2e07eb1f49764d6" + "content" : "e2f0cbd883ee0745e6c27d0cf83c1e48869f89cb444c099e553f25105d7800949b1db37fc5db5055e321fdce8b13ebde" }, { "alg" : "SHA3-384", - "content" : "03ebb8db88d04b7308570c1058aadfb6a81d3d6725b1dd13a049ea984ed1df42d3e0f8163e1229752228cada978fb462" + "content" : "fd0c36a837dd0b756c3622606b1490218cba364f30d148bac78dfee7dbb1117a9f1504a2e0cac8d83cf6cdb17f0ecf7b" }, { "alg" : "SHA3-256", - "content" : "8173e3e3a0db17b3dbb80c017268858ecda57c819e5b58dbe202bd8087664bb1" + "content" : "58d572441da65e6c63de352d608a144b280bd3754a06128d1da840494c70ce6b" }, { "alg" : "SHA3-512", - "content" : "e9a7c234dfeff5d4cabd034a536f31ad5a141e30b0ad2438cf5856dd6c36eeb16c69b8bc1ba3ee6bba91f69cd3cbd450953249f2f0eee0a9a22d49637b575f4d" + "content" : "bdbc867b3d2a993b277d19c230f84dd52a8db5f6638f9a90f6d613b9eb7b2f49e3404dc78dba4877fdad3ed5bd255f27be808ec287898c833ee2347ee44a94f4" } ], "licenses" : [ @@ -4184,147 +4075,156 @@ } } ], - "purl" : "pkg:maven/stax/stax-api@1.0.1?type=jar", + "purl" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-toml@2.20.1?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://stax.codehaus.org/" + "url" : "https://github.com/FasterXML/jackson-dataformats-text" + }, + { + "type" : "distribution-intake", + "url" : "https://central.sonatype.com/api/v1/publisher" }, { "type" : "issue-tracker", - "url" : "http://jira.codehaus.org/browse/STAX" + "url" : "https://github.com/FasterXML/jackson-dataformats-text/issues" }, { - "type" : "mailing-list", - "url" : "http://groups.yahoo.com/group/stax_builders/" + "type" : "vcs", + "url" : "https://github.com/FasterXML/jackson-dataformats-text/jackson-dataformat-toml" } ], "type" : "library", - "bom-ref" : "pkg:maven/stax/stax-api@1.0.1?type=jar" + "bom-ref" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-toml@2.20.1?type=jar" }, { - "publisher" : "fasterxml.com", - "group" : "org.codehaus.woodstox", - "name" : "stax2-api", - "version" : "3.1.4", - "description" : "tax2 API is an extension to basic Stax 1.0 API that adds significant new functionality, such as full-featured bi-direction validation interface and high-performance Typed Access API.", + "publisher" : "FasterXML", + "group" : "com.fasterxml.jackson.datatype", + "name" : "jackson-datatype-jdk8", + "version" : "2.20.1", + "description" : "Add-on module for Jackson (https://github.com/FasterXML/jackson) to support JDK 8 data types.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "c08e89de601b0a78f941b2c29db565c3" + "content" : "9360afe5a78d29ce5510f670b3286e77" }, { "alg" : "SHA-1", - "content" : "ac19014b1e6a7c08aad07fe114af792676b685b7" + "content" : "6a8bbc260ba834f67220117d9f08510d69c4a3f0" }, { "alg" : "SHA-256", - "content" : "86d7c0b775a7c9b454cc6ba61d40a8eb3b99cc129f832eb9b977a3755b4b338e" + "content" : "6821cdd695e95c4e6853ec855a7432c71f2f4be318b3ca190fbbf8a2e5f981f2" }, { "alg" : "SHA-512", - "content" : "911e3e250c9ac9098899f12db584b83f36d91e8cca1afeef38c19952a168647dbbc88cb1cbdd5919769342ed09267263a142b12e71cab465b25daeedf2255cb7" + "content" : "9aceae6ea4ac56a038982fc45e91942cc15d68b7e07e044c1e75a71760b2eb02e23a344f36966093be670a2d1f656146492f11148da06a4044b4a5d78e523beb" }, { "alg" : "SHA-384", - "content" : "83c42936c43d6d6826edea636cf315924cdf52a7201bf07f1cf87a30d2b2855088306c94f39dea55529fed0360cf563f" + "content" : "c55990a25083046bd3881b656d5fa351e5d2115ce861427cc8bdc64acbf85f9a3ea739f3510eedfc0372f226ed7ebd2a" }, { "alg" : "SHA3-384", - "content" : "905976003ae70127f2c6142070da5736fc4a01b7a98008fefa1270fc9096691c1307e002f3b6381da462a92f2f31478e" + "content" : "9556b354a7fdf5324aa22d6a00b308508bfb55555c2a31ca159c2b9f35f8a3d4e904a7eb15388f6532bb464fcc642db5" }, { "alg" : "SHA3-256", - "content" : "308d5a1692fd0135e5af967b0b83803a2fd835429ac83401124a0357f99cbb84" + "content" : "b4018fdef370f16380205cf366a9b84f4721b5ff0a800e72e0a1a23f4a58848a" }, { "alg" : "SHA3-512", - "content" : "ac3d87dab7f1e89c83f039557557536433c52a0d3201a2f514b82bb8b4f454eb9fc28b02b46a45a9caf983239612cf270085270421e4fd79eccfce0fd01f99da" + "content" : "9f9db93cecb859df97455ddfa61136406700ae786715a3754e0ac9f9993deb9df62c44e08233dcf463e792fcbba9a25e7472e34dba5970d9df7eecf959c71875" } ], "licenses" : [ { "license" : { - "id" : "BSD-4-Clause" + "id" : "Apache-2.0" } } ], - "purl" : "pkg:maven/org.codehaus.woodstox/stax2-api@3.1.4?type=jar", + "purl" : "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.20.1?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://wiki.fasterxml.com/WoodstoxStax2" + "url" : "https://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jdk8" }, { "type" : "distribution-intake", - "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" + "url" : "https://central.sonatype.com/api/v1/publisher" + }, + { + "type" : "issue-tracker", + "url" : "https://github.com/FasterXML/jackson-modules-java8/issues" }, { "type" : "vcs", - "url" : "http://github.com/FasterXML/stax2-api" + "url" : "http://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jdk8" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.codehaus.woodstox/stax2-api@3.1.4?type=jar" + "bom-ref" : "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.20.1?type=jar" }, { "publisher" : "The Apache Software Foundation", - "group" : "commons-codec", - "name" : "commons-codec", - "version" : "1.15", - "description" : "The Apache Commons Codec package contains simple encoder and decoders for various formats such as Base64 and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.", + "group" : "org.apache.commons", + "name" : "commons-text", + "version" : "1.14.0", + "description" : "Apache Commons Text is a set of utility functions and reusable components for processing and manipulating text in a Java environment.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "303baf002ce6d382198090aedd9d79a2" + "content" : "54960a12a82d52df3d5548d6934d87b2" }, { "alg" : "SHA-1", - "content" : "49d94806b6e3dc933dacbd8acb0fdbab8ebd1e5d" + "content" : "adcb0d4c67eabc79682604b47eb852aaff21138a" }, { "alg" : "SHA-256", - "content" : "b3e9f6d63a790109bf0d056611fbed1cf69055826defeb9894a71369d246ed63" + "content" : "121fce2282910c8f0c3ba793a5436b31beb710423cbe2d574a3fb7a73c508e92" }, { "alg" : "SHA-512", - "content" : "da30a716770795fce390e4dd340a8b728f220c6572383ffef55bd5839655d5611fcc06128b2144f6cdcb36f53072a12ec80b04afee787665e7ad0b6e888a6787" + "content" : "4975879372241025bd0a47fe540ed7d0cd3e5eba474b12af67a8c6016be0fbb4f4a3a4a0064f4d2b6aebce67d88ee814da345a5ba3a6ee4f6293b3b4e7bbd065" }, { "alg" : "SHA-384", - "content" : "05d0506283716472175d44c2a4766523397bf8a007c18848f9c9a61718cc8aa437f9cb4b91771037ab29a960860b62a0" + "content" : "a038f1a8b58bb7ec17ba55238d3e40f5d9386dfb17870630a728b22741a9592819374e9abbbc6402a439eea4db5b739a" }, { "alg" : "SHA3-384", - "content" : "12fad4ef78274b06f97b1243cea6f970088abde082d2de9377d915a34b44f7d7d67807c03e59c849b69f1544e2a9a1be" + "content" : "5325922bb72aa73d2d51cb3fb5592fc77097614fd3ab3ac77e3acdc0fe1dc8c18893cdd9a05768bb725fa40dd8c14527" }, { "alg" : "SHA3-256", - "content" : "87be248f33f241121f54aad61a9a460a79eabefbf1b5b0dd22aeb95b581f727e" + "content" : "31008266592ec8503bcc7f6b4e7125b0e377f57f3a697cdcb02ee7f20f84ddf1" }, { "alg" : "SHA3-512", - "content" : "8c992c9c569ebaa0bf956a4c5b34fbf5e1ed1c212c2dd896fa216183ee0bcd341e96698af4b9cec7e8880762faa081a3d3a27f51349aa457cb8e373e4f57c788" + "content" : "385249425d8c6ab181039195a03c6337f393a1e1419527e9f072d695367bc0bd6546e752d1912df557bd8788329f7609aa1c63ce42eb135e2d27b6141ce9280f" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0" + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], - "purl" : "pkg:maven/commons-codec/commons-codec@1.15?type=jar", + "purl" : "pkg:maven/org.apache.commons/commons-text@1.14.0?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://commons.apache.org/proper/commons-codec/" + "url" : "https://commons.apache.org/proper/commons-text" }, { "type" : "build-system", - "url" : "https://builds.apache.org/" + "url" : "https://github.com/apache/commons-text/actions" }, { "type" : "distribution-intake", @@ -4332,7 +4232,7 @@ }, { "type" : "issue-tracker", - "url" : "https://issues.apache.org/jira/browse/CODEC" + "url" : "https://issues.apache.org/jira/browse/TEXT" }, { "type" : "mailing-list", @@ -4340,129 +4240,116 @@ }, { "type" : "vcs", - "url" : "https://github.com/apache/commons-codec" + "url" : "https://gitbox.apache.org/repos/asf?p=commons-text.git" } ], "type" : "library", - "bom-ref" : "pkg:maven/commons-codec/commons-codec@1.15?type=jar" + "bom-ref" : "pkg:maven/org.apache.commons/commons-text@1.14.0?type=jar" }, { - "publisher" : "The Apache Software Foundation", - "group" : "commons-io", - "name" : "commons-io", - "version" : "2.11.0", - "description" : "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.", + "publisher" : "Codehaus", + "group" : "org.codehaus.staxmate", + "name" : "staxmate", + "version" : "2.0.1", + "description" : "StaxMate is a light-weight framework that adds convenience to streaming XML-processing without significant additional overhead. It builds on top of a Stax (JSR-173) compliant XML processors such as Woodstox or Sjsxp (default Stax implementation of JDK 1.6) and offers two basic abstractions: Cursors, which build on XMLStreamReaders and Output objects, which build on XMLStreamWriters.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "3b4b7ccfaeceeac240b804839ee1a1ca" + "content" : "cbc599b621abdb9fd93d0c0527b6e273" }, { "alg" : "SHA-1", - "content" : "a2503f302b11ebde7ebc3df41daebe0e4eea3689" + "content" : "b0b767fbc22683d7bf26a14ae1c5817561e21d00" }, { "alg" : "SHA-256", - "content" : "961b2f6d87dbacc5d54abf45ab7a6e2495f89b75598962d8c723cea9bc210908" + "content" : "18c8e8b0507afe307be25c825e058fe91514cb3d8616a11b37225bbb760a143e" }, { "alg" : "SHA-512", - "content" : "5bd78eed456ede30119319c5bed8e3e4c443b6fd7bdb3a7a5686647bd83094d0c3e2832a7575cfb60e4ef25f08106b93476939d3adcfecf5533cc030b3039e10" + "content" : "8d8a336b79c83b8c229aba7cc56738271f7ca0b5387b09c246a18992299d0061015cde1f07da07b0ca6da8ac66eca4846269c48fd090968cf9f4f398d923dcb2" }, { "alg" : "SHA-384", - "content" : "114f1e324d90ad887c177876d410f5787a8e8da6c48d4b2862d365802c0efded3a88cb24046976bf6276cadad3712f0f" + "content" : "6f61dce2306717d3ba910ef8657977cfcc83d5e6f87b4fca30c96bb52feb416f187227963a5007f73ea120a93f7b4684" }, { "alg" : "SHA3-384", - "content" : "80288c03ad4d80d69f91d056ffc5570d49a9c76bf54ad2dff0121ecde26a560df76d05156f281f5c6db2a38ff07a873d" + "content" : "165746fc80503b39ff6c3ecf7bd9516a30bb961270bb3ed1b2d009654d2c8ae1986261adadf6e7426eb00b283d8580bb" }, { "alg" : "SHA3-256", - "content" : "5adfb5ccaf5f21a549422f426118a9542673926fcd18c68390cf813e791dcf6c" + "content" : "dc24cc41221fbcb753a407f0713ca0648861c7935e4ba2cf7e95accfb72ef434" }, { "alg" : "SHA3-512", - "content" : "7573f47f0babb53cefdc7c2309a0b982d800139064537b0797da442853d081010ad7c3c74a500598a0f800639a5d540eca21963ea652c68613907059bd4278c2" + "content" : "bd029443e45d4a57e9d36587b0155cca05324282c48d259c1eae7e34a999dcff4ccd44590ca6fea208cce07d7034dac87d3155e46d2241c9f09b8de530d60a5b" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0" + "id" : "BSD-4-Clause" } } ], - "purl" : "pkg:maven/commons-io/commons-io@2.11.0?type=jar", + "purl" : "pkg:maven/org.codehaus.staxmate/staxmate@2.0.1?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://commons.apache.org/proper/commons-io/" - }, - { - "type" : "build-system", - "url" : "https://builds.apache.org/" + "url" : "http://staxmate.codehaus.org" }, { "type" : "distribution-intake", - "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" + "url" : "dav:https://dav.codehaus.org/repository/staxmate" }, { "type" : "issue-tracker", - "url" : "https://issues.apache.org/jira/browse/IO" - }, - { - "type" : "mailing-list", - "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/" - }, - { - "type" : "vcs", - "url" : "https://gitbox.apache.org/repos/asf?p=commons-io.git" + "url" : "http://jira.codehaus.org/browse/STAXMATE" } ], "type" : "library", - "bom-ref" : "pkg:maven/commons-io/commons-io@2.11.0?type=jar" + "bom-ref" : "pkg:maven/org.codehaus.staxmate/staxmate@2.0.1?type=jar" }, { - "publisher" : "Google Inc.", - "group" : "com.google.googlejavaformat", - "name" : "google-java-format", - "version" : "1.22.0", - "description" : "A Java source code formatter that follows Google Java Style.", + "group" : "stax", + "name" : "stax-api", + "version" : "1.0.1", + "description" : "StAX API is the standard java XML processing API defined by JSR-173", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "fd1fbd4edf5d8eaca565217ff981b94b" + "content" : "7d436a53c64490bee564c576babb36b4" }, { "alg" : "SHA-1", - "content" : "6e31a0877a51e91076c857794a0b1df7af876b2d" + "content" : "49c100caf72d658aca8e58bd74a4ba90fa2b0d70" }, { "alg" : "SHA-256", - "content" : "4f4bdba0f2a3d7e84be47683a0c2a4ba69024d29d906d09784181f68f04af792" + "content" : "d1968436fc216c901fb9b82c7e878b50fd1d30091676da95b2edd3a9c0ccf92e" }, { "alg" : "SHA-512", - "content" : "d2006def13e5144e12568298014a23c86299a62e2bb7757c63f5f25405b1adb6f60b3f2f54bed9583cdd24cae71088e9f7aa846a10a089cce2a25972e48c7649" + "content" : "43c24e8dbffa9b932492c8ccf2b91926b2ba3d1d34b5a9671c689bd24d4c220b996708a9667521641d1abbf29404b653755b6f6f3dc0ad0671f5c09db332ea06" }, { "alg" : "SHA-384", - "content" : "4aed1de35a09b196347064d45a5996fd7467c9b5cca0faf4655cbeb756053810cd3af2e45d74401aee626e30b1693ca7" + "content" : "2e6c232d3012064dc17e10c2e5b281728a6771eb0d74868e730caf60fe6f96fdd6145759fbbf9d1aa2e07eb1f49764d6" }, { "alg" : "SHA3-384", - "content" : "28fc6265d1886418ca44d1c7eea8709a2f38ba5b3f8cedb6a44d1a36f676e533662b61105db8b8d1f69fc4796fbcc8bd" + "content" : "03ebb8db88d04b7308570c1058aadfb6a81d3d6725b1dd13a049ea984ed1df42d3e0f8163e1229752228cada978fb462" }, { "alg" : "SHA3-256", - "content" : "08098285fccec01b2f3fce2e46ac210deb79862f21cb4ae96ff3a1a040df0809" + "content" : "8173e3e3a0db17b3dbb80c017268858ecda57c819e5b58dbe202bd8087664bb1" }, { "alg" : "SHA3-512", - "content" : "122e32ab36408a79ed1153660ab1ba7639212d30921ea022da9affc19f76c5d874241a8584fc5c992ce74d2f01c2e06fddc784aee11c6d4238fc645ade3a1880" + "content" : "e9a7c234dfeff5d4cabd034a536f31ad5a141e30b0ad2438cf5856dd6c36eeb16c69b8bc1ba3ee6bba91f69cd3cbd450953249f2f0eee0a9a22d49637b575f4d" } ], "licenses" : [ @@ -4472,408 +4359,350 @@ } } ], - "purl" : "pkg:maven/com.google.googlejavaformat/google-java-format@1.22.0?type=jar", + "purl" : "pkg:maven/stax/stax-api@1.0.1?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://github.com/google/google-java-format/google-java-format" - }, - { - "type" : "distribution-intake", - "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" + "url" : "http://stax.codehaus.org/" }, { "type" : "issue-tracker", - "url" : "http://github.com/google/google-java-format/issues" + "url" : "http://jira.codehaus.org/browse/STAX" }, { - "type" : "vcs", - "url" : "http://github.com/google/google-java-format/google-java-format/" + "type" : "mailing-list", + "url" : "http://groups.yahoo.com/group/stax_builders/" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.google.googlejavaformat/google-java-format@1.22.0?type=jar" + "bom-ref" : "pkg:maven/stax/stax-api@1.0.1?type=jar" }, { - "group" : "com.google.guava", - "name" : "guava", - "version" : "32.1.3-jre", - "description" : "Guava is a suite of core and expanded libraries that include utility classes, Google's collections, I/O classes, and much more.", + "publisher" : "fasterxml.com", + "group" : "org.codehaus.woodstox", + "name" : "stax2-api", + "version" : "3.1.4", + "description" : "tax2 API is an extension to basic Stax 1.0 API that adds significant new functionality, such as full-featured bi-direction validation interface and high-performance Typed Access API.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "adc3cf557a48d15cb71be90948558923" + "content" : "c08e89de601b0a78f941b2c29db565c3" }, { "alg" : "SHA-1", - "content" : "0f306708742ce2bf0fb0901216183bc14073feae" + "content" : "ac19014b1e6a7c08aad07fe114af792676b685b7" }, { "alg" : "SHA-256", - "content" : "6d4e2b5a118aab62e6e5e29d185a0224eed82c85c40ac3d33cf04a270c3b3744" + "content" : "86d7c0b775a7c9b454cc6ba61d40a8eb3b99cc129f832eb9b977a3755b4b338e" }, { "alg" : "SHA-512", - "content" : "f575321aa79046f2c12bdf9895db7e235cbaaa8e913389ae48ec4bb5f387d6bf066ed98c5f2c7854bf0c56bb38b59b005ca3c16d68e314743491a223a18cee47" + "content" : "911e3e250c9ac9098899f12db584b83f36d91e8cca1afeef38c19952a168647dbbc88cb1cbdd5919769342ed09267263a142b12e71cab465b25daeedf2255cb7" }, { "alg" : "SHA-384", - "content" : "efd979f8c807eb973c7bb2edcede11c2881db4232147bb94069701fc002b1c336651aa3347858e3ba25cb89f3df69428" + "content" : "83c42936c43d6d6826edea636cf315924cdf52a7201bf07f1cf87a30d2b2855088306c94f39dea55529fed0360cf563f" }, { "alg" : "SHA3-384", - "content" : "83429ce32c8a20a7314175c053ba0a0e57c20486e6f8abcf7bf1e19c64148db70ae8e6b4437ec168f53b37a653e8bb24" + "content" : "905976003ae70127f2c6142070da5736fc4a01b7a98008fefa1270fc9096691c1307e002f3b6381da462a92f2f31478e" }, { "alg" : "SHA3-256", - "content" : "52974020b1d930e646d2fe26b13841275fb9c51e81c28140993c228adda71e78" + "content" : "308d5a1692fd0135e5af967b0b83803a2fd835429ac83401124a0357f99cbb84" }, { "alg" : "SHA3-512", - "content" : "b9bd05ca990c5b76c43248493bb29cbbaad5aa667f394714f35765a8ec04c302a19c4f53f610485c933281211cd6bf4a11a14aaf754ffaed33e02c8b1b78289e" + "content" : "ac3d87dab7f1e89c83f039557557536433c52a0d3201a2f514b82bb8b4f454eb9fc28b02b46a45a9caf983239612cf270085270421e4fd79eccfce0fd01f99da" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0" + "id" : "BSD-4-Clause" } } ], - "purl" : "pkg:maven/com.google.guava/guava@32.1.3-jre?type=jar", + "purl" : "pkg:maven/org.codehaus.woodstox/stax2-api@3.1.4?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://github.com/google/guava" - }, - { - "type" : "build-system", - "url" : "https://github.com/google/guava/actions" + "url" : "http://wiki.fasterxml.com/WoodstoxStax2" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, - { - "type" : "issue-tracker", - "url" : "https://github.com/google/guava/issues" - }, { "type" : "vcs", - "url" : "https://github.com/google/guava/guava" + "url" : "http://github.com/FasterXML/stax2-api" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.google.guava/guava@32.1.3-jre?type=jar" + "bom-ref" : "pkg:maven/org.codehaus.woodstox/stax2-api@3.1.4?type=jar" }, { - "group" : "com.google.guava", - "name" : "failureaccess", - "version" : "1.0.1", - "description" : "Contains com.google.common.util.concurrent.internal.InternalFutureFailureAccess and InternalFutures. Most users will never need to use this artifact. Its classes is conceptually a part of Guava, but they're in this separate artifact so that Android libraries can use them without pulling in all of Guava (just as they can use ListenableFuture by depending on the listenablefuture artifact).", + "publisher" : "SonarSource", + "group" : "org.sonarsource.go", + "name" : "sonar-go-plugin", + "version" : "1.32.0.5128", + "description" : "Code Analyzer for Go", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "091883993ef5bfa91da01dcc8fc52236" + "content" : "ea2de97a8b1020865b993afe78aff72f" }, { "alg" : "SHA-1", - "content" : "1dcf1de382a0bf95a3d8b0849546c88bac1292c9" + "content" : "daa3ce9acfba33b2dba823c64d72bf3a0fa2b25d" }, { "alg" : "SHA-256", - "content" : "a171ee4c734dd2da837e4b16be9df4661afab72a41adaf31eb84dfdaf936ca26" + "content" : "7ad9dd5e478be53d58ad12d060f0e4aaa5e5eb9f5fcb28411c8083da2d5e0b19" }, { "alg" : "SHA-512", - "content" : "f8d59b808d6ba617252305b66d5590937da9b2b843d492d06b8d0b1b1f397e39f360d5817707797b979a5bf20bf21987b35333e7a15c44ed7401fea2d2119cae" + "content" : "3176550be29c19e7fb8b90b6993b29f3b8b4b51ddfa4509bab6de91edc4d7b40e3384dc48df7731262cb671379d2c4163eef78565389a391a43d450dcba56996" }, { "alg" : "SHA-384", - "content" : "67659dbd9647ec303d7f15128dc9dba19b98fd8d74758ee3b602451e32c855e236ccaafe08edf4bbfa245f981268440f" + "content" : "b1e7333047001ad10c6058a5ede6bc27651bae3335c0faadc1a6bda3ba1b66b90f45aec62389eaa9ec41eba836dc0d52" }, { "alg" : "SHA3-384", - "content" : "1460875f0331c5fa3791772a6a322a7db180261bc2adacf7271df1fbf3b088a587a755a604c039982cb593c5cfc1f101" + "content" : "18184263d523ab59b12019479a129e608f201e2c096745e869d72e029c78d41409d64934307b1f1a343ab0e1475978f3" }, { "alg" : "SHA3-256", - "content" : "ea86406e75fcd93eafe3cde1b3135ba485f1bb9b75fed98894a0bf1f0aee04f0" + "content" : "3fddc018fee60147c78382440a963bf6812bf496bb1d25090b50475e185a0844" }, { "alg" : "SHA3-512", - "content" : "52ac0f487ab5dd27c9f2e54fd1d84c7a620cae9d49be4072aa2b11501787bf4391ddaa13d02eccdf19e8eea46aecbea5f6064b26777c1b836108a280652e04ac" + "content" : "c1fc155244473f90fcc327f33055b06cb2fb35a203421b832f627d12150d851640a407a84dd47498b372ad0337bb1881ffa8aeab9fec85cb5e04b924989c5db5" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar", + "purl" : "pkg:maven/org.sonarsource.go/sonar-go-plugin@1.32.0.5128?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://github.com/google/guava/failureaccess" - }, - { - "type" : "build-system", - "url" : "https://travis-ci.org/google/guava" - }, - { - "type" : "distribution-intake", - "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" - }, - { - "type" : "issue-tracker", - "url" : "https://github.com/google/guava/issues" + "url" : "http://www.sonarqube.org/" }, { "type" : "vcs", - "url" : "https://github.com/google/guava/failureaccess" + "url" : "https://github.com/SonarSource/sonar-go" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.go/sonar-go-plugin@1.32.0.5128?type=jar" }, { - "group" : "com.google.guava", - "name" : "listenablefuture", - "version" : "9999.0-empty-to-avoid-conflict-with-guava", - "description" : "An empty artifact that Guava depends on to signal that it is providing ListenableFuture -- but is also available in a second \"version\" that contains com.google.common.util.concurrent.ListenableFuture class, without any other Guava classes. The idea is: - If users want only ListenableFuture, they depend on listenablefuture-1.0. - If users want all of Guava, they depend on guava, which, as of Guava 27.0, depends on listenablefuture-9999.0-empty-to-avoid-conflict-with-guava. The 9999.0-... version number is enough for some build systems (notably, Gradle) to select that empty artifact over the \"real\" listenablefuture-1.0 -- avoiding a conflict with the copy of ListenableFuture in guava itself. If users are using an older version of Guava or a build system other than Gradle, they may see class conflicts. If so, they can solve them by manually excluding the listenablefuture artifact or manually forcing their build systems to use 9999.0-....", + "publisher" : "The Apache Software Foundation", + "group" : "commons-codec", + "name" : "commons-codec", + "version" : "1.19.0", + "description" : "The Apache Commons Codec component contains encoders and decoders for formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "d094c22570d65e132c19cea5d352e381" + "content" : "e46fa78c69544eb6239c4e8447e72544" }, { "alg" : "SHA-1", - "content" : "b421526c5f297295adef1c886e5246c39d4ac629" + "content" : "8c0dbe3ae883fceda9b50a6c76e745e548073388" }, { "alg" : "SHA-256", - "content" : "b372a037d4230aa57fbeffdef30fd6123f9c0c2db85d0aced00c91b974f33f99" + "content" : "5c3881e4f556855e9c532927ee0c9dfde94cc66760d5805c031a59887070af5f" }, { "alg" : "SHA-512", - "content" : "c5987a979174cbacae2e78b319f080420cc71bcdbcf7893745731eeb93c23ed13bff8d4599441f373f3a246023d33df03e882de3015ee932a74a774afdd0782f" + "content" : "d98a7a1cfcc08aa9cce4f7778e3f37ecb99da7b1da01944e5fa8faf06fbf9f969f2efb0b416832f419d53085250f711c071f1dac9fa0968483c37034198367fb" }, { "alg" : "SHA-384", - "content" : "caff9b74079f95832ca7f6029346b34b606051cc8c5a4389fac263511d277ada0c55f28b0d43011055b268c6eb7184d5" + "content" : "f0edec3cd84b2320e6930380d3fe13335d33f041470d27fb93789db0c696ec01dda21b471f0015bf70bffffcbfdb67c0" }, { "alg" : "SHA3-384", - "content" : "e939f08df0545847ea0d3e4b04a114b08499ad069ba8ec9461d1779f87a56e0c37273630a0f4c14e78c348d3ac7eb97f" + "content" : "ce771ef9f0df326a34ab37e70f710801bb18d545aca0ee492db62770db323ab8a0b5082123ca4826f3d3182748537cfc" }, { "alg" : "SHA3-256", - "content" : "1f0a8b1177773b3a8ace839df5eed63cbf56b24a38714898a6e4ed065c42559f" + "content" : "8296db95bb2fac86a0eb68e61e9730084f4272ad6a4a4327a5259c631840e98e" }, { "alg" : "SHA3-512", - "content" : "6b495ecc2a18b17365cb08d124a0da47f04bcdde81927b5245edf3edd8e498c3c3fb92ce6a4127f660bac851bb1d3e4510e5c20d03be47ce99dc296d360db285" + "content" : "05da2f8674a257c5d8a1137cadbda71d2635f22237450bf2cbc980380a56905247bea38049c8cd80e60077be2be73b1eae6b466c228e4277763a54979cf856fb" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0" + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], - "purl" : "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar", + "purl" : "pkg:maven/commons-codec/commons-codec@1.19.0?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://github.com/google/guava/listenablefuture" + "url" : "https://commons.apache.org/proper/commons-codec/" }, { "type" : "build-system", - "url" : "https://travis-ci.org/google/guava" + "url" : "https://github.com/apache/commons-cli/actions" }, { "type" : "distribution-intake", - "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" + "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", - "url" : "https://github.com/google/guava/issues" + "url" : "https://issues.apache.org/jira/browse/CODEC" + }, + { + "type" : "mailing-list", + "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/" }, { "type" : "vcs", - "url" : "https://github.com/google/guava/listenablefuture" + "url" : "https://github.com/apache/commons-codec" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar" + "bom-ref" : "pkg:maven/commons-codec/commons-codec@1.19.0?type=jar" }, { - "group" : "org.checkerframework", - "name" : "checker-qual", - "version" : "3.37.0", - "description" : "checker-qual contains annotations (type qualifiers) that a programmer writes to specify Java code for type-checking by the Checker Framework.", + "publisher" : "The Apache Software Foundation", + "group" : "commons-io", + "name" : "commons-io", + "version" : "2.20.0", + "description" : "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "1ff1eed173ff9d6f208d0a5be8f5623d" + "content" : "94e7e6b9b5fe82388687b584d3571081" }, { "alg" : "SHA-1", - "content" : "ba74746d38026581c12166e164bb3c15e90cc4ea" + "content" : "36f3474daec2849c149e877614e7f979b2082cd2" }, { "alg" : "SHA-256", - "content" : "e4ce1376cc2735e1dde220b62ad0913f51297704daad155a33f386bc5db0d9f7" + "content" : "df90bba0fe3cb586b7f164e78fe8f8f4da3f2dd5c27fa645f888100ccc25dd72" }, { "alg" : "SHA-512", - "content" : "98f92a4d14b77f2946de34bc64bc0068505ba8893a734e52f6458e3061fc7471bd5a60c073c938302b7b78d51205929134207abc24f0edadd3db1e1f57755de5" + "content" : "fea08e150473673b0608eaee3ae1cb4e73834039db80d3b758710d6baf3a5840a0878a4eb64739ae9bb21ccc7148c8520fe873616a3f6d5cdb4305deabdd015c" }, { "alg" : "SHA-384", - "content" : "6a586fa9ead4d6edeb5e73a98af109dca2bf95e950c3c4862773f40e2eed5ea80208021f187fe717963027f7ea2bb489" + "content" : "22db5e18e3512ed44474e75a124a052d5a1a6f35ce458f6a201a5ccc9510c57c10c117dba80ac6ce91745cf2b51e63f2" }, { "alg" : "SHA3-384", - "content" : "0baafa897a7a5b9095680b5534841c537518c67a5ae9bf5923aceeb5aa3283551159c614b7fcfc205f2b5f77c144934c" + "content" : "a70700d24df3c276ff387c359e0e940b834e413b72a49917de9a82615836eca8cca1bee1ed71790606c795da795e9151" }, { "alg" : "SHA3-256", - "content" : "68056437b32f1a878d9b38ca2d4c6d88e9ca76b6eb705e7a946bc044010b722d" + "content" : "a8d044d3a4a069d0f20d24112b6427a3a6f02a925b31b932721d1f545ff32cec" }, { "alg" : "SHA3-512", - "content" : "66ec2f2416d564035e78295e7094ec1c23b76870d0095adbb9ec7e2d00b94684dc3c4ac08640b7ba14465ddc305382e5b20240d5eff31875d2ffe4682088a2f7" + "content" : "3417bf811d7e5fc1e71b8540f3379751434ea8540c421ff2c8bb5f5ce34401cd0ad8a829b65aa55e055c57141181762c4827099352c2bba453e48ad2df67526a" } ], "licenses" : [ { "license" : { - "id" : "MIT" + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], - "purl" : "pkg:maven/org.checkerframework/checker-qual@3.37.0?type=jar", + "purl" : "pkg:maven/commons-io/commons-io@2.20.0?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://checkerframework.org/" - }, - { - "type" : "vcs", - "url" : "https://github.com/typetools/checker-framework.git" - } - ], - "type" : "library", - "bom-ref" : "pkg:maven/org.checkerframework/checker-qual@3.37.0?type=jar" - }, - { - "publisher" : "Google LLC", - "group" : "com.google.errorprone", - "name" : "error_prone_annotations", - "version" : "2.21.1", - "description" : "Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.", - "scope" : "required", - "hashes" : [ - { - "alg" : "MD5", - "content" : "75fe4fe33d308dd6cee3b601de902d27" - }, - { - "alg" : "SHA-1", - "content" : "6d9b10773b5237df178a7b3c1b4208df7d0e7f94" - }, - { - "alg" : "SHA-256", - "content" : "d1f3c66aa91ac52549e00ae3b208ba4b9af7d72d68f230643553beb38e6118ac" - }, - { - "alg" : "SHA-512", - "content" : "530318bcdf1ed8eeee408fc5a0775f1792cbf012b4ec55217a4498c8d2983b230a4d071b9e115565b0411faa51dd938823d9b619beb6786212c375ad3d1ebd8a" + "url" : "https://commons.apache.org/proper/commons-io/" }, { - "alg" : "SHA-384", - "content" : "88e628431966a9b5cc19f96159874cefde1558e51d2ce233a0c2d47914eb9c6256f95882605a87cc6629a21ff70b72b4" + "type" : "build-system", + "url" : "https://github.com/apache/commons-io/actions" }, { - "alg" : "SHA3-384", - "content" : "ebc750b211532fef9a84c3682d47f00b877e4082716ead1f4f883f02ab35bda8d5acfc475722215c4fe6ed9cfd54f43a" + "type" : "distribution-intake", + "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { - "alg" : "SHA3-256", - "content" : "9b4f193bf2f541844c6b1b5cf2d1c7f6e9465b97804d155f34530b203184e1ae" + "type" : "issue-tracker", + "url" : "https://issues.apache.org/jira/browse/IO" }, { - "alg" : "SHA3-512", - "content" : "1d76781cef387a185fd4fb69960394556062969bbbe0be74d0fb11f7c73758e5d35ff546ab04f6382c21c63705a1ffb975a549bf4d846fde54e412ecd4641485" - } - ], - "licenses" : [ - { - "license" : { - "id" : "Apache-2.0" - } - } - ], - "purl" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.21.1?type=jar", - "externalReferences" : [ - { - "type" : "website", - "url" : "https://errorprone.info/error_prone_annotations" + "type" : "mailing-list", + "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/" }, { "type" : "vcs", - "url" : "https://github.com/google/error-prone/error_prone_annotations" + "url" : "https://gitbox.apache.org/repos/asf?p=commons-io.git" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.21.1?type=jar" + "bom-ref" : "pkg:maven/commons-io/commons-io@2.20.0?type=jar" }, { - "group" : "com.google.j2objc", - "name" : "j2objc-annotations", - "version" : "2.8", - "description" : "A set of annotations that provide additional information to the J2ObjC translator to modify the result of translation.", + "publisher" : "Google Inc.", + "group" : "com.google.googlejavaformat", + "name" : "google-java-format", + "version" : "1.28.0", + "description" : "A Java source code formatter that follows Google Java Style.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "c50af69b704dc91050efb98e0dff66d1" + "content" : "8e2d4037e876b608ab0356477b5ead98" }, { "alg" : "SHA-1", - "content" : "c85270e307e7b822f1086b93689124b89768e273" + "content" : "f57d0ad670cc32c4d4a4ffb2cbef44a3dfddeecd" }, { "alg" : "SHA-256", - "content" : "f02a95fa1a5e95edb3ed859fd0fb7df709d121a35290eff8b74dce2ab7f4d6ed" + "content" : "41dfe4d1012794ed15e0ffd70f89fd4fa65d5f15ce0bc0c70f8c2c127d6d010d" }, { "alg" : "SHA-512", - "content" : "f8263868a792b41707c9e7fe6fa5650a14cd93fbeafad20efe3772a3058fc933eb59782ec59e6eb9b9c569aa96da80134ae9fdf7547b69c44a97087efddceeff" + "content" : "87bf18026e543bc9135d58153f05b8bf58b48bd59cec96e774e3f68bc8d601b9789924a9917b9a4f57b8a69bbe24dd20aef0a65543a63e7101b39317469346d2" }, { "alg" : "SHA-384", - "content" : "e6087ec31fec8289158496ad2ed6ce8472d5d513808a312e0782cedac3b86c37a62a63c0b5ea3839491d109fe9e148a1" + "content" : "bfd9e42e51d696fa079aa12d3541645873724ce48989615723533aba58fc3e4f77a37e9102bad2b391dc0252b449bad9" }, { "alg" : "SHA3-384", - "content" : "10add34bfeb8612283eef89ac96747a3c9b755acd80ad526e1addaeb7efd6323c52b9bfa1a3d34adb40e1ccb963ee65d" + "content" : "b48a456db7981843ffc51f60511d4a5d52072bbe89da4dda6560cee4414493236e94ad1af4c5564449fb000501ca6ef4" }, { "alg" : "SHA3-256", - "content" : "b3336f8abd6b1f73b9f06d306974557000a000073bfbae6b54fda26d17dbb072" + "content" : "ae18cf36a9212cdb243e3900cca7f9059273dfdf227fb97a189b5ae84cc989e4" }, { "alg" : "SHA3-512", - "content" : "d376c184a6df071c4e93b913d175b5c2e63deac37105dc20342c19bdda62e4e9598ca1e8bfb4f4fd5cdee6dd5ac3b8af49e2c5193e324d59a59ce1f7adeab627" + "content" : "ac1207d9b7d8be02a222d1f11b44a5bcf1d95924404926698c8f23ba3688cfc49fc81e594e4f48d03ebbbf0ccc638706433ed462499b5b4d083538eb7e37541e" } ], "licenses" : [ @@ -4883,120 +4712,115 @@ } } ], - "purl" : "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar", + "purl" : "pkg:maven/com.google.googlejavaformat/google-java-format@1.28.0?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://github.com/google/j2objc/" + "url" : "https://github.com/google/google-java-format/google-java-format" }, { - "type" : "distribution-intake", - "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" + "type" : "issue-tracker", + "url" : "http://github.com/google/google-java-format/issues" }, { "type" : "vcs", - "url" : "http://svn.sonatype.org/spice/trunk/oss/oss-parent-9/j2objc-annotations" + "url" : "http://github.com/google/google-java-format/google-java-format/" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar" + "bom-ref" : "pkg:maven/com.google.googlejavaformat/google-java-format@1.28.0?type=jar" } ], "dependencies" : [ { - "ref" : "pkg:maven/com.ibm/java@1.0.3-SNAPSHOT?type=jar", + "ref" : "pkg:maven/com.ibm/java@2.0.0-SNAPSHOT?type=jar", "dependsOn" : [ - "pkg:maven/com.ibm/engine@1.0.3-SNAPSHOT?type=jar", - "pkg:maven/com.ibm/output@1.0.3-SNAPSHOT?type=jar", - "pkg:maven/com.ibm/enricher@1.0.3-SNAPSHOT?type=jar", - "pkg:maven/org.bouncycastle/bcpkix-jdk18on@1.78?type=jar", - "pkg:maven/org.jetbrains/annotations@24.1.0?type=jar", - "pkg:maven/org.sonarsource.api.plugin/sonar-plugin-api@9.13.0.360?type=jar", - "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", - "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar", - "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar", - "pkg:maven/org.sonarsource.java/sonar-java-plugin@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.python/sonar-python-plugin@4.17.0.14845?type=jar", - "pkg:maven/com.google.googlejavaformat/google-java-format@1.22.0?type=jar" + "pkg:maven/com.ibm/engine@2.0.0-SNAPSHOT?type=jar", + "pkg:maven/com.ibm/output@2.0.0-SNAPSHOT?type=jar", + "pkg:maven/com.ibm/enricher@2.0.0-SNAPSHOT?type=jar", + "pkg:maven/com.ibm/rules@2.0.0-SNAPSHOT?type=jar", + "pkg:maven/org.sonarsource.api.plugin/sonar-plugin-api@13.4.3.4290?type=jar", + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", + "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar", + "pkg:maven/org.sonarsource.java/sonar-java-plugin@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.python/sonar-python-plugin@5.16.0.29940?type=jar", + "pkg:maven/org.sonarsource.go/sonar-go-plugin@1.32.0.5128?type=jar", + "pkg:maven/com.google.googlejavaformat/google-java-format@1.28.0?type=jar" ] }, { - "ref" : "pkg:maven/com.ibm/engine@1.0.3-SNAPSHOT?type=jar", + "ref" : "pkg:maven/com.ibm/engine@2.0.0-SNAPSHOT?type=jar", "dependsOn" : [ - "pkg:maven/com.ibm/common@1.0.3-SNAPSHOT?type=jar", - "pkg:maven/org.jetbrains/annotations@24.1.0?type=jar", - "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", - "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar", - "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar", - "pkg:maven/org.sonarsource.java/sonar-java-plugin@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.python/sonar-python-plugin@4.17.0.14845?type=jar", - "pkg:maven/com.google.googlejavaformat/google-java-format@1.22.0?type=jar" + "pkg:maven/com.ibm/common@2.0.0-SNAPSHOT?type=jar", + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", + "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar", + "pkg:maven/org.sonarsource.java/sonar-java-plugin@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.python/sonar-python-plugin@5.16.0.29940?type=jar", + "pkg:maven/org.sonarsource.go/sonar-go-plugin@1.32.0.5128?type=jar", + "pkg:maven/com.google.googlejavaformat/google-java-format@1.28.0?type=jar" ] }, { - "ref" : "pkg:maven/com.ibm/common@1.0.3-SNAPSHOT?type=jar", + "ref" : "pkg:maven/com.ibm/common@2.0.0-SNAPSHOT?type=jar", "dependsOn" : [ - "pkg:maven/org.jetbrains/annotations@24.1.0?type=jar", - "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", - "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar", - "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar", - "pkg:maven/org.sonarsource.java/sonar-java-plugin@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.python/sonar-python-plugin@4.17.0.14845?type=jar", - "pkg:maven/com.google.googlejavaformat/google-java-format@1.22.0?type=jar" + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", + "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar", + "pkg:maven/org.sonarsource.java/sonar-java-plugin@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.python/sonar-python-plugin@5.16.0.29940?type=jar", + "pkg:maven/org.sonarsource.go/sonar-go-plugin@1.32.0.5128?type=jar", + "pkg:maven/com.google.googlejavaformat/google-java-format@1.28.0?type=jar" ] }, { - "ref" : "pkg:maven/org.jetbrains/annotations@24.1.0?type=jar", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", + "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar", - "dependsOn" : [ ] + "ref" : "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar", + "dependsOn" : [ + "pkg:maven/com.google.errorprone/error_prone_annotations@2.41.0?type=jar" + ] }, { - "ref" : "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar", + "ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.41.0?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/org.sonarsource.java/sonar-java-plugin@7.33.0.35775?type=jar", + "ref" : "pkg:maven/org.sonarsource.java/sonar-java-plugin@8.18.0.40025?type=jar", "dependsOn" : [ - "pkg:maven/org.sonarsource.java/java-surefire@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.java/java-frontend@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.java/java-symbolic-execution@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.java/java-checks@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.java/java-checks-aws@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.java/external-reports@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.java/java-jsp@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.8.0.2699?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.8.0.2699?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.8.0.2699?type=jar" + "pkg:maven/org.sonarsource.java/java-surefire@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.java/java-frontend@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.java/java-checks@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.java/java-checks-aws@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.java/check-list@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.java/external-reports@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.java/java-jsp@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.18.0.3393?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.18.0.3393?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.18.0.3393?type=jar" ] }, { - "ref" : "pkg:maven/org.sonarsource.java/java-surefire@7.33.0.35775?type=jar", + "ref" : "pkg:maven/org.sonarsource.java/java-surefire@8.18.0.40025?type=jar", "dependsOn" : [ - "pkg:maven/org.sonarsource.java/java-frontend@7.33.0.35775?type=jar", + "pkg:maven/org.sonarsource.java/java-frontend@8.18.0.40025?type=jar", "pkg:maven/com.fasterxml.staxmate/staxmate@2.4.1?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.8.0.2699?type=jar" + "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.18.0.3393?type=jar" ] }, { - "ref" : "pkg:maven/org.sonarsource.java/java-frontend@7.33.0.35775?type=jar", + "ref" : "pkg:maven/org.sonarsource.java/java-frontend@8.18.0.40025?type=jar", "dependsOn" : [ - "pkg:maven/org.sonarsource.java/jdt-package@1.1.0.34?type=jar", + "pkg:maven/org.sonarsource.java/jdt-package@1.6.0.160?type=jar", "pkg:maven/org.sonarsource.sslr/sslr-core@1.24.0.633?type=jar", - "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.8.0.2699?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.8.0.2699?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.8.0.2699?type=jar" + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.18.0.3393?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.18.0.3393?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.18.0.3393?type=jar" ] }, { - "ref" : "pkg:maven/org.sonarsource.java/jdt-package@1.1.0.34?type=jar", + "ref" : "pkg:maven/org.sonarsource.java/jdt-package@1.6.0.160?type=jar", "dependsOn" : [ ] }, { @@ -5006,20 +4830,24 @@ ] }, { - "ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.8.0.2699?type=jar", + "ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.8.0.2699?type=jar", + "ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.18.0.3393?type=jar", + "dependsOn" : [ ] + }, + { + "ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.18.0.3393?type=jar", "dependsOn" : [ "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar" ] }, { - "ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.8.0.2699?type=jar", + "ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.18.0.3393?type=jar", "dependsOn" : [ "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", - "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar" + "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar" ] }, { @@ -5033,7 +4861,7 @@ "dependsOn" : [ ] }, { - "ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.8.0.2699?type=jar", + "ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.18.0.3393?type=jar", "dependsOn" : [ "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", "pkg:maven/xerces/xercesImpl@2.12.2?type=jar", @@ -5058,132 +4886,111 @@ ] }, { - "ref" : "pkg:maven/org.sonarsource.java/java-symbolic-execution@7.33.0.35775?type=jar", + "ref" : "pkg:maven/org.sonarsource.java/java-checks@8.18.0.40025?type=jar", "dependsOn" : [ - "pkg:maven/org.sonarsource.java/java-frontend@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.8.0.2699?type=jar" + "pkg:maven/org.sonarsource.java/java-frontend@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.java/java-checks-common@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.18.0.3393?type=jar", + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", + "pkg:maven/org.springframework/spring-expression@6.1.21?type=jar" ] }, { - "ref" : "pkg:maven/org.sonarsource.java/java-checks@7.33.0.35775?type=jar", + "ref" : "pkg:maven/org.sonarsource.java/java-checks-common@8.18.0.40025?type=jar", "dependsOn" : [ - "pkg:maven/org.sonarsource.java/java-frontend@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.java/java-checks-common@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.java/java-symbolic-execution@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.8.0.2699?type=jar", - "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar", - "pkg:maven/org.springframework/spring-expression@6.1.5?type=jar" + "pkg:maven/org.sonarsource.java/java-frontend@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.18.0.3393?type=jar", + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar" ] }, { - "ref" : "pkg:maven/org.sonarsource.java/java-checks-common@7.33.0.35775?type=jar", - "dependsOn" : [ - "pkg:maven/org.sonarsource.java/java-frontend@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.8.0.2699?type=jar", - "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar" - ] - }, - { - "ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.8.0.2699?type=jar", + "ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.18.0.3393?type=jar", "dependsOn" : [ "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar" ] }, { - "ref" : "pkg:maven/org.springframework/spring-expression@6.1.5?type=jar", + "ref" : "pkg:maven/org.springframework/spring-expression@6.1.21?type=jar", "dependsOn" : [ - "pkg:maven/org.springframework/spring-core@6.1.5?type=jar" + "pkg:maven/org.springframework/spring-core@6.1.21?type=jar" ] }, { - "ref" : "pkg:maven/org.springframework/spring-core@6.1.5?type=jar", + "ref" : "pkg:maven/org.springframework/spring-core@6.1.21?type=jar", "dependsOn" : [ - "pkg:maven/org.springframework/spring-jcl@6.1.5?type=jar" + "pkg:maven/org.springframework/spring-jcl@6.1.21?type=jar" ] }, { - "ref" : "pkg:maven/org.springframework/spring-jcl@6.1.5?type=jar", + "ref" : "pkg:maven/org.springframework/spring-jcl@6.1.21?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/org.sonarsource.java/java-checks-aws@7.33.0.35775?type=jar", + "ref" : "pkg:maven/org.sonarsource.java/java-checks-aws@8.18.0.40025?type=jar", "dependsOn" : [ - "pkg:maven/org.sonarsource.java/java-frontend@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.java/java-checks-common@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.8.0.2699?type=jar", - "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar" + "pkg:maven/org.sonarsource.java/java-frontend@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.java/java-checks-common@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.18.0.3393?type=jar", + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar" ] }, { - "ref" : "pkg:maven/org.sonarsource.java/external-reports@7.33.0.35775?type=jar", + "ref" : "pkg:maven/org.sonarsource.java/check-list@8.18.0.40025?type=jar", "dependsOn" : [ - "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.8.0.2699?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.8.0.2699?type=jar" + "pkg:maven/org.sonarsource.java/java-checks@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.java/java-checks-aws@8.18.0.40025?type=jar", + "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar" ] }, { - "ref" : "pkg:maven/org.sonarsource.java/java-jsp@7.33.0.35775?type=jar", + "ref" : "pkg:maven/org.sonarsource.java/external-reports@8.18.0.40025?type=jar", "dependsOn" : [ - "pkg:maven/org.sonarsource.java/java-frontend@7.33.0.35775?type=jar", - "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@9.0.84?type=jar" + "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.18.0.3393?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.18.0.3393?type=jar" ] }, { - "ref" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@9.0.84?type=jar", + "ref" : "pkg:maven/org.sonarsource.java/java-jsp@8.18.0.40025?type=jar", "dependsOn" : [ - "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.84?type=jar", - "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.84?type=jar" + "pkg:maven/org.sonarsource.java/java-frontend@8.18.0.40025?type=jar" ] }, { - "ref" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.84?type=jar", + "ref" : "pkg:maven/org.sonarsource.python/sonar-python-plugin@5.16.0.29940?type=jar", "dependsOn" : [ - "pkg:maven/org.apache.tomcat/tomcat-annotations-api@9.0.84?type=jar" - ] - }, - { - "ref" : "pkg:maven/org.apache.tomcat/tomcat-annotations-api@9.0.84?type=jar", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.84?type=jar", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:maven/org.sonarsource.python/sonar-python-plugin@4.17.0.14845?type=jar", - "dependsOn" : [ - "pkg:maven/org.sonarsource.python/python-frontend@4.17.0.14845?type=jar", - "pkg:maven/org.sonarsource.python/python-checks@4.17.0.14845?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.8.0.2699?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.8.0.2699?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.8.0.2699?type=jar", - "pkg:maven/commons-lang/commons-lang@2.6?type=jar", + "pkg:maven/org.sonarsource.python/python-frontend@5.16.0.29940?type=jar", + "pkg:maven/org.sonarsource.python/python-checks@5.16.0.29940?type=jar", + "pkg:maven/org.sonarsource.python/python-commons@5.16.0.29940?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.18.0.3393?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.18.0.3393?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.18.0.3393?type=jar", + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", "pkg:maven/org.codehaus.staxmate/staxmate@2.0.1?type=jar" ] }, { - "ref" : "pkg:maven/org.sonarsource.python/python-frontend@4.17.0.14845?type=jar", + "ref" : "pkg:maven/org.sonarsource.python/python-frontend@5.16.0.29940?type=jar", "dependsOn" : [ "pkg:maven/org.sonarsource.sslr/sslr-core@1.24.0.633?type=jar", - "pkg:maven/com.google.guava/guava@32.1.3-jre?type=jar", - "pkg:maven/com.google.protobuf/protobuf-java@3.25.1?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.8.0.2699?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.8.0.2699?type=jar" + "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar", + "pkg:maven/com.google.protobuf/protobuf-java@4.29.0?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.18.0.3393?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.18.0.3393?type=jar", + "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1?type=jar" ] }, { - "ref" : "pkg:maven/com.google.guava/guava@32.1.3-jre?type=jar", + "ref" : "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar", "dependsOn" : [ - "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar", + "pkg:maven/com.google.guava/failureaccess@1.0.3?type=jar", "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar", - "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", - "pkg:maven/org.checkerframework/checker-qual@3.37.0?type=jar", - "pkg:maven/com.google.errorprone/error_prone_annotations@2.21.1?type=jar", - "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar" + "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar", + "pkg:maven/com.google.errorprone/error_prone_annotations@2.41.0?type=jar", + "pkg:maven/com.google.j2objc/j2objc-annotations@3.1?type=jar" ] }, { - "ref" : "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar", + "ref" : "pkg:maven/com.google.guava/failureaccess@1.0.3?type=jar", "dependsOn" : [ ] }, { @@ -5191,37 +4998,79 @@ "dependsOn" : [ ] }, { - "ref" : "pkg:maven/org.checkerframework/checker-qual@3.37.0?type=jar", + "ref" : "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.21.1?type=jar", + "ref" : "pkg:maven/com.google.j2objc/j2objc-annotations@3.1?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar", + "ref" : "pkg:maven/com.google.protobuf/protobuf-java@4.29.0?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/com.google.protobuf/protobuf-java@3.25.1?type=jar", + "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1?type=jar", + "dependsOn" : [ + "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.20?type=jar", + "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.1?type=jar" + ] + }, + { + "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.20?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/org.sonarsource.python/python-checks@4.17.0.14845?type=jar", + "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.1?type=jar", + "dependsOn" : [ ] + }, + { + "ref" : "pkg:maven/org.sonarsource.python/python-checks@5.16.0.29940?type=jar", "dependsOn" : [ - "pkg:maven/org.sonarsource.python/python-frontend@4.17.0.14845?type=jar", - "pkg:maven/commons-io/commons-io@2.11.0?type=jar", - "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.8.0.2699?type=jar" + "pkg:maven/org.sonarsource.python/python-frontend@5.16.0.29940?type=jar", + "pkg:maven/commons-io/commons-io@2.20.0?type=jar", + "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.18.0.3393?type=jar" ] }, { - "ref" : "pkg:maven/commons-io/commons-io@2.11.0?type=jar", + "ref" : "pkg:maven/commons-io/commons-io@2.20.0?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/commons-lang/commons-lang@2.6?type=jar", - "dependsOn" : [ ] + "ref" : "pkg:maven/org.sonarsource.python/python-commons@5.16.0.29940?type=jar", + "dependsOn" : [ + "pkg:maven/org.sonarsource.python/python-frontend@5.16.0.29940?type=jar", + "pkg:maven/org.sonarsource.python/python-checks@5.16.0.29940?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.18.0.3393?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.18.0.3393?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.18.0.3393?type=jar", + "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-toml@2.20.1?type=jar", + "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.20.1?type=jar", + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", + "pkg:maven/org.apache.commons/commons-text@1.14.0?type=jar", + "pkg:maven/org.codehaus.staxmate/staxmate@2.0.1?type=jar" + ] + }, + { + "ref" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-toml@2.20.1?type=jar", + "dependsOn" : [ + "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1?type=jar", + "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.1?type=jar" + ] + }, + { + "ref" : "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.20.1?type=jar", + "dependsOn" : [ + "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.1?type=jar", + "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1?type=jar" + ] + }, + { + "ref" : "pkg:maven/org.apache.commons/commons-text@1.14.0?type=jar", + "dependsOn" : [ + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar" + ] }, { "ref" : "pkg:maven/org.codehaus.staxmate/staxmate@2.0.1?type=jar", @@ -5235,44 +5084,47 @@ "dependsOn" : [ ] }, { - "ref" : "pkg:maven/com.google.googlejavaformat/google-java-format@1.22.0?type=jar", + "ref" : "pkg:maven/org.sonarsource.go/sonar-go-plugin@1.32.0.5128?type=jar", + "dependsOn" : [ ] + }, + { + "ref" : "pkg:maven/com.google.googlejavaformat/google-java-format@1.28.0?type=jar", "dependsOn" : [ - "pkg:maven/com.google.guava/guava@32.1.3-jre?type=jar" + "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar" ] }, { - "ref" : "pkg:maven/com.ibm/output@1.0.3-SNAPSHOT?type=jar", + "ref" : "pkg:maven/com.ibm/output@2.0.0-SNAPSHOT?type=jar", "dependsOn" : [ - "pkg:maven/org.cyclonedx/cyclonedx-core-java@8.1.0-SNAPSHOT?type=jar", - "pkg:maven/com.ibm/mapper@1.0.3-SNAPSHOT?type=jar", - "pkg:maven/com.ibm/engine@1.0.3-SNAPSHOT?type=jar", - "pkg:maven/org.jetbrains/annotations@24.1.0?type=jar", - "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", - "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar", - "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar", - "pkg:maven/org.sonarsource.java/sonar-java-plugin@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.python/sonar-python-plugin@4.17.0.14845?type=jar", - "pkg:maven/com.google.googlejavaformat/google-java-format@1.22.0?type=jar" + "pkg:maven/org.cyclonedx/cyclonedx-core-java@11.0.1?type=jar", + "pkg:maven/com.ibm/mapper@2.0.0-SNAPSHOT?type=jar", + "pkg:maven/com.ibm/engine@2.0.0-SNAPSHOT?type=jar", + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", + "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar", + "pkg:maven/org.sonarsource.java/sonar-java-plugin@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.python/sonar-python-plugin@5.16.0.29940?type=jar", + "pkg:maven/org.sonarsource.go/sonar-go-plugin@1.32.0.5128?type=jar", + "pkg:maven/com.google.googlejavaformat/google-java-format@1.28.0?type=jar" ] }, { - "ref" : "pkg:maven/org.cyclonedx/cyclonedx-core-java@8.1.0-SNAPSHOT?type=jar", + "ref" : "pkg:maven/org.cyclonedx/cyclonedx-core-java@11.0.1?type=jar", "dependsOn" : [ - "pkg:maven/commons-codec/commons-codec@1.15?type=jar", - "pkg:maven/commons-io/commons-io@2.11.0?type=jar", - "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar", - "pkg:maven/org.apache.commons/commons-collections4@4.4?type=jar", + "pkg:maven/commons-codec/commons-codec@1.19.0?type=jar", + "pkg:maven/commons-io/commons-io@2.20.0?type=jar", + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", + "pkg:maven/org.apache.commons/commons-collections4@4.5.0?type=jar", "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar", - "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.16.1?type=jar", - "pkg:maven/com.networknt/json-schema-validator@1.0.87?type=jar" + "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.20.1?type=jar", + "pkg:maven/com.networknt/json-schema-validator@1.5.9?type=jar" ] }, { - "ref" : "pkg:maven/commons-codec/commons-codec@1.15?type=jar", + "ref" : "pkg:maven/commons-codec/commons-codec@1.19.0?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/org.apache.commons/commons-collections4@4.4?type=jar", + "ref" : "pkg:maven/org.apache.commons/commons-collections4@4.5.0?type=jar", "dependsOn" : [ ] }, { @@ -5280,105 +5132,85 @@ "dependsOn" : [ ] }, { - "ref" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.16.1?type=jar", + "ref" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.20.1?type=jar", "dependsOn" : [ - "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.16.1?type=jar", - "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.16.1?type=jar", - "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.16.1?type=jar", + "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.1?type=jar", + "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.20?type=jar", + "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1?type=jar", "pkg:maven/org.codehaus.woodstox/stax2-api@3.1.4?type=jar", "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.4.0?type=jar" ] }, { - "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.16.1?type=jar", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.16.1?type=jar", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.16.1?type=jar", - "dependsOn" : [ - "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.16.1?type=jar", - "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.16.1?type=jar" - ] - }, - { - "ref" : "pkg:maven/com.networknt/json-schema-validator@1.0.87?type=jar", + "ref" : "pkg:maven/com.networknt/json-schema-validator@1.5.9?type=jar", "dependsOn" : [ - "pkg:maven/com.ethlo.time/itu@1.7.0?type=jar", - "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.16.1?type=jar", - "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.15.2?type=jar", - "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar" + "pkg:maven/com.ethlo.time/itu@1.14.0?type=jar", + "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1?type=jar", + "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.18.3?type=jar", + "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar" ] }, { - "ref" : "pkg:maven/com.ethlo.time/itu@1.7.0?type=jar", + "ref" : "pkg:maven/com.ethlo.time/itu@1.14.0?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.15.2?type=jar", + "ref" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.18.3?type=jar", "dependsOn" : [ - "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.16.1?type=jar", - "pkg:maven/org.yaml/snakeyaml@2.0?type=jar", - "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.16.1?type=jar" + "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1?type=jar", + "pkg:maven/org.yaml/snakeyaml@2.3?type=jar", + "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.1?type=jar" ] }, { - "ref" : "pkg:maven/org.yaml/snakeyaml@2.0?type=jar", + "ref" : "pkg:maven/org.yaml/snakeyaml@2.3?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar", + "ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/com.ibm/mapper@1.0.3-SNAPSHOT?type=jar", + "ref" : "pkg:maven/com.ibm/mapper@2.0.0-SNAPSHOT?type=jar", "dependsOn" : [ - "pkg:maven/com.ibm/engine@1.0.3-SNAPSHOT?type=jar", - "pkg:maven/org.jetbrains/annotations@24.1.0?type=jar", - "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", - "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar", - "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar", - "pkg:maven/org.sonarsource.java/sonar-java-plugin@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.python/sonar-python-plugin@4.17.0.14845?type=jar", - "pkg:maven/com.google.googlejavaformat/google-java-format@1.22.0?type=jar" + "pkg:maven/com.ibm/engine@2.0.0-SNAPSHOT?type=jar", + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", + "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar", + "pkg:maven/org.sonarsource.java/sonar-java-plugin@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.python/sonar-python-plugin@5.16.0.29940?type=jar", + "pkg:maven/org.sonarsource.go/sonar-go-plugin@1.32.0.5128?type=jar", + "pkg:maven/com.google.googlejavaformat/google-java-format@1.28.0?type=jar" ] }, { - "ref" : "pkg:maven/com.ibm/enricher@1.0.3-SNAPSHOT?type=jar", + "ref" : "pkg:maven/com.ibm/enricher@2.0.0-SNAPSHOT?type=jar", "dependsOn" : [ - "pkg:maven/com.ibm/mapper@1.0.3-SNAPSHOT?type=jar", - "pkg:maven/org.jetbrains/annotations@24.1.0?type=jar", - "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", - "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar", - "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar", - "pkg:maven/org.sonarsource.java/sonar-java-plugin@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.python/sonar-python-plugin@4.17.0.14845?type=jar", - "pkg:maven/com.google.googlejavaformat/google-java-format@1.22.0?type=jar" + "pkg:maven/com.ibm/mapper@2.0.0-SNAPSHOT?type=jar", + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", + "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar", + "pkg:maven/org.sonarsource.java/sonar-java-plugin@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.python/sonar-python-plugin@5.16.0.29940?type=jar", + "pkg:maven/org.sonarsource.go/sonar-go-plugin@1.32.0.5128?type=jar", + "pkg:maven/com.google.googlejavaformat/google-java-format@1.28.0?type=jar" ] }, { - "ref" : "pkg:maven/org.bouncycastle/bcpkix-jdk18on@1.78?type=jar", + "ref" : "pkg:maven/com.ibm/rules@2.0.0-SNAPSHOT?type=jar", "dependsOn" : [ - "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.78?type=jar", - "pkg:maven/org.bouncycastle/bcutil-jdk18on@1.78?type=jar" + "pkg:maven/com.ibm/mapper@2.0.0-SNAPSHOT?type=jar", + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", + "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar", + "pkg:maven/org.sonarsource.java/sonar-java-plugin@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.python/sonar-python-plugin@5.16.0.29940?type=jar", + "pkg:maven/org.sonarsource.go/sonar-go-plugin@1.32.0.5128?type=jar", + "pkg:maven/com.google.googlejavaformat/google-java-format@1.28.0?type=jar" ] }, { - "ref" : "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.78?type=jar", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:maven/org.bouncycastle/bcutil-jdk18on@1.78?type=jar", + "ref" : "pkg:maven/org.sonarsource.api.plugin/sonar-plugin-api@13.4.3.4290?type=jar", "dependsOn" : [ - "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.78?type=jar" + "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar" ] - }, - { - "ref" : "pkg:maven/org.sonarsource.api.plugin/sonar-plugin-api@9.13.0.360?type=jar", - "dependsOn" : [ ] } ] } \ No newline at end of file diff --git a/mapper/bom/bom.json b/mapper/bom/bom.json index 78b2f0ca..60132ba1 100644 --- a/mapper/bom/bom.json +++ b/mapper/bom/bom.json @@ -1,10 +1,10 @@ { "bomFormat" : "CycloneDX", "specVersion" : "1.5", - "serialNumber" : "urn:uuid:0195eb35-eeb8-3796-98bf-b8425e78bd09", + "serialNumber" : "urn:uuid:330c2f69-f206-30bb-b5b7-3118d748bbd5", "version" : 1, "metadata" : { - "timestamp" : "2024-04-12T08:16:51Z", + "timestamp" : "2026-01-28T14:17:33Z", "lifecycles" : [ { "phase" : "build" @@ -52,32 +52,32 @@ } ], "component" : { - "publisher" : "IBM", + "publisher" : "cbomkit", "group" : "com.ibm", "name" : "mapper", - "version" : "1.0.3-SNAPSHOT", + "version" : "2.0.0-SNAPSHOT", "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "https://www.gnu.org/licenses/lgpl.txt" + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], - "purl" : "pkg:maven/com.ibm/mapper@1.0.3-SNAPSHOT?type=jar", + "purl" : "pkg:maven/com.ibm/mapper@2.0.0-SNAPSHOT?type=jar", "externalReferences" : [ { "type" : "distribution-intake", - "url" : "https://eu.artifactory.swg-devops.com/artifactory/res-cryptoagility-team-maven-local" + "url" : "https://maven.pkg.github.com/cbomkit/sonar-cryptography" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.ibm/mapper@1.0.3-SNAPSHOT?type=jar" + "bom-ref" : "pkg:maven/com.ibm/mapper@2.0.0-SNAPSHOT?type=jar" }, "properties" : [ { "name" : "maven.goal", - "value" : "makeBom" + "value" : "makeAggregateBom" }, { "name" : "maven.scopes", @@ -87,349 +87,368 @@ }, "components" : [ { - "publisher" : "IBM", + "publisher" : "cbomkit", "group" : "com.ibm", "name" : "engine", - "version" : "1.0.3-SNAPSHOT", + "version" : "2.0.0-SNAPSHOT", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "67ae457c13ac566ea59b295a59cb7e95" + "content" : "82d71013150d0cc35b2f86c047257ea5" }, { "alg" : "SHA-1", - "content" : "174f4581fdccafe44ba8b06ca8776250a7cbd6be" + "content" : "d8aa90c2d6a5d43a659f77c8106d2638f2fa9b46" }, { "alg" : "SHA-256", - "content" : "e516d0b5fab931fc1f1c39d1ea892f2a07503ec2a245bbc9dcb1c6804adbafd2" + "content" : "a30d5984faeef0722b4cfc6b96e0680e11807dd0e058b791ea2ce803526851f9" }, { "alg" : "SHA-512", - "content" : "914b26f230b80175d70655604c16a5d2f0c34c95be27f5eaedcb01ccd71680c4723f8978c05bf7127f74f2d56beec3cbb98c18b372dfee525d07b7a0b88cd43e" + "content" : "4e2c67e7f337c49c43299da83b8707bac597304ce744a08fc3105e8679a9c1d0908b06a73557ae5b33e3f3cde36dffa11bae79a63b90bccc676cf690ea46be22" }, { "alg" : "SHA-384", - "content" : "0b224db460fdd73a412e39107df54b1bf11c43c424032ad00a73b7f695ba693b4e18a4cc3865f3b42d85840c703b2f1a" + "content" : "c259f83084de03dfb95efb15da1bb5e89a70453ca58df5929ad51fbebc3f4a46e7964249f1bcb71e099167511772bf77" }, { "alg" : "SHA3-384", - "content" : "a4980534f8d193ee0e6c984d540af540221d481fa955c7262eedccdb97afd92701478c32dec4bb874545524c95e4ae4a" + "content" : "aafaf842f747bd36b202cba133419618398debf30bef80ace36629d995c510f045a5227181b98e22685865fd59559080" }, { "alg" : "SHA3-256", - "content" : "b10c75d6a28044f378a59270380d20f7032b80146c669292c31e9140f1cd6548" + "content" : "98c5eb98fa32698d7f1070c731ed32053f8528393a9696f983ae285f9054831d" }, { "alg" : "SHA3-512", - "content" : "a93f4b34a1818b9eb6675e31b810583ff28f6e76470494819d5a7c831d987474bd4c600f297655dfb8c379d3af3861634e7668bfa22c4eddfacf2539cee17ec7" + "content" : "a695852c9a2886e19fde16679d404d92be3ae62617ca460852c29a16601c97385a494b3865b92864f125bed747d7e5836f13153ae86a6c3b7179317d22fa2070" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "https://www.gnu.org/licenses/lgpl.txt" + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], - "purl" : "pkg:maven/com.ibm/engine@1.0.3-SNAPSHOT?type=jar", + "purl" : "pkg:maven/com.ibm/engine@2.0.0-SNAPSHOT?type=jar", "externalReferences" : [ { "type" : "distribution-intake", - "url" : "https://eu.artifactory.swg-devops.com/artifactory/res-cryptoagility-team-maven-local" + "url" : "https://maven.pkg.github.com/cbomkit/sonar-cryptography" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.ibm/engine@1.0.3-SNAPSHOT?type=jar" + "bom-ref" : "pkg:maven/com.ibm/engine@2.0.0-SNAPSHOT?type=jar" }, { - "publisher" : "IBM", + "publisher" : "cbomkit", "group" : "com.ibm", "name" : "common", - "version" : "1.0.3-SNAPSHOT", + "version" : "2.0.0-SNAPSHOT", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "6b537a90ffd838bb65c5a9c2ff371dce" + "content" : "0bc212a0d7a96c40a0c6792249b21ee7" }, { "alg" : "SHA-1", - "content" : "76b39430ee28fd8962edae300a91d5ebc52c1076" + "content" : "70c6efeb7474e7b78595b6601584276bb7a90814" }, { "alg" : "SHA-256", - "content" : "1c9dcb0bdef66d58f48eebc5be6b625485ceba73f8e3310d8b72f5341094acea" + "content" : "aff8b56a14f886f07e502bf26baa476c3b6f3b79b8b6b003da2260435cda087f" }, { "alg" : "SHA-512", - "content" : "be406c24fb42f8595a51ff011041cb03271ff299d6c724961276f76ccc3c2a70a02e41726c188cd48081f064de989d16abf295658ac33a3d0f417a20eeb6c879" + "content" : "dcd37bc935a630965b07aa61633eb51e8ea58543a277f387edb93956a5153b447bd93a48ca2236a56ebf8df5b72b6f4e1759a4d222d1b12b480730f378ad87b1" }, { "alg" : "SHA-384", - "content" : "dcdf2d7e35abc1fc724ab290bbc10952df07a9b5ccd18373fb549c56bd14da38f529de16240e1fee98e083fc025876d8" + "content" : "8af172d828b3415fb085293a1788e04fe53cbba7ae53c2c4911f5333dc30cea9e3a11255922852f6269b09786b9fc8b4" }, { "alg" : "SHA3-384", - "content" : "113bf691c2e686f7b92e4b8c9a4bc788d6c14e77eb448d59a2532c2a0cfa35bdb8f9a87b3a02cc72052f0b0d65fa1ac4" + "content" : "8b03cb2f7fd323ad12fe42836a91697c8a74689b3fc732c16353eab599f709c88ca68dc05e1a4464990990bdd14000f2" }, { "alg" : "SHA3-256", - "content" : "b1103a71a3a027ab5c74986541390192f9c3e9aacc6c05bf6500b653b3b2e387" + "content" : "118e266f4ab89f83ee60b405959cdfb3f114d3f2553d16d5e34cf8791f8164f5" }, { "alg" : "SHA3-512", - "content" : "b03a0a66d302c49312991dd472959472afe74e62fea2b0fe725e4c34dad295a4ac7b34e9e13bcd916141836a2e00dde967da90844a5f65dd7120da3318092130" + "content" : "9af3f6a7540ea1567edea928cd5a7cec4dbea9e0726f9a03de4a0dbeb8eb7e0764ac1db432a816dd2f3d182a0102c7c866fc82f79212650825253055680ba09a" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "https://www.gnu.org/licenses/lgpl.txt" + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], - "purl" : "pkg:maven/com.ibm/common@1.0.3-SNAPSHOT?type=jar", + "purl" : "pkg:maven/com.ibm/common@2.0.0-SNAPSHOT?type=jar", "externalReferences" : [ { "type" : "distribution-intake", - "url" : "https://eu.artifactory.swg-devops.com/artifactory/res-cryptoagility-team-maven-local" + "url" : "https://maven.pkg.github.com/cbomkit/sonar-cryptography" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.ibm/common@1.0.3-SNAPSHOT?type=jar" + "bom-ref" : "pkg:maven/com.ibm/common@2.0.0-SNAPSHOT?type=jar" }, { - "group" : "org.jetbrains", - "name" : "annotations", - "version" : "24.1.0", - "description" : "A set of annotations used for code inspection support and code documentation.", + "publisher" : "SonarSource", + "group" : "org.sonarsource.api.plugin", + "name" : "sonar-plugin-api", + "version" : "13.4.3.4290", + "description" : "Plugin API for SonarQube, SonarCloud and SonarLint", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "38673abe87d12508cd05498eff0b9731" + "content" : "9121c8851ff1af1153c8dd4fa94c9ce7" }, { "alg" : "SHA-1", - "content" : "7af6a669488450c4a07c2c3254e2151df42d7d04" + "content" : "64194b3b6336b78df92f9fa5a58682c85ec5626b" }, { "alg" : "SHA-256", - "content" : "27a770dc7ce50500918bb8c3c0660c98290630ec796b5e3cf6b90f403b3033c6" + "content" : "ce1c77307f81897f3c8f901d81a0169db9f2ec614d65723679bc8bfedceb56dd" }, { "alg" : "SHA-512", - "content" : "663395a885561cc97eed411c67b496c06ec9a54906185a871de8743bf53e92152f4bc7c2a0118b7f3cfe85cc0a6c408ac6d589839b8d25c851637f85880331f2" + "content" : "8a9f34a03acbe05d9086119287ab2b2d84c8bff43367f75d42ca5bd5f66c54e4007d1affe247f7f3a0cb710328705b6a0db0db2e211b46e8979ea9e3eee6c401" }, { "alg" : "SHA-384", - "content" : "85779b72d864894f1d3cdd489b0a419c0620281c4fd22a061f4a3fe2aee91015681889573200cd2124c3add48a3216a6" + "content" : "7f1d268c151ad6fda7e5c5b21abb74b5a4b2bcb3e43fb4d3eceef01cab5e28e12b0d019d6d7da39a977f1fd8a6260ed2" }, { "alg" : "SHA3-384", - "content" : "0cfce80b012ba441be96368fe8af54e805100f7680fdbb7defae4dd07ff3c75cd0f89b993a61bef139a405637a73236f" + "content" : "c4ab8215fb558662a98375c9f347636f4e27fa912a23acadf804c5661caa2899529a6777f8c9f9a133c5a6e676ec0bf4" }, { "alg" : "SHA3-256", - "content" : "f7c5e25c9c16aad9f5482f3853660238db4f32be72c20f40383a1d20e0306f42" + "content" : "acb5c5fb43a612de73d7562499398bfb7678b878de04ecb697590fac4ed2e61c" }, { "alg" : "SHA3-512", - "content" : "0f74369cdb67a58c0f89033723665320eb535d1c1e66049347f6b3e25cbf7d1f80b8fa3a7b3e0b4fa8eae8d9ec8c30510b65bab581adeaff3f94651fa214105a" + "content" : "bf256b0cd721c685cc677bc5ab0af2eb68e469b7cdcd9e9bae7b60baa718b159b0e2cc9ca489a088b8d4556cef33da26d1bdf7fb1b952014b61e4b282aface76" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0" + "name" : "GNU LGPL 3", + "url" : "https://www.gnu.org/licenses/lgpl-3.0.txt" } } ], - "purl" : "pkg:maven/org.jetbrains/annotations@24.1.0?type=jar", + "purl" : "pkg:maven/org.sonarsource.api.plugin/sonar-plugin-api@13.4.3.4290?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://github.com/JetBrains/java-annotations" + "url" : "https://www.sonarqube.org/" }, { "type" : "vcs", - "url" : "https://github.com/JetBrains/java-annotations" + "url" : "https://github.com/SonarSource/sonar-plugin-api" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.jetbrains/annotations@24.1.0?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.api.plugin/sonar-plugin-api@13.4.3.4290?type=jar" }, { - "publisher" : "SonarSource", - "group" : "org.sonarsource.api.plugin", - "name" : "sonar-plugin-api", - "version" : "9.13.0.360", - "description" : "Plugin API for SonarQube, SonarCloud and SonarLint", + "publisher" : "QOS.ch", + "group" : "org.slf4j", + "name" : "slf4j-api", + "version" : "2.0.17", + "description" : "The slf4j API", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "b401a934655540b37bf6765778a7b759" + "content" : "b6480d114a23683498ac3f746f959d2f" }, { "alg" : "SHA-1", - "content" : "64b99cf118b048da0fa98a397b2e03f11c6970e9" + "content" : "d9e58ac9c7779ba3bf8142aff6c830617a7fe60f" }, { "alg" : "SHA-256", - "content" : "f20ae1d944f84a611583c33900d8788aa855a0d9ea66493e1046539715d53c0c" + "content" : "7b751d952061954d5abfed7181c1f645d336091b679891591d63329c622eb832" }, { "alg" : "SHA-512", - "content" : "f6b8fa7447300c1f95e14e9be12d36419b302d1844bd069ceaae134b3caa54d546a337be3c66e8e25ca5dd78fb95e76f92306cf5c26ba0730e3c730d443c2822" + "content" : "9a3e79db6666a6096a3021bb2e1d918f30f589d8de51d6b600f8ebd92515a510ae2d8f87919cc2dfa8365d64f10194cac8dfa0fb950160eef0e9da06f6caaeb9" }, { "alg" : "SHA-384", - "content" : "5cbdc17456d4ab1959cd8ad59d64a733224a3d03aa0f1e12968e0e7c86785e465d3f27f7c54b13c858326b4ee8bd60a7" + "content" : "6ea24f814a9b6ece428cfd0535e2f3b8927005745ef61006b50fdb5a90126ee5ea05650155382b3b755c5bce38ef3944" }, { "alg" : "SHA3-384", - "content" : "8930616bed39525c4c5c0396f8c541268b46b1df45432ee66ca6af8609a6ebd1e904493f025ba4b045401930a3ea2a2d" + "content" : "9b1015052f0ec43f9be09764e131834157599611cb52f6fe591c4ac6a8ab4817518f2a4b8871e5e738c8678e93af5557" }, { "alg" : "SHA3-256", - "content" : "4fb1225cc1bed06656fa92422d0425b44032725e6afb8d980c4af8cd8efc4b40" + "content" : "00559b4f4066b4917ba4fe2a6f23111eaeada321112d030910d218ced9084b5e" }, { "alg" : "SHA3-512", - "content" : "3a505b03e37ff9bd00248bf77344b880f206042a81b90eccbb42a78fe2496ff4f61c519f4ec77ded65d1f488b4caf6a69afae97a9a5a59f915ec8068176a0cbb" + "content" : "9579c2f7e7516e177c2d493ccc9eb8150978cf19f6f09b28d116f6935239fd56dc6af2b62b3336f79b0b462445550cd1fb5377a07001a6f44aaab6a32fa2fa47" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "https://www.gnu.org/licenses/lgpl-3.0.txt" + "id" : "MIT", + "url" : "https://opensource.org/licenses/MIT" } } ], - "purl" : "pkg:maven/org.sonarsource.api.plugin/sonar-plugin-api@9.13.0.360?type=jar", + "purl" : "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://www.sonarqube.org/" + "url" : "http://www.slf4j.org" + }, + { + "type" : "distribution-intake", + "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-plugin-api" + "url" : "https://github.com/qos-ch/slf4j/slf4j-parent/slf4j-api" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.api.plugin/sonar-plugin-api@9.13.0.360?type=jar" + "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar" }, { - "group" : "com.google.code.findbugs", - "name" : "jsr305", - "version" : "3.0.2", - "description" : "JSR305 Annotations for Findbugs", + "publisher" : "The Apache Software Foundation", + "group" : "org.apache.commons", + "name" : "commons-lang3", + "version" : "3.18.0", + "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang. The code is tested using the latest revision of the JDK for supported LTS releases: 8, 11, 17 and 21 currently. See https://github.com/apache/commons-lang/blob/master/.github/workflows/maven.yml Please ensure your build environment is up-to-date and kindly report any build issues.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "dd83accb899363c32b07d7a1b2e4ce40" + "content" : "48b9886957920a4cdb602780ca345087" }, { "alg" : "SHA-1", - "content" : "25ea2e8b0c338a877313bd4672d3fe056ea78f0d" + "content" : "fb14946f0e39748a6571de0635acbe44e7885491" }, { "alg" : "SHA-256", - "content" : "766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7" + "content" : "4eeeae8d20c078abb64b015ec158add383ac581571cddc45c68f0c9ae0230720" }, { "alg" : "SHA-512", - "content" : "bb09db62919a50fa5b55906013be6ca4fc7acb2e87455fac5eaf9ede2e41ce8bbafc0e5a385a561264ea4cd71bbbd3ef5a45e02d63277a201d06a0ae1636f804" + "content" : "c2c9d497fc1be411050f4011b2407764b78aa098eb42925af8a197eabdbc25b507f09fb898805e9bed4815f35236a508ee5b096e36f363df4d407232d50fc832" }, { "alg" : "SHA-384", - "content" : "ca0b169d3eb2d0922dc031133a021f861a043bb3e405a88728215fd6ff00fa52fdc7347842dcc2031472e3726164bdc4" + "content" : "4fb3f101106e4ce3666d5c15d276ba86f7683a0ef35f0384edfcd579ea454275edbb7400795d265ec3a38e39997e79b8" }, { "alg" : "SHA3-384", - "content" : "9903fd7505218999f8262efedb3d935d64bcef84aae781064ab5e1b24755466b269517cada562fa140cd1d417ede57a1" + "content" : "aada7e3612cf3f6190a19fa7c3db74df1e13ec56b300be9bb4317d261d5877c84ab59ba9a09168becdbd82cd41961395" }, { "alg" : "SHA3-256", - "content" : "223fda9a89a461afaae73b177a2dc20ed4a90f2f8757f5c65f3241b0510f00ff" + "content" : "306d286d0bd7549c203cc802fd755d354c4f7926fa023f4e83623ba1a6261250" }, { "alg" : "SHA3-512", - "content" : "3996b5af57a5d5c6a0cd62b11773360fb051dd86a2ba968476806a2a5d32049b82d69a24a3c694e8fe4d735be6a28e41000cc500cc2a9fb577e058045855d2d6" + "content" : "f6f1ecc684e309d7b9fc5c343792508fee935cd2119d962721662c5af88e4864ba6f47a863e083714f315f926c156de1970cd2fb577449bdfdc7bf98a4a451fa" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0" + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], - "purl" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", + "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://findbugs.sourceforge.net/" + "url" : "https://commons.apache.org/proper/commons-lang/" + }, + { + "type" : "build-system", + "url" : "https://github.com/apache/commons-lang/actions" }, { "type" : "distribution-intake", - "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" + "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" + }, + { + "type" : "issue-tracker", + "url" : "https://issues.apache.org/jira/browse/LANG" + }, + { + "type" : "mailing-list", + "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/" }, { "type" : "vcs", - "url" : "https://code.google.com/p/jsr-305/" + "url" : "https://gitbox.apache.org/repos/asf/commons-lang.git" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar" + "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar" }, { - "publisher" : "The Apache Software Foundation", - "group" : "org.apache.commons", - "name" : "commons-lang3", - "version" : "3.14.0", - "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.", + "group" : "com.google.code.gson", + "name" : "gson", + "version" : "2.13.2", + "description" : "Gson JSON library", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "4e5c3f5e6b0b965ef241d7d72ac8971f" + "content" : "a2c47e14ce5e956105458fe455f5d542" }, { "alg" : "SHA-1", - "content" : "1ed471194b02f2c6cb734a0cd6f6f107c673afae" + "content" : "48b8230771e573b54ce6e867a9001e75977fe78e" }, { "alg" : "SHA-256", - "content" : "7b96bf3ee68949abb5bc465559ac270e0551596fa34523fddf890ec418dde13c" + "content" : "dd0ce1b55a3ed2080cb70f9c655850cda86c206862310009dcb5e5c95265a5e0" }, { "alg" : "SHA-512", - "content" : "0338b50767166e5746ada6d6aa2e071e7221d699323bfb629f7f204b294c1dc4cad140610a129ed751798443b43e74e0818989c7df7d33c5915aa29742be9ba8" + "content" : "8974a052656d2e5ec968b6bac2edf51413ffc62040fdc65f14f00597e738ab544d22487f8579ba90618b5a7f94ef33773510fac67b408fee6ed274b38f3d9947" }, { "alg" : "SHA-384", - "content" : "908d0a22dc17aaa04caa5104cff7cad5b88b77eecb78dd5b3b3fefa22ff71ac50a4fb9e31c897ac243f9d841e4b3453d" + "content" : "98e8afe5b23c43b84e7a57e0e27f683a182fcf97ee3eeb6a1311582f7fecd846c806ffb092b620088dc03d256d8eaf27" }, { "alg" : "SHA3-384", - "content" : "8a7f2e061b998780870eddd571620fbf3d3c70bcb54e24539d0db504f59d65bc6bda58136284498babe29fcc5eabb7a6" + "content" : "d61d6b1cf6997c75287f454e536f855db8404e5fb9d0b8faa4dcc1e7a60ffefc05c2f92f3514e091808a8677b29f3619" }, { "alg" : "SHA3-256", - "content" : "022bf1f8039fcea717e9e34dd96eb80cfff05b43c9cbb76e9739b2421e2d027c" + "content" : "1c051cfe5e630b35d003f96e135de7c5d5cab145b6e1159143570cb246426a0d" }, { "alg" : "SHA3-512", - "content" : "0bcbc4edce974ea970c46e2da12ec98d9fd962c2cf64f757ac97136dec5623ca52af0c225895303c17ffabb57090e6772d7bd326d5e7438cef5454f8bbaeecfa" + "content" : "55ddee7f6c1659ffa82e5c308a0181b459cfeb3442f1f9868ff7e9a3c83376bd2ad527b16d5131df442ffd03d06c35dbd64458df6b02a111c1654f01db381ba5" } ], "licenses" : [ @@ -440,161 +459,137 @@ } } ], - "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar", + "purl" : "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://commons.apache.org/proper/commons-lang/" - }, - { - "type" : "build-system", - "url" : "https://github.com/apache/commons-parent/actions" - }, - { - "type" : "distribution-intake", - "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" + "url" : "https://github.com/google/gson" }, { "type" : "issue-tracker", - "url" : "https://issues.apache.org/jira/browse/LANG" - }, - { - "type" : "mailing-list", - "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/" + "url" : "https://github.com/google/gson/issues" }, { "type" : "vcs", - "url" : "https://gitbox.apache.org/repos/asf?p=commons-lang.git" + "url" : "https://github.com/google/gson/" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar" + "bom-ref" : "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar" }, { - "group" : "com.google.code.gson", - "name" : "gson", - "version" : "2.10.1", - "description" : "Gson JSON library", + "publisher" : "Google LLC", + "group" : "com.google.errorprone", + "name" : "error_prone_annotations", + "version" : "2.41.0", + "description" : "Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "df6097815738cb31fc56391553210843" + "content" : "75e3b25da8b8a2136463c4674f5e49bf" }, { "alg" : "SHA-1", - "content" : "b3add478d4382b78ea20b1671390a858002feb6c" + "content" : "4381275efdef6ddfae38f002c31e84cd001c97f0" }, { "alg" : "SHA-256", - "content" : "4241c14a7727c34feea6507ec801318a3d4a90f070e4525681079fb94ee4c593" + "content" : "a56e782b5b50811ac204073a355a21d915a2107fce13ec711331ad036f660fcc" }, { "alg" : "SHA-512", - "content" : "7503e4b8d05c6cc0ecb3a94c5a2e070e049083a441003a79a0cdf474f4286699b4ba1d2a655ddabb8ba10c50e7c36a7045cccdaee465166d4630db647aba2727" + "content" : "e2eb4bf9f36f95a4d4c5ea344db5cd90a456e63bef8e52932b8f6f4ecfdd59cb2f6c2ce9e67b0070c82177e42885688b95afef591b16001f789b378f18afdf30" }, { "alg" : "SHA-384", - "content" : "48a4786bd6e1867f058ee4fb676fc82d9d9f64a6d7420d4a47ae2398504c9de73222636614aeb4a9fbf10ee143d72226" + "content" : "43700b378624aa37197ef03a6b5ea40b5fbb6c0aa667eadf810ad36f0707dffaf3ea23471f2553327c3f5644cc875ee7" }, { "alg" : "SHA3-384", - "content" : "3df9a0332c2766124fe7c915cfea665d2e318ccaa7212415fabd9e93e6eb77de538725fd2ef313cde46f6d814c9566ea" + "content" : "8bf3293cf4b72c9a999948f8812190636ef3b0c35bab8dbf9a54c263eeab2a3b3d0774fdcab52c6d114551ff74a8aea2" }, { "alg" : "SHA3-256", - "content" : "d3374006d76d4f9acdf3d3a1a4f47899570f52442b2188f80c09a74f22139ecb" + "content" : "2ca1a59f4fdc37a3c83501542c63842fa4fe40c06f69a59a2a072e4af442a16a" }, { "alg" : "SHA3-512", - "content" : "2b10c2f4fe39d8712b430ff171823d7172c0a06685c1eb7de511e90159cec0e094fb2a9b50b747c5b039cb10f1fce9edf82ecbf9c47f76a6f31c4e3cb7586cce" + "content" : "6d1f419996b15e5a2bd9b268d166046e38fe9cc6c58fe56aaacbe71b95e3db8c8fe1d226e7f549ea227956feaf3087706bdfa79930fe432298bba9ec06c26a90" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0", - "url" : "https://www.apache.org/licenses/LICENSE-2.0" + "id" : "Apache-2.0" } } ], - "purl" : "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar", + "purl" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.41.0?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://github.com/google/gson/gson" - }, - { - "type" : "distribution-intake", - "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" - }, - { - "type" : "issue-tracker", - "url" : "https://github.com/google/gson/issues" + "url" : "https://errorprone.info/error_prone_annotations" }, { "type" : "vcs", - "url" : "https://github.com/google/gson/gson/" + "url" : "https://github.com/google/error-prone/error_prone_annotations" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar" + "bom-ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.41.0?type=jar" }, { "publisher" : "SonarSource", "group" : "org.sonarsource.java", "name" : "sonar-java-plugin", - "version" : "7.33.0.35775", + "version" : "8.18.0.40025", "description" : "Code Analyzer for Java", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "1b7d9cc6384c6be9b2b2be09d39a4409" + "content" : "b1a9179feade38e76fb3bd484426ed87" }, { "alg" : "SHA-1", - "content" : "74549fd0b22373ba0db5f5d8c9e83c4e1d4859d6" + "content" : "869cc6db9898899450852a5d89e77649dbc2e545" }, { "alg" : "SHA-256", - "content" : "84d7f2cce4bf4e66bacd053fd350489792519d83c292c2f4d5d8df0404450959" + "content" : "27dbc832bbeb28c70947d4d35fcc4a36b384911761831d8d5fc947cc1732d114" }, { "alg" : "SHA-512", - "content" : "f70839584286b4141cb252727f299be7a6f27cc8714d66b9c8b4a97d19030c5e39277ed85019cb2ffd9cd59f4b5c7780dd2bdd8cccd14d49a7aa618640069eca" + "content" : "b38980fb48ee7720a297190197e1ff20025ccaffad858a195234d4747773f4ed2ff2806b253ccd9d2121cddc71d1ac1fcc75ece9a07365db2089df89773add48" }, { "alg" : "SHA-384", - "content" : "ab79904167297307834e85b850b012fbdd22d6dbb938567ca8525219f8cd1cc2b725cc9ca781bca94dbab340580130ff" + "content" : "700d2a57ebc1672779fc11da69c29c822f8b0382bfb07afa5ef984abd2e38863b1ce8c2129c3ad173f796abebc14af96" }, { "alg" : "SHA3-384", - "content" : "5b177240092d00c9399f08b3148b58a299f0bb7a2a82458e5d4f4d5d0e4b5f6eba4f8b6f82c02369e8343c4bb0aea360" + "content" : "de424a453da7d8c708948d8bf9cffcabb6f00fac592f0be36b3d53fa41b95bc42ab6e1fcb4525c3c15793de00ad34478" }, { "alg" : "SHA3-256", - "content" : "f5829afa58615feeb89cdea0b96fa63ffda9c1401d5ac33d1420398ff42e59f9" + "content" : "3f2edc3ae30c79ac6e5db6bc7f968dd164f252b173bd3780ef1e06f68fec2962" }, { "alg" : "SHA3-512", - "content" : "4dc73ffee4b763a67a89b13a7574c03c9b7bfd08591088c30c64f9cb2aacd028d9c1bbbb4e5a68e5751635d9a3547e798eb4577b555187f410476a38e10ed9fc" + "content" : "73060df15758e595f9ad23967b9632b3b25584660362b8a660c699d7bfa092927edb2334ec711a2eca8394b03f0d32878e64b6b20411816b239f808747e7bcc2" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.sonarsource.java/sonar-java-plugin@7.33.0.35775?type=jar", + "purl" : "pkg:maven/org.sonarsource.java/sonar-java-plugin@8.18.0.40025?type=jar", "externalReferences" : [ - { - "type" : "website", - "url" : "http://redirect.sonarsource.com/plugins/java.html" - }, { "type" : "build-system", "url" : "https://cirrus-ci.com/github/SonarSource/sonar-java" @@ -610,65 +605,61 @@ { "type" : "mailing-list", "url" : "https://community.sonarsource.com" - }, - { - "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-java" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.java/sonar-java-plugin@7.33.0.35775?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.java/sonar-java-plugin@8.18.0.40025?type=jar" }, { "publisher" : "SonarSource", "group" : "org.sonarsource.java", "name" : "java-surefire", - "version" : "7.33.0.35775", - "description" : "Code Analyzer for Java", + "version" : "8.18.0.40025", + "description" : "Code Analyzer for Java :: Plugin to import JUnit report files", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "ebad97c089ab298bbf410b83645b5c91" + "content" : "8ec0e95937cd6bad70824f4fcbcdfd13" }, { "alg" : "SHA-1", - "content" : "1d6e25230cb5a0818e76cbf250b1f443c1117fe9" + "content" : "74166214d6bc038b62ac39fb6068ee92a7cc2377" }, { "alg" : "SHA-256", - "content" : "547a33116a008789a640ac520aca61b4aee460baf32d880f35ecbc247be17cf5" + "content" : "e5b3e323d65d5d1e07c67f2a3c231d976665dd36a755e4a25a529e020ecf246e" }, { "alg" : "SHA-512", - "content" : "79967a8394b8bada006fe03ed3519f73f9f4856d09cfaef3db91ab1e0dbd828bb9c69178a8151b678420e95489ace27ce9a59693be65fc3511696b446118c572" + "content" : "5f8666b8cabc3605c88d1066b3a4f102677a4592a055cddbd0857667a4c97da0b5963d4b6e9b9443bfa9a9f8eb5122bea5230c54d1948a8829137e0adfda2c53" }, { "alg" : "SHA-384", - "content" : "a3926f55e7e691e558e8fd2bed7da6f71cae00174987d108c5ccb5e4bff67052c1a7294ff83f93fecc89f0d37e72d2f2" + "content" : "7f91179e70d48c4f157b7c21e2d66043f197f5e77e93ca22cc514121f8aeb904f0be2d41cca33e026b79a6954b93620a" }, { "alg" : "SHA3-384", - "content" : "197a92ee27d6b823fe39f896604e292864f8e563ee9eebc8b7b8f98b5811c3bd3d31d1d991f91f305d61e78376c792fb" + "content" : "1181d83f7f281f38d1fd32a113cf36d0aafc3315b0f96394d1509a55cb71107a32dffc689991f08ea34d24afa146de4d" }, { "alg" : "SHA3-256", - "content" : "421298125883242fc4173246fd9f114c55e086270f0482a5b92f88462bf18f99" + "content" : "ee3151b15fa3040368071c28b161c21ffb9d0f0053ca3a869a8633790a8dbcb6" }, { "alg" : "SHA3-512", - "content" : "ff3c88c85a17e2983655e522450641dd191aa2f8818734af99b576778662e7025c6d635c6edc3052b3c42415693b7ba5c2137c7cac7140460d9405fb0d2780f9" + "content" : "94b7e5bc75cd127797485f48d5acca3853cefa2e8c433487268f12b177cd06e4aa4783f009f7a835099f406ccf1a22b69d0c3c523f3ab84fe8b348da312bd677" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.sonarsource.java/java-surefire@7.33.0.35775?type=jar", + "purl" : "pkg:maven/org.sonarsource.java/java-surefire@8.18.0.40025?type=jar", "externalReferences" : [ { "type" : "website", @@ -696,7 +687,7 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.java/java-surefire@7.33.0.35775?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.java/java-surefire@8.18.0.40025?type=jar" }, { "publisher" : "FasterXML", @@ -772,52 +763,52 @@ "publisher" : "SonarSource", "group" : "org.sonarsource.java", "name" : "java-frontend", - "version" : "7.33.0.35775", - "description" : "Code Analyzer for Java", + "version" : "8.18.0.40025", + "description" : "Code Analyzer for Java :: Front-end (Java Parser)", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "43bc91e0b5a11258625288f075b54633" + "content" : "a30b3194ba4e4aaf19e64afaf2c0cd9d" }, { "alg" : "SHA-1", - "content" : "2f748efd6e152c3526efd52a446cc8930381a16d" + "content" : "6c781ad5452a9f6c40efa651ec1514efd4956de0" }, { "alg" : "SHA-256", - "content" : "f22c60ed403f37c5378f2241c110d5f1427d9f8ac88710236a1662887a0961a5" + "content" : "6da24fc369a912c40bad484b580d15e8df7fd4a603e999b79952c1e88f1a10a4" }, { "alg" : "SHA-512", - "content" : "5ab1acc211dec17121948a678e59be6f050b1ba5360bf93fb724b51ff6160a29892c3847e5b0ad1deb450472bbdd5387f28403504670537b82477348dd97ca41" + "content" : "77fcb592867445be61fb472dc11eb2ed91e4d7675f6050728fe34fef4488bad75cf5fbb128bdbe6874820ece7e752f684065b98a6b0690bcbbc081f0efdf7a9c" }, { "alg" : "SHA-384", - "content" : "9d57998dcddbcbbf9ebcf79a68b928ce6aa9c8770c2b7565771b457ed299545f5ddbcc99a13889af53ab12e391c618d6" + "content" : "827447252ad585c8ef98e9f737d2b5ec4529f6f68f0fd571bfae08f3264186a4a5c9d864b488b66d933877c8d13f7863" }, { "alg" : "SHA3-384", - "content" : "64b3e663d553d1c3aa38d9e3b34cad8b38d440dc937bdb6e80edab6621f3c519d38ce4ec04f5353bf7e103cf315a808b" + "content" : "2eaeb68497c50d4bcd38ba010ab33f4833310fdf4c057d32ce622f01febd34d37d4b353b31ad53040a6dce7b1c287bf6" }, { "alg" : "SHA3-256", - "content" : "3febae6771046e4a5909ec72a2b6cd1749f384c910f3a090443a26d4651a1953" + "content" : "a2c28164e5d0c37e00f10f6b5187a6b8c31f87d2d3d86b12f9721516f91034e7" }, { "alg" : "SHA3-512", - "content" : "7555011fd0167dd38b798556104d02f2c5bd4b7e035065234f44ae22c7779c1a7fef4f3b17769d49deaf0635c99d211cb219ffac05da6c50ae1313f032565526" + "content" : "9163b1eac48b627a86db9c7b93fe258657561540fb605d926c645cb59e82fe6f72d1fb7d97120b4bc1488e27ede2420dbacb1ed021ff76642d10a2bc3cc54612" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.sonarsource.java/java-frontend@7.33.0.35775?type=jar", + "purl" : "pkg:maven/org.sonarsource.java/java-frontend@8.18.0.40025?type=jar", "externalReferences" : [ { "type" : "website", @@ -845,47 +836,47 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.java/java-frontend@7.33.0.35775?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.java/java-frontend@8.18.0.40025?type=jar" }, { "publisher" : "SonarSource", "group" : "org.sonarsource.java", "name" : "jdt-package", - "version" : "1.1.0.34", - "description" : "Parent pom of SonarSource public projects", + "version" : "1.6.0.160", + "description" : "Packaging of Eclipse JDT Core for SonarQube Java Analyzer", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "b37dc58a62e2d0cf93c0721fd974c31c" + "content" : "1df75f474b6bdb538899d8704b84757a" }, { "alg" : "SHA-1", - "content" : "505fc262c9e9347ff10f5c2e095a008db26a538b" + "content" : "1f8abb9d709c6ba2ab7ce3aa933857cb3735a1ce" }, { "alg" : "SHA-256", - "content" : "7ac622acdb900de5bb04529b822412731308f1f02a610e596b8a7789c28bde07" + "content" : "5efd84c8e2e39a310e9139b503355e9f31eeb3bcce779860ce96944096cf064f" }, { "alg" : "SHA-512", - "content" : "c264a6a75e00b39325e2be6e9cc4cc9903fcbb97e1e60766f09a42bad4d00ef0bc76b741a9c76ca76bf60fe0052987362f4f564a78e0ef3a654fdad833a00cf4" + "content" : "fcb097a96b7c6903ed8e50c95cea915cdb4ab2f4398869b812489d8f639509f970646adcd66afc8004b0c14807e05510d4406d7215726775695b0abcbe602dc5" }, { "alg" : "SHA-384", - "content" : "1f17c8e14bf19d6f93cd61f745ca681e2bf3ec5a2566a9233553e7d2c71f7896c7ee770c37db46536b98fd5cbb19f687" + "content" : "e500ad2d02142aa1fbbe1b9436f9e5bbb74d5c208b0c6aa0191725b126c9a3a4d2a21c708b2bd26a4f11a9ef880fbe07" }, { "alg" : "SHA3-384", - "content" : "40d04d2a79475f774b6a2b2a08b02387e2ac2c17e4b9b220fc1e59baf0554c569573d9abe22af1cff8e5fef69b4a43dd" + "content" : "60bd6cd889de6164963d49fe557e13456d962893e74d56bda559c6b57bd18ab1e8a065e64a2d8317e13dd754052d3f23" }, { "alg" : "SHA3-256", - "content" : "7bdaedda0da1edc3e63e8e62bcf3651b4d4169c24efa0baba01c368d2c6b7b74" + "content" : "32c6d9249b541d8ff7b488f8c584d8f068caace22037ec0e2340e6e850b919b7" }, { "alg" : "SHA3-512", - "content" : "11854f8cb06c601f4e54488b0943a8eac7790dfacd3355e52b274e8a39fe0aec36fd25da6c5711c7c294eaf540958c88013a4b57e7399f76c51b9e75d451c0a5" + "content" : "8378364906e74189f4255964961c90273743b41af7859c8bb946a092965b5787f37718ce6dccbed3cb531501361293fa96175327bd62d29a7ffe18be70caab78" } ], "licenses" : [ @@ -895,7 +886,7 @@ } } ], - "purl" : "pkg:maven/org.sonarsource.java/jdt-package@1.1.0.34?type=jar", + "purl" : "pkg:maven/org.sonarsource.java/jdt-package@1.6.0.160?type=jar", "externalReferences" : [ { "type" : "website", @@ -919,7 +910,7 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.java/jdt-package@1.1.0.34?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.java/jdt-package@1.6.0.160?type=jar" }, { "publisher" : "SonarSource", @@ -1000,41 +991,41 @@ "publisher" : "SonarSource", "group" : "org.sonarsource.analyzer-commons", "name" : "sonar-regex-parsing", - "version" : "2.8.0.2699", + "version" : "2.18.0.3393", "description" : "Logic useful to read and analyze regular expressions", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "35a3545ee8cc01b7630817c10d3ad63b" + "content" : "c9c38681ffebe27c85c27119dcbac4e2" }, { "alg" : "SHA-1", - "content" : "f30c693d63d35e55921b600d1cc02f6ab45fb162" + "content" : "887b8fb94772af059501ce252122d572da041615" }, { "alg" : "SHA-256", - "content" : "83710ff002b9faf8afb413a05a08b0530a3cf8ef130815d5a46c955c478664b5" + "content" : "0c3ea5153be8a0766373b1992a18c91702a48b37647ca400a5cd077b2d78e9ba" }, { "alg" : "SHA-512", - "content" : "0a10e363e24117e86650a1a8e9a10a637c4f99cee64405607be5da8c4bf4ecc413e67ed78acbd174b699b5c7325db5f0d623c10ded7e642a3e98f1f74e680f11" + "content" : "830bd069a1714fd24676db83114479961e3baea2abd4884c549f147edb6b83eafe4c9230f429818a9adfba89a0c4a21d39eddbcf4c1b937cc65a65b09d1a00ef" }, { "alg" : "SHA-384", - "content" : "c3775396d6d0c3001eb244d062e0f5262b78aae72a9d0ba5760dfa8eb5310112c403d0889cc73ade62a9fafcb515c635" + "content" : "ab21ccd7f07b9bceac88e85180e1f1643b43c30db4d8cdff030cd7cbc53753987284bfc1d412d7def8ec5380244fcfad" }, { "alg" : "SHA3-384", - "content" : "87bd8e6f2545740da80e5ad7c17600f1a3d0bd86aab07557e5f2fc3cdeccfc5654f030b0fe11c93e084da7a1e8b1d95b" + "content" : "ae43098f0c1a4939136f8f285cf9ca44663c2c77fd1120dd338239e70799b713af401a1c334559565263a1dc7f8613ae" }, { "alg" : "SHA3-256", - "content" : "85d791fcc5a6001f15ca84efff8a03c55b791a88745deca215c8108c8318ad1d" + "content" : "546a71b50a13237407e76548bf1fe5d61bf08df21dfa086bd17c2e3a103d25a0" }, { "alg" : "SHA3-512", - "content" : "024d92e865992b92d5c29a65ebec60a706ea8f0859de1c55312377ef22188396855b4403033d1e03a05208f37c3a24ea2e948f463cb3c5c9bc53c8d4266e5e03" + "content" : "18dbb41e4e61ece31c96cd50cc7a1d85799119cd5a88fef79ac4553071a363f485161ada5324cd8ef8b4204d60f000f5fff39c4db0eba2d15e9babf59a01f889" } ], "licenses" : [ @@ -1045,7 +1036,7 @@ } } ], - "purl" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.8.0.2699?type=jar", + "purl" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.18.0.3393?type=jar", "externalReferences" : [ { "type" : "website", @@ -1069,62 +1060,62 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.8.0.2699?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.18.0.3393?type=jar" }, { "publisher" : "SonarSource", "group" : "org.sonarsource.java", - "name" : "java-symbolic-execution", - "version" : "7.33.0.35775", - "description" : "Code Analyzer for Java", + "name" : "java-checks", + "version" : "8.18.0.40025", + "description" : "Code Analyzer for Java :: Analyzer's checks", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "232f45616c57791e1376b309b99d6bf3" + "content" : "1ac68532191b336b9c760c596dbabf9f" }, { "alg" : "SHA-1", - "content" : "ea12ce7dc955bbafca59c3463ea1f44ad82e42ab" + "content" : "6165e4a7c0bc4dd5bd6bdc8b74184f167bb5436b" }, { "alg" : "SHA-256", - "content" : "8ac28a32e08e60c451cc153bee71bc028f3c72e4ab0e3a9c91bdc5b131ad0f57" + "content" : "78b31d837169a372353c0b91ff2776590039996d8d50dbf033b774f6930d3b8c" }, { "alg" : "SHA-512", - "content" : "6ad5b4c6b85757346f203924c26e908d5557ab4d03147afbf58e33e0f25fdb3999f94aee6973366d2441565466473c30c0861a1512c79f240cd35a9a97f0d35e" + "content" : "07b461fd5a923bbd6a60379e61fc73924ad7bc3e1623257fbb16fee3390eb61e0d930dd80cb4e290da538c958546d8206a66fb433889665312df60b63aeccb1f" }, { "alg" : "SHA-384", - "content" : "dbc472dd1173bcac5ba03e4a1165ed35bd7db93511cc8b99e5407aaaa65a56a92027d79c551a4df7120c2a8d87705797" + "content" : "d1227c576fd2372fdcb0240ef2c0fc5497aaca1251df248eabf8e767765e8023ad5e727fecdd3ade31b5af2022a9f519" }, { "alg" : "SHA3-384", - "content" : "1912414c5430f6b4711e20bb73e1076b5ad85babae3e8374fbb65f1dd3232ae380d9bc52891184befed50777dace89f9" + "content" : "5a6b215207811609717d9b39ddaa332369918cf91fbe3bba94ebfff23408624b1bade52b5cf03062d16364fd9c792ea8" }, { "alg" : "SHA3-256", - "content" : "a5cbfac546a7aaf0a2211c3f1beceb36e2ed3384c9d7d4ece2195d2932fba345" + "content" : "030d53c3182415e2896ffc5898b155cac52587a006b327a51c6c5ab59714c012" }, { "alg" : "SHA3-512", - "content" : "4f6974c7877b90dfb0acf4a6f8f412ea4f391164165ce3de75973c871e356a55fdc5ad4de3322a7e30e57f4d7caa87871b3671a63e19ca51a6f5b3cec949d281" + "content" : "a5a4a3f41c1ba65066554808baeff26551c033ccb31ec561ab622e535984db16d9742107f5d07b7d3bc6f25ec92c410600eca7cdf1d9e36fd23a6246d1220db7" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.sonarsource.java/java-symbolic-execution@7.33.0.35775?type=jar", + "purl" : "pkg:maven/org.sonarsource.java/java-checks@8.18.0.40025?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://redirect.sonarsource.com/plugins/java.html/java-symbolic-execution" + "url" : "http://redirect.sonarsource.com/plugins/java.html/java-checks" }, { "type" : "build-system", @@ -1144,66 +1135,66 @@ }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-java/java-symbolic-execution" + "url" : "https://github.com/SonarSource/sonar-java/java-checks" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.java/java-symbolic-execution@7.33.0.35775?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.java/java-checks@8.18.0.40025?type=jar" }, { "publisher" : "SonarSource", "group" : "org.sonarsource.java", - "name" : "java-checks", - "version" : "7.33.0.35775", - "description" : "Code Analyzer for Java", + "name" : "java-checks-common", + "version" : "8.18.0.40025", + "description" : "Code Analyzer for Java :: Common utilities for analyzer's checks", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "eaeb082ff51df115aaf0f3116faf4b84" + "content" : "5514880c7701b527cdcc574edae88dc7" }, { "alg" : "SHA-1", - "content" : "f11567226d2a4c2efcadf5545c3e0b1bb5f8142c" + "content" : "5e3906963a6aee9229c0d5735ec5b0caba9c7a36" }, { "alg" : "SHA-256", - "content" : "1eeb30e79298fa3cff7e7265a0d313a5572bdd726b8d83e83dcb1d144421c24b" + "content" : "89aadedaaa0bd0e788c55b3a78a5b086fd0dbc4935e1ca9e8d15266c81dbc1eb" }, { "alg" : "SHA-512", - "content" : "0034e5bf2e95fb181c476a3d1a5b111efcd22131f62d75eb6daf21da645b4e3ad8e35096274e3898e042a7463d831caea46a7840f843c10442d5f48b75041687" + "content" : "c7e5eea32cd08b004728418429b1b1255751a50a33f5a58712ee7ebddb2f15883cbbc9a999d3d388274662e1b398f2121bdd8e28465a7b86b5702be57a211e0a" }, { "alg" : "SHA-384", - "content" : "c2e5daa8bb17411f2ad282755de82c02d98a4940a81a76c26167713a1b5f55f7551875ae8459b5b77934d42f37f5e8e5" + "content" : "74603a766b61c433df59fa6df8c140018dc181c84af0476242c22c4fefea6f3437cde005c253c21301be0209797ef6c8" }, { "alg" : "SHA3-384", - "content" : "7de6a308f476947ec7a132968be161ea98ab1f135d6286129fde8ee5f8a1044a295c9febf482d7f5a5f83b65e1ccd36f" + "content" : "a9a28120b1353f47a2aff96a032d95d8988eb0b2c940bff0bcef27dc352b19950d0b1eb0de8a521f8c232cfc0b3abea5" }, { "alg" : "SHA3-256", - "content" : "8033896b6e57169054031f9d386f00cc0194f1cf930782becea1b12a5f5421f7" + "content" : "eeb22c67995bfa542c898dc47195590c37da85116f30df4b367bd970c162084a" }, { "alg" : "SHA3-512", - "content" : "789208a299ff2cbfe4ac9f6c647b0d703ff77040fce20e269b33a6d0712011d214704496d27ee8b63adf5778e4d8b58fde286e5a8f043f3b1813ec4c15a06fce" + "content" : "27adbd9adbd039453b3f8fc762117222650d45147cfb4ea26ad6daf65b994fd618f4b5a2173f0860fdaa5b1e096af32faa100c902377b811892d8664c094684a" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.sonarsource.java/java-checks@7.33.0.35775?type=jar", + "purl" : "pkg:maven/org.sonarsource.java/java-checks-common@8.18.0.40025?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://redirect.sonarsource.com/plugins/java.html/java-checks" + "url" : "http://redirect.sonarsource.com/plugins/java.html/java-checks-common" }, { "type" : "build-system", @@ -1223,51 +1214,51 @@ }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-java/java-checks" + "url" : "https://github.com/SonarSource/sonar-java/java-checks-common" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.java/java-checks@7.33.0.35775?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.java/java-checks-common@8.18.0.40025?type=jar" }, { "publisher" : "SonarSource", - "group" : "org.sonarsource.java", - "name" : "java-checks-common", - "version" : "7.33.0.35775", - "description" : "Code Analyzer for Java", + "group" : "org.sonarsource.analyzer-commons", + "name" : "sonar-analyzer-recognizers", + "version" : "2.18.0.3393", + "description" : "Shared code recognizers", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "377bec0957fff4818de779185dc9d46b" + "content" : "c8fea2140f3d18005b73ba0cd39ac3cf" }, { "alg" : "SHA-1", - "content" : "64e48e3a5d4bdc7ed674b21f8ddb393e548c9947" + "content" : "f741f10d470867172afa510990c16877ede70222" }, { "alg" : "SHA-256", - "content" : "a5db4cf127e982760c049faf6a3df99fafccdd5e1d58b59afba30b206bde96b2" + "content" : "0b4ef58f3bba93170f115ec2a73eb5596276abc21219b7fa733240b6bc3f7d52" }, { "alg" : "SHA-512", - "content" : "ebb84100013c73fd13cd502e5ea56a557568f5404b1b60d015ba5529c955c7ae70c612437cbb249068c7437d2dd4ef7f249a20f4f2090ea22c414123df062838" + "content" : "8edf444d67195ff181307c7f27744833b7fa47ff54ee2c687c92761cd7e0900e302f71541d2ccb84a0436ac04fc28ccc79c4700452455db6c155c6ac774bf26d" }, { "alg" : "SHA-384", - "content" : "a3e9a9cf69e639b84e22ef84a9937d8c8e829628ae2b203ec722394ad3b50e0c07fc1b6265d4bf8df3a86cac424125ef" + "content" : "821446711dedcdcb0a20bae33560f7f5d86ca528b7277170b3fe539bc20ab41f90096c6d6cb6cb9b67a7738cf56029fd" }, { "alg" : "SHA3-384", - "content" : "abe29bc0a84ab6ec1dc55fe8d349f72e37865e46a7eb114d85328882711f00f344cb7252ef9adc449009b62a4350f7bd" + "content" : "c036fd79d7730afa956adbabd42edfd0fb5473e5b4534d2ecc480b2b587099d923ee97a9ee51e40e1e027a413fb7b33d" }, { "alg" : "SHA3-256", - "content" : "2bfc0c71aef10df37be7c91fea1ab5e1d90f018c859aa7e3f0844ce2246137fa" + "content" : "aafdbc0fc6e44a212ee7cb7eb10d9cb4b23ceb25a532ea0a6508ea32141cb581" }, { "alg" : "SHA3-512", - "content" : "0e7d60391152b9fbc7b7238967dbf3c4c4c32e776f065b65e456c5ba5b88550723709c82125334fb749167231d602fd6bf3c610a7e83e2d34f3e339f139f71b6" + "content" : "747d1f9f8a556ff1c67bfa46aa1e8e8b9c7b76114e141845751376c7bb34d841349491766e6ed221938f6d64e8aed91663515d23283668711177d076f12eb852" } ], "licenses" : [ @@ -1278,23 +1269,19 @@ } } ], - "purl" : "pkg:maven/org.sonarsource.java/java-checks-common@7.33.0.35775?type=jar", + "purl" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.18.0.3393?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://redirect.sonarsource.com/plugins/java.html/java-checks-common" + "url" : "http://docs.sonarqube.org/display/PLUG/Plugin+Library/sonar-analyzer-commons-parent/sonar-analyzer-recognizers" }, { "type" : "build-system", - "url" : "https://cirrus-ci.com/github/SonarSource/sonar-java" - }, - { - "type" : "distribution-intake", - "url" : "file:./local-deployment" + "url" : "https://cirrus-ci.com/github/SonarSource/" }, { "type" : "issue-tracker", - "url" : "https://jira.sonarsource.com/browse/SONARJAVA" + "url" : "http://jira.sonarsource.com" }, { "type" : "mailing-list", @@ -1302,126 +1289,117 @@ }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-java/java-checks-common" + "url" : "https://github.com/SonarSource/sonar-analyzer-commons/sonar-analyzer-recognizers" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.java/java-checks-common@7.33.0.35775?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.18.0.3393?type=jar" }, { - "publisher" : "SonarSource", - "group" : "org.sonarsource.analyzer-commons", - "name" : "sonar-analyzer-recognizers", - "version" : "2.8.0.2699", - "description" : "Shared code recognizers", + "publisher" : "Spring IO", + "group" : "org.springframework", + "name" : "spring-expression", + "version" : "6.1.21", + "description" : "Spring Expression Language (SpEL)", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "f9c0e3225c8cd152cd8385ab211c1211" + "content" : "9ea32c5135a59a1264f13d8f8d5f355c" }, { "alg" : "SHA-1", - "content" : "10fa0ef13f09632cc2d8a97990512a36252b2e2c" + "content" : "72da3b3521a6788e143a47b0f7273ce7cf98c6f0" }, { "alg" : "SHA-256", - "content" : "5ba42aefbd8cf715575a9f40293a53b47cc82ba67943215a5382487e4042da50" + "content" : "29597c579b6b051d0dd2f56775c6e0078ac5252eab5c940ae687bd5e1fcafbd7" }, { "alg" : "SHA-512", - "content" : "0659ad40421f8be0d492fedf4cee72c531d264d8b9aa9327e789b9277de0a5b037c0dba25a25bc1efb5a858a959941e7e6fa3c7e166ff908db1ea272b5f05486" + "content" : "e54e346271cbc327b138f7a16d6c086f68290688c293753cc5513bc26a20ddd91ee194de32d91122432dae785692468d9d68971202e05c0571a65a44f0a518e1" }, { "alg" : "SHA-384", - "content" : "7b629d1b28bab3012d347760905c7235e579c868460098c2f4e9e9127e3eef1fd08be8f8cff2400552a2f6ba3c735d18" + "content" : "eb0349b3f3b4952f088a4243ab58b7167087e01a719babbe15e54c25d5b6cc3e8f52203542e447a465c3002a3588e6ec" }, { "alg" : "SHA3-384", - "content" : "e3f76485b0c60e07e0a8d93716847e12279c8914590d06000a95df859b952d2b1348a2c1b74a434f92aa36ae711ad858" + "content" : "a2d39ba6e734731a7588f70fac0ab312d835674427c384e7bc7fde62340d2d1c48217ec0bbdc953b3f436550aa0dc796" }, { "alg" : "SHA3-256", - "content" : "af4025e146ba6f1982d1351d1adcabee0a2acb8b90f7a7e8e76f019e408adc1f" + "content" : "be4aa16518c2a8cae7deb0b7f867a2a4be88a7a9b3030db00558615eae43d27c" }, { "alg" : "SHA3-512", - "content" : "ec20e48bda7e839e8c30bdb52156bd42a856f176282c3b1fd3241a268e1674b582acee92f83d72b0247a03634e46a2a740326dda9c089b704605b45c69322606" + "content" : "c4e3742d1ba2111bc4b72c1f9fcebff0d47c8466dd732d5f66ef2c7303a60d7da4e1a63fbf469df27075bf0f5174302dfa921722079425540151fd5e16fdfbfb" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "id" : "Apache-2.0" } } ], - "purl" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.8.0.2699?type=jar", + "purl" : "pkg:maven/org.springframework/spring-expression@6.1.21?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://docs.sonarqube.org/display/PLUG/Plugin+Library/sonar-analyzer-commons-parent/sonar-analyzer-recognizers" - }, - { - "type" : "build-system", - "url" : "https://cirrus-ci.com/github/SonarSource/" + "url" : "https://github.com/spring-projects/spring-framework" }, { "type" : "issue-tracker", - "url" : "http://jira.sonarsource.com" - }, - { - "type" : "mailing-list", - "url" : "https://community.sonarsource.com" + "url" : "https://github.com/spring-projects/spring-framework/issues" }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-analyzer-commons/sonar-analyzer-recognizers" + "url" : "https://github.com/spring-projects/spring-framework" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.8.0.2699?type=jar" + "bom-ref" : "pkg:maven/org.springframework/spring-expression@6.1.21?type=jar" }, { "publisher" : "Spring IO", "group" : "org.springframework", - "name" : "spring-expression", - "version" : "6.1.5", - "description" : "Spring Expression Language (SpEL)", + "name" : "spring-core", + "version" : "6.1.21", + "description" : "Spring Core", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "1f268a22bb7c0cb80958953ffbc21125" + "content" : "3c233d75937864d95e9051eafa9205f1" }, { "alg" : "SHA-1", - "content" : "7e21cb1c6bbef1509e12d485b75ffc61278d9fa7" + "content" : "dcc8607ee792439389e19111d83737b6b06ca4ac" }, { "alg" : "SHA-256", - "content" : "1f37b50dcaf091a43bb10d946178fff4082674497fd821438327815da14f7fd0" + "content" : "0729b69e52ac8d9a8d03991315690f632bb0984620a0595e52580d7f3557298d" }, { "alg" : "SHA-512", - "content" : "d5a13856a7f4619eaf1c9593f7739ec5cde37a555a98f0da4cb21aa591e87fb0bcdbd2a5da67d9b69a0dab0016f806c9d3f096bc8841c32bb98810daf1e5e7b7" + "content" : "8d926d38d47cc510378bff4cbd59a951660e8b813a22ffe662490631eb0f85668b007a0ee6961f4a6db2a80dab75181e13196fac10076510dc155c897a6aa999" }, { "alg" : "SHA-384", - "content" : "1e0c29ba819c5c8f5eb278a8f308a0119a476e81998ff5c7658b150352d357ef53c408566bd7a0b8023b7b41cabf4636" + "content" : "b8d3fff87f154bd509d1844c68a005787729112fac80512fa5d6df43d32b1f2fde0bd33e6ba6038e5d57e6265c8b97e5" }, { "alg" : "SHA3-384", - "content" : "f9cefe146557fe266e6e38bc8fbe157c7ef10fc606edafaf901d393ab140d25dabf4e60ff79c6a45a83c7eff890d3cac" + "content" : "d68af409a439cedb3b7da43946892d6012fb3000e849e929221a994cdd7ed1fd2791b1fbcc2b5903415ec6612f679cb9" }, { "alg" : "SHA3-256", - "content" : "ba29e269a74f3c452a64bd9e7a680c84c5c26b96397683c22435e4fcea8ecb9e" + "content" : "2a8bcfdbaae2b6c617f4896069b188e279faf8d169932c17f90c0e0ed4223fc0" }, { "alg" : "SHA3-512", - "content" : "8de364ab79572c8d2af2dc22ea5768d323b7268e03ae977701024f17e6fede13f03e248ef44c6789dea3007723beb1454c7795b45f3834b6040510661b6dee54" + "content" : "2890d9f8375e68786ea993d22ea2d9fd7c45bcbcce07949013857d7a3ff89da0aadb22a34493180c0d1fe905e744b453510b1f87631bbce8eda84c7844389884" } ], "licenses" : [ @@ -1431,7 +1409,7 @@ } } ], - "purl" : "pkg:maven/org.springframework/spring-expression@6.1.5?type=jar", + "purl" : "pkg:maven/org.springframework/spring-core@6.1.21?type=jar", "externalReferences" : [ { "type" : "website", @@ -1447,47 +1425,47 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/org.springframework/spring-expression@6.1.5?type=jar" + "bom-ref" : "pkg:maven/org.springframework/spring-core@6.1.21?type=jar" }, { "publisher" : "Spring IO", "group" : "org.springframework", - "name" : "spring-core", - "version" : "6.1.5", - "description" : "Spring Core", + "name" : "spring-jcl", + "version" : "6.1.21", + "description" : "Spring Commons Logging Bridge", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "6eeff94b635753591e74d979ffc2f793" + "content" : "0e017885cab7225c3859aaf24d3a96cb" }, { "alg" : "SHA-1", - "content" : "6dae1b06ffacbb9abab636be2dbc6acd3b6e5d68" + "content" : "fa75fc86c26dbbc6fb816e5b7aa5fc83f4494423" }, { "alg" : "SHA-256", - "content" : "476dac28509b3f47d0b5e895a639fa75ac2218f074ce214e44832a836c469f7e" + "content" : "f77ae10f41eaf02bc94a6424a3bad1d80a58b168e6af032ecb40a474d9e4f82d" }, { "alg" : "SHA-512", - "content" : "067d31ab99c842a586fbc1bf7aa7ac9aad0fa36d70f0e5bdb7e355514d66b1f6106dbb74ce15959a8dff8223a3e447ae30735e40f376e67f0ef8b70ed1a85002" + "content" : "b0821cb6220914b2bc517f858d21c4a3b98b5a487ee94f29acf044153ba5a568a44fead4d003f71ffbad65f61791d01e33ec05859cdf2a3a1bb853469dc37753" }, { "alg" : "SHA-384", - "content" : "25728b0246bc11715c8b1fec2a704b74a6c2bd6e41851b44aead5c76d0ad1493929bdbcef51dee8005404099388c03ee" + "content" : "84188cf73912ff5372b4ebc58fd0bc63ecc282240c896a987ebf3cfcbbc57cfeacd1a63ea5a9cd6fbcd3ea45e11a001a" }, { "alg" : "SHA3-384", - "content" : "ba98714211e0a6d8337b876cd6452216d1752b5274671f476fa06a63931da1e8ff0d7d0b4105967ab68e6f967aa8b43e" + "content" : "a787e5682a3d41e20e726caf3e0eabd9fd0b33beff448bdd8915c5d1755eec973d7e9ea229a806b00a1d969941364614" }, { "alg" : "SHA3-256", - "content" : "70c250de2d49aec369e3abf959c980036051ca0f54ddfc774840c95a8eabccae" + "content" : "9ab47bf24ddfbb2dbe03a02e131d4b9bd7ada2da72badba7a7fadd0363895247" }, { "alg" : "SHA3-512", - "content" : "c4d9cb5d1a7a738f6a762bd8f9a0fbd2455f3900e702b77d5d1d76079ab1b614b7993f992473ea57639a57fdb46e985a3b29191b3d8a18215b97e82b31cdb3e7" + "content" : "3d537771c6060078daca6cb556d0a1571f9a685e0287c8c186f3f8e441ce0d7460040de7368c7a51d4dd99faa0d6216baa1013c8acc7f3b981eb30e25cccdaa3" } ], "licenses" : [ @@ -1497,7 +1475,7 @@ } } ], - "purl" : "pkg:maven/org.springframework/spring-core@6.1.5?type=jar", + "purl" : "pkg:maven/org.springframework/spring-jcl@6.1.21?type=jar", "externalReferences" : [ { "type" : "website", @@ -1513,128 +1491,141 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/org.springframework/spring-core@6.1.5?type=jar" + "bom-ref" : "pkg:maven/org.springframework/spring-jcl@6.1.21?type=jar" }, { - "publisher" : "Spring IO", - "group" : "org.springframework", - "name" : "spring-jcl", - "version" : "6.1.5", - "description" : "Spring Commons Logging Bridge", + "publisher" : "SonarSource", + "group" : "org.sonarsource.java", + "name" : "java-checks-aws", + "version" : "8.18.0.40025", + "description" : "Code Analyzer for Java :: Analyzer's checks for AWS", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "4b7724c57ea12f13ce3fc49a18209b6c" + "content" : "8aed826c7d8696ce3699588cd6ff952b" }, { "alg" : "SHA-1", - "content" : "896ae3519327731589c6e77521656b50ae32d5b3" + "content" : "6cc1bba5a36b3eef6230e273866fc6dc309189af" }, { "alg" : "SHA-256", - "content" : "c53540419e482242c815db6d6a8cd80af85a6a895e38329b9d9bd6b4616503eb" + "content" : "5ee06300e5427acf74b378cf181a697b548a477ffcf1edfc216ae5345e40c1e0" }, { "alg" : "SHA-512", - "content" : "0de5bdae17924ab55ed7e6e97acbfeb60406fa99b10c1fd8a391f9f81c475691638535a297636fb79b51f02cf07d98ac613049235e9fdbf1186672c8b64c5967" + "content" : "47ecef1096030771bb0c24c2b3c15ebe51ab8a6f66d76ae2683ea4b54821f9c914ecd694b877a186c26650db463aedfa57e9a172fe509de26ca4f0a19867be61" }, { "alg" : "SHA-384", - "content" : "2844ddc317d6fed2c80c5090e3b4b976a063ad5fce4bf8dbfa7c1034cb647497a830142ff7e70b7eb0c8cf742a091071" + "content" : "242495b1e08269988e57a0e08730bb23d18fe614cf37af2ede8aa489a7a3ad581c0d5f970b7d25aee2db35f658649c26" }, { "alg" : "SHA3-384", - "content" : "dfc30f87671459ea2bdc8c25aa6ed814dd53a0ab60df4b98b44eb96ab28cd7bfce358c32b5ab8255d0c0d7ebba1a28b0" + "content" : "f8f74f485da5f891e8a98701cc7d7267548ebeb2d04861239a891547abebdda1951cc16de0003c60db18fa48ad9696f9" }, { "alg" : "SHA3-256", - "content" : "a7a4153deabf0b46852c6539f1d0d63bac5963eaf9ef73209097c3bd4b2118c3" + "content" : "b60ad5ee6b83beabd93c21866b2bd05eaf340ead9ef9f4d1f38492546d103d89" }, { "alg" : "SHA3-512", - "content" : "62add3aa8ea534168ba2eb4e811628e35970e17a2ae350de376fd95e8e0d70045dc9f6748075bafe4f74ebec4278bb3e36243478e08b4329840c8f068b30cde9" + "content" : "8bd74670d07ae07f638e31a27a8f8a00eb0fabd40337f3b601595c86769e31da58b969f08ca5424dbb48adc4d7c8477503a1d795cb8eeec3179f276273997685" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.springframework/spring-jcl@6.1.5?type=jar", + "purl" : "pkg:maven/org.sonarsource.java/java-checks-aws@8.18.0.40025?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://github.com/spring-projects/spring-framework" + "url" : "http://redirect.sonarsource.com/plugins/java.html/java-checks-aws" + }, + { + "type" : "build-system", + "url" : "https://cirrus-ci.com/github/SonarSource/sonar-java" + }, + { + "type" : "distribution-intake", + "url" : "file:./local-deployment" }, { "type" : "issue-tracker", - "url" : "https://github.com/spring-projects/spring-framework/issues" + "url" : "https://jira.sonarsource.com/browse/SONARJAVA" + }, + { + "type" : "mailing-list", + "url" : "https://community.sonarsource.com" }, { "type" : "vcs", - "url" : "https://github.com/spring-projects/spring-framework" + "url" : "https://github.com/SonarSource/sonar-java/java-checks-aws" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.springframework/spring-jcl@6.1.5?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.java/java-checks-aws@8.18.0.40025?type=jar" }, { "publisher" : "SonarSource", "group" : "org.sonarsource.java", - "name" : "java-checks-aws", - "version" : "7.33.0.35775", - "description" : "Code Analyzer for Java", + "name" : "check-list", + "version" : "8.18.0.40025", + "description" : "Code Analyzer for Java :: Generate the list of checks at build time", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "14dfa924e3e61569475db951d81dff71" + "content" : "523e390cec46df34c6686d8f61181bef" }, { "alg" : "SHA-1", - "content" : "2af499d9be4ebd5d898db1eb13eb34ad3b2fb8e9" + "content" : "93c3737e36e776e9c9ba43293256d3ade559e656" }, { "alg" : "SHA-256", - "content" : "62148c334e45df290a958dd438ef662ba5fd29c4023de832d425e674f7c585fd" + "content" : "aa62feaefd959fe9c4a75280ddbee6ffe9b59181296c521e8d876676812ddf5a" }, { "alg" : "SHA-512", - "content" : "f9365f6002c6a51295e7a00a4255ad9eb693d52de2e4c3aa0161e722c58f57a565f97bd3e03e53f3fcc2b1b1af3753471b0ba707e8416f6d2c21f17fcb1b7071" + "content" : "bba574e1f4a05a5fc7a70cb5f9deb5a1f68d8bcb6b2ad4859799e94ca18f622b15075f454e00e3d8fd5ac64827c06afc660ec73bc0db1402bdc3f5e4ebb16bbe" }, { "alg" : "SHA-384", - "content" : "45f68667d8e7543d39b51ebf451513bd085a573edfcee9b89c8154a61bda72d55f7085a1ccb132b306bb2dcebcb9b899" + "content" : "a87fc3e9946eef5166f6393ca2ee064caf3763d19e3415779f0e5269b267790a897485fb8cf085ba84f535e2112fbbe3" }, { "alg" : "SHA3-384", - "content" : "5a6ef9e7483108b215e37833d6d4321ae9ca11f2a2df09d02563d008228dd469e2ce9d9b307679fe16fc229a1a90f588" + "content" : "9e9584346c363abd4a0aad992c54f60dfec95d7a7e8c3cc2834d878c72d1b8a5460c834eaeafc6045a7115af424bcacf" }, { "alg" : "SHA3-256", - "content" : "2c6b29354a7077d0a34a9c742a2e0a95310e2dbc40cab29527ec59aed9ac7b22" + "content" : "9ddbb48896bde9c6d4457d250d207daef592fe257f10ff0ed88cbb38990c9209" }, { "alg" : "SHA3-512", - "content" : "d19b4dfeca42f8ff8821621d241b12aec49fd8012cac5ccffefac6bd55ca2dca60ef40ee15a81460051fbf1797631a34c70fb4600a9e4182a581f082b8c5028e" + "content" : "7a3b54a4fd3db04d97df4040f10c27fb9993071eed45f1caac906d989b213995fddd8b7e74b92d68c6cc99709fc69b789f1a55bd55d1226adccaf80493869b8f" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.sonarsource.java/java-checks-aws@7.33.0.35775?type=jar", + "purl" : "pkg:maven/org.sonarsource.java/check-list@8.18.0.40025?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://redirect.sonarsource.com/plugins/java.html/java-checks-aws" + "url" : "http://redirect.sonarsource.com/plugins/java.html/check-list" }, { "type" : "build-system", @@ -1654,62 +1645,62 @@ }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-java/java-checks-aws" + "url" : "https://github.com/SonarSource/sonar-java/check-list" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.java/java-checks-aws@7.33.0.35775?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.java/check-list@8.18.0.40025?type=jar" }, { "publisher" : "SonarSource", "group" : "org.sonarsource.java", "name" : "external-reports", - "version" : "7.33.0.35775", - "description" : "Code Analyzer for Java", + "version" : "8.18.0.40025", + "description" : "Code Analyzer for Java :: External Reports Plugin", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "b07b7b394b1de4dadcdd41bf472bff97" + "content" : "0a2d44b03fd1c355461dd30c436d3097" }, { "alg" : "SHA-1", - "content" : "bc9c1e1cb3f4abca42ddb1b6ffc027eb2fd4c68e" + "content" : "6374bd720414018d7ed56f80b2ed918ec94e6b2f" }, { "alg" : "SHA-256", - "content" : "aabc8b03f2c9c042ad4d1d25ada8281dd029480e9f59831d98e91adca67fee08" + "content" : "38eb3bbdd4857c485d41a0a9deab123e2c9c4cba4e187dd1997efe72cdafdccc" }, { "alg" : "SHA-512", - "content" : "b60270c2b3d038cc3b3387ba052a79c2e5fad1b0536a5a1f2e4bfa98da3046ae451503f7837a214359dd6c6052cdbdf5d8776fbab5648bcc31ac974830a6c16d" + "content" : "ec05b2b58d09641b89777d15383f8ec27873aa1e2d97977af5365840b322e1a3e38a8d65c71dd7bf5b87fbca59e49bfc6e71dc7400efad987c51dcc5e9bd5e89" }, { "alg" : "SHA-384", - "content" : "943d62b27e66b0b7472c0115f9749fe109343ee1409eb6ba57ffd3776eddfb92bf28c4c1f664aefc08e891d29d5ea2e8" + "content" : "dfde96d508de66a673c9e13298c958dfc2c6fb32e85c0b42450b3263ba4f3a09a254d893f08ae4b9f39d707e4cee22c7" }, { "alg" : "SHA3-384", - "content" : "ff834b86b09d0b11bd4fd9da2245b52c76d540af4bbc858d2478f40444c2a632ca671eac45b65097c0014456a7d553ba" + "content" : "41b976778dec610536e3b9eb679754ef9568cc8bb2beb7c7fe1d852c5d5879c682d8844a0c035ebe0b095626ea43203f" }, { "alg" : "SHA3-256", - "content" : "b632f307cefea8b5fafe516db380b7160da28677ed0657db17332250ee40b26d" + "content" : "42ddf81281e703791ae6f8c8d8adcc96da58390d4cb4b49668b4d3e3d1ba4bec" }, { "alg" : "SHA3-512", - "content" : "81ae57ff106ae7f468dfa23a5d7fd828915cbe1bcc6b21ba988a255287a7d40858979aaede906f3cf277f93117eb7ec919e003083622d061b3149a2d15eb765b" + "content" : "586377b8e12c4b960ef1a3a5cf335e8e19db4da10de7346f140bf3eb56243229be4271603c2400a6bcedb87d06dce5f95cb11581e8eceb80e88a6ddb3e00a564" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.sonarsource.java/external-reports@7.33.0.35775?type=jar", + "purl" : "pkg:maven/org.sonarsource.java/external-reports@8.18.0.40025?type=jar", "externalReferences" : [ { "type" : "website", @@ -1737,58 +1728,58 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.java/external-reports@7.33.0.35775?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.java/external-reports@8.18.0.40025?type=jar" }, { "publisher" : "SonarSource", "group" : "org.sonarsource.java", "name" : "java-jsp", - "version" : "7.33.0.35775", - "description" : "Code Analyzer for Java", + "version" : "8.18.0.40025", + "description" : "Code Analyzer for Java :: JSP parser", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "e0890ace531478ef8ac18849d78cd9e5" + "content" : "7ad6c8d9c8472d350359adbb1bb2a117" }, { "alg" : "SHA-1", - "content" : "a8cecb5145490f15b35742712345b5919726ad89" + "content" : "bf1f05662d4aa017bfab919bee32c6e985aea49b" }, { "alg" : "SHA-256", - "content" : "ae1ee6f32a16217667ea46a973f7c93a6f66ef7052a2d1e24d6e8f78c02f96bf" + "content" : "85520636a757ac333fb349873dada3386a2a89352bb6443a552612323a898e3a" }, { "alg" : "SHA-512", - "content" : "b7fcefd8fa7174db020947db1a41aff0e5c25191fbd8feb8c53438a42604a50b342ac072f571eaf6b0d54915e9106dc5bc6304d5899dbee90e20dcfc08139ca9" + "content" : "34e2e4fd545dfab31f0f0dba626b61648a2daadfaa7f32483cb3b31aa2010e90639bcae4b2b3ac669d60ae3d0490ef59bf6d87ee61098d593c15b043ad8e43e1" }, { "alg" : "SHA-384", - "content" : "39420fa5bb00153057946a5b667877475bdb65923dd9af86acc6db63f3bbb9471de9735e4ed16a03b3c3a2c6da3118df" + "content" : "acb14999bcc8e0347f71ee453d3c58426e60de8f576904058391dbab16da82bfb0ac7083cdd73b6f26862b2ca06912cb" }, { "alg" : "SHA3-384", - "content" : "6defb43802dfd77c5a549fd7d28ffdf85711623dd24d28520e1e2d96677e47a69c5661029a028d7ca13ea3fa75697a00" + "content" : "75c0fed98b9486927c2c767745222e6b93e7c8af00727abbc871380d5bb2b9d71ba9a9bede424aedfc0c057e5c564d02" }, { "alg" : "SHA3-256", - "content" : "54265f768ea5687f500b148e81ac1c3a41c0ac1d9eeb3e2154ebe4507bef46f6" + "content" : "3ff452bc563a50565843c16d94fd729cdd4f76ce6b1847c5fd61d6504a6fb2a7" }, { "alg" : "SHA3-512", - "content" : "8530ff5df32f8250d5d3a68e81bf4f1e0d0add2a69fe6c2de5dc94b01bbe2e99a86fec11494f4d95239040ee2f736ae305c94b23376475ea7c981cdad6054c85" + "content" : "96ad4a5625e3d8c3b6df8a224e75597da826ca3438e1e0c6fe805cfc0d246822ab98794250913691ed1c5ce201b9e938ca6af648e9d2f5f842efdaad78599341" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.sonarsource.java/java-jsp@7.33.0.35775?type=jar", + "purl" : "pkg:maven/org.sonarsource.java/java-jsp@8.18.0.40025?type=jar", "externalReferences" : [ { "type" : "website", @@ -1816,160 +1807,322 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.java/java-jsp@7.33.0.35775?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.java/java-jsp@8.18.0.40025?type=jar" }, { - "group" : "org.apache.tomcat.embed", - "name" : "tomcat-embed-jasper", - "version" : "9.0.84", - "description" : "Core Tomcat implementation", + "publisher" : "SonarSource", + "group" : "org.sonarsource.analyzer-commons", + "name" : "sonar-analyzer-commons", + "version" : "2.18.0.3393", + "description" : "Logic useful for a language plugin", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "22b13ffeab24c14943b58adaee3d15f6" + "content" : "86c3f760a4c1790b1af5c16eb246f8e0" }, { "alg" : "SHA-1", - "content" : "5fcf71c9c39e54c9ca51c304dd7bb2f5558e3286" + "content" : "612043286321caa05aa4e7670b36dd41e826ae2d" }, { "alg" : "SHA-256", - "content" : "3f08ff872bf83defa70c20274ab597aaf23ea95c1ff50f4b98e0c9a2a25c1106" + "content" : "f7babd94546594b9d0427b1bf32cd8f60065b8e8d0a1436f6ac443b9faaa1bf0" }, { "alg" : "SHA-512", - "content" : "89d83d9250be2cfc2d1471133461107dd4fdab532439f7827771f7d2ac202a4c9d57aabed5a7f84fa7a5b1474ce67b60ccdfbd08e2fd4980af1cf133ac69a2c1" + "content" : "b1d166c1ea81d0c89afc9b27e6d9457e6cf0c45afc8de7fa37607ed14b379ddbc1cb1c31bd2ebc25be3c980f1cf145686256dc1b0217f8af73c69d5eb11bb0a3" }, { "alg" : "SHA-384", - "content" : "688680dcea5c8c055cfd461a29c601f0533bf448b9659d0491ee60107c9f8080fb91e2705cc319ab83cdc791f79b916e" + "content" : "1d1bde067e0de39df2d0a35bfda18e9082c4f208411d45488a632a61b0acb04270a4016ad481a7aab1107608d121b90a" }, { "alg" : "SHA3-384", - "content" : "0afb2f67992e9b3d891729c4f65c1804259180f459056f9e608c29d479eb5661a2eb23b46a240ff08d834c0940068f2b" + "content" : "74a471351b75abc4d02989bde9e597307c807683bbac455a3b50aa98928d7dbf3f85db1d4c090c7c7b87299603d1f568" }, { "alg" : "SHA3-256", - "content" : "58917d6995c9fc52fd102c6e26dad93af8e43ef5b8ee1dee7932c2aa947d261c" + "content" : "8a6c33facfe7d600d45ca3db4ef0e545e7bfa75a383ac9d05fe49df6ab695197" }, { "alg" : "SHA3-512", - "content" : "453c585ccdeb65f90a65d3e9d7aedfc0ef6d68cd3a905f24584802d7029b1d79d7bab4a28b2b0f9d12cc41d2c395b87ddcc8e6568e98aae21fd076ed1c4b7bb7" + "content" : "68308ba7a0a3196f866436123817431cda045808cf617084af2efb84f53aa6907841ba67653fad166a347f92de0de2b2fea573e5e2fda734306cb3ca3ecf3319" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0" + "name" : "GNU LGPL 3", + "url" : "http://www.gnu.org/licenses/lgpl.txt" } } ], - "purl" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@9.0.84?type=jar", + "purl" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.18.0.3393?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://tomcat.apache.org/" + "url" : "http://docs.sonarqube.org/display/PLUG/Plugin+Library/sonar-analyzer-commons-parent/sonar-analyzer-commons" + }, + { + "type" : "build-system", + "url" : "https://cirrus-ci.com/github/SonarSource/" + }, + { + "type" : "issue-tracker", + "url" : "http://jira.sonarsource.com" + }, + { + "type" : "mailing-list", + "url" : "https://community.sonarsource.com" + }, + { + "type" : "vcs", + "url" : "https://github.com/SonarSource/sonar-analyzer-commons/sonar-analyzer-commons" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@9.0.84?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.18.0.3393?type=jar" }, { - "group" : "org.apache.tomcat.embed", - "name" : "tomcat-embed-core", - "version" : "9.0.84", - "description" : "Core Tomcat implementation", + "publisher" : "SonarSource", + "group" : "org.sonarsource.analyzer-commons", + "name" : "sonar-xml-parsing", + "version" : "2.18.0.3393", + "description" : "Logic useful to read and analyze XML files", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "2a5bc72d7f698bc42784cb7afa20e808" + "content" : "42a57e652799b8d75ed82ed71af3e8a8" }, { "alg" : "SHA-1", - "content" : "d0cd4045defc2ecf7ccfdc901925eed427bcba3e" + "content" : "d776689581869043b0d5225d9def870872530ab9" }, { "alg" : "SHA-256", - "content" : "29daf71c4b5f5ed0c0983a83ebd96ee74df905e406534b4c5412cc92c2aca2b7" + "content" : "b383b5147a2b186d91f3efcca0cfa9be9e87371e79c0e61f38332b24f152286f" }, { "alg" : "SHA-512", - "content" : "e28752b186c5eaad6df750719e70bd9ab33f4924f293b622ed4a7198ad15fe5e998b6b7ddee230ce564e7ec0b71871fa5c2362f6c4cb65b2872e3f25ef0840e6" + "content" : "04334f2ed4bd53436f9ca5755f836df11147951e5e09ba375e7217a9ddb629172f550eddb978c1ecc3a9e76764db7c82aa05c925f53cb720ca6f0684c2d95197" }, { "alg" : "SHA-384", - "content" : "0df38c977446ce1bb1b6d17b544f3778b4891d6ef499bb1f53dfe8cca457ec8afdb8c061f17e966574d4fd9859517580" + "content" : "5cbbd8a9a784f94c77bac285538e6894c6cf67f5e5da50745633dab13583e6027c7b2620df4c0412cdcbb4bbf7dfb33f" }, { "alg" : "SHA3-384", - "content" : "eb18577b10a3e3cdabd0483e4545226f4fa8d8c2c3d8eb88b9782aeee1ae9d9bc03d76d19c6b5e886b668fe795d38975" + "content" : "3d74f27c2a90595595c59d4f3551e11037f70de03afb7669a59217a42c32e41318ccf53a4911e97c94d4ef7c5d909498" }, { "alg" : "SHA3-256", - "content" : "58006ad9c9fc8e3b18472ad550d72bcd7c9364ecdc586db3f194116694179bb8" + "content" : "e798859717811fa3dd11cdc3e7c518593dad3f1eea35e7880250c832cdb6c51e" }, { "alg" : "SHA3-512", - "content" : "bda4e7479e4b6015f78b24ffca33be9d99d0606acff96f4d18d8e713f261835e16cf26cce800657c28a279fcd1c3e8aa6e5050d5463e1850526364306e003e2a" + "content" : "757eb040f0c6dc7a39dfba5f3842962b27433593e7993fc755ecd2d2ab362ee58b04c95ea9f4817b43a518f51144f18cd1e9f85875a79c6234ef0f667f1ff536" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0" + "name" : "GNU LGPL 3", + "url" : "http://www.gnu.org/licenses/lgpl.txt" } } ], - "purl" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.84?type=jar", + "purl" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.18.0.3393?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://tomcat.apache.org/" + "url" : "http://docs.sonarqube.org/display/PLUG/Plugin+Library/sonar-analyzer-commons-parent/sonar-xml-parsing" + }, + { + "type" : "build-system", + "url" : "https://cirrus-ci.com/github/SonarSource/" + }, + { + "type" : "issue-tracker", + "url" : "http://jira.sonarsource.com" + }, + { + "type" : "mailing-list", + "url" : "https://community.sonarsource.com" + }, + { + "type" : "vcs", + "url" : "https://github.com/SonarSource/sonar-analyzer-commons/sonar-xml-parsing" + } + ], + "type" : "library", + "bom-ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.18.0.3393?type=jar" + }, + { + "group" : "com.google.code.findbugs", + "name" : "jsr305", + "version" : "3.0.2", + "description" : "JSR305 Annotations for Findbugs", + "scope" : "required", + "hashes" : [ + { + "alg" : "MD5", + "content" : "dd83accb899363c32b07d7a1b2e4ce40" + }, + { + "alg" : "SHA-1", + "content" : "25ea2e8b0c338a877313bd4672d3fe056ea78f0d" + }, + { + "alg" : "SHA-256", + "content" : "766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7" + }, + { + "alg" : "SHA-512", + "content" : "bb09db62919a50fa5b55906013be6ca4fc7acb2e87455fac5eaf9ede2e41ce8bbafc0e5a385a561264ea4cd71bbbd3ef5a45e02d63277a201d06a0ae1636f804" + }, + { + "alg" : "SHA-384", + "content" : "ca0b169d3eb2d0922dc031133a021f861a043bb3e405a88728215fd6ff00fa52fdc7347842dcc2031472e3726164bdc4" + }, + { + "alg" : "SHA3-384", + "content" : "9903fd7505218999f8262efedb3d935d64bcef84aae781064ab5e1b24755466b269517cada562fa140cd1d417ede57a1" + }, + { + "alg" : "SHA3-256", + "content" : "223fda9a89a461afaae73b177a2dc20ed4a90f2f8757f5c65f3241b0510f00ff" + }, + { + "alg" : "SHA3-512", + "content" : "3996b5af57a5d5c6a0cd62b11773360fb051dd86a2ba968476806a2a5d32049b82d69a24a3c694e8fe4d735be6a28e41000cc500cc2a9fb577e058045855d2d6" + } + ], + "licenses" : [ + { + "license" : { + "id" : "Apache-2.0" + } + } + ], + "purl" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", + "externalReferences" : [ + { + "type" : "website", + "url" : "http://findbugs.sourceforge.net/" + }, + { + "type" : "distribution-intake", + "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" + }, + { + "type" : "vcs", + "url" : "https://code.google.com/p/jsr-305/" + } + ], + "type" : "library", + "bom-ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar" + }, + { + "group" : "xerces", + "name" : "xercesImpl", + "version" : "2.12.2", + "description" : "Xerces2 provides high performance, fully compliant XML parsers in the Apache Xerces family. This new version of Xerces continues to build upon the Xerces Native Interface (XNI), a complete framework for building parser components and configurations that is extremely modular and easy to program. The Apache Xerces2 parser is the reference implementation of XNI but other parser components, configurations, and parsers can be written using the Xerces Native Interface. For complete design and implementation documents, refer to the XNI Manual. Xerces2 provides fully conforming XML Schema 1.0 and 1.1 processors. An experimental implementation of the \"XML Schema Definition Language (XSD): Component Designators (SCD) Candidate Recommendation (January 2010)\" is also provided for evaluation. For more information, refer to the XML Schema page. Xerces2 also provides a complete implementation of the Document Object Model Level 3 Core and Load/Save W3C Recommendations and provides a complete implementation of the XML Inclusions (XInclude) W3C Recommendation. It also provides support for OASIS XML Catalogs v1.1. Xerces2 is able to parse documents written according to the XML 1.1 Recommendation, except that it does not yet provide an option to enable normalization checking as described in section 2.13 of this specification. It also handles namespaces according to the XML Namespaces 1.1 Recommendation, and will correctly serialize XML 1.1 documents if the DOM level 3 load/save APIs are in use.", + "scope" : "required", + "hashes" : [ + { + "alg" : "MD5", + "content" : "40e4f2d5aacfbf51a9a1572d77a0e5e9" + }, + { + "alg" : "SHA-1", + "content" : "f051f988aa2c9b4d25d05f95742ab0cc3ed789e2" + }, + { + "alg" : "SHA-256", + "content" : "6fc991829af1708d15aea50c66f0beadcd2cfeb6968e0b2f55c1b0909883fe16" + }, + { + "alg" : "SHA-512", + "content" : "bfd21f2350bf0bb546a68d3303f28c6a15cee1e630138c169344c3f65fe39a15e61c6ff4e5239f38f2f1f9e488eff4d5565a4a0774263064ab6a30aa9fcaaed3" + }, + { + "alg" : "SHA-384", + "content" : "0a35ae0744f05973997b0710cc8d1d774867bc1c1b63ef5bf5f554d1b4c4ab42033f7819430e05ac623e7c8630aa7c52" + }, + { + "alg" : "SHA3-384", + "content" : "b016ed02d907b21c90b4a2560aa4c778e8aad1b5ecb0ba62777f668166c6e7b8a0c0deef7d1e63b7a9b1092c64c8a4a6" + }, + { + "alg" : "SHA3-256", + "content" : "875856aafff433840ee9933c01018cd18c0a13b46bd4472853698ef1dff83168" + }, + { + "alg" : "SHA3-512", + "content" : "1587332fb01515a72b7856b1f566070dcd26fef33c5070039c28684215466a9b9d3a4625cf7181443e3c3a67a313a938cf0775f39b96daf43f5edd4772143c23" + } + ], + "licenses" : [ + { + "license" : { + "id" : "Apache-2.0" + } + } + ], + "purl" : "pkg:maven/xerces/xercesImpl@2.12.2?type=jar", + "externalReferences" : [ + { + "type" : "website", + "url" : "https://xerces.apache.org/xerces2-j/" + }, + { + "type" : "vcs", + "url" : "https://svn.apache.org/repos/asf/xerces/java/" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.84?type=jar" + "bom-ref" : "pkg:maven/xerces/xercesImpl@2.12.2?type=jar" }, { - "group" : "org.apache.tomcat", - "name" : "tomcat-annotations-api", - "version" : "9.0.84", - "description" : "Annotations Package", + "group" : "xml-apis", + "name" : "xml-apis", + "version" : "1.4.01", + "description" : "xml-commons provides an Apache-hosted set of DOM, SAX, and JAXP interfaces for use in other xml-based projects. Our hope is that we can standardize on both a common version and packaging scheme for these critical XML standards interfaces to make the lives of both our developers and users easier. The External Components portion of xml-commons contains interfaces that are defined by external standards organizations. For DOM, that's the W3C; for SAX it's David Megginson and sax.sourceforge.net; for JAXP it's Sun.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "f590e2b4b16de6e9bc4b7f48380a79d3" + "content" : "7eaad6fea5925cca6c36ee8b3e02ac9d" }, { "alg" : "SHA-1", - "content" : "86186a099bb355a174243f812d58aaf113768b91" + "content" : "3789d9fada2d3d458c4ba2de349d48780f381ee3" }, { "alg" : "SHA-256", - "content" : "b801c2be650483f7a91a6c50a2a93768c0fddc7ec54d0ca0d5e69bc92ef2758a" + "content" : "a840968176645684bb01aed376e067ab39614885f9eee44abe35a5f20ebe7fad" }, { "alg" : "SHA-512", - "content" : "bfe97892d8e218adcd01a473ca51d7bc3a59bec953fca3752e19d73519972eb7665cf9fc098a74cafb8cdff8fc773ac32424af7b3e865d6bfdaafaab59cb9fb1" + "content" : "8db0283b6840cd6407957d296b802e3edf90653e2722f8e29f86c1c0b60996c4b43e9e065e6864dab89b2138ddb0174d9b4fdda4a93f94eeb884783db82f3268" }, { "alg" : "SHA-384", - "content" : "7a97a614983641796ef33723f036bfba309c4f6d1fdf860058c795d826ebe311248822a705880de9d48e5a6d456bc471" + "content" : "bce0ec0f0f692213a1110197c4a11c333673ae0630481255d12b441a8cba70aecfaf104c3d8d9b500ed2a0a19a2bfcce" }, { "alg" : "SHA3-384", - "content" : "4af95a177b0bd0b0477b61a15b167592cf5e8ea0973f756d7850a6792e0da215b2ac1995cdec027169f0e78dc6fa5487" + "content" : "c1d8154ef6eee57dfe6ae9a1c1a2525e9ec2aab3631911a53c064ea6480c0b3b1ce8dd079db7b3693d7ef81daba28ace" }, { "alg" : "SHA3-256", - "content" : "8c4a3599140a0e684eb0f5aac9cea0857687d00d8bb3dc175cc88ae26ffe8337" + "content" : "09eb76497eac5012ce1000c52f4e597c4941a44b9d960b1ac58a19beb2dd63fc" }, { "alg" : "SHA3-512", - "content" : "559a0b35852d37bc7115cd09ffb1684c6613eb5fde071e7503c483b46e32be0a7e2bc62d7386a999ac9e8c9d2548fed4c8d420465d0b8125f15fc554bf659a38" + "content" : "1e4eb902e50b3388da4d161ee49f4d47b61dddd2ad10e6ef6cbb67c4ebc9043e0b65ae59a4a0c8eb03dd28814ce4aedd7e0d4962a0aedc3bdcf7de37cde38f66" } ], "licenses" : [ @@ -1977,56 +2130,81 @@ "license" : { "id" : "Apache-2.0" } + }, + { + "license" : { + "id" : "SAX-PD", + "url" : "http://www.saxproject.org/copying.html" + } + }, + { + "license" : { + "name" : "The W3C License", + "url" : "http://www.w3.org/TR/2004/REC-DOM-Level-3-Core-20040407/java-binding.zip" + } } ], - "purl" : "pkg:maven/org.apache.tomcat/tomcat-annotations-api@9.0.84?type=jar", + "purl" : "pkg:maven/xml-apis/xml-apis@1.4.01?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://tomcat.apache.org/" + "url" : "http://xml.apache.org/commons/components/external/" + }, + { + "type" : "issue-tracker", + "url" : "http://issues.apache.org/bugzilla/" + }, + { + "type" : "mailing-list", + "url" : "http://mail-archives.apache.org/mod_mbox/xml-commons-dev/" + }, + { + "type" : "vcs", + "url" : "https://svn.apache.org/viewvc/xml/commons/tags/xml-commons-external-1_4_01/" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.apache.tomcat/tomcat-annotations-api@9.0.84?type=jar" + "bom-ref" : "pkg:maven/xml-apis/xml-apis@1.4.01?type=jar" }, { - "group" : "org.apache.tomcat.embed", - "name" : "tomcat-embed-el", - "version" : "9.0.84", - "description" : "Core Tomcat implementation", + "publisher" : "FasterXML", + "group" : "com.fasterxml.woodstox", + "name" : "woodstox-core", + "version" : "6.4.0", + "description" : "Woodstox is a high-performance XML processor that implements Stax (JSR-173), SAX2 and Stax2 APIs", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "3a0cd4945a15ee8d37f4b23cf2216e3d" + "content" : "afcba1114fca8199ef26346dd6011e90" }, { "alg" : "SHA-1", - "content" : "3fc7c06e3f2c23baf8bfd64320376fa701633602" + "content" : "c47579857bbf12c85499f431d4ecf27d77976b7c" }, { "alg" : "SHA-256", - "content" : "22370f6a152da44c9a7ea15e597f22ef6b057a8d3278f69ff50cc3452473bf97" + "content" : "d6eb9f2f40049a7a808baf11ffba0737648e62ff52fde9271d808e5d57a27279" }, { "alg" : "SHA-512", - "content" : "3373ff62438698fc3223e7474efca16bdc2a9dc9759e5815ccb8a0e3cc722ba2d581292b60b52eb1d86beb7c705b2640c81d69dfa7162f477d6ed1be8928d748" + "content" : "7da4cd51f7082e59b3cb78988cda78bf162e2b02457caf17242cb9cea9b8002ada15d4dfe774ca0355acdea95c88b67c4d06a27a61653cb84c9a46d27b2726c6" }, { "alg" : "SHA-384", - "content" : "7d018a18156839d5c3c92ac091a53710944e00955443f1a0b051b3cb40f0c7fc9a925efc776ab09f1f0a569102cca101" + "content" : "6e25d32eb4c127f7129ccd912ff882625d3fa43e8eba9bc55013a27a61806d1b865ec809bd21d58d3dbfa3d9e2a3d516" }, { "alg" : "SHA3-384", - "content" : "4f300a9fd6932daa3ff4db977860f66a7f88157e72e1481f1981d5597a4666daf76a309d5ff10312ba0968b56f0e4bbd" + "content" : "d384bf82404b7642340eb1a3f88e2d1e366bf3282534943f98c5f4946656f7e6ea86ba6c7bfeed7c4fda1678afdd282e" }, { "alg" : "SHA3-256", - "content" : "ac2d6743eafb0210717527467f014d8fd8ac97a12c5f2aaccf1922b01c4d268d" + "content" : "7d1e5fbd3f4197fcf6f4d097bc742a0b3f02fe9ae36ef4385362afab6cc85bee" }, { "alg" : "SHA3-512", - "content" : "656900dad4ca2261cdc8ffa7febfbf4edfe87e2cb32a8a34b830f0f3248ae707a473a82f69487a70003c3b2c0e92ed998c082ec22f172c86b8565b62b7df74ad" + "content" : "6020db3580dac2d5c0b7656a062b982d234952fc3feac5dfbb12f91bc019b6af430123ad46e5b5de28d7cb9562aec582febdbbfae8ce35ebc2ce0b837a335af6" } ], "licenses" : [ @@ -2036,55 +2214,67 @@ } } ], - "purl" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.84?type=jar", + "purl" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.4.0?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://tomcat.apache.org/" + "url" : "https://github.com/FasterXML/woodstox" + }, + { + "type" : "distribution-intake", + "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" + }, + { + "type" : "issue-tracker", + "url" : "https://github.com/FasterXML/woodstox/issues" + }, + { + "type" : "vcs", + "url" : "https://github.com/FasterXML/woodstox" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.84?type=jar" + "bom-ref" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.4.0?type=jar" }, { "publisher" : "SonarSource", "group" : "org.sonarsource.analyzer-commons", - "name" : "sonar-analyzer-commons", - "version" : "2.8.0.2699", - "description" : "Logic useful for a language plugin", + "name" : "sonar-performance-measure", + "version" : "2.18.0.3393", + "description" : "Logic to capture a hierarchy of performance measures, save it into a file, and merge files", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "e1a59ec0809b06b3f5e2c8e97a76b218" + "content" : "1854d57f67661c6950374be29145a017" }, { "alg" : "SHA-1", - "content" : "cada74c92a33d57d5bdb70b8178a9006754e601c" + "content" : "eb02954016253fd34551a4641e3215fdafc239c6" }, { "alg" : "SHA-256", - "content" : "e9e17c3b6e02624cc1981dc7c2100f9ea67b96aec66e6a785e0ed5202febd854" + "content" : "4a3f60003f00a88695158a522cfbb7119c2c696991f13b7ca391e7c1eaf46d34" }, { "alg" : "SHA-512", - "content" : "9197a2c16edd4ccbc39a33fe75e4a4175700306d9d1df2f4e146de37728aa8483a3355993bb8e8fb77ef9ff17490427cf55566d81364d82495f3e49c62ee21f2" + "content" : "f3f2cc2211f00a66c33cd81ef996557fda3ee89421b2fc4565c376dadc22dc2a25eb327e5dfa041f3c48b8fa8620b797ec6762fd74d3ddde0184e6598c211d39" }, { "alg" : "SHA-384", - "content" : "8385239d7eb9d7bc972fbb63ed5d887b2089129844037c957f0cc5bcd34b8a20deea0531022af0832193f020e94ad5fe" + "content" : "54138af00ebd5d85cb2f776d75d2455de1a058e657dff84d8e19a563d720fa819a1efd4d432a1d3c2dcb2fa31158c184" }, { "alg" : "SHA3-384", - "content" : "ce192d54341470644acee6f91217ddeb62f28d1ac2da58b0f73fb8ec9e5278463457f74dc4a264349051b6fc3dc25c3a" + "content" : "7855e1aba9691493ebd9a5d79ace4cbccdc1f9fd9194a8300f6b71367014e7fdaf04a7aa9db87ed195b7d738552e6080" }, { "alg" : "SHA3-256", - "content" : "a521179e465dec4a69e93e393df68d9c6719f393654a1e584bd3ff7a0cd39891" + "content" : "f65d3d9a6737a6bd62c31d2d463d011512c3aa434d0575d6e54a95dc00bc5c6e" }, { "alg" : "SHA3-512", - "content" : "36968ac582180921cb12e613073d261111b81ca042e47624bc07176f6926c6f7a40a11077e51d5e460add84747348b4a962cda95c6b6c1ffe372e032c570ad89" + "content" : "34d64169af99b65d4ee59cfd414e189af6ea00ae5118aae5976e1ec76752631138c08eae42b96e95f9668123bbe44a17907c7556003e0dfd988723fc50db0d31" } ], "licenses" : [ @@ -2095,11 +2285,11 @@ } } ], - "purl" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.8.0.2699?type=jar", + "purl" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.18.0.3393?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://docs.sonarqube.org/display/PLUG/Plugin+Library/sonar-analyzer-commons-parent/sonar-analyzer-commons" + "url" : "http://docs.sonarqube.org/display/PLUG/Plugin+Library/sonar-analyzer-commons-parent/sonar-performance-measure" }, { "type" : "build-system", @@ -2115,74 +2305,74 @@ }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-analyzer-commons/sonar-analyzer-commons" + "url" : "https://github.com/SonarSource/sonar-analyzer-commons/sonar-performance-measure" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.8.0.2699?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.18.0.3393?type=jar" }, { "publisher" : "SonarSource", - "group" : "org.sonarsource.analyzer-commons", - "name" : "sonar-xml-parsing", - "version" : "2.8.0.2699", - "description" : "Logic useful to read and analyze XML files", + "group" : "org.sonarsource.python", + "name" : "sonar-python-plugin", + "version" : "5.16.0.29940", + "description" : "Code Analyzer for Python", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "eeb2d8b488da7bd7c98cfb49b3d06830" + "content" : "96af3be952506f19faa9797702af83d2" }, { "alg" : "SHA-1", - "content" : "03e14b69bc7a2abbc0a595851f8f31540b208dd6" + "content" : "7358996b700859eefb489750874f6b276555ae44" }, { "alg" : "SHA-256", - "content" : "408ec4b66b8fda3fe8a333858aed7cbb3340f570790468f8a789de4cbf2c8c91" + "content" : "161047717514eb4299847263ccb553df5e5be8fc9ceb081aaf4015fa834c734a" }, { "alg" : "SHA-512", - "content" : "35be20dfa7f82d0ba024c2614359e4b52ac295a2c416d854103b3a7f9739d04e2eb3bb927064fe9ac11ed9dbe5f91f8a266fd16a2ed40675b50c43836d132829" + "content" : "09689460be8675a15d4f1c2cecb868563c94a54c311f992bdd190aef37300a80760966216f73c12824765d7a7562735799b9c08f0606f465b03c299778110b31" }, { "alg" : "SHA-384", - "content" : "426ea2055c0c9f6642b68a7b2eccbf4d7ee802dd3bfc010564b108a8c5cf54a3a9ce7fd3d07ab4adbbd54fa52bee64b5" + "content" : "bc18a99dabb6a1f04cd2bfdaffd3e1ba70688d16716b8cf40c9a751e94c6312b721b31478d7ea1baf3095da0654e6ae1" }, { "alg" : "SHA3-384", - "content" : "9bfe10431714c647f99ce6b8e4d8eaaa6b80862985380a5ce4da37cdcf95cf324f9008b9dd46e81e8ecaacd19fa8e1c3" + "content" : "5d4803f25bb278676d6aa3ec55c6fd4db93fb42d5966fe73f0d7c6ecc2edcd2633154defacccd021b82574399e095c6c" }, { "alg" : "SHA3-256", - "content" : "2c47cf7bd11d40d40d1da9406bbd00a578bee08621cf341598d8fad4c4e8f7d9" + "content" : "b5898d3547c883a1aeaeb1175ed6bf9b691ae896210df2a0ce22b74295ddc004" }, { "alg" : "SHA3-512", - "content" : "4eb5a2b0f0b527231f0bfb1bae4c798713e615a7c5929c0ac09f49b3d9fa5eb12cee0775842e6b7033d7163803a3737595fdf9f221eeaef69e43875c87b6c3bf" + "content" : "22c2445b64a2d200eb021df6bf93ef083c5487bde5c7923df897941445fd7f77eb9eac76542924195c8fdf17d43a3336a9b91f7c507ce8c36265447d8b77472c" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.8.0.2699?type=jar", + "purl" : "pkg:maven/org.sonarsource.python/sonar-python-plugin@5.16.0.29940?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://docs.sonarqube.org/display/PLUG/Plugin+Library/sonar-analyzer-commons-parent/sonar-xml-parsing" + "url" : "http://redirect.sonarsource.com/plugins/python.html" }, { "type" : "build-system", - "url" : "https://cirrus-ci.com/github/SonarSource/" + "url" : "https://cirrus-ci.com/github/SonarSource/sonar-python" }, { "type" : "issue-tracker", - "url" : "http://jira.sonarsource.com" + "url" : "https://jira.sonarsource.com/browse/SONARPY" }, { "type" : "mailing-list", @@ -2190,193 +2380,262 @@ }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-analyzer-commons/sonar-xml-parsing" + "url" : "https://github.com/SonarCommunity/sonar-python" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.8.0.2699?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.python/sonar-python-plugin@5.16.0.29940?type=jar" }, { - "group" : "xerces", - "name" : "xercesImpl", - "version" : "2.12.2", - "description" : "Xerces2 provides high performance, fully compliant XML parsers in the Apache Xerces family. This new version of Xerces continues to build upon the Xerces Native Interface (XNI), a complete framework for building parser components and configurations that is extremely modular and easy to program. The Apache Xerces2 parser is the reference implementation of XNI but other parser components, configurations, and parsers can be written using the Xerces Native Interface. For complete design and implementation documents, refer to the XNI Manual. Xerces2 provides fully conforming XML Schema 1.0 and 1.1 processors. An experimental implementation of the \"XML Schema Definition Language (XSD): Component Designators (SCD) Candidate Recommendation (January 2010)\" is also provided for evaluation. For more information, refer to the XML Schema page. Xerces2 also provides a complete implementation of the Document Object Model Level 3 Core and Load/Save W3C Recommendations and provides a complete implementation of the XML Inclusions (XInclude) W3C Recommendation. It also provides support for OASIS XML Catalogs v1.1. Xerces2 is able to parse documents written according to the XML 1.1 Recommendation, except that it does not yet provide an option to enable normalization checking as described in section 2.13 of this specification. It also handles namespaces according to the XML Namespaces 1.1 Recommendation, and will correctly serialize XML 1.1 documents if the DOM level 3 load/save APIs are in use.", + "publisher" : "SonarSource", + "group" : "org.sonarsource.python", + "name" : "python-frontend", + "version" : "5.16.0.29940", + "description" : "Parent pom of SonarSource public projects", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "40e4f2d5aacfbf51a9a1572d77a0e5e9" + "content" : "af8fb4754bb34b00450e1886e6e35f24" }, { "alg" : "SHA-1", - "content" : "f051f988aa2c9b4d25d05f95742ab0cc3ed789e2" + "content" : "3d29bbb908e0740432fd9e29f6f9fef3b61fa8bf" }, { "alg" : "SHA-256", - "content" : "6fc991829af1708d15aea50c66f0beadcd2cfeb6968e0b2f55c1b0909883fe16" + "content" : "2bf0a615cb8804200e9de8c3b407b6a928a16b34349f43c76bf9f6c548e8000c" }, { "alg" : "SHA-512", - "content" : "bfd21f2350bf0bb546a68d3303f28c6a15cee1e630138c169344c3f65fe39a15e61c6ff4e5239f38f2f1f9e488eff4d5565a4a0774263064ab6a30aa9fcaaed3" + "content" : "0b42071f37c0cf8dfc46c3a3ed915bdc1d99b0bc41706200305c7f962f7b14c79e19eb42f99488b874d45267015de3f9762d903d6c03c7fb1c4bd1ac331c45d8" }, { "alg" : "SHA-384", - "content" : "0a35ae0744f05973997b0710cc8d1d774867bc1c1b63ef5bf5f554d1b4c4ab42033f7819430e05ac623e7c8630aa7c52" + "content" : "5411758030a57ffedc16b7b9f93592107920e01b27b8b6b98c3cb0cec1bbb3eecfc0dfc36ba130b2616507a703938560" }, { "alg" : "SHA3-384", - "content" : "b016ed02d907b21c90b4a2560aa4c778e8aad1b5ecb0ba62777f668166c6e7b8a0c0deef7d1e63b7a9b1092c64c8a4a6" + "content" : "d2054bd5b799463c0364aebef1024584f37fc63b122b0d9a137d5d052b152ef3b23ebb64961222adc72f30e49ccdbe3d" }, { "alg" : "SHA3-256", - "content" : "875856aafff433840ee9933c01018cd18c0a13b46bd4472853698ef1dff83168" + "content" : "6eaa8027ba8e0f7c11c2a2da14084630735110429505016fd92d8292c33637f4" }, { "alg" : "SHA3-512", - "content" : "1587332fb01515a72b7856b1f566070dcd26fef33c5070039c28684215466a9b9d3a4625cf7181443e3c3a67a313a938cf0775f39b96daf43f5edd4772143c23" + "content" : "35de0af96a078f4bc7709776d051b3d40c5f965647096114d33cb47c2fda0aacef5453af4475302a074e351c796b30315daa182fc69f780f515ac046a19e9ff0" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/xerces/xercesImpl@2.12.2?type=jar", + "purl" : "pkg:maven/org.sonarsource.python/python-frontend@5.16.0.29940?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://xerces.apache.org/xerces2-j/" + "url" : "https://docs.sonarsource.com/sonarqube-server/latest/extension-guide/developing-a-plugin/plugin-basics/python/python-frontend/" + }, + { + "type" : "build-system", + "url" : "https://cirrus-ci.com/github/SonarSource/sonar-python" + }, + { + "type" : "issue-tracker", + "url" : "https://jira.sonarsource.com/browse/SONARPY" + }, + { + "type" : "mailing-list", + "url" : "https://community.sonarsource.com" }, { "type" : "vcs", - "url" : "https://svn.apache.org/repos/asf/xerces/java/" + "url" : "https://github.com/SonarSource/sonar-python/python-frontend" } ], "type" : "library", - "bom-ref" : "pkg:maven/xerces/xercesImpl@2.12.2?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.python/python-frontend@5.16.0.29940?type=jar" }, { - "group" : "xml-apis", - "name" : "xml-apis", - "version" : "1.4.01", - "description" : "xml-commons provides an Apache-hosted set of DOM, SAX, and JAXP interfaces for use in other xml-based projects. Our hope is that we can standardize on both a common version and packaging scheme for these critical XML standards interfaces to make the lives of both our developers and users easier. The External Components portion of xml-commons contains interfaces that are defined by external standards organizations. For DOM, that's the W3C; for SAX it's David Megginson and sax.sourceforge.net; for JAXP it's Sun.", + "group" : "com.google.protobuf", + "name" : "protobuf-java", + "version" : "4.29.0", + "description" : "Core Protocol Buffers library. Protocol Buffers are a way of encoding structured data in an efficient yet extensible format.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "7eaad6fea5925cca6c36ee8b3e02ac9d" + "content" : "5de9c1cc9a647278ab03d76ccfb8ff9d" }, { "alg" : "SHA-1", - "content" : "3789d9fada2d3d458c4ba2de349d48780f381ee3" + "content" : "ffea90ab158435d68de76951857ef5f8b0f98365" }, { "alg" : "SHA-256", - "content" : "a840968176645684bb01aed376e067ab39614885f9eee44abe35a5f20ebe7fad" + "content" : "16901851ebe5e89fe88aaad3c26866373695bc2e30627bb8932847e2f5fc2e76" }, { "alg" : "SHA-512", - "content" : "8db0283b6840cd6407957d296b802e3edf90653e2722f8e29f86c1c0b60996c4b43e9e065e6864dab89b2138ddb0174d9b4fdda4a93f94eeb884783db82f3268" + "content" : "ed9aae4faa56c04dc086af07078db3734f675eb4188bb2be98c94cc59a8e4e77b74195c47d70c7b697bc3b938e106fdc137ffda5358b3029795f28e7d9216d68" }, { "alg" : "SHA-384", - "content" : "bce0ec0f0f692213a1110197c4a11c333673ae0630481255d12b441a8cba70aecfaf104c3d8d9b500ed2a0a19a2bfcce" + "content" : "d204ff730ba5eff0eddd9439f05ab89e87194fc6c69d50054da593ab7537495207374840701867856ea1e9aa87ef1e14" }, { "alg" : "SHA3-384", - "content" : "c1d8154ef6eee57dfe6ae9a1c1a2525e9ec2aab3631911a53c064ea6480c0b3b1ce8dd079db7b3693d7ef81daba28ace" + "content" : "9a3dc4e7ef4e1488b6ee4a653d9f47569bb3f543012ec20fe695d1bba2a7da8e329ffe70d5ef8e43fd9da1721fe3f3c1" }, { "alg" : "SHA3-256", - "content" : "09eb76497eac5012ce1000c52f4e597c4941a44b9d960b1ac58a19beb2dd63fc" + "content" : "16fec3a2d08bcc363c69d2a260a78020636d94dd4ed929050d8e8b51d37960f0" }, { "alg" : "SHA3-512", - "content" : "1e4eb902e50b3388da4d161ee49f4d47b61dddd2ad10e6ef6cbb67c4ebc9043e0b65ae59a4a0c8eb03dd28814ce4aedd7e0d4962a0aedc3bdcf7de37cde38f66" + "content" : "37c5a864aa97fd50a88a5c9b2a9c7eedd646eb4655ec041502e1892efb55b2f22e9f2292dcca120e74755a11f92dc41616e1dc6919d8906fe2c5802e25ed1187" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0" + "id" : "BSD-3-Clause", + "url" : "https://opensource.org/licenses/BSD-3-Clause" } + } + ], + "purl" : "pkg:maven/com.google.protobuf/protobuf-java@4.29.0?type=jar", + "externalReferences" : [ + { + "type" : "website", + "url" : "https://developers.google.com/protocol-buffers/protobuf-java/" }, { - "license" : { - "id" : "SAX-PD", - "url" : "http://www.saxproject.org/copying.html" - } + "type" : "distribution-intake", + "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, + { + "type" : "vcs", + "url" : "https://github.com/protocolbuffers/protobuf/protobuf-java" + } + ], + "type" : "library", + "bom-ref" : "pkg:maven/com.google.protobuf/protobuf-java@4.29.0?type=jar" + }, + { + "publisher" : "FasterXML", + "group" : "com.fasterxml.jackson.core", + "name" : "jackson-databind", + "version" : "2.20.1", + "description" : "General data-binding functionality for Jackson: works on core streaming API", + "scope" : "required", + "hashes" : [ + { + "alg" : "MD5", + "content" : "49d7b7226df5ed4a036e48997a03d066" + }, + { + "alg" : "SHA-1", + "content" : "9586a7fe0e1775de0e54237fa6a2c8455c93ac06" + }, + { + "alg" : "SHA-256", + "content" : "34bbeb4526fff4f8565b12106bf85a6afcbae858966d489b54214ac46b2e26e8" + }, + { + "alg" : "SHA-512", + "content" : "16906e9c2f1962649eb21de148f362fedf2ce903c7ca0e6d68a01d43dbe8402b70cc537c104f36bc40a2bed6601162e7c21663735582e25bff7e27852be1405d" + }, + { + "alg" : "SHA-384", + "content" : "0591935cdfed1d65fa4a2820133ba129384f71921228ffe093f343d3ebf0b699762810d9208641726111015f0e35753b" + }, + { + "alg" : "SHA3-384", + "content" : "855ccd449944e7884f8088c8c5b224e6e2f63bcd3123502618b4f5ded025e5978143af8c5d31215276932bc3bb089472" + }, + { + "alg" : "SHA3-256", + "content" : "53732171c9f2bdeaa40017a34683a00ac11e8a8c1bcefaed07eb91e629e20376" + }, + { + "alg" : "SHA3-512", + "content" : "05017efae94bc3c83131aaaa7911f20e7c367502cd2cd05c6cedabc877b55724bcde2521ba1da15bf1c1c3ccb1a235124b39b2d4860142f2b89d4df197cf5c83" + } + ], + "licenses" : [ { "license" : { - "name" : "The W3C License", - "url" : "http://www.w3.org/TR/2004/REC-DOM-Level-3-Core-20040407/java-binding.zip" + "id" : "Apache-2.0" } } ], - "purl" : "pkg:maven/xml-apis/xml-apis@1.4.01?type=jar", + "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://xml.apache.org/commons/components/external/" + "url" : "https://github.com/FasterXML/jackson" }, { - "type" : "issue-tracker", - "url" : "http://issues.apache.org/bugzilla/" + "type" : "distribution-intake", + "url" : "https://central.sonatype.com/api/v1/publisher" }, { - "type" : "mailing-list", - "url" : "http://mail-archives.apache.org/mod_mbox/xml-commons-dev/" + "type" : "issue-tracker", + "url" : "https://github.com/FasterXML/jackson-databind/issues" }, { "type" : "vcs", - "url" : "https://svn.apache.org/viewvc/xml/commons/tags/xml-commons-external-1_4_01/" + "url" : "https://github.com/FasterXML/jackson-databind" } ], "type" : "library", - "bom-ref" : "pkg:maven/xml-apis/xml-apis@1.4.01?type=jar" + "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1?type=jar" }, { "publisher" : "FasterXML", - "group" : "com.fasterxml.woodstox", - "name" : "woodstox-core", - "version" : "6.4.0", - "description" : "Woodstox is a high-performance XML processor that implements Stax (JSR-173), SAX2 and Stax2 APIs", + "group" : "com.fasterxml.jackson.core", + "name" : "jackson-annotations", + "version" : "2.20", + "description" : "Core annotations used for value types, used by Jackson data binding package.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "afcba1114fca8199ef26346dd6011e90" + "content" : "b901def3c20752817f27130e4b8d6640" }, { "alg" : "SHA-1", - "content" : "c47579857bbf12c85499f431d4ecf27d77976b7c" + "content" : "6a5e7291ea3f2b590a7ce400adb7b3aea4d7e12c" }, { "alg" : "SHA-256", - "content" : "d6eb9f2f40049a7a808baf11ffba0737648e62ff52fde9271d808e5d57a27279" + "content" : "959a2ffb2d591436f51f183c6a521fc89347912f711bf0cae008cdf045d95319" }, { "alg" : "SHA-512", - "content" : "7da4cd51f7082e59b3cb78988cda78bf162e2b02457caf17242cb9cea9b8002ada15d4dfe774ca0355acdea95c88b67c4d06a27a61653cb84c9a46d27b2726c6" + "content" : "8926d89bfe7f427c7793f6af619249540f23f82eae055dd03d4cb163ff603a43dd6a3ebe43528d00789aed3df0dd2f10e08552fdec53e2691849b9769f57f0c9" }, { "alg" : "SHA-384", - "content" : "6e25d32eb4c127f7129ccd912ff882625d3fa43e8eba9bc55013a27a61806d1b865ec809bd21d58d3dbfa3d9e2a3d516" + "content" : "40ee4c1438a5a190624dff9deca83377f7e60690b4535359b2a79924f736bff7c8d077e5b01c6c8972735dc152f2ccf4" }, { "alg" : "SHA3-384", - "content" : "d384bf82404b7642340eb1a3f88e2d1e366bf3282534943f98c5f4946656f7e6ea86ba6c7bfeed7c4fda1678afdd282e" + "content" : "0fc0f697d03692b63c2b11fcabac51c630278ed6df15420975263ea4ad19418b3b71b7889497ed20a150035f9bcba79d" }, { "alg" : "SHA3-256", - "content" : "7d1e5fbd3f4197fcf6f4d097bc742a0b3f02fe9ae36ef4385362afab6cc85bee" + "content" : "6bf49e384735969af020f758b255ceed26af92d4cf456f6e7b83e8de53289f93" }, { "alg" : "SHA3-512", - "content" : "6020db3580dac2d5c0b7656a062b982d234952fc3feac5dfbb12f91bc019b6af430123ad46e5b5de28d7cb9562aec582febdbbfae8ce35ebc2ce0b837a335af6" + "content" : "3372f6c456a7f6a33ebc3ecc65daaf36288be2a14b1f2cb9fcd7387c07acab1c69ae803a366e5d12adf4934970ffd2e34017917c5f16a6d563bc94810f228ab3" } ], "licenses" : [ @@ -2386,157 +2645,152 @@ } } ], - "purl" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.4.0?type=jar", + "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.20?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://github.com/FasterXML/woodstox" + "url" : "https://github.com/FasterXML/jackson" }, { "type" : "distribution-intake", - "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" + "url" : "https://central.sonatype.com/api/v1/publisher" }, { "type" : "issue-tracker", - "url" : "https://github.com/FasterXML/woodstox/issues" + "url" : "https://github.com/FasterXML/jackson-annotations/issues" }, { "type" : "vcs", - "url" : "https://github.com/FasterXML/woodstox" + "url" : "https://github.com/FasterXML/jackson-annotations" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.4.0?type=jar" + "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.20?type=jar" }, { - "publisher" : "SonarSource", - "group" : "org.sonarsource.analyzer-commons", - "name" : "sonar-performance-measure", - "version" : "2.8.0.2699", - "description" : "Logic to capture a hierarchy of performance measures, save it into a file, and merge files", + "publisher" : "FasterXML", + "group" : "com.fasterxml.jackson.core", + "name" : "jackson-core", + "version" : "2.20.1", + "description" : "Core Jackson processing abstractions (aka Streaming API), implementation for JSON", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "bfdcb3a88a97fe66b288f61921bab1ae" + "content" : "889b2c417b61c9f4f460b06957147234" }, { "alg" : "SHA-1", - "content" : "0ecfd7e49341de39ad53f9608c31f30b6a10c441" + "content" : "5734323adfece72111769b0ae38a6cf803e3d178" }, { "alg" : "SHA-256", - "content" : "ebba386ff08f8bbe6e9a37a0666e91c8c8561af5e8b24de484a520e828ec64e7" + "content" : "ffab4d957daa2796cf24cb66d0b78a7090f1bcbe17c3a4578f09affaaf137089" }, { "alg" : "SHA-512", - "content" : "02d37166706b1a93248cfb82731318304950162814292a295f0252d0f5d7ec734cedaf4a9f960d30c85dc8bac0ee59d75089f5ae10c88212b98e4de7ef7c4d8b" + "content" : "0463e1c2e1d8e8cfa4954dfce491583f0ec9ec1de6e6f342d1e5f0c63dcfb959673552a279ec4e6b6cc69e6ac2de6d42dd512149ceb76620b5d780db7325e6a7" }, { "alg" : "SHA-384", - "content" : "84f70dfb7e80d7a6c1dad5ac31ce743f0da036e683881acf172d35f7d21ccbb3296165b88fcd4b2167cdc1234956bcdb" + "content" : "a279b2d57d019a05f65762ce670ce23e02466b11276d8c0687f3bb5ed40a8a1854bfe6dd2dc157d0f5695186f7d9a65a" }, { "alg" : "SHA3-384", - "content" : "e89f15bf1b1ff83ce691bd755daab7a6ac6cfb416ccdc12ebd1a7f427da2224c4b8371062ebaa3fa63ba878473e7a8d2" + "content" : "06b9f33e030a99fa95d171118ab668bee42e32b35b85e05750f8514128dbadc94026afde16dbadc0ff786027b09712a4" }, { "alg" : "SHA3-256", - "content" : "c08c9694411c5561032ace350fb1bb2201f3bfd0aa217e48047a399eb26e26c2" + "content" : "3e83a1a349d8ba3a4e76ee983f04b259a85263dda5090f55aae5535109c4b6c0" }, { "alg" : "SHA3-512", - "content" : "a47781adf6a0dd209579e9c09ddb1f53c88bf89dadd4a7829655599eaea3399f9a71cf7e3b9c831c0f7e86904d5de2e97a6c3df8c0c0126ce8f4f4ad73cda1a3" + "content" : "87b3a61a71a625adfc6b9b402079c26b223e19535ca5af07e4130932d479f9c22e90696911050d8ab8a09a6209651fe2f25f54d7d9a1493b6dab6f8acb76203d" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "id" : "Apache-2.0" } } ], - "purl" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.8.0.2699?type=jar", + "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.1?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://docs.sonarqube.org/display/PLUG/Plugin+Library/sonar-analyzer-commons-parent/sonar-performance-measure" + "url" : "https://github.com/FasterXML/jackson-core" }, { - "type" : "build-system", - "url" : "https://cirrus-ci.com/github/SonarSource/" + "type" : "distribution-intake", + "url" : "https://central.sonatype.com/api/v1/publisher" }, { "type" : "issue-tracker", - "url" : "http://jira.sonarsource.com" - }, - { - "type" : "mailing-list", - "url" : "https://community.sonarsource.com" + "url" : "https://github.com/FasterXML/jackson-core/issues" }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-analyzer-commons/sonar-performance-measure" + "url" : "https://github.com/FasterXML/jackson-core" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.8.0.2699?type=jar" + "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.1?type=jar" }, { - "publisher" : "SonarSource and Waleri Enns", + "publisher" : "SonarSource", "group" : "org.sonarsource.python", - "name" : "sonar-python-plugin", - "version" : "4.17.0.14845", - "description" : "Code Analyzer for Python", + "name" : "python-checks", + "version" : "5.16.0.29940", + "description" : "Parent pom of SonarSource public projects", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "a1f37ca54b6407c29e14d6a84ef527be" + "content" : "c6a6f14dd43b2ca777639d045d371686" }, { "alg" : "SHA-1", - "content" : "d2a19e1624695b1a8bf7691c028be1c1d795c3b4" + "content" : "7420c64bb23358297f8fb465d194b0abc81a268d" }, { "alg" : "SHA-256", - "content" : "4745222f0e3ff47ae4bef17fe6e6c8f50234c69d4992e81628c52217f3443564" + "content" : "8d71a04ae268809a329169124e821538409f323c25738a787f1004691830947a" }, { "alg" : "SHA-512", - "content" : "7fb3dc79348493ea5a16c8a436db16665126137f0dfcc146fd75dac317a686c26f81499e5a370341e87374fe28006670f48d7424ab2c7988e8e51a842872fc4a" + "content" : "49cc6c1c1f6d4ab7691e52ee582edc2dc4320706f0cba8b0264232bb8c648e0c1411fc349480d4126909275bc722a26ce7dc1d0442b0fe800d68e43dd502e8e0" }, { "alg" : "SHA-384", - "content" : "55bff9b2c2d2fede0efcaa6c64835bb2e42e94d4ba6196168d4d5b2f7fbd65cd8c03ae85f39937d27f873edcc359d565" + "content" : "0ec195c2cd805ba066715992213efab8234ad4fea211d38c11621b764ce81a82ec4eb13f372c3a6ae77663319de497ca" }, { "alg" : "SHA3-384", - "content" : "f38a0bc3cfd4b5d024c210e71fc0b63f41cc4bbac4bc501905fad95ceda64f81e39c3a53ca50b5c1e25250e802ce8a92" + "content" : "d59fe66bc7a1621385b1a8e6d9e7e9aba25f5bcd1bf7460aaeea718a9fdefa1f01d65bc6bbf08c4ea20d6ff5533321d5" }, { "alg" : "SHA3-256", - "content" : "2a9a49aac638a35dbc0ec3d31a79cb92a87bb148ce46ca7072bbb4d732a0cda6" + "content" : "6b6d15ca4b8e534cfb0a5b3a9dc4ea328d07647a6a5029cc5bc36cc0e33f4ae7" }, { "alg" : "SHA3-512", - "content" : "5861b8fa999a2e4117429bf16c4ee05f765050a41ca59fd6beb2499ac24020a0693f366b6807bce569cf789be4ef075ab320aa02580712ad32d0b10a0b1b34d4" + "content" : "258f4367d5303ee344945915f54637c52cdfd441d3ec1a642172dd417815e38993f14b35154b0d9c7d3f49dfad666e9cb2ca26a9993f52815180b4bb6bdf8dce" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.sonarsource.python/sonar-python-plugin@4.17.0.14845?type=jar", + "purl" : "pkg:maven/org.sonarsource.python/python-checks@5.16.0.29940?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://redirect.sonarsource.com/plugins/python.html" + "url" : "https://docs.sonarsource.com/sonarqube-server/latest/extension-guide/developing-a-plugin/plugin-basics/python/python-checks/" }, { "type" : "build-system", @@ -2552,66 +2806,66 @@ }, { "type" : "vcs", - "url" : "https://github.com/SonarCommunity/sonar-python" + "url" : "https://github.com/SonarSource/sonar-python/python-checks" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.python/sonar-python-plugin@4.17.0.14845?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.python/python-checks@5.16.0.29940?type=jar" }, { - "publisher" : "SonarSource and Waleri Enns", + "publisher" : "SonarSource", "group" : "org.sonarsource.python", - "name" : "python-frontend", - "version" : "4.17.0.14845", + "name" : "python-commons", + "version" : "5.16.0.29940", "description" : "Parent pom of SonarSource public projects", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "c55cb48cedabf79f2877ebb9d88f6b58" + "content" : "9d94ffb59a75cf874e054eb124bc1815" }, { "alg" : "SHA-1", - "content" : "4ff8dfa5ea7d5ad5847562d95396b919308caea3" + "content" : "0c4756f9dd9cc5caf3acc856171694e2fa033bcc" }, { "alg" : "SHA-256", - "content" : "437b54530740f33ae5e46bdf8348d1440684f7d1cb318a7ee058689bd9b97c76" + "content" : "5fb75ed5d0f7767f3d5877e1fc44a2cb4498b83c482e1e4cefd5c878f118225e" }, { "alg" : "SHA-512", - "content" : "4928573b4dde5237b3056a25d01fdcaa0d8477f66517d0939d332ff8ba434b6a03d884095701f4b571af131b3afc6b57feee148d69d86b8e62a3a4d39d2d1001" + "content" : "d8aa8345c5a55aa6a9cbcb261277e0f36e4756ea4a4d9dc99410053781a6305f9c98e1d0c2f0253e9e6140c40f6f9f19da26e7e85913407b42b20808aebfe9f0" }, { "alg" : "SHA-384", - "content" : "859f11ab3b6590bc07f6a082ef8d87775939341e064abd4c840ad326640c71b84e99a8ae281f0bece8bd5b8196db1c0d" + "content" : "ee39919d1c32d29c16e41ef2259b5b71f5670244c9c9b1224972eb4d38c90e963dedb6108ce8c0243e322086e585a3da" }, { "alg" : "SHA3-384", - "content" : "7dc1a501021011058c6e46cf0e069103aca9687de27aea29c42196af8d74c09ed668ec77284abafc12d635f4e0c9154e" + "content" : "ddc8bf3b9b5d30bb0916c90f676061729666587f674827a29dcb21a08fe4d59e42f5ce818c5730e2aa21f1befa74c130" }, { "alg" : "SHA3-256", - "content" : "84a8def8e68682978bda393edba28e6caa7d4c333fffce5c09a24e54a4104d20" + "content" : "da0ff73c07625578b2d3d55fcc5cd16406762ad670a77c46e7128f6c4e90ec3b" }, { "alg" : "SHA3-512", - "content" : "b44fdef1e3482a1f65d0d5345c69fb78ed32cee27f96abab033ae1e3e26923efd69e8b213ae7c9c367c0e9a87df3785154ecc58961a5261513dc1fb3e260d50d" + "content" : "624e8aaaee39fcad526d4e2699174f8aa9804fc1cb08418dd742374a91fdc3fd474173f59e64508a74029080e9e56d9c6c32e311b71533eba3eead882c4a736f" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.sonarsource.python/python-frontend@4.17.0.14845?type=jar", + "purl" : "pkg:maven/org.sonarsource.python/python-commons@5.16.0.29940?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://docs.sonarqube.org/display/PLUG/Plugin+Library/python/python-frontend" + "url" : "https://docs.sonarsource.com/sonarqube-server/latest/extension-guide/developing-a-plugin/plugin-basics/python/python-commons/" }, { "type" : "build-system", @@ -2627,210 +2881,210 @@ }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-python/python-frontend" + "url" : "https://github.com/SonarSource/sonar-python/python-commons" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.python/python-frontend@4.17.0.14845?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.python/python-commons@5.16.0.29940?type=jar" }, { - "group" : "com.google.protobuf", - "name" : "protobuf-java", - "version" : "3.25.1", - "description" : "Core Protocol Buffers library. Protocol Buffers are a way of encoding structured data in an efficient yet extensible format.", + "publisher" : "FasterXML", + "group" : "com.fasterxml.jackson.dataformat", + "name" : "jackson-dataformat-toml", + "version" : "2.20.1", + "description" : "Support for reading and writing TOML-encoded data via Jackson abstractions.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "7dc81d3c2187ce5627d134a37df88cc0" + "content" : "f3d12c27f5c0744054e8716f3ee4b3d2" }, { "alg" : "SHA-1", - "content" : "2933a5c3f022456d8842323fe0d7fb2d25a7e3c7" + "content" : "1f4f7249289053551eac7bc8ac6e646576d03e1a" }, { "alg" : "SHA-256", - "content" : "48a8e58a1a8f82eff141a7a388d38dfe77d7a48d5e57c9066ee37f19147e20df" + "content" : "3936e3fb83edd2754bb317d17a63cded43b5fac4fb82eabb4aaa502bb52f9835" }, { "alg" : "SHA-512", - "content" : "d4adb935097c4fee13838ea7c166b41a9c34977e436d2fa5e5e92aac1a95462846463895ad994858a442079627696ca14618ff97a0039abd3fcb8671d7961d3a" + "content" : "cd31529a28ff83585d8d5944943c528d4d26e0f547c5ed804c90a8c642b0cd34553d2f4b7878903312a06d4ad86351aa6591294dba4f61b0bb03da317aeef870" }, { "alg" : "SHA-384", - "content" : "2fc41e52f529bcbbe4d8938d262153ee7e7a098d51fc84a2720bade27aff0247af47629c3caa630b706001d769714d1c" + "content" : "e2f0cbd883ee0745e6c27d0cf83c1e48869f89cb444c099e553f25105d7800949b1db37fc5db5055e321fdce8b13ebde" }, { "alg" : "SHA3-384", - "content" : "9ff49c91b6ca5e5ebc8005b6179d171f3bb549b9ef667c694ea6cebe842bccbea1bedb2bab69d97e89270900915f125b" + "content" : "fd0c36a837dd0b756c3622606b1490218cba364f30d148bac78dfee7dbb1117a9f1504a2e0cac8d83cf6cdb17f0ecf7b" }, { "alg" : "SHA3-256", - "content" : "e3794da30f03c61b916aeb9aa2af625792dc7f236bf2bd16cbfffbf3ef186d59" + "content" : "58d572441da65e6c63de352d608a144b280bd3754a06128d1da840494c70ce6b" }, { "alg" : "SHA3-512", - "content" : "1d3bfb11f6cae1912bd5cd04aef53ae725d705e598fafaa185903d2c534ca2f88ad919321ec4bcdca36c9b1515097c5d47aa6868f5bd3b93732337bd564b3bb7" + "content" : "bdbc867b3d2a993b277d19c230f84dd52a8db5f6638f9a90f6d613b9eb7b2f49e3404dc78dba4877fdad3ed5bd255f27be808ec287898c833ee2347ee44a94f4" } ], "licenses" : [ { "license" : { - "id" : "BSD-3-Clause", - "url" : "https://opensource.org/licenses/BSD-3-Clause" + "id" : "Apache-2.0" } } ], - "purl" : "pkg:maven/com.google.protobuf/protobuf-java@3.25.1?type=jar", + "purl" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-toml@2.20.1?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://developers.google.com/protocol-buffers/protobuf-java/" + "url" : "https://github.com/FasterXML/jackson-dataformats-text" }, { "type" : "distribution-intake", - "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" + "url" : "https://central.sonatype.com/api/v1/publisher" + }, + { + "type" : "issue-tracker", + "url" : "https://github.com/FasterXML/jackson-dataformats-text/issues" }, { "type" : "vcs", - "url" : "https://github.com/protocolbuffers/protobuf/protobuf-java" + "url" : "https://github.com/FasterXML/jackson-dataformats-text/jackson-dataformat-toml" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.google.protobuf/protobuf-java@3.25.1?type=jar" + "bom-ref" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-toml@2.20.1?type=jar" }, { - "publisher" : "SonarSource and Waleri Enns", - "group" : "org.sonarsource.python", - "name" : "python-checks", - "version" : "4.17.0.14845", - "description" : "Parent pom of SonarSource public projects", + "publisher" : "FasterXML", + "group" : "com.fasterxml.jackson.datatype", + "name" : "jackson-datatype-jdk8", + "version" : "2.20.1", + "description" : "Add-on module for Jackson (https://github.com/FasterXML/jackson) to support JDK 8 data types.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "077f9306a20f8a6eca092f54a53a26e3" + "content" : "9360afe5a78d29ce5510f670b3286e77" }, { "alg" : "SHA-1", - "content" : "ef43f45c57346b910ac422d7aff2ab4b6fe25894" + "content" : "6a8bbc260ba834f67220117d9f08510d69c4a3f0" }, { "alg" : "SHA-256", - "content" : "7d6e1743538dbfa7310bc54fbb7e511a6fd8633549018d7e2b4ba67019a3123e" + "content" : "6821cdd695e95c4e6853ec855a7432c71f2f4be318b3ca190fbbf8a2e5f981f2" }, { "alg" : "SHA-512", - "content" : "f628f82e470f9af8e0da159464ef41996b5edbbab7ead94db853afc54992d8f155994becbb9acdfe4af46a41fbf5e3ae01ba6b17078d1e20861da5e4eedccafc" + "content" : "9aceae6ea4ac56a038982fc45e91942cc15d68b7e07e044c1e75a71760b2eb02e23a344f36966093be670a2d1f656146492f11148da06a4044b4a5d78e523beb" }, { "alg" : "SHA-384", - "content" : "43302f43c32c5b35c4f7b85e901c457ad7ce7c1d0cc8d891dceb828018d0fa06c09fd7b6a34764f187b0deb8f002db96" + "content" : "c55990a25083046bd3881b656d5fa351e5d2115ce861427cc8bdc64acbf85f9a3ea739f3510eedfc0372f226ed7ebd2a" }, { "alg" : "SHA3-384", - "content" : "2c847248451a6f0874fa6d91dedd203c7492db05161c15235d709e9e9bc6d8ff5900b7c60e0aeea74fb7566cb1a3db3e" + "content" : "9556b354a7fdf5324aa22d6a00b308508bfb55555c2a31ca159c2b9f35f8a3d4e904a7eb15388f6532bb464fcc642db5" }, { "alg" : "SHA3-256", - "content" : "32f3d74c14e3918b8af6c98cc32304cc5d0b835348cd15734033307e4e871d2f" + "content" : "b4018fdef370f16380205cf366a9b84f4721b5ff0a800e72e0a1a23f4a58848a" }, { "alg" : "SHA3-512", - "content" : "2429a23270a66433e76eade81bb8b8acd3d91b55a587c6230ecc1282e71b2fcd61d9867d100fe04b74d387516a7c0df4124d8aa82f300c07a82dba20b4c01920" + "content" : "9f9db93cecb859df97455ddfa61136406700ae786715a3754e0ac9f9993deb9df62c44e08233dcf463e792fcbba9a25e7472e34dba5970d9df7eecf959c71875" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "id" : "Apache-2.0" } } ], - "purl" : "pkg:maven/org.sonarsource.python/python-checks@4.17.0.14845?type=jar", + "purl" : "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.20.1?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://docs.sonarqube.org/display/PLUG/Plugin+Library/python/python-checks" + "url" : "https://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jdk8" }, { - "type" : "build-system", - "url" : "https://cirrus-ci.com/github/SonarSource/sonar-python" + "type" : "distribution-intake", + "url" : "https://central.sonatype.com/api/v1/publisher" }, { "type" : "issue-tracker", - "url" : "https://jira.sonarsource.com/browse/SONARPY" - }, - { - "type" : "mailing-list", - "url" : "https://community.sonarsource.com" + "url" : "https://github.com/FasterXML/jackson-modules-java8/issues" }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-python/python-checks" + "url" : "http://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jdk8" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.python/python-checks@4.17.0.14845?type=jar" + "bom-ref" : "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.20.1?type=jar" }, { "publisher" : "The Apache Software Foundation", - "group" : "commons-lang", - "name" : "commons-lang", - "version" : "2.6", - "description" : "Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.", + "group" : "org.apache.commons", + "name" : "commons-text", + "version" : "1.14.0", + "description" : "Apache Commons Text is a set of utility functions and reusable components for processing and manipulating text in a Java environment.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "4d5c1693079575b362edf41500630bbd" + "content" : "54960a12a82d52df3d5548d6934d87b2" }, { "alg" : "SHA-1", - "content" : "0ce1edb914c94ebc388f086c6827e8bdeec71ac2" + "content" : "adcb0d4c67eabc79682604b47eb852aaff21138a" }, { "alg" : "SHA-256", - "content" : "50f11b09f877c294d56f24463f47d28f929cf5044f648661c0f0cfbae9a2f49c" + "content" : "121fce2282910c8f0c3ba793a5436b31beb710423cbe2d574a3fb7a73c508e92" }, { "alg" : "SHA-512", - "content" : "4a5a3dbe4941c645e2cca068cca5c1882cfe988b02e7cd981d1e51784900767d1deab0e0e0566f559c9fcabb4a180e436d5bb948902d4f4106f37360466afb42" + "content" : "4975879372241025bd0a47fe540ed7d0cd3e5eba474b12af67a8c6016be0fbb4f4a3a4a0064f4d2b6aebce67d88ee814da345a5ba3a6ee4f6293b3b4e7bbd065" }, { "alg" : "SHA-384", - "content" : "9725bc421adc1dbcd6f937eca0f3075d186a2b353ece4cef66b0fe81bb8d3f7d7641c43e86d657ef526c719f0c2a8c90" + "content" : "a038f1a8b58bb7ec17ba55238d3e40f5d9386dfb17870630a728b22741a9592819374e9abbbc6402a439eea4db5b739a" }, { "alg" : "SHA3-384", - "content" : "4bc4eaaf2580ded6d552b96ae5261c936de95f69a1d137c47279c51bf2aa1406ae44f69ccc94486267b8441e53c4bd74" + "content" : "5325922bb72aa73d2d51cb3fb5592fc77097614fd3ab3ac77e3acdc0fe1dc8c18893cdd9a05768bb725fa40dd8c14527" }, { "alg" : "SHA3-256", - "content" : "b68d49ef037d428ea0c3e67a7a20f3d68a134bef30a1639ec08d28886b9f5629" + "content" : "31008266592ec8503bcc7f6b4e7125b0e377f57f3a697cdcb02ee7f20f84ddf1" }, { "alg" : "SHA3-512", - "content" : "2e9ffc0608827cffc0b48b7a0f35d371c66586c99fea2910f7c2a237c7c57d9ae4d65de7c8e018362c2e4f963c2f70a9196cebf35457f1dd0cea6c65c256f673" + "content" : "385249425d8c6ab181039195a03c6337f393a1e1419527e9f072d695367bc0bd6546e752d1912df557bd8788329f7609aa1c63ce42eb135e2d27b6141ce9280f" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0" + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], - "purl" : "pkg:maven/commons-lang/commons-lang@2.6?type=jar", + "purl" : "pkg:maven/org.apache.commons/commons-text@1.14.0?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://commons.apache.org/lang/" + "url" : "https://commons.apache.org/proper/commons-text" }, { "type" : "build-system", - "url" : "http://vmbuild.apache.org/continuum/" + "url" : "https://github.com/apache/commons-text/actions" }, { "type" : "distribution-intake", @@ -2838,19 +3092,19 @@ }, { "type" : "issue-tracker", - "url" : "http://issues.apache.org/jira/browse/LANG" + "url" : "https://issues.apache.org/jira/browse/TEXT" }, { "type" : "mailing-list", - "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/" + "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/" }, { "type" : "vcs", - "url" : "http://svn.apache.org/viewvc/commons/proper/lang/branches/LANG_2_X" + "url" : "https://gitbox.apache.org/repos/asf?p=commons-text.git" } ], "type" : "library", - "bom-ref" : "pkg:maven/commons-lang/commons-lang@2.6?type=jar" + "bom-ref" : "pkg:maven/org.apache.commons/commons-text@1.14.0?type=jar" }, { "publisher" : "Codehaus", @@ -3049,55 +3303,119 @@ "type" : "library", "bom-ref" : "pkg:maven/org.codehaus.woodstox/stax2-api@3.1.4?type=jar" }, + { + "publisher" : "SonarSource", + "group" : "org.sonarsource.go", + "name" : "sonar-go-plugin", + "version" : "1.32.0.5128", + "description" : "Code Analyzer for Go", + "scope" : "required", + "hashes" : [ + { + "alg" : "MD5", + "content" : "ea2de97a8b1020865b993afe78aff72f" + }, + { + "alg" : "SHA-1", + "content" : "daa3ce9acfba33b2dba823c64d72bf3a0fa2b25d" + }, + { + "alg" : "SHA-256", + "content" : "7ad9dd5e478be53d58ad12d060f0e4aaa5e5eb9f5fcb28411c8083da2d5e0b19" + }, + { + "alg" : "SHA-512", + "content" : "3176550be29c19e7fb8b90b6993b29f3b8b4b51ddfa4509bab6de91edc4d7b40e3384dc48df7731262cb671379d2c4163eef78565389a391a43d450dcba56996" + }, + { + "alg" : "SHA-384", + "content" : "b1e7333047001ad10c6058a5ede6bc27651bae3335c0faadc1a6bda3ba1b66b90f45aec62389eaa9ec41eba836dc0d52" + }, + { + "alg" : "SHA3-384", + "content" : "18184263d523ab59b12019479a129e608f201e2c096745e869d72e029c78d41409d64934307b1f1a343ab0e1475978f3" + }, + { + "alg" : "SHA3-256", + "content" : "3fddc018fee60147c78382440a963bf6812bf496bb1d25090b50475e185a0844" + }, + { + "alg" : "SHA3-512", + "content" : "c1fc155244473f90fcc327f33055b06cb2fb35a203421b832f627d12150d851640a407a84dd47498b372ad0337bb1881ffa8aeab9fec85cb5e04b924989c5db5" + } + ], + "licenses" : [ + { + "license" : { + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" + } + } + ], + "purl" : "pkg:maven/org.sonarsource.go/sonar-go-plugin@1.32.0.5128?type=jar", + "externalReferences" : [ + { + "type" : "website", + "url" : "http://www.sonarqube.org/" + }, + { + "type" : "vcs", + "url" : "https://github.com/SonarSource/sonar-go" + } + ], + "type" : "library", + "bom-ref" : "pkg:maven/org.sonarsource.go/sonar-go-plugin@1.32.0.5128?type=jar" + }, { "publisher" : "The Apache Software Foundation", "group" : "commons-io", "name" : "commons-io", - "version" : "2.11.0", + "version" : "2.20.0", "description" : "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "3b4b7ccfaeceeac240b804839ee1a1ca" + "content" : "94e7e6b9b5fe82388687b584d3571081" }, { "alg" : "SHA-1", - "content" : "a2503f302b11ebde7ebc3df41daebe0e4eea3689" + "content" : "36f3474daec2849c149e877614e7f979b2082cd2" }, { "alg" : "SHA-256", - "content" : "961b2f6d87dbacc5d54abf45ab7a6e2495f89b75598962d8c723cea9bc210908" + "content" : "df90bba0fe3cb586b7f164e78fe8f8f4da3f2dd5c27fa645f888100ccc25dd72" }, { "alg" : "SHA-512", - "content" : "5bd78eed456ede30119319c5bed8e3e4c443b6fd7bdb3a7a5686647bd83094d0c3e2832a7575cfb60e4ef25f08106b93476939d3adcfecf5533cc030b3039e10" + "content" : "fea08e150473673b0608eaee3ae1cb4e73834039db80d3b758710d6baf3a5840a0878a4eb64739ae9bb21ccc7148c8520fe873616a3f6d5cdb4305deabdd015c" }, { "alg" : "SHA-384", - "content" : "114f1e324d90ad887c177876d410f5787a8e8da6c48d4b2862d365802c0efded3a88cb24046976bf6276cadad3712f0f" + "content" : "22db5e18e3512ed44474e75a124a052d5a1a6f35ce458f6a201a5ccc9510c57c10c117dba80ac6ce91745cf2b51e63f2" }, { "alg" : "SHA3-384", - "content" : "80288c03ad4d80d69f91d056ffc5570d49a9c76bf54ad2dff0121ecde26a560df76d05156f281f5c6db2a38ff07a873d" + "content" : "a70700d24df3c276ff387c359e0e940b834e413b72a49917de9a82615836eca8cca1bee1ed71790606c795da795e9151" }, { "alg" : "SHA3-256", - "content" : "5adfb5ccaf5f21a549422f426118a9542673926fcd18c68390cf813e791dcf6c" + "content" : "a8d044d3a4a069d0f20d24112b6427a3a6f02a925b31b932721d1f545ff32cec" }, { "alg" : "SHA3-512", - "content" : "7573f47f0babb53cefdc7c2309a0b982d800139064537b0797da442853d081010ad7c3c74a500598a0f800639a5d540eca21963ea652c68613907059bd4278c2" + "content" : "3417bf811d7e5fc1e71b8540f3379751434ea8540c421ff2c8bb5f5ce34401cd0ad8a829b65aa55e055c57141181762c4827099352c2bba453e48ad2df67526a" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0" + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], - "purl" : "pkg:maven/commons-io/commons-io@2.11.0?type=jar", + "purl" : "pkg:maven/commons-io/commons-io@2.20.0?type=jar", "externalReferences" : [ { "type" : "website", @@ -3105,7 +3423,7 @@ }, { "type" : "build-system", - "url" : "https://builds.apache.org/" + "url" : "https://github.com/apache/commons-io/actions" }, { "type" : "distribution-intake", @@ -3125,47 +3443,47 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/commons-io/commons-io@2.11.0?type=jar" + "bom-ref" : "pkg:maven/commons-io/commons-io@2.20.0?type=jar" }, { "publisher" : "Google Inc.", "group" : "com.google.googlejavaformat", "name" : "google-java-format", - "version" : "1.22.0", + "version" : "1.28.0", "description" : "A Java source code formatter that follows Google Java Style.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "fd1fbd4edf5d8eaca565217ff981b94b" + "content" : "8e2d4037e876b608ab0356477b5ead98" }, { "alg" : "SHA-1", - "content" : "6e31a0877a51e91076c857794a0b1df7af876b2d" + "content" : "f57d0ad670cc32c4d4a4ffb2cbef44a3dfddeecd" }, { "alg" : "SHA-256", - "content" : "4f4bdba0f2a3d7e84be47683a0c2a4ba69024d29d906d09784181f68f04af792" + "content" : "41dfe4d1012794ed15e0ffd70f89fd4fa65d5f15ce0bc0c70f8c2c127d6d010d" }, { "alg" : "SHA-512", - "content" : "d2006def13e5144e12568298014a23c86299a62e2bb7757c63f5f25405b1adb6f60b3f2f54bed9583cdd24cae71088e9f7aa846a10a089cce2a25972e48c7649" + "content" : "87bf18026e543bc9135d58153f05b8bf58b48bd59cec96e774e3f68bc8d601b9789924a9917b9a4f57b8a69bbe24dd20aef0a65543a63e7101b39317469346d2" }, { "alg" : "SHA-384", - "content" : "4aed1de35a09b196347064d45a5996fd7467c9b5cca0faf4655cbeb756053810cd3af2e45d74401aee626e30b1693ca7" + "content" : "bfd9e42e51d696fa079aa12d3541645873724ce48989615723533aba58fc3e4f77a37e9102bad2b391dc0252b449bad9" }, { "alg" : "SHA3-384", - "content" : "28fc6265d1886418ca44d1c7eea8709a2f38ba5b3f8cedb6a44d1a36f676e533662b61105db8b8d1f69fc4796fbcc8bd" + "content" : "b48a456db7981843ffc51f60511d4a5d52072bbe89da4dda6560cee4414493236e94ad1af4c5564449fb000501ca6ef4" }, { "alg" : "SHA3-256", - "content" : "08098285fccec01b2f3fce2e46ac210deb79862f21cb4ae96ff3a1a040df0809" + "content" : "ae18cf36a9212cdb243e3900cca7f9059273dfdf227fb97a189b5ae84cc989e4" }, { "alg" : "SHA3-512", - "content" : "122e32ab36408a79ed1153660ab1ba7639212d30921ea022da9affc19f76c5d874241a8584fc5c992ce74d2f01c2e06fddc784aee11c6d4238fc645ade3a1880" + "content" : "ac1207d9b7d8be02a222d1f11b44a5bcf1d95924404926698c8f23ba3688cfc49fc81e594e4f48d03ebbbf0ccc638706433ed462499b5b4d083538eb7e37541e" } ], "licenses" : [ @@ -3175,16 +3493,12 @@ } } ], - "purl" : "pkg:maven/com.google.googlejavaformat/google-java-format@1.22.0?type=jar", + "purl" : "pkg:maven/com.google.googlejavaformat/google-java-format@1.28.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/google/google-java-format/google-java-format" }, - { - "type" : "distribution-intake", - "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" - }, { "type" : "issue-tracker", "url" : "http://github.com/google/google-java-format/issues" @@ -3195,7 +3509,7 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/com.google.googlejavaformat/google-java-format@1.22.0?type=jar" + "bom-ref" : "pkg:maven/com.google.googlejavaformat/google-java-format@1.28.0?type=jar" }, { "group" : "com.google.guava", @@ -3477,68 +3791,6 @@ "type" : "library", "bom-ref" : "pkg:maven/org.checkerframework/checker-qual@3.37.0?type=jar" }, - { - "publisher" : "Google LLC", - "group" : "com.google.errorprone", - "name" : "error_prone_annotations", - "version" : "2.21.1", - "description" : "Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.", - "scope" : "required", - "hashes" : [ - { - "alg" : "MD5", - "content" : "75fe4fe33d308dd6cee3b601de902d27" - }, - { - "alg" : "SHA-1", - "content" : "6d9b10773b5237df178a7b3c1b4208df7d0e7f94" - }, - { - "alg" : "SHA-256", - "content" : "d1f3c66aa91ac52549e00ae3b208ba4b9af7d72d68f230643553beb38e6118ac" - }, - { - "alg" : "SHA-512", - "content" : "530318bcdf1ed8eeee408fc5a0775f1792cbf012b4ec55217a4498c8d2983b230a4d071b9e115565b0411faa51dd938823d9b619beb6786212c375ad3d1ebd8a" - }, - { - "alg" : "SHA-384", - "content" : "88e628431966a9b5cc19f96159874cefde1558e51d2ce233a0c2d47914eb9c6256f95882605a87cc6629a21ff70b72b4" - }, - { - "alg" : "SHA3-384", - "content" : "ebc750b211532fef9a84c3682d47f00b877e4082716ead1f4f883f02ab35bda8d5acfc475722215c4fe6ed9cfd54f43a" - }, - { - "alg" : "SHA3-256", - "content" : "9b4f193bf2f541844c6b1b5cf2d1c7f6e9465b97804d155f34530b203184e1ae" - }, - { - "alg" : "SHA3-512", - "content" : "1d76781cef387a185fd4fb69960394556062969bbbe0be74d0fb11f7c73758e5d35ff546ab04f6382c21c63705a1ffb975a549bf4d846fde54e412ecd4641485" - } - ], - "licenses" : [ - { - "license" : { - "id" : "Apache-2.0" - } - } - ], - "purl" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.21.1?type=jar", - "externalReferences" : [ - { - "type" : "website", - "url" : "https://errorprone.info/error_prone_annotations" - }, - { - "type" : "vcs", - "url" : "https://github.com/google/error-prone/error_prone_annotations" - } - ], - "type" : "library", - "bom-ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.21.1?type=jar" - }, { "group" : "com.google.j2objc", "name" : "j2objc-annotations", @@ -3607,96 +3859,91 @@ ], "dependencies" : [ { - "ref" : "pkg:maven/com.ibm/mapper@1.0.3-SNAPSHOT?type=jar", + "ref" : "pkg:maven/com.ibm/mapper@2.0.0-SNAPSHOT?type=jar", "dependsOn" : [ - "pkg:maven/com.ibm/engine@1.0.3-SNAPSHOT?type=jar", - "pkg:maven/org.jetbrains/annotations@24.1.0?type=jar", - "pkg:maven/org.sonarsource.api.plugin/sonar-plugin-api@9.13.0.360?type=jar", - "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", - "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar", - "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar", - "pkg:maven/org.sonarsource.java/sonar-java-plugin@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.python/sonar-python-plugin@4.17.0.14845?type=jar", - "pkg:maven/com.google.googlejavaformat/google-java-format@1.22.0?type=jar" + "pkg:maven/com.ibm/engine@2.0.0-SNAPSHOT?type=jar", + "pkg:maven/org.sonarsource.api.plugin/sonar-plugin-api@13.4.3.4290?type=jar", + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", + "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar", + "pkg:maven/org.sonarsource.java/sonar-java-plugin@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.python/sonar-python-plugin@5.16.0.29940?type=jar", + "pkg:maven/org.sonarsource.go/sonar-go-plugin@1.32.0.5128?type=jar", + "pkg:maven/com.google.googlejavaformat/google-java-format@1.28.0?type=jar" ] }, { - "ref" : "pkg:maven/com.ibm/engine@1.0.3-SNAPSHOT?type=jar", + "ref" : "pkg:maven/com.ibm/engine@2.0.0-SNAPSHOT?type=jar", "dependsOn" : [ - "pkg:maven/com.ibm/common@1.0.3-SNAPSHOT?type=jar", - "pkg:maven/org.jetbrains/annotations@24.1.0?type=jar", - "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", - "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar", - "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar", - "pkg:maven/org.sonarsource.java/sonar-java-plugin@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.python/sonar-python-plugin@4.17.0.14845?type=jar", - "pkg:maven/com.google.googlejavaformat/google-java-format@1.22.0?type=jar" + "pkg:maven/com.ibm/common@2.0.0-SNAPSHOT?type=jar", + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", + "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar", + "pkg:maven/org.sonarsource.java/sonar-java-plugin@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.python/sonar-python-plugin@5.16.0.29940?type=jar", + "pkg:maven/org.sonarsource.go/sonar-go-plugin@1.32.0.5128?type=jar", + "pkg:maven/com.google.googlejavaformat/google-java-format@1.28.0?type=jar" ] }, { - "ref" : "pkg:maven/com.ibm/common@1.0.3-SNAPSHOT?type=jar", + "ref" : "pkg:maven/com.ibm/common@2.0.0-SNAPSHOT?type=jar", "dependsOn" : [ - "pkg:maven/org.jetbrains/annotations@24.1.0?type=jar", - "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", - "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar", - "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar", - "pkg:maven/org.sonarsource.java/sonar-java-plugin@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.python/sonar-python-plugin@4.17.0.14845?type=jar", - "pkg:maven/com.google.googlejavaformat/google-java-format@1.22.0?type=jar" + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", + "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar", + "pkg:maven/org.sonarsource.java/sonar-java-plugin@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.python/sonar-python-plugin@5.16.0.29940?type=jar", + "pkg:maven/org.sonarsource.go/sonar-go-plugin@1.32.0.5128?type=jar", + "pkg:maven/com.google.googlejavaformat/google-java-format@1.28.0?type=jar" ] }, { - "ref" : "pkg:maven/org.jetbrains/annotations@24.1.0?type=jar", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", + "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar", - "dependsOn" : [ ] + "ref" : "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar", + "dependsOn" : [ + "pkg:maven/com.google.errorprone/error_prone_annotations@2.41.0?type=jar" + ] }, { - "ref" : "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar", + "ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.41.0?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/org.sonarsource.java/sonar-java-plugin@7.33.0.35775?type=jar", + "ref" : "pkg:maven/org.sonarsource.java/sonar-java-plugin@8.18.0.40025?type=jar", "dependsOn" : [ - "pkg:maven/org.sonarsource.java/java-surefire@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.java/java-frontend@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.java/java-symbolic-execution@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.java/java-checks@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.java/java-checks-aws@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.java/external-reports@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.java/java-jsp@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.8.0.2699?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.8.0.2699?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.8.0.2699?type=jar" + "pkg:maven/org.sonarsource.java/java-surefire@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.java/java-frontend@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.java/java-checks@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.java/java-checks-aws@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.java/check-list@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.java/external-reports@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.java/java-jsp@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.18.0.3393?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.18.0.3393?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.18.0.3393?type=jar" ] }, { - "ref" : "pkg:maven/org.sonarsource.java/java-surefire@7.33.0.35775?type=jar", + "ref" : "pkg:maven/org.sonarsource.java/java-surefire@8.18.0.40025?type=jar", "dependsOn" : [ - "pkg:maven/org.sonarsource.java/java-frontend@7.33.0.35775?type=jar", + "pkg:maven/org.sonarsource.java/java-frontend@8.18.0.40025?type=jar", "pkg:maven/com.fasterxml.staxmate/staxmate@2.4.1?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.8.0.2699?type=jar" + "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.18.0.3393?type=jar" ] }, { - "ref" : "pkg:maven/org.sonarsource.java/java-frontend@7.33.0.35775?type=jar", + "ref" : "pkg:maven/org.sonarsource.java/java-frontend@8.18.0.40025?type=jar", "dependsOn" : [ - "pkg:maven/org.sonarsource.java/jdt-package@1.1.0.34?type=jar", + "pkg:maven/org.sonarsource.java/jdt-package@1.6.0.160?type=jar", "pkg:maven/org.sonarsource.sslr/sslr-core@1.24.0.633?type=jar", - "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.8.0.2699?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.8.0.2699?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.8.0.2699?type=jar" + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.18.0.3393?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.18.0.3393?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.18.0.3393?type=jar" ] }, { - "ref" : "pkg:maven/org.sonarsource.java/jdt-package@1.1.0.34?type=jar", + "ref" : "pkg:maven/org.sonarsource.java/jdt-package@1.6.0.160?type=jar", "dependsOn" : [ ] }, { @@ -3706,20 +3953,24 @@ ] }, { - "ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.8.0.2699?type=jar", + "ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", + "dependsOn" : [ ] + }, + { + "ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.18.0.3393?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.8.0.2699?type=jar", + "ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.18.0.3393?type=jar", "dependsOn" : [ "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar" ] }, { - "ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.8.0.2699?type=jar", + "ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.18.0.3393?type=jar", "dependsOn" : [ "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", - "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar" + "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar" ] }, { @@ -3733,7 +3984,7 @@ "dependsOn" : [ ] }, { - "ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.8.0.2699?type=jar", + "ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.18.0.3393?type=jar", "dependsOn" : [ "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", "pkg:maven/xerces/xercesImpl@2.12.2?type=jar", @@ -3758,117 +4009,97 @@ ] }, { - "ref" : "pkg:maven/org.sonarsource.java/java-symbolic-execution@7.33.0.35775?type=jar", - "dependsOn" : [ - "pkg:maven/org.sonarsource.java/java-frontend@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.8.0.2699?type=jar" - ] - }, - { - "ref" : "pkg:maven/org.sonarsource.java/java-checks@7.33.0.35775?type=jar", + "ref" : "pkg:maven/org.sonarsource.java/java-checks@8.18.0.40025?type=jar", "dependsOn" : [ - "pkg:maven/org.sonarsource.java/java-frontend@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.java/java-checks-common@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.java/java-symbolic-execution@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.8.0.2699?type=jar", - "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar", - "pkg:maven/org.springframework/spring-expression@6.1.5?type=jar" + "pkg:maven/org.sonarsource.java/java-frontend@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.java/java-checks-common@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.18.0.3393?type=jar", + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", + "pkg:maven/org.springframework/spring-expression@6.1.21?type=jar" ] }, { - "ref" : "pkg:maven/org.sonarsource.java/java-checks-common@7.33.0.35775?type=jar", + "ref" : "pkg:maven/org.sonarsource.java/java-checks-common@8.18.0.40025?type=jar", "dependsOn" : [ - "pkg:maven/org.sonarsource.java/java-frontend@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.8.0.2699?type=jar", - "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar" + "pkg:maven/org.sonarsource.java/java-frontend@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.18.0.3393?type=jar", + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar" ] }, { - "ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.8.0.2699?type=jar", + "ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.18.0.3393?type=jar", "dependsOn" : [ "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar" ] }, { - "ref" : "pkg:maven/org.springframework/spring-expression@6.1.5?type=jar", + "ref" : "pkg:maven/org.springframework/spring-expression@6.1.21?type=jar", "dependsOn" : [ - "pkg:maven/org.springframework/spring-core@6.1.5?type=jar" + "pkg:maven/org.springframework/spring-core@6.1.21?type=jar" ] }, { - "ref" : "pkg:maven/org.springframework/spring-core@6.1.5?type=jar", + "ref" : "pkg:maven/org.springframework/spring-core@6.1.21?type=jar", "dependsOn" : [ - "pkg:maven/org.springframework/spring-jcl@6.1.5?type=jar" + "pkg:maven/org.springframework/spring-jcl@6.1.21?type=jar" ] }, { - "ref" : "pkg:maven/org.springframework/spring-jcl@6.1.5?type=jar", + "ref" : "pkg:maven/org.springframework/spring-jcl@6.1.21?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/org.sonarsource.java/java-checks-aws@7.33.0.35775?type=jar", - "dependsOn" : [ - "pkg:maven/org.sonarsource.java/java-frontend@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.java/java-checks-common@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.8.0.2699?type=jar", - "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar" - ] - }, - { - "ref" : "pkg:maven/org.sonarsource.java/external-reports@7.33.0.35775?type=jar", + "ref" : "pkg:maven/org.sonarsource.java/java-checks-aws@8.18.0.40025?type=jar", "dependsOn" : [ - "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.8.0.2699?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.8.0.2699?type=jar" + "pkg:maven/org.sonarsource.java/java-frontend@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.java/java-checks-common@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.18.0.3393?type=jar", + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar" ] }, { - "ref" : "pkg:maven/org.sonarsource.java/java-jsp@7.33.0.35775?type=jar", + "ref" : "pkg:maven/org.sonarsource.java/check-list@8.18.0.40025?type=jar", "dependsOn" : [ - "pkg:maven/org.sonarsource.java/java-frontend@7.33.0.35775?type=jar", - "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@9.0.84?type=jar" + "pkg:maven/org.sonarsource.java/java-checks@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.java/java-checks-aws@8.18.0.40025?type=jar", + "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar" ] }, { - "ref" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@9.0.84?type=jar", + "ref" : "pkg:maven/org.sonarsource.java/external-reports@8.18.0.40025?type=jar", "dependsOn" : [ - "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.84?type=jar", - "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.84?type=jar" + "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.18.0.3393?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.18.0.3393?type=jar" ] }, { - "ref" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.84?type=jar", + "ref" : "pkg:maven/org.sonarsource.java/java-jsp@8.18.0.40025?type=jar", "dependsOn" : [ - "pkg:maven/org.apache.tomcat/tomcat-annotations-api@9.0.84?type=jar" + "pkg:maven/org.sonarsource.java/java-frontend@8.18.0.40025?type=jar" ] }, { - "ref" : "pkg:maven/org.apache.tomcat/tomcat-annotations-api@9.0.84?type=jar", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.84?type=jar", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:maven/org.sonarsource.python/sonar-python-plugin@4.17.0.14845?type=jar", + "ref" : "pkg:maven/org.sonarsource.python/sonar-python-plugin@5.16.0.29940?type=jar", "dependsOn" : [ - "pkg:maven/org.sonarsource.python/python-frontend@4.17.0.14845?type=jar", - "pkg:maven/org.sonarsource.python/python-checks@4.17.0.14845?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.8.0.2699?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.8.0.2699?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.8.0.2699?type=jar", - "pkg:maven/commons-lang/commons-lang@2.6?type=jar", + "pkg:maven/org.sonarsource.python/python-frontend@5.16.0.29940?type=jar", + "pkg:maven/org.sonarsource.python/python-checks@5.16.0.29940?type=jar", + "pkg:maven/org.sonarsource.python/python-commons@5.16.0.29940?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.18.0.3393?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.18.0.3393?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.18.0.3393?type=jar", + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", "pkg:maven/org.codehaus.staxmate/staxmate@2.0.1?type=jar" ] }, { - "ref" : "pkg:maven/org.sonarsource.python/python-frontend@4.17.0.14845?type=jar", + "ref" : "pkg:maven/org.sonarsource.python/python-frontend@5.16.0.29940?type=jar", "dependsOn" : [ "pkg:maven/org.sonarsource.sslr/sslr-core@1.24.0.633?type=jar", "pkg:maven/com.google.guava/guava@32.1.3-jre?type=jar", - "pkg:maven/com.google.protobuf/protobuf-java@3.25.1?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.8.0.2699?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.8.0.2699?type=jar" + "pkg:maven/com.google.protobuf/protobuf-java@4.29.0?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.18.0.3393?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.18.0.3393?type=jar", + "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1?type=jar" ] }, { @@ -3878,7 +4109,7 @@ "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar", "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", "pkg:maven/org.checkerframework/checker-qual@3.37.0?type=jar", - "pkg:maven/com.google.errorprone/error_prone_annotations@2.21.1?type=jar", + "pkg:maven/com.google.errorprone/error_prone_annotations@2.41.0?type=jar", "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar" ] }, @@ -3895,33 +4126,75 @@ "dependsOn" : [ ] }, { - "ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.21.1?type=jar", + "ref" : "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar", + "ref" : "pkg:maven/com.google.protobuf/protobuf-java@4.29.0?type=jar", + "dependsOn" : [ ] + }, + { + "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1?type=jar", + "dependsOn" : [ + "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.20?type=jar", + "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.1?type=jar" + ] + }, + { + "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.20?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/com.google.protobuf/protobuf-java@3.25.1?type=jar", + "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.1?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/org.sonarsource.python/python-checks@4.17.0.14845?type=jar", + "ref" : "pkg:maven/org.sonarsource.python/python-checks@5.16.0.29940?type=jar", "dependsOn" : [ - "pkg:maven/org.sonarsource.python/python-frontend@4.17.0.14845?type=jar", - "pkg:maven/commons-io/commons-io@2.11.0?type=jar", - "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.8.0.2699?type=jar" + "pkg:maven/org.sonarsource.python/python-frontend@5.16.0.29940?type=jar", + "pkg:maven/commons-io/commons-io@2.20.0?type=jar", + "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.18.0.3393?type=jar" ] }, { - "ref" : "pkg:maven/commons-io/commons-io@2.11.0?type=jar", + "ref" : "pkg:maven/commons-io/commons-io@2.20.0?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/commons-lang/commons-lang@2.6?type=jar", - "dependsOn" : [ ] + "ref" : "pkg:maven/org.sonarsource.python/python-commons@5.16.0.29940?type=jar", + "dependsOn" : [ + "pkg:maven/org.sonarsource.python/python-frontend@5.16.0.29940?type=jar", + "pkg:maven/org.sonarsource.python/python-checks@5.16.0.29940?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.18.0.3393?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.18.0.3393?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.18.0.3393?type=jar", + "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-toml@2.20.1?type=jar", + "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.20.1?type=jar", + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", + "pkg:maven/org.apache.commons/commons-text@1.14.0?type=jar", + "pkg:maven/org.codehaus.staxmate/staxmate@2.0.1?type=jar" + ] + }, + { + "ref" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-toml@2.20.1?type=jar", + "dependsOn" : [ + "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1?type=jar", + "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.1?type=jar" + ] + }, + { + "ref" : "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.20.1?type=jar", + "dependsOn" : [ + "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.1?type=jar", + "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1?type=jar" + ] + }, + { + "ref" : "pkg:maven/org.apache.commons/commons-text@1.14.0?type=jar", + "dependsOn" : [ + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar" + ] }, { "ref" : "pkg:maven/org.codehaus.staxmate/staxmate@2.0.1?type=jar", @@ -3935,13 +4208,23 @@ "dependsOn" : [ ] }, { - "ref" : "pkg:maven/com.google.googlejavaformat/google-java-format@1.22.0?type=jar", + "ref" : "pkg:maven/org.sonarsource.go/sonar-go-plugin@1.32.0.5128?type=jar", + "dependsOn" : [ ] + }, + { + "ref" : "pkg:maven/com.google.googlejavaformat/google-java-format@1.28.0?type=jar", "dependsOn" : [ "pkg:maven/com.google.guava/guava@32.1.3-jre?type=jar" ] }, { - "ref" : "pkg:maven/org.sonarsource.api.plugin/sonar-plugin-api@9.13.0.360?type=jar", + "ref" : "pkg:maven/org.sonarsource.api.plugin/sonar-plugin-api@13.4.3.4290?type=jar", + "dependsOn" : [ + "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar" + ] + }, + { + "ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar", "dependsOn" : [ ] } ] diff --git a/output/bom/bom.json b/output/bom/bom.json index 214a5521..3b089d86 100644 --- a/output/bom/bom.json +++ b/output/bom/bom.json @@ -1,10 +1,10 @@ { "bomFormat" : "CycloneDX", "specVersion" : "1.5", - "serialNumber" : "urn:uuid:f38097d6-cf59-3ddc-b5eb-9fbee38b7cc7", + "serialNumber" : "urn:uuid:eab97449-c055-35f5-bbee-14343a8789b2", "version" : 1, "metadata" : { - "timestamp" : "2024-04-12T08:16:53Z", + "timestamp" : "2026-01-28T14:17:30Z", "lifecycles" : [ { "phase" : "build" @@ -52,32 +52,32 @@ } ], "component" : { - "publisher" : "IBM", + "publisher" : "cbomkit", "group" : "com.ibm", "name" : "output", - "version" : "1.0.3-SNAPSHOT", + "version" : "2.0.0-SNAPSHOT", "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "https://www.gnu.org/licenses/lgpl.txt" + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], - "purl" : "pkg:maven/com.ibm/output@1.0.3-SNAPSHOT?type=jar", + "purl" : "pkg:maven/com.ibm/output@2.0.0-SNAPSHOT?type=jar", "externalReferences" : [ { "type" : "distribution-intake", - "url" : "https://eu.artifactory.swg-devops.com/artifactory/res-cryptoagility-team-maven-local" + "url" : "https://maven.pkg.github.com/cbomkit/sonar-cryptography" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.ibm/output@1.0.3-SNAPSHOT?type=jar" + "bom-ref" : "pkg:maven/com.ibm/output@2.0.0-SNAPSHOT?type=jar" }, "properties" : [ { "name" : "maven.goal", - "value" : "makeBom" + "value" : "makeAggregateBom" }, { "name" : "maven.scopes", @@ -90,41 +90,41 @@ "publisher" : "OWASP Foundation", "group" : "org.cyclonedx", "name" : "cyclonedx-core-java", - "version" : "8.1.0-SNAPSHOT", + "version" : "11.0.1", "description" : "The CycloneDX core module provides a model representation of the BOM along with utilities to assist in creating, parsing, and validating BOMs.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "f15d85fa4d72d67dc40b0938e5a263b0" + "content" : "2939896ee374a5f6d45ca70157e58113" }, { "alg" : "SHA-1", - "content" : "89c94f4407141cc6216dc797eaa527b34e06eadf" + "content" : "c5e6a5bdd203c23063db37d5db69bfd5e037d5d2" }, { "alg" : "SHA-256", - "content" : "b186d0f488125cdc032616d0edff92c29bf9cda6dcbf556e5b24e858e1b6f1ee" + "content" : "989348cc6d385629a3ccb735d450b0f0f022167cb702c2fcb0e6f2bdd989dde7" }, { "alg" : "SHA-512", - "content" : "df89c78cde3e1db60c37877b607c0eab3489d825da5d5873c70e6d3592e73158684b76d5105ab93cfac8211b4bab4fff3e557e6cc700dc64698beb625f0ccf48" + "content" : "20a3fee94682c23a57c52bdd1678f877f1b8f2a8c3a2e2aa1ade2be5e74c70da1171aa2f08af40a5a9362eba94fbb52d8a824b3bf6b9591d765ecf6b3c43463c" }, { "alg" : "SHA-384", - "content" : "d51694f1fac1f99b703849b833d1c83f638c9b1a75cf5283ac4c9456bf624b2fcf829d2f4a5e037062b5b33056056e3c" + "content" : "d85aedd5d4e7f7ed6ee0093870e8fea36cd5fc21c825325e5240ea6773b072173429230f4dd12f5ac70146f39f4ff0fe" }, { "alg" : "SHA3-384", - "content" : "59de9d9679f6e05019952cc823fe03729a18d395653d8c7b2706b6d5052cdfa670c3b42a9a0aea5f831e889daea2b995" + "content" : "705238526713babce1ce21922a1d7229ef6e0106a3fe91395757b8fcd5955b83e6001679fa8eb38c0e8960238b1a6514" }, { "alg" : "SHA3-256", - "content" : "6c10f4f239f3e9827282b9e9acc81e1baba86c7ccea88f405470e197c8ec2dce" + "content" : "dbf916ece6434dd0b46d71ab060fc55c6fff2867ed89b5093d7aaf9514a2d2f1" }, { "alg" : "SHA3-512", - "content" : "0b7f570e648628beaae172d88e461aff57435dca352496f3b3537833edee3c217af8350c79ad701ff03655302def0567b3252965358e4929cc6e56ac179f32ee" + "content" : "5cc758b4c5049d792f97296a89009088332c1e2abc180e8f2251f49961a6d6d02b4a9bb4d4fffea0e91ef8cb4530b2f9a70cfd62bc334f47be2f667c2d8a9e0f" } ], "licenses" : [ @@ -135,7 +135,7 @@ } } ], - "purl" : "pkg:maven/org.cyclonedx/cyclonedx-core-java@8.1.0-SNAPSHOT?type=jar", + "purl" : "pkg:maven/org.cyclonedx/cyclonedx-core-java@11.0.1?type=jar", "externalReferences" : [ { "type" : "website", @@ -145,10 +145,6 @@ "type" : "build-system", "url" : "https://github.com/CycloneDX/cyclonedx-core-java/actions" }, - { - "type" : "distribution-intake", - "url" : "https://eu.artifactory.swg-devops.com/artifactory/res-cryptoagility-team-maven-local" - }, { "type" : "issue-tracker", "url" : "https://github.com/CycloneDX/cyclonedx-core-java/issues" @@ -159,47 +155,47 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/org.cyclonedx/cyclonedx-core-java@8.1.0-SNAPSHOT?type=jar" + "bom-ref" : "pkg:maven/org.cyclonedx/cyclonedx-core-java@11.0.1?type=jar" }, { "publisher" : "The Apache Software Foundation", "group" : "commons-codec", "name" : "commons-codec", - "version" : "1.16.0", - "description" : "The Apache Commons Codec package contains simple encoder and decoders for various formats such as Base64 and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.", + "version" : "1.20.0", + "description" : "The Apache Commons Codec component contains encoders and decoders for formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "6e26920fa7228891980890cce06b718c" + "content" : "3fb10a4c7cc664241cc4ca8a0e10b0b8" }, { "alg" : "SHA-1", - "content" : "4e3eb3d79888d76b54e28b350915b5dc3919c9de" + "content" : "6a671d1c456a875ff61abec63216f754078bb0ed" }, { "alg" : "SHA-256", - "content" : "56595fb20b0b85bc91d0d503dad50bb7f1b9afc0eed5dffa6cbb25929000484d" + "content" : "6af66595f9f6a7bb58ce66518d6888d40b547c366d2262f06676eee19528ff66" }, { "alg" : "SHA-512", - "content" : "eee671e66d808b56b81e15574675cf132d7628c010736d580915bbf8c04849f04df1d95ddeea13c4e119f8f0a564c7003beeb8ab437564e080ee27063c1e52b9" + "content" : "6a71738f99031685050aadf8579a6ff67ae5fa5b779d7f35e6b9fffcdd524c29ce6d9ba055f2a88b481e80552ae9e61daf09ae8f467c048afb475a763a643097" }, { "alg" : "SHA-384", - "content" : "65eb89c19815ea11585ff6c91e2ea4acd6a41ee35502891ba29fb5ec390d567190cf2f4120bfbf50ec470274df22a25f" + "content" : "7fe601e80a50fde9085da26dc45f34c4c53117357755a41097546dd0d0be781665d4e0ef9c71a96177caea7794366e49" }, { "alg" : "SHA3-384", - "content" : "1841b59a30e095b063d9a421be91ee2adf28c98a9b32e4ef24130b60362db2f7f69eea04969d035dc4b01db38a14c65c" + "content" : "bb89bd7ccad8b1fed73b1018909aeb2bc8e0bfab087a7b5bed682db81c6fe01715dad87a5b6b99bc9f80245e7939637c" }, { "alg" : "SHA3-256", - "content" : "8327323df750189daa3755a4fb3936b685f72b46f3917d5dae2c1f3812577c37" + "content" : "9c609bbbc0842a2699f8237fb87d6aba984b11cbf94876b1a8c58000b13b3af2" }, { "alg" : "SHA3-512", - "content" : "664a0b5779c3e448d448d692a0ab19c2aec422d2adbfb23969bc44d2c6446257104d8206ccca4c0107c58f9a77ece5a48e2fd69fe8038f7cad8254675dadbb05" + "content" : "fde70430f4279c6f09c60091dcb16576f4f6bc204871f548a428a6e7a0434b799726cbcdf8ad60c6953006cebad911aca14065c0e69b4d8da3289aee2de8e6d1" } ], "licenses" : [ @@ -210,7 +206,7 @@ } } ], - "purl" : "pkg:maven/commons-codec/commons-codec@1.16.0?type=jar", + "purl" : "pkg:maven/commons-codec/commons-codec@1.20.0?type=jar", "externalReferences" : [ { "type" : "website", @@ -218,7 +214,7 @@ }, { "type" : "build-system", - "url" : "https://github.com/apache/commons-parent/actions" + "url" : "https://github.com/apache/commons-cli/actions" }, { "type" : "distribution-intake", @@ -238,47 +234,47 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/commons-codec/commons-codec@1.16.0?type=jar" + "bom-ref" : "pkg:maven/commons-codec/commons-codec@1.20.0?type=jar" }, { "publisher" : "The Apache Software Foundation", "group" : "commons-io", "name" : "commons-io", - "version" : "2.15.1", + "version" : "2.21.0", "description" : "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "84351f7991a0e6722f00e96a4ccc376f" + "content" : "bc7e020873f086ede85f97bd9f013215" }, { "alg" : "SHA-1", - "content" : "f11560da189ab563a5c8e351941415430e9304ea" + "content" : "52a6f68fe5afe335cde95461dd5c3412f04996f7" }, { "alg" : "SHA-256", - "content" : "a58af12ee1b68cfd2ebb0c27caef164f084381a00ec81a48cc275fd7ea54e154" + "content" : "7d643a2afea8b058b762aa6fb90e5b256f6c729739f8b3784c3370ddc609e88d" }, { "alg" : "SHA-512", - "content" : "e9adaeed2d715ac0ae44de056ba165a743a92acbeb9871b535f7e58e0b3bc4fba276495b50429be195098a559f3adb7294048479754a0ee4d397da2efda5f81c" + "content" : "7ac1aa4d834cd7cdecaee223a64c63d481810c73dfdb5109f402234a05cadf754e414cead99072f5140d4f7042ee084161935fb28129a631d908d989c5bbac5d" }, { "alg" : "SHA-384", - "content" : "028c72b59373d3894da22f9eb2c731aabd00f670993973f71a354d722670c12ca659686b83bbf8db32d060ca180f50b2" + "content" : "97c07e5c4f62484c98b6777f63ab032ee09eeb1c9ddae8332890126df9c665afb9cd554db02495171738720d23c53732" }, { "alg" : "SHA3-384", - "content" : "73cd585ab3736b4be50ec0f10dfe5ebfc3390eea8d56f07f29055f1fddb2dff8084310eaa6fb9f97ea639ed1abd7bc33" + "content" : "e3e44c9f4a5f4075fb62a438a84015fe2abf878e9793835a7816dc3c35141bb79fe96dfdc6bb5aef96b7c5bbbcf453c1" }, { "alg" : "SHA3-256", - "content" : "daf39bc99f1a3dc0075714a4a342a58d69a4cd62c25bc39a581f657ca72b1044" + "content" : "1f8f4ce25b7169452dabb10ce843b3246378ea55c1971acd2300e417747b3a68" }, { "alg" : "SHA3-512", - "content" : "b003f8971d1536ea0fc4320dbfe17d7259d49e59314739f9fc83134e511facbff048b0ef4f86a9d0893781ca09c95cebc3b181a6c89a2d41e851870b96e76839" + "content" : "175630adf10305aeb31d737f833021a25582ffe2ef66fda6e7f694598af9c68cebbd205ade469eca4faaf6b9d349244289e62179d9cf48d93427090e2c008cf8" } ], "licenses" : [ @@ -289,7 +285,7 @@ } } ], - "purl" : "pkg:maven/commons-io/commons-io@2.15.1?type=jar", + "purl" : "pkg:maven/commons-io/commons-io@2.21.0?type=jar", "externalReferences" : [ { "type" : "website", @@ -297,7 +293,7 @@ }, { "type" : "build-system", - "url" : "https://github.com/apache/commons-parent/actions" + "url" : "https://github.com/apache/commons-io/actions" }, { "type" : "distribution-intake", @@ -317,57 +313,58 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/commons-io/commons-io@2.15.1?type=jar" + "bom-ref" : "pkg:maven/commons-io/commons-io@2.21.0?type=jar" }, { "publisher" : "The Apache Software Foundation", "group" : "org.apache.commons", "name" : "commons-collections4", - "version" : "4.4", + "version" : "4.5.0", "description" : "The Apache Commons Collections package contains types that extend and augment the Java Collections Framework.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "4a37023740719b391f10030362c86be6" + "content" : "d564105594035b363b193d8ce3c18b98" }, { "alg" : "SHA-1", - "content" : "62ebe7544cb7164d87e0637a2a6a2bdc981395e8" + "content" : "e5cf89f0c6e132fc970bd9a465fdcb8dbe94f75a" }, { "alg" : "SHA-256", - "content" : "1df8b9430b5c8ed143d7815e403e33ef5371b2400aadbe9bda0883762e0846d1" + "content" : "00f93263c267be201b8ae521b44a7137271b16688435340bf629db1bac0a5845" }, { "alg" : "SHA-512", - "content" : "5939c9931eb9557caee3b45fe1dd9ce54cabdc4e6182ed7faac77e1a866dd0cb602bfa4ece2f3316d769913366106bd2b61bf3bb5faad1fa7d808124c06dec0f" + "content" : "ee43c513ac9dcbd7dd23b5cbb4ea5f65a2e10cdfbb403d080b87e778b3b45062315522297c41eca514a9a946228ad7650f0a572d5b78effb8260dd8084131988" }, { "alg" : "SHA-384", - "content" : "74059fd8f61c366ed448e102256fdbd1db0d690501c2c296c80f3657a2c0d8ade3dd9533b1431cc29786bbb624195f46" + "content" : "73db8eb3e79569b3fa62aefdce413e6ea250b9853953cb75b9d5ce0f2f35b59b6e86ef708326a608ff20d95bdade8522" }, { "alg" : "SHA3-384", - "content" : "15034fb39842620bf3b152cd90bce252644ebc6a29fafd6dcf5e1f3925f09ccea2ae4e195817450f996b25a7081a9a3f" + "content" : "7a9c035fa846cdcebd4331eb86ed31a67595518299a8bee54597c1eb663aee63214553a561a510b929035266c2a4800b" }, { "alg" : "SHA3-256", - "content" : "1716630a207a8f4a83bf9ef19245f46c87d62bfebbcfa1227101e6dd51da8fa5" + "content" : "614c41bfd8f9c6c1c1e5667c5be45587c3021b780937ad62f54d17051f425086" }, { "alg" : "SHA3-512", - "content" : "c290c98c7b5825d024644ec1162804a1f9ad4da3bb5324d147ddffee6cc79e3c0ecc3825d6116502f2ca292ec80c4e7f8d49a03542dda8f4d58b0dc8228923c5" + "content" : "3cfd12ec2d03ed29b682123cedae422a4c6dc459034a7e0ab5f00ccd422cb9a2ec423a08b953119c426569b888157a6d80aa0e0c63debea50c5c54c481e2eff5" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0" + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], - "purl" : "pkg:maven/org.apache.commons/commons-collections4@4.4?type=jar", + "purl" : "pkg:maven/org.apache.commons/commons-collections4@4.5.0?type=jar", "externalReferences" : [ { "type" : "website", @@ -375,7 +372,7 @@ }, { "type" : "build-system", - "url" : "https://builds.apache.org/" + "url" : "https://github.com/apache/commons-parent/actions" }, { "type" : "distribution-intake", @@ -383,7 +380,7 @@ }, { "type" : "issue-tracker", - "url" : "http://issues.apache.org/jira/browse/COLLECTIONS" + "url" : "https://issues.apache.org/jira/browse/COLLECTIONS" }, { "type" : "mailing-list", @@ -391,11 +388,11 @@ }, { "type" : "vcs", - "url" : "https://git-wip-us.apache.org/repos/asf?p=commons-collections.git" + "url" : "https://gitbox.apache.org/repos/asf?p=commons-collections.git" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.apache.commons/commons-collections4@4.4?type=jar" + "bom-ref" : "pkg:maven/org.apache.commons/commons-collections4@4.5.0?type=jar" }, { "group" : "com.github.package-url", @@ -475,41 +472,41 @@ "publisher" : "FasterXML", "group" : "com.fasterxml.jackson.dataformat", "name" : "jackson-dataformat-xml", - "version" : "2.16.1", - "description" : "Data format extension for Jackson to offer alternative support for serializing POJOs as XML and deserializing XML as pojos.", + "version" : "2.20.1", + "description" : "Data format extension for Jackson to offer alternative support for serializing POJOs as XML and deserializing XML as POJOs.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "ab3c4a4dcd1928d05f206c5d0e9fe36f" + "content" : "55a13effaac5ed19e8393cba5e05f195" }, { "alg" : "SHA-1", - "content" : "d952ad30d3f2d1220f39db175618414b56d14638" + "content" : "3a8e1f06f8bdfd9f2c29f1b2bdad970b02dff4c9" }, { "alg" : "SHA-256", - "content" : "b8e73fa171d1276832abbf20ebb4df597e377405f875ed39808cee9acca3d3ac" + "content" : "190ad4eba35d89dba3517da279e0690681c4745174b94b09ea78f81ceae140f0" }, { "alg" : "SHA-512", - "content" : "018a6e2d0ba7a102331015ec2d471d4565a7eb6d9ce4f339e7cf9f8919c4eb556617b3fa4de703cb7cc438997c7d35b77d100844b14dc1f797292937455c073a" + "content" : "a4383994ae40d74e70d3966fab9ad8412e1a40709ab58f34311f8056a7d8620545302015c0aa9c74c3aa8844f7f2248494979c5387c016107bcc46917bf71b75" }, { "alg" : "SHA-384", - "content" : "c6866f8dbf98a9586382dfe2a83a3640183ec8b9e2469e658f89b7f6c8ac236612994493fdcdaf4ef3b3c7df5dfc5315" + "content" : "606497cf60a7bfbc27e3fcb528b577046f15a0b4efae68b105800bcf11d8c29114aa151776e26a924908449fca682dde" }, { "alg" : "SHA3-384", - "content" : "4a685f29dd132abc7fad2732f6e6c82378cb23b7a8ce24d2c8b02dfbec05014c27d03ab5c573d893602e9be855bf0685" + "content" : "9afd1c3a77fb44529532607ced0b727d25c6493dac7ed450c922813542a0f8cbf8d2921f2b0ff82d5f486512f850dba5" }, { "alg" : "SHA3-256", - "content" : "26f157c5ea198ea4cd0ab454266b6e35577e29c3f8da79513f06d63a9e0e780d" + "content" : "4cbb817483e92d68904c169fa4a48d9479dc2be64a52ed6c72ff01d547d14acc" }, { "alg" : "SHA3-512", - "content" : "48bd2550e2f66c55c320faa91c12fbc001ee395362706096a2d6afbdc9b5e5857e87365349196c5bce7b3ceb3c831d4c328ab058b54e0e597388e7af828fb6cd" + "content" : "c430e0d54fc913c28c199f0d6f935196cdac069c3abcc8cc66fa8ced61dd50c3d3ebf2c2a15d9c4c3e399d7a6184e94e2bb4874e61822d02e9d874b101df84d2" } ], "licenses" : [ @@ -519,7 +516,7 @@ } } ], - "purl" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.16.1?type=jar", + "purl" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.20.1?type=jar", "externalReferences" : [ { "type" : "website", @@ -527,7 +524,7 @@ }, { "type" : "distribution-intake", - "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" + "url" : "https://central.sonatype.com/api/v1/publisher" }, { "type" : "issue-tracker", @@ -539,47 +536,47 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.16.1?type=jar" + "bom-ref" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.20.1?type=jar" }, { "publisher" : "FasterXML", "group" : "com.fasterxml.jackson.core", "name" : "jackson-core", - "version" : "2.16.1", + "version" : "2.20.1", "description" : "Core Jackson processing abstractions (aka Streaming API), implementation for JSON", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "0f51c6a7d713aed6e044cf1692bb59f4" + "content" : "889b2c417b61c9f4f460b06957147234" }, { "alg" : "SHA-1", - "content" : "9456bb3cdd0f79f91a5f730a1b1bb041a380c91f" + "content" : "5734323adfece72111769b0ae38a6cf803e3d178" }, { "alg" : "SHA-256", - "content" : "f5f8ef90609e64fec82eb908e497dc7d81b2eb983fe509b870292a193cde4dfb" + "content" : "ffab4d957daa2796cf24cb66d0b78a7090f1bcbe17c3a4578f09affaaf137089" }, { "alg" : "SHA-512", - "content" : "1f1551b0512a0ac3fc883db62472901c91051586616804daec24268ceaed409faaa1f1695df2f6220fa389aeb54802eb51dec439322bc7383507b45c08cbe17b" + "content" : "0463e1c2e1d8e8cfa4954dfce491583f0ec9ec1de6e6f342d1e5f0c63dcfb959673552a279ec4e6b6cc69e6ac2de6d42dd512149ceb76620b5d780db7325e6a7" }, { "alg" : "SHA-384", - "content" : "24b8435650ceba20008563d8bb9db4a8aca74d7ffa33e95efc6ac576d71f39d5ab228c133b413c6c852c34d905a249cf" + "content" : "a279b2d57d019a05f65762ce670ce23e02466b11276d8c0687f3bb5ed40a8a1854bfe6dd2dc157d0f5695186f7d9a65a" }, { "alg" : "SHA3-384", - "content" : "f15db08b5d9ff6b475507afeb587a30bf6fe050d216cadf1bcd9fccaac0a59fd6bb1e8533ee8a48bb6075801b6f617ce" + "content" : "06b9f33e030a99fa95d171118ab668bee42e32b35b85e05750f8514128dbadc94026afde16dbadc0ff786027b09712a4" }, { "alg" : "SHA3-256", - "content" : "5fc0bd6adc8b1f3e96b835acc703cb1a4a977deb1f44d0b9314ea25b83c2f36f" + "content" : "3e83a1a349d8ba3a4e76ee983f04b259a85263dda5090f55aae5535109c4b6c0" }, { "alg" : "SHA3-512", - "content" : "7273a7e983ef1e9c7195aa36dba2d0b7b35600f844f61a54c1a80e4590c987257411f8e17a2fb9252849fd8c5ab9fb40f14ae288159a0e98c337020fb8679a1d" + "content" : "87b3a61a71a625adfc6b9b402079c26b223e19535ca5af07e4130932d479f9c22e90696911050d8ab8a09a6209651fe2f25f54d7d9a1493b6dab6f8acb76203d" } ], "licenses" : [ @@ -589,7 +586,7 @@ } } ], - "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.16.1?type=jar", + "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.1?type=jar", "externalReferences" : [ { "type" : "website", @@ -597,7 +594,7 @@ }, { "type" : "distribution-intake", - "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" + "url" : "https://central.sonatype.com/api/v1/publisher" }, { "type" : "issue-tracker", @@ -609,47 +606,47 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.16.1?type=jar" + "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.1?type=jar" }, { "publisher" : "FasterXML", "group" : "com.fasterxml.jackson.core", "name" : "jackson-annotations", - "version" : "2.16.1", + "version" : "2.20", "description" : "Core annotations used for value types, used by Jackson data binding package.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "1c1e081b6b61ee1f1cb0ef52eef45d61" + "content" : "b901def3c20752817f27130e4b8d6640" }, { "alg" : "SHA-1", - "content" : "fd441d574a71e7d10a4f73de6609f881d8cdfeec" + "content" : "6a5e7291ea3f2b590a7ce400adb7b3aea4d7e12c" }, { "alg" : "SHA-256", - "content" : "a4730771e6a495dd3793a42cdb8ce6bddb96c77e15f40c98fd8d9a7ae09e7286" + "content" : "959a2ffb2d591436f51f183c6a521fc89347912f711bf0cae008cdf045d95319" }, { "alg" : "SHA-512", - "content" : "2e268340c11ff606df14cc963e5a4c97b22c69dbe09b9ee96873b6553aa97ba703f94dd85cc05704a35c4ae1651fc37d23d87e94bbad39f2a3a63fc2b3f754b1" + "content" : "8926d89bfe7f427c7793f6af619249540f23f82eae055dd03d4cb163ff603a43dd6a3ebe43528d00789aed3df0dd2f10e08552fdec53e2691849b9769f57f0c9" }, { "alg" : "SHA-384", - "content" : "27d294ee2a7519f851bd9da37eefd432b13e2ba2ee94e5bcc8587d8d251c8d00537fe583912681f5d43fc92f29dc23ac" + "content" : "40ee4c1438a5a190624dff9deca83377f7e60690b4535359b2a79924f736bff7c8d077e5b01c6c8972735dc152f2ccf4" }, { "alg" : "SHA3-384", - "content" : "f80ca2f1d7b49ca06c999f287249874979295312ad61fae7dba101a084825c2f7200b0a252c67e36b8f185cb5b70b490" + "content" : "0fc0f697d03692b63c2b11fcabac51c630278ed6df15420975263ea4ad19418b3b71b7889497ed20a150035f9bcba79d" }, { "alg" : "SHA3-256", - "content" : "28db760c602a501079b88e94eb4cea2e59895a688e6ea66e447b51adac113e0a" + "content" : "6bf49e384735969af020f758b255ceed26af92d4cf456f6e7b83e8de53289f93" }, { "alg" : "SHA3-512", - "content" : "acc6d03c8674438bac5e2b09e1615b11d202c12aa720e9205d820543cc2762f9a3497bf9de9f8239844db23ccf0b52cbd3255aff422c03de490c60ce2c4787ee" + "content" : "3372f6c456a7f6a33ebc3ecc65daaf36288be2a14b1f2cb9fcd7387c07acab1c69ae803a366e5d12adf4934970ffd2e34017917c5f16a6d563bc94810f228ab3" } ], "licenses" : [ @@ -659,7 +656,7 @@ } } ], - "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.16.1?type=jar", + "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.20?type=jar", "externalReferences" : [ { "type" : "website", @@ -667,7 +664,7 @@ }, { "type" : "distribution-intake", - "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" + "url" : "https://central.sonatype.com/api/v1/publisher" }, { "type" : "issue-tracker", @@ -679,47 +676,47 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.16.1?type=jar" + "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.20?type=jar" }, { "publisher" : "FasterXML", "group" : "com.fasterxml.jackson.core", "name" : "jackson-databind", - "version" : "2.16.1", + "version" : "2.20.1", "description" : "General data-binding functionality for Jackson: works on core streaming API", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "ac71b868569d329136f2c63f34dd2c89" + "content" : "49d7b7226df5ed4a036e48997a03d066" }, { "alg" : "SHA-1", - "content" : "02a16efeb840c45af1e2f31753dfe76795278b73" + "content" : "9586a7fe0e1775de0e54237fa6a2c8455c93ac06" }, { "alg" : "SHA-256", - "content" : "baf8a8ebee8f45ef68cdd5e2dd3923b3e296c0937b96ec0b4806aa3a31bccd1d" + "content" : "34bbeb4526fff4f8565b12106bf85a6afcbae858966d489b54214ac46b2e26e8" }, { "alg" : "SHA-512", - "content" : "e826126759ef714b35c546a524d0fc82e8ae38ad19d0502a58d360926aef3d13492092372302fcea19e78b24432838a40023ebf5dfae4e8c566478c4833ea998" + "content" : "16906e9c2f1962649eb21de148f362fedf2ce903c7ca0e6d68a01d43dbe8402b70cc537c104f36bc40a2bed6601162e7c21663735582e25bff7e27852be1405d" }, { "alg" : "SHA-384", - "content" : "6e46bf61e034085444b1a708fbb6926ddd46ccaa75c20c9765c1a98c266449169d7a28e6197224f46cc4c15201187ab6" + "content" : "0591935cdfed1d65fa4a2820133ba129384f71921228ffe093f343d3ebf0b699762810d9208641726111015f0e35753b" }, { "alg" : "SHA3-384", - "content" : "649d02e2265bc92d75876b31006f1cb2fe33788da8edb06ebc5b798e964ba7a8d6b96d21053b01e5fe3cf27a63a8b66c" + "content" : "855ccd449944e7884f8088c8c5b224e6e2f63bcd3123502618b4f5ded025e5978143af8c5d31215276932bc3bb089472" }, { "alg" : "SHA3-256", - "content" : "d58b494fb40bb93c799c315293daf81fb6d0bf418d38b912aab1c37b4de1db77" + "content" : "53732171c9f2bdeaa40017a34683a00ac11e8a8c1bcefaed07eb91e629e20376" }, { "alg" : "SHA3-512", - "content" : "c3950b04417dee7450b36f3428005a2f118c8ce0388f2c2470f5543cac3106215b6b591848775176892951f2ea7a608c7d02280067d5cfae1634e0f3e306e628" + "content" : "05017efae94bc3c83131aaaa7911f20e7c367502cd2cd05c6cedabc877b55724bcde2521ba1da15bf1c1c3ccb1a235124b39b2d4860142f2b89d4df197cf5c83" } ], "licenses" : [ @@ -729,7 +726,7 @@ } } ], - "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.16.1?type=jar", + "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1?type=jar", "externalReferences" : [ { "type" : "website", @@ -737,7 +734,7 @@ }, { "type" : "distribution-intake", - "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" + "url" : "https://central.sonatype.com/api/v1/publisher" }, { "type" : "issue-tracker", @@ -749,47 +746,47 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.16.1?type=jar" + "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1?type=jar" }, { "publisher" : "FasterXML", "group" : "com.fasterxml.woodstox", "name" : "woodstox-core", - "version" : "6.5.1", + "version" : "7.1.1", "description" : "Woodstox is a high-performance XML processor that implements Stax (JSR-173), SAX2 and Stax2 APIs", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "961dd4b2afedf95293dfdd8adfc8f211" + "content" : "971ff236679f7b35a7c13c0d02c0170e" }, { "alg" : "SHA-1", - "content" : "c6e52e84fe959e69a243c83ec7d24cd889444ddf" + "content" : "76baad1b94513ea896e0a17388890a4c81edd0e0" }, { "alg" : "SHA-256", - "content" : "c928d60665c6415fb1c39775cf95cfc44f7f4580cf5ab01b1c380ebffd76887f" + "content" : "02b9d022e9d47704ff8a7a859a0dbfd3b2882a8311eb7ff1e180f760ccda2712" }, { "alg" : "SHA-512", - "content" : "d9b3cf6aaac85d8c349e7a24ad30f7e23b7765f1b7ce2fdf301bf2240b9c7ee184bdd938e58be6df9ac90e97e3b8c7b34f8fa9da27d1ed8de78765a8345b18f2" + "content" : "28105d6409766966123d4e212dba555c4776bfeb538093d3739ef113de5c6d6e92453aabc16915bfb76124a5dcc82b57f3cd13b42ea2e4038a4495285c642d3a" }, { "alg" : "SHA-384", - "content" : "d51e67aae26449a2cdffa90a08b09cc805b85da3e758011a0945fc8b0ee8c18e98c6f94f0c0cf46b7a49e7370073068c" + "content" : "ca02f505f335a975e71c4a549bc3707c35b3592d2ac2fc2cf8887dfde44ae76b753ad2174e4971bb33bb1ab6c8c6b3c7" }, { "alg" : "SHA3-384", - "content" : "2e731b74e4814647b1a320cd2f1b9f9914db1cb07510e69fb4dda33c6b1586fb2ee9e3f5af027c98dd0d33e2ed4b19de" + "content" : "1efac262497c761e493337361dbc388ac01634dbda5322a8ee7742b0b25a26cc039c3e3653bf2302fbc31883c8030703" }, { "alg" : "SHA3-256", - "content" : "f84ca4c9bb77abb6e61930c7debee48497b2febc30d48329c6b15546dd00371b" + "content" : "10a216995fc4e318dcb0be7b9ae00c07536fbc81e6119f0bf1e36716146f674d" }, { "alg" : "SHA3-512", - "content" : "257aea7a23c4631eaaa942763e639d239660f29cfb7190f0b112abf6301a214fcc8e84b118ba73d92861a5f441bee479908a4831352ce2278d3d40ef51067894" + "content" : "924b1cb6ba79666c4fc13f1b057b376de471cfe60e68daca71ed51355abbd0de6799441ddd81df786317dd2c533cc1d3a9671f759e3a480d99c2d772eaa5ddda" } ], "licenses" : [ @@ -799,7 +796,7 @@ } } ], - "purl" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.5.1?type=jar", + "purl" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@7.1.1?type=jar", "externalReferences" : [ { "type" : "website", @@ -807,7 +804,7 @@ }, { "type" : "distribution-intake", - "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" + "url" : "https://central.sonatype.com/api/v1/publisher" }, { "type" : "issue-tracker", @@ -819,46 +816,46 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.5.1?type=jar" + "bom-ref" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@7.1.1?type=jar" }, { "group" : "com.networknt", "name" : "json-schema-validator", - "version" : "1.0.87", + "version" : "1.5.9", "description" : "A json schema validator that supports draft v4, v6, v7, v2019-09 and v2020-12", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "f0d3df7d661e41708e264ea82bd0ad4a" + "content" : "84622292ac5001bac8f16dc5002a8b94" }, { "alg" : "SHA-1", - "content" : "59861a488ba2b977ef444c03e3c8c8c9f96c0734" + "content" : "6a2f9fe324b9dc8d8e0c3d7b435f7ae99595a556" }, { "alg" : "SHA-256", - "content" : "d2c00a6c4515a4adecbec813c4b994b720782207258d49cb537478edec1ada89" + "content" : "e0b8baeb78fd1ba027454ee3974d8a02f54447eaa510d3052820a7d2160d9ae4" }, { "alg" : "SHA-512", - "content" : "ca1419376baf5bfd13163e7787085134c46b196eb6fbb19099eedb56d153b37dc7b709d7e771088421c567c45066d209f37e5782706f798a228e7e4f21b7c522" + "content" : "5ba210c135717a6ed043e0889d96f6381b3668f9e2a011bd0def8138ad327813f792259858ae5ed192cb8ec0645308113769aa8ebee903db1ccd82e98cb3009d" }, { "alg" : "SHA-384", - "content" : "e454ab9b970e4cb4b2f6f595495e0ad43d455b7fb10d474607f19fdef4569acc08a4f935625451d118e0496682ff33a4" + "content" : "21a4f4fb586959241ce92ad788cb4326d62232aafcddf6953ef7769efa5c6936487ffea51693ff44206f4d66c83ee753" }, { "alg" : "SHA3-384", - "content" : "ae83744bb3d0cc751059cd8fda72df351cd5127187a16c3c99ea679c3433f240f90c13de4e2c5c11206d325375e48c59" + "content" : "36bb0b96a34254780e991440e879c1f44a0a62362e115a5c761df0ec1c8f2a9f64a7421ea3cb50a589ae501619fd3942" }, { "alg" : "SHA3-256", - "content" : "34685e96c0c011463bb57551b03f66b522eedf3d306e7181b5823a2036e87964" + "content" : "c97a2638d46c235056bacfe90d8e0b88a823a5622e88b608a31f481f3adb9ccf" }, { "alg" : "SHA3-512", - "content" : "764183cf1e2de9fbe52d6f228957015ab7cc0f051aa3a289ecaed9b0c37093d791786f55bb141083beff08cd78aad282fec4e9d8e470cbde3ad18ad3ec7d6383" + "content" : "08b256bb3ac49102d87c0e635d025699154bfa7785916d591173af6ec14dfde885e34500a7bd13159a00a7fe78dc859aefa9dc930d0719a64ea08209ccffb20a" } ], "licenses" : [ @@ -868,7 +865,7 @@ } } ], - "purl" : "pkg:maven/com.networknt/json-schema-validator@1.0.87?type=jar", + "purl" : "pkg:maven/com.networknt/json-schema-validator@1.5.9?type=jar", "externalReferences" : [ { "type" : "website", @@ -876,7 +873,7 @@ }, { "type" : "distribution-intake", - "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" + "url" : "https://central.sonatype.com/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", @@ -884,50 +881,50 @@ }, { "type" : "vcs", - "url" : "https://github.com:networknt/json-schema-validator.git" + "url" : "https://github.com/networknt/json-schema-validator.git" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.networknt/json-schema-validator@1.0.87?type=jar" + "bom-ref" : "pkg:maven/com.networknt/json-schema-validator@1.5.9?type=jar" }, { "group" : "com.ethlo.time", "name" : "itu", - "version" : "1.7.0", - "description" : "Extremely fast date/time parser and formatter - RFC 3339 (ISO 8601 profile) and W3C format", + "version" : "1.14.0", + "description" : "Extremely fast date-time parser and formatter - RFC 3339 (ISO 8601 profile) and W3C format", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "4f9277e3108caa3314836d8f20f9cf94" + "content" : "e537d0a2bc8066726f7e4654c253cf84" }, { "alg" : "SHA-1", - "content" : "00c6977b9d42efa3f8c95c31db5313a96ffc1724" + "content" : "c0f9f9d4f4404787e992ab3af5ae95f2fad79e47" }, { "alg" : "SHA-256", - "content" : "55ceb418c9e8138c4fcf62e213c4c814d89e8a84c827d395407cbecba5d791e7" + "content" : "5cf40ab0cc77828ab2b875b1f3ecd71c8295d7721933476abc2e08fddcea164a" }, { "alg" : "SHA-512", - "content" : "b29808a998e120d6fa97a19ea92402e57d06b92ddb98b892ae7c9de044b9e1d805dca2f7c0fe7faaa1fced7eecbda927d709113727a050972f24a75aa29525b8" + "content" : "aa69a6af3a7123eb41425bbaf6834e16dc3323172709e2338b8a21b970fd21333d996515f42da4aa0225251e30542ad7d9c8332bdf7d62ed96b42fadc8a1520d" }, { "alg" : "SHA-384", - "content" : "f63cbcc14966028fc81feec87bb5f948e0acc0a1683e9147eafe71c98cf3bb38d871bdccfdf70d94c985e1727b00ae7a" + "content" : "8d201334c39b68d13d66fc9df2440fa848b055a9b901e1c630ff66a47e70c8816484d106ae18c642d4257034f33e55f2" }, { "alg" : "SHA3-384", - "content" : "f95deb0a7c863dfc3e595a1398beecfd4baa7c3b5c8f43c3324e374de58d8e13891b32cb62d67d0e44df384fa320246e" + "content" : "033715e1422cb3f22c1073bc7b058fd16d1436c6314f49f13480d81c86b656cb77a4d852cbba35542bc8f2ce49244ba6" }, { "alg" : "SHA3-256", - "content" : "37b170afbaa74ad33e4dfb402aae14a2a026fbde83cbad0e61aee65b5a01f55d" + "content" : "f18d275dd2a0038a82432e06bb9f396151310136e3a316a869ef54d7fae834c5" }, { "alg" : "SHA3-512", - "content" : "f87bbab20f0ffd19ad27225b623b44cfa693fc83b27eb828acf0beeda846a13a9139a11e32d59cf81aa93da08af02335dddf59b2afc5a36900478a04c09c6218" + "content" : "8a51b3c6144eb2e363f8804da316d9e3dc246be07af4c0bb55e9540c2a0deb5eb9beb825120d3d203e3a561fd8a605ad64f3af5d233725e1b9c7e06232deaea9" } ], "licenses" : [ @@ -937,7 +934,7 @@ } } ], - "purl" : "pkg:maven/com.ethlo.time/itu@1.7.0?type=jar", + "purl" : "pkg:maven/com.ethlo.time/itu@1.14.0?type=jar", "externalReferences" : [ { "type" : "website", @@ -949,51 +946,51 @@ }, { "type" : "vcs", - "url" : "https://github.com:ethlo/itu" + "url" : "https://github.com/ethlo/itu" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.ethlo.time/itu@1.7.0?type=jar" + "bom-ref" : "pkg:maven/com.ethlo.time/itu@1.14.0?type=jar" }, { "publisher" : "FasterXML", "group" : "com.fasterxml.jackson.dataformat", "name" : "jackson-dataformat-yaml", - "version" : "2.15.2", + "version" : "2.18.3", "description" : "Support for reading and writing YAML-encoded data via Jackson abstractions.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "8b854304b3f56fcb85f9815f420b13fc" + "content" : "96671888dd42efee72d555b537558977" }, { "alg" : "SHA-1", - "content" : "58194ff9f51915ad6bf6b6f24818232d7566418a" + "content" : "66658356a375664262c227dad09adc51dbc09c54" }, { "alg" : "SHA-256", - "content" : "37795cc1e8cb94b18d860dc3abd2e593617ce402149ae45aa89ed8bfb881c851" + "content" : "3ca00e47cfcb43e79438ddcfc8fc735e9ebac3824fb7769138609be6bd56e483" }, { "alg" : "SHA-512", - "content" : "0e7e444bb04159967945a131e15131304e667370ba118d4d9d300ad10ab68c85f250bc7ce31d46bc72ef381f99f7f6352fd866debf700e85995063cbd6bcb728" + "content" : "a4696ab6e7161a5aa913ca0d22ff99aae12828104df3169753cb60ed69a8ed29c776c4beb1c938caad57344ef649572b0ef21fa45f3e58b3321b25b5d073939a" }, { "alg" : "SHA-384", - "content" : "ebd84ccc50f2986468a62028fcaaae53520ba5eb64f008bd086b10e4ffb1ca33af8a4aded7572e09a6eb9419da36485a" + "content" : "064eddddc868cac85768a2149fc291d35e429737c223f7b6495c28b3872ccc7101eb21672f6b2d0637777fe42050efd1" }, { "alg" : "SHA3-384", - "content" : "3881fbd843d0351c51ccd33f4c85a4c8f2949165c19e4ff44caa3ca7418505366af75c1f73711d85f666d7095f18939c" + "content" : "c817c948326114e676267e97cb87f9eea44f8042f03cc32c02299097683d5d12f538a337f716a6f1fed2e41ef33cdc5f" }, { "alg" : "SHA3-256", - "content" : "e9e2e7b894cf982c5bc43a490bd784cf01a8c4123a5b1f2a0b73133104bdfff3" + "content" : "b13168ea825b0f2c3b7084b34263e051e6cb2ce36faccb4f4661370746100af9" }, { "alg" : "SHA3-512", - "content" : "9154b0c38ef860cd89bc2338afb85d26f225aac039fb284c29ac034cd27fb34074044400264058153184ecbff214d2611b7647ae06defa9611766c893e7a857c" + "content" : "84a42a102dbc9761fa2c4e5ebe85deb1b5d475bc4f2b3e7d025edaa4e331c87460904d0707673eca186c705c72762bf38364dc1f21f958f76f0518ea4e7d38a4" } ], "licenses" : [ @@ -1003,7 +1000,7 @@ } } ], - "purl" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.15.2?type=jar", + "purl" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.18.3?type=jar", "externalReferences" : [ { "type" : "website", @@ -1023,46 +1020,46 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.15.2?type=jar" + "bom-ref" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.18.3?type=jar" }, { "group" : "org.yaml", "name" : "snakeyaml", - "version" : "2.0", + "version" : "2.3", "description" : "YAML 1.1 parser and emitter for Java", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "caf24b81b9d57e6d4f68b1ccd36e00a3" + "content" : "2a1c2ee8923dcd6bd6d025751af5df37" }, { "alg" : "SHA-1", - "content" : "3aab2116756442bf0d4cd1c089b24d34c3baa253" + "content" : "936b36210e27320f920536f695cf1af210c44586" }, { "alg" : "SHA-256", - "content" : "880c9d896e4b74a06c549c15ca496450165d6909fa15d7e662bee8f6a66d7afa" + "content" : "63a76fe66b652360bd4c2c107e6f0258daa7d4bb492008ba8c26fcd230ff9146" }, { "alg" : "SHA-512", - "content" : "93567558444365c436027bd1064b67ae99abde77fa89b33ac7c586ab83e4dbf02b7610669fd00ccd258bca6ba3fa078954c92d918b989317dce7bf9ce18836b8" + "content" : "1c9c78f0d102ae49a7c06f9e20c6a79a4fb9a2af962230ee6e136bda0caf10dcbb9deadc1c3ab15f74a4982ec8f8266217115e357329fde5b3f4f1858882de0c" }, { "alg" : "SHA-384", - "content" : "63c0ec40f4e3f24786031fb8a9477071c86e69247dce283ff725e328e26fba7bdfbb0ab52027b9b0988b3978703a95fe" + "content" : "77b1d06e83fd51b83b13372d5ef2eb43c5a66f193db857cee947ae4e900e4a4a0c66a8074435984b9a0b007a69cc2b4f" }, { "alg" : "SHA3-384", - "content" : "fedd091de2b63c38fb04cb8e2d657bc7b37193ef065b18058be892d6b816d7cb68e5445819c3f3f8fca116311adc9760" + "content" : "550c4e7a119fd690f750317dc0e20ad7bfc7fa28fa0409fc572bc745d51340a60e9e2ce2af97f458daa561155130bb97" }, { "alg" : "SHA3-256", - "content" : "66264c5c5f4703942a959310c14f22df9c2b1c304ddca1d1c211da58af5623f4" + "content" : "d1b540ee39c34ab1484be27d2dd56a14aa48f88668905f9ad176932f4b2cd5d6" }, { "alg" : "SHA3-512", - "content" : "0c4c5807880025a22791114253443d2166218760d63b80cd72eb3fdd71a19fdadb27d392b47de9c6b7ca2a2dc312273f0b8c97012ff277d2cab0fd06f3902573" + "content" : "879ccb34343ebd4ac4888091d97f393c5f75cbb066cf8cf1b9b3eb03a3442cb17326c60bd0db1403aa66ed1f0a5a0d548c96dbce74ebc5c3d6d93950f24b417f" } ], "licenses" : [ @@ -1072,7 +1069,7 @@ } } ], - "purl" : "pkg:maven/org.yaml/snakeyaml@2.0?type=jar", + "purl" : "pkg:maven/org.yaml/snakeyaml@2.3?type=jar", "externalReferences" : [ { "type" : "website", @@ -1092,477 +1089,429 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/org.yaml/snakeyaml@2.0?type=jar" - }, - { - "publisher" : "QOS.ch", - "group" : "org.slf4j", - "name" : "slf4j-api", - "version" : "2.0.7", - "description" : "The slf4j API", - "scope" : "required", - "hashes" : [ - { - "alg" : "MD5", - "content" : "403dffa46cdd2e3c82da19df4f394a4c" - }, - { - "alg" : "SHA-1", - "content" : "41eb7184ea9d556f23e18b5cb99cad1f8581fc00" - }, - { - "alg" : "SHA-256", - "content" : "5d6298b93a1905c32cda6478808ac14c2d4a47e91535e53c41f7feeb85d946f4" - }, - { - "alg" : "SHA-512", - "content" : "216d2cac27d501972c888f94dfa747d700b80d60813884b6ab4b12c6a3b17ed0c21a1d27e1aa4332c97c828f20039e3913d2763d7e1a3cef36ae4389a276e7a8" - }, - { - "alg" : "SHA-384", - "content" : "c25b39f418aa726ba8405dfd9b356131f89984e2ef5a55a724a2abf3b7c78443f671105835161d2414d602cf03da9f2d" - }, - { - "alg" : "SHA3-384", - "content" : "f33abfaac21badae6f85d3ebbc6c1204fd7fda3bb15173e763fa8cee95bce6a8270eec2c8f49343c66c8d2767bc317e1" - }, - { - "alg" : "SHA3-256", - "content" : "6e00d4b264a2afc4ca4e98f716ecece66c32c626ca3f8c5d56b22092b6fe417b" - }, - { - "alg" : "SHA3-512", - "content" : "ad7b9142d370fc532a07cdd43881a129b012ff50e2bede3ac27d9bd31ec707bf2f45e82002fa59e962955cc38ab73cdd77713fca50cedc926c046f5617c1285b" - } - ], - "licenses" : [ - { - "license" : { - "id" : "MIT", - "url" : "https://opensource.org/licenses/MIT" - } - } - ], - "purl" : "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar", - "externalReferences" : [ - { - "type" : "website", - "url" : "http://www.slf4j.org" - }, - { - "type" : "distribution-intake", - "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" - }, - { - "type" : "vcs", - "url" : "https://github.com/qos-ch/slf4j/slf4j-api" - } - ], - "type" : "library", - "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar" + "bom-ref" : "pkg:maven/org.yaml/snakeyaml@2.3?type=jar" }, { - "publisher" : "IBM", + "publisher" : "cbomkit", "group" : "com.ibm", "name" : "mapper", - "version" : "1.0.3-SNAPSHOT", + "version" : "2.0.0-SNAPSHOT", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "f77ba78b00e389feb00739f8f39381f5" + "content" : "8266e2e8bdbc19492b73a641829b77f7" }, { "alg" : "SHA-1", - "content" : "3527ba5c2addbdbe28ceabafc99fb63ed1f19598" + "content" : "0a577009d07ae2dd201dd12db7de534a95132822" }, { "alg" : "SHA-256", - "content" : "c18a94c325cc96ea9e1abdd8d7ff1f030f0d414e14d19978ba4e97f3851dbfd5" + "content" : "309909b57fdefcf60f7a775579f13961f2bf5b0993c4ca0bfb45849d1c1d3e4e" }, { "alg" : "SHA-512", - "content" : "a3db5622d4a4e3ad7db2567fb8caa8d7c77ec8cc6a5a0108041964e8400801757bc8a5760798299f224ec6dad2e8c3e460f25224d3c7854768fefaa82bb41c55" + "content" : "be39a43306537c59940b629f953bbe60d6dc4f86ed05d4e3f85a0a00a6176f87d4035335bc376f7dcf4edccd9f7721ea885c00936d6ed15ff3bd263b6afbeeb0" }, { "alg" : "SHA-384", - "content" : "8b74ab21024e508b4c00a57fdce5aa0e61567ea3712185f6dffb3662f7bb8319bb878e0f004ae712d98d0d766a43ae63" + "content" : "f568108df2411dae89b7bb0a420f7c1947d732ce7892d497d3d99d5eda151d87bf68a142e575d19b561914fac4d85a75" }, { "alg" : "SHA3-384", - "content" : "ec4e1425c94578e1e96fd1c2b10baa47ba6f1cffaa7a569d3f4c50ca18dc433492c5641cdd379c89a4b41361f1eda6a9" + "content" : "f9ed8e4a5c42c2eaaa4af32f36589139571237a4aa85b5353f5c8ff1bfcf90f2d227e77e4ccb1716bb85e9a9b9a5ad7a" }, { "alg" : "SHA3-256", - "content" : "b8dd34534aeef2ca45902fa7e047c7965db3d82cd8cbb31fe87c71911d3b2957" + "content" : "5d5aae940db911e26128b08abd03d0db1071c821345d019ba9c144aa45cb9f8d" }, { "alg" : "SHA3-512", - "content" : "676519218fc4c944296be985e14098e41ea69bb84e3ee92ac62315810301fa7cfb48d6036789ea2aae727e84811183646e5cb98b95c312a3a50b86b9e7c1fbc3" + "content" : "34e93b78ae899aca9010cd2bed9ea1db4d479ef92715d92a245910f57be8f74b299f25f593ff216d0f484a068007846006bc0a7ad5d22e8485f0b4a7aff1e297" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "https://www.gnu.org/licenses/lgpl.txt" + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], - "purl" : "pkg:maven/com.ibm/mapper@1.0.3-SNAPSHOT?type=jar", + "purl" : "pkg:maven/com.ibm/mapper@2.0.0-SNAPSHOT?type=jar", "externalReferences" : [ { "type" : "distribution-intake", - "url" : "https://eu.artifactory.swg-devops.com/artifactory/res-cryptoagility-team-maven-local" + "url" : "https://maven.pkg.github.com/cbomkit/sonar-cryptography" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.ibm/mapper@1.0.3-SNAPSHOT?type=jar" + "bom-ref" : "pkg:maven/com.ibm/mapper@2.0.0-SNAPSHOT?type=jar" }, { - "publisher" : "IBM", + "publisher" : "cbomkit", "group" : "com.ibm", "name" : "engine", - "version" : "1.0.3-SNAPSHOT", + "version" : "2.0.0-SNAPSHOT", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "67ae457c13ac566ea59b295a59cb7e95" + "content" : "82d71013150d0cc35b2f86c047257ea5" }, { "alg" : "SHA-1", - "content" : "174f4581fdccafe44ba8b06ca8776250a7cbd6be" + "content" : "d8aa90c2d6a5d43a659f77c8106d2638f2fa9b46" }, { "alg" : "SHA-256", - "content" : "e516d0b5fab931fc1f1c39d1ea892f2a07503ec2a245bbc9dcb1c6804adbafd2" + "content" : "a30d5984faeef0722b4cfc6b96e0680e11807dd0e058b791ea2ce803526851f9" }, { "alg" : "SHA-512", - "content" : "914b26f230b80175d70655604c16a5d2f0c34c95be27f5eaedcb01ccd71680c4723f8978c05bf7127f74f2d56beec3cbb98c18b372dfee525d07b7a0b88cd43e" + "content" : "4e2c67e7f337c49c43299da83b8707bac597304ce744a08fc3105e8679a9c1d0908b06a73557ae5b33e3f3cde36dffa11bae79a63b90bccc676cf690ea46be22" }, { "alg" : "SHA-384", - "content" : "0b224db460fdd73a412e39107df54b1bf11c43c424032ad00a73b7f695ba693b4e18a4cc3865f3b42d85840c703b2f1a" + "content" : "c259f83084de03dfb95efb15da1bb5e89a70453ca58df5929ad51fbebc3f4a46e7964249f1bcb71e099167511772bf77" }, { "alg" : "SHA3-384", - "content" : "a4980534f8d193ee0e6c984d540af540221d481fa955c7262eedccdb97afd92701478c32dec4bb874545524c95e4ae4a" + "content" : "aafaf842f747bd36b202cba133419618398debf30bef80ace36629d995c510f045a5227181b98e22685865fd59559080" }, { "alg" : "SHA3-256", - "content" : "b10c75d6a28044f378a59270380d20f7032b80146c669292c31e9140f1cd6548" + "content" : "98c5eb98fa32698d7f1070c731ed32053f8528393a9696f983ae285f9054831d" }, { "alg" : "SHA3-512", - "content" : "a93f4b34a1818b9eb6675e31b810583ff28f6e76470494819d5a7c831d987474bd4c600f297655dfb8c379d3af3861634e7668bfa22c4eddfacf2539cee17ec7" + "content" : "a695852c9a2886e19fde16679d404d92be3ae62617ca460852c29a16601c97385a494b3865b92864f125bed747d7e5836f13153ae86a6c3b7179317d22fa2070" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "https://www.gnu.org/licenses/lgpl.txt" + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], - "purl" : "pkg:maven/com.ibm/engine@1.0.3-SNAPSHOT?type=jar", + "purl" : "pkg:maven/com.ibm/engine@2.0.0-SNAPSHOT?type=jar", "externalReferences" : [ { "type" : "distribution-intake", - "url" : "https://eu.artifactory.swg-devops.com/artifactory/res-cryptoagility-team-maven-local" + "url" : "https://maven.pkg.github.com/cbomkit/sonar-cryptography" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.ibm/engine@1.0.3-SNAPSHOT?type=jar" + "bom-ref" : "pkg:maven/com.ibm/engine@2.0.0-SNAPSHOT?type=jar" }, { - "publisher" : "IBM", + "publisher" : "cbomkit", "group" : "com.ibm", "name" : "common", - "version" : "1.0.3-SNAPSHOT", + "version" : "2.0.0-SNAPSHOT", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "6b537a90ffd838bb65c5a9c2ff371dce" + "content" : "0bc212a0d7a96c40a0c6792249b21ee7" }, { "alg" : "SHA-1", - "content" : "76b39430ee28fd8962edae300a91d5ebc52c1076" + "content" : "70c6efeb7474e7b78595b6601584276bb7a90814" }, { "alg" : "SHA-256", - "content" : "1c9dcb0bdef66d58f48eebc5be6b625485ceba73f8e3310d8b72f5341094acea" + "content" : "aff8b56a14f886f07e502bf26baa476c3b6f3b79b8b6b003da2260435cda087f" }, { "alg" : "SHA-512", - "content" : "be406c24fb42f8595a51ff011041cb03271ff299d6c724961276f76ccc3c2a70a02e41726c188cd48081f064de989d16abf295658ac33a3d0f417a20eeb6c879" + "content" : "dcd37bc935a630965b07aa61633eb51e8ea58543a277f387edb93956a5153b447bd93a48ca2236a56ebf8df5b72b6f4e1759a4d222d1b12b480730f378ad87b1" }, { "alg" : "SHA-384", - "content" : "dcdf2d7e35abc1fc724ab290bbc10952df07a9b5ccd18373fb549c56bd14da38f529de16240e1fee98e083fc025876d8" + "content" : "8af172d828b3415fb085293a1788e04fe53cbba7ae53c2c4911f5333dc30cea9e3a11255922852f6269b09786b9fc8b4" }, { "alg" : "SHA3-384", - "content" : "113bf691c2e686f7b92e4b8c9a4bc788d6c14e77eb448d59a2532c2a0cfa35bdb8f9a87b3a02cc72052f0b0d65fa1ac4" + "content" : "8b03cb2f7fd323ad12fe42836a91697c8a74689b3fc732c16353eab599f709c88ca68dc05e1a4464990990bdd14000f2" }, { "alg" : "SHA3-256", - "content" : "b1103a71a3a027ab5c74986541390192f9c3e9aacc6c05bf6500b653b3b2e387" + "content" : "118e266f4ab89f83ee60b405959cdfb3f114d3f2553d16d5e34cf8791f8164f5" }, { "alg" : "SHA3-512", - "content" : "b03a0a66d302c49312991dd472959472afe74e62fea2b0fe725e4c34dad295a4ac7b34e9e13bcd916141836a2e00dde967da90844a5f65dd7120da3318092130" + "content" : "9af3f6a7540ea1567edea928cd5a7cec4dbea9e0726f9a03de4a0dbeb8eb7e0764ac1db432a816dd2f3d182a0102c7c866fc82f79212650825253055680ba09a" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "https://www.gnu.org/licenses/lgpl.txt" + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], - "purl" : "pkg:maven/com.ibm/common@1.0.3-SNAPSHOT?type=jar", + "purl" : "pkg:maven/com.ibm/common@2.0.0-SNAPSHOT?type=jar", "externalReferences" : [ { "type" : "distribution-intake", - "url" : "https://eu.artifactory.swg-devops.com/artifactory/res-cryptoagility-team-maven-local" + "url" : "https://maven.pkg.github.com/cbomkit/sonar-cryptography" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.ibm/common@1.0.3-SNAPSHOT?type=jar" + "bom-ref" : "pkg:maven/com.ibm/common@2.0.0-SNAPSHOT?type=jar" }, { - "group" : "org.jetbrains", - "name" : "annotations", - "version" : "24.1.0", - "description" : "A set of annotations used for code inspection support and code documentation.", + "publisher" : "SonarSource", + "group" : "org.sonarsource.api.plugin", + "name" : "sonar-plugin-api", + "version" : "13.4.3.4290", + "description" : "Plugin API for SonarQube, SonarCloud and SonarLint", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "38673abe87d12508cd05498eff0b9731" + "content" : "9121c8851ff1af1153c8dd4fa94c9ce7" }, { "alg" : "SHA-1", - "content" : "7af6a669488450c4a07c2c3254e2151df42d7d04" + "content" : "64194b3b6336b78df92f9fa5a58682c85ec5626b" }, { "alg" : "SHA-256", - "content" : "27a770dc7ce50500918bb8c3c0660c98290630ec796b5e3cf6b90f403b3033c6" + "content" : "ce1c77307f81897f3c8f901d81a0169db9f2ec614d65723679bc8bfedceb56dd" }, { "alg" : "SHA-512", - "content" : "663395a885561cc97eed411c67b496c06ec9a54906185a871de8743bf53e92152f4bc7c2a0118b7f3cfe85cc0a6c408ac6d589839b8d25c851637f85880331f2" + "content" : "8a9f34a03acbe05d9086119287ab2b2d84c8bff43367f75d42ca5bd5f66c54e4007d1affe247f7f3a0cb710328705b6a0db0db2e211b46e8979ea9e3eee6c401" }, { "alg" : "SHA-384", - "content" : "85779b72d864894f1d3cdd489b0a419c0620281c4fd22a061f4a3fe2aee91015681889573200cd2124c3add48a3216a6" + "content" : "7f1d268c151ad6fda7e5c5b21abb74b5a4b2bcb3e43fb4d3eceef01cab5e28e12b0d019d6d7da39a977f1fd8a6260ed2" }, { "alg" : "SHA3-384", - "content" : "0cfce80b012ba441be96368fe8af54e805100f7680fdbb7defae4dd07ff3c75cd0f89b993a61bef139a405637a73236f" + "content" : "c4ab8215fb558662a98375c9f347636f4e27fa912a23acadf804c5661caa2899529a6777f8c9f9a133c5a6e676ec0bf4" }, { "alg" : "SHA3-256", - "content" : "f7c5e25c9c16aad9f5482f3853660238db4f32be72c20f40383a1d20e0306f42" + "content" : "acb5c5fb43a612de73d7562499398bfb7678b878de04ecb697590fac4ed2e61c" }, { "alg" : "SHA3-512", - "content" : "0f74369cdb67a58c0f89033723665320eb535d1c1e66049347f6b3e25cbf7d1f80b8fa3a7b3e0b4fa8eae8d9ec8c30510b65bab581adeaff3f94651fa214105a" + "content" : "bf256b0cd721c685cc677bc5ab0af2eb68e469b7cdcd9e9bae7b60baa718b159b0e2cc9ca489a088b8d4556cef33da26d1bdf7fb1b952014b61e4b282aface76" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0" + "name" : "GNU LGPL 3", + "url" : "https://www.gnu.org/licenses/lgpl-3.0.txt" } } ], - "purl" : "pkg:maven/org.jetbrains/annotations@24.1.0?type=jar", + "purl" : "pkg:maven/org.sonarsource.api.plugin/sonar-plugin-api@13.4.3.4290?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://github.com/JetBrains/java-annotations" + "url" : "https://www.sonarqube.org/" }, { "type" : "vcs", - "url" : "https://github.com/JetBrains/java-annotations" + "url" : "https://github.com/SonarSource/sonar-plugin-api" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.jetbrains/annotations@24.1.0?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.api.plugin/sonar-plugin-api@13.4.3.4290?type=jar" }, { - "publisher" : "SonarSource", - "group" : "org.sonarsource.api.plugin", - "name" : "sonar-plugin-api", - "version" : "9.13.0.360", - "description" : "Plugin API for SonarQube, SonarCloud and SonarLint", + "publisher" : "QOS.ch", + "group" : "org.slf4j", + "name" : "slf4j-api", + "version" : "2.0.17", + "description" : "The slf4j API", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "b401a934655540b37bf6765778a7b759" + "content" : "b6480d114a23683498ac3f746f959d2f" }, { "alg" : "SHA-1", - "content" : "64b99cf118b048da0fa98a397b2e03f11c6970e9" + "content" : "d9e58ac9c7779ba3bf8142aff6c830617a7fe60f" }, { "alg" : "SHA-256", - "content" : "f20ae1d944f84a611583c33900d8788aa855a0d9ea66493e1046539715d53c0c" + "content" : "7b751d952061954d5abfed7181c1f645d336091b679891591d63329c622eb832" }, { "alg" : "SHA-512", - "content" : "f6b8fa7447300c1f95e14e9be12d36419b302d1844bd069ceaae134b3caa54d546a337be3c66e8e25ca5dd78fb95e76f92306cf5c26ba0730e3c730d443c2822" + "content" : "9a3e79db6666a6096a3021bb2e1d918f30f589d8de51d6b600f8ebd92515a510ae2d8f87919cc2dfa8365d64f10194cac8dfa0fb950160eef0e9da06f6caaeb9" }, { "alg" : "SHA-384", - "content" : "5cbdc17456d4ab1959cd8ad59d64a733224a3d03aa0f1e12968e0e7c86785e465d3f27f7c54b13c858326b4ee8bd60a7" + "content" : "6ea24f814a9b6ece428cfd0535e2f3b8927005745ef61006b50fdb5a90126ee5ea05650155382b3b755c5bce38ef3944" }, { "alg" : "SHA3-384", - "content" : "8930616bed39525c4c5c0396f8c541268b46b1df45432ee66ca6af8609a6ebd1e904493f025ba4b045401930a3ea2a2d" + "content" : "9b1015052f0ec43f9be09764e131834157599611cb52f6fe591c4ac6a8ab4817518f2a4b8871e5e738c8678e93af5557" }, { "alg" : "SHA3-256", - "content" : "4fb1225cc1bed06656fa92422d0425b44032725e6afb8d980c4af8cd8efc4b40" + "content" : "00559b4f4066b4917ba4fe2a6f23111eaeada321112d030910d218ced9084b5e" }, { "alg" : "SHA3-512", - "content" : "3a505b03e37ff9bd00248bf77344b880f206042a81b90eccbb42a78fe2496ff4f61c519f4ec77ded65d1f488b4caf6a69afae97a9a5a59f915ec8068176a0cbb" + "content" : "9579c2f7e7516e177c2d493ccc9eb8150978cf19f6f09b28d116f6935239fd56dc6af2b62b3336f79b0b462445550cd1fb5377a07001a6f44aaab6a32fa2fa47" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "https://www.gnu.org/licenses/lgpl-3.0.txt" + "id" : "MIT", + "url" : "https://opensource.org/licenses/MIT" } } ], - "purl" : "pkg:maven/org.sonarsource.api.plugin/sonar-plugin-api@9.13.0.360?type=jar", + "purl" : "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://www.sonarqube.org/" + "url" : "http://www.slf4j.org" + }, + { + "type" : "distribution-intake", + "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-plugin-api" + "url" : "https://github.com/qos-ch/slf4j/slf4j-parent/slf4j-api" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.api.plugin/sonar-plugin-api@9.13.0.360?type=jar" + "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar" }, { - "group" : "com.google.code.findbugs", - "name" : "jsr305", - "version" : "3.0.2", - "description" : "JSR305 Annotations for Findbugs", + "publisher" : "The Apache Software Foundation", + "group" : "org.apache.commons", + "name" : "commons-lang3", + "version" : "3.18.0", + "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang. The code is tested using the latest revision of the JDK for supported LTS releases: 8, 11, 17 and 21 currently. See https://github.com/apache/commons-lang/blob/master/.github/workflows/maven.yml Please ensure your build environment is up-to-date and kindly report any build issues.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "dd83accb899363c32b07d7a1b2e4ce40" + "content" : "48b9886957920a4cdb602780ca345087" }, { "alg" : "SHA-1", - "content" : "25ea2e8b0c338a877313bd4672d3fe056ea78f0d" + "content" : "fb14946f0e39748a6571de0635acbe44e7885491" }, { "alg" : "SHA-256", - "content" : "766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7" + "content" : "4eeeae8d20c078abb64b015ec158add383ac581571cddc45c68f0c9ae0230720" }, { "alg" : "SHA-512", - "content" : "bb09db62919a50fa5b55906013be6ca4fc7acb2e87455fac5eaf9ede2e41ce8bbafc0e5a385a561264ea4cd71bbbd3ef5a45e02d63277a201d06a0ae1636f804" + "content" : "c2c9d497fc1be411050f4011b2407764b78aa098eb42925af8a197eabdbc25b507f09fb898805e9bed4815f35236a508ee5b096e36f363df4d407232d50fc832" }, { "alg" : "SHA-384", - "content" : "ca0b169d3eb2d0922dc031133a021f861a043bb3e405a88728215fd6ff00fa52fdc7347842dcc2031472e3726164bdc4" + "content" : "4fb3f101106e4ce3666d5c15d276ba86f7683a0ef35f0384edfcd579ea454275edbb7400795d265ec3a38e39997e79b8" }, { "alg" : "SHA3-384", - "content" : "9903fd7505218999f8262efedb3d935d64bcef84aae781064ab5e1b24755466b269517cada562fa140cd1d417ede57a1" + "content" : "aada7e3612cf3f6190a19fa7c3db74df1e13ec56b300be9bb4317d261d5877c84ab59ba9a09168becdbd82cd41961395" }, { "alg" : "SHA3-256", - "content" : "223fda9a89a461afaae73b177a2dc20ed4a90f2f8757f5c65f3241b0510f00ff" + "content" : "306d286d0bd7549c203cc802fd755d354c4f7926fa023f4e83623ba1a6261250" }, { "alg" : "SHA3-512", - "content" : "3996b5af57a5d5c6a0cd62b11773360fb051dd86a2ba968476806a2a5d32049b82d69a24a3c694e8fe4d735be6a28e41000cc500cc2a9fb577e058045855d2d6" + "content" : "f6f1ecc684e309d7b9fc5c343792508fee935cd2119d962721662c5af88e4864ba6f47a863e083714f315f926c156de1970cd2fb577449bdfdc7bf98a4a451fa" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0" + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], - "purl" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", + "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://findbugs.sourceforge.net/" + "url" : "https://commons.apache.org/proper/commons-lang/" + }, + { + "type" : "build-system", + "url" : "https://github.com/apache/commons-lang/actions" }, { "type" : "distribution-intake", - "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" + "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" + }, + { + "type" : "issue-tracker", + "url" : "https://issues.apache.org/jira/browse/LANG" + }, + { + "type" : "mailing-list", + "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/" }, { "type" : "vcs", - "url" : "https://code.google.com/p/jsr-305/" + "url" : "https://gitbox.apache.org/repos/asf/commons-lang.git" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar" + "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar" }, { - "publisher" : "The Apache Software Foundation", - "group" : "org.apache.commons", - "name" : "commons-lang3", - "version" : "3.14.0", - "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.", + "group" : "com.google.code.gson", + "name" : "gson", + "version" : "2.13.2", + "description" : "Gson JSON library", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "4e5c3f5e6b0b965ef241d7d72ac8971f" + "content" : "a2c47e14ce5e956105458fe455f5d542" }, { "alg" : "SHA-1", - "content" : "1ed471194b02f2c6cb734a0cd6f6f107c673afae" + "content" : "48b8230771e573b54ce6e867a9001e75977fe78e" }, { "alg" : "SHA-256", - "content" : "7b96bf3ee68949abb5bc465559ac270e0551596fa34523fddf890ec418dde13c" + "content" : "dd0ce1b55a3ed2080cb70f9c655850cda86c206862310009dcb5e5c95265a5e0" }, { "alg" : "SHA-512", - "content" : "0338b50767166e5746ada6d6aa2e071e7221d699323bfb629f7f204b294c1dc4cad140610a129ed751798443b43e74e0818989c7df7d33c5915aa29742be9ba8" + "content" : "8974a052656d2e5ec968b6bac2edf51413ffc62040fdc65f14f00597e738ab544d22487f8579ba90618b5a7f94ef33773510fac67b408fee6ed274b38f3d9947" }, { "alg" : "SHA-384", - "content" : "908d0a22dc17aaa04caa5104cff7cad5b88b77eecb78dd5b3b3fefa22ff71ac50a4fb9e31c897ac243f9d841e4b3453d" + "content" : "98e8afe5b23c43b84e7a57e0e27f683a182fcf97ee3eeb6a1311582f7fecd846c806ffb092b620088dc03d256d8eaf27" }, { "alg" : "SHA3-384", - "content" : "8a7f2e061b998780870eddd571620fbf3d3c70bcb54e24539d0db504f59d65bc6bda58136284498babe29fcc5eabb7a6" + "content" : "d61d6b1cf6997c75287f454e536f855db8404e5fb9d0b8faa4dcc1e7a60ffefc05c2f92f3514e091808a8677b29f3619" }, { "alg" : "SHA3-256", - "content" : "022bf1f8039fcea717e9e34dd96eb80cfff05b43c9cbb76e9739b2421e2d027c" + "content" : "1c051cfe5e630b35d003f96e135de7c5d5cab145b6e1159143570cb246426a0d" }, { "alg" : "SHA3-512", - "content" : "0bcbc4edce974ea970c46e2da12ec98d9fd962c2cf64f757ac97136dec5623ca52af0c225895303c17ffabb57090e6772d7bd326d5e7438cef5454f8bbaeecfa" + "content" : "55ddee7f6c1659ffa82e5c308a0181b459cfeb3442f1f9868ff7e9a3c83376bd2ad527b16d5131df442ffd03d06c35dbd64458df6b02a111c1654f01db381ba5" } ], "licenses" : [ @@ -1573,161 +1522,137 @@ } } ], - "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar", + "purl" : "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://commons.apache.org/proper/commons-lang/" - }, - { - "type" : "build-system", - "url" : "https://github.com/apache/commons-parent/actions" - }, - { - "type" : "distribution-intake", - "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" + "url" : "https://github.com/google/gson" }, { "type" : "issue-tracker", - "url" : "https://issues.apache.org/jira/browse/LANG" - }, - { - "type" : "mailing-list", - "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/" + "url" : "https://github.com/google/gson/issues" }, { "type" : "vcs", - "url" : "https://gitbox.apache.org/repos/asf?p=commons-lang.git" + "url" : "https://github.com/google/gson/" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar" + "bom-ref" : "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar" }, { - "group" : "com.google.code.gson", - "name" : "gson", - "version" : "2.10.1", - "description" : "Gson JSON library", + "publisher" : "Google LLC", + "group" : "com.google.errorprone", + "name" : "error_prone_annotations", + "version" : "2.41.0", + "description" : "Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "df6097815738cb31fc56391553210843" + "content" : "75e3b25da8b8a2136463c4674f5e49bf" }, { "alg" : "SHA-1", - "content" : "b3add478d4382b78ea20b1671390a858002feb6c" + "content" : "4381275efdef6ddfae38f002c31e84cd001c97f0" }, { "alg" : "SHA-256", - "content" : "4241c14a7727c34feea6507ec801318a3d4a90f070e4525681079fb94ee4c593" + "content" : "a56e782b5b50811ac204073a355a21d915a2107fce13ec711331ad036f660fcc" }, { "alg" : "SHA-512", - "content" : "7503e4b8d05c6cc0ecb3a94c5a2e070e049083a441003a79a0cdf474f4286699b4ba1d2a655ddabb8ba10c50e7c36a7045cccdaee465166d4630db647aba2727" + "content" : "e2eb4bf9f36f95a4d4c5ea344db5cd90a456e63bef8e52932b8f6f4ecfdd59cb2f6c2ce9e67b0070c82177e42885688b95afef591b16001f789b378f18afdf30" }, { "alg" : "SHA-384", - "content" : "48a4786bd6e1867f058ee4fb676fc82d9d9f64a6d7420d4a47ae2398504c9de73222636614aeb4a9fbf10ee143d72226" + "content" : "43700b378624aa37197ef03a6b5ea40b5fbb6c0aa667eadf810ad36f0707dffaf3ea23471f2553327c3f5644cc875ee7" }, { "alg" : "SHA3-384", - "content" : "3df9a0332c2766124fe7c915cfea665d2e318ccaa7212415fabd9e93e6eb77de538725fd2ef313cde46f6d814c9566ea" + "content" : "8bf3293cf4b72c9a999948f8812190636ef3b0c35bab8dbf9a54c263eeab2a3b3d0774fdcab52c6d114551ff74a8aea2" }, { "alg" : "SHA3-256", - "content" : "d3374006d76d4f9acdf3d3a1a4f47899570f52442b2188f80c09a74f22139ecb" + "content" : "2ca1a59f4fdc37a3c83501542c63842fa4fe40c06f69a59a2a072e4af442a16a" }, { "alg" : "SHA3-512", - "content" : "2b10c2f4fe39d8712b430ff171823d7172c0a06685c1eb7de511e90159cec0e094fb2a9b50b747c5b039cb10f1fce9edf82ecbf9c47f76a6f31c4e3cb7586cce" + "content" : "6d1f419996b15e5a2bd9b268d166046e38fe9cc6c58fe56aaacbe71b95e3db8c8fe1d226e7f549ea227956feaf3087706bdfa79930fe432298bba9ec06c26a90" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0", - "url" : "https://www.apache.org/licenses/LICENSE-2.0" + "id" : "Apache-2.0" } } ], - "purl" : "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar", + "purl" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.41.0?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://github.com/google/gson/gson" - }, - { - "type" : "distribution-intake", - "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" - }, - { - "type" : "issue-tracker", - "url" : "https://github.com/google/gson/issues" + "url" : "https://errorprone.info/error_prone_annotations" }, { "type" : "vcs", - "url" : "https://github.com/google/gson/gson/" + "url" : "https://github.com/google/error-prone/error_prone_annotations" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar" + "bom-ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.41.0?type=jar" }, { "publisher" : "SonarSource", "group" : "org.sonarsource.java", "name" : "sonar-java-plugin", - "version" : "7.33.0.35775", + "version" : "8.18.0.40025", "description" : "Code Analyzer for Java", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "1b7d9cc6384c6be9b2b2be09d39a4409" + "content" : "b1a9179feade38e76fb3bd484426ed87" }, { "alg" : "SHA-1", - "content" : "74549fd0b22373ba0db5f5d8c9e83c4e1d4859d6" + "content" : "869cc6db9898899450852a5d89e77649dbc2e545" }, { "alg" : "SHA-256", - "content" : "84d7f2cce4bf4e66bacd053fd350489792519d83c292c2f4d5d8df0404450959" + "content" : "27dbc832bbeb28c70947d4d35fcc4a36b384911761831d8d5fc947cc1732d114" }, { "alg" : "SHA-512", - "content" : "f70839584286b4141cb252727f299be7a6f27cc8714d66b9c8b4a97d19030c5e39277ed85019cb2ffd9cd59f4b5c7780dd2bdd8cccd14d49a7aa618640069eca" + "content" : "b38980fb48ee7720a297190197e1ff20025ccaffad858a195234d4747773f4ed2ff2806b253ccd9d2121cddc71d1ac1fcc75ece9a07365db2089df89773add48" }, { "alg" : "SHA-384", - "content" : "ab79904167297307834e85b850b012fbdd22d6dbb938567ca8525219f8cd1cc2b725cc9ca781bca94dbab340580130ff" + "content" : "700d2a57ebc1672779fc11da69c29c822f8b0382bfb07afa5ef984abd2e38863b1ce8c2129c3ad173f796abebc14af96" }, { "alg" : "SHA3-384", - "content" : "5b177240092d00c9399f08b3148b58a299f0bb7a2a82458e5d4f4d5d0e4b5f6eba4f8b6f82c02369e8343c4bb0aea360" + "content" : "de424a453da7d8c708948d8bf9cffcabb6f00fac592f0be36b3d53fa41b95bc42ab6e1fcb4525c3c15793de00ad34478" }, { "alg" : "SHA3-256", - "content" : "f5829afa58615feeb89cdea0b96fa63ffda9c1401d5ac33d1420398ff42e59f9" + "content" : "3f2edc3ae30c79ac6e5db6bc7f968dd164f252b173bd3780ef1e06f68fec2962" }, { "alg" : "SHA3-512", - "content" : "4dc73ffee4b763a67a89b13a7574c03c9b7bfd08591088c30c64f9cb2aacd028d9c1bbbb4e5a68e5751635d9a3547e798eb4577b555187f410476a38e10ed9fc" + "content" : "73060df15758e595f9ad23967b9632b3b25584660362b8a660c699d7bfa092927edb2334ec711a2eca8394b03f0d32878e64b6b20411816b239f808747e7bcc2" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.sonarsource.java/sonar-java-plugin@7.33.0.35775?type=jar", + "purl" : "pkg:maven/org.sonarsource.java/sonar-java-plugin@8.18.0.40025?type=jar", "externalReferences" : [ - { - "type" : "website", - "url" : "http://redirect.sonarsource.com/plugins/java.html" - }, { "type" : "build-system", "url" : "https://cirrus-ci.com/github/SonarSource/sonar-java" @@ -1743,65 +1668,61 @@ { "type" : "mailing-list", "url" : "https://community.sonarsource.com" - }, - { - "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-java" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.java/sonar-java-plugin@7.33.0.35775?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.java/sonar-java-plugin@8.18.0.40025?type=jar" }, { "publisher" : "SonarSource", "group" : "org.sonarsource.java", "name" : "java-surefire", - "version" : "7.33.0.35775", - "description" : "Code Analyzer for Java", + "version" : "8.18.0.40025", + "description" : "Code Analyzer for Java :: Plugin to import JUnit report files", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "ebad97c089ab298bbf410b83645b5c91" + "content" : "8ec0e95937cd6bad70824f4fcbcdfd13" }, { "alg" : "SHA-1", - "content" : "1d6e25230cb5a0818e76cbf250b1f443c1117fe9" + "content" : "74166214d6bc038b62ac39fb6068ee92a7cc2377" }, { "alg" : "SHA-256", - "content" : "547a33116a008789a640ac520aca61b4aee460baf32d880f35ecbc247be17cf5" + "content" : "e5b3e323d65d5d1e07c67f2a3c231d976665dd36a755e4a25a529e020ecf246e" }, { "alg" : "SHA-512", - "content" : "79967a8394b8bada006fe03ed3519f73f9f4856d09cfaef3db91ab1e0dbd828bb9c69178a8151b678420e95489ace27ce9a59693be65fc3511696b446118c572" + "content" : "5f8666b8cabc3605c88d1066b3a4f102677a4592a055cddbd0857667a4c97da0b5963d4b6e9b9443bfa9a9f8eb5122bea5230c54d1948a8829137e0adfda2c53" }, { "alg" : "SHA-384", - "content" : "a3926f55e7e691e558e8fd2bed7da6f71cae00174987d108c5ccb5e4bff67052c1a7294ff83f93fecc89f0d37e72d2f2" + "content" : "7f91179e70d48c4f157b7c21e2d66043f197f5e77e93ca22cc514121f8aeb904f0be2d41cca33e026b79a6954b93620a" }, { "alg" : "SHA3-384", - "content" : "197a92ee27d6b823fe39f896604e292864f8e563ee9eebc8b7b8f98b5811c3bd3d31d1d991f91f305d61e78376c792fb" + "content" : "1181d83f7f281f38d1fd32a113cf36d0aafc3315b0f96394d1509a55cb71107a32dffc689991f08ea34d24afa146de4d" }, { "alg" : "SHA3-256", - "content" : "421298125883242fc4173246fd9f114c55e086270f0482a5b92f88462bf18f99" + "content" : "ee3151b15fa3040368071c28b161c21ffb9d0f0053ca3a869a8633790a8dbcb6" }, { "alg" : "SHA3-512", - "content" : "ff3c88c85a17e2983655e522450641dd191aa2f8818734af99b576778662e7025c6d635c6edc3052b3c42415693b7ba5c2137c7cac7140460d9405fb0d2780f9" + "content" : "94b7e5bc75cd127797485f48d5acca3853cefa2e8c433487268f12b177cd06e4aa4783f009f7a835099f406ccf1a22b69d0c3c523f3ab84fe8b348da312bd677" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.sonarsource.java/java-surefire@7.33.0.35775?type=jar", + "purl" : "pkg:maven/org.sonarsource.java/java-surefire@8.18.0.40025?type=jar", "externalReferences" : [ { "type" : "website", @@ -1829,7 +1750,7 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.java/java-surefire@7.33.0.35775?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.java/java-surefire@8.18.0.40025?type=jar" }, { "publisher" : "FasterXML", @@ -1905,52 +1826,52 @@ "publisher" : "SonarSource", "group" : "org.sonarsource.java", "name" : "java-frontend", - "version" : "7.33.0.35775", - "description" : "Code Analyzer for Java", + "version" : "8.18.0.40025", + "description" : "Code Analyzer for Java :: Front-end (Java Parser)", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "43bc91e0b5a11258625288f075b54633" + "content" : "a30b3194ba4e4aaf19e64afaf2c0cd9d" }, { "alg" : "SHA-1", - "content" : "2f748efd6e152c3526efd52a446cc8930381a16d" + "content" : "6c781ad5452a9f6c40efa651ec1514efd4956de0" }, { "alg" : "SHA-256", - "content" : "f22c60ed403f37c5378f2241c110d5f1427d9f8ac88710236a1662887a0961a5" + "content" : "6da24fc369a912c40bad484b580d15e8df7fd4a603e999b79952c1e88f1a10a4" }, { "alg" : "SHA-512", - "content" : "5ab1acc211dec17121948a678e59be6f050b1ba5360bf93fb724b51ff6160a29892c3847e5b0ad1deb450472bbdd5387f28403504670537b82477348dd97ca41" + "content" : "77fcb592867445be61fb472dc11eb2ed91e4d7675f6050728fe34fef4488bad75cf5fbb128bdbe6874820ece7e752f684065b98a6b0690bcbbc081f0efdf7a9c" }, { "alg" : "SHA-384", - "content" : "9d57998dcddbcbbf9ebcf79a68b928ce6aa9c8770c2b7565771b457ed299545f5ddbcc99a13889af53ab12e391c618d6" + "content" : "827447252ad585c8ef98e9f737d2b5ec4529f6f68f0fd571bfae08f3264186a4a5c9d864b488b66d933877c8d13f7863" }, { "alg" : "SHA3-384", - "content" : "64b3e663d553d1c3aa38d9e3b34cad8b38d440dc937bdb6e80edab6621f3c519d38ce4ec04f5353bf7e103cf315a808b" + "content" : "2eaeb68497c50d4bcd38ba010ab33f4833310fdf4c057d32ce622f01febd34d37d4b353b31ad53040a6dce7b1c287bf6" }, { "alg" : "SHA3-256", - "content" : "3febae6771046e4a5909ec72a2b6cd1749f384c910f3a090443a26d4651a1953" + "content" : "a2c28164e5d0c37e00f10f6b5187a6b8c31f87d2d3d86b12f9721516f91034e7" }, { "alg" : "SHA3-512", - "content" : "7555011fd0167dd38b798556104d02f2c5bd4b7e035065234f44ae22c7779c1a7fef4f3b17769d49deaf0635c99d211cb219ffac05da6c50ae1313f032565526" + "content" : "9163b1eac48b627a86db9c7b93fe258657561540fb605d926c645cb59e82fe6f72d1fb7d97120b4bc1488e27ede2420dbacb1ed021ff76642d10a2bc3cc54612" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.sonarsource.java/java-frontend@7.33.0.35775?type=jar", + "purl" : "pkg:maven/org.sonarsource.java/java-frontend@8.18.0.40025?type=jar", "externalReferences" : [ { "type" : "website", @@ -1978,47 +1899,47 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.java/java-frontend@7.33.0.35775?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.java/java-frontend@8.18.0.40025?type=jar" }, { "publisher" : "SonarSource", "group" : "org.sonarsource.java", "name" : "jdt-package", - "version" : "1.1.0.34", - "description" : "Parent pom of SonarSource public projects", + "version" : "1.6.0.160", + "description" : "Packaging of Eclipse JDT Core for SonarQube Java Analyzer", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "b37dc58a62e2d0cf93c0721fd974c31c" + "content" : "1df75f474b6bdb538899d8704b84757a" }, { "alg" : "SHA-1", - "content" : "505fc262c9e9347ff10f5c2e095a008db26a538b" + "content" : "1f8abb9d709c6ba2ab7ce3aa933857cb3735a1ce" }, { "alg" : "SHA-256", - "content" : "7ac622acdb900de5bb04529b822412731308f1f02a610e596b8a7789c28bde07" + "content" : "5efd84c8e2e39a310e9139b503355e9f31eeb3bcce779860ce96944096cf064f" }, { "alg" : "SHA-512", - "content" : "c264a6a75e00b39325e2be6e9cc4cc9903fcbb97e1e60766f09a42bad4d00ef0bc76b741a9c76ca76bf60fe0052987362f4f564a78e0ef3a654fdad833a00cf4" + "content" : "fcb097a96b7c6903ed8e50c95cea915cdb4ab2f4398869b812489d8f639509f970646adcd66afc8004b0c14807e05510d4406d7215726775695b0abcbe602dc5" }, { "alg" : "SHA-384", - "content" : "1f17c8e14bf19d6f93cd61f745ca681e2bf3ec5a2566a9233553e7d2c71f7896c7ee770c37db46536b98fd5cbb19f687" + "content" : "e500ad2d02142aa1fbbe1b9436f9e5bbb74d5c208b0c6aa0191725b126c9a3a4d2a21c708b2bd26a4f11a9ef880fbe07" }, { "alg" : "SHA3-384", - "content" : "40d04d2a79475f774b6a2b2a08b02387e2ac2c17e4b9b220fc1e59baf0554c569573d9abe22af1cff8e5fef69b4a43dd" + "content" : "60bd6cd889de6164963d49fe557e13456d962893e74d56bda559c6b57bd18ab1e8a065e64a2d8317e13dd754052d3f23" }, { "alg" : "SHA3-256", - "content" : "7bdaedda0da1edc3e63e8e62bcf3651b4d4169c24efa0baba01c368d2c6b7b74" + "content" : "32c6d9249b541d8ff7b488f8c584d8f068caace22037ec0e2340e6e850b919b7" }, { "alg" : "SHA3-512", - "content" : "11854f8cb06c601f4e54488b0943a8eac7790dfacd3355e52b274e8a39fe0aec36fd25da6c5711c7c294eaf540958c88013a4b57e7399f76c51b9e75d451c0a5" + "content" : "8378364906e74189f4255964961c90273743b41af7859c8bb946a092965b5787f37718ce6dccbed3cb531501361293fa96175327bd62d29a7ffe18be70caab78" } ], "licenses" : [ @@ -2028,7 +1949,7 @@ } } ], - "purl" : "pkg:maven/org.sonarsource.java/jdt-package@1.1.0.34?type=jar", + "purl" : "pkg:maven/org.sonarsource.java/jdt-package@1.6.0.160?type=jar", "externalReferences" : [ { "type" : "website", @@ -2052,7 +1973,7 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.java/jdt-package@1.1.0.34?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.java/jdt-package@1.6.0.160?type=jar" }, { "publisher" : "SonarSource", @@ -2133,41 +2054,41 @@ "publisher" : "SonarSource", "group" : "org.sonarsource.analyzer-commons", "name" : "sonar-regex-parsing", - "version" : "2.8.0.2699", + "version" : "2.18.0.3393", "description" : "Logic useful to read and analyze regular expressions", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "35a3545ee8cc01b7630817c10d3ad63b" + "content" : "c9c38681ffebe27c85c27119dcbac4e2" }, { "alg" : "SHA-1", - "content" : "f30c693d63d35e55921b600d1cc02f6ab45fb162" + "content" : "887b8fb94772af059501ce252122d572da041615" }, { "alg" : "SHA-256", - "content" : "83710ff002b9faf8afb413a05a08b0530a3cf8ef130815d5a46c955c478664b5" + "content" : "0c3ea5153be8a0766373b1992a18c91702a48b37647ca400a5cd077b2d78e9ba" }, { "alg" : "SHA-512", - "content" : "0a10e363e24117e86650a1a8e9a10a637c4f99cee64405607be5da8c4bf4ecc413e67ed78acbd174b699b5c7325db5f0d623c10ded7e642a3e98f1f74e680f11" + "content" : "830bd069a1714fd24676db83114479961e3baea2abd4884c549f147edb6b83eafe4c9230f429818a9adfba89a0c4a21d39eddbcf4c1b937cc65a65b09d1a00ef" }, { "alg" : "SHA-384", - "content" : "c3775396d6d0c3001eb244d062e0f5262b78aae72a9d0ba5760dfa8eb5310112c403d0889cc73ade62a9fafcb515c635" + "content" : "ab21ccd7f07b9bceac88e85180e1f1643b43c30db4d8cdff030cd7cbc53753987284bfc1d412d7def8ec5380244fcfad" }, { "alg" : "SHA3-384", - "content" : "87bd8e6f2545740da80e5ad7c17600f1a3d0bd86aab07557e5f2fc3cdeccfc5654f030b0fe11c93e084da7a1e8b1d95b" + "content" : "ae43098f0c1a4939136f8f285cf9ca44663c2c77fd1120dd338239e70799b713af401a1c334559565263a1dc7f8613ae" }, { "alg" : "SHA3-256", - "content" : "85d791fcc5a6001f15ca84efff8a03c55b791a88745deca215c8108c8318ad1d" + "content" : "546a71b50a13237407e76548bf1fe5d61bf08df21dfa086bd17c2e3a103d25a0" }, { "alg" : "SHA3-512", - "content" : "024d92e865992b92d5c29a65ebec60a706ea8f0859de1c55312377ef22188396855b4403033d1e03a05208f37c3a24ea2e948f463cb3c5c9bc53c8d4266e5e03" + "content" : "18dbb41e4e61ece31c96cd50cc7a1d85799119cd5a88fef79ac4553071a363f485161ada5324cd8ef8b4204d60f000f5fff39c4db0eba2d15e9babf59a01f889" } ], "licenses" : [ @@ -2178,7 +2099,7 @@ } } ], - "purl" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.8.0.2699?type=jar", + "purl" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.18.0.3393?type=jar", "externalReferences" : [ { "type" : "website", @@ -2202,62 +2123,62 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.8.0.2699?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.18.0.3393?type=jar" }, { "publisher" : "SonarSource", "group" : "org.sonarsource.java", - "name" : "java-symbolic-execution", - "version" : "7.33.0.35775", - "description" : "Code Analyzer for Java", + "name" : "java-checks", + "version" : "8.18.0.40025", + "description" : "Code Analyzer for Java :: Analyzer's checks", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "232f45616c57791e1376b309b99d6bf3" + "content" : "1ac68532191b336b9c760c596dbabf9f" }, { "alg" : "SHA-1", - "content" : "ea12ce7dc955bbafca59c3463ea1f44ad82e42ab" + "content" : "6165e4a7c0bc4dd5bd6bdc8b74184f167bb5436b" }, { "alg" : "SHA-256", - "content" : "8ac28a32e08e60c451cc153bee71bc028f3c72e4ab0e3a9c91bdc5b131ad0f57" + "content" : "78b31d837169a372353c0b91ff2776590039996d8d50dbf033b774f6930d3b8c" }, { "alg" : "SHA-512", - "content" : "6ad5b4c6b85757346f203924c26e908d5557ab4d03147afbf58e33e0f25fdb3999f94aee6973366d2441565466473c30c0861a1512c79f240cd35a9a97f0d35e" + "content" : "07b461fd5a923bbd6a60379e61fc73924ad7bc3e1623257fbb16fee3390eb61e0d930dd80cb4e290da538c958546d8206a66fb433889665312df60b63aeccb1f" }, { "alg" : "SHA-384", - "content" : "dbc472dd1173bcac5ba03e4a1165ed35bd7db93511cc8b99e5407aaaa65a56a92027d79c551a4df7120c2a8d87705797" + "content" : "d1227c576fd2372fdcb0240ef2c0fc5497aaca1251df248eabf8e767765e8023ad5e727fecdd3ade31b5af2022a9f519" }, { "alg" : "SHA3-384", - "content" : "1912414c5430f6b4711e20bb73e1076b5ad85babae3e8374fbb65f1dd3232ae380d9bc52891184befed50777dace89f9" + "content" : "5a6b215207811609717d9b39ddaa332369918cf91fbe3bba94ebfff23408624b1bade52b5cf03062d16364fd9c792ea8" }, { "alg" : "SHA3-256", - "content" : "a5cbfac546a7aaf0a2211c3f1beceb36e2ed3384c9d7d4ece2195d2932fba345" + "content" : "030d53c3182415e2896ffc5898b155cac52587a006b327a51c6c5ab59714c012" }, { "alg" : "SHA3-512", - "content" : "4f6974c7877b90dfb0acf4a6f8f412ea4f391164165ce3de75973c871e356a55fdc5ad4de3322a7e30e57f4d7caa87871b3671a63e19ca51a6f5b3cec949d281" + "content" : "a5a4a3f41c1ba65066554808baeff26551c033ccb31ec561ab622e535984db16d9742107f5d07b7d3bc6f25ec92c410600eca7cdf1d9e36fd23a6246d1220db7" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.sonarsource.java/java-symbolic-execution@7.33.0.35775?type=jar", + "purl" : "pkg:maven/org.sonarsource.java/java-checks@8.18.0.40025?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://redirect.sonarsource.com/plugins/java.html/java-symbolic-execution" + "url" : "http://redirect.sonarsource.com/plugins/java.html/java-checks" }, { "type" : "build-system", @@ -2277,66 +2198,66 @@ }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-java/java-symbolic-execution" + "url" : "https://github.com/SonarSource/sonar-java/java-checks" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.java/java-symbolic-execution@7.33.0.35775?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.java/java-checks@8.18.0.40025?type=jar" }, { "publisher" : "SonarSource", "group" : "org.sonarsource.java", - "name" : "java-checks", - "version" : "7.33.0.35775", - "description" : "Code Analyzer for Java", + "name" : "java-checks-common", + "version" : "8.18.0.40025", + "description" : "Code Analyzer for Java :: Common utilities for analyzer's checks", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "eaeb082ff51df115aaf0f3116faf4b84" + "content" : "5514880c7701b527cdcc574edae88dc7" }, { "alg" : "SHA-1", - "content" : "f11567226d2a4c2efcadf5545c3e0b1bb5f8142c" + "content" : "5e3906963a6aee9229c0d5735ec5b0caba9c7a36" }, { "alg" : "SHA-256", - "content" : "1eeb30e79298fa3cff7e7265a0d313a5572bdd726b8d83e83dcb1d144421c24b" + "content" : "89aadedaaa0bd0e788c55b3a78a5b086fd0dbc4935e1ca9e8d15266c81dbc1eb" }, { "alg" : "SHA-512", - "content" : "0034e5bf2e95fb181c476a3d1a5b111efcd22131f62d75eb6daf21da645b4e3ad8e35096274e3898e042a7463d831caea46a7840f843c10442d5f48b75041687" + "content" : "c7e5eea32cd08b004728418429b1b1255751a50a33f5a58712ee7ebddb2f15883cbbc9a999d3d388274662e1b398f2121bdd8e28465a7b86b5702be57a211e0a" }, { "alg" : "SHA-384", - "content" : "c2e5daa8bb17411f2ad282755de82c02d98a4940a81a76c26167713a1b5f55f7551875ae8459b5b77934d42f37f5e8e5" + "content" : "74603a766b61c433df59fa6df8c140018dc181c84af0476242c22c4fefea6f3437cde005c253c21301be0209797ef6c8" }, { "alg" : "SHA3-384", - "content" : "7de6a308f476947ec7a132968be161ea98ab1f135d6286129fde8ee5f8a1044a295c9febf482d7f5a5f83b65e1ccd36f" + "content" : "a9a28120b1353f47a2aff96a032d95d8988eb0b2c940bff0bcef27dc352b19950d0b1eb0de8a521f8c232cfc0b3abea5" }, { "alg" : "SHA3-256", - "content" : "8033896b6e57169054031f9d386f00cc0194f1cf930782becea1b12a5f5421f7" + "content" : "eeb22c67995bfa542c898dc47195590c37da85116f30df4b367bd970c162084a" }, { "alg" : "SHA3-512", - "content" : "789208a299ff2cbfe4ac9f6c647b0d703ff77040fce20e269b33a6d0712011d214704496d27ee8b63adf5778e4d8b58fde286e5a8f043f3b1813ec4c15a06fce" + "content" : "27adbd9adbd039453b3f8fc762117222650d45147cfb4ea26ad6daf65b994fd618f4b5a2173f0860fdaa5b1e096af32faa100c902377b811892d8664c094684a" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.sonarsource.java/java-checks@7.33.0.35775?type=jar", + "purl" : "pkg:maven/org.sonarsource.java/java-checks-common@8.18.0.40025?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://redirect.sonarsource.com/plugins/java.html/java-checks" + "url" : "http://redirect.sonarsource.com/plugins/java.html/java-checks-common" }, { "type" : "build-system", @@ -2356,51 +2277,51 @@ }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-java/java-checks" + "url" : "https://github.com/SonarSource/sonar-java/java-checks-common" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.java/java-checks@7.33.0.35775?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.java/java-checks-common@8.18.0.40025?type=jar" }, { "publisher" : "SonarSource", - "group" : "org.sonarsource.java", - "name" : "java-checks-common", - "version" : "7.33.0.35775", - "description" : "Code Analyzer for Java", + "group" : "org.sonarsource.analyzer-commons", + "name" : "sonar-analyzer-recognizers", + "version" : "2.18.0.3393", + "description" : "Shared code recognizers", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "377bec0957fff4818de779185dc9d46b" + "content" : "c8fea2140f3d18005b73ba0cd39ac3cf" }, { "alg" : "SHA-1", - "content" : "64e48e3a5d4bdc7ed674b21f8ddb393e548c9947" + "content" : "f741f10d470867172afa510990c16877ede70222" }, { "alg" : "SHA-256", - "content" : "a5db4cf127e982760c049faf6a3df99fafccdd5e1d58b59afba30b206bde96b2" + "content" : "0b4ef58f3bba93170f115ec2a73eb5596276abc21219b7fa733240b6bc3f7d52" }, { "alg" : "SHA-512", - "content" : "ebb84100013c73fd13cd502e5ea56a557568f5404b1b60d015ba5529c955c7ae70c612437cbb249068c7437d2dd4ef7f249a20f4f2090ea22c414123df062838" + "content" : "8edf444d67195ff181307c7f27744833b7fa47ff54ee2c687c92761cd7e0900e302f71541d2ccb84a0436ac04fc28ccc79c4700452455db6c155c6ac774bf26d" }, { "alg" : "SHA-384", - "content" : "a3e9a9cf69e639b84e22ef84a9937d8c8e829628ae2b203ec722394ad3b50e0c07fc1b6265d4bf8df3a86cac424125ef" + "content" : "821446711dedcdcb0a20bae33560f7f5d86ca528b7277170b3fe539bc20ab41f90096c6d6cb6cb9b67a7738cf56029fd" }, { "alg" : "SHA3-384", - "content" : "abe29bc0a84ab6ec1dc55fe8d349f72e37865e46a7eb114d85328882711f00f344cb7252ef9adc449009b62a4350f7bd" + "content" : "c036fd79d7730afa956adbabd42edfd0fb5473e5b4534d2ecc480b2b587099d923ee97a9ee51e40e1e027a413fb7b33d" }, { "alg" : "SHA3-256", - "content" : "2bfc0c71aef10df37be7c91fea1ab5e1d90f018c859aa7e3f0844ce2246137fa" + "content" : "aafdbc0fc6e44a212ee7cb7eb10d9cb4b23ceb25a532ea0a6508ea32141cb581" }, { "alg" : "SHA3-512", - "content" : "0e7d60391152b9fbc7b7238967dbf3c4c4c32e776f065b65e456c5ba5b88550723709c82125334fb749167231d602fd6bf3c610a7e83e2d34f3e339f139f71b6" + "content" : "747d1f9f8a556ff1c67bfa46aa1e8e8b9c7b76114e141845751376c7bb34d841349491766e6ed221938f6d64e8aed91663515d23283668711177d076f12eb852" } ], "licenses" : [ @@ -2411,23 +2332,19 @@ } } ], - "purl" : "pkg:maven/org.sonarsource.java/java-checks-common@7.33.0.35775?type=jar", + "purl" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.18.0.3393?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://redirect.sonarsource.com/plugins/java.html/java-checks-common" + "url" : "http://docs.sonarqube.org/display/PLUG/Plugin+Library/sonar-analyzer-commons-parent/sonar-analyzer-recognizers" }, { "type" : "build-system", - "url" : "https://cirrus-ci.com/github/SonarSource/sonar-java" - }, - { - "type" : "distribution-intake", - "url" : "file:./local-deployment" + "url" : "https://cirrus-ci.com/github/SonarSource/" }, { "type" : "issue-tracker", - "url" : "https://jira.sonarsource.com/browse/SONARJAVA" + "url" : "http://jira.sonarsource.com" }, { "type" : "mailing-list", @@ -2435,126 +2352,117 @@ }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-java/java-checks-common" + "url" : "https://github.com/SonarSource/sonar-analyzer-commons/sonar-analyzer-recognizers" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.java/java-checks-common@7.33.0.35775?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.18.0.3393?type=jar" }, { - "publisher" : "SonarSource", - "group" : "org.sonarsource.analyzer-commons", - "name" : "sonar-analyzer-recognizers", - "version" : "2.8.0.2699", - "description" : "Shared code recognizers", + "publisher" : "Spring IO", + "group" : "org.springframework", + "name" : "spring-expression", + "version" : "6.1.21", + "description" : "Spring Expression Language (SpEL)", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "f9c0e3225c8cd152cd8385ab211c1211" + "content" : "9ea32c5135a59a1264f13d8f8d5f355c" }, { "alg" : "SHA-1", - "content" : "10fa0ef13f09632cc2d8a97990512a36252b2e2c" + "content" : "72da3b3521a6788e143a47b0f7273ce7cf98c6f0" }, { "alg" : "SHA-256", - "content" : "5ba42aefbd8cf715575a9f40293a53b47cc82ba67943215a5382487e4042da50" + "content" : "29597c579b6b051d0dd2f56775c6e0078ac5252eab5c940ae687bd5e1fcafbd7" }, { "alg" : "SHA-512", - "content" : "0659ad40421f8be0d492fedf4cee72c531d264d8b9aa9327e789b9277de0a5b037c0dba25a25bc1efb5a858a959941e7e6fa3c7e166ff908db1ea272b5f05486" + "content" : "e54e346271cbc327b138f7a16d6c086f68290688c293753cc5513bc26a20ddd91ee194de32d91122432dae785692468d9d68971202e05c0571a65a44f0a518e1" }, { "alg" : "SHA-384", - "content" : "7b629d1b28bab3012d347760905c7235e579c868460098c2f4e9e9127e3eef1fd08be8f8cff2400552a2f6ba3c735d18" + "content" : "eb0349b3f3b4952f088a4243ab58b7167087e01a719babbe15e54c25d5b6cc3e8f52203542e447a465c3002a3588e6ec" }, { "alg" : "SHA3-384", - "content" : "e3f76485b0c60e07e0a8d93716847e12279c8914590d06000a95df859b952d2b1348a2c1b74a434f92aa36ae711ad858" + "content" : "a2d39ba6e734731a7588f70fac0ab312d835674427c384e7bc7fde62340d2d1c48217ec0bbdc953b3f436550aa0dc796" }, { "alg" : "SHA3-256", - "content" : "af4025e146ba6f1982d1351d1adcabee0a2acb8b90f7a7e8e76f019e408adc1f" + "content" : "be4aa16518c2a8cae7deb0b7f867a2a4be88a7a9b3030db00558615eae43d27c" }, { "alg" : "SHA3-512", - "content" : "ec20e48bda7e839e8c30bdb52156bd42a856f176282c3b1fd3241a268e1674b582acee92f83d72b0247a03634e46a2a740326dda9c089b704605b45c69322606" + "content" : "c4e3742d1ba2111bc4b72c1f9fcebff0d47c8466dd732d5f66ef2c7303a60d7da4e1a63fbf469df27075bf0f5174302dfa921722079425540151fd5e16fdfbfb" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "id" : "Apache-2.0" } } ], - "purl" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.8.0.2699?type=jar", + "purl" : "pkg:maven/org.springframework/spring-expression@6.1.21?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://docs.sonarqube.org/display/PLUG/Plugin+Library/sonar-analyzer-commons-parent/sonar-analyzer-recognizers" - }, - { - "type" : "build-system", - "url" : "https://cirrus-ci.com/github/SonarSource/" + "url" : "https://github.com/spring-projects/spring-framework" }, { "type" : "issue-tracker", - "url" : "http://jira.sonarsource.com" - }, - { - "type" : "mailing-list", - "url" : "https://community.sonarsource.com" + "url" : "https://github.com/spring-projects/spring-framework/issues" }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-analyzer-commons/sonar-analyzer-recognizers" + "url" : "https://github.com/spring-projects/spring-framework" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.8.0.2699?type=jar" + "bom-ref" : "pkg:maven/org.springframework/spring-expression@6.1.21?type=jar" }, { "publisher" : "Spring IO", "group" : "org.springframework", - "name" : "spring-expression", - "version" : "6.1.5", - "description" : "Spring Expression Language (SpEL)", + "name" : "spring-core", + "version" : "6.1.21", + "description" : "Spring Core", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "1f268a22bb7c0cb80958953ffbc21125" + "content" : "3c233d75937864d95e9051eafa9205f1" }, { "alg" : "SHA-1", - "content" : "7e21cb1c6bbef1509e12d485b75ffc61278d9fa7" + "content" : "dcc8607ee792439389e19111d83737b6b06ca4ac" }, { "alg" : "SHA-256", - "content" : "1f37b50dcaf091a43bb10d946178fff4082674497fd821438327815da14f7fd0" + "content" : "0729b69e52ac8d9a8d03991315690f632bb0984620a0595e52580d7f3557298d" }, { "alg" : "SHA-512", - "content" : "d5a13856a7f4619eaf1c9593f7739ec5cde37a555a98f0da4cb21aa591e87fb0bcdbd2a5da67d9b69a0dab0016f806c9d3f096bc8841c32bb98810daf1e5e7b7" + "content" : "8d926d38d47cc510378bff4cbd59a951660e8b813a22ffe662490631eb0f85668b007a0ee6961f4a6db2a80dab75181e13196fac10076510dc155c897a6aa999" }, { "alg" : "SHA-384", - "content" : "1e0c29ba819c5c8f5eb278a8f308a0119a476e81998ff5c7658b150352d357ef53c408566bd7a0b8023b7b41cabf4636" + "content" : "b8d3fff87f154bd509d1844c68a005787729112fac80512fa5d6df43d32b1f2fde0bd33e6ba6038e5d57e6265c8b97e5" }, { "alg" : "SHA3-384", - "content" : "f9cefe146557fe266e6e38bc8fbe157c7ef10fc606edafaf901d393ab140d25dabf4e60ff79c6a45a83c7eff890d3cac" + "content" : "d68af409a439cedb3b7da43946892d6012fb3000e849e929221a994cdd7ed1fd2791b1fbcc2b5903415ec6612f679cb9" }, { "alg" : "SHA3-256", - "content" : "ba29e269a74f3c452a64bd9e7a680c84c5c26b96397683c22435e4fcea8ecb9e" + "content" : "2a8bcfdbaae2b6c617f4896069b188e279faf8d169932c17f90c0e0ed4223fc0" }, { "alg" : "SHA3-512", - "content" : "8de364ab79572c8d2af2dc22ea5768d323b7268e03ae977701024f17e6fede13f03e248ef44c6789dea3007723beb1454c7795b45f3834b6040510661b6dee54" + "content" : "2890d9f8375e68786ea993d22ea2d9fd7c45bcbcce07949013857d7a3ff89da0aadb22a34493180c0d1fe905e744b453510b1f87631bbce8eda84c7844389884" } ], "licenses" : [ @@ -2564,7 +2472,7 @@ } } ], - "purl" : "pkg:maven/org.springframework/spring-expression@6.1.5?type=jar", + "purl" : "pkg:maven/org.springframework/spring-core@6.1.21?type=jar", "externalReferences" : [ { "type" : "website", @@ -2580,47 +2488,47 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/org.springframework/spring-expression@6.1.5?type=jar" + "bom-ref" : "pkg:maven/org.springframework/spring-core@6.1.21?type=jar" }, { "publisher" : "Spring IO", "group" : "org.springframework", - "name" : "spring-core", - "version" : "6.1.5", - "description" : "Spring Core", + "name" : "spring-jcl", + "version" : "6.1.21", + "description" : "Spring Commons Logging Bridge", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "6eeff94b635753591e74d979ffc2f793" + "content" : "0e017885cab7225c3859aaf24d3a96cb" }, { "alg" : "SHA-1", - "content" : "6dae1b06ffacbb9abab636be2dbc6acd3b6e5d68" + "content" : "fa75fc86c26dbbc6fb816e5b7aa5fc83f4494423" }, { "alg" : "SHA-256", - "content" : "476dac28509b3f47d0b5e895a639fa75ac2218f074ce214e44832a836c469f7e" + "content" : "f77ae10f41eaf02bc94a6424a3bad1d80a58b168e6af032ecb40a474d9e4f82d" }, { "alg" : "SHA-512", - "content" : "067d31ab99c842a586fbc1bf7aa7ac9aad0fa36d70f0e5bdb7e355514d66b1f6106dbb74ce15959a8dff8223a3e447ae30735e40f376e67f0ef8b70ed1a85002" + "content" : "b0821cb6220914b2bc517f858d21c4a3b98b5a487ee94f29acf044153ba5a568a44fead4d003f71ffbad65f61791d01e33ec05859cdf2a3a1bb853469dc37753" }, { "alg" : "SHA-384", - "content" : "25728b0246bc11715c8b1fec2a704b74a6c2bd6e41851b44aead5c76d0ad1493929bdbcef51dee8005404099388c03ee" + "content" : "84188cf73912ff5372b4ebc58fd0bc63ecc282240c896a987ebf3cfcbbc57cfeacd1a63ea5a9cd6fbcd3ea45e11a001a" }, { "alg" : "SHA3-384", - "content" : "ba98714211e0a6d8337b876cd6452216d1752b5274671f476fa06a63931da1e8ff0d7d0b4105967ab68e6f967aa8b43e" + "content" : "a787e5682a3d41e20e726caf3e0eabd9fd0b33beff448bdd8915c5d1755eec973d7e9ea229a806b00a1d969941364614" }, { "alg" : "SHA3-256", - "content" : "70c250de2d49aec369e3abf959c980036051ca0f54ddfc774840c95a8eabccae" + "content" : "9ab47bf24ddfbb2dbe03a02e131d4b9bd7ada2da72badba7a7fadd0363895247" }, { "alg" : "SHA3-512", - "content" : "c4d9cb5d1a7a738f6a762bd8f9a0fbd2455f3900e702b77d5d1d76079ab1b614b7993f992473ea57639a57fdb46e985a3b29191b3d8a18215b97e82b31cdb3e7" + "content" : "3d537771c6060078daca6cb556d0a1571f9a685e0287c8c186f3f8e441ce0d7460040de7368c7a51d4dd99faa0d6216baa1013c8acc7f3b981eb30e25cccdaa3" } ], "licenses" : [ @@ -2630,7 +2538,7 @@ } } ], - "purl" : "pkg:maven/org.springframework/spring-core@6.1.5?type=jar", + "purl" : "pkg:maven/org.springframework/spring-jcl@6.1.21?type=jar", "externalReferences" : [ { "type" : "website", @@ -2646,128 +2554,141 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/org.springframework/spring-core@6.1.5?type=jar" + "bom-ref" : "pkg:maven/org.springframework/spring-jcl@6.1.21?type=jar" }, { - "publisher" : "Spring IO", - "group" : "org.springframework", - "name" : "spring-jcl", - "version" : "6.1.5", - "description" : "Spring Commons Logging Bridge", + "publisher" : "SonarSource", + "group" : "org.sonarsource.java", + "name" : "java-checks-aws", + "version" : "8.18.0.40025", + "description" : "Code Analyzer for Java :: Analyzer's checks for AWS", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "4b7724c57ea12f13ce3fc49a18209b6c" + "content" : "8aed826c7d8696ce3699588cd6ff952b" }, { "alg" : "SHA-1", - "content" : "896ae3519327731589c6e77521656b50ae32d5b3" + "content" : "6cc1bba5a36b3eef6230e273866fc6dc309189af" }, { "alg" : "SHA-256", - "content" : "c53540419e482242c815db6d6a8cd80af85a6a895e38329b9d9bd6b4616503eb" + "content" : "5ee06300e5427acf74b378cf181a697b548a477ffcf1edfc216ae5345e40c1e0" }, { "alg" : "SHA-512", - "content" : "0de5bdae17924ab55ed7e6e97acbfeb60406fa99b10c1fd8a391f9f81c475691638535a297636fb79b51f02cf07d98ac613049235e9fdbf1186672c8b64c5967" + "content" : "47ecef1096030771bb0c24c2b3c15ebe51ab8a6f66d76ae2683ea4b54821f9c914ecd694b877a186c26650db463aedfa57e9a172fe509de26ca4f0a19867be61" }, { "alg" : "SHA-384", - "content" : "2844ddc317d6fed2c80c5090e3b4b976a063ad5fce4bf8dbfa7c1034cb647497a830142ff7e70b7eb0c8cf742a091071" + "content" : "242495b1e08269988e57a0e08730bb23d18fe614cf37af2ede8aa489a7a3ad581c0d5f970b7d25aee2db35f658649c26" }, { "alg" : "SHA3-384", - "content" : "dfc30f87671459ea2bdc8c25aa6ed814dd53a0ab60df4b98b44eb96ab28cd7bfce358c32b5ab8255d0c0d7ebba1a28b0" + "content" : "f8f74f485da5f891e8a98701cc7d7267548ebeb2d04861239a891547abebdda1951cc16de0003c60db18fa48ad9696f9" }, { "alg" : "SHA3-256", - "content" : "a7a4153deabf0b46852c6539f1d0d63bac5963eaf9ef73209097c3bd4b2118c3" + "content" : "b60ad5ee6b83beabd93c21866b2bd05eaf340ead9ef9f4d1f38492546d103d89" }, { "alg" : "SHA3-512", - "content" : "62add3aa8ea534168ba2eb4e811628e35970e17a2ae350de376fd95e8e0d70045dc9f6748075bafe4f74ebec4278bb3e36243478e08b4329840c8f068b30cde9" + "content" : "8bd74670d07ae07f638e31a27a8f8a00eb0fabd40337f3b601595c86769e31da58b969f08ca5424dbb48adc4d7c8477503a1d795cb8eeec3179f276273997685" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.springframework/spring-jcl@6.1.5?type=jar", + "purl" : "pkg:maven/org.sonarsource.java/java-checks-aws@8.18.0.40025?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://github.com/spring-projects/spring-framework" + "url" : "http://redirect.sonarsource.com/plugins/java.html/java-checks-aws" + }, + { + "type" : "build-system", + "url" : "https://cirrus-ci.com/github/SonarSource/sonar-java" + }, + { + "type" : "distribution-intake", + "url" : "file:./local-deployment" }, { "type" : "issue-tracker", - "url" : "https://github.com/spring-projects/spring-framework/issues" + "url" : "https://jira.sonarsource.com/browse/SONARJAVA" + }, + { + "type" : "mailing-list", + "url" : "https://community.sonarsource.com" }, { "type" : "vcs", - "url" : "https://github.com/spring-projects/spring-framework" + "url" : "https://github.com/SonarSource/sonar-java/java-checks-aws" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.springframework/spring-jcl@6.1.5?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.java/java-checks-aws@8.18.0.40025?type=jar" }, { "publisher" : "SonarSource", "group" : "org.sonarsource.java", - "name" : "java-checks-aws", - "version" : "7.33.0.35775", - "description" : "Code Analyzer for Java", + "name" : "check-list", + "version" : "8.18.0.40025", + "description" : "Code Analyzer for Java :: Generate the list of checks at build time", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "14dfa924e3e61569475db951d81dff71" + "content" : "523e390cec46df34c6686d8f61181bef" }, { "alg" : "SHA-1", - "content" : "2af499d9be4ebd5d898db1eb13eb34ad3b2fb8e9" + "content" : "93c3737e36e776e9c9ba43293256d3ade559e656" }, { "alg" : "SHA-256", - "content" : "62148c334e45df290a958dd438ef662ba5fd29c4023de832d425e674f7c585fd" + "content" : "aa62feaefd959fe9c4a75280ddbee6ffe9b59181296c521e8d876676812ddf5a" }, { "alg" : "SHA-512", - "content" : "f9365f6002c6a51295e7a00a4255ad9eb693d52de2e4c3aa0161e722c58f57a565f97bd3e03e53f3fcc2b1b1af3753471b0ba707e8416f6d2c21f17fcb1b7071" + "content" : "bba574e1f4a05a5fc7a70cb5f9deb5a1f68d8bcb6b2ad4859799e94ca18f622b15075f454e00e3d8fd5ac64827c06afc660ec73bc0db1402bdc3f5e4ebb16bbe" }, { "alg" : "SHA-384", - "content" : "45f68667d8e7543d39b51ebf451513bd085a573edfcee9b89c8154a61bda72d55f7085a1ccb132b306bb2dcebcb9b899" + "content" : "a87fc3e9946eef5166f6393ca2ee064caf3763d19e3415779f0e5269b267790a897485fb8cf085ba84f535e2112fbbe3" }, { "alg" : "SHA3-384", - "content" : "5a6ef9e7483108b215e37833d6d4321ae9ca11f2a2df09d02563d008228dd469e2ce9d9b307679fe16fc229a1a90f588" + "content" : "9e9584346c363abd4a0aad992c54f60dfec95d7a7e8c3cc2834d878c72d1b8a5460c834eaeafc6045a7115af424bcacf" }, { "alg" : "SHA3-256", - "content" : "2c6b29354a7077d0a34a9c742a2e0a95310e2dbc40cab29527ec59aed9ac7b22" + "content" : "9ddbb48896bde9c6d4457d250d207daef592fe257f10ff0ed88cbb38990c9209" }, { "alg" : "SHA3-512", - "content" : "d19b4dfeca42f8ff8821621d241b12aec49fd8012cac5ccffefac6bd55ca2dca60ef40ee15a81460051fbf1797631a34c70fb4600a9e4182a581f082b8c5028e" + "content" : "7a3b54a4fd3db04d97df4040f10c27fb9993071eed45f1caac906d989b213995fddd8b7e74b92d68c6cc99709fc69b789f1a55bd55d1226adccaf80493869b8f" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.sonarsource.java/java-checks-aws@7.33.0.35775?type=jar", + "purl" : "pkg:maven/org.sonarsource.java/check-list@8.18.0.40025?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://redirect.sonarsource.com/plugins/java.html/java-checks-aws" + "url" : "http://redirect.sonarsource.com/plugins/java.html/check-list" }, { "type" : "build-system", @@ -2787,62 +2708,62 @@ }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-java/java-checks-aws" + "url" : "https://github.com/SonarSource/sonar-java/check-list" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.java/java-checks-aws@7.33.0.35775?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.java/check-list@8.18.0.40025?type=jar" }, { "publisher" : "SonarSource", "group" : "org.sonarsource.java", "name" : "external-reports", - "version" : "7.33.0.35775", - "description" : "Code Analyzer for Java", + "version" : "8.18.0.40025", + "description" : "Code Analyzer for Java :: External Reports Plugin", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "b07b7b394b1de4dadcdd41bf472bff97" + "content" : "0a2d44b03fd1c355461dd30c436d3097" }, { "alg" : "SHA-1", - "content" : "bc9c1e1cb3f4abca42ddb1b6ffc027eb2fd4c68e" + "content" : "6374bd720414018d7ed56f80b2ed918ec94e6b2f" }, { "alg" : "SHA-256", - "content" : "aabc8b03f2c9c042ad4d1d25ada8281dd029480e9f59831d98e91adca67fee08" + "content" : "38eb3bbdd4857c485d41a0a9deab123e2c9c4cba4e187dd1997efe72cdafdccc" }, { "alg" : "SHA-512", - "content" : "b60270c2b3d038cc3b3387ba052a79c2e5fad1b0536a5a1f2e4bfa98da3046ae451503f7837a214359dd6c6052cdbdf5d8776fbab5648bcc31ac974830a6c16d" + "content" : "ec05b2b58d09641b89777d15383f8ec27873aa1e2d97977af5365840b322e1a3e38a8d65c71dd7bf5b87fbca59e49bfc6e71dc7400efad987c51dcc5e9bd5e89" }, { "alg" : "SHA-384", - "content" : "943d62b27e66b0b7472c0115f9749fe109343ee1409eb6ba57ffd3776eddfb92bf28c4c1f664aefc08e891d29d5ea2e8" + "content" : "dfde96d508de66a673c9e13298c958dfc2c6fb32e85c0b42450b3263ba4f3a09a254d893f08ae4b9f39d707e4cee22c7" }, { "alg" : "SHA3-384", - "content" : "ff834b86b09d0b11bd4fd9da2245b52c76d540af4bbc858d2478f40444c2a632ca671eac45b65097c0014456a7d553ba" + "content" : "41b976778dec610536e3b9eb679754ef9568cc8bb2beb7c7fe1d852c5d5879c682d8844a0c035ebe0b095626ea43203f" }, { "alg" : "SHA3-256", - "content" : "b632f307cefea8b5fafe516db380b7160da28677ed0657db17332250ee40b26d" + "content" : "42ddf81281e703791ae6f8c8d8adcc96da58390d4cb4b49668b4d3e3d1ba4bec" }, { "alg" : "SHA3-512", - "content" : "81ae57ff106ae7f468dfa23a5d7fd828915cbe1bcc6b21ba988a255287a7d40858979aaede906f3cf277f93117eb7ec919e003083622d061b3149a2d15eb765b" + "content" : "586377b8e12c4b960ef1a3a5cf335e8e19db4da10de7346f140bf3eb56243229be4271603c2400a6bcedb87d06dce5f95cb11581e8eceb80e88a6ddb3e00a564" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.sonarsource.java/external-reports@7.33.0.35775?type=jar", + "purl" : "pkg:maven/org.sonarsource.java/external-reports@8.18.0.40025?type=jar", "externalReferences" : [ { "type" : "website", @@ -2870,58 +2791,58 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.java/external-reports@7.33.0.35775?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.java/external-reports@8.18.0.40025?type=jar" }, { "publisher" : "SonarSource", "group" : "org.sonarsource.java", "name" : "java-jsp", - "version" : "7.33.0.35775", - "description" : "Code Analyzer for Java", + "version" : "8.18.0.40025", + "description" : "Code Analyzer for Java :: JSP parser", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "e0890ace531478ef8ac18849d78cd9e5" + "content" : "7ad6c8d9c8472d350359adbb1bb2a117" }, { "alg" : "SHA-1", - "content" : "a8cecb5145490f15b35742712345b5919726ad89" + "content" : "bf1f05662d4aa017bfab919bee32c6e985aea49b" }, { "alg" : "SHA-256", - "content" : "ae1ee6f32a16217667ea46a973f7c93a6f66ef7052a2d1e24d6e8f78c02f96bf" + "content" : "85520636a757ac333fb349873dada3386a2a89352bb6443a552612323a898e3a" }, { "alg" : "SHA-512", - "content" : "b7fcefd8fa7174db020947db1a41aff0e5c25191fbd8feb8c53438a42604a50b342ac072f571eaf6b0d54915e9106dc5bc6304d5899dbee90e20dcfc08139ca9" + "content" : "34e2e4fd545dfab31f0f0dba626b61648a2daadfaa7f32483cb3b31aa2010e90639bcae4b2b3ac669d60ae3d0490ef59bf6d87ee61098d593c15b043ad8e43e1" }, { "alg" : "SHA-384", - "content" : "39420fa5bb00153057946a5b667877475bdb65923dd9af86acc6db63f3bbb9471de9735e4ed16a03b3c3a2c6da3118df" + "content" : "acb14999bcc8e0347f71ee453d3c58426e60de8f576904058391dbab16da82bfb0ac7083cdd73b6f26862b2ca06912cb" }, { "alg" : "SHA3-384", - "content" : "6defb43802dfd77c5a549fd7d28ffdf85711623dd24d28520e1e2d96677e47a69c5661029a028d7ca13ea3fa75697a00" + "content" : "75c0fed98b9486927c2c767745222e6b93e7c8af00727abbc871380d5bb2b9d71ba9a9bede424aedfc0c057e5c564d02" }, { "alg" : "SHA3-256", - "content" : "54265f768ea5687f500b148e81ac1c3a41c0ac1d9eeb3e2154ebe4507bef46f6" + "content" : "3ff452bc563a50565843c16d94fd729cdd4f76ce6b1847c5fd61d6504a6fb2a7" }, { "alg" : "SHA3-512", - "content" : "8530ff5df32f8250d5d3a68e81bf4f1e0d0add2a69fe6c2de5dc94b01bbe2e99a86fec11494f4d95239040ee2f736ae305c94b23376475ea7c981cdad6054c85" + "content" : "96ad4a5625e3d8c3b6df8a224e75597da826ca3438e1e0c6fe805cfc0d246822ab98794250913691ed1c5ce201b9e938ca6af648e9d2f5f842efdaad78599341" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.sonarsource.java/java-jsp@7.33.0.35775?type=jar", + "purl" : "pkg:maven/org.sonarsource.java/java-jsp@8.18.0.40025?type=jar", "externalReferences" : [ { "type" : "website", @@ -2949,160 +2870,196 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.java/java-jsp@7.33.0.35775?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.java/java-jsp@8.18.0.40025?type=jar" }, { - "group" : "org.apache.tomcat.embed", - "name" : "tomcat-embed-jasper", - "version" : "9.0.84", - "description" : "Core Tomcat implementation", + "publisher" : "SonarSource", + "group" : "org.sonarsource.analyzer-commons", + "name" : "sonar-analyzer-commons", + "version" : "2.18.0.3393", + "description" : "Logic useful for a language plugin", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "22b13ffeab24c14943b58adaee3d15f6" + "content" : "86c3f760a4c1790b1af5c16eb246f8e0" }, { "alg" : "SHA-1", - "content" : "5fcf71c9c39e54c9ca51c304dd7bb2f5558e3286" + "content" : "612043286321caa05aa4e7670b36dd41e826ae2d" }, { "alg" : "SHA-256", - "content" : "3f08ff872bf83defa70c20274ab597aaf23ea95c1ff50f4b98e0c9a2a25c1106" + "content" : "f7babd94546594b9d0427b1bf32cd8f60065b8e8d0a1436f6ac443b9faaa1bf0" }, { "alg" : "SHA-512", - "content" : "89d83d9250be2cfc2d1471133461107dd4fdab532439f7827771f7d2ac202a4c9d57aabed5a7f84fa7a5b1474ce67b60ccdfbd08e2fd4980af1cf133ac69a2c1" + "content" : "b1d166c1ea81d0c89afc9b27e6d9457e6cf0c45afc8de7fa37607ed14b379ddbc1cb1c31bd2ebc25be3c980f1cf145686256dc1b0217f8af73c69d5eb11bb0a3" }, { "alg" : "SHA-384", - "content" : "688680dcea5c8c055cfd461a29c601f0533bf448b9659d0491ee60107c9f8080fb91e2705cc319ab83cdc791f79b916e" + "content" : "1d1bde067e0de39df2d0a35bfda18e9082c4f208411d45488a632a61b0acb04270a4016ad481a7aab1107608d121b90a" }, { "alg" : "SHA3-384", - "content" : "0afb2f67992e9b3d891729c4f65c1804259180f459056f9e608c29d479eb5661a2eb23b46a240ff08d834c0940068f2b" + "content" : "74a471351b75abc4d02989bde9e597307c807683bbac455a3b50aa98928d7dbf3f85db1d4c090c7c7b87299603d1f568" }, { "alg" : "SHA3-256", - "content" : "58917d6995c9fc52fd102c6e26dad93af8e43ef5b8ee1dee7932c2aa947d261c" + "content" : "8a6c33facfe7d600d45ca3db4ef0e545e7bfa75a383ac9d05fe49df6ab695197" }, { "alg" : "SHA3-512", - "content" : "453c585ccdeb65f90a65d3e9d7aedfc0ef6d68cd3a905f24584802d7029b1d79d7bab4a28b2b0f9d12cc41d2c395b87ddcc8e6568e98aae21fd076ed1c4b7bb7" + "content" : "68308ba7a0a3196f866436123817431cda045808cf617084af2efb84f53aa6907841ba67653fad166a347f92de0de2b2fea573e5e2fda734306cb3ca3ecf3319" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0" + "name" : "GNU LGPL 3", + "url" : "http://www.gnu.org/licenses/lgpl.txt" } } ], - "purl" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@9.0.84?type=jar", + "purl" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.18.0.3393?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://tomcat.apache.org/" + "url" : "http://docs.sonarqube.org/display/PLUG/Plugin+Library/sonar-analyzer-commons-parent/sonar-analyzer-commons" + }, + { + "type" : "build-system", + "url" : "https://cirrus-ci.com/github/SonarSource/" + }, + { + "type" : "issue-tracker", + "url" : "http://jira.sonarsource.com" + }, + { + "type" : "mailing-list", + "url" : "https://community.sonarsource.com" + }, + { + "type" : "vcs", + "url" : "https://github.com/SonarSource/sonar-analyzer-commons/sonar-analyzer-commons" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@9.0.84?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.18.0.3393?type=jar" }, { - "group" : "org.apache.tomcat.embed", - "name" : "tomcat-embed-core", - "version" : "9.0.84", - "description" : "Core Tomcat implementation", + "publisher" : "SonarSource", + "group" : "org.sonarsource.analyzer-commons", + "name" : "sonar-xml-parsing", + "version" : "2.18.0.3393", + "description" : "Logic useful to read and analyze XML files", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "2a5bc72d7f698bc42784cb7afa20e808" + "content" : "42a57e652799b8d75ed82ed71af3e8a8" }, { "alg" : "SHA-1", - "content" : "d0cd4045defc2ecf7ccfdc901925eed427bcba3e" + "content" : "d776689581869043b0d5225d9def870872530ab9" }, { "alg" : "SHA-256", - "content" : "29daf71c4b5f5ed0c0983a83ebd96ee74df905e406534b4c5412cc92c2aca2b7" + "content" : "b383b5147a2b186d91f3efcca0cfa9be9e87371e79c0e61f38332b24f152286f" }, { "alg" : "SHA-512", - "content" : "e28752b186c5eaad6df750719e70bd9ab33f4924f293b622ed4a7198ad15fe5e998b6b7ddee230ce564e7ec0b71871fa5c2362f6c4cb65b2872e3f25ef0840e6" + "content" : "04334f2ed4bd53436f9ca5755f836df11147951e5e09ba375e7217a9ddb629172f550eddb978c1ecc3a9e76764db7c82aa05c925f53cb720ca6f0684c2d95197" }, { "alg" : "SHA-384", - "content" : "0df38c977446ce1bb1b6d17b544f3778b4891d6ef499bb1f53dfe8cca457ec8afdb8c061f17e966574d4fd9859517580" + "content" : "5cbbd8a9a784f94c77bac285538e6894c6cf67f5e5da50745633dab13583e6027c7b2620df4c0412cdcbb4bbf7dfb33f" }, { "alg" : "SHA3-384", - "content" : "eb18577b10a3e3cdabd0483e4545226f4fa8d8c2c3d8eb88b9782aeee1ae9d9bc03d76d19c6b5e886b668fe795d38975" + "content" : "3d74f27c2a90595595c59d4f3551e11037f70de03afb7669a59217a42c32e41318ccf53a4911e97c94d4ef7c5d909498" }, { "alg" : "SHA3-256", - "content" : "58006ad9c9fc8e3b18472ad550d72bcd7c9364ecdc586db3f194116694179bb8" + "content" : "e798859717811fa3dd11cdc3e7c518593dad3f1eea35e7880250c832cdb6c51e" }, { "alg" : "SHA3-512", - "content" : "bda4e7479e4b6015f78b24ffca33be9d99d0606acff96f4d18d8e713f261835e16cf26cce800657c28a279fcd1c3e8aa6e5050d5463e1850526364306e003e2a" + "content" : "757eb040f0c6dc7a39dfba5f3842962b27433593e7993fc755ecd2d2ab362ee58b04c95ea9f4817b43a518f51144f18cd1e9f85875a79c6234ef0f667f1ff536" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0" + "name" : "GNU LGPL 3", + "url" : "http://www.gnu.org/licenses/lgpl.txt" } } ], - "purl" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.84?type=jar", + "purl" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.18.0.3393?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://tomcat.apache.org/" + "url" : "http://docs.sonarqube.org/display/PLUG/Plugin+Library/sonar-analyzer-commons-parent/sonar-xml-parsing" + }, + { + "type" : "build-system", + "url" : "https://cirrus-ci.com/github/SonarSource/" + }, + { + "type" : "issue-tracker", + "url" : "http://jira.sonarsource.com" + }, + { + "type" : "mailing-list", + "url" : "https://community.sonarsource.com" + }, + { + "type" : "vcs", + "url" : "https://github.com/SonarSource/sonar-analyzer-commons/sonar-xml-parsing" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.84?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.18.0.3393?type=jar" }, { - "group" : "org.apache.tomcat", - "name" : "tomcat-annotations-api", - "version" : "9.0.84", - "description" : "Annotations Package", + "group" : "com.google.code.findbugs", + "name" : "jsr305", + "version" : "3.0.2", + "description" : "JSR305 Annotations for Findbugs", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "f590e2b4b16de6e9bc4b7f48380a79d3" + "content" : "dd83accb899363c32b07d7a1b2e4ce40" }, { "alg" : "SHA-1", - "content" : "86186a099bb355a174243f812d58aaf113768b91" + "content" : "25ea2e8b0c338a877313bd4672d3fe056ea78f0d" }, { "alg" : "SHA-256", - "content" : "b801c2be650483f7a91a6c50a2a93768c0fddc7ec54d0ca0d5e69bc92ef2758a" + "content" : "766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7" }, { "alg" : "SHA-512", - "content" : "bfe97892d8e218adcd01a473ca51d7bc3a59bec953fca3752e19d73519972eb7665cf9fc098a74cafb8cdff8fc773ac32424af7b3e865d6bfdaafaab59cb9fb1" + "content" : "bb09db62919a50fa5b55906013be6ca4fc7acb2e87455fac5eaf9ede2e41ce8bbafc0e5a385a561264ea4cd71bbbd3ef5a45e02d63277a201d06a0ae1636f804" }, { "alg" : "SHA-384", - "content" : "7a97a614983641796ef33723f036bfba309c4f6d1fdf860058c795d826ebe311248822a705880de9d48e5a6d456bc471" + "content" : "ca0b169d3eb2d0922dc031133a021f861a043bb3e405a88728215fd6ff00fa52fdc7347842dcc2031472e3726164bdc4" }, { "alg" : "SHA3-384", - "content" : "4af95a177b0bd0b0477b61a15b167592cf5e8ea0973f756d7850a6792e0da215b2ac1995cdec027169f0e78dc6fa5487" + "content" : "9903fd7505218999f8262efedb3d935d64bcef84aae781064ab5e1b24755466b269517cada562fa140cd1d417ede57a1" }, { "alg" : "SHA3-256", - "content" : "8c4a3599140a0e684eb0f5aac9cea0857687d00d8bb3dc175cc88ae26ffe8337" + "content" : "223fda9a89a461afaae73b177a2dc20ed4a90f2f8757f5c65f3241b0510f00ff" }, { "alg" : "SHA3-512", - "content" : "559a0b35852d37bc7115cd09ffb1684c6613eb5fde071e7503c483b46e32be0a7e2bc62d7386a999ac9e8c9d2548fed4c8d420465d0b8125f15fc554bf659a38" + "content" : "3996b5af57a5d5c6a0cd62b11773360fb051dd86a2ba968476806a2a5d32049b82d69a24a3c694e8fe4d735be6a28e41000cc500cc2a9fb577e058045855d2d6" } ], "licenses" : [ @@ -3112,54 +3069,62 @@ } } ], - "purl" : "pkg:maven/org.apache.tomcat/tomcat-annotations-api@9.0.84?type=jar", + "purl" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://tomcat.apache.org/" + "url" : "http://findbugs.sourceforge.net/" + }, + { + "type" : "distribution-intake", + "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" + }, + { + "type" : "vcs", + "url" : "https://code.google.com/p/jsr-305/" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.apache.tomcat/tomcat-annotations-api@9.0.84?type=jar" + "bom-ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar" }, { - "group" : "org.apache.tomcat.embed", - "name" : "tomcat-embed-el", - "version" : "9.0.84", - "description" : "Core Tomcat implementation", + "group" : "xerces", + "name" : "xercesImpl", + "version" : "2.12.2", + "description" : "Xerces2 provides high performance, fully compliant XML parsers in the Apache Xerces family. This new version of Xerces continues to build upon the Xerces Native Interface (XNI), a complete framework for building parser components and configurations that is extremely modular and easy to program. The Apache Xerces2 parser is the reference implementation of XNI but other parser components, configurations, and parsers can be written using the Xerces Native Interface. For complete design and implementation documents, refer to the XNI Manual. Xerces2 provides fully conforming XML Schema 1.0 and 1.1 processors. An experimental implementation of the \"XML Schema Definition Language (XSD): Component Designators (SCD) Candidate Recommendation (January 2010)\" is also provided for evaluation. For more information, refer to the XML Schema page. Xerces2 also provides a complete implementation of the Document Object Model Level 3 Core and Load/Save W3C Recommendations and provides a complete implementation of the XML Inclusions (XInclude) W3C Recommendation. It also provides support for OASIS XML Catalogs v1.1. Xerces2 is able to parse documents written according to the XML 1.1 Recommendation, except that it does not yet provide an option to enable normalization checking as described in section 2.13 of this specification. It also handles namespaces according to the XML Namespaces 1.1 Recommendation, and will correctly serialize XML 1.1 documents if the DOM level 3 load/save APIs are in use.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "3a0cd4945a15ee8d37f4b23cf2216e3d" + "content" : "40e4f2d5aacfbf51a9a1572d77a0e5e9" }, { "alg" : "SHA-1", - "content" : "3fc7c06e3f2c23baf8bfd64320376fa701633602" + "content" : "f051f988aa2c9b4d25d05f95742ab0cc3ed789e2" }, { "alg" : "SHA-256", - "content" : "22370f6a152da44c9a7ea15e597f22ef6b057a8d3278f69ff50cc3452473bf97" + "content" : "6fc991829af1708d15aea50c66f0beadcd2cfeb6968e0b2f55c1b0909883fe16" }, { "alg" : "SHA-512", - "content" : "3373ff62438698fc3223e7474efca16bdc2a9dc9759e5815ccb8a0e3cc722ba2d581292b60b52eb1d86beb7c705b2640c81d69dfa7162f477d6ed1be8928d748" + "content" : "bfd21f2350bf0bb546a68d3303f28c6a15cee1e630138c169344c3f65fe39a15e61c6ff4e5239f38f2f1f9e488eff4d5565a4a0774263064ab6a30aa9fcaaed3" }, { "alg" : "SHA-384", - "content" : "7d018a18156839d5c3c92ac091a53710944e00955443f1a0b051b3cb40f0c7fc9a925efc776ab09f1f0a569102cca101" + "content" : "0a35ae0744f05973997b0710cc8d1d774867bc1c1b63ef5bf5f554d1b4c4ab42033f7819430e05ac623e7c8630aa7c52" }, { "alg" : "SHA3-384", - "content" : "4f300a9fd6932daa3ff4db977860f66a7f88157e72e1481f1981d5597a4666daf76a309d5ff10312ba0968b56f0e4bbd" + "content" : "b016ed02d907b21c90b4a2560aa4c778e8aad1b5ecb0ba62777f668166c6e7b8a0c0deef7d1e63b7a9b1092c64c8a4a6" }, { "alg" : "SHA3-256", - "content" : "ac2d6743eafb0210717527467f014d8fd8ac97a12c5f2aaccf1922b01c4d268d" + "content" : "875856aafff433840ee9933c01018cd18c0a13b46bd4472853698ef1dff83168" }, { "alg" : "SHA3-512", - "content" : "656900dad4ca2261cdc8ffa7febfbf4edfe87e2cb32a8a34b830f0f3248ae707a473a82f69487a70003c3b2c0e92ed998c082ec22f172c86b8565b62b7df74ad" + "content" : "1587332fb01515a72b7856b1f566070dcd26fef33c5070039c28684215466a9b9d3a4625cf7181443e3c3a67a313a938cf0775f39b96daf43f5edd4772143c23" } ], "licenses" : [ @@ -3169,130 +3134,140 @@ } } ], - "purl" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.84?type=jar", + "purl" : "pkg:maven/xerces/xercesImpl@2.12.2?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://tomcat.apache.org/" + "url" : "https://xerces.apache.org/xerces2-j/" + }, + { + "type" : "vcs", + "url" : "https://svn.apache.org/repos/asf/xerces/java/" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.84?type=jar" + "bom-ref" : "pkg:maven/xerces/xercesImpl@2.12.2?type=jar" }, { - "publisher" : "SonarSource", - "group" : "org.sonarsource.analyzer-commons", - "name" : "sonar-analyzer-commons", - "version" : "2.8.0.2699", - "description" : "Logic useful for a language plugin", + "group" : "xml-apis", + "name" : "xml-apis", + "version" : "1.4.01", + "description" : "xml-commons provides an Apache-hosted set of DOM, SAX, and JAXP interfaces for use in other xml-based projects. Our hope is that we can standardize on both a common version and packaging scheme for these critical XML standards interfaces to make the lives of both our developers and users easier. The External Components portion of xml-commons contains interfaces that are defined by external standards organizations. For DOM, that's the W3C; for SAX it's David Megginson and sax.sourceforge.net; for JAXP it's Sun.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "e1a59ec0809b06b3f5e2c8e97a76b218" + "content" : "7eaad6fea5925cca6c36ee8b3e02ac9d" }, { "alg" : "SHA-1", - "content" : "cada74c92a33d57d5bdb70b8178a9006754e601c" + "content" : "3789d9fada2d3d458c4ba2de349d48780f381ee3" }, { "alg" : "SHA-256", - "content" : "e9e17c3b6e02624cc1981dc7c2100f9ea67b96aec66e6a785e0ed5202febd854" + "content" : "a840968176645684bb01aed376e067ab39614885f9eee44abe35a5f20ebe7fad" }, { "alg" : "SHA-512", - "content" : "9197a2c16edd4ccbc39a33fe75e4a4175700306d9d1df2f4e146de37728aa8483a3355993bb8e8fb77ef9ff17490427cf55566d81364d82495f3e49c62ee21f2" + "content" : "8db0283b6840cd6407957d296b802e3edf90653e2722f8e29f86c1c0b60996c4b43e9e065e6864dab89b2138ddb0174d9b4fdda4a93f94eeb884783db82f3268" }, { "alg" : "SHA-384", - "content" : "8385239d7eb9d7bc972fbb63ed5d887b2089129844037c957f0cc5bcd34b8a20deea0531022af0832193f020e94ad5fe" + "content" : "bce0ec0f0f692213a1110197c4a11c333673ae0630481255d12b441a8cba70aecfaf104c3d8d9b500ed2a0a19a2bfcce" }, { "alg" : "SHA3-384", - "content" : "ce192d54341470644acee6f91217ddeb62f28d1ac2da58b0f73fb8ec9e5278463457f74dc4a264349051b6fc3dc25c3a" + "content" : "c1d8154ef6eee57dfe6ae9a1c1a2525e9ec2aab3631911a53c064ea6480c0b3b1ce8dd079db7b3693d7ef81daba28ace" }, { "alg" : "SHA3-256", - "content" : "a521179e465dec4a69e93e393df68d9c6719f393654a1e584bd3ff7a0cd39891" + "content" : "09eb76497eac5012ce1000c52f4e597c4941a44b9d960b1ac58a19beb2dd63fc" }, { "alg" : "SHA3-512", - "content" : "36968ac582180921cb12e613073d261111b81ca042e47624bc07176f6926c6f7a40a11077e51d5e460add84747348b4a962cda95c6b6c1ffe372e032c570ad89" + "content" : "1e4eb902e50b3388da4d161ee49f4d47b61dddd2ad10e6ef6cbb67c4ebc9043e0b65ae59a4a0c8eb03dd28814ce4aedd7e0d4962a0aedc3bdcf7de37cde38f66" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "id" : "Apache-2.0" + } + }, + { + "license" : { + "id" : "SAX-PD", + "url" : "http://www.saxproject.org/copying.html" + } + }, + { + "license" : { + "name" : "The W3C License", + "url" : "http://www.w3.org/TR/2004/REC-DOM-Level-3-Core-20040407/java-binding.zip" } } ], - "purl" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.8.0.2699?type=jar", + "purl" : "pkg:maven/xml-apis/xml-apis@1.4.01?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://docs.sonarqube.org/display/PLUG/Plugin+Library/sonar-analyzer-commons-parent/sonar-analyzer-commons" - }, - { - "type" : "build-system", - "url" : "https://cirrus-ci.com/github/SonarSource/" + "url" : "http://xml.apache.org/commons/components/external/" }, { "type" : "issue-tracker", - "url" : "http://jira.sonarsource.com" + "url" : "http://issues.apache.org/bugzilla/" }, { "type" : "mailing-list", - "url" : "https://community.sonarsource.com" + "url" : "http://mail-archives.apache.org/mod_mbox/xml-commons-dev/" }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-analyzer-commons/sonar-analyzer-commons" + "url" : "https://svn.apache.org/viewvc/xml/commons/tags/xml-commons-external-1_4_01/" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.8.0.2699?type=jar" + "bom-ref" : "pkg:maven/xml-apis/xml-apis@1.4.01?type=jar" }, { "publisher" : "SonarSource", "group" : "org.sonarsource.analyzer-commons", - "name" : "sonar-xml-parsing", - "version" : "2.8.0.2699", - "description" : "Logic useful to read and analyze XML files", + "name" : "sonar-performance-measure", + "version" : "2.18.0.3393", + "description" : "Logic to capture a hierarchy of performance measures, save it into a file, and merge files", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "eeb2d8b488da7bd7c98cfb49b3d06830" + "content" : "1854d57f67661c6950374be29145a017" }, { "alg" : "SHA-1", - "content" : "03e14b69bc7a2abbc0a595851f8f31540b208dd6" + "content" : "eb02954016253fd34551a4641e3215fdafc239c6" }, { "alg" : "SHA-256", - "content" : "408ec4b66b8fda3fe8a333858aed7cbb3340f570790468f8a789de4cbf2c8c91" + "content" : "4a3f60003f00a88695158a522cfbb7119c2c696991f13b7ca391e7c1eaf46d34" }, { "alg" : "SHA-512", - "content" : "35be20dfa7f82d0ba024c2614359e4b52ac295a2c416d854103b3a7f9739d04e2eb3bb927064fe9ac11ed9dbe5f91f8a266fd16a2ed40675b50c43836d132829" + "content" : "f3f2cc2211f00a66c33cd81ef996557fda3ee89421b2fc4565c376dadc22dc2a25eb327e5dfa041f3c48b8fa8620b797ec6762fd74d3ddde0184e6598c211d39" }, { "alg" : "SHA-384", - "content" : "426ea2055c0c9f6642b68a7b2eccbf4d7ee802dd3bfc010564b108a8c5cf54a3a9ce7fd3d07ab4adbbd54fa52bee64b5" + "content" : "54138af00ebd5d85cb2f776d75d2455de1a058e657dff84d8e19a563d720fa819a1efd4d432a1d3c2dcb2fa31158c184" }, { "alg" : "SHA3-384", - "content" : "9bfe10431714c647f99ce6b8e4d8eaaa6b80862985380a5ce4da37cdcf95cf324f9008b9dd46e81e8ecaacd19fa8e1c3" + "content" : "7855e1aba9691493ebd9a5d79ace4cbccdc1f9fd9194a8300f6b71367014e7fdaf04a7aa9db87ed195b7d738552e6080" }, { "alg" : "SHA3-256", - "content" : "2c47cf7bd11d40d40d1da9406bbd00a578bee08621cf341598d8fad4c4e8f7d9" + "content" : "f65d3d9a6737a6bd62c31d2d463d011512c3aa434d0575d6e54a95dc00bc5c6e" }, { "alg" : "SHA3-512", - "content" : "4eb5a2b0f0b527231f0bfb1bae4c798713e615a7c5929c0ac09f49b3d9fa5eb12cee0775842e6b7033d7163803a3737595fdf9f221eeaef69e43875c87b6c3bf" + "content" : "34d64169af99b65d4ee59cfd414e189af6ea00ae5118aae5976e1ec76752631138c08eae42b96e95f9668123bbe44a17907c7556003e0dfd988723fc50db0d31" } ], "licenses" : [ @@ -3303,11 +3278,11 @@ } } ], - "purl" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.8.0.2699?type=jar", + "purl" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.18.0.3393?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://docs.sonarqube.org/display/PLUG/Plugin+Library/sonar-analyzer-commons-parent/sonar-xml-parsing" + "url" : "http://docs.sonarqube.org/display/PLUG/Plugin+Library/sonar-analyzer-commons-parent/sonar-performance-measure" }, { "type" : "build-system", @@ -3323,283 +3298,282 @@ }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-analyzer-commons/sonar-xml-parsing" + "url" : "https://github.com/SonarSource/sonar-analyzer-commons/sonar-performance-measure" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.8.0.2699?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.18.0.3393?type=jar" }, { - "group" : "xerces", - "name" : "xercesImpl", - "version" : "2.12.2", - "description" : "Xerces2 provides high performance, fully compliant XML parsers in the Apache Xerces family. This new version of Xerces continues to build upon the Xerces Native Interface (XNI), a complete framework for building parser components and configurations that is extremely modular and easy to program. The Apache Xerces2 parser is the reference implementation of XNI but other parser components, configurations, and parsers can be written using the Xerces Native Interface. For complete design and implementation documents, refer to the XNI Manual. Xerces2 provides fully conforming XML Schema 1.0 and 1.1 processors. An experimental implementation of the \"XML Schema Definition Language (XSD): Component Designators (SCD) Candidate Recommendation (January 2010)\" is also provided for evaluation. For more information, refer to the XML Schema page. Xerces2 also provides a complete implementation of the Document Object Model Level 3 Core and Load/Save W3C Recommendations and provides a complete implementation of the XML Inclusions (XInclude) W3C Recommendation. It also provides support for OASIS XML Catalogs v1.1. Xerces2 is able to parse documents written according to the XML 1.1 Recommendation, except that it does not yet provide an option to enable normalization checking as described in section 2.13 of this specification. It also handles namespaces according to the XML Namespaces 1.1 Recommendation, and will correctly serialize XML 1.1 documents if the DOM level 3 load/save APIs are in use.", + "publisher" : "SonarSource", + "group" : "org.sonarsource.python", + "name" : "sonar-python-plugin", + "version" : "5.16.0.29940", + "description" : "Code Analyzer for Python", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "40e4f2d5aacfbf51a9a1572d77a0e5e9" + "content" : "96af3be952506f19faa9797702af83d2" }, { "alg" : "SHA-1", - "content" : "f051f988aa2c9b4d25d05f95742ab0cc3ed789e2" + "content" : "7358996b700859eefb489750874f6b276555ae44" }, { "alg" : "SHA-256", - "content" : "6fc991829af1708d15aea50c66f0beadcd2cfeb6968e0b2f55c1b0909883fe16" + "content" : "161047717514eb4299847263ccb553df5e5be8fc9ceb081aaf4015fa834c734a" }, { "alg" : "SHA-512", - "content" : "bfd21f2350bf0bb546a68d3303f28c6a15cee1e630138c169344c3f65fe39a15e61c6ff4e5239f38f2f1f9e488eff4d5565a4a0774263064ab6a30aa9fcaaed3" + "content" : "09689460be8675a15d4f1c2cecb868563c94a54c311f992bdd190aef37300a80760966216f73c12824765d7a7562735799b9c08f0606f465b03c299778110b31" }, { "alg" : "SHA-384", - "content" : "0a35ae0744f05973997b0710cc8d1d774867bc1c1b63ef5bf5f554d1b4c4ab42033f7819430e05ac623e7c8630aa7c52" + "content" : "bc18a99dabb6a1f04cd2bfdaffd3e1ba70688d16716b8cf40c9a751e94c6312b721b31478d7ea1baf3095da0654e6ae1" }, { "alg" : "SHA3-384", - "content" : "b016ed02d907b21c90b4a2560aa4c778e8aad1b5ecb0ba62777f668166c6e7b8a0c0deef7d1e63b7a9b1092c64c8a4a6" + "content" : "5d4803f25bb278676d6aa3ec55c6fd4db93fb42d5966fe73f0d7c6ecc2edcd2633154defacccd021b82574399e095c6c" }, { "alg" : "SHA3-256", - "content" : "875856aafff433840ee9933c01018cd18c0a13b46bd4472853698ef1dff83168" + "content" : "b5898d3547c883a1aeaeb1175ed6bf9b691ae896210df2a0ce22b74295ddc004" }, { "alg" : "SHA3-512", - "content" : "1587332fb01515a72b7856b1f566070dcd26fef33c5070039c28684215466a9b9d3a4625cf7181443e3c3a67a313a938cf0775f39b96daf43f5edd4772143c23" + "content" : "22c2445b64a2d200eb021df6bf93ef083c5487bde5c7923df897941445fd7f77eb9eac76542924195c8fdf17d43a3336a9b91f7c507ce8c36265447d8b77472c" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/xerces/xercesImpl@2.12.2?type=jar", + "purl" : "pkg:maven/org.sonarsource.python/sonar-python-plugin@5.16.0.29940?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://xerces.apache.org/xerces2-j/" + "url" : "http://redirect.sonarsource.com/plugins/python.html" + }, + { + "type" : "build-system", + "url" : "https://cirrus-ci.com/github/SonarSource/sonar-python" + }, + { + "type" : "issue-tracker", + "url" : "https://jira.sonarsource.com/browse/SONARPY" + }, + { + "type" : "mailing-list", + "url" : "https://community.sonarsource.com" }, { "type" : "vcs", - "url" : "https://svn.apache.org/repos/asf/xerces/java/" + "url" : "https://github.com/SonarCommunity/sonar-python" } ], "type" : "library", - "bom-ref" : "pkg:maven/xerces/xercesImpl@2.12.2?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.python/sonar-python-plugin@5.16.0.29940?type=jar" }, { - "group" : "xml-apis", - "name" : "xml-apis", - "version" : "1.4.01", - "description" : "xml-commons provides an Apache-hosted set of DOM, SAX, and JAXP interfaces for use in other xml-based projects. Our hope is that we can standardize on both a common version and packaging scheme for these critical XML standards interfaces to make the lives of both our developers and users easier. The External Components portion of xml-commons contains interfaces that are defined by external standards organizations. For DOM, that's the W3C; for SAX it's David Megginson and sax.sourceforge.net; for JAXP it's Sun.", + "publisher" : "SonarSource", + "group" : "org.sonarsource.python", + "name" : "python-frontend", + "version" : "5.16.0.29940", + "description" : "Parent pom of SonarSource public projects", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "7eaad6fea5925cca6c36ee8b3e02ac9d" + "content" : "af8fb4754bb34b00450e1886e6e35f24" }, { "alg" : "SHA-1", - "content" : "3789d9fada2d3d458c4ba2de349d48780f381ee3" + "content" : "3d29bbb908e0740432fd9e29f6f9fef3b61fa8bf" }, { "alg" : "SHA-256", - "content" : "a840968176645684bb01aed376e067ab39614885f9eee44abe35a5f20ebe7fad" + "content" : "2bf0a615cb8804200e9de8c3b407b6a928a16b34349f43c76bf9f6c548e8000c" }, { "alg" : "SHA-512", - "content" : "8db0283b6840cd6407957d296b802e3edf90653e2722f8e29f86c1c0b60996c4b43e9e065e6864dab89b2138ddb0174d9b4fdda4a93f94eeb884783db82f3268" + "content" : "0b42071f37c0cf8dfc46c3a3ed915bdc1d99b0bc41706200305c7f962f7b14c79e19eb42f99488b874d45267015de3f9762d903d6c03c7fb1c4bd1ac331c45d8" }, { "alg" : "SHA-384", - "content" : "bce0ec0f0f692213a1110197c4a11c333673ae0630481255d12b441a8cba70aecfaf104c3d8d9b500ed2a0a19a2bfcce" + "content" : "5411758030a57ffedc16b7b9f93592107920e01b27b8b6b98c3cb0cec1bbb3eecfc0dfc36ba130b2616507a703938560" }, { "alg" : "SHA3-384", - "content" : "c1d8154ef6eee57dfe6ae9a1c1a2525e9ec2aab3631911a53c064ea6480c0b3b1ce8dd079db7b3693d7ef81daba28ace" + "content" : "d2054bd5b799463c0364aebef1024584f37fc63b122b0d9a137d5d052b152ef3b23ebb64961222adc72f30e49ccdbe3d" }, { "alg" : "SHA3-256", - "content" : "09eb76497eac5012ce1000c52f4e597c4941a44b9d960b1ac58a19beb2dd63fc" + "content" : "6eaa8027ba8e0f7c11c2a2da14084630735110429505016fd92d8292c33637f4" }, { "alg" : "SHA3-512", - "content" : "1e4eb902e50b3388da4d161ee49f4d47b61dddd2ad10e6ef6cbb67c4ebc9043e0b65ae59a4a0c8eb03dd28814ce4aedd7e0d4962a0aedc3bdcf7de37cde38f66" + "content" : "35de0af96a078f4bc7709776d051b3d40c5f965647096114d33cb47c2fda0aacef5453af4475302a074e351c796b30315daa182fc69f780f515ac046a19e9ff0" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0" - } - }, - { - "license" : { - "id" : "SAX-PD", - "url" : "http://www.saxproject.org/copying.html" - } - }, - { - "license" : { - "name" : "The W3C License", - "url" : "http://www.w3.org/TR/2004/REC-DOM-Level-3-Core-20040407/java-binding.zip" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/xml-apis/xml-apis@1.4.01?type=jar", + "purl" : "pkg:maven/org.sonarsource.python/python-frontend@5.16.0.29940?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://xml.apache.org/commons/components/external/" + "url" : "https://docs.sonarsource.com/sonarqube-server/latest/extension-guide/developing-a-plugin/plugin-basics/python/python-frontend/" + }, + { + "type" : "build-system", + "url" : "https://cirrus-ci.com/github/SonarSource/sonar-python" }, { "type" : "issue-tracker", - "url" : "http://issues.apache.org/bugzilla/" + "url" : "https://jira.sonarsource.com/browse/SONARPY" }, { "type" : "mailing-list", - "url" : "http://mail-archives.apache.org/mod_mbox/xml-commons-dev/" + "url" : "https://community.sonarsource.com" }, { "type" : "vcs", - "url" : "https://svn.apache.org/viewvc/xml/commons/tags/xml-commons-external-1_4_01/" + "url" : "https://github.com/SonarSource/sonar-python/python-frontend" } ], "type" : "library", - "bom-ref" : "pkg:maven/xml-apis/xml-apis@1.4.01?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.python/python-frontend@5.16.0.29940?type=jar" }, { - "publisher" : "SonarSource", - "group" : "org.sonarsource.analyzer-commons", - "name" : "sonar-performance-measure", - "version" : "2.8.0.2699", - "description" : "Logic to capture a hierarchy of performance measures, save it into a file, and merge files", + "group" : "com.google.protobuf", + "name" : "protobuf-java", + "version" : "4.29.0", + "description" : "Core Protocol Buffers library. Protocol Buffers are a way of encoding structured data in an efficient yet extensible format.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "bfdcb3a88a97fe66b288f61921bab1ae" + "content" : "5de9c1cc9a647278ab03d76ccfb8ff9d" }, { "alg" : "SHA-1", - "content" : "0ecfd7e49341de39ad53f9608c31f30b6a10c441" + "content" : "ffea90ab158435d68de76951857ef5f8b0f98365" }, { "alg" : "SHA-256", - "content" : "ebba386ff08f8bbe6e9a37a0666e91c8c8561af5e8b24de484a520e828ec64e7" + "content" : "16901851ebe5e89fe88aaad3c26866373695bc2e30627bb8932847e2f5fc2e76" }, { "alg" : "SHA-512", - "content" : "02d37166706b1a93248cfb82731318304950162814292a295f0252d0f5d7ec734cedaf4a9f960d30c85dc8bac0ee59d75089f5ae10c88212b98e4de7ef7c4d8b" + "content" : "ed9aae4faa56c04dc086af07078db3734f675eb4188bb2be98c94cc59a8e4e77b74195c47d70c7b697bc3b938e106fdc137ffda5358b3029795f28e7d9216d68" }, { "alg" : "SHA-384", - "content" : "84f70dfb7e80d7a6c1dad5ac31ce743f0da036e683881acf172d35f7d21ccbb3296165b88fcd4b2167cdc1234956bcdb" + "content" : "d204ff730ba5eff0eddd9439f05ab89e87194fc6c69d50054da593ab7537495207374840701867856ea1e9aa87ef1e14" }, { "alg" : "SHA3-384", - "content" : "e89f15bf1b1ff83ce691bd755daab7a6ac6cfb416ccdc12ebd1a7f427da2224c4b8371062ebaa3fa63ba878473e7a8d2" + "content" : "9a3dc4e7ef4e1488b6ee4a653d9f47569bb3f543012ec20fe695d1bba2a7da8e329ffe70d5ef8e43fd9da1721fe3f3c1" }, { "alg" : "SHA3-256", - "content" : "c08c9694411c5561032ace350fb1bb2201f3bfd0aa217e48047a399eb26e26c2" + "content" : "16fec3a2d08bcc363c69d2a260a78020636d94dd4ed929050d8e8b51d37960f0" }, { "alg" : "SHA3-512", - "content" : "a47781adf6a0dd209579e9c09ddb1f53c88bf89dadd4a7829655599eaea3399f9a71cf7e3b9c831c0f7e86904d5de2e97a6c3df8c0c0126ce8f4f4ad73cda1a3" + "content" : "37c5a864aa97fd50a88a5c9b2a9c7eedd646eb4655ec041502e1892efb55b2f22e9f2292dcca120e74755a11f92dc41616e1dc6919d8906fe2c5802e25ed1187" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "id" : "BSD-3-Clause", + "url" : "https://opensource.org/licenses/BSD-3-Clause" } } ], - "purl" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.8.0.2699?type=jar", + "purl" : "pkg:maven/com.google.protobuf/protobuf-java@4.29.0?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://docs.sonarqube.org/display/PLUG/Plugin+Library/sonar-analyzer-commons-parent/sonar-performance-measure" - }, - { - "type" : "build-system", - "url" : "https://cirrus-ci.com/github/SonarSource/" - }, - { - "type" : "issue-tracker", - "url" : "http://jira.sonarsource.com" + "url" : "https://developers.google.com/protocol-buffers/protobuf-java/" }, { - "type" : "mailing-list", - "url" : "https://community.sonarsource.com" + "type" : "distribution-intake", + "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-analyzer-commons/sonar-performance-measure" + "url" : "https://github.com/protocolbuffers/protobuf/protobuf-java" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.8.0.2699?type=jar" + "bom-ref" : "pkg:maven/com.google.protobuf/protobuf-java@4.29.0?type=jar" }, { - "publisher" : "SonarSource and Waleri Enns", + "publisher" : "SonarSource", "group" : "org.sonarsource.python", - "name" : "sonar-python-plugin", - "version" : "4.17.0.14845", - "description" : "Code Analyzer for Python", + "name" : "python-checks", + "version" : "5.16.0.29940", + "description" : "Parent pom of SonarSource public projects", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "a1f37ca54b6407c29e14d6a84ef527be" + "content" : "c6a6f14dd43b2ca777639d045d371686" }, { "alg" : "SHA-1", - "content" : "d2a19e1624695b1a8bf7691c028be1c1d795c3b4" + "content" : "7420c64bb23358297f8fb465d194b0abc81a268d" }, { "alg" : "SHA-256", - "content" : "4745222f0e3ff47ae4bef17fe6e6c8f50234c69d4992e81628c52217f3443564" + "content" : "8d71a04ae268809a329169124e821538409f323c25738a787f1004691830947a" }, { "alg" : "SHA-512", - "content" : "7fb3dc79348493ea5a16c8a436db16665126137f0dfcc146fd75dac317a686c26f81499e5a370341e87374fe28006670f48d7424ab2c7988e8e51a842872fc4a" + "content" : "49cc6c1c1f6d4ab7691e52ee582edc2dc4320706f0cba8b0264232bb8c648e0c1411fc349480d4126909275bc722a26ce7dc1d0442b0fe800d68e43dd502e8e0" }, { "alg" : "SHA-384", - "content" : "55bff9b2c2d2fede0efcaa6c64835bb2e42e94d4ba6196168d4d5b2f7fbd65cd8c03ae85f39937d27f873edcc359d565" + "content" : "0ec195c2cd805ba066715992213efab8234ad4fea211d38c11621b764ce81a82ec4eb13f372c3a6ae77663319de497ca" }, { "alg" : "SHA3-384", - "content" : "f38a0bc3cfd4b5d024c210e71fc0b63f41cc4bbac4bc501905fad95ceda64f81e39c3a53ca50b5c1e25250e802ce8a92" + "content" : "d59fe66bc7a1621385b1a8e6d9e7e9aba25f5bcd1bf7460aaeea718a9fdefa1f01d65bc6bbf08c4ea20d6ff5533321d5" }, { "alg" : "SHA3-256", - "content" : "2a9a49aac638a35dbc0ec3d31a79cb92a87bb148ce46ca7072bbb4d732a0cda6" + "content" : "6b6d15ca4b8e534cfb0a5b3a9dc4ea328d07647a6a5029cc5bc36cc0e33f4ae7" }, { "alg" : "SHA3-512", - "content" : "5861b8fa999a2e4117429bf16c4ee05f765050a41ca59fd6beb2499ac24020a0693f366b6807bce569cf789be4ef075ab320aa02580712ad32d0b10a0b1b34d4" + "content" : "258f4367d5303ee344945915f54637c52cdfd441d3ec1a642172dd417815e38993f14b35154b0d9c7d3f49dfad666e9cb2ca26a9993f52815180b4bb6bdf8dce" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.sonarsource.python/sonar-python-plugin@4.17.0.14845?type=jar", + "purl" : "pkg:maven/org.sonarsource.python/python-checks@5.16.0.29940?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://redirect.sonarsource.com/plugins/python.html" + "url" : "https://docs.sonarsource.com/sonarqube-server/latest/extension-guide/developing-a-plugin/plugin-basics/python/python-checks/" }, { "type" : "build-system", @@ -3615,66 +3589,66 @@ }, { "type" : "vcs", - "url" : "https://github.com/SonarCommunity/sonar-python" + "url" : "https://github.com/SonarSource/sonar-python/python-checks" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.python/sonar-python-plugin@4.17.0.14845?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.python/python-checks@5.16.0.29940?type=jar" }, { - "publisher" : "SonarSource and Waleri Enns", + "publisher" : "SonarSource", "group" : "org.sonarsource.python", - "name" : "python-frontend", - "version" : "4.17.0.14845", + "name" : "python-commons", + "version" : "5.16.0.29940", "description" : "Parent pom of SonarSource public projects", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "c55cb48cedabf79f2877ebb9d88f6b58" + "content" : "9d94ffb59a75cf874e054eb124bc1815" }, { "alg" : "SHA-1", - "content" : "4ff8dfa5ea7d5ad5847562d95396b919308caea3" + "content" : "0c4756f9dd9cc5caf3acc856171694e2fa033bcc" }, { "alg" : "SHA-256", - "content" : "437b54530740f33ae5e46bdf8348d1440684f7d1cb318a7ee058689bd9b97c76" + "content" : "5fb75ed5d0f7767f3d5877e1fc44a2cb4498b83c482e1e4cefd5c878f118225e" }, { "alg" : "SHA-512", - "content" : "4928573b4dde5237b3056a25d01fdcaa0d8477f66517d0939d332ff8ba434b6a03d884095701f4b571af131b3afc6b57feee148d69d86b8e62a3a4d39d2d1001" + "content" : "d8aa8345c5a55aa6a9cbcb261277e0f36e4756ea4a4d9dc99410053781a6305f9c98e1d0c2f0253e9e6140c40f6f9f19da26e7e85913407b42b20808aebfe9f0" }, { "alg" : "SHA-384", - "content" : "859f11ab3b6590bc07f6a082ef8d87775939341e064abd4c840ad326640c71b84e99a8ae281f0bece8bd5b8196db1c0d" + "content" : "ee39919d1c32d29c16e41ef2259b5b71f5670244c9c9b1224972eb4d38c90e963dedb6108ce8c0243e322086e585a3da" }, { "alg" : "SHA3-384", - "content" : "7dc1a501021011058c6e46cf0e069103aca9687de27aea29c42196af8d74c09ed668ec77284abafc12d635f4e0c9154e" + "content" : "ddc8bf3b9b5d30bb0916c90f676061729666587f674827a29dcb21a08fe4d59e42f5ce818c5730e2aa21f1befa74c130" }, { "alg" : "SHA3-256", - "content" : "84a8def8e68682978bda393edba28e6caa7d4c333fffce5c09a24e54a4104d20" + "content" : "da0ff73c07625578b2d3d55fcc5cd16406762ad670a77c46e7128f6c4e90ec3b" }, { "alg" : "SHA3-512", - "content" : "b44fdef1e3482a1f65d0d5345c69fb78ed32cee27f96abab033ae1e3e26923efd69e8b213ae7c9c367c0e9a87df3785154ecc58961a5261513dc1fb3e260d50d" + "content" : "624e8aaaee39fcad526d4e2699174f8aa9804fc1cb08418dd742374a91fdc3fd474173f59e64508a74029080e9e56d9c6c32e311b71533eba3eead882c4a736f" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.sonarsource.python/python-frontend@4.17.0.14845?type=jar", + "purl" : "pkg:maven/org.sonarsource.python/python-commons@5.16.0.29940?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://docs.sonarqube.org/display/PLUG/Plugin+Library/python/python-frontend" + "url" : "https://docs.sonarsource.com/sonarqube-server/latest/extension-guide/developing-a-plugin/plugin-basics/python/python-commons/" }, { "type" : "build-system", @@ -3690,210 +3664,210 @@ }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-python/python-frontend" + "url" : "https://github.com/SonarSource/sonar-python/python-commons" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.python/python-frontend@4.17.0.14845?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.python/python-commons@5.16.0.29940?type=jar" }, { - "group" : "com.google.protobuf", - "name" : "protobuf-java", - "version" : "3.25.1", - "description" : "Core Protocol Buffers library. Protocol Buffers are a way of encoding structured data in an efficient yet extensible format.", + "publisher" : "FasterXML", + "group" : "com.fasterxml.jackson.dataformat", + "name" : "jackson-dataformat-toml", + "version" : "2.20.1", + "description" : "Support for reading and writing TOML-encoded data via Jackson abstractions.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "7dc81d3c2187ce5627d134a37df88cc0" + "content" : "f3d12c27f5c0744054e8716f3ee4b3d2" }, { "alg" : "SHA-1", - "content" : "2933a5c3f022456d8842323fe0d7fb2d25a7e3c7" + "content" : "1f4f7249289053551eac7bc8ac6e646576d03e1a" }, { "alg" : "SHA-256", - "content" : "48a8e58a1a8f82eff141a7a388d38dfe77d7a48d5e57c9066ee37f19147e20df" + "content" : "3936e3fb83edd2754bb317d17a63cded43b5fac4fb82eabb4aaa502bb52f9835" }, { "alg" : "SHA-512", - "content" : "d4adb935097c4fee13838ea7c166b41a9c34977e436d2fa5e5e92aac1a95462846463895ad994858a442079627696ca14618ff97a0039abd3fcb8671d7961d3a" + "content" : "cd31529a28ff83585d8d5944943c528d4d26e0f547c5ed804c90a8c642b0cd34553d2f4b7878903312a06d4ad86351aa6591294dba4f61b0bb03da317aeef870" }, { "alg" : "SHA-384", - "content" : "2fc41e52f529bcbbe4d8938d262153ee7e7a098d51fc84a2720bade27aff0247af47629c3caa630b706001d769714d1c" + "content" : "e2f0cbd883ee0745e6c27d0cf83c1e48869f89cb444c099e553f25105d7800949b1db37fc5db5055e321fdce8b13ebde" }, { "alg" : "SHA3-384", - "content" : "9ff49c91b6ca5e5ebc8005b6179d171f3bb549b9ef667c694ea6cebe842bccbea1bedb2bab69d97e89270900915f125b" + "content" : "fd0c36a837dd0b756c3622606b1490218cba364f30d148bac78dfee7dbb1117a9f1504a2e0cac8d83cf6cdb17f0ecf7b" }, { "alg" : "SHA3-256", - "content" : "e3794da30f03c61b916aeb9aa2af625792dc7f236bf2bd16cbfffbf3ef186d59" + "content" : "58d572441da65e6c63de352d608a144b280bd3754a06128d1da840494c70ce6b" }, { "alg" : "SHA3-512", - "content" : "1d3bfb11f6cae1912bd5cd04aef53ae725d705e598fafaa185903d2c534ca2f88ad919321ec4bcdca36c9b1515097c5d47aa6868f5bd3b93732337bd564b3bb7" + "content" : "bdbc867b3d2a993b277d19c230f84dd52a8db5f6638f9a90f6d613b9eb7b2f49e3404dc78dba4877fdad3ed5bd255f27be808ec287898c833ee2347ee44a94f4" } ], "licenses" : [ { "license" : { - "id" : "BSD-3-Clause", - "url" : "https://opensource.org/licenses/BSD-3-Clause" + "id" : "Apache-2.0" } } ], - "purl" : "pkg:maven/com.google.protobuf/protobuf-java@3.25.1?type=jar", + "purl" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-toml@2.20.1?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://developers.google.com/protocol-buffers/protobuf-java/" + "url" : "https://github.com/FasterXML/jackson-dataformats-text" }, { "type" : "distribution-intake", - "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" + "url" : "https://central.sonatype.com/api/v1/publisher" + }, + { + "type" : "issue-tracker", + "url" : "https://github.com/FasterXML/jackson-dataformats-text/issues" }, { "type" : "vcs", - "url" : "https://github.com/protocolbuffers/protobuf/protobuf-java" + "url" : "https://github.com/FasterXML/jackson-dataformats-text/jackson-dataformat-toml" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.google.protobuf/protobuf-java@3.25.1?type=jar" + "bom-ref" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-toml@2.20.1?type=jar" }, { - "publisher" : "SonarSource and Waleri Enns", - "group" : "org.sonarsource.python", - "name" : "python-checks", - "version" : "4.17.0.14845", - "description" : "Parent pom of SonarSource public projects", + "publisher" : "FasterXML", + "group" : "com.fasterxml.jackson.datatype", + "name" : "jackson-datatype-jdk8", + "version" : "2.20.1", + "description" : "Add-on module for Jackson (https://github.com/FasterXML/jackson) to support JDK 8 data types.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "077f9306a20f8a6eca092f54a53a26e3" + "content" : "9360afe5a78d29ce5510f670b3286e77" }, { "alg" : "SHA-1", - "content" : "ef43f45c57346b910ac422d7aff2ab4b6fe25894" + "content" : "6a8bbc260ba834f67220117d9f08510d69c4a3f0" }, { "alg" : "SHA-256", - "content" : "7d6e1743538dbfa7310bc54fbb7e511a6fd8633549018d7e2b4ba67019a3123e" + "content" : "6821cdd695e95c4e6853ec855a7432c71f2f4be318b3ca190fbbf8a2e5f981f2" }, { "alg" : "SHA-512", - "content" : "f628f82e470f9af8e0da159464ef41996b5edbbab7ead94db853afc54992d8f155994becbb9acdfe4af46a41fbf5e3ae01ba6b17078d1e20861da5e4eedccafc" + "content" : "9aceae6ea4ac56a038982fc45e91942cc15d68b7e07e044c1e75a71760b2eb02e23a344f36966093be670a2d1f656146492f11148da06a4044b4a5d78e523beb" }, { "alg" : "SHA-384", - "content" : "43302f43c32c5b35c4f7b85e901c457ad7ce7c1d0cc8d891dceb828018d0fa06c09fd7b6a34764f187b0deb8f002db96" + "content" : "c55990a25083046bd3881b656d5fa351e5d2115ce861427cc8bdc64acbf85f9a3ea739f3510eedfc0372f226ed7ebd2a" }, { "alg" : "SHA3-384", - "content" : "2c847248451a6f0874fa6d91dedd203c7492db05161c15235d709e9e9bc6d8ff5900b7c60e0aeea74fb7566cb1a3db3e" + "content" : "9556b354a7fdf5324aa22d6a00b308508bfb55555c2a31ca159c2b9f35f8a3d4e904a7eb15388f6532bb464fcc642db5" }, { "alg" : "SHA3-256", - "content" : "32f3d74c14e3918b8af6c98cc32304cc5d0b835348cd15734033307e4e871d2f" + "content" : "b4018fdef370f16380205cf366a9b84f4721b5ff0a800e72e0a1a23f4a58848a" }, { "alg" : "SHA3-512", - "content" : "2429a23270a66433e76eade81bb8b8acd3d91b55a587c6230ecc1282e71b2fcd61d9867d100fe04b74d387516a7c0df4124d8aa82f300c07a82dba20b4c01920" + "content" : "9f9db93cecb859df97455ddfa61136406700ae786715a3754e0ac9f9993deb9df62c44e08233dcf463e792fcbba9a25e7472e34dba5970d9df7eecf959c71875" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "id" : "Apache-2.0" } } ], - "purl" : "pkg:maven/org.sonarsource.python/python-checks@4.17.0.14845?type=jar", + "purl" : "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.20.1?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://docs.sonarqube.org/display/PLUG/Plugin+Library/python/python-checks" + "url" : "https://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jdk8" }, { - "type" : "build-system", - "url" : "https://cirrus-ci.com/github/SonarSource/sonar-python" + "type" : "distribution-intake", + "url" : "https://central.sonatype.com/api/v1/publisher" }, { "type" : "issue-tracker", - "url" : "https://jira.sonarsource.com/browse/SONARPY" - }, - { - "type" : "mailing-list", - "url" : "https://community.sonarsource.com" + "url" : "https://github.com/FasterXML/jackson-modules-java8/issues" }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-python/python-checks" + "url" : "http://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jdk8" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.python/python-checks@4.17.0.14845?type=jar" + "bom-ref" : "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.20.1?type=jar" }, { "publisher" : "The Apache Software Foundation", - "group" : "commons-lang", - "name" : "commons-lang", - "version" : "2.6", - "description" : "Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.", + "group" : "org.apache.commons", + "name" : "commons-text", + "version" : "1.14.0", + "description" : "Apache Commons Text is a set of utility functions and reusable components for processing and manipulating text in a Java environment.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "4d5c1693079575b362edf41500630bbd" + "content" : "54960a12a82d52df3d5548d6934d87b2" }, { "alg" : "SHA-1", - "content" : "0ce1edb914c94ebc388f086c6827e8bdeec71ac2" + "content" : "adcb0d4c67eabc79682604b47eb852aaff21138a" }, { "alg" : "SHA-256", - "content" : "50f11b09f877c294d56f24463f47d28f929cf5044f648661c0f0cfbae9a2f49c" + "content" : "121fce2282910c8f0c3ba793a5436b31beb710423cbe2d574a3fb7a73c508e92" }, { "alg" : "SHA-512", - "content" : "4a5a3dbe4941c645e2cca068cca5c1882cfe988b02e7cd981d1e51784900767d1deab0e0e0566f559c9fcabb4a180e436d5bb948902d4f4106f37360466afb42" + "content" : "4975879372241025bd0a47fe540ed7d0cd3e5eba474b12af67a8c6016be0fbb4f4a3a4a0064f4d2b6aebce67d88ee814da345a5ba3a6ee4f6293b3b4e7bbd065" }, { "alg" : "SHA-384", - "content" : "9725bc421adc1dbcd6f937eca0f3075d186a2b353ece4cef66b0fe81bb8d3f7d7641c43e86d657ef526c719f0c2a8c90" + "content" : "a038f1a8b58bb7ec17ba55238d3e40f5d9386dfb17870630a728b22741a9592819374e9abbbc6402a439eea4db5b739a" }, { "alg" : "SHA3-384", - "content" : "4bc4eaaf2580ded6d552b96ae5261c936de95f69a1d137c47279c51bf2aa1406ae44f69ccc94486267b8441e53c4bd74" + "content" : "5325922bb72aa73d2d51cb3fb5592fc77097614fd3ab3ac77e3acdc0fe1dc8c18893cdd9a05768bb725fa40dd8c14527" }, { "alg" : "SHA3-256", - "content" : "b68d49ef037d428ea0c3e67a7a20f3d68a134bef30a1639ec08d28886b9f5629" + "content" : "31008266592ec8503bcc7f6b4e7125b0e377f57f3a697cdcb02ee7f20f84ddf1" }, { "alg" : "SHA3-512", - "content" : "2e9ffc0608827cffc0b48b7a0f35d371c66586c99fea2910f7c2a237c7c57d9ae4d65de7c8e018362c2e4f963c2f70a9196cebf35457f1dd0cea6c65c256f673" + "content" : "385249425d8c6ab181039195a03c6337f393a1e1419527e9f072d695367bc0bd6546e752d1912df557bd8788329f7609aa1c63ce42eb135e2d27b6141ce9280f" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0" + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], - "purl" : "pkg:maven/commons-lang/commons-lang@2.6?type=jar", + "purl" : "pkg:maven/org.apache.commons/commons-text@1.14.0?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://commons.apache.org/lang/" + "url" : "https://commons.apache.org/proper/commons-text" }, { "type" : "build-system", - "url" : "http://vmbuild.apache.org/continuum/" + "url" : "https://github.com/apache/commons-text/actions" }, { "type" : "distribution-intake", @@ -3901,19 +3875,19 @@ }, { "type" : "issue-tracker", - "url" : "http://issues.apache.org/jira/browse/LANG" + "url" : "https://issues.apache.org/jira/browse/TEXT" }, { "type" : "mailing-list", - "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/" + "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/" }, { "type" : "vcs", - "url" : "http://svn.apache.org/viewvc/commons/proper/lang/branches/LANG_2_X" + "url" : "https://gitbox.apache.org/repos/asf?p=commons-text.git" } ], "type" : "library", - "bom-ref" : "pkg:maven/commons-lang/commons-lang@2.6?type=jar" + "bom-ref" : "pkg:maven/org.apache.commons/commons-text@1.14.0?type=jar" }, { "publisher" : "Codehaus", @@ -4112,45 +4086,108 @@ "type" : "library", "bom-ref" : "pkg:maven/org.codehaus.woodstox/stax2-api@3.1.4?type=jar" }, + { + "publisher" : "SonarSource", + "group" : "org.sonarsource.go", + "name" : "sonar-go-plugin", + "version" : "1.32.0.5128", + "description" : "Code Analyzer for Go", + "scope" : "required", + "hashes" : [ + { + "alg" : "MD5", + "content" : "ea2de97a8b1020865b993afe78aff72f" + }, + { + "alg" : "SHA-1", + "content" : "daa3ce9acfba33b2dba823c64d72bf3a0fa2b25d" + }, + { + "alg" : "SHA-256", + "content" : "7ad9dd5e478be53d58ad12d060f0e4aaa5e5eb9f5fcb28411c8083da2d5e0b19" + }, + { + "alg" : "SHA-512", + "content" : "3176550be29c19e7fb8b90b6993b29f3b8b4b51ddfa4509bab6de91edc4d7b40e3384dc48df7731262cb671379d2c4163eef78565389a391a43d450dcba56996" + }, + { + "alg" : "SHA-384", + "content" : "b1e7333047001ad10c6058a5ede6bc27651bae3335c0faadc1a6bda3ba1b66b90f45aec62389eaa9ec41eba836dc0d52" + }, + { + "alg" : "SHA3-384", + "content" : "18184263d523ab59b12019479a129e608f201e2c096745e869d72e029c78d41409d64934307b1f1a343ab0e1475978f3" + }, + { + "alg" : "SHA3-256", + "content" : "3fddc018fee60147c78382440a963bf6812bf496bb1d25090b50475e185a0844" + }, + { + "alg" : "SHA3-512", + "content" : "c1fc155244473f90fcc327f33055b06cb2fb35a203421b832f627d12150d851640a407a84dd47498b372ad0337bb1881ffa8aeab9fec85cb5e04b924989c5db5" + } + ], + "licenses" : [ + { + "license" : { + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" + } + } + ], + "purl" : "pkg:maven/org.sonarsource.go/sonar-go-plugin@1.32.0.5128?type=jar", + "externalReferences" : [ + { + "type" : "website", + "url" : "http://www.sonarqube.org/" + }, + { + "type" : "vcs", + "url" : "https://github.com/SonarSource/sonar-go" + } + ], + "type" : "library", + "bom-ref" : "pkg:maven/org.sonarsource.go/sonar-go-plugin@1.32.0.5128?type=jar" + }, { "publisher" : "Google Inc.", "group" : "com.google.googlejavaformat", "name" : "google-java-format", - "version" : "1.22.0", + "version" : "1.28.0", "description" : "A Java source code formatter that follows Google Java Style.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "fd1fbd4edf5d8eaca565217ff981b94b" + "content" : "8e2d4037e876b608ab0356477b5ead98" }, { "alg" : "SHA-1", - "content" : "6e31a0877a51e91076c857794a0b1df7af876b2d" + "content" : "f57d0ad670cc32c4d4a4ffb2cbef44a3dfddeecd" }, { "alg" : "SHA-256", - "content" : "4f4bdba0f2a3d7e84be47683a0c2a4ba69024d29d906d09784181f68f04af792" + "content" : "41dfe4d1012794ed15e0ffd70f89fd4fa65d5f15ce0bc0c70f8c2c127d6d010d" }, { "alg" : "SHA-512", - "content" : "d2006def13e5144e12568298014a23c86299a62e2bb7757c63f5f25405b1adb6f60b3f2f54bed9583cdd24cae71088e9f7aa846a10a089cce2a25972e48c7649" + "content" : "87bf18026e543bc9135d58153f05b8bf58b48bd59cec96e774e3f68bc8d601b9789924a9917b9a4f57b8a69bbe24dd20aef0a65543a63e7101b39317469346d2" }, { "alg" : "SHA-384", - "content" : "4aed1de35a09b196347064d45a5996fd7467c9b5cca0faf4655cbeb756053810cd3af2e45d74401aee626e30b1693ca7" + "content" : "bfd9e42e51d696fa079aa12d3541645873724ce48989615723533aba58fc3e4f77a37e9102bad2b391dc0252b449bad9" }, { "alg" : "SHA3-384", - "content" : "28fc6265d1886418ca44d1c7eea8709a2f38ba5b3f8cedb6a44d1a36f676e533662b61105db8b8d1f69fc4796fbcc8bd" + "content" : "b48a456db7981843ffc51f60511d4a5d52072bbe89da4dda6560cee4414493236e94ad1af4c5564449fb000501ca6ef4" }, { "alg" : "SHA3-256", - "content" : "08098285fccec01b2f3fce2e46ac210deb79862f21cb4ae96ff3a1a040df0809" + "content" : "ae18cf36a9212cdb243e3900cca7f9059273dfdf227fb97a189b5ae84cc989e4" }, { "alg" : "SHA3-512", - "content" : "122e32ab36408a79ed1153660ab1ba7639212d30921ea022da9affc19f76c5d874241a8584fc5c992ce74d2f01c2e06fddc784aee11c6d4238fc645ade3a1880" + "content" : "ac1207d9b7d8be02a222d1f11b44a5bcf1d95924404926698c8f23ba3688cfc49fc81e594e4f48d03ebbbf0ccc638706433ed462499b5b4d083538eb7e37541e" } ], "licenses" : [ @@ -4160,16 +4197,12 @@ } } ], - "purl" : "pkg:maven/com.google.googlejavaformat/google-java-format@1.22.0?type=jar", + "purl" : "pkg:maven/com.google.googlejavaformat/google-java-format@1.28.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/google/google-java-format/google-java-format" }, - { - "type" : "distribution-intake", - "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" - }, { "type" : "issue-tracker", "url" : "http://github.com/google/google-java-format/issues" @@ -4180,7 +4213,7 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/com.google.googlejavaformat/google-java-format@1.22.0?type=jar" + "bom-ref" : "pkg:maven/com.google.googlejavaformat/google-java-format@1.28.0?type=jar" }, { "group" : "com.google.guava", @@ -4462,68 +4495,6 @@ "type" : "library", "bom-ref" : "pkg:maven/org.checkerframework/checker-qual@3.37.0?type=jar" }, - { - "publisher" : "Google LLC", - "group" : "com.google.errorprone", - "name" : "error_prone_annotations", - "version" : "2.21.1", - "description" : "Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.", - "scope" : "required", - "hashes" : [ - { - "alg" : "MD5", - "content" : "75fe4fe33d308dd6cee3b601de902d27" - }, - { - "alg" : "SHA-1", - "content" : "6d9b10773b5237df178a7b3c1b4208df7d0e7f94" - }, - { - "alg" : "SHA-256", - "content" : "d1f3c66aa91ac52549e00ae3b208ba4b9af7d72d68f230643553beb38e6118ac" - }, - { - "alg" : "SHA-512", - "content" : "530318bcdf1ed8eeee408fc5a0775f1792cbf012b4ec55217a4498c8d2983b230a4d071b9e115565b0411faa51dd938823d9b619beb6786212c375ad3d1ebd8a" - }, - { - "alg" : "SHA-384", - "content" : "88e628431966a9b5cc19f96159874cefde1558e51d2ce233a0c2d47914eb9c6256f95882605a87cc6629a21ff70b72b4" - }, - { - "alg" : "SHA3-384", - "content" : "ebc750b211532fef9a84c3682d47f00b877e4082716ead1f4f883f02ab35bda8d5acfc475722215c4fe6ed9cfd54f43a" - }, - { - "alg" : "SHA3-256", - "content" : "9b4f193bf2f541844c6b1b5cf2d1c7f6e9465b97804d155f34530b203184e1ae" - }, - { - "alg" : "SHA3-512", - "content" : "1d76781cef387a185fd4fb69960394556062969bbbe0be74d0fb11f7c73758e5d35ff546ab04f6382c21c63705a1ffb975a549bf4d846fde54e412ecd4641485" - } - ], - "licenses" : [ - { - "license" : { - "id" : "Apache-2.0" - } - } - ], - "purl" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.21.1?type=jar", - "externalReferences" : [ - { - "type" : "website", - "url" : "https://errorprone.info/error_prone_annotations" - }, - { - "type" : "vcs", - "url" : "https://github.com/google/error-prone/error_prone_annotations" - } - ], - "type" : "library", - "bom-ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.21.1?type=jar" - }, { "group" : "com.google.j2objc", "name" : "j2objc-annotations", @@ -4592,47 +4563,46 @@ ], "dependencies" : [ { - "ref" : "pkg:maven/com.ibm/output@1.0.3-SNAPSHOT?type=jar", + "ref" : "pkg:maven/com.ibm/output@2.0.0-SNAPSHOT?type=jar", "dependsOn" : [ - "pkg:maven/org.cyclonedx/cyclonedx-core-java@8.1.0-SNAPSHOT?type=jar", - "pkg:maven/com.ibm/mapper@1.0.3-SNAPSHOT?type=jar", - "pkg:maven/com.ibm/engine@1.0.3-SNAPSHOT?type=jar", - "pkg:maven/org.jetbrains/annotations@24.1.0?type=jar", - "pkg:maven/org.sonarsource.api.plugin/sonar-plugin-api@9.13.0.360?type=jar", - "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", - "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar", - "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar", - "pkg:maven/org.sonarsource.java/sonar-java-plugin@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.python/sonar-python-plugin@4.17.0.14845?type=jar", - "pkg:maven/com.google.googlejavaformat/google-java-format@1.22.0?type=jar" + "pkg:maven/org.cyclonedx/cyclonedx-core-java@11.0.1?type=jar", + "pkg:maven/com.ibm/mapper@2.0.0-SNAPSHOT?type=jar", + "pkg:maven/com.ibm/engine@2.0.0-SNAPSHOT?type=jar", + "pkg:maven/org.sonarsource.api.plugin/sonar-plugin-api@13.4.3.4290?type=jar", + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", + "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar", + "pkg:maven/org.sonarsource.java/sonar-java-plugin@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.python/sonar-python-plugin@5.16.0.29940?type=jar", + "pkg:maven/org.sonarsource.go/sonar-go-plugin@1.32.0.5128?type=jar", + "pkg:maven/com.google.googlejavaformat/google-java-format@1.28.0?type=jar" ] }, { - "ref" : "pkg:maven/org.cyclonedx/cyclonedx-core-java@8.1.0-SNAPSHOT?type=jar", + "ref" : "pkg:maven/org.cyclonedx/cyclonedx-core-java@11.0.1?type=jar", "dependsOn" : [ - "pkg:maven/commons-codec/commons-codec@1.16.0?type=jar", - "pkg:maven/commons-io/commons-io@2.15.1?type=jar", - "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar", - "pkg:maven/org.apache.commons/commons-collections4@4.4?type=jar", + "pkg:maven/commons-codec/commons-codec@1.20.0?type=jar", + "pkg:maven/commons-io/commons-io@2.21.0?type=jar", + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", + "pkg:maven/org.apache.commons/commons-collections4@4.5.0?type=jar", "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar", - "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.16.1?type=jar", - "pkg:maven/com.networknt/json-schema-validator@1.0.87?type=jar" + "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.20.1?type=jar", + "pkg:maven/com.networknt/json-schema-validator@1.5.9?type=jar" ] }, { - "ref" : "pkg:maven/commons-codec/commons-codec@1.16.0?type=jar", + "ref" : "pkg:maven/commons-codec/commons-codec@1.20.0?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/commons-io/commons-io@2.15.1?type=jar", + "ref" : "pkg:maven/commons-io/commons-io@2.21.0?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar", + "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/org.apache.commons/commons-collections4@4.4?type=jar", + "ref" : "pkg:maven/org.apache.commons/commons-collections4@4.5.0?type=jar", "dependsOn" : [ ] }, { @@ -4640,28 +4610,28 @@ "dependsOn" : [ ] }, { - "ref" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.16.1?type=jar", + "ref" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.20.1?type=jar", "dependsOn" : [ - "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.16.1?type=jar", - "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.16.1?type=jar", - "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.16.1?type=jar", + "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.1?type=jar", + "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.20?type=jar", + "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1?type=jar", "pkg:maven/org.codehaus.woodstox/stax2-api@3.1.4?type=jar", - "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.5.1?type=jar" + "pkg:maven/com.fasterxml.woodstox/woodstox-core@7.1.1?type=jar" ] }, { - "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.16.1?type=jar", + "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.1?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.16.1?type=jar", + "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.20?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.16.1?type=jar", + "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1?type=jar", "dependsOn" : [ - "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.16.1?type=jar", - "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.16.1?type=jar" + "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.20?type=jar", + "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.1?type=jar" ] }, { @@ -4669,126 +4639,121 @@ "dependsOn" : [ ] }, { - "ref" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.5.1?type=jar", + "ref" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@7.1.1?type=jar", "dependsOn" : [ "pkg:maven/org.codehaus.woodstox/stax2-api@3.1.4?type=jar" ] }, { - "ref" : "pkg:maven/com.networknt/json-schema-validator@1.0.87?type=jar", + "ref" : "pkg:maven/com.networknt/json-schema-validator@1.5.9?type=jar", "dependsOn" : [ - "pkg:maven/com.ethlo.time/itu@1.7.0?type=jar", - "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.16.1?type=jar", - "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.15.2?type=jar", - "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar" + "pkg:maven/com.ethlo.time/itu@1.14.0?type=jar", + "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1?type=jar", + "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.18.3?type=jar", + "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar" ] }, { - "ref" : "pkg:maven/com.ethlo.time/itu@1.7.0?type=jar", + "ref" : "pkg:maven/com.ethlo.time/itu@1.14.0?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.15.2?type=jar", + "ref" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.18.3?type=jar", "dependsOn" : [ - "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.16.1?type=jar", - "pkg:maven/org.yaml/snakeyaml@2.0?type=jar", - "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.16.1?type=jar" + "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1?type=jar", + "pkg:maven/org.yaml/snakeyaml@2.3?type=jar", + "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.1?type=jar" ] }, { - "ref" : "pkg:maven/org.yaml/snakeyaml@2.0?type=jar", + "ref" : "pkg:maven/org.yaml/snakeyaml@2.3?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar", + "ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/com.ibm/mapper@1.0.3-SNAPSHOT?type=jar", + "ref" : "pkg:maven/com.ibm/mapper@2.0.0-SNAPSHOT?type=jar", "dependsOn" : [ - "pkg:maven/com.ibm/engine@1.0.3-SNAPSHOT?type=jar", - "pkg:maven/org.jetbrains/annotations@24.1.0?type=jar", - "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", - "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar", - "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar", - "pkg:maven/org.sonarsource.java/sonar-java-plugin@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.python/sonar-python-plugin@4.17.0.14845?type=jar", - "pkg:maven/com.google.googlejavaformat/google-java-format@1.22.0?type=jar" + "pkg:maven/com.ibm/engine@2.0.0-SNAPSHOT?type=jar", + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", + "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar", + "pkg:maven/org.sonarsource.java/sonar-java-plugin@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.python/sonar-python-plugin@5.16.0.29940?type=jar", + "pkg:maven/org.sonarsource.go/sonar-go-plugin@1.32.0.5128?type=jar", + "pkg:maven/com.google.googlejavaformat/google-java-format@1.28.0?type=jar" ] }, { - "ref" : "pkg:maven/com.ibm/engine@1.0.3-SNAPSHOT?type=jar", + "ref" : "pkg:maven/com.ibm/engine@2.0.0-SNAPSHOT?type=jar", "dependsOn" : [ - "pkg:maven/com.ibm/common@1.0.3-SNAPSHOT?type=jar", - "pkg:maven/org.jetbrains/annotations@24.1.0?type=jar", - "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", - "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar", - "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar", - "pkg:maven/org.sonarsource.java/sonar-java-plugin@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.python/sonar-python-plugin@4.17.0.14845?type=jar", - "pkg:maven/com.google.googlejavaformat/google-java-format@1.22.0?type=jar" + "pkg:maven/com.ibm/common@2.0.0-SNAPSHOT?type=jar", + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", + "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar", + "pkg:maven/org.sonarsource.java/sonar-java-plugin@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.python/sonar-python-plugin@5.16.0.29940?type=jar", + "pkg:maven/org.sonarsource.go/sonar-go-plugin@1.32.0.5128?type=jar", + "pkg:maven/com.google.googlejavaformat/google-java-format@1.28.0?type=jar" ] }, { - "ref" : "pkg:maven/com.ibm/common@1.0.3-SNAPSHOT?type=jar", + "ref" : "pkg:maven/com.ibm/common@2.0.0-SNAPSHOT?type=jar", "dependsOn" : [ - "pkg:maven/org.jetbrains/annotations@24.1.0?type=jar", - "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", - "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar", - "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar", - "pkg:maven/org.sonarsource.java/sonar-java-plugin@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.python/sonar-python-plugin@4.17.0.14845?type=jar", - "pkg:maven/com.google.googlejavaformat/google-java-format@1.22.0?type=jar" + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", + "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar", + "pkg:maven/org.sonarsource.java/sonar-java-plugin@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.python/sonar-python-plugin@5.16.0.29940?type=jar", + "pkg:maven/org.sonarsource.go/sonar-go-plugin@1.32.0.5128?type=jar", + "pkg:maven/com.google.googlejavaformat/google-java-format@1.28.0?type=jar" ] }, { - "ref" : "pkg:maven/org.jetbrains/annotations@24.1.0?type=jar", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", - "dependsOn" : [ ] + "ref" : "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar", + "dependsOn" : [ + "pkg:maven/com.google.errorprone/error_prone_annotations@2.41.0?type=jar" + ] }, { - "ref" : "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar", + "ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.41.0?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/org.sonarsource.java/sonar-java-plugin@7.33.0.35775?type=jar", + "ref" : "pkg:maven/org.sonarsource.java/sonar-java-plugin@8.18.0.40025?type=jar", "dependsOn" : [ - "pkg:maven/org.sonarsource.java/java-surefire@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.java/java-frontend@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.java/java-symbolic-execution@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.java/java-checks@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.java/java-checks-aws@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.java/external-reports@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.java/java-jsp@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.8.0.2699?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.8.0.2699?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.8.0.2699?type=jar" + "pkg:maven/org.sonarsource.java/java-surefire@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.java/java-frontend@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.java/java-checks@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.java/java-checks-aws@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.java/check-list@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.java/external-reports@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.java/java-jsp@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.18.0.3393?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.18.0.3393?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.18.0.3393?type=jar" ] }, { - "ref" : "pkg:maven/org.sonarsource.java/java-surefire@7.33.0.35775?type=jar", + "ref" : "pkg:maven/org.sonarsource.java/java-surefire@8.18.0.40025?type=jar", "dependsOn" : [ - "pkg:maven/org.sonarsource.java/java-frontend@7.33.0.35775?type=jar", + "pkg:maven/org.sonarsource.java/java-frontend@8.18.0.40025?type=jar", "pkg:maven/com.fasterxml.staxmate/staxmate@2.4.1?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.8.0.2699?type=jar" + "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.18.0.3393?type=jar" ] }, { - "ref" : "pkg:maven/org.sonarsource.java/java-frontend@7.33.0.35775?type=jar", + "ref" : "pkg:maven/org.sonarsource.java/java-frontend@8.18.0.40025?type=jar", "dependsOn" : [ - "pkg:maven/org.sonarsource.java/jdt-package@1.1.0.34?type=jar", + "pkg:maven/org.sonarsource.java/jdt-package@1.6.0.160?type=jar", "pkg:maven/org.sonarsource.sslr/sslr-core@1.24.0.633?type=jar", - "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.8.0.2699?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.8.0.2699?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.8.0.2699?type=jar" + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.18.0.3393?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.18.0.3393?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.18.0.3393?type=jar" ] }, { - "ref" : "pkg:maven/org.sonarsource.java/jdt-package@1.1.0.34?type=jar", + "ref" : "pkg:maven/org.sonarsource.java/jdt-package@1.6.0.160?type=jar", "dependsOn" : [ ] }, { @@ -4798,20 +4763,24 @@ ] }, { - "ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.8.0.2699?type=jar", + "ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.8.0.2699?type=jar", + "ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.18.0.3393?type=jar", + "dependsOn" : [ ] + }, + { + "ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.18.0.3393?type=jar", "dependsOn" : [ "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar" ] }, { - "ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.8.0.2699?type=jar", + "ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.18.0.3393?type=jar", "dependsOn" : [ "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", - "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar" + "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar" ] }, { @@ -4821,12 +4790,12 @@ ] }, { - "ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.8.0.2699?type=jar", + "ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.18.0.3393?type=jar", "dependsOn" : [ "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", "pkg:maven/xerces/xercesImpl@2.12.2?type=jar", "pkg:maven/xml-apis/xml-apis@1.4.01?type=jar", - "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.5.1?type=jar" + "pkg:maven/com.fasterxml.woodstox/woodstox-core@7.1.1?type=jar" ] }, { @@ -4840,117 +4809,97 @@ "dependsOn" : [ ] }, { - "ref" : "pkg:maven/org.sonarsource.java/java-symbolic-execution@7.33.0.35775?type=jar", + "ref" : "pkg:maven/org.sonarsource.java/java-checks@8.18.0.40025?type=jar", "dependsOn" : [ - "pkg:maven/org.sonarsource.java/java-frontend@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.8.0.2699?type=jar" + "pkg:maven/org.sonarsource.java/java-frontend@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.java/java-checks-common@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.18.0.3393?type=jar", + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", + "pkg:maven/org.springframework/spring-expression@6.1.21?type=jar" ] }, { - "ref" : "pkg:maven/org.sonarsource.java/java-checks@7.33.0.35775?type=jar", + "ref" : "pkg:maven/org.sonarsource.java/java-checks-common@8.18.0.40025?type=jar", "dependsOn" : [ - "pkg:maven/org.sonarsource.java/java-frontend@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.java/java-checks-common@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.java/java-symbolic-execution@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.8.0.2699?type=jar", - "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar", - "pkg:maven/org.springframework/spring-expression@6.1.5?type=jar" + "pkg:maven/org.sonarsource.java/java-frontend@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.18.0.3393?type=jar", + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar" ] }, { - "ref" : "pkg:maven/org.sonarsource.java/java-checks-common@7.33.0.35775?type=jar", - "dependsOn" : [ - "pkg:maven/org.sonarsource.java/java-frontend@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.8.0.2699?type=jar", - "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar" - ] - }, - { - "ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.8.0.2699?type=jar", + "ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.18.0.3393?type=jar", "dependsOn" : [ "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar" ] }, { - "ref" : "pkg:maven/org.springframework/spring-expression@6.1.5?type=jar", + "ref" : "pkg:maven/org.springframework/spring-expression@6.1.21?type=jar", "dependsOn" : [ - "pkg:maven/org.springframework/spring-core@6.1.5?type=jar" + "pkg:maven/org.springframework/spring-core@6.1.21?type=jar" ] }, { - "ref" : "pkg:maven/org.springframework/spring-core@6.1.5?type=jar", + "ref" : "pkg:maven/org.springframework/spring-core@6.1.21?type=jar", "dependsOn" : [ - "pkg:maven/org.springframework/spring-jcl@6.1.5?type=jar" + "pkg:maven/org.springframework/spring-jcl@6.1.21?type=jar" ] }, { - "ref" : "pkg:maven/org.springframework/spring-jcl@6.1.5?type=jar", + "ref" : "pkg:maven/org.springframework/spring-jcl@6.1.21?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/org.sonarsource.java/java-checks-aws@7.33.0.35775?type=jar", - "dependsOn" : [ - "pkg:maven/org.sonarsource.java/java-frontend@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.java/java-checks-common@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.8.0.2699?type=jar", - "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar" - ] - }, - { - "ref" : "pkg:maven/org.sonarsource.java/external-reports@7.33.0.35775?type=jar", + "ref" : "pkg:maven/org.sonarsource.java/java-checks-aws@8.18.0.40025?type=jar", "dependsOn" : [ - "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.8.0.2699?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.8.0.2699?type=jar" + "pkg:maven/org.sonarsource.java/java-frontend@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.java/java-checks-common@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.18.0.3393?type=jar", + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar" ] }, { - "ref" : "pkg:maven/org.sonarsource.java/java-jsp@7.33.0.35775?type=jar", + "ref" : "pkg:maven/org.sonarsource.java/check-list@8.18.0.40025?type=jar", "dependsOn" : [ - "pkg:maven/org.sonarsource.java/java-frontend@7.33.0.35775?type=jar", - "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@9.0.84?type=jar" + "pkg:maven/org.sonarsource.java/java-checks@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.java/java-checks-aws@8.18.0.40025?type=jar", + "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar" ] }, { - "ref" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@9.0.84?type=jar", + "ref" : "pkg:maven/org.sonarsource.java/external-reports@8.18.0.40025?type=jar", "dependsOn" : [ - "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.84?type=jar", - "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.84?type=jar" + "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.18.0.3393?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.18.0.3393?type=jar" ] }, { - "ref" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.84?type=jar", + "ref" : "pkg:maven/org.sonarsource.java/java-jsp@8.18.0.40025?type=jar", "dependsOn" : [ - "pkg:maven/org.apache.tomcat/tomcat-annotations-api@9.0.84?type=jar" + "pkg:maven/org.sonarsource.java/java-frontend@8.18.0.40025?type=jar" ] }, { - "ref" : "pkg:maven/org.apache.tomcat/tomcat-annotations-api@9.0.84?type=jar", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.84?type=jar", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:maven/org.sonarsource.python/sonar-python-plugin@4.17.0.14845?type=jar", + "ref" : "pkg:maven/org.sonarsource.python/sonar-python-plugin@5.16.0.29940?type=jar", "dependsOn" : [ - "pkg:maven/org.sonarsource.python/python-frontend@4.17.0.14845?type=jar", - "pkg:maven/org.sonarsource.python/python-checks@4.17.0.14845?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.8.0.2699?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.8.0.2699?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.8.0.2699?type=jar", - "pkg:maven/commons-lang/commons-lang@2.6?type=jar", + "pkg:maven/org.sonarsource.python/python-frontend@5.16.0.29940?type=jar", + "pkg:maven/org.sonarsource.python/python-checks@5.16.0.29940?type=jar", + "pkg:maven/org.sonarsource.python/python-commons@5.16.0.29940?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.18.0.3393?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.18.0.3393?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.18.0.3393?type=jar", + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", "pkg:maven/org.codehaus.staxmate/staxmate@2.0.1?type=jar" ] }, { - "ref" : "pkg:maven/org.sonarsource.python/python-frontend@4.17.0.14845?type=jar", + "ref" : "pkg:maven/org.sonarsource.python/python-frontend@5.16.0.29940?type=jar", "dependsOn" : [ "pkg:maven/org.sonarsource.sslr/sslr-core@1.24.0.633?type=jar", "pkg:maven/com.google.guava/guava@32.1.3-jre?type=jar", - "pkg:maven/com.google.protobuf/protobuf-java@3.25.1?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.8.0.2699?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.8.0.2699?type=jar" + "pkg:maven/com.google.protobuf/protobuf-java@4.29.0?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.18.0.3393?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.18.0.3393?type=jar", + "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1?type=jar" ] }, { @@ -4960,7 +4909,7 @@ "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar", "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", "pkg:maven/org.checkerframework/checker-qual@3.37.0?type=jar", - "pkg:maven/com.google.errorprone/error_prone_annotations@2.21.1?type=jar", + "pkg:maven/com.google.errorprone/error_prone_annotations@2.41.0?type=jar", "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar" ] }, @@ -4977,29 +4926,56 @@ "dependsOn" : [ ] }, { - "ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.21.1?type=jar", + "ref" : "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar", + "ref" : "pkg:maven/com.google.protobuf/protobuf-java@4.29.0?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/com.google.protobuf/protobuf-java@3.25.1?type=jar", - "dependsOn" : [ ] + "ref" : "pkg:maven/org.sonarsource.python/python-checks@5.16.0.29940?type=jar", + "dependsOn" : [ + "pkg:maven/org.sonarsource.python/python-frontend@5.16.0.29940?type=jar", + "pkg:maven/commons-io/commons-io@2.21.0?type=jar", + "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.18.0.3393?type=jar" + ] }, { - "ref" : "pkg:maven/org.sonarsource.python/python-checks@4.17.0.14845?type=jar", + "ref" : "pkg:maven/org.sonarsource.python/python-commons@5.16.0.29940?type=jar", "dependsOn" : [ - "pkg:maven/org.sonarsource.python/python-frontend@4.17.0.14845?type=jar", - "pkg:maven/commons-io/commons-io@2.15.1?type=jar", - "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.8.0.2699?type=jar" + "pkg:maven/org.sonarsource.python/python-frontend@5.16.0.29940?type=jar", + "pkg:maven/org.sonarsource.python/python-checks@5.16.0.29940?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.18.0.3393?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.18.0.3393?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.18.0.3393?type=jar", + "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-toml@2.20.1?type=jar", + "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.20.1?type=jar", + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", + "pkg:maven/org.apache.commons/commons-text@1.14.0?type=jar", + "pkg:maven/org.codehaus.staxmate/staxmate@2.0.1?type=jar" ] }, { - "ref" : "pkg:maven/commons-lang/commons-lang@2.6?type=jar", - "dependsOn" : [ ] + "ref" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-toml@2.20.1?type=jar", + "dependsOn" : [ + "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1?type=jar", + "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.1?type=jar" + ] + }, + { + "ref" : "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.20.1?type=jar", + "dependsOn" : [ + "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.1?type=jar", + "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1?type=jar" + ] + }, + { + "ref" : "pkg:maven/org.apache.commons/commons-text@1.14.0?type=jar", + "dependsOn" : [ + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar" + ] }, { "ref" : "pkg:maven/org.codehaus.staxmate/staxmate@2.0.1?type=jar", @@ -5013,14 +4989,20 @@ "dependsOn" : [ ] }, { - "ref" : "pkg:maven/com.google.googlejavaformat/google-java-format@1.22.0?type=jar", + "ref" : "pkg:maven/org.sonarsource.go/sonar-go-plugin@1.32.0.5128?type=jar", + "dependsOn" : [ ] + }, + { + "ref" : "pkg:maven/com.google.googlejavaformat/google-java-format@1.28.0?type=jar", "dependsOn" : [ "pkg:maven/com.google.guava/guava@32.1.3-jre?type=jar" ] }, { - "ref" : "pkg:maven/org.sonarsource.api.plugin/sonar-plugin-api@9.13.0.360?type=jar", - "dependsOn" : [ ] + "ref" : "pkg:maven/org.sonarsource.api.plugin/sonar-plugin-api@13.4.3.4290?type=jar", + "dependsOn" : [ + "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar" + ] } ] } \ No newline at end of file diff --git a/python/bom/bom.json b/python/bom/bom.json index 60a9577e..2495da0b 100644 --- a/python/bom/bom.json +++ b/python/bom/bom.json @@ -1,10 +1,10 @@ { "bomFormat" : "CycloneDX", "specVersion" : "1.5", - "serialNumber" : "urn:uuid:07f232dc-77c6-3e79-bff1-92d31565333c", + "serialNumber" : "urn:uuid:1d9403b9-400c-3238-9269-819557e44848", "version" : 1, "metadata" : { - "timestamp" : "2024-04-12T08:17:02Z", + "timestamp" : "2026-01-28T14:17:25Z", "lifecycles" : [ { "phase" : "build" @@ -52,32 +52,32 @@ } ], "component" : { - "publisher" : "IBM", + "publisher" : "cbomkit", "group" : "com.ibm", "name" : "python", - "version" : "1.0.3-SNAPSHOT", + "version" : "2.0.0-SNAPSHOT", "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "https://www.gnu.org/licenses/lgpl.txt" + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], - "purl" : "pkg:maven/com.ibm/python@1.0.3-SNAPSHOT?type=jar", + "purl" : "pkg:maven/com.ibm/python@2.0.0-SNAPSHOT?type=jar", "externalReferences" : [ { "type" : "distribution-intake", - "url" : "https://eu.artifactory.swg-devops.com/artifactory/res-cryptoagility-team-maven-local" + "url" : "https://maven.pkg.github.com/cbomkit/sonar-cryptography" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.ibm/python@1.0.3-SNAPSHOT?type=jar" + "bom-ref" : "pkg:maven/com.ibm/python@2.0.0-SNAPSHOT?type=jar" }, "properties" : [ { "name" : "maven.goal", - "value" : "makeBom" + "value" : "makeAggregateBom" }, { "name" : "maven.scopes", @@ -87,218 +87,218 @@ }, "components" : [ { - "publisher" : "IBM", + "publisher" : "cbomkit", "group" : "com.ibm", "name" : "engine", - "version" : "1.0.3-SNAPSHOT", + "version" : "2.0.0-SNAPSHOT", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "67ae457c13ac566ea59b295a59cb7e95" + "content" : "82d71013150d0cc35b2f86c047257ea5" }, { "alg" : "SHA-1", - "content" : "174f4581fdccafe44ba8b06ca8776250a7cbd6be" + "content" : "d8aa90c2d6a5d43a659f77c8106d2638f2fa9b46" }, { "alg" : "SHA-256", - "content" : "e516d0b5fab931fc1f1c39d1ea892f2a07503ec2a245bbc9dcb1c6804adbafd2" + "content" : "a30d5984faeef0722b4cfc6b96e0680e11807dd0e058b791ea2ce803526851f9" }, { "alg" : "SHA-512", - "content" : "914b26f230b80175d70655604c16a5d2f0c34c95be27f5eaedcb01ccd71680c4723f8978c05bf7127f74f2d56beec3cbb98c18b372dfee525d07b7a0b88cd43e" + "content" : "4e2c67e7f337c49c43299da83b8707bac597304ce744a08fc3105e8679a9c1d0908b06a73557ae5b33e3f3cde36dffa11bae79a63b90bccc676cf690ea46be22" }, { "alg" : "SHA-384", - "content" : "0b224db460fdd73a412e39107df54b1bf11c43c424032ad00a73b7f695ba693b4e18a4cc3865f3b42d85840c703b2f1a" + "content" : "c259f83084de03dfb95efb15da1bb5e89a70453ca58df5929ad51fbebc3f4a46e7964249f1bcb71e099167511772bf77" }, { "alg" : "SHA3-384", - "content" : "a4980534f8d193ee0e6c984d540af540221d481fa955c7262eedccdb97afd92701478c32dec4bb874545524c95e4ae4a" + "content" : "aafaf842f747bd36b202cba133419618398debf30bef80ace36629d995c510f045a5227181b98e22685865fd59559080" }, { "alg" : "SHA3-256", - "content" : "b10c75d6a28044f378a59270380d20f7032b80146c669292c31e9140f1cd6548" + "content" : "98c5eb98fa32698d7f1070c731ed32053f8528393a9696f983ae285f9054831d" }, { "alg" : "SHA3-512", - "content" : "a93f4b34a1818b9eb6675e31b810583ff28f6e76470494819d5a7c831d987474bd4c600f297655dfb8c379d3af3861634e7668bfa22c4eddfacf2539cee17ec7" + "content" : "a695852c9a2886e19fde16679d404d92be3ae62617ca460852c29a16601c97385a494b3865b92864f125bed747d7e5836f13153ae86a6c3b7179317d22fa2070" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "https://www.gnu.org/licenses/lgpl.txt" + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], - "purl" : "pkg:maven/com.ibm/engine@1.0.3-SNAPSHOT?type=jar", + "purl" : "pkg:maven/com.ibm/engine@2.0.0-SNAPSHOT?type=jar", "externalReferences" : [ { "type" : "distribution-intake", - "url" : "https://eu.artifactory.swg-devops.com/artifactory/res-cryptoagility-team-maven-local" + "url" : "https://maven.pkg.github.com/cbomkit/sonar-cryptography" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.ibm/engine@1.0.3-SNAPSHOT?type=jar" + "bom-ref" : "pkg:maven/com.ibm/engine@2.0.0-SNAPSHOT?type=jar" }, { - "publisher" : "IBM", + "publisher" : "cbomkit", "group" : "com.ibm", "name" : "common", - "version" : "1.0.3-SNAPSHOT", + "version" : "2.0.0-SNAPSHOT", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "6b537a90ffd838bb65c5a9c2ff371dce" + "content" : "0bc212a0d7a96c40a0c6792249b21ee7" }, { "alg" : "SHA-1", - "content" : "76b39430ee28fd8962edae300a91d5ebc52c1076" + "content" : "70c6efeb7474e7b78595b6601584276bb7a90814" }, { "alg" : "SHA-256", - "content" : "1c9dcb0bdef66d58f48eebc5be6b625485ceba73f8e3310d8b72f5341094acea" + "content" : "aff8b56a14f886f07e502bf26baa476c3b6f3b79b8b6b003da2260435cda087f" }, { "alg" : "SHA-512", - "content" : "be406c24fb42f8595a51ff011041cb03271ff299d6c724961276f76ccc3c2a70a02e41726c188cd48081f064de989d16abf295658ac33a3d0f417a20eeb6c879" + "content" : "dcd37bc935a630965b07aa61633eb51e8ea58543a277f387edb93956a5153b447bd93a48ca2236a56ebf8df5b72b6f4e1759a4d222d1b12b480730f378ad87b1" }, { "alg" : "SHA-384", - "content" : "dcdf2d7e35abc1fc724ab290bbc10952df07a9b5ccd18373fb549c56bd14da38f529de16240e1fee98e083fc025876d8" + "content" : "8af172d828b3415fb085293a1788e04fe53cbba7ae53c2c4911f5333dc30cea9e3a11255922852f6269b09786b9fc8b4" }, { "alg" : "SHA3-384", - "content" : "113bf691c2e686f7b92e4b8c9a4bc788d6c14e77eb448d59a2532c2a0cfa35bdb8f9a87b3a02cc72052f0b0d65fa1ac4" + "content" : "8b03cb2f7fd323ad12fe42836a91697c8a74689b3fc732c16353eab599f709c88ca68dc05e1a4464990990bdd14000f2" }, { "alg" : "SHA3-256", - "content" : "b1103a71a3a027ab5c74986541390192f9c3e9aacc6c05bf6500b653b3b2e387" + "content" : "118e266f4ab89f83ee60b405959cdfb3f114d3f2553d16d5e34cf8791f8164f5" }, { "alg" : "SHA3-512", - "content" : "b03a0a66d302c49312991dd472959472afe74e62fea2b0fe725e4c34dad295a4ac7b34e9e13bcd916141836a2e00dde967da90844a5f65dd7120da3318092130" + "content" : "9af3f6a7540ea1567edea928cd5a7cec4dbea9e0726f9a03de4a0dbeb8eb7e0764ac1db432a816dd2f3d182a0102c7c866fc82f79212650825253055680ba09a" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "https://www.gnu.org/licenses/lgpl.txt" + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], - "purl" : "pkg:maven/com.ibm/common@1.0.3-SNAPSHOT?type=jar", + "purl" : "pkg:maven/com.ibm/common@2.0.0-SNAPSHOT?type=jar", "externalReferences" : [ { "type" : "distribution-intake", - "url" : "https://eu.artifactory.swg-devops.com/artifactory/res-cryptoagility-team-maven-local" + "url" : "https://maven.pkg.github.com/cbomkit/sonar-cryptography" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.ibm/common@1.0.3-SNAPSHOT?type=jar" + "bom-ref" : "pkg:maven/com.ibm/common@2.0.0-SNAPSHOT?type=jar" }, { - "publisher" : "IBM", + "publisher" : "cbomkit", "group" : "com.ibm", "name" : "output", - "version" : "1.0.3-SNAPSHOT", + "version" : "2.0.0-SNAPSHOT", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "b27986fb1cf9f45dcf81b60215b308a6" + "content" : "b6eb9e7a1fd0343a3553986b06986b40" }, { "alg" : "SHA-1", - "content" : "3e712bc9ec7047b57b9ae148b8d5777939e6f9d0" + "content" : "43565f9073474581c103d10e78725f9a1d1653f4" }, { "alg" : "SHA-256", - "content" : "2b40ee3cb069d334e12975cbf18786d1ce45222b083b0113682f3a0120f3d727" + "content" : "8a9166ad957fcafc8da6eeb30a1e35f828e3d0db755992991fe778677062c0c5" }, { "alg" : "SHA-512", - "content" : "59c8384e84ce4586163114c552d51e6e629707b0d19741c3a3fcd02cf31bfe869cfdb41381382ceb6a058ae055bf398f64064183db6af975082a1faab56f3670" + "content" : "6d84d5b43d3e5ed1203bfba6b9d183678ea22898bf822326a598fcec3d24aaf5f59add68b9ac12bcf2a1fdc3181b5d1b433be16e2375d822061af892617d96a9" }, { "alg" : "SHA-384", - "content" : "ed38081f1133f6ccef7c59d167b9b123220edd330d5468cb9efa51f9cbd3aaf788b55314938260ba4d7a55acdf9b1c08" + "content" : "1e238e6a57e4c5171f8969b2f67ad27bc6368f73e40675aeaf54da38fa4060e2580302636b645b37c62dd267059883b9" }, { "alg" : "SHA3-384", - "content" : "f87d2e87088fb44d8efbcadc3f1e439623b3af7390df5a60e52d752a05131fa5f9ea295f362584c6956bdfb58a6c7392" + "content" : "96421d4fb4e8c9dfe8135d50e3930ecb6e3fd2f3c0c796cc8e8f156407bfc62b01a0c74966de91ff702a4dc5faf0930c" }, { "alg" : "SHA3-256", - "content" : "54f73feb09d9dd18b0893aa8b1275e03bda8fa537775506d86051ac2798005c6" + "content" : "5751f5452f415fedb2aa9c912c1cefa182afb93bcaba6672100948e17fd77354" }, { "alg" : "SHA3-512", - "content" : "91c117bc7b6bc4adeb55b86dfe6d1308ab5f718eb9ee56215c5e25398da0489fc42b796ea6b28f9a00624d6a6257208d0aaf20c38fbe99ff43d13d3088703d31" + "content" : "024f64264e3eb3460ded189c4fd595b72596aacadb174bd6f2e5f5fcc37cfc6d118ebb211ea2deb44d7a4d5d4e2857e72738b23905cfde2dbb0e16ca6a1858a7" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "https://www.gnu.org/licenses/lgpl.txt" + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], - "purl" : "pkg:maven/com.ibm/output@1.0.3-SNAPSHOT?type=jar", + "purl" : "pkg:maven/com.ibm/output@2.0.0-SNAPSHOT?type=jar", "externalReferences" : [ { "type" : "distribution-intake", - "url" : "https://eu.artifactory.swg-devops.com/artifactory/res-cryptoagility-team-maven-local" + "url" : "https://maven.pkg.github.com/cbomkit/sonar-cryptography" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.ibm/output@1.0.3-SNAPSHOT?type=jar" + "bom-ref" : "pkg:maven/com.ibm/output@2.0.0-SNAPSHOT?type=jar" }, { "publisher" : "OWASP Foundation", "group" : "org.cyclonedx", "name" : "cyclonedx-core-java", - "version" : "8.1.0-SNAPSHOT", + "version" : "11.0.1", "description" : "The CycloneDX core module provides a model representation of the BOM along with utilities to assist in creating, parsing, and validating BOMs.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "f15d85fa4d72d67dc40b0938e5a263b0" + "content" : "2939896ee374a5f6d45ca70157e58113" }, { "alg" : "SHA-1", - "content" : "89c94f4407141cc6216dc797eaa527b34e06eadf" + "content" : "c5e6a5bdd203c23063db37d5db69bfd5e037d5d2" }, { "alg" : "SHA-256", - "content" : "b186d0f488125cdc032616d0edff92c29bf9cda6dcbf556e5b24e858e1b6f1ee" + "content" : "989348cc6d385629a3ccb735d450b0f0f022167cb702c2fcb0e6f2bdd989dde7" }, { "alg" : "SHA-512", - "content" : "df89c78cde3e1db60c37877b607c0eab3489d825da5d5873c70e6d3592e73158684b76d5105ab93cfac8211b4bab4fff3e557e6cc700dc64698beb625f0ccf48" + "content" : "20a3fee94682c23a57c52bdd1678f877f1b8f2a8c3a2e2aa1ade2be5e74c70da1171aa2f08af40a5a9362eba94fbb52d8a824b3bf6b9591d765ecf6b3c43463c" }, { "alg" : "SHA-384", - "content" : "d51694f1fac1f99b703849b833d1c83f638c9b1a75cf5283ac4c9456bf624b2fcf829d2f4a5e037062b5b33056056e3c" + "content" : "d85aedd5d4e7f7ed6ee0093870e8fea36cd5fc21c825325e5240ea6773b072173429230f4dd12f5ac70146f39f4ff0fe" }, { "alg" : "SHA3-384", - "content" : "59de9d9679f6e05019952cc823fe03729a18d395653d8c7b2706b6d5052cdfa670c3b42a9a0aea5f831e889daea2b995" + "content" : "705238526713babce1ce21922a1d7229ef6e0106a3fe91395757b8fcd5955b83e6001679fa8eb38c0e8960238b1a6514" }, { "alg" : "SHA3-256", - "content" : "6c10f4f239f3e9827282b9e9acc81e1baba86c7ccea88f405470e197c8ec2dce" + "content" : "dbf916ece6434dd0b46d71ab060fc55c6fff2867ed89b5093d7aaf9514a2d2f1" }, { "alg" : "SHA3-512", - "content" : "0b7f570e648628beaae172d88e461aff57435dca352496f3b3537833edee3c217af8350c79ad701ff03655302def0567b3252965358e4929cc6e56ac179f32ee" + "content" : "5cc758b4c5049d792f97296a89009088332c1e2abc180e8f2251f49961a6d6d02b4a9bb4d4fffea0e91ef8cb4530b2f9a70cfd62bc334f47be2f667c2d8a9e0f" } ], "licenses" : [ @@ -309,7 +309,7 @@ } } ], - "purl" : "pkg:maven/org.cyclonedx/cyclonedx-core-java@8.1.0-SNAPSHOT?type=jar", + "purl" : "pkg:maven/org.cyclonedx/cyclonedx-core-java@11.0.1?type=jar", "externalReferences" : [ { "type" : "website", @@ -319,10 +319,6 @@ "type" : "build-system", "url" : "https://github.com/CycloneDX/cyclonedx-core-java/actions" }, - { - "type" : "distribution-intake", - "url" : "https://eu.artifactory.swg-devops.com/artifactory/res-cryptoagility-team-maven-local" - }, { "type" : "issue-tracker", "url" : "https://github.com/CycloneDX/cyclonedx-core-java/issues" @@ -333,57 +329,58 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/org.cyclonedx/cyclonedx-core-java@8.1.0-SNAPSHOT?type=jar" + "bom-ref" : "pkg:maven/org.cyclonedx/cyclonedx-core-java@11.0.1?type=jar" }, { "publisher" : "The Apache Software Foundation", "group" : "org.apache.commons", "name" : "commons-collections4", - "version" : "4.4", + "version" : "4.5.0", "description" : "The Apache Commons Collections package contains types that extend and augment the Java Collections Framework.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "4a37023740719b391f10030362c86be6" + "content" : "d564105594035b363b193d8ce3c18b98" }, { "alg" : "SHA-1", - "content" : "62ebe7544cb7164d87e0637a2a6a2bdc981395e8" + "content" : "e5cf89f0c6e132fc970bd9a465fdcb8dbe94f75a" }, { "alg" : "SHA-256", - "content" : "1df8b9430b5c8ed143d7815e403e33ef5371b2400aadbe9bda0883762e0846d1" + "content" : "00f93263c267be201b8ae521b44a7137271b16688435340bf629db1bac0a5845" }, { "alg" : "SHA-512", - "content" : "5939c9931eb9557caee3b45fe1dd9ce54cabdc4e6182ed7faac77e1a866dd0cb602bfa4ece2f3316d769913366106bd2b61bf3bb5faad1fa7d808124c06dec0f" + "content" : "ee43c513ac9dcbd7dd23b5cbb4ea5f65a2e10cdfbb403d080b87e778b3b45062315522297c41eca514a9a946228ad7650f0a572d5b78effb8260dd8084131988" }, { "alg" : "SHA-384", - "content" : "74059fd8f61c366ed448e102256fdbd1db0d690501c2c296c80f3657a2c0d8ade3dd9533b1431cc29786bbb624195f46" + "content" : "73db8eb3e79569b3fa62aefdce413e6ea250b9853953cb75b9d5ce0f2f35b59b6e86ef708326a608ff20d95bdade8522" }, { "alg" : "SHA3-384", - "content" : "15034fb39842620bf3b152cd90bce252644ebc6a29fafd6dcf5e1f3925f09ccea2ae4e195817450f996b25a7081a9a3f" + "content" : "7a9c035fa846cdcebd4331eb86ed31a67595518299a8bee54597c1eb663aee63214553a561a510b929035266c2a4800b" }, { "alg" : "SHA3-256", - "content" : "1716630a207a8f4a83bf9ef19245f46c87d62bfebbcfa1227101e6dd51da8fa5" + "content" : "614c41bfd8f9c6c1c1e5667c5be45587c3021b780937ad62f54d17051f425086" }, { "alg" : "SHA3-512", - "content" : "c290c98c7b5825d024644ec1162804a1f9ad4da3bb5324d147ddffee6cc79e3c0ecc3825d6116502f2ca292ec80c4e7f8d49a03542dda8f4d58b0dc8228923c5" + "content" : "3cfd12ec2d03ed29b682123cedae422a4c6dc459034a7e0ab5f00ccd422cb9a2ec423a08b953119c426569b888157a6d80aa0e0c63debea50c5c54c481e2eff5" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0" + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], - "purl" : "pkg:maven/org.apache.commons/commons-collections4@4.4?type=jar", + "purl" : "pkg:maven/org.apache.commons/commons-collections4@4.5.0?type=jar", "externalReferences" : [ { "type" : "website", @@ -391,7 +388,7 @@ }, { "type" : "build-system", - "url" : "https://builds.apache.org/" + "url" : "https://github.com/apache/commons-parent/actions" }, { "type" : "distribution-intake", @@ -399,7 +396,7 @@ }, { "type" : "issue-tracker", - "url" : "http://issues.apache.org/jira/browse/COLLECTIONS" + "url" : "https://issues.apache.org/jira/browse/COLLECTIONS" }, { "type" : "mailing-list", @@ -407,11 +404,11 @@ }, { "type" : "vcs", - "url" : "https://git-wip-us.apache.org/repos/asf?p=commons-collections.git" + "url" : "https://gitbox.apache.org/repos/asf?p=commons-collections.git" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.apache.commons/commons-collections4@4.4?type=jar" + "bom-ref" : "pkg:maven/org.apache.commons/commons-collections4@4.5.0?type=jar" }, { "group" : "com.github.package-url", @@ -491,41 +488,41 @@ "publisher" : "FasterXML", "group" : "com.fasterxml.jackson.dataformat", "name" : "jackson-dataformat-xml", - "version" : "2.16.1", - "description" : "Data format extension for Jackson to offer alternative support for serializing POJOs as XML and deserializing XML as pojos.", + "version" : "2.20.1", + "description" : "Data format extension for Jackson to offer alternative support for serializing POJOs as XML and deserializing XML as POJOs.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "ab3c4a4dcd1928d05f206c5d0e9fe36f" + "content" : "55a13effaac5ed19e8393cba5e05f195" }, { "alg" : "SHA-1", - "content" : "d952ad30d3f2d1220f39db175618414b56d14638" + "content" : "3a8e1f06f8bdfd9f2c29f1b2bdad970b02dff4c9" }, { "alg" : "SHA-256", - "content" : "b8e73fa171d1276832abbf20ebb4df597e377405f875ed39808cee9acca3d3ac" + "content" : "190ad4eba35d89dba3517da279e0690681c4745174b94b09ea78f81ceae140f0" }, { "alg" : "SHA-512", - "content" : "018a6e2d0ba7a102331015ec2d471d4565a7eb6d9ce4f339e7cf9f8919c4eb556617b3fa4de703cb7cc438997c7d35b77d100844b14dc1f797292937455c073a" + "content" : "a4383994ae40d74e70d3966fab9ad8412e1a40709ab58f34311f8056a7d8620545302015c0aa9c74c3aa8844f7f2248494979c5387c016107bcc46917bf71b75" }, { "alg" : "SHA-384", - "content" : "c6866f8dbf98a9586382dfe2a83a3640183ec8b9e2469e658f89b7f6c8ac236612994493fdcdaf4ef3b3c7df5dfc5315" + "content" : "606497cf60a7bfbc27e3fcb528b577046f15a0b4efae68b105800bcf11d8c29114aa151776e26a924908449fca682dde" }, { "alg" : "SHA3-384", - "content" : "4a685f29dd132abc7fad2732f6e6c82378cb23b7a8ce24d2c8b02dfbec05014c27d03ab5c573d893602e9be855bf0685" + "content" : "9afd1c3a77fb44529532607ced0b727d25c6493dac7ed450c922813542a0f8cbf8d2921f2b0ff82d5f486512f850dba5" }, { "alg" : "SHA3-256", - "content" : "26f157c5ea198ea4cd0ab454266b6e35577e29c3f8da79513f06d63a9e0e780d" + "content" : "4cbb817483e92d68904c169fa4a48d9479dc2be64a52ed6c72ff01d547d14acc" }, { "alg" : "SHA3-512", - "content" : "48bd2550e2f66c55c320faa91c12fbc001ee395362706096a2d6afbdc9b5e5857e87365349196c5bce7b3ceb3c831d4c328ab058b54e0e597388e7af828fb6cd" + "content" : "c430e0d54fc913c28c199f0d6f935196cdac069c3abcc8cc66fa8ced61dd50c3d3ebf2c2a15d9c4c3e399d7a6184e94e2bb4874e61822d02e9d874b101df84d2" } ], "licenses" : [ @@ -535,7 +532,7 @@ } } ], - "purl" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.16.1?type=jar", + "purl" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.20.1?type=jar", "externalReferences" : [ { "type" : "website", @@ -543,7 +540,7 @@ }, { "type" : "distribution-intake", - "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" + "url" : "https://central.sonatype.com/api/v1/publisher" }, { "type" : "issue-tracker", @@ -555,47 +552,47 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.16.1?type=jar" + "bom-ref" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.20.1?type=jar" }, { "publisher" : "FasterXML", "group" : "com.fasterxml.jackson.core", "name" : "jackson-core", - "version" : "2.16.1", + "version" : "2.20.1", "description" : "Core Jackson processing abstractions (aka Streaming API), implementation for JSON", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "0f51c6a7d713aed6e044cf1692bb59f4" + "content" : "889b2c417b61c9f4f460b06957147234" }, { "alg" : "SHA-1", - "content" : "9456bb3cdd0f79f91a5f730a1b1bb041a380c91f" + "content" : "5734323adfece72111769b0ae38a6cf803e3d178" }, { "alg" : "SHA-256", - "content" : "f5f8ef90609e64fec82eb908e497dc7d81b2eb983fe509b870292a193cde4dfb" + "content" : "ffab4d957daa2796cf24cb66d0b78a7090f1bcbe17c3a4578f09affaaf137089" }, { "alg" : "SHA-512", - "content" : "1f1551b0512a0ac3fc883db62472901c91051586616804daec24268ceaed409faaa1f1695df2f6220fa389aeb54802eb51dec439322bc7383507b45c08cbe17b" + "content" : "0463e1c2e1d8e8cfa4954dfce491583f0ec9ec1de6e6f342d1e5f0c63dcfb959673552a279ec4e6b6cc69e6ac2de6d42dd512149ceb76620b5d780db7325e6a7" }, { "alg" : "SHA-384", - "content" : "24b8435650ceba20008563d8bb9db4a8aca74d7ffa33e95efc6ac576d71f39d5ab228c133b413c6c852c34d905a249cf" + "content" : "a279b2d57d019a05f65762ce670ce23e02466b11276d8c0687f3bb5ed40a8a1854bfe6dd2dc157d0f5695186f7d9a65a" }, { "alg" : "SHA3-384", - "content" : "f15db08b5d9ff6b475507afeb587a30bf6fe050d216cadf1bcd9fccaac0a59fd6bb1e8533ee8a48bb6075801b6f617ce" + "content" : "06b9f33e030a99fa95d171118ab668bee42e32b35b85e05750f8514128dbadc94026afde16dbadc0ff786027b09712a4" }, { "alg" : "SHA3-256", - "content" : "5fc0bd6adc8b1f3e96b835acc703cb1a4a977deb1f44d0b9314ea25b83c2f36f" + "content" : "3e83a1a349d8ba3a4e76ee983f04b259a85263dda5090f55aae5535109c4b6c0" }, { "alg" : "SHA3-512", - "content" : "7273a7e983ef1e9c7195aa36dba2d0b7b35600f844f61a54c1a80e4590c987257411f8e17a2fb9252849fd8c5ab9fb40f14ae288159a0e98c337020fb8679a1d" + "content" : "87b3a61a71a625adfc6b9b402079c26b223e19535ca5af07e4130932d479f9c22e90696911050d8ab8a09a6209651fe2f25f54d7d9a1493b6dab6f8acb76203d" } ], "licenses" : [ @@ -605,7 +602,7 @@ } } ], - "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.16.1?type=jar", + "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.1?type=jar", "externalReferences" : [ { "type" : "website", @@ -613,7 +610,7 @@ }, { "type" : "distribution-intake", - "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" + "url" : "https://central.sonatype.com/api/v1/publisher" }, { "type" : "issue-tracker", @@ -625,47 +622,47 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.16.1?type=jar" + "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.1?type=jar" }, { "publisher" : "FasterXML", "group" : "com.fasterxml.jackson.core", "name" : "jackson-annotations", - "version" : "2.16.1", + "version" : "2.20", "description" : "Core annotations used for value types, used by Jackson data binding package.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "1c1e081b6b61ee1f1cb0ef52eef45d61" + "content" : "b901def3c20752817f27130e4b8d6640" }, { "alg" : "SHA-1", - "content" : "fd441d574a71e7d10a4f73de6609f881d8cdfeec" + "content" : "6a5e7291ea3f2b590a7ce400adb7b3aea4d7e12c" }, { "alg" : "SHA-256", - "content" : "a4730771e6a495dd3793a42cdb8ce6bddb96c77e15f40c98fd8d9a7ae09e7286" + "content" : "959a2ffb2d591436f51f183c6a521fc89347912f711bf0cae008cdf045d95319" }, { "alg" : "SHA-512", - "content" : "2e268340c11ff606df14cc963e5a4c97b22c69dbe09b9ee96873b6553aa97ba703f94dd85cc05704a35c4ae1651fc37d23d87e94bbad39f2a3a63fc2b3f754b1" + "content" : "8926d89bfe7f427c7793f6af619249540f23f82eae055dd03d4cb163ff603a43dd6a3ebe43528d00789aed3df0dd2f10e08552fdec53e2691849b9769f57f0c9" }, { "alg" : "SHA-384", - "content" : "27d294ee2a7519f851bd9da37eefd432b13e2ba2ee94e5bcc8587d8d251c8d00537fe583912681f5d43fc92f29dc23ac" + "content" : "40ee4c1438a5a190624dff9deca83377f7e60690b4535359b2a79924f736bff7c8d077e5b01c6c8972735dc152f2ccf4" }, { "alg" : "SHA3-384", - "content" : "f80ca2f1d7b49ca06c999f287249874979295312ad61fae7dba101a084825c2f7200b0a252c67e36b8f185cb5b70b490" + "content" : "0fc0f697d03692b63c2b11fcabac51c630278ed6df15420975263ea4ad19418b3b71b7889497ed20a150035f9bcba79d" }, { "alg" : "SHA3-256", - "content" : "28db760c602a501079b88e94eb4cea2e59895a688e6ea66e447b51adac113e0a" + "content" : "6bf49e384735969af020f758b255ceed26af92d4cf456f6e7b83e8de53289f93" }, { "alg" : "SHA3-512", - "content" : "acc6d03c8674438bac5e2b09e1615b11d202c12aa720e9205d820543cc2762f9a3497bf9de9f8239844db23ccf0b52cbd3255aff422c03de490c60ce2c4787ee" + "content" : "3372f6c456a7f6a33ebc3ecc65daaf36288be2a14b1f2cb9fcd7387c07acab1c69ae803a366e5d12adf4934970ffd2e34017917c5f16a6d563bc94810f228ab3" } ], "licenses" : [ @@ -675,7 +672,7 @@ } } ], - "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.16.1?type=jar", + "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.20?type=jar", "externalReferences" : [ { "type" : "website", @@ -683,7 +680,7 @@ }, { "type" : "distribution-intake", - "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" + "url" : "https://central.sonatype.com/api/v1/publisher" }, { "type" : "issue-tracker", @@ -695,116 +692,46 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.16.1?type=jar" - }, - { - "publisher" : "FasterXML", - "group" : "com.fasterxml.jackson.core", - "name" : "jackson-databind", - "version" : "2.16.1", - "description" : "General data-binding functionality for Jackson: works on core streaming API", - "scope" : "required", - "hashes" : [ - { - "alg" : "MD5", - "content" : "ac71b868569d329136f2c63f34dd2c89" - }, - { - "alg" : "SHA-1", - "content" : "02a16efeb840c45af1e2f31753dfe76795278b73" - }, - { - "alg" : "SHA-256", - "content" : "baf8a8ebee8f45ef68cdd5e2dd3923b3e296c0937b96ec0b4806aa3a31bccd1d" - }, - { - "alg" : "SHA-512", - "content" : "e826126759ef714b35c546a524d0fc82e8ae38ad19d0502a58d360926aef3d13492092372302fcea19e78b24432838a40023ebf5dfae4e8c566478c4833ea998" - }, - { - "alg" : "SHA-384", - "content" : "6e46bf61e034085444b1a708fbb6926ddd46ccaa75c20c9765c1a98c266449169d7a28e6197224f46cc4c15201187ab6" - }, - { - "alg" : "SHA3-384", - "content" : "649d02e2265bc92d75876b31006f1cb2fe33788da8edb06ebc5b798e964ba7a8d6b96d21053b01e5fe3cf27a63a8b66c" - }, - { - "alg" : "SHA3-256", - "content" : "d58b494fb40bb93c799c315293daf81fb6d0bf418d38b912aab1c37b4de1db77" - }, - { - "alg" : "SHA3-512", - "content" : "c3950b04417dee7450b36f3428005a2f118c8ce0388f2c2470f5543cac3106215b6b591848775176892951f2ea7a608c7d02280067d5cfae1634e0f3e306e628" - } - ], - "licenses" : [ - { - "license" : { - "id" : "Apache-2.0" - } - } - ], - "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.16.1?type=jar", - "externalReferences" : [ - { - "type" : "website", - "url" : "https://github.com/FasterXML/jackson" - }, - { - "type" : "distribution-intake", - "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" - }, - { - "type" : "issue-tracker", - "url" : "https://github.com/FasterXML/jackson-databind/issues" - }, - { - "type" : "vcs", - "url" : "https://github.com/FasterXML/jackson-databind" - } - ], - "type" : "library", - "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.16.1?type=jar" + "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.20?type=jar" }, { "group" : "com.networknt", "name" : "json-schema-validator", - "version" : "1.0.87", + "version" : "1.5.9", "description" : "A json schema validator that supports draft v4, v6, v7, v2019-09 and v2020-12", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "f0d3df7d661e41708e264ea82bd0ad4a" + "content" : "84622292ac5001bac8f16dc5002a8b94" }, { "alg" : "SHA-1", - "content" : "59861a488ba2b977ef444c03e3c8c8c9f96c0734" + "content" : "6a2f9fe324b9dc8d8e0c3d7b435f7ae99595a556" }, { "alg" : "SHA-256", - "content" : "d2c00a6c4515a4adecbec813c4b994b720782207258d49cb537478edec1ada89" + "content" : "e0b8baeb78fd1ba027454ee3974d8a02f54447eaa510d3052820a7d2160d9ae4" }, { "alg" : "SHA-512", - "content" : "ca1419376baf5bfd13163e7787085134c46b196eb6fbb19099eedb56d153b37dc7b709d7e771088421c567c45066d209f37e5782706f798a228e7e4f21b7c522" + "content" : "5ba210c135717a6ed043e0889d96f6381b3668f9e2a011bd0def8138ad327813f792259858ae5ed192cb8ec0645308113769aa8ebee903db1ccd82e98cb3009d" }, { "alg" : "SHA-384", - "content" : "e454ab9b970e4cb4b2f6f595495e0ad43d455b7fb10d474607f19fdef4569acc08a4f935625451d118e0496682ff33a4" + "content" : "21a4f4fb586959241ce92ad788cb4326d62232aafcddf6953ef7769efa5c6936487ffea51693ff44206f4d66c83ee753" }, { "alg" : "SHA3-384", - "content" : "ae83744bb3d0cc751059cd8fda72df351cd5127187a16c3c99ea679c3433f240f90c13de4e2c5c11206d325375e48c59" + "content" : "36bb0b96a34254780e991440e879c1f44a0a62362e115a5c761df0ec1c8f2a9f64a7421ea3cb50a589ae501619fd3942" }, { "alg" : "SHA3-256", - "content" : "34685e96c0c011463bb57551b03f66b522eedf3d306e7181b5823a2036e87964" + "content" : "c97a2638d46c235056bacfe90d8e0b88a823a5622e88b608a31f481f3adb9ccf" }, { "alg" : "SHA3-512", - "content" : "764183cf1e2de9fbe52d6f228957015ab7cc0f051aa3a289ecaed9b0c37093d791786f55bb141083beff08cd78aad282fec4e9d8e470cbde3ad18ad3ec7d6383" + "content" : "08b256bb3ac49102d87c0e635d025699154bfa7785916d591173af6ec14dfde885e34500a7bd13159a00a7fe78dc859aefa9dc930d0719a64ea08209ccffb20a" } ], "licenses" : [ @@ -814,7 +741,7 @@ } } ], - "purl" : "pkg:maven/com.networknt/json-schema-validator@1.0.87?type=jar", + "purl" : "pkg:maven/com.networknt/json-schema-validator@1.5.9?type=jar", "externalReferences" : [ { "type" : "website", @@ -822,7 +749,7 @@ }, { "type" : "distribution-intake", - "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" + "url" : "https://central.sonatype.com/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", @@ -830,50 +757,50 @@ }, { "type" : "vcs", - "url" : "https://github.com:networknt/json-schema-validator.git" + "url" : "https://github.com/networknt/json-schema-validator.git" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.networknt/json-schema-validator@1.0.87?type=jar" + "bom-ref" : "pkg:maven/com.networknt/json-schema-validator@1.5.9?type=jar" }, { "group" : "com.ethlo.time", "name" : "itu", - "version" : "1.7.0", - "description" : "Extremely fast date/time parser and formatter - RFC 3339 (ISO 8601 profile) and W3C format", + "version" : "1.14.0", + "description" : "Extremely fast date-time parser and formatter - RFC 3339 (ISO 8601 profile) and W3C format", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "4f9277e3108caa3314836d8f20f9cf94" + "content" : "e537d0a2bc8066726f7e4654c253cf84" }, { "alg" : "SHA-1", - "content" : "00c6977b9d42efa3f8c95c31db5313a96ffc1724" + "content" : "c0f9f9d4f4404787e992ab3af5ae95f2fad79e47" }, { "alg" : "SHA-256", - "content" : "55ceb418c9e8138c4fcf62e213c4c814d89e8a84c827d395407cbecba5d791e7" + "content" : "5cf40ab0cc77828ab2b875b1f3ecd71c8295d7721933476abc2e08fddcea164a" }, { "alg" : "SHA-512", - "content" : "b29808a998e120d6fa97a19ea92402e57d06b92ddb98b892ae7c9de044b9e1d805dca2f7c0fe7faaa1fced7eecbda927d709113727a050972f24a75aa29525b8" + "content" : "aa69a6af3a7123eb41425bbaf6834e16dc3323172709e2338b8a21b970fd21333d996515f42da4aa0225251e30542ad7d9c8332bdf7d62ed96b42fadc8a1520d" }, { "alg" : "SHA-384", - "content" : "f63cbcc14966028fc81feec87bb5f948e0acc0a1683e9147eafe71c98cf3bb38d871bdccfdf70d94c985e1727b00ae7a" + "content" : "8d201334c39b68d13d66fc9df2440fa848b055a9b901e1c630ff66a47e70c8816484d106ae18c642d4257034f33e55f2" }, { "alg" : "SHA3-384", - "content" : "f95deb0a7c863dfc3e595a1398beecfd4baa7c3b5c8f43c3324e374de58d8e13891b32cb62d67d0e44df384fa320246e" + "content" : "033715e1422cb3f22c1073bc7b058fd16d1436c6314f49f13480d81c86b656cb77a4d852cbba35542bc8f2ce49244ba6" }, { "alg" : "SHA3-256", - "content" : "37b170afbaa74ad33e4dfb402aae14a2a026fbde83cbad0e61aee65b5a01f55d" + "content" : "f18d275dd2a0038a82432e06bb9f396151310136e3a316a869ef54d7fae834c5" }, { "alg" : "SHA3-512", - "content" : "f87bbab20f0ffd19ad27225b623b44cfa693fc83b27eb828acf0beeda846a13a9139a11e32d59cf81aa93da08af02335dddf59b2afc5a36900478a04c09c6218" + "content" : "8a51b3c6144eb2e363f8804da316d9e3dc246be07af4c0bb55e9540c2a0deb5eb9beb825120d3d203e3a561fd8a605ad64f3af5d233725e1b9c7e06232deaea9" } ], "licenses" : [ @@ -883,7 +810,7 @@ } } ], - "purl" : "pkg:maven/com.ethlo.time/itu@1.7.0?type=jar", + "purl" : "pkg:maven/com.ethlo.time/itu@1.14.0?type=jar", "externalReferences" : [ { "type" : "website", @@ -895,51 +822,51 @@ }, { "type" : "vcs", - "url" : "https://github.com:ethlo/itu" + "url" : "https://github.com/ethlo/itu" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.ethlo.time/itu@1.7.0?type=jar" + "bom-ref" : "pkg:maven/com.ethlo.time/itu@1.14.0?type=jar" }, { "publisher" : "FasterXML", "group" : "com.fasterxml.jackson.dataformat", "name" : "jackson-dataformat-yaml", - "version" : "2.15.2", + "version" : "2.18.3", "description" : "Support for reading and writing YAML-encoded data via Jackson abstractions.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "8b854304b3f56fcb85f9815f420b13fc" + "content" : "96671888dd42efee72d555b537558977" }, { "alg" : "SHA-1", - "content" : "58194ff9f51915ad6bf6b6f24818232d7566418a" + "content" : "66658356a375664262c227dad09adc51dbc09c54" }, { "alg" : "SHA-256", - "content" : "37795cc1e8cb94b18d860dc3abd2e593617ce402149ae45aa89ed8bfb881c851" + "content" : "3ca00e47cfcb43e79438ddcfc8fc735e9ebac3824fb7769138609be6bd56e483" }, { "alg" : "SHA-512", - "content" : "0e7e444bb04159967945a131e15131304e667370ba118d4d9d300ad10ab68c85f250bc7ce31d46bc72ef381f99f7f6352fd866debf700e85995063cbd6bcb728" + "content" : "a4696ab6e7161a5aa913ca0d22ff99aae12828104df3169753cb60ed69a8ed29c776c4beb1c938caad57344ef649572b0ef21fa45f3e58b3321b25b5d073939a" }, { "alg" : "SHA-384", - "content" : "ebd84ccc50f2986468a62028fcaaae53520ba5eb64f008bd086b10e4ffb1ca33af8a4aded7572e09a6eb9419da36485a" + "content" : "064eddddc868cac85768a2149fc291d35e429737c223f7b6495c28b3872ccc7101eb21672f6b2d0637777fe42050efd1" }, { "alg" : "SHA3-384", - "content" : "3881fbd843d0351c51ccd33f4c85a4c8f2949165c19e4ff44caa3ca7418505366af75c1f73711d85f666d7095f18939c" + "content" : "c817c948326114e676267e97cb87f9eea44f8042f03cc32c02299097683d5d12f538a337f716a6f1fed2e41ef33cdc5f" }, { "alg" : "SHA3-256", - "content" : "e9e2e7b894cf982c5bc43a490bd784cf01a8c4123a5b1f2a0b73133104bdfff3" + "content" : "b13168ea825b0f2c3b7084b34263e051e6cb2ce36faccb4f4661370746100af9" }, { "alg" : "SHA3-512", - "content" : "9154b0c38ef860cd89bc2338afb85d26f225aac039fb284c29ac034cd27fb34074044400264058153184ecbff214d2611b7647ae06defa9611766c893e7a857c" + "content" : "84a42a102dbc9761fa2c4e5ebe85deb1b5d475bc4f2b3e7d025edaa4e331c87460904d0707673eca186c705c72762bf38364dc1f21f958f76f0518ea4e7d38a4" } ], "licenses" : [ @@ -949,7 +876,7 @@ } } ], - "purl" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.15.2?type=jar", + "purl" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.18.3?type=jar", "externalReferences" : [ { "type" : "website", @@ -969,46 +896,46 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.15.2?type=jar" + "bom-ref" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.18.3?type=jar" }, { "group" : "org.yaml", "name" : "snakeyaml", - "version" : "2.0", + "version" : "2.3", "description" : "YAML 1.1 parser and emitter for Java", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "caf24b81b9d57e6d4f68b1ccd36e00a3" + "content" : "2a1c2ee8923dcd6bd6d025751af5df37" }, { "alg" : "SHA-1", - "content" : "3aab2116756442bf0d4cd1c089b24d34c3baa253" + "content" : "936b36210e27320f920536f695cf1af210c44586" }, { "alg" : "SHA-256", - "content" : "880c9d896e4b74a06c549c15ca496450165d6909fa15d7e662bee8f6a66d7afa" + "content" : "63a76fe66b652360bd4c2c107e6f0258daa7d4bb492008ba8c26fcd230ff9146" }, { "alg" : "SHA-512", - "content" : "93567558444365c436027bd1064b67ae99abde77fa89b33ac7c586ab83e4dbf02b7610669fd00ccd258bca6ba3fa078954c92d918b989317dce7bf9ce18836b8" + "content" : "1c9c78f0d102ae49a7c06f9e20c6a79a4fb9a2af962230ee6e136bda0caf10dcbb9deadc1c3ab15f74a4982ec8f8266217115e357329fde5b3f4f1858882de0c" }, { "alg" : "SHA-384", - "content" : "63c0ec40f4e3f24786031fb8a9477071c86e69247dce283ff725e328e26fba7bdfbb0ab52027b9b0988b3978703a95fe" + "content" : "77b1d06e83fd51b83b13372d5ef2eb43c5a66f193db857cee947ae4e900e4a4a0c66a8074435984b9a0b007a69cc2b4f" }, { "alg" : "SHA3-384", - "content" : "fedd091de2b63c38fb04cb8e2d657bc7b37193ef065b18058be892d6b816d7cb68e5445819c3f3f8fca116311adc9760" + "content" : "550c4e7a119fd690f750317dc0e20ad7bfc7fa28fa0409fc572bc745d51340a60e9e2ce2af97f458daa561155130bb97" }, { "alg" : "SHA3-256", - "content" : "66264c5c5f4703942a959310c14f22df9c2b1c304ddca1d1c211da58af5623f4" + "content" : "d1b540ee39c34ab1484be27d2dd56a14aa48f88668905f9ad176932f4b2cd5d6" }, { "alg" : "SHA3-512", - "content" : "0c4c5807880025a22791114253443d2166218760d63b80cd72eb3fdd71a19fdadb27d392b47de9c6b7ca2a2dc312273f0b8c97012ff277d2cab0fd06f3902573" + "content" : "879ccb34343ebd4ac4888091d97f393c5f75cbb066cf8cf1b9b3eb03a3442cb17326c60bd0db1403aa66ed1f0a5a0d548c96dbce74ebc5c3d6d93950f24b417f" } ], "licenses" : [ @@ -1018,7 +945,7 @@ } } ], - "purl" : "pkg:maven/org.yaml/snakeyaml@2.0?type=jar", + "purl" : "pkg:maven/org.yaml/snakeyaml@2.3?type=jar", "externalReferences" : [ { "type" : "website", @@ -1038,230 +965,238 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/org.yaml/snakeyaml@2.0?type=jar" + "bom-ref" : "pkg:maven/org.yaml/snakeyaml@2.3?type=jar" }, { - "publisher" : "QOS.ch", - "group" : "org.slf4j", - "name" : "slf4j-api", - "version" : "2.0.7", - "description" : "The slf4j API", + "publisher" : "cbomkit", + "group" : "com.ibm", + "name" : "mapper", + "version" : "2.0.0-SNAPSHOT", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "403dffa46cdd2e3c82da19df4f394a4c" + "content" : "8266e2e8bdbc19492b73a641829b77f7" }, { "alg" : "SHA-1", - "content" : "41eb7184ea9d556f23e18b5cb99cad1f8581fc00" + "content" : "0a577009d07ae2dd201dd12db7de534a95132822" }, { "alg" : "SHA-256", - "content" : "5d6298b93a1905c32cda6478808ac14c2d4a47e91535e53c41f7feeb85d946f4" + "content" : "309909b57fdefcf60f7a775579f13961f2bf5b0993c4ca0bfb45849d1c1d3e4e" }, { "alg" : "SHA-512", - "content" : "216d2cac27d501972c888f94dfa747d700b80d60813884b6ab4b12c6a3b17ed0c21a1d27e1aa4332c97c828f20039e3913d2763d7e1a3cef36ae4389a276e7a8" + "content" : "be39a43306537c59940b629f953bbe60d6dc4f86ed05d4e3f85a0a00a6176f87d4035335bc376f7dcf4edccd9f7721ea885c00936d6ed15ff3bd263b6afbeeb0" }, { "alg" : "SHA-384", - "content" : "c25b39f418aa726ba8405dfd9b356131f89984e2ef5a55a724a2abf3b7c78443f671105835161d2414d602cf03da9f2d" + "content" : "f568108df2411dae89b7bb0a420f7c1947d732ce7892d497d3d99d5eda151d87bf68a142e575d19b561914fac4d85a75" }, { "alg" : "SHA3-384", - "content" : "f33abfaac21badae6f85d3ebbc6c1204fd7fda3bb15173e763fa8cee95bce6a8270eec2c8f49343c66c8d2767bc317e1" + "content" : "f9ed8e4a5c42c2eaaa4af32f36589139571237a4aa85b5353f5c8ff1bfcf90f2d227e77e4ccb1716bb85e9a9b9a5ad7a" }, { "alg" : "SHA3-256", - "content" : "6e00d4b264a2afc4ca4e98f716ecece66c32c626ca3f8c5d56b22092b6fe417b" + "content" : "5d5aae940db911e26128b08abd03d0db1071c821345d019ba9c144aa45cb9f8d" }, { "alg" : "SHA3-512", - "content" : "ad7b9142d370fc532a07cdd43881a129b012ff50e2bede3ac27d9bd31ec707bf2f45e82002fa59e962955cc38ab73cdd77713fca50cedc926c046f5617c1285b" + "content" : "34e93b78ae899aca9010cd2bed9ea1db4d479ef92715d92a245910f57be8f74b299f25f593ff216d0f484a068007846006bc0a7ad5d22e8485f0b4a7aff1e297" } ], "licenses" : [ { "license" : { - "id" : "MIT", - "url" : "https://opensource.org/licenses/MIT" + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], - "purl" : "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar", + "purl" : "pkg:maven/com.ibm/mapper@2.0.0-SNAPSHOT?type=jar", "externalReferences" : [ - { - "type" : "website", - "url" : "http://www.slf4j.org" - }, { "type" : "distribution-intake", - "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" - }, - { - "type" : "vcs", - "url" : "https://github.com/qos-ch/slf4j/slf4j-api" + "url" : "https://maven.pkg.github.com/cbomkit/sonar-cryptography" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar" + "bom-ref" : "pkg:maven/com.ibm/mapper@2.0.0-SNAPSHOT?type=jar" }, { - "publisher" : "IBM", + "publisher" : "cbomkit", "group" : "com.ibm", - "name" : "mapper", - "version" : "1.0.3-SNAPSHOT", + "name" : "enricher", + "version" : "2.0.0-SNAPSHOT", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "f77ba78b00e389feb00739f8f39381f5" + "content" : "00d7c2f7423fee908b8cb27765971611" }, { "alg" : "SHA-1", - "content" : "3527ba5c2addbdbe28ceabafc99fb63ed1f19598" + "content" : "a48f16b888963909ff9cdbf6e084e243e5976940" }, { "alg" : "SHA-256", - "content" : "c18a94c325cc96ea9e1abdd8d7ff1f030f0d414e14d19978ba4e97f3851dbfd5" + "content" : "5cbada4504b461582342ef5902100d0bebca490211ab89abf0807f83e6cbd4b8" }, { "alg" : "SHA-512", - "content" : "a3db5622d4a4e3ad7db2567fb8caa8d7c77ec8cc6a5a0108041964e8400801757bc8a5760798299f224ec6dad2e8c3e460f25224d3c7854768fefaa82bb41c55" + "content" : "f44202d96665f6068ae2af5e2cd135c156fc28a5ce7e5c923c1b03874c78a1d00377cea8810dabf95baca38bfc1335083a781e5d0de726d5589a65c95689efa2" }, { "alg" : "SHA-384", - "content" : "8b74ab21024e508b4c00a57fdce5aa0e61567ea3712185f6dffb3662f7bb8319bb878e0f004ae712d98d0d766a43ae63" + "content" : "8adf77fe24333492e4e498c7be9ef91bbb8b94b5cccb1e93bbb4f566dbd68953ce3149fcc2509870880f7420c5419e56" }, { "alg" : "SHA3-384", - "content" : "ec4e1425c94578e1e96fd1c2b10baa47ba6f1cffaa7a569d3f4c50ca18dc433492c5641cdd379c89a4b41361f1eda6a9" + "content" : "923d1aa53e1e323d598da22783ca93356793cfb830cd8b99c0ed603f810bea68a3ad5629daa98cf4af9f8099bc158859" }, { "alg" : "SHA3-256", - "content" : "b8dd34534aeef2ca45902fa7e047c7965db3d82cd8cbb31fe87c71911d3b2957" + "content" : "33118761988bae85c1a08aafcb4dafba126f3d894f528c7d706185d2556492ff" }, { "alg" : "SHA3-512", - "content" : "676519218fc4c944296be985e14098e41ea69bb84e3ee92ac62315810301fa7cfb48d6036789ea2aae727e84811183646e5cb98b95c312a3a50b86b9e7c1fbc3" + "content" : "b087c3b1d8f38c865f27269519b117fc7b7d74b4154a36a62e076231db260fe36e270cec272a74c1591ee6336ac4cc7d26504f9bfaa7d12b0c0546c648594ecd" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "https://www.gnu.org/licenses/lgpl.txt" + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], - "purl" : "pkg:maven/com.ibm/mapper@1.0.3-SNAPSHOT?type=jar", + "purl" : "pkg:maven/com.ibm/enricher@2.0.0-SNAPSHOT?type=jar", "externalReferences" : [ { "type" : "distribution-intake", - "url" : "https://eu.artifactory.swg-devops.com/artifactory/res-cryptoagility-team-maven-local" + "url" : "https://maven.pkg.github.com/cbomkit/sonar-cryptography" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.ibm/mapper@1.0.3-SNAPSHOT?type=jar" + "bom-ref" : "pkg:maven/com.ibm/enricher@2.0.0-SNAPSHOT?type=jar" }, { - "publisher" : "IBM", - "group" : "com.ibm", - "name" : "enricher", - "version" : "1.0.3-SNAPSHOT", + "publisher" : "SonarSource", + "group" : "org.sonarsource.python", + "name" : "python-frontend", + "version" : "5.16.0.29940", + "description" : "Parent pom of SonarSource public projects", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "ab149929b86067137d9b3e6088980242" + "content" : "af8fb4754bb34b00450e1886e6e35f24" }, { "alg" : "SHA-1", - "content" : "1c46d73df827918655d53e22810abba87d2abead" + "content" : "3d29bbb908e0740432fd9e29f6f9fef3b61fa8bf" }, { "alg" : "SHA-256", - "content" : "1bdc36f18bf268014c86f3b723aa54fe3d6bfcca6e5e1cf5b0a5e8d8cac9df9c" + "content" : "2bf0a615cb8804200e9de8c3b407b6a928a16b34349f43c76bf9f6c548e8000c" }, { "alg" : "SHA-512", - "content" : "39061a336b260906ba1464db8c4016d5f4caf5335227365812f7ef9bbd4ac9439f101a324316733b1f0d1764b7882a52d51f4cbb245c3075ddb2b915772daf94" + "content" : "0b42071f37c0cf8dfc46c3a3ed915bdc1d99b0bc41706200305c7f962f7b14c79e19eb42f99488b874d45267015de3f9762d903d6c03c7fb1c4bd1ac331c45d8" }, { "alg" : "SHA-384", - "content" : "d2d377fc38755a0ab145758429e4998f76602663b8be64dd4dffa346cfbd52b33a7eb0db2ae417b5df6fcc7ce9425e7f" + "content" : "5411758030a57ffedc16b7b9f93592107920e01b27b8b6b98c3cb0cec1bbb3eecfc0dfc36ba130b2616507a703938560" }, { "alg" : "SHA3-384", - "content" : "0e51949beb1b78c7a88500da6c3c8961c7b0d1ad92f09ae0be3572d71d1e220d4dea4a38b4ff7fc06c2d1223b7dca58d" + "content" : "d2054bd5b799463c0364aebef1024584f37fc63b122b0d9a137d5d052b152ef3b23ebb64961222adc72f30e49ccdbe3d" }, { "alg" : "SHA3-256", - "content" : "e3d5a512fda5691283a0977cd5cfe715500af578526b3a10af5f39ecd912a3e4" + "content" : "6eaa8027ba8e0f7c11c2a2da14084630735110429505016fd92d8292c33637f4" }, { "alg" : "SHA3-512", - "content" : "6ca0362a0c9acf97f0291ba29abe36fae66d259c3fda417615c89cc74fd7bda4f0a8f794242eac5ae255b46d009e8e0c5dd33917b95711256b383eb13c3fe372" + "content" : "35de0af96a078f4bc7709776d051b3d40c5f965647096114d33cb47c2fda0aacef5453af4475302a074e351c796b30315daa182fc69f780f515ac046a19e9ff0" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "https://www.gnu.org/licenses/lgpl.txt" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/com.ibm/enricher@1.0.3-SNAPSHOT?type=jar", + "purl" : "pkg:maven/org.sonarsource.python/python-frontend@5.16.0.29940?type=jar", "externalReferences" : [ { - "type" : "distribution-intake", - "url" : "https://eu.artifactory.swg-devops.com/artifactory/res-cryptoagility-team-maven-local" + "type" : "website", + "url" : "https://docs.sonarsource.com/sonarqube-server/latest/extension-guide/developing-a-plugin/plugin-basics/python/python-frontend/" + }, + { + "type" : "build-system", + "url" : "https://cirrus-ci.com/github/SonarSource/sonar-python" + }, + { + "type" : "issue-tracker", + "url" : "https://jira.sonarsource.com/browse/SONARPY" + }, + { + "type" : "mailing-list", + "url" : "https://community.sonarsource.com" + }, + { + "type" : "vcs", + "url" : "https://github.com/SonarSource/sonar-python/python-frontend" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.ibm/enricher@1.0.3-SNAPSHOT?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.python/python-frontend@5.16.0.29940?type=jar" }, { - "publisher" : "SonarSource and Waleri Enns", - "group" : "org.sonarsource.python", - "name" : "python-frontend", - "version" : "4.17.0.14845", - "description" : "Parent pom of SonarSource public projects", + "publisher" : "SonarSource", + "group" : "org.sonarsource.sslr", + "name" : "sslr-core", + "version" : "1.24.0.633", + "description" : "", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "c55cb48cedabf79f2877ebb9d88f6b58" + "content" : "1aff676d028ebe3310dfdef58a42cd06" }, { "alg" : "SHA-1", - "content" : "4ff8dfa5ea7d5ad5847562d95396b919308caea3" + "content" : "f2b17ad23d5cd2533c01b9cb3332dae18d9e1521" }, { "alg" : "SHA-256", - "content" : "437b54530740f33ae5e46bdf8348d1440684f7d1cb318a7ee058689bd9b97c76" + "content" : "d178c71fca3520a686c229a20220910cebd95dd40c6c0b14bb68bca5a96087bc" }, { "alg" : "SHA-512", - "content" : "4928573b4dde5237b3056a25d01fdcaa0d8477f66517d0939d332ff8ba434b6a03d884095701f4b571af131b3afc6b57feee148d69d86b8e62a3a4d39d2d1001" + "content" : "fbb6b6987aa0c3464fb71e09d4a89d97c3e2be7306e15ee64b1386732af7f100253ca919aae1f082362d5a92984dc0cbc5f076285f645af42e808171882f47e7" }, { "alg" : "SHA-384", - "content" : "859f11ab3b6590bc07f6a082ef8d87775939341e064abd4c840ad326640c71b84e99a8ae281f0bece8bd5b8196db1c0d" + "content" : "128ef920ed79a50b68b2fab9548ecf0aa1c86785f7097251b8aa1ccf95a78be592ff2066d4aef35553255d62e047907d" }, { "alg" : "SHA3-384", - "content" : "7dc1a501021011058c6e46cf0e069103aca9687de27aea29c42196af8d74c09ed668ec77284abafc12d635f4e0c9154e" + "content" : "52ab29e43f7310f16e090d3a03f3dd3ac38bc6e26e7d58f72f4119100b30b0d45e0024d43acb26be7ac87fd47749bb20" }, { "alg" : "SHA3-256", - "content" : "84a8def8e68682978bda393edba28e6caa7d4c333fffce5c09a24e54a4104d20" + "content" : "ae85cc20ac91a1d01af9f39b4a51f064ebd4166006b893afe4c5bf37bdec1a90" }, { "alg" : "SHA3-512", - "content" : "b44fdef1e3482a1f65d0d5345c69fb78ed32cee27f96abab033ae1e3e26923efd69e8b213ae7c9c367c0e9a87df3785154ecc58961a5261513dc1fb3e260d50d" + "content" : "04cfc8a3f872d3a453ea05b8f652e96ac5988fa8735f89ee7ccfbf1abb8e92d9bae91fb445f18598c22a8159b7333d09003490177129539ff87f8b450344b095" } ], "licenses" : [ @@ -1272,19 +1207,19 @@ } } ], - "purl" : "pkg:maven/org.sonarsource.python/python-frontend@4.17.0.14845?type=jar", + "purl" : "pkg:maven/org.sonarsource.sslr/sslr-core@1.24.0.633?type=jar", "externalReferences" : [ { - "type" : "website", - "url" : "http://docs.sonarqube.org/display/PLUG/Plugin+Library/python/python-frontend" + "type" : "build-system", + "url" : "https://travis-ci.org/SonarSource/sslr" }, { - "type" : "build-system", - "url" : "https://cirrus-ci.com/github/SonarSource/sonar-python" + "type" : "distribution-intake", + "url" : "https://api.bintray.com/maven/sonarsource/SonarQube/org.sonarsource.sslr/;publish=1" }, { "type" : "issue-tracker", - "url" : "https://jira.sonarsource.com/browse/SONARPY" + "url" : "http://jira.sonarsource.com/browse/SSLR" }, { "type" : "mailing-list", @@ -1292,125 +1227,125 @@ }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-python/python-frontend" + "url" : "https://github.com/SonarSource/sslr/sslr-core" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.python/python-frontend@4.17.0.14845?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.sslr/sslr-core@1.24.0.633?type=jar" }, { - "publisher" : "SonarSource", - "group" : "org.sonarsource.sslr", - "name" : "sslr-core", - "version" : "1.23", - "description" : "", + "publisher" : "OW2", + "group" : "org.ow2.asm", + "name" : "asm", + "version" : "9.0", + "description" : "ASM, a very small and fast Java bytecode manipulation framework", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "f89a00d0f4e4acdddf54c95b69aa7675" + "content" : "e87284e4421437854ba938179cf803e7" }, { "alg" : "SHA-1", - "content" : "79a22d2691a6060e11a8bc6134962b1c47087617" + "content" : "af582ff60bc567c42d931500c3fdc20e0141ddf9" }, { "alg" : "SHA-256", - "content" : "84bd856420ba37ae35df7a5d4d867000f7d622245d5ba349c3784f528577c8dd" + "content" : "0df97574914aee92fd349d0cb4e00f3345d45b2c239e0bb50f0a90ead47888e0" }, { "alg" : "SHA-512", - "content" : "8096f5cddfba041225b325d03123b535c83f1bd88afb7fe0d01c13fc8463be52c046756901fb550847548d7cb4ff3a24c47bcb9b5d1a53c900ba069be5f7d983" + "content" : "135f0be16323936ef10a291df4e5d13ab8e488f41cc2835e9ccdddb3f6b65e948ef3b79eb12636c97815380455a32ece7fa9dd094f04b192a3e8752bbcb83463" }, { "alg" : "SHA-384", - "content" : "377a73cee1789edec1176d32a6f56e30aebdc9b902bfbe061c6c65014915a94e2a3a025cfb084e919bb5dbf7f96fb646" + "content" : "d6da11983245a34ad4fc6bd25c894b8d125e8ae98b62d7130cafe483acc27d3d59598b2e4cc05930c1fed84ff819ada5" }, { "alg" : "SHA3-384", - "content" : "691b64b1e4a29461b5ee2e929a9e60f8cbeffd924ac9f9fe039ffe1de44ead0ad9c6d2d65e8edcc84edbe5a626f156ee" + "content" : "423ca9cf704ea268b33297e79bda67bb4b14eb27eff1910d99886846ef8f5a8dee49862e42cd95ab1fb6c52b0631222a" }, { "alg" : "SHA3-256", - "content" : "e0ec34bac214240137f93145be8082bae46db2aac4e6e6b79dd71b931a58c189" + "content" : "1beb0e93ad7e629c54d900dea3ebb394fb62301152e7aa39ede520f9c348bba2" }, { "alg" : "SHA3-512", - "content" : "741453b30ec787f69d79986a2ef39a598de74db0411e42ffa4bf14905bb2201a455c1d93779c5006b8e1fae0a834d569bcaff4aeebf370ba37eb6b10bcfeef9e" + "content" : "8beb13f69f431fb921bf00d6ebd84b22cd6092aab97808aed464caad1e6863958cb32ec199f542d60d630a798ce42d0fe237cb74e97c33157fb6cefed1721173" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "id" : "BSD-3-Clause", + "url" : "https://opensource.org/licenses/BSD-3-Clause" } } ], - "purl" : "pkg:maven/org.sonarsource.sslr/sslr-core@1.23?type=jar", + "purl" : "pkg:maven/org.ow2.asm/asm@9.0?type=jar", "externalReferences" : [ { - "type" : "build-system", - "url" : "https://travis-ci.org/SonarSource/sslr" + "type" : "website", + "url" : "http://asm.ow2.io/" }, { "type" : "distribution-intake", - "url" : "https://api.bintray.com/maven/sonarsource/SonarQube/org.sonarsource.sslr/;publish=1" + "url" : "http://repository.ow2.org/nexus/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", - "url" : "http://jira.sonarsource.com/browse/SSLR" + "url" : "https://gitlab.ow2.org/asm/asm/issues" }, { "type" : "mailing-list", - "url" : "sonarqube+subscribe@googlegroups.com" + "url" : "https://mail.ow2.org/wws/arc/asm/" }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sslr/sslr-core" + "url" : "https://gitlab.ow2.org/asm/asm/" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.sslr/sslr-core@1.23?type=jar" + "bom-ref" : "pkg:maven/org.ow2.asm/asm@9.0?type=jar" }, { "group" : "com.google.protobuf", "name" : "protobuf-java", - "version" : "3.25.1", + "version" : "4.29.0", "description" : "Core Protocol Buffers library. Protocol Buffers are a way of encoding structured data in an efficient yet extensible format.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "7dc81d3c2187ce5627d134a37df88cc0" + "content" : "5de9c1cc9a647278ab03d76ccfb8ff9d" }, { "alg" : "SHA-1", - "content" : "2933a5c3f022456d8842323fe0d7fb2d25a7e3c7" + "content" : "ffea90ab158435d68de76951857ef5f8b0f98365" }, { "alg" : "SHA-256", - "content" : "48a8e58a1a8f82eff141a7a388d38dfe77d7a48d5e57c9066ee37f19147e20df" + "content" : "16901851ebe5e89fe88aaad3c26866373695bc2e30627bb8932847e2f5fc2e76" }, { "alg" : "SHA-512", - "content" : "d4adb935097c4fee13838ea7c166b41a9c34977e436d2fa5e5e92aac1a95462846463895ad994858a442079627696ca14618ff97a0039abd3fcb8671d7961d3a" + "content" : "ed9aae4faa56c04dc086af07078db3734f675eb4188bb2be98c94cc59a8e4e77b74195c47d70c7b697bc3b938e106fdc137ffda5358b3029795f28e7d9216d68" }, { "alg" : "SHA-384", - "content" : "2fc41e52f529bcbbe4d8938d262153ee7e7a098d51fc84a2720bade27aff0247af47629c3caa630b706001d769714d1c" + "content" : "d204ff730ba5eff0eddd9439f05ab89e87194fc6c69d50054da593ab7537495207374840701867856ea1e9aa87ef1e14" }, { "alg" : "SHA3-384", - "content" : "9ff49c91b6ca5e5ebc8005b6179d171f3bb549b9ef667c694ea6cebe842bccbea1bedb2bab69d97e89270900915f125b" + "content" : "9a3dc4e7ef4e1488b6ee4a653d9f47569bb3f543012ec20fe695d1bba2a7da8e329ffe70d5ef8e43fd9da1721fe3f3c1" }, { "alg" : "SHA3-256", - "content" : "e3794da30f03c61b916aeb9aa2af625792dc7f236bf2bd16cbfffbf3ef186d59" + "content" : "16fec3a2d08bcc363c69d2a260a78020636d94dd4ed929050d8e8b51d37960f0" }, { "alg" : "SHA3-512", - "content" : "1d3bfb11f6cae1912bd5cd04aef53ae725d705e598fafaa185903d2c534ca2f88ad919321ec4bcdca36c9b1515097c5d47aa6868f5bd3b93732337bd564b3bb7" + "content" : "37c5a864aa97fd50a88a5c9b2a9c7eedd646eb4655ec041502e1892efb55b2f22e9f2292dcca120e74755a11f92dc41616e1dc6919d8906fe2c5802e25ed1187" } ], "licenses" : [ @@ -1421,7 +1356,7 @@ } } ], - "purl" : "pkg:maven/com.google.protobuf/protobuf-java@3.25.1?type=jar", + "purl" : "pkg:maven/com.google.protobuf/protobuf-java@4.29.0?type=jar", "externalReferences" : [ { "type" : "website", @@ -1437,47 +1372,47 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/com.google.protobuf/protobuf-java@3.25.1?type=jar" + "bom-ref" : "pkg:maven/com.google.protobuf/protobuf-java@4.29.0?type=jar" }, { "publisher" : "SonarSource", "group" : "org.sonarsource.analyzer-commons", "name" : "sonar-regex-parsing", - "version" : "2.7.0.1482", + "version" : "2.20.0.4607", "description" : "Logic useful to read and analyze regular expressions", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "eb44e77429b0c670bd02c692b9b9d136" + "content" : "4eccf95bb15e9aec54a88a17f6c8a606" }, { "alg" : "SHA-1", - "content" : "910a8d677db776702263b61dbcc37cca510050cf" + "content" : "b9db0a78e410732a3430d0278cd36a69a149e60a" }, { "alg" : "SHA-256", - "content" : "3bab2bf7d97cf368c5c352c1725b3de3954612c39488fde5d6d461e12df93c20" + "content" : "b5c8140f69878e9264ba5de71adff98e5126e8458281eb2ce0c0900b954c1bed" }, { "alg" : "SHA-512", - "content" : "fb07be9e9ecb8db11b54b80ec558c356ddea938c780abbe7a82722538d46a147e5ed7b2cdcd436bacc421dee341469bd7409d7765e36f9f6bba05784966830ce" + "content" : "802a82a2baebb7aaaab78393630b6b304135a33196db5308231d5938bd2c21152b5fe41ddd1ec06ed7fce16ac3baf7c9cdd57a03e6ddbcc3b8a8c2883f37a657" }, { "alg" : "SHA-384", - "content" : "9823d8146ffba7208034c9b9d92265e991b12261070bb42a5c6d6853972fc1a61133fb39d7cb4b9dffa354608c85bfdb" + "content" : "d64513d0bc0afb9c3ff9cb069f10c2a14975ed78277b4b803b8162142c10754aa9bf8ab52e59c78cc77108e7732fc555" }, { "alg" : "SHA3-384", - "content" : "77192be90d0be39614445f295808749155043508de9bda7efea6fa41765925b32a2a1c57d7c774b1df5682029c9bf79a" + "content" : "fd090152655286d83bfc685b18db5ee8d8a7314b52e12584883104485100cdedc66037d5536a40d0d3a2a8de4d6c7f06" }, { "alg" : "SHA3-256", - "content" : "708a623ce1122ac3c9e0b49d13a46288f81660ff8772e2f5abb245a041a3fe04" + "content" : "9fe6b60c76b3b26780f738436118bb88a6eec1b6901917c79476dd43dbfc91ad" }, { "alg" : "SHA3-512", - "content" : "0d4da73a042eda089bd7e4ce22ddf424d7dcac353e5c900f7aea68e3151bc49c00ad528a02b986e5239d642905aa71b5406a8881c6fe4fa4b6c8d91b2b553c93" + "content" : "61415108ab48e8653675b0167a3e8f6e844d12d63a143e3bf97f037484e7ae8dab45f9919f318d94d687827ac863d51d14e2f34d60909ddb1d57dbf66f3456b1" } ], "licenses" : [ @@ -1488,11 +1423,11 @@ } } ], - "purl" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.7.0.1482?type=jar", + "purl" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.20.0.4607?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://docs.sonarqube.org/display/PLUG/Plugin+Library/sonar-analyzer-commons-parent/sonar-regex-parsing" + "url" : "https://docs.sonarsource.com/sonarqube-server/latest/extension-guide/developing-a-plugin/plugin-basics/sonar-analyzer-commons-parent/sonar-regex-parsing/" }, { "type" : "build-system", @@ -1512,46 +1447,47 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.7.0.1482?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.20.0.4607?type=jar" }, { - "group" : "com.google.guava", - "name" : "guava", - "version" : "32.0.1-jre", - "description" : "Guava is a suite of core and expanded libraries that include utility classes, Google's collections, I/O classes, and much more.", + "publisher" : "FasterXML", + "group" : "com.fasterxml.jackson.core", + "name" : "jackson-databind", + "version" : "2.20.1", + "description" : "General data-binding functionality for Jackson: works on core streaming API", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "6951895e804b36322214c95917e598d4" + "content" : "49d7b7226df5ed4a036e48997a03d066" }, { "alg" : "SHA-1", - "content" : "6e5d51a72d142f2d40a57dfb897188b36a95b489" + "content" : "9586a7fe0e1775de0e54237fa6a2c8455c93ac06" }, { "alg" : "SHA-256", - "content" : "bd7fa227591fb8509677d0d1122cf95158f3b8a9f45653f58281d879f6dc48c5" + "content" : "34bbeb4526fff4f8565b12106bf85a6afcbae858966d489b54214ac46b2e26e8" }, { "alg" : "SHA-512", - "content" : "5dbe7a697511cfbe44f3ffb954e32e997677ecc61f03bb7bb374f1b8fa4a931a95cd9d1f5288eb5d42e2aa380e3241b35059786c07edc48e5aa67c30cddad8a5" + "content" : "16906e9c2f1962649eb21de148f362fedf2ce903c7ca0e6d68a01d43dbe8402b70cc537c104f36bc40a2bed6601162e7c21663735582e25bff7e27852be1405d" }, { "alg" : "SHA-384", - "content" : "abad4556e073fb38062c636b6599ceed992302c7d98150e3842d32ce92f6aac7d630633c56efa581523d591361fcf898" + "content" : "0591935cdfed1d65fa4a2820133ba129384f71921228ffe093f343d3ebf0b699762810d9208641726111015f0e35753b" }, { "alg" : "SHA3-384", - "content" : "c7b02d77e04c567e8870674f71a60141e83ca9e5e9180138450ede78ad7f2be8b6636c514096e15ba2921c2889427852" + "content" : "855ccd449944e7884f8088c8c5b224e6e2f63bcd3123502618b4f5ded025e5978143af8c5d31215276932bc3bb089472" }, { "alg" : "SHA3-256", - "content" : "17f18d8631c9bff9234c214522ce89eb1feef27a4dfe990760d4943ad3de710d" + "content" : "53732171c9f2bdeaa40017a34683a00ac11e8a8c1bcefaed07eb91e629e20376" }, { "alg" : "SHA3-512", - "content" : "7cf7847812b47cc232ef3c27719457dd19610b3e3bb25c1be640821a3a2be67781047f41e34491b5c8ed68010bbb1d53c5f7706633f3a3f44f3f3133bb7635ec" + "content" : "05017efae94bc3c83131aaaa7911f20e7c367502cd2cd05c6cedabc877b55724bcde2521ba1da15bf1c1c3ccb1a235124b39b2d4860142f2b89d4df197cf5c83" } ], "licenses" : [ @@ -1561,70 +1497,66 @@ } } ], - "purl" : "pkg:maven/com.google.guava/guava@32.0.1-jre?type=jar", + "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://github.com/google/guava" - }, - { - "type" : "build-system", - "url" : "https://github.com/google/guava/actions" + "url" : "https://github.com/FasterXML/jackson" }, { "type" : "distribution-intake", - "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" + "url" : "https://central.sonatype.com/api/v1/publisher" }, { "type" : "issue-tracker", - "url" : "https://github.com/google/guava/issues" + "url" : "https://github.com/FasterXML/jackson-databind/issues" }, { "type" : "vcs", - "url" : "https://github.com/google/guava/guava" + "url" : "https://github.com/FasterXML/jackson-databind" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.google.guava/guava@32.0.1-jre?type=jar" + "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1?type=jar" }, { - "group" : "com.google.guava", - "name" : "failureaccess", - "version" : "1.0.1", - "description" : "Contains com.google.common.util.concurrent.internal.InternalFutureFailureAccess and InternalFutures. Most users will never need to use this artifact. Its classes is conceptually a part of Guava, but they're in this separate artifact so that Android libraries can use them without pulling in all of Guava (just as they can use ListenableFuture by depending on the listenablefuture artifact).", + "group" : "com.google.code.findbugs", + "name" : "jsr305", + "version" : "3.0.2", + "description" : "JSR305 Annotations for Findbugs", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "091883993ef5bfa91da01dcc8fc52236" + "content" : "dd83accb899363c32b07d7a1b2e4ce40" }, { "alg" : "SHA-1", - "content" : "1dcf1de382a0bf95a3d8b0849546c88bac1292c9" + "content" : "25ea2e8b0c338a877313bd4672d3fe056ea78f0d" }, { "alg" : "SHA-256", - "content" : "a171ee4c734dd2da837e4b16be9df4661afab72a41adaf31eb84dfdaf936ca26" + "content" : "766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7" }, { "alg" : "SHA-512", - "content" : "f8d59b808d6ba617252305b66d5590937da9b2b843d492d06b8d0b1b1f397e39f360d5817707797b979a5bf20bf21987b35333e7a15c44ed7401fea2d2119cae" + "content" : "bb09db62919a50fa5b55906013be6ca4fc7acb2e87455fac5eaf9ede2e41ce8bbafc0e5a385a561264ea4cd71bbbd3ef5a45e02d63277a201d06a0ae1636f804" }, { "alg" : "SHA-384", - "content" : "67659dbd9647ec303d7f15128dc9dba19b98fd8d74758ee3b602451e32c855e236ccaafe08edf4bbfa245f981268440f" + "content" : "ca0b169d3eb2d0922dc031133a021f861a043bb3e405a88728215fd6ff00fa52fdc7347842dcc2031472e3726164bdc4" }, { "alg" : "SHA3-384", - "content" : "1460875f0331c5fa3791772a6a322a7db180261bc2adacf7271df1fbf3b088a587a755a604c039982cb593c5cfc1f101" + "content" : "9903fd7505218999f8262efedb3d935d64bcef84aae781064ab5e1b24755466b269517cada562fa140cd1d417ede57a1" }, { "alg" : "SHA3-256", - "content" : "ea86406e75fcd93eafe3cde1b3135ba485f1bb9b75fed98894a0bf1f0aee04f0" + "content" : "223fda9a89a461afaae73b177a2dc20ed4a90f2f8757f5c65f3241b0510f00ff" }, { "alg" : "SHA3-512", - "content" : "52ac0f487ab5dd27c9f2e54fd1d84c7a620cae9d49be4072aa2b11501787bf4391ddaa13d02eccdf19e8eea46aecbea5f6064b26777c1b836108a280652e04ac" + "content" : "3996b5af57a5d5c6a0cd62b11773360fb051dd86a2ba968476806a2a5d32049b82d69a24a3c694e8fe4d735be6a28e41000cc500cc2a9fb577e058045855d2d6" } ], "licenses" : [ @@ -1634,70 +1566,62 @@ } } ], - "purl" : "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar", + "purl" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://github.com/google/guava/failureaccess" - }, - { - "type" : "build-system", - "url" : "https://travis-ci.org/google/guava" + "url" : "http://findbugs.sourceforge.net/" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, - { - "type" : "issue-tracker", - "url" : "https://github.com/google/guava/issues" - }, { "type" : "vcs", - "url" : "https://github.com/google/guava/failureaccess" + "url" : "https://code.google.com/p/jsr-305/" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar" + "bom-ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar" }, { "group" : "com.google.guava", - "name" : "listenablefuture", - "version" : "9999.0-empty-to-avoid-conflict-with-guava", - "description" : "An empty artifact that Guava depends on to signal that it is providing ListenableFuture -- but is also available in a second \"version\" that contains com.google.common.util.concurrent.ListenableFuture class, without any other Guava classes. The idea is: - If users want only ListenableFuture, they depend on listenablefuture-1.0. - If users want all of Guava, they depend on guava, which, as of Guava 27.0, depends on listenablefuture-9999.0-empty-to-avoid-conflict-with-guava. The 9999.0-... version number is enough for some build systems (notably, Gradle) to select that empty artifact over the \"real\" listenablefuture-1.0 -- avoiding a conflict with the copy of ListenableFuture in guava itself. If users are using an older version of Guava or a build system other than Gradle, they may see class conflicts. If so, they can solve them by manually excluding the listenablefuture artifact or manually forcing their build systems to use 9999.0-....", + "name" : "guava", + "version" : "33.5.0-jre", + "description" : "Guava is a suite of core and expanded libraries that include utility classes, Google's collections, I/O classes, and much more.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "d094c22570d65e132c19cea5d352e381" + "content" : "d9fbf39a41a5bab891348f07668e18c5" }, { "alg" : "SHA-1", - "content" : "b421526c5f297295adef1c886e5246c39d4ac629" + "content" : "8699de25f2f979108d6c1b804a7ba38cda1116bc" }, { "alg" : "SHA-256", - "content" : "b372a037d4230aa57fbeffdef30fd6123f9c0c2db85d0aced00c91b974f33f99" + "content" : "1e301f0c52ac248b0b14fdc3d12283c77252d4d6f48521d572e7d8c4c2cc4ac7" }, { "alg" : "SHA-512", - "content" : "c5987a979174cbacae2e78b319f080420cc71bcdbcf7893745731eeb93c23ed13bff8d4599441f373f3a246023d33df03e882de3015ee932a74a774afdd0782f" + "content" : "994a4dbcbd8e528ad3b4a7acf49b631a40dcebb03d9a8f5e1d3b74351f805f77774e9a19f7233e42036cb415b7838710f207ac1e18335e4a219b7f99ea22a44f" }, { "alg" : "SHA-384", - "content" : "caff9b74079f95832ca7f6029346b34b606051cc8c5a4389fac263511d277ada0c55f28b0d43011055b268c6eb7184d5" + "content" : "9dabff6e543ead881b20d38a533e9151aaa83999239cf0ace3e712cf678e7976c3a50d79e3f3c57afc05a3b9ff14ad90" }, { "alg" : "SHA3-384", - "content" : "e939f08df0545847ea0d3e4b04a114b08499ad069ba8ec9461d1779f87a56e0c37273630a0f4c14e78c348d3ac7eb97f" + "content" : "9f65d4d942113facb2eb25229c1530b79dd3b8994574034b8d4a1c2b39ed8ee5bb4d415ec690d3d87cee0d8cb2283564" }, { "alg" : "SHA3-256", - "content" : "1f0a8b1177773b3a8ace839df5eed63cbf56b24a38714898a6e4ed065c42559f" + "content" : "fedafab2279bdf6eff66314fc61b056e92312695678e66dc1e25fe1d18af5a36" }, { "alg" : "SHA3-512", - "content" : "6b495ecc2a18b17365cb08d124a0da47f04bcdde81927b5245edf3edd8e498c3c3fb92ce6a4127f660bac851bb1d3e4510e5c20d03be47ce99dc296d360db285" + "content" : "e64f3c49f9030358554bb0b8abdff729394988f1e3247b05a86302014eeff4a2855acf46d9bf1c683cbecc33a24173a20a103d3c82c94f8cabd6676a01b40fb6" } ], "licenses" : [ @@ -1707,19 +1631,15 @@ } } ], - "purl" : "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar", + "purl" : "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://github.com/google/guava/listenablefuture" + "url" : "https://github.com/google/guava" }, { "type" : "build-system", - "url" : "https://travis-ci.org/google/guava" - }, - { - "type" : "distribution-intake", - "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" + "url" : "https://github.com/google/guava/actions" }, { "type" : "issue-tracker", @@ -1727,112 +1647,123 @@ }, { "type" : "vcs", - "url" : "https://github.com/google/guava/listenablefuture" + "url" : "https://github.com/google/guava/guava" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar" + "bom-ref" : "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar" }, { - "group" : "org.checkerframework", - "name" : "checker-qual", - "version" : "3.33.0", - "description" : "checker-qual contains annotations (type qualifiers) that a programmer writes to specify Java code for type-checking by the Checker Framework.", + "group" : "com.google.guava", + "name" : "failureaccess", + "version" : "1.0.3", + "description" : "Contains com.google.common.util.concurrent.internal.InternalFutureFailureAccess and InternalFutures. Most users will never need to use this artifact. Its classes are conceptually a part of Guava, but they're in this separate artifact so that Android libraries can use them without pulling in all of Guava (just as they can use ListenableFuture by depending on the listenablefuture artifact).", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "fc9418b779d9d57dcd52197006cbdb9b" + "content" : "29a782e90f6b37218b18bb880d2a8f4a" }, { "alg" : "SHA-1", - "content" : "de2b60b62da487644fc11f734e73c8b0b431238f" + "content" : "aeaffd00d57023a2c947393ed251f0354f0985fc" }, { "alg" : "SHA-256", - "content" : "e316255bbfcd9fe50d165314b85abb2b33cb2a66a93c491db648e498a82c2de1" + "content" : "cbfc3906b19b8f55dd7cfd6dfe0aa4532e834250d7f080bd8d211a3e246b59cb" }, { "alg" : "SHA-512", - "content" : "049c446677b7b386f3fb501bf65e032bdf2b1b29a3f545848035fff2b683cd275380cf302e30eea641af7f0801f779bcda3d82a71d928e4176f564f796640a64" + "content" : "72be228e7805da5623e42bf024ded7d9147023c66b22f4dbd04ac6898201af46ee82e1f92ea51eb0595f1b49151c4b8ecb862653d4906c17609c42544ee97abf" }, { "alg" : "SHA-384", - "content" : "ddf7a0f70421d1ed75e93c0a30434a4862c3905e433223e19861323cf0994e843392b746003040f10a7db6fc960b8aa6" + "content" : "9dd1a2a08efda311604992d3e7cee64873bc8c64de3b423b1b3a3dcc1f7f0810bb03901fbfe39a5f835accb0646f4ad8" }, { "alg" : "SHA3-384", - "content" : "edf079834fdd23317851318504b2fcc10b055cdb5cc4ada9c773d1b6c815ed6dd193c433d2b83103f070fd521021ff33" + "content" : "ffd67766c165ee77e96824e06de2c19864a6e61f785b2085eb825f308f173d71f2555559d90d910f33f3367378ace0e3" }, { "alg" : "SHA3-256", - "content" : "56244f45b03fc2a472b35489324e392e6001fac088d19f33629a87adb74a0575" + "content" : "08a77b528a72ca412b36e4004692705ebfd75cfb4897c88632d367d08a34b09f" }, { "alg" : "SHA3-512", - "content" : "e0516c11fe613f258bf9ad39358a8d9fb7c8df57ff9aaca5d6d16055c196fac4ed3b4185f2501a3bdf7aeb1fe142693b1d788bdaa73366be1af15762bb3591a4" + "content" : "7cba6c266babbe8272f029eea6e2cbddadee96eb1a16916a6eb2441a55837867ce717385d4388735fd83f2f6555931077c0ebda011a1ee9a37ac38c8c0c43a65" } ], "licenses" : [ { "license" : { - "id" : "MIT" + "id" : "Apache-2.0" } } ], - "purl" : "pkg:maven/org.checkerframework/checker-qual@3.33.0?type=jar", + "purl" : "pkg:maven/com.google.guava/failureaccess@1.0.3?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://checkerframework.org/" + "url" : "https://github.com/google/guava/failureaccess" + }, + { + "type" : "build-system", + "url" : "https://github.com/google/guava/actions" + }, + { + "type" : "distribution-intake", + "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" + }, + { + "type" : "issue-tracker", + "url" : "https://github.com/google/guava/issues" }, { "type" : "vcs", - "url" : "https://github.com/typetools/checker-framework.git" + "url" : "https://github.com/google/guava/failureaccess" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.checkerframework/checker-qual@3.33.0?type=jar" + "bom-ref" : "pkg:maven/com.google.guava/failureaccess@1.0.3?type=jar" }, { - "publisher" : "Google LLC", - "group" : "com.google.errorprone", - "name" : "error_prone_annotations", - "version" : "2.18.0", - "description" : "Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.", + "group" : "com.google.guava", + "name" : "listenablefuture", + "version" : "9999.0-empty-to-avoid-conflict-with-guava", + "description" : "An empty artifact that Guava depends on to signal that it is providing ListenableFuture -- but is also available in a second \"version\" that contains com.google.common.util.concurrent.ListenableFuture class, without any other Guava classes. The idea is: - If users want only ListenableFuture, they depend on listenablefuture-1.0. - If users want all of Guava, they depend on guava, which, as of Guava 27.0, depends on listenablefuture-9999.0-empty-to-avoid-conflict-with-guava. The 9999.0-... version number is enough for some build systems (notably, Gradle) to select that empty artifact over the \"real\" listenablefuture-1.0 -- avoiding a conflict with the copy of ListenableFuture in guava itself. If users are using an older version of Guava or a build system other than Gradle, they may see class conflicts. If so, they can solve them by manually excluding the listenablefuture artifact or manually forcing their build systems to use 9999.0-....", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "64145d0e7fee5a69ed7b84cf402de998" + "content" : "d094c22570d65e132c19cea5d352e381" }, { "alg" : "SHA-1", - "content" : "89b684257096f548fa39a7df9fdaa409d4d4df91" + "content" : "b421526c5f297295adef1c886e5246c39d4ac629" }, { "alg" : "SHA-256", - "content" : "9e6814cb71816988a4fd1b07a993a8f21bb7058d522c162b1de849e19bea54ae" + "content" : "b372a037d4230aa57fbeffdef30fd6123f9c0c2db85d0aced00c91b974f33f99" }, { "alg" : "SHA-512", - "content" : "3cea86be94bb8ae40d21ad4bf7d7f6b2233e89593b7b741ad84c78840cd3837bb5136f52e62fe9ae0953d7b190c46ad3edc102dfa97b4c7ea472a80206bf5db7" + "content" : "c5987a979174cbacae2e78b319f080420cc71bcdbcf7893745731eeb93c23ed13bff8d4599441f373f3a246023d33df03e882de3015ee932a74a774afdd0782f" }, { "alg" : "SHA-384", - "content" : "7622eb33f83f03ab32b710b36c2fe836e24c5318f65fb8c0631a99507ca3ae65c2df8e33b63a5ce853b9cab6d9cb32e5" + "content" : "caff9b74079f95832ca7f6029346b34b606051cc8c5a4389fac263511d277ada0c55f28b0d43011055b268c6eb7184d5" }, { "alg" : "SHA3-384", - "content" : "1ea52a5ce2a9ee1a960dc2a1bbe4b009d4d6a4448498e4cd76401605fa877662911e8c93b2b8bfda57bedc56c83f10a0" + "content" : "e939f08df0545847ea0d3e4b04a114b08499ad069ba8ec9461d1779f87a56e0c37273630a0f4c14e78c348d3ac7eb97f" }, { "alg" : "SHA3-256", - "content" : "ed53f4295da75753267f241315352c4a39e60796f04e1c0c12d29c3a38be48ed" + "content" : "1f0a8b1177773b3a8ace839df5eed63cbf56b24a38714898a6e4ed065c42559f" }, { "alg" : "SHA3-512", - "content" : "8266b313bd4e1170daf60642e838841370d99bc24b2a1f91825ca22037a6a30ff15cc76069f8e8770f1dc12772c277ee1320de67e815041697d93d6d7ba884fb" + "content" : "6b495ecc2a18b17365cb08d124a0da47f04bcdde81927b5245edf3edd8e498c3c3fb92ce6a4127f660bac851bb1d3e4510e5c20d03be47ce99dc296d360db285" } ], "licenses" : [ @@ -1842,58 +1773,70 @@ } } ], - "purl" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar", + "purl" : "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://errorprone.info/error_prone_annotations" + "url" : "https://github.com/google/guava/listenablefuture" + }, + { + "type" : "build-system", + "url" : "https://travis-ci.org/google/guava" + }, + { + "type" : "distribution-intake", + "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" + }, + { + "type" : "issue-tracker", + "url" : "https://github.com/google/guava/issues" }, { "type" : "vcs", - "url" : "https://github.com/google/error-prone/error_prone_annotations" + "url" : "https://github.com/google/guava/listenablefuture" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar" + "bom-ref" : "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar" }, { "group" : "com.google.j2objc", "name" : "j2objc-annotations", - "version" : "2.8", + "version" : "3.1", "description" : "A set of annotations that provide additional information to the J2ObjC translator to modify the result of translation.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "c50af69b704dc91050efb98e0dff66d1" + "content" : "abe8bd3abff622b9a8b15c3a737aa741" }, { "alg" : "SHA-1", - "content" : "c85270e307e7b822f1086b93689124b89768e273" + "content" : "a892ca9507839bbdb900d64310ac98256cab992f" }, { "alg" : "SHA-256", - "content" : "f02a95fa1a5e95edb3ed859fd0fb7df709d121a35290eff8b74dce2ab7f4d6ed" + "content" : "84d3a150518485f8140ea99b8a985656749629f6433c92b80c75b36aba3b099b" }, { "alg" : "SHA-512", - "content" : "f8263868a792b41707c9e7fe6fa5650a14cd93fbeafad20efe3772a3058fc933eb59782ec59e6eb9b9c569aa96da80134ae9fdf7547b69c44a97087efddceeff" + "content" : "34ee5aad57b0b507e89c897306f73043f80fa0eb02b453e54d9052feb0808a0d2ed835d888946211921d2bf733780b19ff636479ce19b9f48814ba6008733ce1" }, { "alg" : "SHA-384", - "content" : "e6087ec31fec8289158496ad2ed6ce8472d5d513808a312e0782cedac3b86c37a62a63c0b5ea3839491d109fe9e148a1" + "content" : "7b760a346a586d6a3fa4477807e2f02f091e61898fc9a6ff449e43c55b6465fbbc17720663183c84c41d4d8814085e51" }, { "alg" : "SHA3-384", - "content" : "10add34bfeb8612283eef89ac96747a3c9b755acd80ad526e1addaeb7efd6323c52b9bfa1a3d34adb40e1ccb963ee65d" + "content" : "a2166c1c08f947c0e60aa7c9167602942e7bac37ba45863d34c0132a1f352e7807a382588d350b93bdbbbbe315a3573f" }, { "alg" : "SHA3-256", - "content" : "b3336f8abd6b1f73b9f06d306974557000a000073bfbae6b54fda26d17dbb072" + "content" : "3d4d3b8bfd2ad13351a53610aa4bf1c5a69d2bde4272c281003120ed9bcddb8c" }, { "alg" : "SHA3-512", - "content" : "d376c184a6df071c4e93b913d175b5c2e63deac37105dc20342c19bdda62e4e9598ca1e8bfb4f4fd5cdee6dd5ac3b8af49e2c5193e324d59a59ce1f7adeab627" + "content" : "0a574b379a3f8022f0b88252c87d0e6b6cfa434fdb981efd1b24387025a962d7ac4e90161e8bd048df142bf52f4fc41e4a0c1d45e4eeb872c5954aad552988e9" } ], "licenses" : [ @@ -1903,7 +1846,7 @@ } } ], - "purl" : "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar", + "purl" : "pkg:maven/com.google.j2objc/j2objc-annotations@3.1?type=jar", "externalReferences" : [ { "type" : "website", @@ -1915,112 +1858,109 @@ }, { "type" : "vcs", - "url" : "http://svn.sonatype.org/spice/trunk/oss/oss-parent-9/j2objc-annotations" + "url" : "http://github.com/google/j2objc" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar" + "bom-ref" : "pkg:maven/com.google.j2objc/j2objc-annotations@3.1?type=jar" }, { - "group" : "org.jetbrains", - "name" : "annotations", - "version" : "24.1.0", - "description" : "A set of annotations used for code inspection support and code documentation.", + "publisher" : "cbomkit", + "group" : "com.ibm", + "name" : "rules", + "version" : "2.0.0-SNAPSHOT", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "38673abe87d12508cd05498eff0b9731" + "content" : "d7ecc53f19d43c6f2a4b49e4176ca55c" }, { "alg" : "SHA-1", - "content" : "7af6a669488450c4a07c2c3254e2151df42d7d04" + "content" : "c56bb5c149d3dfcab27b3cd46cff1417f6f8fb0a" }, { "alg" : "SHA-256", - "content" : "27a770dc7ce50500918bb8c3c0660c98290630ec796b5e3cf6b90f403b3033c6" + "content" : "df50b46a93159b37559a368172ff36723491b105332dac34d30016617a1cae0a" }, { "alg" : "SHA-512", - "content" : "663395a885561cc97eed411c67b496c06ec9a54906185a871de8743bf53e92152f4bc7c2a0118b7f3cfe85cc0a6c408ac6d589839b8d25c851637f85880331f2" + "content" : "41d01c3b1af55b447c252540c6315181c51418f4c8da7d8e8e9941d137dbe4b3db8fddd29e80ee8a5aab44c5f0ca53064db6018225d1093915659f7d70f31e10" }, { "alg" : "SHA-384", - "content" : "85779b72d864894f1d3cdd489b0a419c0620281c4fd22a061f4a3fe2aee91015681889573200cd2124c3add48a3216a6" + "content" : "548c8780f188b1f0474dc9fec03ddbd2db58e4559614094c0690bd1b9921b9f4f632bef951a1f1f290e883013d1e37a1" }, { "alg" : "SHA3-384", - "content" : "0cfce80b012ba441be96368fe8af54e805100f7680fdbb7defae4dd07ff3c75cd0f89b993a61bef139a405637a73236f" + "content" : "b91056be1f547eee5c1ea75182d1325cb010cfed29fcd20a766784f3cd02808d5463edbf8f46ced5c022b00a467bdf3c" }, { "alg" : "SHA3-256", - "content" : "f7c5e25c9c16aad9f5482f3853660238db4f32be72c20f40383a1d20e0306f42" + "content" : "ad7e4096af3a203f56bf433a5cf9a33c7ac109429a9fb8002162807413eca9f2" }, { "alg" : "SHA3-512", - "content" : "0f74369cdb67a58c0f89033723665320eb535d1c1e66049347f6b3e25cbf7d1f80b8fa3a7b3e0b4fa8eae8d9ec8c30510b65bab581adeaff3f94651fa214105a" + "content" : "ee8b8b71399966ed05fde682ddca8eabc55cb97be61e7225a3c7f8e2d9b934cc42e25ba503b0a9696309ddc5608cc7acae241c6209c7d401af9be00c3362646d" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0" + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], - "purl" : "pkg:maven/org.jetbrains/annotations@24.1.0?type=jar", + "purl" : "pkg:maven/com.ibm/rules@2.0.0-SNAPSHOT?type=jar", "externalReferences" : [ { - "type" : "website", - "url" : "https://github.com/JetBrains/java-annotations" - }, - { - "type" : "vcs", - "url" : "https://github.com/JetBrains/java-annotations" + "type" : "distribution-intake", + "url" : "https://maven.pkg.github.com/cbomkit/sonar-cryptography" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.jetbrains/annotations@24.1.0?type=jar" + "bom-ref" : "pkg:maven/com.ibm/rules@2.0.0-SNAPSHOT?type=jar" }, { "publisher" : "SonarSource", "group" : "org.sonarsource.api.plugin", "name" : "sonar-plugin-api", - "version" : "9.13.0.360", + "version" : "13.4.3.4290", "description" : "Plugin API for SonarQube, SonarCloud and SonarLint", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "b401a934655540b37bf6765778a7b759" + "content" : "9121c8851ff1af1153c8dd4fa94c9ce7" }, { "alg" : "SHA-1", - "content" : "64b99cf118b048da0fa98a397b2e03f11c6970e9" + "content" : "64194b3b6336b78df92f9fa5a58682c85ec5626b" }, { "alg" : "SHA-256", - "content" : "f20ae1d944f84a611583c33900d8788aa855a0d9ea66493e1046539715d53c0c" + "content" : "ce1c77307f81897f3c8f901d81a0169db9f2ec614d65723679bc8bfedceb56dd" }, { "alg" : "SHA-512", - "content" : "f6b8fa7447300c1f95e14e9be12d36419b302d1844bd069ceaae134b3caa54d546a337be3c66e8e25ca5dd78fb95e76f92306cf5c26ba0730e3c730d443c2822" + "content" : "8a9f34a03acbe05d9086119287ab2b2d84c8bff43367f75d42ca5bd5f66c54e4007d1affe247f7f3a0cb710328705b6a0db0db2e211b46e8979ea9e3eee6c401" }, { "alg" : "SHA-384", - "content" : "5cbdc17456d4ab1959cd8ad59d64a733224a3d03aa0f1e12968e0e7c86785e465d3f27f7c54b13c858326b4ee8bd60a7" + "content" : "7f1d268c151ad6fda7e5c5b21abb74b5a4b2bcb3e43fb4d3eceef01cab5e28e12b0d019d6d7da39a977f1fd8a6260ed2" }, { "alg" : "SHA3-384", - "content" : "8930616bed39525c4c5c0396f8c541268b46b1df45432ee66ca6af8609a6ebd1e904493f025ba4b045401930a3ea2a2d" + "content" : "c4ab8215fb558662a98375c9f347636f4e27fa912a23acadf804c5661caa2899529a6777f8c9f9a133c5a6e676ec0bf4" }, { "alg" : "SHA3-256", - "content" : "4fb1225cc1bed06656fa92422d0425b44032725e6afb8d980c4af8cd8efc4b40" + "content" : "acb5c5fb43a612de73d7562499398bfb7678b878de04ecb697590fac4ed2e61c" }, { "alg" : "SHA3-512", - "content" : "3a505b03e37ff9bd00248bf77344b880f206042a81b90eccbb42a78fe2496ff4f61c519f4ec77ded65d1f488b4caf6a69afae97a9a5a59f915ec8068176a0cbb" + "content" : "bf256b0cd721c685cc677bc5ab0af2eb68e469b7cdcd9e9bae7b60baa718b159b0e2cc9ca489a088b8d4556cef33da26d1bdf7fb1b952014b61e4b282aface76" } ], "licenses" : [ @@ -2031,7 +1971,7 @@ } } ], - "purl" : "pkg:maven/org.sonarsource.api.plugin/sonar-plugin-api@9.13.0.360?type=jar", + "purl" : "pkg:maven/org.sonarsource.api.plugin/sonar-plugin-api@13.4.3.4290?type=jar", "externalReferences" : [ { "type" : "website", @@ -2043,60 +1983,62 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.api.plugin/sonar-plugin-api@9.13.0.360?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.api.plugin/sonar-plugin-api@13.4.3.4290?type=jar" }, { - "group" : "com.google.code.findbugs", - "name" : "jsr305", - "version" : "3.0.2", - "description" : "JSR305 Annotations for Findbugs", + "publisher" : "QOS.ch", + "group" : "org.slf4j", + "name" : "slf4j-api", + "version" : "2.0.17", + "description" : "The slf4j API", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "dd83accb899363c32b07d7a1b2e4ce40" + "content" : "b6480d114a23683498ac3f746f959d2f" }, { "alg" : "SHA-1", - "content" : "25ea2e8b0c338a877313bd4672d3fe056ea78f0d" + "content" : "d9e58ac9c7779ba3bf8142aff6c830617a7fe60f" }, { "alg" : "SHA-256", - "content" : "766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7" + "content" : "7b751d952061954d5abfed7181c1f645d336091b679891591d63329c622eb832" }, { "alg" : "SHA-512", - "content" : "bb09db62919a50fa5b55906013be6ca4fc7acb2e87455fac5eaf9ede2e41ce8bbafc0e5a385a561264ea4cd71bbbd3ef5a45e02d63277a201d06a0ae1636f804" + "content" : "9a3e79db6666a6096a3021bb2e1d918f30f589d8de51d6b600f8ebd92515a510ae2d8f87919cc2dfa8365d64f10194cac8dfa0fb950160eef0e9da06f6caaeb9" }, { "alg" : "SHA-384", - "content" : "ca0b169d3eb2d0922dc031133a021f861a043bb3e405a88728215fd6ff00fa52fdc7347842dcc2031472e3726164bdc4" + "content" : "6ea24f814a9b6ece428cfd0535e2f3b8927005745ef61006b50fdb5a90126ee5ea05650155382b3b755c5bce38ef3944" }, { "alg" : "SHA3-384", - "content" : "9903fd7505218999f8262efedb3d935d64bcef84aae781064ab5e1b24755466b269517cada562fa140cd1d417ede57a1" + "content" : "9b1015052f0ec43f9be09764e131834157599611cb52f6fe591c4ac6a8ab4817518f2a4b8871e5e738c8678e93af5557" }, { "alg" : "SHA3-256", - "content" : "223fda9a89a461afaae73b177a2dc20ed4a90f2f8757f5c65f3241b0510f00ff" + "content" : "00559b4f4066b4917ba4fe2a6f23111eaeada321112d030910d218ced9084b5e" }, { "alg" : "SHA3-512", - "content" : "3996b5af57a5d5c6a0cd62b11773360fb051dd86a2ba968476806a2a5d32049b82d69a24a3c694e8fe4d735be6a28e41000cc500cc2a9fb577e058045855d2d6" + "content" : "9579c2f7e7516e177c2d493ccc9eb8150978cf19f6f09b28d116f6935239fd56dc6af2b62b3336f79b0b462445550cd1fb5377a07001a6f44aaab6a32fa2fa47" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0" + "id" : "MIT", + "url" : "https://opensource.org/licenses/MIT" } } ], - "purl" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", + "purl" : "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://findbugs.sourceforge.net/" + "url" : "http://www.slf4j.org" }, { "type" : "distribution-intake", @@ -2104,51 +2046,51 @@ }, { "type" : "vcs", - "url" : "https://code.google.com/p/jsr-305/" + "url" : "https://github.com/qos-ch/slf4j/slf4j-parent/slf4j-api" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar" + "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar" }, { "publisher" : "The Apache Software Foundation", "group" : "org.apache.commons", "name" : "commons-lang3", - "version" : "3.14.0", - "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.", + "version" : "3.18.0", + "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang. The code is tested using the latest revision of the JDK for supported LTS releases: 8, 11, 17 and 21 currently. See https://github.com/apache/commons-lang/blob/master/.github/workflows/maven.yml Please ensure your build environment is up-to-date and kindly report any build issues.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "4e5c3f5e6b0b965ef241d7d72ac8971f" + "content" : "48b9886957920a4cdb602780ca345087" }, { "alg" : "SHA-1", - "content" : "1ed471194b02f2c6cb734a0cd6f6f107c673afae" + "content" : "fb14946f0e39748a6571de0635acbe44e7885491" }, { "alg" : "SHA-256", - "content" : "7b96bf3ee68949abb5bc465559ac270e0551596fa34523fddf890ec418dde13c" + "content" : "4eeeae8d20c078abb64b015ec158add383ac581571cddc45c68f0c9ae0230720" }, { "alg" : "SHA-512", - "content" : "0338b50767166e5746ada6d6aa2e071e7221d699323bfb629f7f204b294c1dc4cad140610a129ed751798443b43e74e0818989c7df7d33c5915aa29742be9ba8" + "content" : "c2c9d497fc1be411050f4011b2407764b78aa098eb42925af8a197eabdbc25b507f09fb898805e9bed4815f35236a508ee5b096e36f363df4d407232d50fc832" }, { "alg" : "SHA-384", - "content" : "908d0a22dc17aaa04caa5104cff7cad5b88b77eecb78dd5b3b3fefa22ff71ac50a4fb9e31c897ac243f9d841e4b3453d" + "content" : "4fb3f101106e4ce3666d5c15d276ba86f7683a0ef35f0384edfcd579ea454275edbb7400795d265ec3a38e39997e79b8" }, { "alg" : "SHA3-384", - "content" : "8a7f2e061b998780870eddd571620fbf3d3c70bcb54e24539d0db504f59d65bc6bda58136284498babe29fcc5eabb7a6" + "content" : "aada7e3612cf3f6190a19fa7c3db74df1e13ec56b300be9bb4317d261d5877c84ab59ba9a09168becdbd82cd41961395" }, { "alg" : "SHA3-256", - "content" : "022bf1f8039fcea717e9e34dd96eb80cfff05b43c9cbb76e9739b2421e2d027c" + "content" : "306d286d0bd7549c203cc802fd755d354c4f7926fa023f4e83623ba1a6261250" }, { "alg" : "SHA3-512", - "content" : "0bcbc4edce974ea970c46e2da12ec98d9fd962c2cf64f757ac97136dec5623ca52af0c225895303c17ffabb57090e6772d7bd326d5e7438cef5454f8bbaeecfa" + "content" : "f6f1ecc684e309d7b9fc5c343792508fee935cd2119d962721662c5af88e4864ba6f47a863e083714f315f926c156de1970cd2fb577449bdfdc7bf98a4a451fa" } ], "licenses" : [ @@ -2159,7 +2101,7 @@ } } ], - "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar", + "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", "externalReferences" : [ { "type" : "website", @@ -2167,7 +2109,7 @@ }, { "type" : "build-system", - "url" : "https://github.com/apache/commons-parent/actions" + "url" : "https://github.com/apache/commons-lang/actions" }, { "type" : "distribution-intake", @@ -2183,50 +2125,50 @@ }, { "type" : "vcs", - "url" : "https://gitbox.apache.org/repos/asf?p=commons-lang.git" + "url" : "https://gitbox.apache.org/repos/asf/commons-lang.git" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar" + "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar" }, { "group" : "com.google.code.gson", "name" : "gson", - "version" : "2.10.1", + "version" : "2.13.2", "description" : "Gson JSON library", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "df6097815738cb31fc56391553210843" + "content" : "a2c47e14ce5e956105458fe455f5d542" }, { "alg" : "SHA-1", - "content" : "b3add478d4382b78ea20b1671390a858002feb6c" + "content" : "48b8230771e573b54ce6e867a9001e75977fe78e" }, { "alg" : "SHA-256", - "content" : "4241c14a7727c34feea6507ec801318a3d4a90f070e4525681079fb94ee4c593" + "content" : "dd0ce1b55a3ed2080cb70f9c655850cda86c206862310009dcb5e5c95265a5e0" }, { "alg" : "SHA-512", - "content" : "7503e4b8d05c6cc0ecb3a94c5a2e070e049083a441003a79a0cdf474f4286699b4ba1d2a655ddabb8ba10c50e7c36a7045cccdaee465166d4630db647aba2727" + "content" : "8974a052656d2e5ec968b6bac2edf51413ffc62040fdc65f14f00597e738ab544d22487f8579ba90618b5a7f94ef33773510fac67b408fee6ed274b38f3d9947" }, { "alg" : "SHA-384", - "content" : "48a4786bd6e1867f058ee4fb676fc82d9d9f64a6d7420d4a47ae2398504c9de73222636614aeb4a9fbf10ee143d72226" + "content" : "98e8afe5b23c43b84e7a57e0e27f683a182fcf97ee3eeb6a1311582f7fecd846c806ffb092b620088dc03d256d8eaf27" }, { "alg" : "SHA3-384", - "content" : "3df9a0332c2766124fe7c915cfea665d2e318ccaa7212415fabd9e93e6eb77de538725fd2ef313cde46f6d814c9566ea" + "content" : "d61d6b1cf6997c75287f454e536f855db8404e5fb9d0b8faa4dcc1e7a60ffefc05c2f92f3514e091808a8677b29f3619" }, { "alg" : "SHA3-256", - "content" : "d3374006d76d4f9acdf3d3a1a4f47899570f52442b2188f80c09a74f22139ecb" + "content" : "1c051cfe5e630b35d003f96e135de7c5d5cab145b6e1159143570cb246426a0d" }, { "alg" : "SHA3-512", - "content" : "2b10c2f4fe39d8712b430ff171823d7172c0a06685c1eb7de511e90159cec0e094fb2a9b50b747c5b039cb10f1fce9edf82ecbf9c47f76a6f31c4e3cb7586cce" + "content" : "55ddee7f6c1659ffa82e5c308a0181b459cfeb3442f1f9868ff7e9a3c83376bd2ad527b16d5131df442ffd03d06c35dbd64458df6b02a111c1654f01db381ba5" } ], "licenses" : [ @@ -2237,15 +2179,11 @@ } } ], - "purl" : "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar", + "purl" : "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://github.com/google/gson/gson" - }, - { - "type" : "distribution-intake", - "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" + "url" : "https://github.com/google/gson" }, { "type" : "issue-tracker", @@ -2253,67 +2191,125 @@ }, { "type" : "vcs", - "url" : "https://github.com/google/gson/gson/" + "url" : "https://github.com/google/gson/" + } + ], + "type" : "library", + "bom-ref" : "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar" + }, + { + "publisher" : "Google LLC", + "group" : "com.google.errorprone", + "name" : "error_prone_annotations", + "version" : "2.41.0", + "description" : "Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.", + "scope" : "required", + "hashes" : [ + { + "alg" : "MD5", + "content" : "75e3b25da8b8a2136463c4674f5e49bf" + }, + { + "alg" : "SHA-1", + "content" : "4381275efdef6ddfae38f002c31e84cd001c97f0" + }, + { + "alg" : "SHA-256", + "content" : "a56e782b5b50811ac204073a355a21d915a2107fce13ec711331ad036f660fcc" + }, + { + "alg" : "SHA-512", + "content" : "e2eb4bf9f36f95a4d4c5ea344db5cd90a456e63bef8e52932b8f6f4ecfdd59cb2f6c2ce9e67b0070c82177e42885688b95afef591b16001f789b378f18afdf30" + }, + { + "alg" : "SHA-384", + "content" : "43700b378624aa37197ef03a6b5ea40b5fbb6c0aa667eadf810ad36f0707dffaf3ea23471f2553327c3f5644cc875ee7" + }, + { + "alg" : "SHA3-384", + "content" : "8bf3293cf4b72c9a999948f8812190636ef3b0c35bab8dbf9a54c263eeab2a3b3d0774fdcab52c6d114551ff74a8aea2" + }, + { + "alg" : "SHA3-256", + "content" : "2ca1a59f4fdc37a3c83501542c63842fa4fe40c06f69a59a2a072e4af442a16a" + }, + { + "alg" : "SHA3-512", + "content" : "6d1f419996b15e5a2bd9b268d166046e38fe9cc6c58fe56aaacbe71b95e3db8c8fe1d226e7f549ea227956feaf3087706bdfa79930fe432298bba9ec06c26a90" + } + ], + "licenses" : [ + { + "license" : { + "id" : "Apache-2.0" + } + } + ], + "purl" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.41.0?type=jar", + "externalReferences" : [ + { + "type" : "website", + "url" : "https://errorprone.info/error_prone_annotations" + }, + { + "type" : "vcs", + "url" : "https://github.com/google/error-prone/error_prone_annotations" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar" + "bom-ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.41.0?type=jar" }, { "publisher" : "SonarSource", "group" : "org.sonarsource.java", "name" : "sonar-java-plugin", - "version" : "7.33.0.35775", + "version" : "8.18.0.40025", "description" : "Code Analyzer for Java", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "1b7d9cc6384c6be9b2b2be09d39a4409" + "content" : "b1a9179feade38e76fb3bd484426ed87" }, { "alg" : "SHA-1", - "content" : "74549fd0b22373ba0db5f5d8c9e83c4e1d4859d6" + "content" : "869cc6db9898899450852a5d89e77649dbc2e545" }, { "alg" : "SHA-256", - "content" : "84d7f2cce4bf4e66bacd053fd350489792519d83c292c2f4d5d8df0404450959" + "content" : "27dbc832bbeb28c70947d4d35fcc4a36b384911761831d8d5fc947cc1732d114" }, { "alg" : "SHA-512", - "content" : "f70839584286b4141cb252727f299be7a6f27cc8714d66b9c8b4a97d19030c5e39277ed85019cb2ffd9cd59f4b5c7780dd2bdd8cccd14d49a7aa618640069eca" + "content" : "b38980fb48ee7720a297190197e1ff20025ccaffad858a195234d4747773f4ed2ff2806b253ccd9d2121cddc71d1ac1fcc75ece9a07365db2089df89773add48" }, { "alg" : "SHA-384", - "content" : "ab79904167297307834e85b850b012fbdd22d6dbb938567ca8525219f8cd1cc2b725cc9ca781bca94dbab340580130ff" + "content" : "700d2a57ebc1672779fc11da69c29c822f8b0382bfb07afa5ef984abd2e38863b1ce8c2129c3ad173f796abebc14af96" }, { "alg" : "SHA3-384", - "content" : "5b177240092d00c9399f08b3148b58a299f0bb7a2a82458e5d4f4d5d0e4b5f6eba4f8b6f82c02369e8343c4bb0aea360" + "content" : "de424a453da7d8c708948d8bf9cffcabb6f00fac592f0be36b3d53fa41b95bc42ab6e1fcb4525c3c15793de00ad34478" }, { "alg" : "SHA3-256", - "content" : "f5829afa58615feeb89cdea0b96fa63ffda9c1401d5ac33d1420398ff42e59f9" + "content" : "3f2edc3ae30c79ac6e5db6bc7f968dd164f252b173bd3780ef1e06f68fec2962" }, { "alg" : "SHA3-512", - "content" : "4dc73ffee4b763a67a89b13a7574c03c9b7bfd08591088c30c64f9cb2aacd028d9c1bbbb4e5a68e5751635d9a3547e798eb4577b555187f410476a38e10ed9fc" + "content" : "73060df15758e595f9ad23967b9632b3b25584660362b8a660c699d7bfa092927edb2334ec711a2eca8394b03f0d32878e64b6b20411816b239f808747e7bcc2" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.sonarsource.java/sonar-java-plugin@7.33.0.35775?type=jar", + "purl" : "pkg:maven/org.sonarsource.java/sonar-java-plugin@8.18.0.40025?type=jar", "externalReferences" : [ - { - "type" : "website", - "url" : "http://redirect.sonarsource.com/plugins/java.html" - }, { "type" : "build-system", "url" : "https://cirrus-ci.com/github/SonarSource/sonar-java" @@ -2329,65 +2325,61 @@ { "type" : "mailing-list", "url" : "https://community.sonarsource.com" - }, - { - "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-java" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.java/sonar-java-plugin@7.33.0.35775?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.java/sonar-java-plugin@8.18.0.40025?type=jar" }, { "publisher" : "SonarSource", "group" : "org.sonarsource.java", "name" : "java-surefire", - "version" : "7.33.0.35775", - "description" : "Code Analyzer for Java", + "version" : "8.18.0.40025", + "description" : "Code Analyzer for Java :: Plugin to import JUnit report files", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "ebad97c089ab298bbf410b83645b5c91" + "content" : "8ec0e95937cd6bad70824f4fcbcdfd13" }, { "alg" : "SHA-1", - "content" : "1d6e25230cb5a0818e76cbf250b1f443c1117fe9" + "content" : "74166214d6bc038b62ac39fb6068ee92a7cc2377" }, { "alg" : "SHA-256", - "content" : "547a33116a008789a640ac520aca61b4aee460baf32d880f35ecbc247be17cf5" + "content" : "e5b3e323d65d5d1e07c67f2a3c231d976665dd36a755e4a25a529e020ecf246e" }, { "alg" : "SHA-512", - "content" : "79967a8394b8bada006fe03ed3519f73f9f4856d09cfaef3db91ab1e0dbd828bb9c69178a8151b678420e95489ace27ce9a59693be65fc3511696b446118c572" + "content" : "5f8666b8cabc3605c88d1066b3a4f102677a4592a055cddbd0857667a4c97da0b5963d4b6e9b9443bfa9a9f8eb5122bea5230c54d1948a8829137e0adfda2c53" }, { "alg" : "SHA-384", - "content" : "a3926f55e7e691e558e8fd2bed7da6f71cae00174987d108c5ccb5e4bff67052c1a7294ff83f93fecc89f0d37e72d2f2" + "content" : "7f91179e70d48c4f157b7c21e2d66043f197f5e77e93ca22cc514121f8aeb904f0be2d41cca33e026b79a6954b93620a" }, { "alg" : "SHA3-384", - "content" : "197a92ee27d6b823fe39f896604e292864f8e563ee9eebc8b7b8f98b5811c3bd3d31d1d991f91f305d61e78376c792fb" + "content" : "1181d83f7f281f38d1fd32a113cf36d0aafc3315b0f96394d1509a55cb71107a32dffc689991f08ea34d24afa146de4d" }, { "alg" : "SHA3-256", - "content" : "421298125883242fc4173246fd9f114c55e086270f0482a5b92f88462bf18f99" + "content" : "ee3151b15fa3040368071c28b161c21ffb9d0f0053ca3a869a8633790a8dbcb6" }, { "alg" : "SHA3-512", - "content" : "ff3c88c85a17e2983655e522450641dd191aa2f8818734af99b576778662e7025c6d635c6edc3052b3c42415693b7ba5c2137c7cac7140460d9405fb0d2780f9" + "content" : "94b7e5bc75cd127797485f48d5acca3853cefa2e8c433487268f12b177cd06e4aa4783f009f7a835099f406ccf1a22b69d0c3c523f3ab84fe8b348da312bd677" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.sonarsource.java/java-surefire@7.33.0.35775?type=jar", + "purl" : "pkg:maven/org.sonarsource.java/java-surefire@8.18.0.40025?type=jar", "externalReferences" : [ { "type" : "website", @@ -2415,7 +2407,7 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.java/java-surefire@7.33.0.35775?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.java/java-surefire@8.18.0.40025?type=jar" }, { "publisher" : "FasterXML", @@ -2491,52 +2483,52 @@ "publisher" : "SonarSource", "group" : "org.sonarsource.java", "name" : "java-frontend", - "version" : "7.33.0.35775", - "description" : "Code Analyzer for Java", + "version" : "8.18.0.40025", + "description" : "Code Analyzer for Java :: Front-end (Java Parser)", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "43bc91e0b5a11258625288f075b54633" + "content" : "a30b3194ba4e4aaf19e64afaf2c0cd9d" }, { "alg" : "SHA-1", - "content" : "2f748efd6e152c3526efd52a446cc8930381a16d" + "content" : "6c781ad5452a9f6c40efa651ec1514efd4956de0" }, { "alg" : "SHA-256", - "content" : "f22c60ed403f37c5378f2241c110d5f1427d9f8ac88710236a1662887a0961a5" + "content" : "6da24fc369a912c40bad484b580d15e8df7fd4a603e999b79952c1e88f1a10a4" }, { "alg" : "SHA-512", - "content" : "5ab1acc211dec17121948a678e59be6f050b1ba5360bf93fb724b51ff6160a29892c3847e5b0ad1deb450472bbdd5387f28403504670537b82477348dd97ca41" + "content" : "77fcb592867445be61fb472dc11eb2ed91e4d7675f6050728fe34fef4488bad75cf5fbb128bdbe6874820ece7e752f684065b98a6b0690bcbbc081f0efdf7a9c" }, { "alg" : "SHA-384", - "content" : "9d57998dcddbcbbf9ebcf79a68b928ce6aa9c8770c2b7565771b457ed299545f5ddbcc99a13889af53ab12e391c618d6" + "content" : "827447252ad585c8ef98e9f737d2b5ec4529f6f68f0fd571bfae08f3264186a4a5c9d864b488b66d933877c8d13f7863" }, { "alg" : "SHA3-384", - "content" : "64b3e663d553d1c3aa38d9e3b34cad8b38d440dc937bdb6e80edab6621f3c519d38ce4ec04f5353bf7e103cf315a808b" + "content" : "2eaeb68497c50d4bcd38ba010ab33f4833310fdf4c057d32ce622f01febd34d37d4b353b31ad53040a6dce7b1c287bf6" }, { "alg" : "SHA3-256", - "content" : "3febae6771046e4a5909ec72a2b6cd1749f384c910f3a090443a26d4651a1953" + "content" : "a2c28164e5d0c37e00f10f6b5187a6b8c31f87d2d3d86b12f9721516f91034e7" }, { "alg" : "SHA3-512", - "content" : "7555011fd0167dd38b798556104d02f2c5bd4b7e035065234f44ae22c7779c1a7fef4f3b17769d49deaf0635c99d211cb219ffac05da6c50ae1313f032565526" + "content" : "9163b1eac48b627a86db9c7b93fe258657561540fb605d926c645cb59e82fe6f72d1fb7d97120b4bc1488e27ede2420dbacb1ed021ff76642d10a2bc3cc54612" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.sonarsource.java/java-frontend@7.33.0.35775?type=jar", + "purl" : "pkg:maven/org.sonarsource.java/java-frontend@8.18.0.40025?type=jar", "externalReferences" : [ { "type" : "website", @@ -2564,47 +2556,47 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.java/java-frontend@7.33.0.35775?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.java/java-frontend@8.18.0.40025?type=jar" }, { "publisher" : "SonarSource", "group" : "org.sonarsource.java", "name" : "jdt-package", - "version" : "1.1.0.34", - "description" : "Parent pom of SonarSource public projects", + "version" : "1.6.0.160", + "description" : "Packaging of Eclipse JDT Core for SonarQube Java Analyzer", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "b37dc58a62e2d0cf93c0721fd974c31c" + "content" : "1df75f474b6bdb538899d8704b84757a" }, { "alg" : "SHA-1", - "content" : "505fc262c9e9347ff10f5c2e095a008db26a538b" + "content" : "1f8abb9d709c6ba2ab7ce3aa933857cb3735a1ce" }, { "alg" : "SHA-256", - "content" : "7ac622acdb900de5bb04529b822412731308f1f02a610e596b8a7789c28bde07" + "content" : "5efd84c8e2e39a310e9139b503355e9f31eeb3bcce779860ce96944096cf064f" }, { "alg" : "SHA-512", - "content" : "c264a6a75e00b39325e2be6e9cc4cc9903fcbb97e1e60766f09a42bad4d00ef0bc76b741a9c76ca76bf60fe0052987362f4f564a78e0ef3a654fdad833a00cf4" + "content" : "fcb097a96b7c6903ed8e50c95cea915cdb4ab2f4398869b812489d8f639509f970646adcd66afc8004b0c14807e05510d4406d7215726775695b0abcbe602dc5" }, { "alg" : "SHA-384", - "content" : "1f17c8e14bf19d6f93cd61f745ca681e2bf3ec5a2566a9233553e7d2c71f7896c7ee770c37db46536b98fd5cbb19f687" + "content" : "e500ad2d02142aa1fbbe1b9436f9e5bbb74d5c208b0c6aa0191725b126c9a3a4d2a21c708b2bd26a4f11a9ef880fbe07" }, { "alg" : "SHA3-384", - "content" : "40d04d2a79475f774b6a2b2a08b02387e2ac2c17e4b9b220fc1e59baf0554c569573d9abe22af1cff8e5fef69b4a43dd" + "content" : "60bd6cd889de6164963d49fe557e13456d962893e74d56bda559c6b57bd18ab1e8a065e64a2d8317e13dd754052d3f23" }, { "alg" : "SHA3-256", - "content" : "7bdaedda0da1edc3e63e8e62bcf3651b4d4169c24efa0baba01c368d2c6b7b74" + "content" : "32c6d9249b541d8ff7b488f8c584d8f068caace22037ec0e2340e6e850b919b7" }, { "alg" : "SHA3-512", - "content" : "11854f8cb06c601f4e54488b0943a8eac7790dfacd3355e52b274e8a39fe0aec36fd25da6c5711c7c294eaf540958c88013a4b57e7399f76c51b9e75d451c0a5" + "content" : "8378364906e74189f4255964961c90273743b41af7859c8bb946a092965b5787f37718ce6dccbed3cb531501361293fa96175327bd62d29a7ffe18be70caab78" } ], "licenses" : [ @@ -2614,7 +2606,7 @@ } } ], - "purl" : "pkg:maven/org.sonarsource.java/jdt-package@1.1.0.34?type=jar", + "purl" : "pkg:maven/org.sonarsource.java/jdt-package@1.6.0.160?type=jar", "externalReferences" : [ { "type" : "website", @@ -2638,137 +2630,58 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.java/jdt-package@1.1.0.34?type=jar" - }, - { - "publisher" : "SonarSource", - "group" : "org.sonarsource.java", - "name" : "java-symbolic-execution", - "version" : "7.33.0.35775", - "description" : "Code Analyzer for Java", - "scope" : "required", - "hashes" : [ - { - "alg" : "MD5", - "content" : "232f45616c57791e1376b309b99d6bf3" - }, - { - "alg" : "SHA-1", - "content" : "ea12ce7dc955bbafca59c3463ea1f44ad82e42ab" - }, - { - "alg" : "SHA-256", - "content" : "8ac28a32e08e60c451cc153bee71bc028f3c72e4ab0e3a9c91bdc5b131ad0f57" - }, - { - "alg" : "SHA-512", - "content" : "6ad5b4c6b85757346f203924c26e908d5557ab4d03147afbf58e33e0f25fdb3999f94aee6973366d2441565466473c30c0861a1512c79f240cd35a9a97f0d35e" - }, - { - "alg" : "SHA-384", - "content" : "dbc472dd1173bcac5ba03e4a1165ed35bd7db93511cc8b99e5407aaaa65a56a92027d79c551a4df7120c2a8d87705797" - }, - { - "alg" : "SHA3-384", - "content" : "1912414c5430f6b4711e20bb73e1076b5ad85babae3e8374fbb65f1dd3232ae380d9bc52891184befed50777dace89f9" - }, - { - "alg" : "SHA3-256", - "content" : "a5cbfac546a7aaf0a2211c3f1beceb36e2ed3384c9d7d4ece2195d2932fba345" - }, - { - "alg" : "SHA3-512", - "content" : "4f6974c7877b90dfb0acf4a6f8f412ea4f391164165ce3de75973c871e356a55fdc5ad4de3322a7e30e57f4d7caa87871b3671a63e19ca51a6f5b3cec949d281" - } - ], - "licenses" : [ - { - "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" - } - } - ], - "purl" : "pkg:maven/org.sonarsource.java/java-symbolic-execution@7.33.0.35775?type=jar", - "externalReferences" : [ - { - "type" : "website", - "url" : "http://redirect.sonarsource.com/plugins/java.html/java-symbolic-execution" - }, - { - "type" : "build-system", - "url" : "https://cirrus-ci.com/github/SonarSource/sonar-java" - }, - { - "type" : "distribution-intake", - "url" : "file:./local-deployment" - }, - { - "type" : "issue-tracker", - "url" : "https://jira.sonarsource.com/browse/SONARJAVA" - }, - { - "type" : "mailing-list", - "url" : "https://community.sonarsource.com" - }, - { - "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-java/java-symbolic-execution" - } - ], - "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.java/java-symbolic-execution@7.33.0.35775?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.java/jdt-package@1.6.0.160?type=jar" }, { "publisher" : "SonarSource", "group" : "org.sonarsource.java", "name" : "java-checks", - "version" : "7.33.0.35775", - "description" : "Code Analyzer for Java", + "version" : "8.18.0.40025", + "description" : "Code Analyzer for Java :: Analyzer's checks", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "eaeb082ff51df115aaf0f3116faf4b84" + "content" : "1ac68532191b336b9c760c596dbabf9f" }, { "alg" : "SHA-1", - "content" : "f11567226d2a4c2efcadf5545c3e0b1bb5f8142c" + "content" : "6165e4a7c0bc4dd5bd6bdc8b74184f167bb5436b" }, { "alg" : "SHA-256", - "content" : "1eeb30e79298fa3cff7e7265a0d313a5572bdd726b8d83e83dcb1d144421c24b" + "content" : "78b31d837169a372353c0b91ff2776590039996d8d50dbf033b774f6930d3b8c" }, { "alg" : "SHA-512", - "content" : "0034e5bf2e95fb181c476a3d1a5b111efcd22131f62d75eb6daf21da645b4e3ad8e35096274e3898e042a7463d831caea46a7840f843c10442d5f48b75041687" + "content" : "07b461fd5a923bbd6a60379e61fc73924ad7bc3e1623257fbb16fee3390eb61e0d930dd80cb4e290da538c958546d8206a66fb433889665312df60b63aeccb1f" }, { "alg" : "SHA-384", - "content" : "c2e5daa8bb17411f2ad282755de82c02d98a4940a81a76c26167713a1b5f55f7551875ae8459b5b77934d42f37f5e8e5" + "content" : "d1227c576fd2372fdcb0240ef2c0fc5497aaca1251df248eabf8e767765e8023ad5e727fecdd3ade31b5af2022a9f519" }, { "alg" : "SHA3-384", - "content" : "7de6a308f476947ec7a132968be161ea98ab1f135d6286129fde8ee5f8a1044a295c9febf482d7f5a5f83b65e1ccd36f" + "content" : "5a6b215207811609717d9b39ddaa332369918cf91fbe3bba94ebfff23408624b1bade52b5cf03062d16364fd9c792ea8" }, { "alg" : "SHA3-256", - "content" : "8033896b6e57169054031f9d386f00cc0194f1cf930782becea1b12a5f5421f7" + "content" : "030d53c3182415e2896ffc5898b155cac52587a006b327a51c6c5ab59714c012" }, { "alg" : "SHA3-512", - "content" : "789208a299ff2cbfe4ac9f6c647b0d703ff77040fce20e269b33a6d0712011d214704496d27ee8b63adf5778e4d8b58fde286e5a8f043f3b1813ec4c15a06fce" + "content" : "a5a4a3f41c1ba65066554808baeff26551c033ccb31ec561ab622e535984db16d9742107f5d07b7d3bc6f25ec92c410600eca7cdf1d9e36fd23a6246d1220db7" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.sonarsource.java/java-checks@7.33.0.35775?type=jar", + "purl" : "pkg:maven/org.sonarsource.java/java-checks@8.18.0.40025?type=jar", "externalReferences" : [ { "type" : "website", @@ -2796,58 +2709,58 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.java/java-checks@7.33.0.35775?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.java/java-checks@8.18.0.40025?type=jar" }, { "publisher" : "SonarSource", "group" : "org.sonarsource.java", "name" : "java-checks-common", - "version" : "7.33.0.35775", - "description" : "Code Analyzer for Java", + "version" : "8.18.0.40025", + "description" : "Code Analyzer for Java :: Common utilities for analyzer's checks", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "377bec0957fff4818de779185dc9d46b" + "content" : "5514880c7701b527cdcc574edae88dc7" }, { "alg" : "SHA-1", - "content" : "64e48e3a5d4bdc7ed674b21f8ddb393e548c9947" + "content" : "5e3906963a6aee9229c0d5735ec5b0caba9c7a36" }, { "alg" : "SHA-256", - "content" : "a5db4cf127e982760c049faf6a3df99fafccdd5e1d58b59afba30b206bde96b2" + "content" : "89aadedaaa0bd0e788c55b3a78a5b086fd0dbc4935e1ca9e8d15266c81dbc1eb" }, { "alg" : "SHA-512", - "content" : "ebb84100013c73fd13cd502e5ea56a557568f5404b1b60d015ba5529c955c7ae70c612437cbb249068c7437d2dd4ef7f249a20f4f2090ea22c414123df062838" + "content" : "c7e5eea32cd08b004728418429b1b1255751a50a33f5a58712ee7ebddb2f15883cbbc9a999d3d388274662e1b398f2121bdd8e28465a7b86b5702be57a211e0a" }, { "alg" : "SHA-384", - "content" : "a3e9a9cf69e639b84e22ef84a9937d8c8e829628ae2b203ec722394ad3b50e0c07fc1b6265d4bf8df3a86cac424125ef" + "content" : "74603a766b61c433df59fa6df8c140018dc181c84af0476242c22c4fefea6f3437cde005c253c21301be0209797ef6c8" }, { "alg" : "SHA3-384", - "content" : "abe29bc0a84ab6ec1dc55fe8d349f72e37865e46a7eb114d85328882711f00f344cb7252ef9adc449009b62a4350f7bd" + "content" : "a9a28120b1353f47a2aff96a032d95d8988eb0b2c940bff0bcef27dc352b19950d0b1eb0de8a521f8c232cfc0b3abea5" }, { "alg" : "SHA3-256", - "content" : "2bfc0c71aef10df37be7c91fea1ab5e1d90f018c859aa7e3f0844ce2246137fa" + "content" : "eeb22c67995bfa542c898dc47195590c37da85116f30df4b367bd970c162084a" }, { "alg" : "SHA3-512", - "content" : "0e7d60391152b9fbc7b7238967dbf3c4c4c32e776f065b65e456c5ba5b88550723709c82125334fb749167231d602fd6bf3c610a7e83e2d34f3e339f139f71b6" + "content" : "27adbd9adbd039453b3f8fc762117222650d45147cfb4ea26ad6daf65b994fd618f4b5a2173f0860fdaa5b1e096af32faa100c902377b811892d8664c094684a" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.sonarsource.java/java-checks-common@7.33.0.35775?type=jar", + "purl" : "pkg:maven/org.sonarsource.java/java-checks-common@8.18.0.40025?type=jar", "externalReferences" : [ { "type" : "website", @@ -2875,47 +2788,47 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.java/java-checks-common@7.33.0.35775?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.java/java-checks-common@8.18.0.40025?type=jar" }, { "publisher" : "SonarSource", "group" : "org.sonarsource.analyzer-commons", "name" : "sonar-analyzer-recognizers", - "version" : "2.8.0.2699", + "version" : "2.18.0.3393", "description" : "Shared code recognizers", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "f9c0e3225c8cd152cd8385ab211c1211" + "content" : "c8fea2140f3d18005b73ba0cd39ac3cf" }, { "alg" : "SHA-1", - "content" : "10fa0ef13f09632cc2d8a97990512a36252b2e2c" + "content" : "f741f10d470867172afa510990c16877ede70222" }, { "alg" : "SHA-256", - "content" : "5ba42aefbd8cf715575a9f40293a53b47cc82ba67943215a5382487e4042da50" + "content" : "0b4ef58f3bba93170f115ec2a73eb5596276abc21219b7fa733240b6bc3f7d52" }, { "alg" : "SHA-512", - "content" : "0659ad40421f8be0d492fedf4cee72c531d264d8b9aa9327e789b9277de0a5b037c0dba25a25bc1efb5a858a959941e7e6fa3c7e166ff908db1ea272b5f05486" + "content" : "8edf444d67195ff181307c7f27744833b7fa47ff54ee2c687c92761cd7e0900e302f71541d2ccb84a0436ac04fc28ccc79c4700452455db6c155c6ac774bf26d" }, { "alg" : "SHA-384", - "content" : "7b629d1b28bab3012d347760905c7235e579c868460098c2f4e9e9127e3eef1fd08be8f8cff2400552a2f6ba3c735d18" + "content" : "821446711dedcdcb0a20bae33560f7f5d86ca528b7277170b3fe539bc20ab41f90096c6d6cb6cb9b67a7738cf56029fd" }, { "alg" : "SHA3-384", - "content" : "e3f76485b0c60e07e0a8d93716847e12279c8914590d06000a95df859b952d2b1348a2c1b74a434f92aa36ae711ad858" + "content" : "c036fd79d7730afa956adbabd42edfd0fb5473e5b4534d2ecc480b2b587099d923ee97a9ee51e40e1e027a413fb7b33d" }, { "alg" : "SHA3-256", - "content" : "af4025e146ba6f1982d1351d1adcabee0a2acb8b90f7a7e8e76f019e408adc1f" + "content" : "aafdbc0fc6e44a212ee7cb7eb10d9cb4b23ceb25a532ea0a6508ea32141cb581" }, { "alg" : "SHA3-512", - "content" : "ec20e48bda7e839e8c30bdb52156bd42a856f176282c3b1fd3241a268e1674b582acee92f83d72b0247a03634e46a2a740326dda9c089b704605b45c69322606" + "content" : "747d1f9f8a556ff1c67bfa46aa1e8e8b9c7b76114e141845751376c7bb34d841349491766e6ed221938f6d64e8aed91663515d23283668711177d076f12eb852" } ], "licenses" : [ @@ -2926,7 +2839,7 @@ } } ], - "purl" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.8.0.2699?type=jar", + "purl" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.18.0.3393?type=jar", "externalReferences" : [ { "type" : "website", @@ -2950,47 +2863,47 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.8.0.2699?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.18.0.3393?type=jar" }, { "publisher" : "Spring IO", "group" : "org.springframework", "name" : "spring-expression", - "version" : "6.1.5", + "version" : "6.1.21", "description" : "Spring Expression Language (SpEL)", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "1f268a22bb7c0cb80958953ffbc21125" + "content" : "9ea32c5135a59a1264f13d8f8d5f355c" }, { "alg" : "SHA-1", - "content" : "7e21cb1c6bbef1509e12d485b75ffc61278d9fa7" + "content" : "72da3b3521a6788e143a47b0f7273ce7cf98c6f0" }, { "alg" : "SHA-256", - "content" : "1f37b50dcaf091a43bb10d946178fff4082674497fd821438327815da14f7fd0" + "content" : "29597c579b6b051d0dd2f56775c6e0078ac5252eab5c940ae687bd5e1fcafbd7" }, { "alg" : "SHA-512", - "content" : "d5a13856a7f4619eaf1c9593f7739ec5cde37a555a98f0da4cb21aa591e87fb0bcdbd2a5da67d9b69a0dab0016f806c9d3f096bc8841c32bb98810daf1e5e7b7" + "content" : "e54e346271cbc327b138f7a16d6c086f68290688c293753cc5513bc26a20ddd91ee194de32d91122432dae785692468d9d68971202e05c0571a65a44f0a518e1" }, { "alg" : "SHA-384", - "content" : "1e0c29ba819c5c8f5eb278a8f308a0119a476e81998ff5c7658b150352d357ef53c408566bd7a0b8023b7b41cabf4636" + "content" : "eb0349b3f3b4952f088a4243ab58b7167087e01a719babbe15e54c25d5b6cc3e8f52203542e447a465c3002a3588e6ec" }, { "alg" : "SHA3-384", - "content" : "f9cefe146557fe266e6e38bc8fbe157c7ef10fc606edafaf901d393ab140d25dabf4e60ff79c6a45a83c7eff890d3cac" + "content" : "a2d39ba6e734731a7588f70fac0ab312d835674427c384e7bc7fde62340d2d1c48217ec0bbdc953b3f436550aa0dc796" }, { "alg" : "SHA3-256", - "content" : "ba29e269a74f3c452a64bd9e7a680c84c5c26b96397683c22435e4fcea8ecb9e" + "content" : "be4aa16518c2a8cae7deb0b7f867a2a4be88a7a9b3030db00558615eae43d27c" }, { "alg" : "SHA3-512", - "content" : "8de364ab79572c8d2af2dc22ea5768d323b7268e03ae977701024f17e6fede13f03e248ef44c6789dea3007723beb1454c7795b45f3834b6040510661b6dee54" + "content" : "c4e3742d1ba2111bc4b72c1f9fcebff0d47c8466dd732d5f66ef2c7303a60d7da4e1a63fbf469df27075bf0f5174302dfa921722079425540151fd5e16fdfbfb" } ], "licenses" : [ @@ -3000,7 +2913,7 @@ } } ], - "purl" : "pkg:maven/org.springframework/spring-expression@6.1.5?type=jar", + "purl" : "pkg:maven/org.springframework/spring-expression@6.1.21?type=jar", "externalReferences" : [ { "type" : "website", @@ -3016,47 +2929,47 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/org.springframework/spring-expression@6.1.5?type=jar" + "bom-ref" : "pkg:maven/org.springframework/spring-expression@6.1.21?type=jar" }, { "publisher" : "Spring IO", "group" : "org.springframework", "name" : "spring-core", - "version" : "6.1.5", + "version" : "6.1.21", "description" : "Spring Core", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "6eeff94b635753591e74d979ffc2f793" + "content" : "3c233d75937864d95e9051eafa9205f1" }, { "alg" : "SHA-1", - "content" : "6dae1b06ffacbb9abab636be2dbc6acd3b6e5d68" + "content" : "dcc8607ee792439389e19111d83737b6b06ca4ac" }, { "alg" : "SHA-256", - "content" : "476dac28509b3f47d0b5e895a639fa75ac2218f074ce214e44832a836c469f7e" + "content" : "0729b69e52ac8d9a8d03991315690f632bb0984620a0595e52580d7f3557298d" }, { "alg" : "SHA-512", - "content" : "067d31ab99c842a586fbc1bf7aa7ac9aad0fa36d70f0e5bdb7e355514d66b1f6106dbb74ce15959a8dff8223a3e447ae30735e40f376e67f0ef8b70ed1a85002" + "content" : "8d926d38d47cc510378bff4cbd59a951660e8b813a22ffe662490631eb0f85668b007a0ee6961f4a6db2a80dab75181e13196fac10076510dc155c897a6aa999" }, { "alg" : "SHA-384", - "content" : "25728b0246bc11715c8b1fec2a704b74a6c2bd6e41851b44aead5c76d0ad1493929bdbcef51dee8005404099388c03ee" + "content" : "b8d3fff87f154bd509d1844c68a005787729112fac80512fa5d6df43d32b1f2fde0bd33e6ba6038e5d57e6265c8b97e5" }, { "alg" : "SHA3-384", - "content" : "ba98714211e0a6d8337b876cd6452216d1752b5274671f476fa06a63931da1e8ff0d7d0b4105967ab68e6f967aa8b43e" + "content" : "d68af409a439cedb3b7da43946892d6012fb3000e849e929221a994cdd7ed1fd2791b1fbcc2b5903415ec6612f679cb9" }, { "alg" : "SHA3-256", - "content" : "70c250de2d49aec369e3abf959c980036051ca0f54ddfc774840c95a8eabccae" + "content" : "2a8bcfdbaae2b6c617f4896069b188e279faf8d169932c17f90c0e0ed4223fc0" }, { "alg" : "SHA3-512", - "content" : "c4d9cb5d1a7a738f6a762bd8f9a0fbd2455f3900e702b77d5d1d76079ab1b614b7993f992473ea57639a57fdb46e985a3b29191b3d8a18215b97e82b31cdb3e7" + "content" : "2890d9f8375e68786ea993d22ea2d9fd7c45bcbcce07949013857d7a3ff89da0aadb22a34493180c0d1fe905e744b453510b1f87631bbce8eda84c7844389884" } ], "licenses" : [ @@ -3066,7 +2979,7 @@ } } ], - "purl" : "pkg:maven/org.springframework/spring-core@6.1.5?type=jar", + "purl" : "pkg:maven/org.springframework/spring-core@6.1.21?type=jar", "externalReferences" : [ { "type" : "website", @@ -3082,47 +2995,47 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/org.springframework/spring-core@6.1.5?type=jar" + "bom-ref" : "pkg:maven/org.springframework/spring-core@6.1.21?type=jar" }, { "publisher" : "Spring IO", "group" : "org.springframework", "name" : "spring-jcl", - "version" : "6.1.5", + "version" : "6.1.21", "description" : "Spring Commons Logging Bridge", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "4b7724c57ea12f13ce3fc49a18209b6c" + "content" : "0e017885cab7225c3859aaf24d3a96cb" }, { "alg" : "SHA-1", - "content" : "896ae3519327731589c6e77521656b50ae32d5b3" + "content" : "fa75fc86c26dbbc6fb816e5b7aa5fc83f4494423" }, { "alg" : "SHA-256", - "content" : "c53540419e482242c815db6d6a8cd80af85a6a895e38329b9d9bd6b4616503eb" + "content" : "f77ae10f41eaf02bc94a6424a3bad1d80a58b168e6af032ecb40a474d9e4f82d" }, { "alg" : "SHA-512", - "content" : "0de5bdae17924ab55ed7e6e97acbfeb60406fa99b10c1fd8a391f9f81c475691638535a297636fb79b51f02cf07d98ac613049235e9fdbf1186672c8b64c5967" + "content" : "b0821cb6220914b2bc517f858d21c4a3b98b5a487ee94f29acf044153ba5a568a44fead4d003f71ffbad65f61791d01e33ec05859cdf2a3a1bb853469dc37753" }, { "alg" : "SHA-384", - "content" : "2844ddc317d6fed2c80c5090e3b4b976a063ad5fce4bf8dbfa7c1034cb647497a830142ff7e70b7eb0c8cf742a091071" + "content" : "84188cf73912ff5372b4ebc58fd0bc63ecc282240c896a987ebf3cfcbbc57cfeacd1a63ea5a9cd6fbcd3ea45e11a001a" }, { "alg" : "SHA3-384", - "content" : "dfc30f87671459ea2bdc8c25aa6ed814dd53a0ab60df4b98b44eb96ab28cd7bfce358c32b5ab8255d0c0d7ebba1a28b0" + "content" : "a787e5682a3d41e20e726caf3e0eabd9fd0b33beff448bdd8915c5d1755eec973d7e9ea229a806b00a1d969941364614" }, { "alg" : "SHA3-256", - "content" : "a7a4153deabf0b46852c6539f1d0d63bac5963eaf9ef73209097c3bd4b2118c3" + "content" : "9ab47bf24ddfbb2dbe03a02e131d4b9bd7ada2da72badba7a7fadd0363895247" }, { "alg" : "SHA3-512", - "content" : "62add3aa8ea534168ba2eb4e811628e35970e17a2ae350de376fd95e8e0d70045dc9f6748075bafe4f74ebec4278bb3e36243478e08b4329840c8f068b30cde9" + "content" : "3d537771c6060078daca6cb556d0a1571f9a685e0287c8c186f3f8e441ce0d7460040de7368c7a51d4dd99faa0d6216baa1013c8acc7f3b981eb30e25cccdaa3" } ], "licenses" : [ @@ -3132,7 +3045,7 @@ } } ], - "purl" : "pkg:maven/org.springframework/spring-jcl@6.1.5?type=jar", + "purl" : "pkg:maven/org.springframework/spring-jcl@6.1.21?type=jar", "externalReferences" : [ { "type" : "website", @@ -3148,58 +3061,58 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/org.springframework/spring-jcl@6.1.5?type=jar" + "bom-ref" : "pkg:maven/org.springframework/spring-jcl@6.1.21?type=jar" }, { "publisher" : "SonarSource", "group" : "org.sonarsource.java", "name" : "java-checks-aws", - "version" : "7.33.0.35775", - "description" : "Code Analyzer for Java", + "version" : "8.18.0.40025", + "description" : "Code Analyzer for Java :: Analyzer's checks for AWS", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "14dfa924e3e61569475db951d81dff71" + "content" : "8aed826c7d8696ce3699588cd6ff952b" }, { "alg" : "SHA-1", - "content" : "2af499d9be4ebd5d898db1eb13eb34ad3b2fb8e9" + "content" : "6cc1bba5a36b3eef6230e273866fc6dc309189af" }, { "alg" : "SHA-256", - "content" : "62148c334e45df290a958dd438ef662ba5fd29c4023de832d425e674f7c585fd" + "content" : "5ee06300e5427acf74b378cf181a697b548a477ffcf1edfc216ae5345e40c1e0" }, { "alg" : "SHA-512", - "content" : "f9365f6002c6a51295e7a00a4255ad9eb693d52de2e4c3aa0161e722c58f57a565f97bd3e03e53f3fcc2b1b1af3753471b0ba707e8416f6d2c21f17fcb1b7071" + "content" : "47ecef1096030771bb0c24c2b3c15ebe51ab8a6f66d76ae2683ea4b54821f9c914ecd694b877a186c26650db463aedfa57e9a172fe509de26ca4f0a19867be61" }, { "alg" : "SHA-384", - "content" : "45f68667d8e7543d39b51ebf451513bd085a573edfcee9b89c8154a61bda72d55f7085a1ccb132b306bb2dcebcb9b899" + "content" : "242495b1e08269988e57a0e08730bb23d18fe614cf37af2ede8aa489a7a3ad581c0d5f970b7d25aee2db35f658649c26" }, { "alg" : "SHA3-384", - "content" : "5a6ef9e7483108b215e37833d6d4321ae9ca11f2a2df09d02563d008228dd469e2ce9d9b307679fe16fc229a1a90f588" + "content" : "f8f74f485da5f891e8a98701cc7d7267548ebeb2d04861239a891547abebdda1951cc16de0003c60db18fa48ad9696f9" }, { "alg" : "SHA3-256", - "content" : "2c6b29354a7077d0a34a9c742a2e0a95310e2dbc40cab29527ec59aed9ac7b22" + "content" : "b60ad5ee6b83beabd93c21866b2bd05eaf340ead9ef9f4d1f38492546d103d89" }, { "alg" : "SHA3-512", - "content" : "d19b4dfeca42f8ff8821621d241b12aec49fd8012cac5ccffefac6bd55ca2dca60ef40ee15a81460051fbf1797631a34c70fb4600a9e4182a581f082b8c5028e" + "content" : "8bd74670d07ae07f638e31a27a8f8a00eb0fabd40337f3b601595c86769e31da58b969f08ca5424dbb48adc4d7c8477503a1d795cb8eeec3179f276273997685" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.sonarsource.java/java-checks-aws@7.33.0.35775?type=jar", + "purl" : "pkg:maven/org.sonarsource.java/java-checks-aws@8.18.0.40025?type=jar", "externalReferences" : [ { "type" : "website", @@ -3227,62 +3140,62 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.java/java-checks-aws@7.33.0.35775?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.java/java-checks-aws@8.18.0.40025?type=jar" }, { "publisher" : "SonarSource", "group" : "org.sonarsource.java", - "name" : "external-reports", - "version" : "7.33.0.35775", - "description" : "Code Analyzer for Java", + "name" : "check-list", + "version" : "8.18.0.40025", + "description" : "Code Analyzer for Java :: Generate the list of checks at build time", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "b07b7b394b1de4dadcdd41bf472bff97" + "content" : "523e390cec46df34c6686d8f61181bef" }, { "alg" : "SHA-1", - "content" : "bc9c1e1cb3f4abca42ddb1b6ffc027eb2fd4c68e" + "content" : "93c3737e36e776e9c9ba43293256d3ade559e656" }, { "alg" : "SHA-256", - "content" : "aabc8b03f2c9c042ad4d1d25ada8281dd029480e9f59831d98e91adca67fee08" + "content" : "aa62feaefd959fe9c4a75280ddbee6ffe9b59181296c521e8d876676812ddf5a" }, { "alg" : "SHA-512", - "content" : "b60270c2b3d038cc3b3387ba052a79c2e5fad1b0536a5a1f2e4bfa98da3046ae451503f7837a214359dd6c6052cdbdf5d8776fbab5648bcc31ac974830a6c16d" + "content" : "bba574e1f4a05a5fc7a70cb5f9deb5a1f68d8bcb6b2ad4859799e94ca18f622b15075f454e00e3d8fd5ac64827c06afc660ec73bc0db1402bdc3f5e4ebb16bbe" }, { "alg" : "SHA-384", - "content" : "943d62b27e66b0b7472c0115f9749fe109343ee1409eb6ba57ffd3776eddfb92bf28c4c1f664aefc08e891d29d5ea2e8" + "content" : "a87fc3e9946eef5166f6393ca2ee064caf3763d19e3415779f0e5269b267790a897485fb8cf085ba84f535e2112fbbe3" }, { "alg" : "SHA3-384", - "content" : "ff834b86b09d0b11bd4fd9da2245b52c76d540af4bbc858d2478f40444c2a632ca671eac45b65097c0014456a7d553ba" + "content" : "9e9584346c363abd4a0aad992c54f60dfec95d7a7e8c3cc2834d878c72d1b8a5460c834eaeafc6045a7115af424bcacf" }, { "alg" : "SHA3-256", - "content" : "b632f307cefea8b5fafe516db380b7160da28677ed0657db17332250ee40b26d" + "content" : "9ddbb48896bde9c6d4457d250d207daef592fe257f10ff0ed88cbb38990c9209" }, { "alg" : "SHA3-512", - "content" : "81ae57ff106ae7f468dfa23a5d7fd828915cbe1bcc6b21ba988a255287a7d40858979aaede906f3cf277f93117eb7ec919e003083622d061b3149a2d15eb765b" + "content" : "7a3b54a4fd3db04d97df4040f10c27fb9993071eed45f1caac906d989b213995fddd8b7e74b92d68c6cc99709fc69b789f1a55bd55d1226adccaf80493869b8f" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.sonarsource.java/external-reports@7.33.0.35775?type=jar", + "purl" : "pkg:maven/org.sonarsource.java/check-list@8.18.0.40025?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://redirect.sonarsource.com/plugins/java.html/external-reports" + "url" : "http://redirect.sonarsource.com/plugins/java.html/check-list" }, { "type" : "build-system", @@ -3302,66 +3215,66 @@ }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-java/external-reports" + "url" : "https://github.com/SonarSource/sonar-java/check-list" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.java/external-reports@7.33.0.35775?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.java/check-list@8.18.0.40025?type=jar" }, { "publisher" : "SonarSource", "group" : "org.sonarsource.java", - "name" : "java-jsp", - "version" : "7.33.0.35775", - "description" : "Code Analyzer for Java", + "name" : "external-reports", + "version" : "8.18.0.40025", + "description" : "Code Analyzer for Java :: External Reports Plugin", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "e0890ace531478ef8ac18849d78cd9e5" + "content" : "0a2d44b03fd1c355461dd30c436d3097" }, { "alg" : "SHA-1", - "content" : "a8cecb5145490f15b35742712345b5919726ad89" + "content" : "6374bd720414018d7ed56f80b2ed918ec94e6b2f" }, { "alg" : "SHA-256", - "content" : "ae1ee6f32a16217667ea46a973f7c93a6f66ef7052a2d1e24d6e8f78c02f96bf" + "content" : "38eb3bbdd4857c485d41a0a9deab123e2c9c4cba4e187dd1997efe72cdafdccc" }, { "alg" : "SHA-512", - "content" : "b7fcefd8fa7174db020947db1a41aff0e5c25191fbd8feb8c53438a42604a50b342ac072f571eaf6b0d54915e9106dc5bc6304d5899dbee90e20dcfc08139ca9" + "content" : "ec05b2b58d09641b89777d15383f8ec27873aa1e2d97977af5365840b322e1a3e38a8d65c71dd7bf5b87fbca59e49bfc6e71dc7400efad987c51dcc5e9bd5e89" }, { "alg" : "SHA-384", - "content" : "39420fa5bb00153057946a5b667877475bdb65923dd9af86acc6db63f3bbb9471de9735e4ed16a03b3c3a2c6da3118df" + "content" : "dfde96d508de66a673c9e13298c958dfc2c6fb32e85c0b42450b3263ba4f3a09a254d893f08ae4b9f39d707e4cee22c7" }, { "alg" : "SHA3-384", - "content" : "6defb43802dfd77c5a549fd7d28ffdf85711623dd24d28520e1e2d96677e47a69c5661029a028d7ca13ea3fa75697a00" + "content" : "41b976778dec610536e3b9eb679754ef9568cc8bb2beb7c7fe1d852c5d5879c682d8844a0c035ebe0b095626ea43203f" }, { "alg" : "SHA3-256", - "content" : "54265f768ea5687f500b148e81ac1c3a41c0ac1d9eeb3e2154ebe4507bef46f6" + "content" : "42ddf81281e703791ae6f8c8d8adcc96da58390d4cb4b49668b4d3e3d1ba4bec" }, { "alg" : "SHA3-512", - "content" : "8530ff5df32f8250d5d3a68e81bf4f1e0d0add2a69fe6c2de5dc94b01bbe2e99a86fec11494f4d95239040ee2f736ae305c94b23376475ea7c981cdad6054c85" + "content" : "586377b8e12c4b960ef1a3a5cf335e8e19db4da10de7346f140bf3eb56243229be4271603c2400a6bcedb87d06dce5f95cb11581e8eceb80e88a6ddb3e00a564" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.sonarsource.java/java-jsp@7.33.0.35775?type=jar", + "purl" : "pkg:maven/org.sonarsource.java/external-reports@8.18.0.40025?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://redirect.sonarsource.com/plugins/java.html/java-jsp" + "url" : "http://redirect.sonarsource.com/plugins/java.html/external-reports" }, { "type" : "build-system", @@ -3381,290 +3294,141 @@ }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-java/java-jsp" + "url" : "https://github.com/SonarSource/sonar-java/external-reports" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.java/java-jsp@7.33.0.35775?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.java/external-reports@8.18.0.40025?type=jar" }, { - "group" : "org.apache.tomcat.embed", - "name" : "tomcat-embed-jasper", - "version" : "9.0.84", - "description" : "Core Tomcat implementation", + "publisher" : "SonarSource", + "group" : "org.sonarsource.java", + "name" : "java-jsp", + "version" : "8.18.0.40025", + "description" : "Code Analyzer for Java :: JSP parser", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "22b13ffeab24c14943b58adaee3d15f6" + "content" : "7ad6c8d9c8472d350359adbb1bb2a117" }, { "alg" : "SHA-1", - "content" : "5fcf71c9c39e54c9ca51c304dd7bb2f5558e3286" + "content" : "bf1f05662d4aa017bfab919bee32c6e985aea49b" }, { "alg" : "SHA-256", - "content" : "3f08ff872bf83defa70c20274ab597aaf23ea95c1ff50f4b98e0c9a2a25c1106" + "content" : "85520636a757ac333fb349873dada3386a2a89352bb6443a552612323a898e3a" }, { "alg" : "SHA-512", - "content" : "89d83d9250be2cfc2d1471133461107dd4fdab532439f7827771f7d2ac202a4c9d57aabed5a7f84fa7a5b1474ce67b60ccdfbd08e2fd4980af1cf133ac69a2c1" + "content" : "34e2e4fd545dfab31f0f0dba626b61648a2daadfaa7f32483cb3b31aa2010e90639bcae4b2b3ac669d60ae3d0490ef59bf6d87ee61098d593c15b043ad8e43e1" }, { "alg" : "SHA-384", - "content" : "688680dcea5c8c055cfd461a29c601f0533bf448b9659d0491ee60107c9f8080fb91e2705cc319ab83cdc791f79b916e" + "content" : "acb14999bcc8e0347f71ee453d3c58426e60de8f576904058391dbab16da82bfb0ac7083cdd73b6f26862b2ca06912cb" }, { "alg" : "SHA3-384", - "content" : "0afb2f67992e9b3d891729c4f65c1804259180f459056f9e608c29d479eb5661a2eb23b46a240ff08d834c0940068f2b" + "content" : "75c0fed98b9486927c2c767745222e6b93e7c8af00727abbc871380d5bb2b9d71ba9a9bede424aedfc0c057e5c564d02" }, { "alg" : "SHA3-256", - "content" : "58917d6995c9fc52fd102c6e26dad93af8e43ef5b8ee1dee7932c2aa947d261c" + "content" : "3ff452bc563a50565843c16d94fd729cdd4f76ce6b1847c5fd61d6504a6fb2a7" }, { "alg" : "SHA3-512", - "content" : "453c585ccdeb65f90a65d3e9d7aedfc0ef6d68cd3a905f24584802d7029b1d79d7bab4a28b2b0f9d12cc41d2c395b87ddcc8e6568e98aae21fd076ed1c4b7bb7" + "content" : "96ad4a5625e3d8c3b6df8a224e75597da826ca3438e1e0c6fe805cfc0d246822ab98794250913691ed1c5ce201b9e938ca6af648e9d2f5f842efdaad78599341" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@9.0.84?type=jar", + "purl" : "pkg:maven/org.sonarsource.java/java-jsp@8.18.0.40025?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://tomcat.apache.org/" + "url" : "http://redirect.sonarsource.com/plugins/java.html/java-jsp" + }, + { + "type" : "build-system", + "url" : "https://cirrus-ci.com/github/SonarSource/sonar-java" + }, + { + "type" : "distribution-intake", + "url" : "file:./local-deployment" + }, + { + "type" : "issue-tracker", + "url" : "https://jira.sonarsource.com/browse/SONARJAVA" + }, + { + "type" : "mailing-list", + "url" : "https://community.sonarsource.com" + }, + { + "type" : "vcs", + "url" : "https://github.com/SonarSource/sonar-java/java-jsp" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@9.0.84?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.java/java-jsp@8.18.0.40025?type=jar" }, { - "group" : "org.apache.tomcat.embed", - "name" : "tomcat-embed-core", - "version" : "9.0.84", - "description" : "Core Tomcat implementation", + "publisher" : "SonarSource", + "group" : "org.sonarsource.analyzer-commons", + "name" : "sonar-analyzer-commons", + "version" : "2.18.0.3393", + "description" : "Logic useful for a language plugin", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "2a5bc72d7f698bc42784cb7afa20e808" + "content" : "86c3f760a4c1790b1af5c16eb246f8e0" }, { "alg" : "SHA-1", - "content" : "d0cd4045defc2ecf7ccfdc901925eed427bcba3e" + "content" : "612043286321caa05aa4e7670b36dd41e826ae2d" }, { "alg" : "SHA-256", - "content" : "29daf71c4b5f5ed0c0983a83ebd96ee74df905e406534b4c5412cc92c2aca2b7" + "content" : "f7babd94546594b9d0427b1bf32cd8f60065b8e8d0a1436f6ac443b9faaa1bf0" }, { "alg" : "SHA-512", - "content" : "e28752b186c5eaad6df750719e70bd9ab33f4924f293b622ed4a7198ad15fe5e998b6b7ddee230ce564e7ec0b71871fa5c2362f6c4cb65b2872e3f25ef0840e6" + "content" : "b1d166c1ea81d0c89afc9b27e6d9457e6cf0c45afc8de7fa37607ed14b379ddbc1cb1c31bd2ebc25be3c980f1cf145686256dc1b0217f8af73c69d5eb11bb0a3" }, { "alg" : "SHA-384", - "content" : "0df38c977446ce1bb1b6d17b544f3778b4891d6ef499bb1f53dfe8cca457ec8afdb8c061f17e966574d4fd9859517580" + "content" : "1d1bde067e0de39df2d0a35bfda18e9082c4f208411d45488a632a61b0acb04270a4016ad481a7aab1107608d121b90a" }, { "alg" : "SHA3-384", - "content" : "eb18577b10a3e3cdabd0483e4545226f4fa8d8c2c3d8eb88b9782aeee1ae9d9bc03d76d19c6b5e886b668fe795d38975" + "content" : "74a471351b75abc4d02989bde9e597307c807683bbac455a3b50aa98928d7dbf3f85db1d4c090c7c7b87299603d1f568" }, { "alg" : "SHA3-256", - "content" : "58006ad9c9fc8e3b18472ad550d72bcd7c9364ecdc586db3f194116694179bb8" + "content" : "8a6c33facfe7d600d45ca3db4ef0e545e7bfa75a383ac9d05fe49df6ab695197" }, { "alg" : "SHA3-512", - "content" : "bda4e7479e4b6015f78b24ffca33be9d99d0606acff96f4d18d8e713f261835e16cf26cce800657c28a279fcd1c3e8aa6e5050d5463e1850526364306e003e2a" + "content" : "68308ba7a0a3196f866436123817431cda045808cf617084af2efb84f53aa6907841ba67653fad166a347f92de0de2b2fea573e5e2fda734306cb3ca3ecf3319" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0" + "name" : "GNU LGPL 3", + "url" : "http://www.gnu.org/licenses/lgpl.txt" } } ], - "purl" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.84?type=jar", - "externalReferences" : [ - { - "type" : "website", - "url" : "https://tomcat.apache.org/" - } - ], - "type" : "library", - "bom-ref" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.84?type=jar" - }, - { - "group" : "org.apache.tomcat", - "name" : "tomcat-annotations-api", - "version" : "9.0.84", - "description" : "Annotations Package", - "scope" : "required", - "hashes" : [ - { - "alg" : "MD5", - "content" : "f590e2b4b16de6e9bc4b7f48380a79d3" - }, - { - "alg" : "SHA-1", - "content" : "86186a099bb355a174243f812d58aaf113768b91" - }, - { - "alg" : "SHA-256", - "content" : "b801c2be650483f7a91a6c50a2a93768c0fddc7ec54d0ca0d5e69bc92ef2758a" - }, - { - "alg" : "SHA-512", - "content" : "bfe97892d8e218adcd01a473ca51d7bc3a59bec953fca3752e19d73519972eb7665cf9fc098a74cafb8cdff8fc773ac32424af7b3e865d6bfdaafaab59cb9fb1" - }, - { - "alg" : "SHA-384", - "content" : "7a97a614983641796ef33723f036bfba309c4f6d1fdf860058c795d826ebe311248822a705880de9d48e5a6d456bc471" - }, - { - "alg" : "SHA3-384", - "content" : "4af95a177b0bd0b0477b61a15b167592cf5e8ea0973f756d7850a6792e0da215b2ac1995cdec027169f0e78dc6fa5487" - }, - { - "alg" : "SHA3-256", - "content" : "8c4a3599140a0e684eb0f5aac9cea0857687d00d8bb3dc175cc88ae26ffe8337" - }, - { - "alg" : "SHA3-512", - "content" : "559a0b35852d37bc7115cd09ffb1684c6613eb5fde071e7503c483b46e32be0a7e2bc62d7386a999ac9e8c9d2548fed4c8d420465d0b8125f15fc554bf659a38" - } - ], - "licenses" : [ - { - "license" : { - "id" : "Apache-2.0" - } - } - ], - "purl" : "pkg:maven/org.apache.tomcat/tomcat-annotations-api@9.0.84?type=jar", - "externalReferences" : [ - { - "type" : "website", - "url" : "https://tomcat.apache.org/" - } - ], - "type" : "library", - "bom-ref" : "pkg:maven/org.apache.tomcat/tomcat-annotations-api@9.0.84?type=jar" - }, - { - "group" : "org.apache.tomcat.embed", - "name" : "tomcat-embed-el", - "version" : "9.0.84", - "description" : "Core Tomcat implementation", - "scope" : "required", - "hashes" : [ - { - "alg" : "MD5", - "content" : "3a0cd4945a15ee8d37f4b23cf2216e3d" - }, - { - "alg" : "SHA-1", - "content" : "3fc7c06e3f2c23baf8bfd64320376fa701633602" - }, - { - "alg" : "SHA-256", - "content" : "22370f6a152da44c9a7ea15e597f22ef6b057a8d3278f69ff50cc3452473bf97" - }, - { - "alg" : "SHA-512", - "content" : "3373ff62438698fc3223e7474efca16bdc2a9dc9759e5815ccb8a0e3cc722ba2d581292b60b52eb1d86beb7c705b2640c81d69dfa7162f477d6ed1be8928d748" - }, - { - "alg" : "SHA-384", - "content" : "7d018a18156839d5c3c92ac091a53710944e00955443f1a0b051b3cb40f0c7fc9a925efc776ab09f1f0a569102cca101" - }, - { - "alg" : "SHA3-384", - "content" : "4f300a9fd6932daa3ff4db977860f66a7f88157e72e1481f1981d5597a4666daf76a309d5ff10312ba0968b56f0e4bbd" - }, - { - "alg" : "SHA3-256", - "content" : "ac2d6743eafb0210717527467f014d8fd8ac97a12c5f2aaccf1922b01c4d268d" - }, - { - "alg" : "SHA3-512", - "content" : "656900dad4ca2261cdc8ffa7febfbf4edfe87e2cb32a8a34b830f0f3248ae707a473a82f69487a70003c3b2c0e92ed998c082ec22f172c86b8565b62b7df74ad" - } - ], - "licenses" : [ - { - "license" : { - "id" : "Apache-2.0" - } - } - ], - "purl" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.84?type=jar", - "externalReferences" : [ - { - "type" : "website", - "url" : "https://tomcat.apache.org/" - } - ], - "type" : "library", - "bom-ref" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.84?type=jar" - }, - { - "publisher" : "SonarSource", - "group" : "org.sonarsource.analyzer-commons", - "name" : "sonar-analyzer-commons", - "version" : "2.8.0.2699", - "description" : "Logic useful for a language plugin", - "scope" : "required", - "hashes" : [ - { - "alg" : "MD5", - "content" : "e1a59ec0809b06b3f5e2c8e97a76b218" - }, - { - "alg" : "SHA-1", - "content" : "cada74c92a33d57d5bdb70b8178a9006754e601c" - }, - { - "alg" : "SHA-256", - "content" : "e9e17c3b6e02624cc1981dc7c2100f9ea67b96aec66e6a785e0ed5202febd854" - }, - { - "alg" : "SHA-512", - "content" : "9197a2c16edd4ccbc39a33fe75e4a4175700306d9d1df2f4e146de37728aa8483a3355993bb8e8fb77ef9ff17490427cf55566d81364d82495f3e49c62ee21f2" - }, - { - "alg" : "SHA-384", - "content" : "8385239d7eb9d7bc972fbb63ed5d887b2089129844037c957f0cc5bcd34b8a20deea0531022af0832193f020e94ad5fe" - }, - { - "alg" : "SHA3-384", - "content" : "ce192d54341470644acee6f91217ddeb62f28d1ac2da58b0f73fb8ec9e5278463457f74dc4a264349051b6fc3dc25c3a" - }, - { - "alg" : "SHA3-256", - "content" : "a521179e465dec4a69e93e393df68d9c6719f393654a1e584bd3ff7a0cd39891" - }, - { - "alg" : "SHA3-512", - "content" : "36968ac582180921cb12e613073d261111b81ca042e47624bc07176f6926c6f7a40a11077e51d5e460add84747348b4a962cda95c6b6c1ffe372e032c570ad89" - } - ], - "licenses" : [ - { - "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" - } - } - ], - "purl" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.8.0.2699?type=jar", + "purl" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.18.0.3393?type=jar", "externalReferences" : [ { "type" : "website", @@ -3688,47 +3452,47 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.8.0.2699?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.18.0.3393?type=jar" }, { "publisher" : "SonarSource", "group" : "org.sonarsource.analyzer-commons", "name" : "sonar-xml-parsing", - "version" : "2.8.0.2699", + "version" : "2.18.0.3393", "description" : "Logic useful to read and analyze XML files", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "eeb2d8b488da7bd7c98cfb49b3d06830" + "content" : "42a57e652799b8d75ed82ed71af3e8a8" }, { "alg" : "SHA-1", - "content" : "03e14b69bc7a2abbc0a595851f8f31540b208dd6" + "content" : "d776689581869043b0d5225d9def870872530ab9" }, { "alg" : "SHA-256", - "content" : "408ec4b66b8fda3fe8a333858aed7cbb3340f570790468f8a789de4cbf2c8c91" + "content" : "b383b5147a2b186d91f3efcca0cfa9be9e87371e79c0e61f38332b24f152286f" }, { "alg" : "SHA-512", - "content" : "35be20dfa7f82d0ba024c2614359e4b52ac295a2c416d854103b3a7f9739d04e2eb3bb927064fe9ac11ed9dbe5f91f8a266fd16a2ed40675b50c43836d132829" + "content" : "04334f2ed4bd53436f9ca5755f836df11147951e5e09ba375e7217a9ddb629172f550eddb978c1ecc3a9e76764db7c82aa05c925f53cb720ca6f0684c2d95197" }, { "alg" : "SHA-384", - "content" : "426ea2055c0c9f6642b68a7b2eccbf4d7ee802dd3bfc010564b108a8c5cf54a3a9ce7fd3d07ab4adbbd54fa52bee64b5" + "content" : "5cbbd8a9a784f94c77bac285538e6894c6cf67f5e5da50745633dab13583e6027c7b2620df4c0412cdcbb4bbf7dfb33f" }, { "alg" : "SHA3-384", - "content" : "9bfe10431714c647f99ce6b8e4d8eaaa6b80862985380a5ce4da37cdcf95cf324f9008b9dd46e81e8ecaacd19fa8e1c3" + "content" : "3d74f27c2a90595595c59d4f3551e11037f70de03afb7669a59217a42c32e41318ccf53a4911e97c94d4ef7c5d909498" }, { "alg" : "SHA3-256", - "content" : "2c47cf7bd11d40d40d1da9406bbd00a578bee08621cf341598d8fad4c4e8f7d9" + "content" : "e798859717811fa3dd11cdc3e7c518593dad3f1eea35e7880250c832cdb6c51e" }, { "alg" : "SHA3-512", - "content" : "4eb5a2b0f0b527231f0bfb1bae4c798713e615a7c5929c0ac09f49b3d9fa5eb12cee0775842e6b7033d7163803a3737595fdf9f221eeaef69e43875c87b6c3bf" + "content" : "757eb040f0c6dc7a39dfba5f3842962b27433593e7993fc755ecd2d2ab362ee58b04c95ea9f4817b43a518f51144f18cd1e9f85875a79c6234ef0f667f1ff536" } ], "licenses" : [ @@ -3739,7 +3503,7 @@ } } ], - "purl" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.8.0.2699?type=jar", + "purl" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.18.0.3393?type=jar", "externalReferences" : [ { "type" : "website", @@ -3763,7 +3527,7 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.8.0.2699?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.18.0.3393?type=jar" }, { "group" : "xerces", @@ -3981,41 +3745,41 @@ "publisher" : "SonarSource", "group" : "org.sonarsource.analyzer-commons", "name" : "sonar-performance-measure", - "version" : "2.8.0.2699", + "version" : "2.18.0.3393", "description" : "Logic to capture a hierarchy of performance measures, save it into a file, and merge files", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "bfdcb3a88a97fe66b288f61921bab1ae" + "content" : "1854d57f67661c6950374be29145a017" }, { "alg" : "SHA-1", - "content" : "0ecfd7e49341de39ad53f9608c31f30b6a10c441" + "content" : "eb02954016253fd34551a4641e3215fdafc239c6" }, { "alg" : "SHA-256", - "content" : "ebba386ff08f8bbe6e9a37a0666e91c8c8561af5e8b24de484a520e828ec64e7" + "content" : "4a3f60003f00a88695158a522cfbb7119c2c696991f13b7ca391e7c1eaf46d34" }, { "alg" : "SHA-512", - "content" : "02d37166706b1a93248cfb82731318304950162814292a295f0252d0f5d7ec734cedaf4a9f960d30c85dc8bac0ee59d75089f5ae10c88212b98e4de7ef7c4d8b" + "content" : "f3f2cc2211f00a66c33cd81ef996557fda3ee89421b2fc4565c376dadc22dc2a25eb327e5dfa041f3c48b8fa8620b797ec6762fd74d3ddde0184e6598c211d39" }, { "alg" : "SHA-384", - "content" : "84f70dfb7e80d7a6c1dad5ac31ce743f0da036e683881acf172d35f7d21ccbb3296165b88fcd4b2167cdc1234956bcdb" + "content" : "54138af00ebd5d85cb2f776d75d2455de1a058e657dff84d8e19a563d720fa819a1efd4d432a1d3c2dcb2fa31158c184" }, { "alg" : "SHA3-384", - "content" : "e89f15bf1b1ff83ce691bd755daab7a6ac6cfb416ccdc12ebd1a7f427da2224c4b8371062ebaa3fa63ba878473e7a8d2" + "content" : "7855e1aba9691493ebd9a5d79ace4cbccdc1f9fd9194a8300f6b71367014e7fdaf04a7aa9db87ed195b7d738552e6080" }, { "alg" : "SHA3-256", - "content" : "c08c9694411c5561032ace350fb1bb2201f3bfd0aa217e48047a399eb26e26c2" + "content" : "f65d3d9a6737a6bd62c31d2d463d011512c3aa434d0575d6e54a95dc00bc5c6e" }, { "alg" : "SHA3-512", - "content" : "a47781adf6a0dd209579e9c09ddb1f53c88bf89dadd4a7829655599eaea3399f9a71cf7e3b9c831c0f7e86904d5de2e97a6c3df8c0c0126ce8f4f4ad73cda1a3" + "content" : "34d64169af99b65d4ee59cfd414e189af6ea00ae5118aae5976e1ec76752631138c08eae42b96e95f9668123bbe44a17907c7556003e0dfd988723fc50db0d31" } ], "licenses" : [ @@ -4026,7 +3790,7 @@ } } ], - "purl" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.8.0.2699?type=jar", + "purl" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.18.0.3393?type=jar", "externalReferences" : [ { "type" : "website", @@ -4050,58 +3814,58 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.8.0.2699?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.18.0.3393?type=jar" }, { - "publisher" : "SonarSource and Waleri Enns", + "publisher" : "SonarSource", "group" : "org.sonarsource.python", "name" : "sonar-python-plugin", - "version" : "4.17.0.14845", + "version" : "5.16.0.29940", "description" : "Code Analyzer for Python", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "a1f37ca54b6407c29e14d6a84ef527be" + "content" : "96af3be952506f19faa9797702af83d2" }, { "alg" : "SHA-1", - "content" : "d2a19e1624695b1a8bf7691c028be1c1d795c3b4" + "content" : "7358996b700859eefb489750874f6b276555ae44" }, { "alg" : "SHA-256", - "content" : "4745222f0e3ff47ae4bef17fe6e6c8f50234c69d4992e81628c52217f3443564" + "content" : "161047717514eb4299847263ccb553df5e5be8fc9ceb081aaf4015fa834c734a" }, { "alg" : "SHA-512", - "content" : "7fb3dc79348493ea5a16c8a436db16665126137f0dfcc146fd75dac317a686c26f81499e5a370341e87374fe28006670f48d7424ab2c7988e8e51a842872fc4a" + "content" : "09689460be8675a15d4f1c2cecb868563c94a54c311f992bdd190aef37300a80760966216f73c12824765d7a7562735799b9c08f0606f465b03c299778110b31" }, { "alg" : "SHA-384", - "content" : "55bff9b2c2d2fede0efcaa6c64835bb2e42e94d4ba6196168d4d5b2f7fbd65cd8c03ae85f39937d27f873edcc359d565" + "content" : "bc18a99dabb6a1f04cd2bfdaffd3e1ba70688d16716b8cf40c9a751e94c6312b721b31478d7ea1baf3095da0654e6ae1" }, { "alg" : "SHA3-384", - "content" : "f38a0bc3cfd4b5d024c210e71fc0b63f41cc4bbac4bc501905fad95ceda64f81e39c3a53ca50b5c1e25250e802ce8a92" + "content" : "5d4803f25bb278676d6aa3ec55c6fd4db93fb42d5966fe73f0d7c6ecc2edcd2633154defacccd021b82574399e095c6c" }, { "alg" : "SHA3-256", - "content" : "2a9a49aac638a35dbc0ec3d31a79cb92a87bb148ce46ca7072bbb4d732a0cda6" + "content" : "b5898d3547c883a1aeaeb1175ed6bf9b691ae896210df2a0ce22b74295ddc004" }, { "alg" : "SHA3-512", - "content" : "5861b8fa999a2e4117429bf16c4ee05f765050a41ca59fd6beb2499ac24020a0693f366b6807bce569cf789be4ef075ab320aa02580712ad32d0b10a0b1b34d4" + "content" : "22c2445b64a2d200eb021df6bf93ef083c5487bde5c7923df897941445fd7f77eb9eac76542924195c8fdf17d43a3336a9b91f7c507ce8c36265447d8b77472c" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.sonarsource.python/sonar-python-plugin@4.17.0.14845?type=jar", + "purl" : "pkg:maven/org.sonarsource.python/sonar-python-plugin@5.16.0.29940?type=jar", "externalReferences" : [ { "type" : "website", @@ -4125,62 +3889,62 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.python/sonar-python-plugin@4.17.0.14845?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.python/sonar-python-plugin@5.16.0.29940?type=jar" }, { - "publisher" : "SonarSource and Waleri Enns", + "publisher" : "SonarSource", "group" : "org.sonarsource.python", "name" : "python-checks", - "version" : "4.17.0.14845", + "version" : "5.16.0.29940", "description" : "Parent pom of SonarSource public projects", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "077f9306a20f8a6eca092f54a53a26e3" + "content" : "c6a6f14dd43b2ca777639d045d371686" }, { "alg" : "SHA-1", - "content" : "ef43f45c57346b910ac422d7aff2ab4b6fe25894" + "content" : "7420c64bb23358297f8fb465d194b0abc81a268d" }, { "alg" : "SHA-256", - "content" : "7d6e1743538dbfa7310bc54fbb7e511a6fd8633549018d7e2b4ba67019a3123e" + "content" : "8d71a04ae268809a329169124e821538409f323c25738a787f1004691830947a" }, { "alg" : "SHA-512", - "content" : "f628f82e470f9af8e0da159464ef41996b5edbbab7ead94db853afc54992d8f155994becbb9acdfe4af46a41fbf5e3ae01ba6b17078d1e20861da5e4eedccafc" + "content" : "49cc6c1c1f6d4ab7691e52ee582edc2dc4320706f0cba8b0264232bb8c648e0c1411fc349480d4126909275bc722a26ce7dc1d0442b0fe800d68e43dd502e8e0" }, { "alg" : "SHA-384", - "content" : "43302f43c32c5b35c4f7b85e901c457ad7ce7c1d0cc8d891dceb828018d0fa06c09fd7b6a34764f187b0deb8f002db96" + "content" : "0ec195c2cd805ba066715992213efab8234ad4fea211d38c11621b764ce81a82ec4eb13f372c3a6ae77663319de497ca" }, { "alg" : "SHA3-384", - "content" : "2c847248451a6f0874fa6d91dedd203c7492db05161c15235d709e9e9bc6d8ff5900b7c60e0aeea74fb7566cb1a3db3e" + "content" : "d59fe66bc7a1621385b1a8e6d9e7e9aba25f5bcd1bf7460aaeea718a9fdefa1f01d65bc6bbf08c4ea20d6ff5533321d5" }, { "alg" : "SHA3-256", - "content" : "32f3d74c14e3918b8af6c98cc32304cc5d0b835348cd15734033307e4e871d2f" + "content" : "6b6d15ca4b8e534cfb0a5b3a9dc4ea328d07647a6a5029cc5bc36cc0e33f4ae7" }, { "alg" : "SHA3-512", - "content" : "2429a23270a66433e76eade81bb8b8acd3d91b55a587c6230ecc1282e71b2fcd61d9867d100fe04b74d387516a7c0df4124d8aa82f300c07a82dba20b4c01920" + "content" : "258f4367d5303ee344945915f54637c52cdfd441d3ec1a642172dd417815e38993f14b35154b0d9c7d3f49dfad666e9cb2ca26a9993f52815180b4bb6bdf8dce" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.sonarsource.python/python-checks@4.17.0.14845?type=jar", + "purl" : "pkg:maven/org.sonarsource.python/python-checks@5.16.0.29940?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://docs.sonarqube.org/display/PLUG/Plugin+Library/python/python-checks" + "url" : "https://docs.sonarsource.com/sonarqube-server/latest/extension-guide/developing-a-plugin/plugin-basics/python/python-checks/" }, { "type" : "build-system", @@ -4200,47 +3964,122 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.python/python-checks@4.17.0.14845?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.python/python-checks@5.16.0.29940?type=jar" }, { - "publisher" : "The Apache Software Foundation", - "group" : "commons-lang", - "name" : "commons-lang", - "version" : "2.6", - "description" : "Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.", + "publisher" : "SonarSource", + "group" : "org.sonarsource.python", + "name" : "python-commons", + "version" : "5.16.0.29940", + "description" : "Parent pom of SonarSource public projects", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "4d5c1693079575b362edf41500630bbd" + "content" : "9d94ffb59a75cf874e054eb124bc1815" }, { "alg" : "SHA-1", - "content" : "0ce1edb914c94ebc388f086c6827e8bdeec71ac2" + "content" : "0c4756f9dd9cc5caf3acc856171694e2fa033bcc" }, { "alg" : "SHA-256", - "content" : "50f11b09f877c294d56f24463f47d28f929cf5044f648661c0f0cfbae9a2f49c" + "content" : "5fb75ed5d0f7767f3d5877e1fc44a2cb4498b83c482e1e4cefd5c878f118225e" }, { "alg" : "SHA-512", - "content" : "4a5a3dbe4941c645e2cca068cca5c1882cfe988b02e7cd981d1e51784900767d1deab0e0e0566f559c9fcabb4a180e436d5bb948902d4f4106f37360466afb42" + "content" : "d8aa8345c5a55aa6a9cbcb261277e0f36e4756ea4a4d9dc99410053781a6305f9c98e1d0c2f0253e9e6140c40f6f9f19da26e7e85913407b42b20808aebfe9f0" }, { "alg" : "SHA-384", - "content" : "9725bc421adc1dbcd6f937eca0f3075d186a2b353ece4cef66b0fe81bb8d3f7d7641c43e86d657ef526c719f0c2a8c90" + "content" : "ee39919d1c32d29c16e41ef2259b5b71f5670244c9c9b1224972eb4d38c90e963dedb6108ce8c0243e322086e585a3da" }, { "alg" : "SHA3-384", - "content" : "4bc4eaaf2580ded6d552b96ae5261c936de95f69a1d137c47279c51bf2aa1406ae44f69ccc94486267b8441e53c4bd74" + "content" : "ddc8bf3b9b5d30bb0916c90f676061729666587f674827a29dcb21a08fe4d59e42f5ce818c5730e2aa21f1befa74c130" }, { "alg" : "SHA3-256", - "content" : "b68d49ef037d428ea0c3e67a7a20f3d68a134bef30a1639ec08d28886b9f5629" + "content" : "da0ff73c07625578b2d3d55fcc5cd16406762ad670a77c46e7128f6c4e90ec3b" }, { "alg" : "SHA3-512", - "content" : "2e9ffc0608827cffc0b48b7a0f35d371c66586c99fea2910f7c2a237c7c57d9ae4d65de7c8e018362c2e4f963c2f70a9196cebf35457f1dd0cea6c65c256f673" + "content" : "624e8aaaee39fcad526d4e2699174f8aa9804fc1cb08418dd742374a91fdc3fd474173f59e64508a74029080e9e56d9c6c32e311b71533eba3eead882c4a736f" + } + ], + "licenses" : [ + { + "license" : { + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" + } + } + ], + "purl" : "pkg:maven/org.sonarsource.python/python-commons@5.16.0.29940?type=jar", + "externalReferences" : [ + { + "type" : "website", + "url" : "https://docs.sonarsource.com/sonarqube-server/latest/extension-guide/developing-a-plugin/plugin-basics/python/python-commons/" + }, + { + "type" : "build-system", + "url" : "https://cirrus-ci.com/github/SonarSource/sonar-python" + }, + { + "type" : "issue-tracker", + "url" : "https://jira.sonarsource.com/browse/SONARPY" + }, + { + "type" : "mailing-list", + "url" : "https://community.sonarsource.com" + }, + { + "type" : "vcs", + "url" : "https://github.com/SonarSource/sonar-python/python-commons" + } + ], + "type" : "library", + "bom-ref" : "pkg:maven/org.sonarsource.python/python-commons@5.16.0.29940?type=jar" + }, + { + "publisher" : "FasterXML", + "group" : "com.fasterxml.jackson.dataformat", + "name" : "jackson-dataformat-toml", + "version" : "2.20.1", + "description" : "Support for reading and writing TOML-encoded data via Jackson abstractions.", + "scope" : "required", + "hashes" : [ + { + "alg" : "MD5", + "content" : "f3d12c27f5c0744054e8716f3ee4b3d2" + }, + { + "alg" : "SHA-1", + "content" : "1f4f7249289053551eac7bc8ac6e646576d03e1a" + }, + { + "alg" : "SHA-256", + "content" : "3936e3fb83edd2754bb317d17a63cded43b5fac4fb82eabb4aaa502bb52f9835" + }, + { + "alg" : "SHA-512", + "content" : "cd31529a28ff83585d8d5944943c528d4d26e0f547c5ed804c90a8c642b0cd34553d2f4b7878903312a06d4ad86351aa6591294dba4f61b0bb03da317aeef870" + }, + { + "alg" : "SHA-384", + "content" : "e2f0cbd883ee0745e6c27d0cf83c1e48869f89cb444c099e553f25105d7800949b1db37fc5db5055e321fdce8b13ebde" + }, + { + "alg" : "SHA3-384", + "content" : "fd0c36a837dd0b756c3622606b1490218cba364f30d148bac78dfee7dbb1117a9f1504a2e0cac8d83cf6cdb17f0ecf7b" + }, + { + "alg" : "SHA3-256", + "content" : "58d572441da65e6c63de352d608a144b280bd3754a06128d1da840494c70ce6b" + }, + { + "alg" : "SHA3-512", + "content" : "bdbc867b3d2a993b277d19c230f84dd52a8db5f6638f9a90f6d613b9eb7b2f49e3404dc78dba4877fdad3ed5bd255f27be808ec287898c833ee2347ee44a94f4" } ], "licenses" : [ @@ -4250,15 +4089,156 @@ } } ], - "purl" : "pkg:maven/commons-lang/commons-lang@2.6?type=jar", + "purl" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-toml@2.20.1?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://commons.apache.org/lang/" + "url" : "https://github.com/FasterXML/jackson-dataformats-text" + }, + { + "type" : "distribution-intake", + "url" : "https://central.sonatype.com/api/v1/publisher" + }, + { + "type" : "issue-tracker", + "url" : "https://github.com/FasterXML/jackson-dataformats-text/issues" + }, + { + "type" : "vcs", + "url" : "https://github.com/FasterXML/jackson-dataformats-text/jackson-dataformat-toml" + } + ], + "type" : "library", + "bom-ref" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-toml@2.20.1?type=jar" + }, + { + "publisher" : "FasterXML", + "group" : "com.fasterxml.jackson.datatype", + "name" : "jackson-datatype-jdk8", + "version" : "2.20.1", + "description" : "Add-on module for Jackson (https://github.com/FasterXML/jackson) to support JDK 8 data types.", + "scope" : "required", + "hashes" : [ + { + "alg" : "MD5", + "content" : "9360afe5a78d29ce5510f670b3286e77" + }, + { + "alg" : "SHA-1", + "content" : "6a8bbc260ba834f67220117d9f08510d69c4a3f0" + }, + { + "alg" : "SHA-256", + "content" : "6821cdd695e95c4e6853ec855a7432c71f2f4be318b3ca190fbbf8a2e5f981f2" + }, + { + "alg" : "SHA-512", + "content" : "9aceae6ea4ac56a038982fc45e91942cc15d68b7e07e044c1e75a71760b2eb02e23a344f36966093be670a2d1f656146492f11148da06a4044b4a5d78e523beb" + }, + { + "alg" : "SHA-384", + "content" : "c55990a25083046bd3881b656d5fa351e5d2115ce861427cc8bdc64acbf85f9a3ea739f3510eedfc0372f226ed7ebd2a" + }, + { + "alg" : "SHA3-384", + "content" : "9556b354a7fdf5324aa22d6a00b308508bfb55555c2a31ca159c2b9f35f8a3d4e904a7eb15388f6532bb464fcc642db5" + }, + { + "alg" : "SHA3-256", + "content" : "b4018fdef370f16380205cf366a9b84f4721b5ff0a800e72e0a1a23f4a58848a" + }, + { + "alg" : "SHA3-512", + "content" : "9f9db93cecb859df97455ddfa61136406700ae786715a3754e0ac9f9993deb9df62c44e08233dcf463e792fcbba9a25e7472e34dba5970d9df7eecf959c71875" + } + ], + "licenses" : [ + { + "license" : { + "id" : "Apache-2.0" + } + } + ], + "purl" : "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.20.1?type=jar", + "externalReferences" : [ + { + "type" : "website", + "url" : "https://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jdk8" + }, + { + "type" : "distribution-intake", + "url" : "https://central.sonatype.com/api/v1/publisher" + }, + { + "type" : "issue-tracker", + "url" : "https://github.com/FasterXML/jackson-modules-java8/issues" + }, + { + "type" : "vcs", + "url" : "http://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jdk8" + } + ], + "type" : "library", + "bom-ref" : "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.20.1?type=jar" + }, + { + "publisher" : "The Apache Software Foundation", + "group" : "org.apache.commons", + "name" : "commons-text", + "version" : "1.14.0", + "description" : "Apache Commons Text is a set of utility functions and reusable components for processing and manipulating text in a Java environment.", + "scope" : "required", + "hashes" : [ + { + "alg" : "MD5", + "content" : "54960a12a82d52df3d5548d6934d87b2" + }, + { + "alg" : "SHA-1", + "content" : "adcb0d4c67eabc79682604b47eb852aaff21138a" + }, + { + "alg" : "SHA-256", + "content" : "121fce2282910c8f0c3ba793a5436b31beb710423cbe2d574a3fb7a73c508e92" + }, + { + "alg" : "SHA-512", + "content" : "4975879372241025bd0a47fe540ed7d0cd3e5eba474b12af67a8c6016be0fbb4f4a3a4a0064f4d2b6aebce67d88ee814da345a5ba3a6ee4f6293b3b4e7bbd065" + }, + { + "alg" : "SHA-384", + "content" : "a038f1a8b58bb7ec17ba55238d3e40f5d9386dfb17870630a728b22741a9592819374e9abbbc6402a439eea4db5b739a" + }, + { + "alg" : "SHA3-384", + "content" : "5325922bb72aa73d2d51cb3fb5592fc77097614fd3ab3ac77e3acdc0fe1dc8c18893cdd9a05768bb725fa40dd8c14527" + }, + { + "alg" : "SHA3-256", + "content" : "31008266592ec8503bcc7f6b4e7125b0e377f57f3a697cdcb02ee7f20f84ddf1" + }, + { + "alg" : "SHA3-512", + "content" : "385249425d8c6ab181039195a03c6337f393a1e1419527e9f072d695367bc0bd6546e752d1912df557bd8788329f7609aa1c63ce42eb135e2d27b6141ce9280f" + } + ], + "licenses" : [ + { + "license" : { + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" + } + } + ], + "purl" : "pkg:maven/org.apache.commons/commons-text@1.14.0?type=jar", + "externalReferences" : [ + { + "type" : "website", + "url" : "https://commons.apache.org/proper/commons-text" }, { "type" : "build-system", - "url" : "http://vmbuild.apache.org/continuum/" + "url" : "https://github.com/apache/commons-text/actions" }, { "type" : "distribution-intake", @@ -4266,19 +4246,19 @@ }, { "type" : "issue-tracker", - "url" : "http://issues.apache.org/jira/browse/LANG" + "url" : "https://issues.apache.org/jira/browse/TEXT" }, { "type" : "mailing-list", - "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/" + "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/" }, { "type" : "vcs", - "url" : "http://svn.apache.org/viewvc/commons/proper/lang/branches/LANG_2_X" + "url" : "https://gitbox.apache.org/repos/asf?p=commons-text.git" } ], "type" : "library", - "bom-ref" : "pkg:maven/commons-lang/commons-lang@2.6?type=jar" + "bom-ref" : "pkg:maven/org.apache.commons/commons-text@1.14.0?type=jar" }, { "publisher" : "Codehaus", @@ -4477,55 +4457,119 @@ "type" : "library", "bom-ref" : "pkg:maven/org.codehaus.woodstox/stax2-api@3.1.4?type=jar" }, + { + "publisher" : "SonarSource", + "group" : "org.sonarsource.go", + "name" : "sonar-go-plugin", + "version" : "1.32.0.5128", + "description" : "Code Analyzer for Go", + "scope" : "required", + "hashes" : [ + { + "alg" : "MD5", + "content" : "ea2de97a8b1020865b993afe78aff72f" + }, + { + "alg" : "SHA-1", + "content" : "daa3ce9acfba33b2dba823c64d72bf3a0fa2b25d" + }, + { + "alg" : "SHA-256", + "content" : "7ad9dd5e478be53d58ad12d060f0e4aaa5e5eb9f5fcb28411c8083da2d5e0b19" + }, + { + "alg" : "SHA-512", + "content" : "3176550be29c19e7fb8b90b6993b29f3b8b4b51ddfa4509bab6de91edc4d7b40e3384dc48df7731262cb671379d2c4163eef78565389a391a43d450dcba56996" + }, + { + "alg" : "SHA-384", + "content" : "b1e7333047001ad10c6058a5ede6bc27651bae3335c0faadc1a6bda3ba1b66b90f45aec62389eaa9ec41eba836dc0d52" + }, + { + "alg" : "SHA3-384", + "content" : "18184263d523ab59b12019479a129e608f201e2c096745e869d72e029c78d41409d64934307b1f1a343ab0e1475978f3" + }, + { + "alg" : "SHA3-256", + "content" : "3fddc018fee60147c78382440a963bf6812bf496bb1d25090b50475e185a0844" + }, + { + "alg" : "SHA3-512", + "content" : "c1fc155244473f90fcc327f33055b06cb2fb35a203421b832f627d12150d851640a407a84dd47498b372ad0337bb1881ffa8aeab9fec85cb5e04b924989c5db5" + } + ], + "licenses" : [ + { + "license" : { + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" + } + } + ], + "purl" : "pkg:maven/org.sonarsource.go/sonar-go-plugin@1.32.0.5128?type=jar", + "externalReferences" : [ + { + "type" : "website", + "url" : "http://www.sonarqube.org/" + }, + { + "type" : "vcs", + "url" : "https://github.com/SonarSource/sonar-go" + } + ], + "type" : "library", + "bom-ref" : "pkg:maven/org.sonarsource.go/sonar-go-plugin@1.32.0.5128?type=jar" + }, { "publisher" : "The Apache Software Foundation", "group" : "commons-codec", "name" : "commons-codec", - "version" : "1.15", - "description" : "The Apache Commons Codec package contains simple encoder and decoders for various formats such as Base64 and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.", + "version" : "1.19.0", + "description" : "The Apache Commons Codec component contains encoders and decoders for formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "303baf002ce6d382198090aedd9d79a2" + "content" : "e46fa78c69544eb6239c4e8447e72544" }, { "alg" : "SHA-1", - "content" : "49d94806b6e3dc933dacbd8acb0fdbab8ebd1e5d" + "content" : "8c0dbe3ae883fceda9b50a6c76e745e548073388" }, { "alg" : "SHA-256", - "content" : "b3e9f6d63a790109bf0d056611fbed1cf69055826defeb9894a71369d246ed63" + "content" : "5c3881e4f556855e9c532927ee0c9dfde94cc66760d5805c031a59887070af5f" }, { "alg" : "SHA-512", - "content" : "da30a716770795fce390e4dd340a8b728f220c6572383ffef55bd5839655d5611fcc06128b2144f6cdcb36f53072a12ec80b04afee787665e7ad0b6e888a6787" + "content" : "d98a7a1cfcc08aa9cce4f7778e3f37ecb99da7b1da01944e5fa8faf06fbf9f969f2efb0b416832f419d53085250f711c071f1dac9fa0968483c37034198367fb" }, { "alg" : "SHA-384", - "content" : "05d0506283716472175d44c2a4766523397bf8a007c18848f9c9a61718cc8aa437f9cb4b91771037ab29a960860b62a0" + "content" : "f0edec3cd84b2320e6930380d3fe13335d33f041470d27fb93789db0c696ec01dda21b471f0015bf70bffffcbfdb67c0" }, { "alg" : "SHA3-384", - "content" : "12fad4ef78274b06f97b1243cea6f970088abde082d2de9377d915a34b44f7d7d67807c03e59c849b69f1544e2a9a1be" + "content" : "ce771ef9f0df326a34ab37e70f710801bb18d545aca0ee492db62770db323ab8a0b5082123ca4826f3d3182748537cfc" }, { "alg" : "SHA3-256", - "content" : "87be248f33f241121f54aad61a9a460a79eabefbf1b5b0dd22aeb95b581f727e" + "content" : "8296db95bb2fac86a0eb68e61e9730084f4272ad6a4a4327a5259c631840e98e" }, { "alg" : "SHA3-512", - "content" : "8c992c9c569ebaa0bf956a4c5b34fbf5e1ed1c212c2dd896fa216183ee0bcd341e96698af4b9cec7e8880762faa081a3d3a27f51349aa457cb8e373e4f57c788" + "content" : "05da2f8674a257c5d8a1137cadbda71d2635f22237450bf2cbc980380a56905247bea38049c8cd80e60077be2be73b1eae6b466c228e4277763a54979cf856fb" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0" + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], - "purl" : "pkg:maven/commons-codec/commons-codec@1.15?type=jar", + "purl" : "pkg:maven/commons-codec/commons-codec@1.19.0?type=jar", "externalReferences" : [ { "type" : "website", @@ -4533,7 +4577,7 @@ }, { "type" : "build-system", - "url" : "https://builds.apache.org/" + "url" : "https://github.com/apache/commons-cli/actions" }, { "type" : "distribution-intake", @@ -4553,57 +4597,58 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/commons-codec/commons-codec@1.15?type=jar" + "bom-ref" : "pkg:maven/commons-codec/commons-codec@1.19.0?type=jar" }, { "publisher" : "The Apache Software Foundation", "group" : "commons-io", "name" : "commons-io", - "version" : "2.11.0", + "version" : "2.20.0", "description" : "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "3b4b7ccfaeceeac240b804839ee1a1ca" + "content" : "94e7e6b9b5fe82388687b584d3571081" }, { "alg" : "SHA-1", - "content" : "a2503f302b11ebde7ebc3df41daebe0e4eea3689" + "content" : "36f3474daec2849c149e877614e7f979b2082cd2" }, { "alg" : "SHA-256", - "content" : "961b2f6d87dbacc5d54abf45ab7a6e2495f89b75598962d8c723cea9bc210908" + "content" : "df90bba0fe3cb586b7f164e78fe8f8f4da3f2dd5c27fa645f888100ccc25dd72" }, { "alg" : "SHA-512", - "content" : "5bd78eed456ede30119319c5bed8e3e4c443b6fd7bdb3a7a5686647bd83094d0c3e2832a7575cfb60e4ef25f08106b93476939d3adcfecf5533cc030b3039e10" + "content" : "fea08e150473673b0608eaee3ae1cb4e73834039db80d3b758710d6baf3a5840a0878a4eb64739ae9bb21ccc7148c8520fe873616a3f6d5cdb4305deabdd015c" }, { "alg" : "SHA-384", - "content" : "114f1e324d90ad887c177876d410f5787a8e8da6c48d4b2862d365802c0efded3a88cb24046976bf6276cadad3712f0f" + "content" : "22db5e18e3512ed44474e75a124a052d5a1a6f35ce458f6a201a5ccc9510c57c10c117dba80ac6ce91745cf2b51e63f2" }, { "alg" : "SHA3-384", - "content" : "80288c03ad4d80d69f91d056ffc5570d49a9c76bf54ad2dff0121ecde26a560df76d05156f281f5c6db2a38ff07a873d" + "content" : "a70700d24df3c276ff387c359e0e940b834e413b72a49917de9a82615836eca8cca1bee1ed71790606c795da795e9151" }, { "alg" : "SHA3-256", - "content" : "5adfb5ccaf5f21a549422f426118a9542673926fcd18c68390cf813e791dcf6c" + "content" : "a8d044d3a4a069d0f20d24112b6427a3a6f02a925b31b932721d1f545ff32cec" }, { "alg" : "SHA3-512", - "content" : "7573f47f0babb53cefdc7c2309a0b982d800139064537b0797da442853d081010ad7c3c74a500598a0f800639a5d540eca21963ea652c68613907059bd4278c2" + "content" : "3417bf811d7e5fc1e71b8540f3379751434ea8540c421ff2c8bb5f5ce34401cd0ad8a829b65aa55e055c57141181762c4827099352c2bba453e48ad2df67526a" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0" + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], - "purl" : "pkg:maven/commons-io/commons-io@2.11.0?type=jar", + "purl" : "pkg:maven/commons-io/commons-io@2.20.0?type=jar", "externalReferences" : [ { "type" : "website", @@ -4611,7 +4656,7 @@ }, { "type" : "build-system", - "url" : "https://builds.apache.org/" + "url" : "https://github.com/apache/commons-io/actions" }, { "type" : "distribution-intake", @@ -4631,47 +4676,108 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/commons-io/commons-io@2.11.0?type=jar" + "bom-ref" : "pkg:maven/commons-io/commons-io@2.20.0?type=jar" + }, + { + "group" : "org.jspecify", + "name" : "jspecify", + "version" : "1.0.0", + "description" : "An artifact of well-named and well-specified annotations to power static analysis checks", + "scope" : "required", + "hashes" : [ + { + "alg" : "MD5", + "content" : "9133aba420d0ca3b001dbb6ae9992cf6" + }, + { + "alg" : "SHA-1", + "content" : "7425a601c1c7ec76645a78d22b8c6a627edee507" + }, + { + "alg" : "SHA-256", + "content" : "1fad6e6be7557781e4d33729d49ae1cdc8fdda6fe477bb0cc68ce351eafdfbab" + }, + { + "alg" : "SHA-512", + "content" : "efded31ef5b342f09422935076e599789076431e93a746685c0607e7de5592719ba6aacde0be670b3f064d1e85630d58d5bce6b34aed2a288fdb34f745efb7bc" + }, + { + "alg" : "SHA-384", + "content" : "814f860e5a44ead6c457676841eef471a8b87be31b84c60a8a4477a18a9cbcb6e3c2ae700969d5c5e52309d961e0537a" + }, + { + "alg" : "SHA3-384", + "content" : "c8844e5b71e5ecfbb7366097ce34af2f5863d86d5ccc3f9ec384d8ade4b60ccc8124c7fc88664f1afd2b0962fc8775bf" + }, + { + "alg" : "SHA3-256", + "content" : "4b4f08ad7606a3ac62997779484919a302267b26d26ee19125f8a7eea60e8a71" + }, + { + "alg" : "SHA3-512", + "content" : "65c6845ebae981cb81b61107707ced39f5b377dae970b47606ef482aaf10e3729def0da40d9377c43abbfb483a5ceae039b0d51c129c50a6d36ad351a5d6b01e" + } + ], + "licenses" : [ + { + "license" : { + "id" : "Apache-2.0" + } + } + ], + "purl" : "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar", + "externalReferences" : [ + { + "type" : "website", + "url" : "http://jspecify.org/" + }, + { + "type" : "vcs", + "url" : "https://github.com/jspecify/jspecify/" + } + ], + "type" : "library", + "bom-ref" : "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar" }, { "publisher" : "Google Inc.", "group" : "com.google.googlejavaformat", "name" : "google-java-format", - "version" : "1.22.0", + "version" : "1.28.0", "description" : "A Java source code formatter that follows Google Java Style.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "fd1fbd4edf5d8eaca565217ff981b94b" + "content" : "8e2d4037e876b608ab0356477b5ead98" }, { "alg" : "SHA-1", - "content" : "6e31a0877a51e91076c857794a0b1df7af876b2d" + "content" : "f57d0ad670cc32c4d4a4ffb2cbef44a3dfddeecd" }, { "alg" : "SHA-256", - "content" : "4f4bdba0f2a3d7e84be47683a0c2a4ba69024d29d906d09784181f68f04af792" + "content" : "41dfe4d1012794ed15e0ffd70f89fd4fa65d5f15ce0bc0c70f8c2c127d6d010d" }, { "alg" : "SHA-512", - "content" : "d2006def13e5144e12568298014a23c86299a62e2bb7757c63f5f25405b1adb6f60b3f2f54bed9583cdd24cae71088e9f7aa846a10a089cce2a25972e48c7649" + "content" : "87bf18026e543bc9135d58153f05b8bf58b48bd59cec96e774e3f68bc8d601b9789924a9917b9a4f57b8a69bbe24dd20aef0a65543a63e7101b39317469346d2" }, { "alg" : "SHA-384", - "content" : "4aed1de35a09b196347064d45a5996fd7467c9b5cca0faf4655cbeb756053810cd3af2e45d74401aee626e30b1693ca7" + "content" : "bfd9e42e51d696fa079aa12d3541645873724ce48989615723533aba58fc3e4f77a37e9102bad2b391dc0252b449bad9" }, { "alg" : "SHA3-384", - "content" : "28fc6265d1886418ca44d1c7eea8709a2f38ba5b3f8cedb6a44d1a36f676e533662b61105db8b8d1f69fc4796fbcc8bd" + "content" : "b48a456db7981843ffc51f60511d4a5d52072bbe89da4dda6560cee4414493236e94ad1af4c5564449fb000501ca6ef4" }, { "alg" : "SHA3-256", - "content" : "08098285fccec01b2f3fce2e46ac210deb79862f21cb4ae96ff3a1a040df0809" + "content" : "ae18cf36a9212cdb243e3900cca7f9059273dfdf227fb97a189b5ae84cc989e4" }, { "alg" : "SHA3-512", - "content" : "122e32ab36408a79ed1153660ab1ba7639212d30921ea022da9affc19f76c5d874241a8584fc5c992ce74d2f01c2e06fddc784aee11c6d4238fc645ade3a1880" + "content" : "ac1207d9b7d8be02a222d1f11b44a5bcf1d95924404926698c8f23ba3688cfc49fc81e594e4f48d03ebbbf0ccc638706433ed462499b5b4d083538eb7e37541e" } ], "licenses" : [ @@ -4681,16 +4787,12 @@ } } ], - "purl" : "pkg:maven/com.google.googlejavaformat/google-java-format@1.22.0?type=jar", + "purl" : "pkg:maven/com.google.googlejavaformat/google-java-format@1.28.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/google/google-java-format/google-java-format" }, - { - "type" : "distribution-intake", - "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" - }, { "type" : "issue-tracker", "url" : "http://github.com/google/google-java-format/issues" @@ -4701,126 +4803,131 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/com.google.googlejavaformat/google-java-format@1.22.0?type=jar" + "bom-ref" : "pkg:maven/com.google.googlejavaformat/google-java-format@1.28.0?type=jar" } ], "dependencies" : [ { - "ref" : "pkg:maven/com.ibm/python@1.0.3-SNAPSHOT?type=jar", + "ref" : "pkg:maven/com.ibm/python@2.0.0-SNAPSHOT?type=jar", "dependsOn" : [ - "pkg:maven/com.ibm/engine@1.0.3-SNAPSHOT?type=jar", - "pkg:maven/com.ibm/output@1.0.3-SNAPSHOT?type=jar", - "pkg:maven/com.ibm/enricher@1.0.3-SNAPSHOT?type=jar", - "pkg:maven/org.jetbrains/annotations@24.1.0?type=jar", - "pkg:maven/org.sonarsource.api.plugin/sonar-plugin-api@9.13.0.360?type=jar", - "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", - "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar", - "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar", - "pkg:maven/org.sonarsource.java/sonar-java-plugin@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.python/sonar-python-plugin@4.17.0.14845?type=jar", - "pkg:maven/com.google.googlejavaformat/google-java-format@1.22.0?type=jar" + "pkg:maven/com.ibm/engine@2.0.0-SNAPSHOT?type=jar", + "pkg:maven/com.ibm/output@2.0.0-SNAPSHOT?type=jar", + "pkg:maven/com.ibm/enricher@2.0.0-SNAPSHOT?type=jar", + "pkg:maven/com.ibm/rules@2.0.0-SNAPSHOT?type=jar", + "pkg:maven/org.sonarsource.api.plugin/sonar-plugin-api@13.4.3.4290?type=jar", + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", + "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar", + "pkg:maven/org.sonarsource.java/sonar-java-plugin@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.python/sonar-python-plugin@5.16.0.29940?type=jar", + "pkg:maven/org.sonarsource.go/sonar-go-plugin@1.32.0.5128?type=jar", + "pkg:maven/com.google.googlejavaformat/google-java-format@1.28.0?type=jar" ] }, { - "ref" : "pkg:maven/com.ibm/engine@1.0.3-SNAPSHOT?type=jar", + "ref" : "pkg:maven/com.ibm/engine@2.0.0-SNAPSHOT?type=jar", "dependsOn" : [ - "pkg:maven/com.ibm/common@1.0.3-SNAPSHOT?type=jar", - "pkg:maven/org.jetbrains/annotations@24.1.0?type=jar", - "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", - "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar", - "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar", - "pkg:maven/org.sonarsource.java/sonar-java-plugin@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.python/sonar-python-plugin@4.17.0.14845?type=jar", - "pkg:maven/com.google.googlejavaformat/google-java-format@1.22.0?type=jar" + "pkg:maven/com.ibm/common@2.0.0-SNAPSHOT?type=jar", + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", + "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar", + "pkg:maven/org.sonarsource.java/sonar-java-plugin@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.python/sonar-python-plugin@5.16.0.29940?type=jar", + "pkg:maven/org.sonarsource.go/sonar-go-plugin@1.32.0.5128?type=jar", + "pkg:maven/com.google.googlejavaformat/google-java-format@1.28.0?type=jar" ] }, { - "ref" : "pkg:maven/com.ibm/common@1.0.3-SNAPSHOT?type=jar", + "ref" : "pkg:maven/com.ibm/common@2.0.0-SNAPSHOT?type=jar", "dependsOn" : [ - "pkg:maven/org.jetbrains/annotations@24.1.0?type=jar", - "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", - "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar", - "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar", - "pkg:maven/org.sonarsource.java/sonar-java-plugin@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.python/sonar-python-plugin@4.17.0.14845?type=jar", - "pkg:maven/com.google.googlejavaformat/google-java-format@1.22.0?type=jar" + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", + "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar", + "pkg:maven/org.sonarsource.java/sonar-java-plugin@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.python/sonar-python-plugin@5.16.0.29940?type=jar", + "pkg:maven/org.sonarsource.go/sonar-go-plugin@1.32.0.5128?type=jar", + "pkg:maven/com.google.googlejavaformat/google-java-format@1.28.0?type=jar" ] }, { - "ref" : "pkg:maven/org.jetbrains/annotations@24.1.0?type=jar", + "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar", - "dependsOn" : [ ] + "ref" : "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar", + "dependsOn" : [ + "pkg:maven/com.google.errorprone/error_prone_annotations@2.41.0?type=jar" + ] }, { - "ref" : "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar", + "ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.41.0?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/org.sonarsource.java/sonar-java-plugin@7.33.0.35775?type=jar", + "ref" : "pkg:maven/org.sonarsource.java/sonar-java-plugin@8.18.0.40025?type=jar", "dependsOn" : [ - "pkg:maven/org.sonarsource.java/java-surefire@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.java/java-frontend@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.java/java-symbolic-execution@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.java/java-checks@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.java/java-checks-aws@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.java/external-reports@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.java/java-jsp@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.8.0.2699?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.8.0.2699?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.8.0.2699?type=jar" + "pkg:maven/org.sonarsource.java/java-surefire@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.java/java-frontend@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.java/java-checks@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.java/java-checks-aws@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.java/check-list@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.java/external-reports@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.java/java-jsp@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.18.0.3393?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.18.0.3393?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.18.0.3393?type=jar" ] }, { - "ref" : "pkg:maven/org.sonarsource.java/java-surefire@7.33.0.35775?type=jar", + "ref" : "pkg:maven/org.sonarsource.java/java-surefire@8.18.0.40025?type=jar", "dependsOn" : [ - "pkg:maven/org.sonarsource.java/java-frontend@7.33.0.35775?type=jar", + "pkg:maven/org.sonarsource.java/java-frontend@8.18.0.40025?type=jar", "pkg:maven/com.fasterxml.staxmate/staxmate@2.4.1?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.8.0.2699?type=jar" + "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.18.0.3393?type=jar" ] }, { - "ref" : "pkg:maven/org.sonarsource.java/java-frontend@7.33.0.35775?type=jar", + "ref" : "pkg:maven/org.sonarsource.java/java-frontend@8.18.0.40025?type=jar", "dependsOn" : [ - "pkg:maven/org.sonarsource.java/jdt-package@1.1.0.34?type=jar", - "pkg:maven/org.sonarsource.sslr/sslr-core@1.23?type=jar", - "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.8.0.2699?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.7.0.1482?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.8.0.2699?type=jar" + "pkg:maven/org.sonarsource.java/jdt-package@1.6.0.160?type=jar", + "pkg:maven/org.sonarsource.sslr/sslr-core@1.24.0.633?type=jar", + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.18.0.3393?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.20.0.4607?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.18.0.3393?type=jar" ] }, { - "ref" : "pkg:maven/org.sonarsource.java/jdt-package@1.1.0.34?type=jar", + "ref" : "pkg:maven/org.sonarsource.java/jdt-package@1.6.0.160?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/org.sonarsource.sslr/sslr-core@1.23?type=jar", + "ref" : "pkg:maven/org.sonarsource.sslr/sslr-core@1.24.0.633?type=jar", "dependsOn" : [ - "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar" + "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", + "pkg:maven/org.ow2.asm/asm@9.0?type=jar" ] }, { - "ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.8.0.2699?type=jar", + "ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.7.0.1482?type=jar", + "ref" : "pkg:maven/org.ow2.asm/asm@9.0?type=jar", + "dependsOn" : [ ] + }, + { + "ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.18.0.3393?type=jar", + "dependsOn" : [ ] + }, + { + "ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.20.0.4607?type=jar", "dependsOn" : [ "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar" ] }, { - "ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.8.0.2699?type=jar", + "ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.18.0.3393?type=jar", "dependsOn" : [ "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", - "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar" + "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar" ] }, { @@ -4834,7 +4941,7 @@ "dependsOn" : [ ] }, { - "ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.8.0.2699?type=jar", + "ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.18.0.3393?type=jar", "dependsOn" : [ "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", "pkg:maven/xerces/xercesImpl@2.12.2?type=jar", @@ -4859,132 +4966,111 @@ ] }, { - "ref" : "pkg:maven/org.sonarsource.java/java-symbolic-execution@7.33.0.35775?type=jar", - "dependsOn" : [ - "pkg:maven/org.sonarsource.java/java-frontend@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.8.0.2699?type=jar" - ] - }, - { - "ref" : "pkg:maven/org.sonarsource.java/java-checks@7.33.0.35775?type=jar", + "ref" : "pkg:maven/org.sonarsource.java/java-checks@8.18.0.40025?type=jar", "dependsOn" : [ - "pkg:maven/org.sonarsource.java/java-frontend@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.java/java-checks-common@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.java/java-symbolic-execution@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.8.0.2699?type=jar", - "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar", - "pkg:maven/org.springframework/spring-expression@6.1.5?type=jar" + "pkg:maven/org.sonarsource.java/java-frontend@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.java/java-checks-common@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.18.0.3393?type=jar", + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", + "pkg:maven/org.springframework/spring-expression@6.1.21?type=jar" ] }, { - "ref" : "pkg:maven/org.sonarsource.java/java-checks-common@7.33.0.35775?type=jar", + "ref" : "pkg:maven/org.sonarsource.java/java-checks-common@8.18.0.40025?type=jar", "dependsOn" : [ - "pkg:maven/org.sonarsource.java/java-frontend@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.8.0.2699?type=jar", - "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar" + "pkg:maven/org.sonarsource.java/java-frontend@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.18.0.3393?type=jar", + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar" ] }, { - "ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.8.0.2699?type=jar", + "ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.18.0.3393?type=jar", "dependsOn" : [ "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar" ] }, { - "ref" : "pkg:maven/org.springframework/spring-expression@6.1.5?type=jar", + "ref" : "pkg:maven/org.springframework/spring-expression@6.1.21?type=jar", "dependsOn" : [ - "pkg:maven/org.springframework/spring-core@6.1.5?type=jar" + "pkg:maven/org.springframework/spring-core@6.1.21?type=jar" ] }, { - "ref" : "pkg:maven/org.springframework/spring-core@6.1.5?type=jar", + "ref" : "pkg:maven/org.springframework/spring-core@6.1.21?type=jar", "dependsOn" : [ - "pkg:maven/org.springframework/spring-jcl@6.1.5?type=jar" + "pkg:maven/org.springframework/spring-jcl@6.1.21?type=jar" ] }, { - "ref" : "pkg:maven/org.springframework/spring-jcl@6.1.5?type=jar", + "ref" : "pkg:maven/org.springframework/spring-jcl@6.1.21?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/org.sonarsource.java/java-checks-aws@7.33.0.35775?type=jar", + "ref" : "pkg:maven/org.sonarsource.java/java-checks-aws@8.18.0.40025?type=jar", "dependsOn" : [ - "pkg:maven/org.sonarsource.java/java-frontend@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.java/java-checks-common@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.8.0.2699?type=jar", - "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar" + "pkg:maven/org.sonarsource.java/java-frontend@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.java/java-checks-common@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.18.0.3393?type=jar", + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar" ] }, { - "ref" : "pkg:maven/org.sonarsource.java/external-reports@7.33.0.35775?type=jar", + "ref" : "pkg:maven/org.sonarsource.java/check-list@8.18.0.40025?type=jar", "dependsOn" : [ - "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.8.0.2699?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.8.0.2699?type=jar" + "pkg:maven/org.sonarsource.java/java-checks@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.java/java-checks-aws@8.18.0.40025?type=jar", + "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar" ] }, { - "ref" : "pkg:maven/org.sonarsource.java/java-jsp@7.33.0.35775?type=jar", + "ref" : "pkg:maven/org.sonarsource.java/external-reports@8.18.0.40025?type=jar", "dependsOn" : [ - "pkg:maven/org.sonarsource.java/java-frontend@7.33.0.35775?type=jar", - "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@9.0.84?type=jar" + "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.18.0.3393?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.18.0.3393?type=jar" ] }, { - "ref" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@9.0.84?type=jar", + "ref" : "pkg:maven/org.sonarsource.java/java-jsp@8.18.0.40025?type=jar", "dependsOn" : [ - "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.84?type=jar", - "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.84?type=jar" + "pkg:maven/org.sonarsource.java/java-frontend@8.18.0.40025?type=jar" ] }, { - "ref" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.84?type=jar", - "dependsOn" : [ - "pkg:maven/org.apache.tomcat/tomcat-annotations-api@9.0.84?type=jar" - ] - }, - { - "ref" : "pkg:maven/org.apache.tomcat/tomcat-annotations-api@9.0.84?type=jar", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.84?type=jar", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:maven/org.sonarsource.python/sonar-python-plugin@4.17.0.14845?type=jar", + "ref" : "pkg:maven/org.sonarsource.python/sonar-python-plugin@5.16.0.29940?type=jar", "dependsOn" : [ - "pkg:maven/org.sonarsource.python/python-frontend@4.17.0.14845?type=jar", - "pkg:maven/org.sonarsource.python/python-checks@4.17.0.14845?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.8.0.2699?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.8.0.2699?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.8.0.2699?type=jar", - "pkg:maven/commons-lang/commons-lang@2.6?type=jar", + "pkg:maven/org.sonarsource.python/python-frontend@5.16.0.29940?type=jar", + "pkg:maven/org.sonarsource.python/python-checks@5.16.0.29940?type=jar", + "pkg:maven/org.sonarsource.python/python-commons@5.16.0.29940?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.18.0.3393?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.18.0.3393?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.18.0.3393?type=jar", + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", "pkg:maven/org.codehaus.staxmate/staxmate@2.0.1?type=jar" ] }, { - "ref" : "pkg:maven/org.sonarsource.python/python-frontend@4.17.0.14845?type=jar", + "ref" : "pkg:maven/org.sonarsource.python/python-frontend@5.16.0.29940?type=jar", "dependsOn" : [ - "pkg:maven/org.sonarsource.sslr/sslr-core@1.23?type=jar", - "pkg:maven/com.google.guava/guava@32.0.1-jre?type=jar", - "pkg:maven/com.google.protobuf/protobuf-java@3.25.1?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.7.0.1482?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.8.0.2699?type=jar" + "pkg:maven/org.sonarsource.sslr/sslr-core@1.24.0.633?type=jar", + "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar", + "pkg:maven/com.google.protobuf/protobuf-java@4.29.0?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.20.0.4607?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.18.0.3393?type=jar", + "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1?type=jar" ] }, { - "ref" : "pkg:maven/com.google.guava/guava@32.0.1-jre?type=jar", + "ref" : "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar", "dependsOn" : [ - "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar", + "pkg:maven/com.google.guava/failureaccess@1.0.3?type=jar", "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar", - "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", - "pkg:maven/org.checkerframework/checker-qual@3.33.0?type=jar", - "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar", - "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar" + "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar", + "pkg:maven/com.google.errorprone/error_prone_annotations@2.41.0?type=jar", + "pkg:maven/com.google.j2objc/j2objc-annotations@3.1?type=jar" ] }, { - "ref" : "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar", + "ref" : "pkg:maven/com.google.guava/failureaccess@1.0.3?type=jar", "dependsOn" : [ ] }, { @@ -4992,37 +5078,79 @@ "dependsOn" : [ ] }, { - "ref" : "pkg:maven/org.checkerframework/checker-qual@3.33.0?type=jar", + "ref" : "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar", + "dependsOn" : [ ] + }, + { + "ref" : "pkg:maven/com.google.j2objc/j2objc-annotations@3.1?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar", + "ref" : "pkg:maven/com.google.protobuf/protobuf-java@4.29.0?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar", + "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1?type=jar", + "dependsOn" : [ + "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.20?type=jar", + "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.1?type=jar" + ] + }, + { + "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.20?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/com.google.protobuf/protobuf-java@3.25.1?type=jar", + "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.1?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/org.sonarsource.python/python-checks@4.17.0.14845?type=jar", + "ref" : "pkg:maven/org.sonarsource.python/python-checks@5.16.0.29940?type=jar", "dependsOn" : [ - "pkg:maven/org.sonarsource.python/python-frontend@4.17.0.14845?type=jar", - "pkg:maven/commons-io/commons-io@2.11.0?type=jar", - "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.8.0.2699?type=jar" + "pkg:maven/org.sonarsource.python/python-frontend@5.16.0.29940?type=jar", + "pkg:maven/commons-io/commons-io@2.20.0?type=jar", + "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.18.0.3393?type=jar" ] }, { - "ref" : "pkg:maven/commons-io/commons-io@2.11.0?type=jar", + "ref" : "pkg:maven/commons-io/commons-io@2.20.0?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/commons-lang/commons-lang@2.6?type=jar", - "dependsOn" : [ ] + "ref" : "pkg:maven/org.sonarsource.python/python-commons@5.16.0.29940?type=jar", + "dependsOn" : [ + "pkg:maven/org.sonarsource.python/python-frontend@5.16.0.29940?type=jar", + "pkg:maven/org.sonarsource.python/python-checks@5.16.0.29940?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.18.0.3393?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.18.0.3393?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.18.0.3393?type=jar", + "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-toml@2.20.1?type=jar", + "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.20.1?type=jar", + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", + "pkg:maven/org.apache.commons/commons-text@1.14.0?type=jar", + "pkg:maven/org.codehaus.staxmate/staxmate@2.0.1?type=jar" + ] + }, + { + "ref" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-toml@2.20.1?type=jar", + "dependsOn" : [ + "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1?type=jar", + "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.1?type=jar" + ] + }, + { + "ref" : "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.20.1?type=jar", + "dependsOn" : [ + "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.1?type=jar", + "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1?type=jar" + ] + }, + { + "ref" : "pkg:maven/org.apache.commons/commons-text@1.14.0?type=jar", + "dependsOn" : [ + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar" + ] }, { "ref" : "pkg:maven/org.codehaus.staxmate/staxmate@2.0.1?type=jar", @@ -5036,44 +5164,47 @@ "dependsOn" : [ ] }, { - "ref" : "pkg:maven/com.google.googlejavaformat/google-java-format@1.22.0?type=jar", + "ref" : "pkg:maven/org.sonarsource.go/sonar-go-plugin@1.32.0.5128?type=jar", + "dependsOn" : [ ] + }, + { + "ref" : "pkg:maven/com.google.googlejavaformat/google-java-format@1.28.0?type=jar", "dependsOn" : [ - "pkg:maven/com.google.guava/guava@32.0.1-jre?type=jar" + "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar" ] }, { - "ref" : "pkg:maven/com.ibm/output@1.0.3-SNAPSHOT?type=jar", + "ref" : "pkg:maven/com.ibm/output@2.0.0-SNAPSHOT?type=jar", "dependsOn" : [ - "pkg:maven/org.cyclonedx/cyclonedx-core-java@8.1.0-SNAPSHOT?type=jar", - "pkg:maven/com.ibm/mapper@1.0.3-SNAPSHOT?type=jar", - "pkg:maven/com.ibm/engine@1.0.3-SNAPSHOT?type=jar", - "pkg:maven/org.jetbrains/annotations@24.1.0?type=jar", - "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", - "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar", - "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar", - "pkg:maven/org.sonarsource.java/sonar-java-plugin@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.python/sonar-python-plugin@4.17.0.14845?type=jar", - "pkg:maven/com.google.googlejavaformat/google-java-format@1.22.0?type=jar" + "pkg:maven/org.cyclonedx/cyclonedx-core-java@11.0.1?type=jar", + "pkg:maven/com.ibm/mapper@2.0.0-SNAPSHOT?type=jar", + "pkg:maven/com.ibm/engine@2.0.0-SNAPSHOT?type=jar", + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", + "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar", + "pkg:maven/org.sonarsource.java/sonar-java-plugin@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.python/sonar-python-plugin@5.16.0.29940?type=jar", + "pkg:maven/org.sonarsource.go/sonar-go-plugin@1.32.0.5128?type=jar", + "pkg:maven/com.google.googlejavaformat/google-java-format@1.28.0?type=jar" ] }, { - "ref" : "pkg:maven/org.cyclonedx/cyclonedx-core-java@8.1.0-SNAPSHOT?type=jar", + "ref" : "pkg:maven/org.cyclonedx/cyclonedx-core-java@11.0.1?type=jar", "dependsOn" : [ - "pkg:maven/commons-codec/commons-codec@1.15?type=jar", - "pkg:maven/commons-io/commons-io@2.11.0?type=jar", - "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar", - "pkg:maven/org.apache.commons/commons-collections4@4.4?type=jar", + "pkg:maven/commons-codec/commons-codec@1.19.0?type=jar", + "pkg:maven/commons-io/commons-io@2.20.0?type=jar", + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", + "pkg:maven/org.apache.commons/commons-collections4@4.5.0?type=jar", "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar", - "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.16.1?type=jar", - "pkg:maven/com.networknt/json-schema-validator@1.0.87?type=jar" + "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.20.1?type=jar", + "pkg:maven/com.networknt/json-schema-validator@1.5.9?type=jar" ] }, { - "ref" : "pkg:maven/commons-codec/commons-codec@1.15?type=jar", + "ref" : "pkg:maven/commons-codec/commons-codec@1.19.0?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/org.apache.commons/commons-collections4@4.4?type=jar", + "ref" : "pkg:maven/org.apache.commons/commons-collections4@4.5.0?type=jar", "dependsOn" : [ ] }, { @@ -5081,88 +5212,85 @@ "dependsOn" : [ ] }, { - "ref" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.16.1?type=jar", + "ref" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.20.1?type=jar", "dependsOn" : [ - "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.16.1?type=jar", - "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.16.1?type=jar", - "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.16.1?type=jar", + "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.1?type=jar", + "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.20?type=jar", + "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1?type=jar", "pkg:maven/org.codehaus.woodstox/stax2-api@3.1.4?type=jar", "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.4.0?type=jar" ] }, { - "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.16.1?type=jar", - "dependsOn" : [ ] + "ref" : "pkg:maven/com.networknt/json-schema-validator@1.5.9?type=jar", + "dependsOn" : [ + "pkg:maven/com.ethlo.time/itu@1.14.0?type=jar", + "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1?type=jar", + "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.18.3?type=jar", + "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar" + ] }, { - "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.16.1?type=jar", + "ref" : "pkg:maven/com.ethlo.time/itu@1.14.0?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.16.1?type=jar", + "ref" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.18.3?type=jar", "dependsOn" : [ - "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.16.1?type=jar", - "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.16.1?type=jar" + "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1?type=jar", + "pkg:maven/org.yaml/snakeyaml@2.3?type=jar", + "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.1?type=jar" ] }, { - "ref" : "pkg:maven/com.networknt/json-schema-validator@1.0.87?type=jar", - "dependsOn" : [ - "pkg:maven/com.ethlo.time/itu@1.7.0?type=jar", - "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.16.1?type=jar", - "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.15.2?type=jar", - "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar" - ] + "ref" : "pkg:maven/org.yaml/snakeyaml@2.3?type=jar", + "dependsOn" : [ ] }, { - "ref" : "pkg:maven/com.ethlo.time/itu@1.7.0?type=jar", + "ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.15.2?type=jar", + "ref" : "pkg:maven/com.ibm/mapper@2.0.0-SNAPSHOT?type=jar", "dependsOn" : [ - "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.16.1?type=jar", - "pkg:maven/org.yaml/snakeyaml@2.0?type=jar", - "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.16.1?type=jar" + "pkg:maven/com.ibm/engine@2.0.0-SNAPSHOT?type=jar", + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", + "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar", + "pkg:maven/org.sonarsource.java/sonar-java-plugin@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.python/sonar-python-plugin@5.16.0.29940?type=jar", + "pkg:maven/org.sonarsource.go/sonar-go-plugin@1.32.0.5128?type=jar", + "pkg:maven/com.google.googlejavaformat/google-java-format@1.28.0?type=jar" ] }, { - "ref" : "pkg:maven/org.yaml/snakeyaml@2.0?type=jar", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:maven/com.ibm/mapper@1.0.3-SNAPSHOT?type=jar", + "ref" : "pkg:maven/com.ibm/enricher@2.0.0-SNAPSHOT?type=jar", "dependsOn" : [ - "pkg:maven/com.ibm/engine@1.0.3-SNAPSHOT?type=jar", - "pkg:maven/org.jetbrains/annotations@24.1.0?type=jar", - "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", - "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar", - "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar", - "pkg:maven/org.sonarsource.java/sonar-java-plugin@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.python/sonar-python-plugin@4.17.0.14845?type=jar", - "pkg:maven/com.google.googlejavaformat/google-java-format@1.22.0?type=jar" + "pkg:maven/com.ibm/mapper@2.0.0-SNAPSHOT?type=jar", + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", + "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar", + "pkg:maven/org.sonarsource.java/sonar-java-plugin@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.python/sonar-python-plugin@5.16.0.29940?type=jar", + "pkg:maven/org.sonarsource.go/sonar-go-plugin@1.32.0.5128?type=jar", + "pkg:maven/com.google.googlejavaformat/google-java-format@1.28.0?type=jar" ] }, { - "ref" : "pkg:maven/com.ibm/enricher@1.0.3-SNAPSHOT?type=jar", + "ref" : "pkg:maven/com.ibm/rules@2.0.0-SNAPSHOT?type=jar", "dependsOn" : [ - "pkg:maven/com.ibm/mapper@1.0.3-SNAPSHOT?type=jar", - "pkg:maven/org.jetbrains/annotations@24.1.0?type=jar", - "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", - "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar", - "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar", - "pkg:maven/org.sonarsource.java/sonar-java-plugin@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.python/sonar-python-plugin@4.17.0.14845?type=jar", - "pkg:maven/com.google.googlejavaformat/google-java-format@1.22.0?type=jar" + "pkg:maven/com.ibm/mapper@2.0.0-SNAPSHOT?type=jar", + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", + "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar", + "pkg:maven/org.sonarsource.java/sonar-java-plugin@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.python/sonar-python-plugin@5.16.0.29940?type=jar", + "pkg:maven/org.sonarsource.go/sonar-go-plugin@1.32.0.5128?type=jar", + "pkg:maven/com.google.googlejavaformat/google-java-format@1.28.0?type=jar" ] }, { - "ref" : "pkg:maven/org.sonarsource.api.plugin/sonar-plugin-api@9.13.0.360?type=jar", - "dependsOn" : [ ] + "ref" : "pkg:maven/org.sonarsource.api.plugin/sonar-plugin-api@13.4.3.4290?type=jar", + "dependsOn" : [ + "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar" + ] } ] } \ No newline at end of file diff --git a/sonar-cryptography-plugin/bom/bom.json b/sonar-cryptography-plugin/bom/bom.json index a6f2f867..a2b90f6e 100644 --- a/sonar-cryptography-plugin/bom/bom.json +++ b/sonar-cryptography-plugin/bom/bom.json @@ -1,10 +1,10 @@ { "bomFormat" : "CycloneDX", "specVersion" : "1.5", - "serialNumber" : "urn:uuid:618da25a-127c-393d-8ca6-53ff4fbeb8cb", + "serialNumber" : "urn:uuid:9accf8c5-2e99-38b5-a10d-1f6380cb3472", "version" : 1, "metadata" : { - "timestamp" : "2024-04-12T08:17:04Z", + "timestamp" : "2026-01-28T14:17:18Z", "lifecycles" : [ { "phase" : "build" @@ -52,33 +52,33 @@ } ], "component" : { - "publisher" : "IBM", + "publisher" : "cbomkit", "group" : "com.ibm", "name" : "sonar-cryptography-plugin", - "version" : "1.0.3-SNAPSHOT", + "version" : "2.0.0-SNAPSHOT", "description" : "A SonarQube Plugin to detect cryptographic assets in applications", "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "https://www.gnu.org/licenses/lgpl.txt" + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], - "purl" : "pkg:maven/com.ibm/sonar-cryptography-plugin@1.0.3-SNAPSHOT?type=sonar-plugin", + "purl" : "pkg:maven/com.ibm/sonar-cryptography-plugin@2.0.0-SNAPSHOT?type=sonar-plugin", "externalReferences" : [ { "type" : "distribution-intake", - "url" : "https://eu.artifactory.swg-devops.com/artifactory/res-cryptoagility-team-maven-local" + "url" : "https://maven.pkg.github.com/cbomkit/sonar-cryptography" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.ibm/sonar-cryptography-plugin@1.0.3-SNAPSHOT?type=sonar-plugin" + "bom-ref" : "pkg:maven/com.ibm/sonar-cryptography-plugin@2.0.0-SNAPSHOT?type=sonar-plugin" }, "properties" : [ { "name" : "maven.goal", - "value" : "makeBom" + "value" : "makeAggregateBom" }, { "name" : "maven.scopes", @@ -88,276 +88,276 @@ }, "components" : [ { - "publisher" : "IBM", + "publisher" : "cbomkit", "group" : "com.ibm", "name" : "java", - "version" : "1.0.3-SNAPSHOT", + "version" : "2.0.0-SNAPSHOT", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "b1e4d84004009450001db224583b7545" + "content" : "d9ca4f2c129d9f69452d07f8b54b0f2e" }, { "alg" : "SHA-1", - "content" : "0fa6b8f443accb7d48c43a127fe249305ac6959a" + "content" : "fecb79f4957d03428ced36ba7d64cd6e2ea8d6ca" }, { "alg" : "SHA-256", - "content" : "a481498911347a73b4754c280463f461bed5001206b124719a65493221e02bc0" + "content" : "e22dff9fc0278fe86eb03e428b4c6b5067b8d093ecfd150a900a9f0b664ed49d" }, { "alg" : "SHA-512", - "content" : "57b128b3f2740f49c70b2cdcaf454e698b9206bccc2baef763add57c30161f14d4e9fdbef8e6f2fc679ec432fdf6abece236b407ec942601a560059130d626d1" + "content" : "e87b253bd2f9f124a9c413f5925f6abde4f9adbef5a571dfe18df5e9db5e1b062145ada20e9ad6fe3ab92669dc0bf17acd2373b747411553fe97340c4322f94b" }, { "alg" : "SHA-384", - "content" : "a185821f258b2b643447dbfb1b5c3957cfbc0687e89ab38e55805c45c97a02bd41c1692131c80c57cc19ed6f8c5cc543" + "content" : "799859441a6df415db0bf0cf622e238e5d2cacb37a484c14b6b011b822ed4899da026dc99738010da2390d905cc69606" }, { "alg" : "SHA3-384", - "content" : "f7ca541b347ba47946c48750dd896e31d631d6789840720a82d75c27106ab0a993326c2fa2223420992ed4c20abfe454" + "content" : "bbee643c86568b5b9f3aa1f00082774cf4c700d5a4a418f1916b3aeb195c4d8406165e39fcdf0374c21b49f257741fbd" }, { "alg" : "SHA3-256", - "content" : "d8bcf88111f6bcd1f89323f793bec207dd6b75488bc6eddb3bc3f41b24aee151" + "content" : "238f477b6db54e9a542542bd3daf3e55a447f27d46ed6191d09ae3dbec19b1fb" }, { "alg" : "SHA3-512", - "content" : "b2b9bcefb954c8fac41677f91835f9c30d60c6e5c7d3663c2c2f6c2ae91c7b58814bce67b6d3ec3529071a8140dc2017be6bc1ff42100eddbf04f4bfc6d59d20" + "content" : "d3477728ad194ddd0edd71a87b7179538728bdff4395ad0cbbd47d8320aa18e9a7a00e2dbc422f655fe17cb8d898b487f6ed9440441fc68f9298d28f7a493e4e" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "https://www.gnu.org/licenses/lgpl.txt" + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], - "purl" : "pkg:maven/com.ibm/java@1.0.3-SNAPSHOT?type=jar", + "purl" : "pkg:maven/com.ibm/java@2.0.0-SNAPSHOT?type=jar", "externalReferences" : [ { "type" : "distribution-intake", - "url" : "https://eu.artifactory.swg-devops.com/artifactory/res-cryptoagility-team-maven-local" + "url" : "https://maven.pkg.github.com/cbomkit/sonar-cryptography" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.ibm/java@1.0.3-SNAPSHOT?type=jar" + "bom-ref" : "pkg:maven/com.ibm/java@2.0.0-SNAPSHOT?type=jar" }, { - "publisher" : "IBM", + "publisher" : "cbomkit", "group" : "com.ibm", "name" : "engine", - "version" : "1.0.3-SNAPSHOT", + "version" : "2.0.0-SNAPSHOT", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "67ae457c13ac566ea59b295a59cb7e95" + "content" : "82d71013150d0cc35b2f86c047257ea5" }, { "alg" : "SHA-1", - "content" : "174f4581fdccafe44ba8b06ca8776250a7cbd6be" + "content" : "d8aa90c2d6a5d43a659f77c8106d2638f2fa9b46" }, { "alg" : "SHA-256", - "content" : "e516d0b5fab931fc1f1c39d1ea892f2a07503ec2a245bbc9dcb1c6804adbafd2" + "content" : "a30d5984faeef0722b4cfc6b96e0680e11807dd0e058b791ea2ce803526851f9" }, { "alg" : "SHA-512", - "content" : "914b26f230b80175d70655604c16a5d2f0c34c95be27f5eaedcb01ccd71680c4723f8978c05bf7127f74f2d56beec3cbb98c18b372dfee525d07b7a0b88cd43e" + "content" : "4e2c67e7f337c49c43299da83b8707bac597304ce744a08fc3105e8679a9c1d0908b06a73557ae5b33e3f3cde36dffa11bae79a63b90bccc676cf690ea46be22" }, { "alg" : "SHA-384", - "content" : "0b224db460fdd73a412e39107df54b1bf11c43c424032ad00a73b7f695ba693b4e18a4cc3865f3b42d85840c703b2f1a" + "content" : "c259f83084de03dfb95efb15da1bb5e89a70453ca58df5929ad51fbebc3f4a46e7964249f1bcb71e099167511772bf77" }, { "alg" : "SHA3-384", - "content" : "a4980534f8d193ee0e6c984d540af540221d481fa955c7262eedccdb97afd92701478c32dec4bb874545524c95e4ae4a" + "content" : "aafaf842f747bd36b202cba133419618398debf30bef80ace36629d995c510f045a5227181b98e22685865fd59559080" }, { "alg" : "SHA3-256", - "content" : "b10c75d6a28044f378a59270380d20f7032b80146c669292c31e9140f1cd6548" + "content" : "98c5eb98fa32698d7f1070c731ed32053f8528393a9696f983ae285f9054831d" }, { "alg" : "SHA3-512", - "content" : "a93f4b34a1818b9eb6675e31b810583ff28f6e76470494819d5a7c831d987474bd4c600f297655dfb8c379d3af3861634e7668bfa22c4eddfacf2539cee17ec7" + "content" : "a695852c9a2886e19fde16679d404d92be3ae62617ca460852c29a16601c97385a494b3865b92864f125bed747d7e5836f13153ae86a6c3b7179317d22fa2070" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "https://www.gnu.org/licenses/lgpl.txt" + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], - "purl" : "pkg:maven/com.ibm/engine@1.0.3-SNAPSHOT?type=jar", + "purl" : "pkg:maven/com.ibm/engine@2.0.0-SNAPSHOT?type=jar", "externalReferences" : [ { "type" : "distribution-intake", - "url" : "https://eu.artifactory.swg-devops.com/artifactory/res-cryptoagility-team-maven-local" + "url" : "https://maven.pkg.github.com/cbomkit/sonar-cryptography" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.ibm/engine@1.0.3-SNAPSHOT?type=jar" + "bom-ref" : "pkg:maven/com.ibm/engine@2.0.0-SNAPSHOT?type=jar" }, { - "publisher" : "IBM", + "publisher" : "cbomkit", "group" : "com.ibm", "name" : "common", - "version" : "1.0.3-SNAPSHOT", + "version" : "2.0.0-SNAPSHOT", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "6b537a90ffd838bb65c5a9c2ff371dce" + "content" : "0bc212a0d7a96c40a0c6792249b21ee7" }, { "alg" : "SHA-1", - "content" : "76b39430ee28fd8962edae300a91d5ebc52c1076" + "content" : "70c6efeb7474e7b78595b6601584276bb7a90814" }, { "alg" : "SHA-256", - "content" : "1c9dcb0bdef66d58f48eebc5be6b625485ceba73f8e3310d8b72f5341094acea" + "content" : "aff8b56a14f886f07e502bf26baa476c3b6f3b79b8b6b003da2260435cda087f" }, { "alg" : "SHA-512", - "content" : "be406c24fb42f8595a51ff011041cb03271ff299d6c724961276f76ccc3c2a70a02e41726c188cd48081f064de989d16abf295658ac33a3d0f417a20eeb6c879" + "content" : "dcd37bc935a630965b07aa61633eb51e8ea58543a277f387edb93956a5153b447bd93a48ca2236a56ebf8df5b72b6f4e1759a4d222d1b12b480730f378ad87b1" }, { "alg" : "SHA-384", - "content" : "dcdf2d7e35abc1fc724ab290bbc10952df07a9b5ccd18373fb549c56bd14da38f529de16240e1fee98e083fc025876d8" + "content" : "8af172d828b3415fb085293a1788e04fe53cbba7ae53c2c4911f5333dc30cea9e3a11255922852f6269b09786b9fc8b4" }, { "alg" : "SHA3-384", - "content" : "113bf691c2e686f7b92e4b8c9a4bc788d6c14e77eb448d59a2532c2a0cfa35bdb8f9a87b3a02cc72052f0b0d65fa1ac4" + "content" : "8b03cb2f7fd323ad12fe42836a91697c8a74689b3fc732c16353eab599f709c88ca68dc05e1a4464990990bdd14000f2" }, { "alg" : "SHA3-256", - "content" : "b1103a71a3a027ab5c74986541390192f9c3e9aacc6c05bf6500b653b3b2e387" + "content" : "118e266f4ab89f83ee60b405959cdfb3f114d3f2553d16d5e34cf8791f8164f5" }, { "alg" : "SHA3-512", - "content" : "b03a0a66d302c49312991dd472959472afe74e62fea2b0fe725e4c34dad295a4ac7b34e9e13bcd916141836a2e00dde967da90844a5f65dd7120da3318092130" + "content" : "9af3f6a7540ea1567edea928cd5a7cec4dbea9e0726f9a03de4a0dbeb8eb7e0764ac1db432a816dd2f3d182a0102c7c866fc82f79212650825253055680ba09a" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "https://www.gnu.org/licenses/lgpl.txt" + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], - "purl" : "pkg:maven/com.ibm/common@1.0.3-SNAPSHOT?type=jar", + "purl" : "pkg:maven/com.ibm/common@2.0.0-SNAPSHOT?type=jar", "externalReferences" : [ { "type" : "distribution-intake", - "url" : "https://eu.artifactory.swg-devops.com/artifactory/res-cryptoagility-team-maven-local" + "url" : "https://maven.pkg.github.com/cbomkit/sonar-cryptography" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.ibm/common@1.0.3-SNAPSHOT?type=jar" + "bom-ref" : "pkg:maven/com.ibm/common@2.0.0-SNAPSHOT?type=jar" }, { - "publisher" : "IBM", + "publisher" : "cbomkit", "group" : "com.ibm", "name" : "output", - "version" : "1.0.3-SNAPSHOT", + "version" : "2.0.0-SNAPSHOT", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "b27986fb1cf9f45dcf81b60215b308a6" + "content" : "b6eb9e7a1fd0343a3553986b06986b40" }, { "alg" : "SHA-1", - "content" : "3e712bc9ec7047b57b9ae148b8d5777939e6f9d0" + "content" : "43565f9073474581c103d10e78725f9a1d1653f4" }, { "alg" : "SHA-256", - "content" : "2b40ee3cb069d334e12975cbf18786d1ce45222b083b0113682f3a0120f3d727" + "content" : "8a9166ad957fcafc8da6eeb30a1e35f828e3d0db755992991fe778677062c0c5" }, { "alg" : "SHA-512", - "content" : "59c8384e84ce4586163114c552d51e6e629707b0d19741c3a3fcd02cf31bfe869cfdb41381382ceb6a058ae055bf398f64064183db6af975082a1faab56f3670" + "content" : "6d84d5b43d3e5ed1203bfba6b9d183678ea22898bf822326a598fcec3d24aaf5f59add68b9ac12bcf2a1fdc3181b5d1b433be16e2375d822061af892617d96a9" }, { "alg" : "SHA-384", - "content" : "ed38081f1133f6ccef7c59d167b9b123220edd330d5468cb9efa51f9cbd3aaf788b55314938260ba4d7a55acdf9b1c08" + "content" : "1e238e6a57e4c5171f8969b2f67ad27bc6368f73e40675aeaf54da38fa4060e2580302636b645b37c62dd267059883b9" }, { "alg" : "SHA3-384", - "content" : "f87d2e87088fb44d8efbcadc3f1e439623b3af7390df5a60e52d752a05131fa5f9ea295f362584c6956bdfb58a6c7392" + "content" : "96421d4fb4e8c9dfe8135d50e3930ecb6e3fd2f3c0c796cc8e8f156407bfc62b01a0c74966de91ff702a4dc5faf0930c" }, { "alg" : "SHA3-256", - "content" : "54f73feb09d9dd18b0893aa8b1275e03bda8fa537775506d86051ac2798005c6" + "content" : "5751f5452f415fedb2aa9c912c1cefa182afb93bcaba6672100948e17fd77354" }, { "alg" : "SHA3-512", - "content" : "91c117bc7b6bc4adeb55b86dfe6d1308ab5f718eb9ee56215c5e25398da0489fc42b796ea6b28f9a00624d6a6257208d0aaf20c38fbe99ff43d13d3088703d31" + "content" : "024f64264e3eb3460ded189c4fd595b72596aacadb174bd6f2e5f5fcc37cfc6d118ebb211ea2deb44d7a4d5d4e2857e72738b23905cfde2dbb0e16ca6a1858a7" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "https://www.gnu.org/licenses/lgpl.txt" + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], - "purl" : "pkg:maven/com.ibm/output@1.0.3-SNAPSHOT?type=jar", + "purl" : "pkg:maven/com.ibm/output@2.0.0-SNAPSHOT?type=jar", "externalReferences" : [ { "type" : "distribution-intake", - "url" : "https://eu.artifactory.swg-devops.com/artifactory/res-cryptoagility-team-maven-local" + "url" : "https://maven.pkg.github.com/cbomkit/sonar-cryptography" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.ibm/output@1.0.3-SNAPSHOT?type=jar" + "bom-ref" : "pkg:maven/com.ibm/output@2.0.0-SNAPSHOT?type=jar" }, { "publisher" : "OWASP Foundation", "group" : "org.cyclonedx", "name" : "cyclonedx-core-java", - "version" : "8.1.0-SNAPSHOT", + "version" : "11.0.1", "description" : "The CycloneDX core module provides a model representation of the BOM along with utilities to assist in creating, parsing, and validating BOMs.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "f15d85fa4d72d67dc40b0938e5a263b0" + "content" : "2939896ee374a5f6d45ca70157e58113" }, { "alg" : "SHA-1", - "content" : "89c94f4407141cc6216dc797eaa527b34e06eadf" + "content" : "c5e6a5bdd203c23063db37d5db69bfd5e037d5d2" }, { "alg" : "SHA-256", - "content" : "b186d0f488125cdc032616d0edff92c29bf9cda6dcbf556e5b24e858e1b6f1ee" + "content" : "989348cc6d385629a3ccb735d450b0f0f022167cb702c2fcb0e6f2bdd989dde7" }, { "alg" : "SHA-512", - "content" : "df89c78cde3e1db60c37877b607c0eab3489d825da5d5873c70e6d3592e73158684b76d5105ab93cfac8211b4bab4fff3e557e6cc700dc64698beb625f0ccf48" + "content" : "20a3fee94682c23a57c52bdd1678f877f1b8f2a8c3a2e2aa1ade2be5e74c70da1171aa2f08af40a5a9362eba94fbb52d8a824b3bf6b9591d765ecf6b3c43463c" }, { "alg" : "SHA-384", - "content" : "d51694f1fac1f99b703849b833d1c83f638c9b1a75cf5283ac4c9456bf624b2fcf829d2f4a5e037062b5b33056056e3c" + "content" : "d85aedd5d4e7f7ed6ee0093870e8fea36cd5fc21c825325e5240ea6773b072173429230f4dd12f5ac70146f39f4ff0fe" }, { "alg" : "SHA3-384", - "content" : "59de9d9679f6e05019952cc823fe03729a18d395653d8c7b2706b6d5052cdfa670c3b42a9a0aea5f831e889daea2b995" + "content" : "705238526713babce1ce21922a1d7229ef6e0106a3fe91395757b8fcd5955b83e6001679fa8eb38c0e8960238b1a6514" }, { "alg" : "SHA3-256", - "content" : "6c10f4f239f3e9827282b9e9acc81e1baba86c7ccea88f405470e197c8ec2dce" + "content" : "dbf916ece6434dd0b46d71ab060fc55c6fff2867ed89b5093d7aaf9514a2d2f1" }, { "alg" : "SHA3-512", - "content" : "0b7f570e648628beaae172d88e461aff57435dca352496f3b3537833edee3c217af8350c79ad701ff03655302def0567b3252965358e4929cc6e56ac179f32ee" + "content" : "5cc758b4c5049d792f97296a89009088332c1e2abc180e8f2251f49961a6d6d02b4a9bb4d4fffea0e91ef8cb4530b2f9a70cfd62bc334f47be2f667c2d8a9e0f" } ], "licenses" : [ @@ -368,7 +368,7 @@ } } ], - "purl" : "pkg:maven/org.cyclonedx/cyclonedx-core-java@8.1.0-SNAPSHOT?type=jar", + "purl" : "pkg:maven/org.cyclonedx/cyclonedx-core-java@11.0.1?type=jar", "externalReferences" : [ { "type" : "website", @@ -378,10 +378,6 @@ "type" : "build-system", "url" : "https://github.com/CycloneDX/cyclonedx-core-java/actions" }, - { - "type" : "distribution-intake", - "url" : "https://eu.artifactory.swg-devops.com/artifactory/res-cryptoagility-team-maven-local" - }, { "type" : "issue-tracker", "url" : "https://github.com/CycloneDX/cyclonedx-core-java/issues" @@ -392,57 +388,58 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/org.cyclonedx/cyclonedx-core-java@8.1.0-SNAPSHOT?type=jar" + "bom-ref" : "pkg:maven/org.cyclonedx/cyclonedx-core-java@11.0.1?type=jar" }, { "publisher" : "The Apache Software Foundation", "group" : "org.apache.commons", "name" : "commons-collections4", - "version" : "4.4", + "version" : "4.5.0", "description" : "The Apache Commons Collections package contains types that extend and augment the Java Collections Framework.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "4a37023740719b391f10030362c86be6" + "content" : "d564105594035b363b193d8ce3c18b98" }, { "alg" : "SHA-1", - "content" : "62ebe7544cb7164d87e0637a2a6a2bdc981395e8" + "content" : "e5cf89f0c6e132fc970bd9a465fdcb8dbe94f75a" }, { "alg" : "SHA-256", - "content" : "1df8b9430b5c8ed143d7815e403e33ef5371b2400aadbe9bda0883762e0846d1" + "content" : "00f93263c267be201b8ae521b44a7137271b16688435340bf629db1bac0a5845" }, { "alg" : "SHA-512", - "content" : "5939c9931eb9557caee3b45fe1dd9ce54cabdc4e6182ed7faac77e1a866dd0cb602bfa4ece2f3316d769913366106bd2b61bf3bb5faad1fa7d808124c06dec0f" + "content" : "ee43c513ac9dcbd7dd23b5cbb4ea5f65a2e10cdfbb403d080b87e778b3b45062315522297c41eca514a9a946228ad7650f0a572d5b78effb8260dd8084131988" }, { "alg" : "SHA-384", - "content" : "74059fd8f61c366ed448e102256fdbd1db0d690501c2c296c80f3657a2c0d8ade3dd9533b1431cc29786bbb624195f46" + "content" : "73db8eb3e79569b3fa62aefdce413e6ea250b9853953cb75b9d5ce0f2f35b59b6e86ef708326a608ff20d95bdade8522" }, { "alg" : "SHA3-384", - "content" : "15034fb39842620bf3b152cd90bce252644ebc6a29fafd6dcf5e1f3925f09ccea2ae4e195817450f996b25a7081a9a3f" + "content" : "7a9c035fa846cdcebd4331eb86ed31a67595518299a8bee54597c1eb663aee63214553a561a510b929035266c2a4800b" }, { "alg" : "SHA3-256", - "content" : "1716630a207a8f4a83bf9ef19245f46c87d62bfebbcfa1227101e6dd51da8fa5" + "content" : "614c41bfd8f9c6c1c1e5667c5be45587c3021b780937ad62f54d17051f425086" }, { "alg" : "SHA3-512", - "content" : "c290c98c7b5825d024644ec1162804a1f9ad4da3bb5324d147ddffee6cc79e3c0ecc3825d6116502f2ca292ec80c4e7f8d49a03542dda8f4d58b0dc8228923c5" + "content" : "3cfd12ec2d03ed29b682123cedae422a4c6dc459034a7e0ab5f00ccd422cb9a2ec423a08b953119c426569b888157a6d80aa0e0c63debea50c5c54c481e2eff5" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0" + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], - "purl" : "pkg:maven/org.apache.commons/commons-collections4@4.4?type=jar", + "purl" : "pkg:maven/org.apache.commons/commons-collections4@4.5.0?type=jar", "externalReferences" : [ { "type" : "website", @@ -450,7 +447,7 @@ }, { "type" : "build-system", - "url" : "https://builds.apache.org/" + "url" : "https://github.com/apache/commons-parent/actions" }, { "type" : "distribution-intake", @@ -458,7 +455,7 @@ }, { "type" : "issue-tracker", - "url" : "http://issues.apache.org/jira/browse/COLLECTIONS" + "url" : "https://issues.apache.org/jira/browse/COLLECTIONS" }, { "type" : "mailing-list", @@ -466,11 +463,11 @@ }, { "type" : "vcs", - "url" : "https://git-wip-us.apache.org/repos/asf?p=commons-collections.git" + "url" : "https://gitbox.apache.org/repos/asf?p=commons-collections.git" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.apache.commons/commons-collections4@4.4?type=jar" + "bom-ref" : "pkg:maven/org.apache.commons/commons-collections4@4.5.0?type=jar" }, { "group" : "com.github.package-url", @@ -550,41 +547,41 @@ "publisher" : "FasterXML", "group" : "com.fasterxml.jackson.dataformat", "name" : "jackson-dataformat-xml", - "version" : "2.16.1", - "description" : "Data format extension for Jackson to offer alternative support for serializing POJOs as XML and deserializing XML as pojos.", + "version" : "2.20.1", + "description" : "Data format extension for Jackson to offer alternative support for serializing POJOs as XML and deserializing XML as POJOs.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "ab3c4a4dcd1928d05f206c5d0e9fe36f" + "content" : "55a13effaac5ed19e8393cba5e05f195" }, { "alg" : "SHA-1", - "content" : "d952ad30d3f2d1220f39db175618414b56d14638" + "content" : "3a8e1f06f8bdfd9f2c29f1b2bdad970b02dff4c9" }, { "alg" : "SHA-256", - "content" : "b8e73fa171d1276832abbf20ebb4df597e377405f875ed39808cee9acca3d3ac" + "content" : "190ad4eba35d89dba3517da279e0690681c4745174b94b09ea78f81ceae140f0" }, { "alg" : "SHA-512", - "content" : "018a6e2d0ba7a102331015ec2d471d4565a7eb6d9ce4f339e7cf9f8919c4eb556617b3fa4de703cb7cc438997c7d35b77d100844b14dc1f797292937455c073a" + "content" : "a4383994ae40d74e70d3966fab9ad8412e1a40709ab58f34311f8056a7d8620545302015c0aa9c74c3aa8844f7f2248494979c5387c016107bcc46917bf71b75" }, { "alg" : "SHA-384", - "content" : "c6866f8dbf98a9586382dfe2a83a3640183ec8b9e2469e658f89b7f6c8ac236612994493fdcdaf4ef3b3c7df5dfc5315" + "content" : "606497cf60a7bfbc27e3fcb528b577046f15a0b4efae68b105800bcf11d8c29114aa151776e26a924908449fca682dde" }, { "alg" : "SHA3-384", - "content" : "4a685f29dd132abc7fad2732f6e6c82378cb23b7a8ce24d2c8b02dfbec05014c27d03ab5c573d893602e9be855bf0685" + "content" : "9afd1c3a77fb44529532607ced0b727d25c6493dac7ed450c922813542a0f8cbf8d2921f2b0ff82d5f486512f850dba5" }, { "alg" : "SHA3-256", - "content" : "26f157c5ea198ea4cd0ab454266b6e35577e29c3f8da79513f06d63a9e0e780d" + "content" : "4cbb817483e92d68904c169fa4a48d9479dc2be64a52ed6c72ff01d547d14acc" }, { "alg" : "SHA3-512", - "content" : "48bd2550e2f66c55c320faa91c12fbc001ee395362706096a2d6afbdc9b5e5857e87365349196c5bce7b3ceb3c831d4c328ab058b54e0e597388e7af828fb6cd" + "content" : "c430e0d54fc913c28c199f0d6f935196cdac069c3abcc8cc66fa8ced61dd50c3d3ebf2c2a15d9c4c3e399d7a6184e94e2bb4874e61822d02e9d874b101df84d2" } ], "licenses" : [ @@ -594,7 +591,7 @@ } } ], - "purl" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.16.1?type=jar", + "purl" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.20.1?type=jar", "externalReferences" : [ { "type" : "website", @@ -602,7 +599,7 @@ }, { "type" : "distribution-intake", - "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" + "url" : "https://central.sonatype.com/api/v1/publisher" }, { "type" : "issue-tracker", @@ -614,47 +611,46 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.16.1?type=jar" + "bom-ref" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.20.1?type=jar" }, { - "publisher" : "FasterXML", - "group" : "com.fasterxml.jackson.core", - "name" : "jackson-core", - "version" : "2.16.1", - "description" : "Core Jackson processing abstractions (aka Streaming API), implementation for JSON", + "group" : "com.networknt", + "name" : "json-schema-validator", + "version" : "1.5.9", + "description" : "A json schema validator that supports draft v4, v6, v7, v2019-09 and v2020-12", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "0f51c6a7d713aed6e044cf1692bb59f4" + "content" : "84622292ac5001bac8f16dc5002a8b94" }, { "alg" : "SHA-1", - "content" : "9456bb3cdd0f79f91a5f730a1b1bb041a380c91f" + "content" : "6a2f9fe324b9dc8d8e0c3d7b435f7ae99595a556" }, { "alg" : "SHA-256", - "content" : "f5f8ef90609e64fec82eb908e497dc7d81b2eb983fe509b870292a193cde4dfb" + "content" : "e0b8baeb78fd1ba027454ee3974d8a02f54447eaa510d3052820a7d2160d9ae4" }, { "alg" : "SHA-512", - "content" : "1f1551b0512a0ac3fc883db62472901c91051586616804daec24268ceaed409faaa1f1695df2f6220fa389aeb54802eb51dec439322bc7383507b45c08cbe17b" + "content" : "5ba210c135717a6ed043e0889d96f6381b3668f9e2a011bd0def8138ad327813f792259858ae5ed192cb8ec0645308113769aa8ebee903db1ccd82e98cb3009d" }, { "alg" : "SHA-384", - "content" : "24b8435650ceba20008563d8bb9db4a8aca74d7ffa33e95efc6ac576d71f39d5ab228c133b413c6c852c34d905a249cf" + "content" : "21a4f4fb586959241ce92ad788cb4326d62232aafcddf6953ef7769efa5c6936487ffea51693ff44206f4d66c83ee753" }, { "alg" : "SHA3-384", - "content" : "f15db08b5d9ff6b475507afeb587a30bf6fe050d216cadf1bcd9fccaac0a59fd6bb1e8533ee8a48bb6075801b6f617ce" + "content" : "36bb0b96a34254780e991440e879c1f44a0a62362e115a5c761df0ec1c8f2a9f64a7421ea3cb50a589ae501619fd3942" }, { "alg" : "SHA3-256", - "content" : "5fc0bd6adc8b1f3e96b835acc703cb1a4a977deb1f44d0b9314ea25b83c2f36f" + "content" : "c97a2638d46c235056bacfe90d8e0b88a823a5622e88b608a31f481f3adb9ccf" }, { "alg" : "SHA3-512", - "content" : "7273a7e983ef1e9c7195aa36dba2d0b7b35600f844f61a54c1a80e4590c987257411f8e17a2fb9252849fd8c5ab9fb40f14ae288159a0e98c337020fb8679a1d" + "content" : "08b256bb3ac49102d87c0e635d025699154bfa7785916d591173af6ec14dfde885e34500a7bd13159a00a7fe78dc859aefa9dc930d0719a64ea08209ccffb20a" } ], "licenses" : [ @@ -664,67 +660,66 @@ } } ], - "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.16.1?type=jar", + "purl" : "pkg:maven/com.networknt/json-schema-validator@1.5.9?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://github.com/FasterXML/jackson-core" + "url" : "https://github.com/networknt/json-schema-validator" }, { "type" : "distribution-intake", - "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" + "url" : "https://central.sonatype.com/service/local/staging/deploy/maven2/" }, { "type" : "issue-tracker", - "url" : "https://github.com/FasterXML/jackson-core/issues" + "url" : "https://github.com/networknt/json-schema-validator/issues" }, { "type" : "vcs", - "url" : "https://github.com/FasterXML/jackson-core" + "url" : "https://github.com/networknt/json-schema-validator.git" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.16.1?type=jar" + "bom-ref" : "pkg:maven/com.networknt/json-schema-validator@1.5.9?type=jar" }, { - "publisher" : "FasterXML", - "group" : "com.fasterxml.jackson.core", - "name" : "jackson-annotations", - "version" : "2.16.1", - "description" : "Core annotations used for value types, used by Jackson data binding package.", + "group" : "com.ethlo.time", + "name" : "itu", + "version" : "1.14.0", + "description" : "Extremely fast date-time parser and formatter - RFC 3339 (ISO 8601 profile) and W3C format", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "1c1e081b6b61ee1f1cb0ef52eef45d61" + "content" : "e537d0a2bc8066726f7e4654c253cf84" }, { "alg" : "SHA-1", - "content" : "fd441d574a71e7d10a4f73de6609f881d8cdfeec" + "content" : "c0f9f9d4f4404787e992ab3af5ae95f2fad79e47" }, { "alg" : "SHA-256", - "content" : "a4730771e6a495dd3793a42cdb8ce6bddb96c77e15f40c98fd8d9a7ae09e7286" + "content" : "5cf40ab0cc77828ab2b875b1f3ecd71c8295d7721933476abc2e08fddcea164a" }, { "alg" : "SHA-512", - "content" : "2e268340c11ff606df14cc963e5a4c97b22c69dbe09b9ee96873b6553aa97ba703f94dd85cc05704a35c4ae1651fc37d23d87e94bbad39f2a3a63fc2b3f754b1" + "content" : "aa69a6af3a7123eb41425bbaf6834e16dc3323172709e2338b8a21b970fd21333d996515f42da4aa0225251e30542ad7d9c8332bdf7d62ed96b42fadc8a1520d" }, { "alg" : "SHA-384", - "content" : "27d294ee2a7519f851bd9da37eefd432b13e2ba2ee94e5bcc8587d8d251c8d00537fe583912681f5d43fc92f29dc23ac" + "content" : "8d201334c39b68d13d66fc9df2440fa848b055a9b901e1c630ff66a47e70c8816484d106ae18c642d4257034f33e55f2" }, { "alg" : "SHA3-384", - "content" : "f80ca2f1d7b49ca06c999f287249874979295312ad61fae7dba101a084825c2f7200b0a252c67e36b8f185cb5b70b490" + "content" : "033715e1422cb3f22c1073bc7b058fd16d1436c6314f49f13480d81c86b656cb77a4d852cbba35542bc8f2ce49244ba6" }, { "alg" : "SHA3-256", - "content" : "28db760c602a501079b88e94eb4cea2e59895a688e6ea66e447b51adac113e0a" + "content" : "f18d275dd2a0038a82432e06bb9f396151310136e3a316a869ef54d7fae834c5" }, { "alg" : "SHA3-512", - "content" : "acc6d03c8674438bac5e2b09e1615b11d202c12aa720e9205d820543cc2762f9a3497bf9de9f8239844db23ccf0b52cbd3255aff422c03de490c60ce2c4787ee" + "content" : "8a51b3c6144eb2e363f8804da316d9e3dc246be07af4c0bb55e9540c2a0deb5eb9beb825120d3d203e3a561fd8a605ad64f3af5d233725e1b9c7e06232deaea9" } ], "licenses" : [ @@ -734,67 +729,63 @@ } } ], - "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.16.1?type=jar", + "purl" : "pkg:maven/com.ethlo.time/itu@1.14.0?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://github.com/FasterXML/jackson" + "url" : "https://github.com/ethlo/itu" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, - { - "type" : "issue-tracker", - "url" : "https://github.com/FasterXML/jackson-annotations/issues" - }, { "type" : "vcs", - "url" : "https://github.com/FasterXML/jackson-annotations" + "url" : "https://github.com/ethlo/itu" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.16.1?type=jar" + "bom-ref" : "pkg:maven/com.ethlo.time/itu@1.14.0?type=jar" }, { "publisher" : "FasterXML", - "group" : "com.fasterxml.jackson.core", - "name" : "jackson-databind", - "version" : "2.16.1", - "description" : "General data-binding functionality for Jackson: works on core streaming API", + "group" : "com.fasterxml.jackson.dataformat", + "name" : "jackson-dataformat-yaml", + "version" : "2.18.3", + "description" : "Support for reading and writing YAML-encoded data via Jackson abstractions.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "ac71b868569d329136f2c63f34dd2c89" + "content" : "96671888dd42efee72d555b537558977" }, { "alg" : "SHA-1", - "content" : "02a16efeb840c45af1e2f31753dfe76795278b73" + "content" : "66658356a375664262c227dad09adc51dbc09c54" }, { "alg" : "SHA-256", - "content" : "baf8a8ebee8f45ef68cdd5e2dd3923b3e296c0937b96ec0b4806aa3a31bccd1d" + "content" : "3ca00e47cfcb43e79438ddcfc8fc735e9ebac3824fb7769138609be6bd56e483" }, { "alg" : "SHA-512", - "content" : "e826126759ef714b35c546a524d0fc82e8ae38ad19d0502a58d360926aef3d13492092372302fcea19e78b24432838a40023ebf5dfae4e8c566478c4833ea998" + "content" : "a4696ab6e7161a5aa913ca0d22ff99aae12828104df3169753cb60ed69a8ed29c776c4beb1c938caad57344ef649572b0ef21fa45f3e58b3321b25b5d073939a" }, { "alg" : "SHA-384", - "content" : "6e46bf61e034085444b1a708fbb6926ddd46ccaa75c20c9765c1a98c266449169d7a28e6197224f46cc4c15201187ab6" + "content" : "064eddddc868cac85768a2149fc291d35e429737c223f7b6495c28b3872ccc7101eb21672f6b2d0637777fe42050efd1" }, { "alg" : "SHA3-384", - "content" : "649d02e2265bc92d75876b31006f1cb2fe33788da8edb06ebc5b798e964ba7a8d6b96d21053b01e5fe3cf27a63a8b66c" + "content" : "c817c948326114e676267e97cb87f9eea44f8042f03cc32c02299097683d5d12f538a337f716a6f1fed2e41ef33cdc5f" }, { "alg" : "SHA3-256", - "content" : "d58b494fb40bb93c799c315293daf81fb6d0bf418d38b912aab1c37b4de1db77" + "content" : "b13168ea825b0f2c3b7084b34263e051e6cb2ce36faccb4f4661370746100af9" }, { "alg" : "SHA3-512", - "content" : "c3950b04417dee7450b36f3428005a2f118c8ce0388f2c2470f5543cac3106215b6b591848775176892951f2ea7a608c7d02280067d5cfae1634e0f3e306e628" + "content" : "84a42a102dbc9761fa2c4e5ebe85deb1b5d475bc4f2b3e7d025edaa4e331c87460904d0707673eca186c705c72762bf38364dc1f21f958f76f0518ea4e7d38a4" } ], "licenses" : [ @@ -804,11 +795,11 @@ } } ], - "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.16.1?type=jar", + "purl" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.18.3?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://github.com/FasterXML/jackson" + "url" : "https://github.com/FasterXML/jackson-dataformats-text" }, { "type" : "distribution-intake", @@ -816,54 +807,54 @@ }, { "type" : "issue-tracker", - "url" : "https://github.com/FasterXML/jackson-databind/issues" + "url" : "https://github.com/FasterXML/jackson-dataformats-text/issues" }, { "type" : "vcs", - "url" : "https://github.com/FasterXML/jackson-databind" + "url" : "https://github.com/FasterXML/jackson-dataformats-text/jackson-dataformat-yaml" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.16.1?type=jar" + "bom-ref" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.18.3?type=jar" }, { - "group" : "com.networknt", - "name" : "json-schema-validator", - "version" : "1.0.87", - "description" : "A json schema validator that supports draft v4, v6, v7, v2019-09 and v2020-12", + "group" : "org.yaml", + "name" : "snakeyaml", + "version" : "2.3", + "description" : "YAML 1.1 parser and emitter for Java", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "f0d3df7d661e41708e264ea82bd0ad4a" + "content" : "2a1c2ee8923dcd6bd6d025751af5df37" }, { "alg" : "SHA-1", - "content" : "59861a488ba2b977ef444c03e3c8c8c9f96c0734" + "content" : "936b36210e27320f920536f695cf1af210c44586" }, { "alg" : "SHA-256", - "content" : "d2c00a6c4515a4adecbec813c4b994b720782207258d49cb537478edec1ada89" + "content" : "63a76fe66b652360bd4c2c107e6f0258daa7d4bb492008ba8c26fcd230ff9146" }, { "alg" : "SHA-512", - "content" : "ca1419376baf5bfd13163e7787085134c46b196eb6fbb19099eedb56d153b37dc7b709d7e771088421c567c45066d209f37e5782706f798a228e7e4f21b7c522" + "content" : "1c9c78f0d102ae49a7c06f9e20c6a79a4fb9a2af962230ee6e136bda0caf10dcbb9deadc1c3ab15f74a4982ec8f8266217115e357329fde5b3f4f1858882de0c" }, { "alg" : "SHA-384", - "content" : "e454ab9b970e4cb4b2f6f595495e0ad43d455b7fb10d474607f19fdef4569acc08a4f935625451d118e0496682ff33a4" + "content" : "77b1d06e83fd51b83b13372d5ef2eb43c5a66f193db857cee947ae4e900e4a4a0c66a8074435984b9a0b007a69cc2b4f" }, { "alg" : "SHA3-384", - "content" : "ae83744bb3d0cc751059cd8fda72df351cd5127187a16c3c99ea679c3433f240f90c13de4e2c5c11206d325375e48c59" + "content" : "550c4e7a119fd690f750317dc0e20ad7bfc7fa28fa0409fc572bc745d51340a60e9e2ce2af97f458daa561155130bb97" }, { "alg" : "SHA3-256", - "content" : "34685e96c0c011463bb57551b03f66b522eedf3d306e7181b5823a2036e87964" + "content" : "d1b540ee39c34ab1484be27d2dd56a14aa48f88668905f9ad176932f4b2cd5d6" }, { "alg" : "SHA3-512", - "content" : "764183cf1e2de9fbe52d6f228957015ab7cc0f051aa3a289ecaed9b0c37093d791786f55bb141083beff08cd78aad282fec4e9d8e470cbde3ad18ad3ec7d6383" + "content" : "879ccb34343ebd4ac4888091d97f393c5f75cbb066cf8cf1b9b3eb03a3442cb17326c60bd0db1403aa66ed1f0a5a0d548c96dbce74ebc5c3d6d93950f24b417f" } ], "licenses" : [ @@ -873,11 +864,11 @@ } } ], - "purl" : "pkg:maven/com.networknt/json-schema-validator@1.0.87?type=jar", + "purl" : "pkg:maven/org.yaml/snakeyaml@2.3?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://github.com/networknt/json-schema-validator" + "url" : "https://bitbucket.org/snakeyaml/snakeyaml" }, { "type" : "distribution-intake", @@ -885,1036 +876,1055 @@ }, { "type" : "issue-tracker", - "url" : "https://github.com/networknt/json-schema-validator/issues" + "url" : "https://bitbucket.org/snakeyaml/snakeyaml/issues" }, { "type" : "vcs", - "url" : "https://github.com:networknt/json-schema-validator.git" + "url" : "https://bitbucket.org/snakeyaml/snakeyaml/src" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.networknt/json-schema-validator@1.0.87?type=jar" + "bom-ref" : "pkg:maven/org.yaml/snakeyaml@2.3?type=jar" }, { - "group" : "com.ethlo.time", - "name" : "itu", - "version" : "1.7.0", - "description" : "Extremely fast date/time parser and formatter - RFC 3339 (ISO 8601 profile) and W3C format", + "publisher" : "cbomkit", + "group" : "com.ibm", + "name" : "mapper", + "version" : "2.0.0-SNAPSHOT", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "4f9277e3108caa3314836d8f20f9cf94" + "content" : "8266e2e8bdbc19492b73a641829b77f7" }, { "alg" : "SHA-1", - "content" : "00c6977b9d42efa3f8c95c31db5313a96ffc1724" + "content" : "0a577009d07ae2dd201dd12db7de534a95132822" }, { "alg" : "SHA-256", - "content" : "55ceb418c9e8138c4fcf62e213c4c814d89e8a84c827d395407cbecba5d791e7" + "content" : "309909b57fdefcf60f7a775579f13961f2bf5b0993c4ca0bfb45849d1c1d3e4e" }, { "alg" : "SHA-512", - "content" : "b29808a998e120d6fa97a19ea92402e57d06b92ddb98b892ae7c9de044b9e1d805dca2f7c0fe7faaa1fced7eecbda927d709113727a050972f24a75aa29525b8" + "content" : "be39a43306537c59940b629f953bbe60d6dc4f86ed05d4e3f85a0a00a6176f87d4035335bc376f7dcf4edccd9f7721ea885c00936d6ed15ff3bd263b6afbeeb0" }, { "alg" : "SHA-384", - "content" : "f63cbcc14966028fc81feec87bb5f948e0acc0a1683e9147eafe71c98cf3bb38d871bdccfdf70d94c985e1727b00ae7a" + "content" : "f568108df2411dae89b7bb0a420f7c1947d732ce7892d497d3d99d5eda151d87bf68a142e575d19b561914fac4d85a75" }, { "alg" : "SHA3-384", - "content" : "f95deb0a7c863dfc3e595a1398beecfd4baa7c3b5c8f43c3324e374de58d8e13891b32cb62d67d0e44df384fa320246e" + "content" : "f9ed8e4a5c42c2eaaa4af32f36589139571237a4aa85b5353f5c8ff1bfcf90f2d227e77e4ccb1716bb85e9a9b9a5ad7a" }, { "alg" : "SHA3-256", - "content" : "37b170afbaa74ad33e4dfb402aae14a2a026fbde83cbad0e61aee65b5a01f55d" + "content" : "5d5aae940db911e26128b08abd03d0db1071c821345d019ba9c144aa45cb9f8d" }, { "alg" : "SHA3-512", - "content" : "f87bbab20f0ffd19ad27225b623b44cfa693fc83b27eb828acf0beeda846a13a9139a11e32d59cf81aa93da08af02335dddf59b2afc5a36900478a04c09c6218" + "content" : "34e93b78ae899aca9010cd2bed9ea1db4d479ef92715d92a245910f57be8f74b299f25f593ff216d0f484a068007846006bc0a7ad5d22e8485f0b4a7aff1e297" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0" + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], - "purl" : "pkg:maven/com.ethlo.time/itu@1.7.0?type=jar", + "purl" : "pkg:maven/com.ibm/mapper@2.0.0-SNAPSHOT?type=jar", "externalReferences" : [ - { - "type" : "website", - "url" : "https://github.com/ethlo/itu" - }, { "type" : "distribution-intake", - "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" - }, - { - "type" : "vcs", - "url" : "https://github.com:ethlo/itu" + "url" : "https://maven.pkg.github.com/cbomkit/sonar-cryptography" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.ethlo.time/itu@1.7.0?type=jar" + "bom-ref" : "pkg:maven/com.ibm/mapper@2.0.0-SNAPSHOT?type=jar" }, { - "publisher" : "FasterXML", - "group" : "com.fasterxml.jackson.dataformat", - "name" : "jackson-dataformat-yaml", - "version" : "2.15.2", - "description" : "Support for reading and writing YAML-encoded data via Jackson abstractions.", + "publisher" : "cbomkit", + "group" : "com.ibm", + "name" : "enricher", + "version" : "2.0.0-SNAPSHOT", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "8b854304b3f56fcb85f9815f420b13fc" + "content" : "00d7c2f7423fee908b8cb27765971611" }, { "alg" : "SHA-1", - "content" : "58194ff9f51915ad6bf6b6f24818232d7566418a" + "content" : "a48f16b888963909ff9cdbf6e084e243e5976940" }, { "alg" : "SHA-256", - "content" : "37795cc1e8cb94b18d860dc3abd2e593617ce402149ae45aa89ed8bfb881c851" + "content" : "5cbada4504b461582342ef5902100d0bebca490211ab89abf0807f83e6cbd4b8" }, { "alg" : "SHA-512", - "content" : "0e7e444bb04159967945a131e15131304e667370ba118d4d9d300ad10ab68c85f250bc7ce31d46bc72ef381f99f7f6352fd866debf700e85995063cbd6bcb728" + "content" : "f44202d96665f6068ae2af5e2cd135c156fc28a5ce7e5c923c1b03874c78a1d00377cea8810dabf95baca38bfc1335083a781e5d0de726d5589a65c95689efa2" }, { "alg" : "SHA-384", - "content" : "ebd84ccc50f2986468a62028fcaaae53520ba5eb64f008bd086b10e4ffb1ca33af8a4aded7572e09a6eb9419da36485a" + "content" : "8adf77fe24333492e4e498c7be9ef91bbb8b94b5cccb1e93bbb4f566dbd68953ce3149fcc2509870880f7420c5419e56" }, { "alg" : "SHA3-384", - "content" : "3881fbd843d0351c51ccd33f4c85a4c8f2949165c19e4ff44caa3ca7418505366af75c1f73711d85f666d7095f18939c" + "content" : "923d1aa53e1e323d598da22783ca93356793cfb830cd8b99c0ed603f810bea68a3ad5629daa98cf4af9f8099bc158859" }, { "alg" : "SHA3-256", - "content" : "e9e2e7b894cf982c5bc43a490bd784cf01a8c4123a5b1f2a0b73133104bdfff3" + "content" : "33118761988bae85c1a08aafcb4dafba126f3d894f528c7d706185d2556492ff" }, { "alg" : "SHA3-512", - "content" : "9154b0c38ef860cd89bc2338afb85d26f225aac039fb284c29ac034cd27fb34074044400264058153184ecbff214d2611b7647ae06defa9611766c893e7a857c" + "content" : "b087c3b1d8f38c865f27269519b117fc7b7d74b4154a36a62e076231db260fe36e270cec272a74c1591ee6336ac4cc7d26504f9bfaa7d12b0c0546c648594ecd" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0" + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], - "purl" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.15.2?type=jar", + "purl" : "pkg:maven/com.ibm/enricher@2.0.0-SNAPSHOT?type=jar", "externalReferences" : [ - { - "type" : "website", - "url" : "https://github.com/FasterXML/jackson-dataformats-text" - }, { "type" : "distribution-intake", - "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" - }, - { - "type" : "issue-tracker", - "url" : "https://github.com/FasterXML/jackson-dataformats-text/issues" - }, - { - "type" : "vcs", - "url" : "https://github.com/FasterXML/jackson-dataformats-text/jackson-dataformat-yaml" + "url" : "https://maven.pkg.github.com/cbomkit/sonar-cryptography" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.15.2?type=jar" + "bom-ref" : "pkg:maven/com.ibm/enricher@2.0.0-SNAPSHOT?type=jar" }, { - "group" : "org.yaml", - "name" : "snakeyaml", - "version" : "2.0", - "description" : "YAML 1.1 parser and emitter for Java", + "publisher" : "cbomkit", + "group" : "com.ibm", + "name" : "rules", + "version" : "2.0.0-SNAPSHOT", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "caf24b81b9d57e6d4f68b1ccd36e00a3" + "content" : "d7ecc53f19d43c6f2a4b49e4176ca55c" }, { "alg" : "SHA-1", - "content" : "3aab2116756442bf0d4cd1c089b24d34c3baa253" + "content" : "c56bb5c149d3dfcab27b3cd46cff1417f6f8fb0a" }, { "alg" : "SHA-256", - "content" : "880c9d896e4b74a06c549c15ca496450165d6909fa15d7e662bee8f6a66d7afa" + "content" : "df50b46a93159b37559a368172ff36723491b105332dac34d30016617a1cae0a" }, { "alg" : "SHA-512", - "content" : "93567558444365c436027bd1064b67ae99abde77fa89b33ac7c586ab83e4dbf02b7610669fd00ccd258bca6ba3fa078954c92d918b989317dce7bf9ce18836b8" + "content" : "41d01c3b1af55b447c252540c6315181c51418f4c8da7d8e8e9941d137dbe4b3db8fddd29e80ee8a5aab44c5f0ca53064db6018225d1093915659f7d70f31e10" }, { "alg" : "SHA-384", - "content" : "63c0ec40f4e3f24786031fb8a9477071c86e69247dce283ff725e328e26fba7bdfbb0ab52027b9b0988b3978703a95fe" + "content" : "548c8780f188b1f0474dc9fec03ddbd2db58e4559614094c0690bd1b9921b9f4f632bef951a1f1f290e883013d1e37a1" }, { "alg" : "SHA3-384", - "content" : "fedd091de2b63c38fb04cb8e2d657bc7b37193ef065b18058be892d6b816d7cb68e5445819c3f3f8fca116311adc9760" + "content" : "b91056be1f547eee5c1ea75182d1325cb010cfed29fcd20a766784f3cd02808d5463edbf8f46ced5c022b00a467bdf3c" }, { "alg" : "SHA3-256", - "content" : "66264c5c5f4703942a959310c14f22df9c2b1c304ddca1d1c211da58af5623f4" + "content" : "ad7e4096af3a203f56bf433a5cf9a33c7ac109429a9fb8002162807413eca9f2" }, { "alg" : "SHA3-512", - "content" : "0c4c5807880025a22791114253443d2166218760d63b80cd72eb3fdd71a19fdadb27d392b47de9c6b7ca2a2dc312273f0b8c97012ff277d2cab0fd06f3902573" + "content" : "ee8b8b71399966ed05fde682ddca8eabc55cb97be61e7225a3c7f8e2d9b934cc42e25ba503b0a9696309ddc5608cc7acae241c6209c7d401af9be00c3362646d" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0" + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], - "purl" : "pkg:maven/org.yaml/snakeyaml@2.0?type=jar", + "purl" : "pkg:maven/com.ibm/rules@2.0.0-SNAPSHOT?type=jar", "externalReferences" : [ - { - "type" : "website", - "url" : "https://bitbucket.org/snakeyaml/snakeyaml" - }, { "type" : "distribution-intake", - "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" - }, - { - "type" : "issue-tracker", - "url" : "https://bitbucket.org/snakeyaml/snakeyaml/issues" - }, - { - "type" : "vcs", - "url" : "https://bitbucket.org/snakeyaml/snakeyaml/src" + "url" : "https://maven.pkg.github.com/cbomkit/sonar-cryptography" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.yaml/snakeyaml@2.0?type=jar" + "bom-ref" : "pkg:maven/com.ibm/rules@2.0.0-SNAPSHOT?type=jar" }, { - "publisher" : "QOS.ch", - "group" : "org.slf4j", - "name" : "slf4j-api", - "version" : "2.0.7", - "description" : "The slf4j API", + "publisher" : "cbomkit", + "group" : "com.ibm", + "name" : "python", + "version" : "2.0.0-SNAPSHOT", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "403dffa46cdd2e3c82da19df4f394a4c" + "content" : "ccef16b883ddde50de9d85c9d9ff57d7" }, { "alg" : "SHA-1", - "content" : "41eb7184ea9d556f23e18b5cb99cad1f8581fc00" + "content" : "7c46fb12573fe91f827e8b17061e667542446802" }, { "alg" : "SHA-256", - "content" : "5d6298b93a1905c32cda6478808ac14c2d4a47e91535e53c41f7feeb85d946f4" + "content" : "d583f4187ad46a817d9738fbee18f1f106d919c9fa258b4b4b7b6cbf0fa73a4d" }, { "alg" : "SHA-512", - "content" : "216d2cac27d501972c888f94dfa747d700b80d60813884b6ab4b12c6a3b17ed0c21a1d27e1aa4332c97c828f20039e3913d2763d7e1a3cef36ae4389a276e7a8" + "content" : "8fe222832be326c284687700961512b5105b3365e822b1031a509a95b3dff56e94dee283aa50431aab27ba4d927f32897d17f46f13131d3c088a88837079a280" }, { "alg" : "SHA-384", - "content" : "c25b39f418aa726ba8405dfd9b356131f89984e2ef5a55a724a2abf3b7c78443f671105835161d2414d602cf03da9f2d" + "content" : "6f60f20575ccca34261997da1975b317b9227da0b24b70efb74ff7fc545ebf693c4a10f2e039c0ec8d499c75df975634" }, { "alg" : "SHA3-384", - "content" : "f33abfaac21badae6f85d3ebbc6c1204fd7fda3bb15173e763fa8cee95bce6a8270eec2c8f49343c66c8d2767bc317e1" + "content" : "c6762d5478688df36ed4a851ce9a7132a7f56eabbd862701e67a2b4e14da34b925fee46105317806c2e9f7a32d5de542" }, { "alg" : "SHA3-256", - "content" : "6e00d4b264a2afc4ca4e98f716ecece66c32c626ca3f8c5d56b22092b6fe417b" + "content" : "2f0867b59489ba5f878ebb81f17c948918fd3bfdf30abe4f59787fc4c483b54e" }, { "alg" : "SHA3-512", - "content" : "ad7b9142d370fc532a07cdd43881a129b012ff50e2bede3ac27d9bd31ec707bf2f45e82002fa59e962955cc38ab73cdd77713fca50cedc926c046f5617c1285b" + "content" : "acb37a720d8ad69ca748ccf71fb2d0772241c85ce794e481922c714fc6873339663b1ce4b607d35a510c5504965e6c038d824bc3ae3818283e43796336729dd8" } ], "licenses" : [ { "license" : { - "id" : "MIT", - "url" : "https://opensource.org/licenses/MIT" + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], - "purl" : "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar", + "purl" : "pkg:maven/com.ibm/python@2.0.0-SNAPSHOT?type=jar", "externalReferences" : [ - { - "type" : "website", - "url" : "http://www.slf4j.org" - }, { "type" : "distribution-intake", - "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" - }, - { - "type" : "vcs", - "url" : "https://github.com/qos-ch/slf4j/slf4j-api" + "url" : "https://maven.pkg.github.com/cbomkit/sonar-cryptography" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar" + "bom-ref" : "pkg:maven/com.ibm/python@2.0.0-SNAPSHOT?type=jar" }, { - "publisher" : "IBM", + "publisher" : "cbomkit", "group" : "com.ibm", - "name" : "mapper", - "version" : "1.0.3-SNAPSHOT", + "name" : "go", + "version" : "2.0.0-SNAPSHOT", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "f77ba78b00e389feb00739f8f39381f5" + "content" : "50fd64fef019128c41ef974a5d9bc4ef" }, { "alg" : "SHA-1", - "content" : "3527ba5c2addbdbe28ceabafc99fb63ed1f19598" + "content" : "6ae108981a7680587a8ba9a1e1028fceaa93e2d9" }, { "alg" : "SHA-256", - "content" : "c18a94c325cc96ea9e1abdd8d7ff1f030f0d414e14d19978ba4e97f3851dbfd5" + "content" : "8fc253d499998d574d4a3f18e689f9ef4f15e15dd745c0d5559afd46acecbb0a" }, { "alg" : "SHA-512", - "content" : "a3db5622d4a4e3ad7db2567fb8caa8d7c77ec8cc6a5a0108041964e8400801757bc8a5760798299f224ec6dad2e8c3e460f25224d3c7854768fefaa82bb41c55" + "content" : "e99d1523f39c349682a749ce85412bcc7fab28e95fd6b680d6d8b710cd67303f8edcc1fddd45d05e3d76344a1a0663958df8cab266a309e921fd91550bd8b5cd" }, { "alg" : "SHA-384", - "content" : "8b74ab21024e508b4c00a57fdce5aa0e61567ea3712185f6dffb3662f7bb8319bb878e0f004ae712d98d0d766a43ae63" + "content" : "5265655a2c10bf07800ae1fca33a77c21c08b3d86b2059abeb2bd1bff13e8429be3864a58e297b99e2ff93cd9e073277" }, { "alg" : "SHA3-384", - "content" : "ec4e1425c94578e1e96fd1c2b10baa47ba6f1cffaa7a569d3f4c50ca18dc433492c5641cdd379c89a4b41361f1eda6a9" + "content" : "3775ea42dd402db0cf7b1aac409cf7ef6e90b3b092c58964f694d9dcb820393461ecbc325a324c6caa923fc2bca58e1a" }, { "alg" : "SHA3-256", - "content" : "b8dd34534aeef2ca45902fa7e047c7965db3d82cd8cbb31fe87c71911d3b2957" + "content" : "54f353989203590587027a506de64a5ab4e3dcddb1877f6d5e1bf53e2fd06e82" }, { "alg" : "SHA3-512", - "content" : "676519218fc4c944296be985e14098e41ea69bb84e3ee92ac62315810301fa7cfb48d6036789ea2aae727e84811183646e5cb98b95c312a3a50b86b9e7c1fbc3" + "content" : "4096da9c44983e27842b7977c4c97c4f4536fb92aec3d856e2d228c87d6b682841f245b6e65335b517b7d841505eaae1b1a7341b354c02e8025ded01a44535fa" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "https://www.gnu.org/licenses/lgpl.txt" + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], - "purl" : "pkg:maven/com.ibm/mapper@1.0.3-SNAPSHOT?type=jar", + "purl" : "pkg:maven/com.ibm/go@2.0.0-SNAPSHOT?type=jar", "externalReferences" : [ { "type" : "distribution-intake", - "url" : "https://eu.artifactory.swg-devops.com/artifactory/res-cryptoagility-team-maven-local" + "url" : "https://maven.pkg.github.com/cbomkit/sonar-cryptography" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.ibm/mapper@1.0.3-SNAPSHOT?type=jar" + "bom-ref" : "pkg:maven/com.ibm/go@2.0.0-SNAPSHOT?type=jar" }, { - "publisher" : "IBM", - "group" : "com.ibm", - "name" : "enricher", - "version" : "1.0.3-SNAPSHOT", + "publisher" : "SonarSource", + "group" : "org.sonarsource.api.plugin", + "name" : "sonar-plugin-api", + "version" : "13.4.3.4290", + "description" : "Plugin API for SonarQube, SonarCloud and SonarLint", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "ab149929b86067137d9b3e6088980242" + "content" : "9121c8851ff1af1153c8dd4fa94c9ce7" }, { "alg" : "SHA-1", - "content" : "1c46d73df827918655d53e22810abba87d2abead" + "content" : "64194b3b6336b78df92f9fa5a58682c85ec5626b" }, { "alg" : "SHA-256", - "content" : "1bdc36f18bf268014c86f3b723aa54fe3d6bfcca6e5e1cf5b0a5e8d8cac9df9c" + "content" : "ce1c77307f81897f3c8f901d81a0169db9f2ec614d65723679bc8bfedceb56dd" }, { "alg" : "SHA-512", - "content" : "39061a336b260906ba1464db8c4016d5f4caf5335227365812f7ef9bbd4ac9439f101a324316733b1f0d1764b7882a52d51f4cbb245c3075ddb2b915772daf94" + "content" : "8a9f34a03acbe05d9086119287ab2b2d84c8bff43367f75d42ca5bd5f66c54e4007d1affe247f7f3a0cb710328705b6a0db0db2e211b46e8979ea9e3eee6c401" }, { "alg" : "SHA-384", - "content" : "d2d377fc38755a0ab145758429e4998f76602663b8be64dd4dffa346cfbd52b33a7eb0db2ae417b5df6fcc7ce9425e7f" + "content" : "7f1d268c151ad6fda7e5c5b21abb74b5a4b2bcb3e43fb4d3eceef01cab5e28e12b0d019d6d7da39a977f1fd8a6260ed2" }, { "alg" : "SHA3-384", - "content" : "0e51949beb1b78c7a88500da6c3c8961c7b0d1ad92f09ae0be3572d71d1e220d4dea4a38b4ff7fc06c2d1223b7dca58d" + "content" : "c4ab8215fb558662a98375c9f347636f4e27fa912a23acadf804c5661caa2899529a6777f8c9f9a133c5a6e676ec0bf4" }, { "alg" : "SHA3-256", - "content" : "e3d5a512fda5691283a0977cd5cfe715500af578526b3a10af5f39ecd912a3e4" + "content" : "acb5c5fb43a612de73d7562499398bfb7678b878de04ecb697590fac4ed2e61c" }, { "alg" : "SHA3-512", - "content" : "6ca0362a0c9acf97f0291ba29abe36fae66d259c3fda417615c89cc74fd7bda4f0a8f794242eac5ae255b46d009e8e0c5dd33917b95711256b383eb13c3fe372" + "content" : "bf256b0cd721c685cc677bc5ab0af2eb68e469b7cdcd9e9bae7b60baa718b159b0e2cc9ca489a088b8d4556cef33da26d1bdf7fb1b952014b61e4b282aface76" } ], "licenses" : [ { "license" : { "name" : "GNU LGPL 3", - "url" : "https://www.gnu.org/licenses/lgpl.txt" + "url" : "https://www.gnu.org/licenses/lgpl-3.0.txt" } } ], - "purl" : "pkg:maven/com.ibm/enricher@1.0.3-SNAPSHOT?type=jar", + "purl" : "pkg:maven/org.sonarsource.api.plugin/sonar-plugin-api@13.4.3.4290?type=jar", "externalReferences" : [ { - "type" : "distribution-intake", - "url" : "https://eu.artifactory.swg-devops.com/artifactory/res-cryptoagility-team-maven-local" + "type" : "website", + "url" : "https://www.sonarqube.org/" + }, + { + "type" : "vcs", + "url" : "https://github.com/SonarSource/sonar-plugin-api" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.ibm/enricher@1.0.3-SNAPSHOT?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.api.plugin/sonar-plugin-api@13.4.3.4290?type=jar" }, { - "group" : "org.bouncycastle", - "name" : "bcpkix-jdk18on", - "version" : "1.78", - "description" : "The Bouncy Castle Java APIs for CMS, PKCS, EAC, TSP, CMP, CRMF, OCSP, and certificate generation. This jar contains APIs for JDK 1.8 and up. The APIs can be used in conjunction with a JCE/JCA provider such as the one provided with the Bouncy Castle Cryptography APIs.", + "publisher" : "QOS.ch", + "group" : "org.slf4j", + "name" : "slf4j-api", + "version" : "2.0.17", + "description" : "The slf4j API", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "9553f65f617b0deb8efcbc131262706b" + "content" : "b6480d114a23683498ac3f746f959d2f" }, { "alg" : "SHA-1", - "content" : "dd61bcdb87678451dd42d42e267979bd4b4451a1" + "content" : "d9e58ac9c7779ba3bf8142aff6c830617a7fe60f" }, { "alg" : "SHA-256", - "content" : "ce36b14a90e6b3e9a2c9964e67440d4c758bd257189e7cd745d29a3817611861" + "content" : "7b751d952061954d5abfed7181c1f645d336091b679891591d63329c622eb832" }, { "alg" : "SHA-512", - "content" : "c5460e4e53d08765fedc4402b8785677bd062f32ad928a151f9590941f463d9016af898b9ab3a38761d74e8f25d9368be9824bc8ef3279eab54adb2abd9e0ae4" + "content" : "9a3e79db6666a6096a3021bb2e1d918f30f589d8de51d6b600f8ebd92515a510ae2d8f87919cc2dfa8365d64f10194cac8dfa0fb950160eef0e9da06f6caaeb9" }, { "alg" : "SHA-384", - "content" : "a730ed33aa0ff4b5c6595fd75d50dd88136b273a4654274edc2d89e166b5ee22df3dc86c898e75d65668fb642736bd8d" + "content" : "6ea24f814a9b6ece428cfd0535e2f3b8927005745ef61006b50fdb5a90126ee5ea05650155382b3b755c5bce38ef3944" }, { "alg" : "SHA3-384", - "content" : "8e4d70a67d45d728854f950c660f34751667403e70f9416818fe314e1b78d196bb780f5bf7d884c506acded0af84d337" + "content" : "9b1015052f0ec43f9be09764e131834157599611cb52f6fe591c4ac6a8ab4817518f2a4b8871e5e738c8678e93af5557" }, { "alg" : "SHA3-256", - "content" : "47b760ec891f693389d6c2fd966d3f3ff70c669cd88c8e8e3dafac621ba189ce" + "content" : "00559b4f4066b4917ba4fe2a6f23111eaeada321112d030910d218ced9084b5e" }, { "alg" : "SHA3-512", - "content" : "a77f6916d5a8c9965c2f1909b4c65bc8bd8cc18e22bcc4bd846e9a0b1e52f9c89a2f6e93a76b08fda8b4d22d80105cdb4b88102ca1492475a3a2c2dfebebebf8" + "content" : "9579c2f7e7516e177c2d493ccc9eb8150978cf19f6f09b28d116f6935239fd56dc6af2b62b3336f79b0b462445550cd1fb5377a07001a6f44aaab6a32fa2fa47" } ], "licenses" : [ { "license" : { - "name" : "Bouncy Castle Licence", - "url" : "https://www.bouncycastle.org/licence.html" + "id" : "MIT", + "url" : "https://opensource.org/licenses/MIT" } } ], - "purl" : "pkg:maven/org.bouncycastle/bcpkix-jdk18on@1.78?type=jar", + "purl" : "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://www.bouncycastle.org/java.html" + "url" : "http://www.slf4j.org" }, { - "type" : "issue-tracker", - "url" : "https://github.com/bcgit/bc-java/issues" + "type" : "distribution-intake", + "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "vcs", - "url" : "https://github.com/bcgit/bc-java" + "url" : "https://github.com/qos-ch/slf4j/slf4j-parent/slf4j-api" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.bouncycastle/bcpkix-jdk18on@1.78?type=jar" + "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar" }, { - "group" : "org.bouncycastle", - "name" : "bcprov-jdk18on", - "version" : "1.78", - "description" : "The Bouncy Castle Crypto package is a Java implementation of cryptographic algorithms. This jar contains JCE provider and lightweight API for the Bouncy Castle Cryptography APIs for JDK 1.8 and up.", + "publisher" : "The Apache Software Foundation", + "group" : "org.apache.commons", + "name" : "commons-lang3", + "version" : "3.18.0", + "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang. The code is tested using the latest revision of the JDK for supported LTS releases: 8, 11, 17 and 21 currently. See https://github.com/apache/commons-lang/blob/master/.github/workflows/maven.yml Please ensure your build environment is up-to-date and kindly report any build issues.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "54b851711aea718aa835739bc23f7b90" + "content" : "48b9886957920a4cdb602780ca345087" }, { "alg" : "SHA-1", - "content" : "619aafb92dc0b4c6cc4cf86c487ca48ee2d67a8e" + "content" : "fb14946f0e39748a6571de0635acbe44e7885491" }, { "alg" : "SHA-256", - "content" : "1bf721b09758b3f55f2a5c875b6178ec6c41dddad854b0dead4b27a236f1943a" + "content" : "4eeeae8d20c078abb64b015ec158add383ac581571cddc45c68f0c9ae0230720" }, { "alg" : "SHA-512", - "content" : "5c2707f611fe4f80d7775bd0b19953384f963dc63128c16583d02c37a5f556938bd8c86fafe82849f11d45d1baa5e8ca405a89f008557e4d9ba476ee6bc05104" + "content" : "c2c9d497fc1be411050f4011b2407764b78aa098eb42925af8a197eabdbc25b507f09fb898805e9bed4815f35236a508ee5b096e36f363df4d407232d50fc832" }, { "alg" : "SHA-384", - "content" : "56c70dfe6ee8f01066bbc24d1ffe63ea75b775d35b18dbaab4010502864e9eaf96fc4f8453507be9c6412cd93bf4ed0a" + "content" : "4fb3f101106e4ce3666d5c15d276ba86f7683a0ef35f0384edfcd579ea454275edbb7400795d265ec3a38e39997e79b8" }, { "alg" : "SHA3-384", - "content" : "b77d9d509f9d55bcc46825930846d1bba60040f21be38081ae1ed5394ae1d7647466ec73a96f3d556c076994e6b5a40a" + "content" : "aada7e3612cf3f6190a19fa7c3db74df1e13ec56b300be9bb4317d261d5877c84ab59ba9a09168becdbd82cd41961395" }, { "alg" : "SHA3-256", - "content" : "b70981e53ef280f94c025fd1f790f493d52d04ccc9e2b4261405114747ca5983" + "content" : "306d286d0bd7549c203cc802fd755d354c4f7926fa023f4e83623ba1a6261250" }, { "alg" : "SHA3-512", - "content" : "33840c1b2613b941215f88a865ac94a38e36655ed9f7f05693b77591ea7a5f3f2c8c8ea167875de2b4ae69d5a4e00a8fd788eedc0a17c3cd86a69a0dd80bb61a" + "content" : "f6f1ecc684e309d7b9fc5c343792508fee935cd2119d962721662c5af88e4864ba6f47a863e083714f315f926c156de1970cd2fb577449bdfdc7bf98a4a451fa" } ], "licenses" : [ { "license" : { - "name" : "Bouncy Castle Licence", - "url" : "https://www.bouncycastle.org/licence.html" + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], - "purl" : "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.78?type=jar", + "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://www.bouncycastle.org/java.html" + "url" : "https://commons.apache.org/proper/commons-lang/" + }, + { + "type" : "build-system", + "url" : "https://github.com/apache/commons-lang/actions" + }, + { + "type" : "distribution-intake", + "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", - "url" : "https://github.com/bcgit/bc-java/issues" + "url" : "https://issues.apache.org/jira/browse/LANG" + }, + { + "type" : "mailing-list", + "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/" }, { "type" : "vcs", - "url" : "https://github.com/bcgit/bc-java" + "url" : "https://gitbox.apache.org/repos/asf/commons-lang.git" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.78?type=jar" + "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar" }, { - "group" : "org.bouncycastle", - "name" : "bcutil-jdk18on", - "version" : "1.78", - "description" : "The Bouncy Castle Java APIs for ASN.1 extension and utility APIs used to support bcpkix and bctls. This jar contains APIs for JDK 1.8 and up.", + "group" : "com.google.code.gson", + "name" : "gson", + "version" : "2.13.2", + "description" : "Gson JSON library", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "281b9eb6391a1bfb064142eb05470e94" + "content" : "a2c47e14ce5e956105458fe455f5d542" }, { "alg" : "SHA-1", - "content" : "81c1f5e06f206be5dad137d563609dbe66c81d31" + "content" : "48b8230771e573b54ce6e867a9001e75977fe78e" }, { "alg" : "SHA-256", - "content" : "f584cf9ba2c64a9255160ec8a3be72a112f50c4b5e9e456671d1805ed159eb50" + "content" : "dd0ce1b55a3ed2080cb70f9c655850cda86c206862310009dcb5e5c95265a5e0" }, { "alg" : "SHA-512", - "content" : "4bb734d6a6e42a1a16560e7d68fb7ff68f47588c64792bc4523eb40c377d568ee00ed0428c6f354c18c3277c79481d6eb1f955b1132cd3f065082199ac57108b" + "content" : "8974a052656d2e5ec968b6bac2edf51413ffc62040fdc65f14f00597e738ab544d22487f8579ba90618b5a7f94ef33773510fac67b408fee6ed274b38f3d9947" }, { "alg" : "SHA-384", - "content" : "a254f7aef8080bec355dd299c70c253aca89c8480fdb70281f96fe3f66d901d9ff286270fdd45f5df21241bef0c8c3f5" + "content" : "98e8afe5b23c43b84e7a57e0e27f683a182fcf97ee3eeb6a1311582f7fecd846c806ffb092b620088dc03d256d8eaf27" }, { "alg" : "SHA3-384", - "content" : "8331f9fc5d040331bd6d1fb8954abcf548f57f99505dc9aaa08783428a71cd55dae789c03ee482ec0764c48bce9b1c43" + "content" : "d61d6b1cf6997c75287f454e536f855db8404e5fb9d0b8faa4dcc1e7a60ffefc05c2f92f3514e091808a8677b29f3619" }, { "alg" : "SHA3-256", - "content" : "6dd72dd00b58b6fb03f2fc4462c5050e2ebfedc6b395cfefbd779f00031a72f5" + "content" : "1c051cfe5e630b35d003f96e135de7c5d5cab145b6e1159143570cb246426a0d" }, { "alg" : "SHA3-512", - "content" : "a72d6a0bf892e3652df05d35a7213b4d785e1cec1fed180982538baa43eac532f84b4c44d4a187d79b1df30d6e19d349617329ca6dd4c08a3a1d7b67249bdb8b" + "content" : "55ddee7f6c1659ffa82e5c308a0181b459cfeb3442f1f9868ff7e9a3c83376bd2ad527b16d5131df442ffd03d06c35dbd64458df6b02a111c1654f01db381ba5" } ], "licenses" : [ { "license" : { - "name" : "Bouncy Castle Licence", - "url" : "https://www.bouncycastle.org/licence.html" + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], - "purl" : "pkg:maven/org.bouncycastle/bcutil-jdk18on@1.78?type=jar", + "purl" : "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://www.bouncycastle.org/java.html" + "url" : "https://github.com/google/gson" }, { "type" : "issue-tracker", - "url" : "https://github.com/bcgit/bc-java/issues" + "url" : "https://github.com/google/gson/issues" }, { "type" : "vcs", - "url" : "https://github.com/bcgit/bc-java" + "url" : "https://github.com/google/gson/" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.bouncycastle/bcutil-jdk18on@1.78?type=jar" + "bom-ref" : "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar" }, { - "publisher" : "IBM", - "group" : "com.ibm", - "name" : "python", - "version" : "1.0.3-SNAPSHOT", + "publisher" : "Google LLC", + "group" : "com.google.errorprone", + "name" : "error_prone_annotations", + "version" : "2.41.0", + "description" : "Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "96da534f5ab34a3c811955993d186890" + "content" : "75e3b25da8b8a2136463c4674f5e49bf" }, { "alg" : "SHA-1", - "content" : "3bc0869652afaf3d02301afcad77b5298a42db7c" + "content" : "4381275efdef6ddfae38f002c31e84cd001c97f0" }, { "alg" : "SHA-256", - "content" : "6787412503c4fe1c302f5e07923e5c147519dfbc92118ed0841f8787caca2b3f" + "content" : "a56e782b5b50811ac204073a355a21d915a2107fce13ec711331ad036f660fcc" }, { "alg" : "SHA-512", - "content" : "5efbf466682fa015a2407608c536db0c6078d4bda9458027f3db0e461788860644d1971823ca2264651cba2cacbbb692e3392fb990c1143671b8218e3bbd6fd6" + "content" : "e2eb4bf9f36f95a4d4c5ea344db5cd90a456e63bef8e52932b8f6f4ecfdd59cb2f6c2ce9e67b0070c82177e42885688b95afef591b16001f789b378f18afdf30" }, { "alg" : "SHA-384", - "content" : "e273790c574f208ad2e27364340b2c3194984ac806095d44df95cfaea475e59bdfa6e01e4426a5e414d4d7e3dc190ec1" + "content" : "43700b378624aa37197ef03a6b5ea40b5fbb6c0aa667eadf810ad36f0707dffaf3ea23471f2553327c3f5644cc875ee7" }, { "alg" : "SHA3-384", - "content" : "197630bc34eb3b3988e6a69b6e56536575c3b62a7bd32608323f9f1a721773192aadfef00a97891d973dfd80b215968c" + "content" : "8bf3293cf4b72c9a999948f8812190636ef3b0c35bab8dbf9a54c263eeab2a3b3d0774fdcab52c6d114551ff74a8aea2" }, { "alg" : "SHA3-256", - "content" : "c8dee41d203e276c370bb30bf743e0b82f1628d3d05e4a8034b41cbfdfe2dc40" + "content" : "2ca1a59f4fdc37a3c83501542c63842fa4fe40c06f69a59a2a072e4af442a16a" }, { "alg" : "SHA3-512", - "content" : "80ae622142d283f4824af21a00a4cbef9f2318e01410a39e09c82248c2479abad62c80a0d32c65fe6f79ed7205577d80e8d61820e2abf8b62edcc86d1eed5051" + "content" : "6d1f419996b15e5a2bd9b268d166046e38fe9cc6c58fe56aaacbe71b95e3db8c8fe1d226e7f549ea227956feaf3087706bdfa79930fe432298bba9ec06c26a90" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "https://www.gnu.org/licenses/lgpl.txt" + "id" : "Apache-2.0" } } ], - "purl" : "pkg:maven/com.ibm/python@1.0.3-SNAPSHOT?type=jar", + "purl" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.41.0?type=jar", "externalReferences" : [ { - "type" : "distribution-intake", - "url" : "https://eu.artifactory.swg-devops.com/artifactory/res-cryptoagility-team-maven-local" + "type" : "website", + "url" : "https://errorprone.info/error_prone_annotations" + }, + { + "type" : "vcs", + "url" : "https://github.com/google/error-prone/error_prone_annotations" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.ibm/python@1.0.3-SNAPSHOT?type=jar" + "bom-ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.41.0?type=jar" }, { - "group" : "org.jetbrains", - "name" : "annotations", - "version" : "24.1.0", - "description" : "A set of annotations used for code inspection support and code documentation.", + "publisher" : "SonarSource", + "group" : "org.sonarsource.java", + "name" : "sonar-java-plugin", + "version" : "8.18.0.40025", + "description" : "Code Analyzer for Java", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "38673abe87d12508cd05498eff0b9731" + "content" : "b1a9179feade38e76fb3bd484426ed87" }, { "alg" : "SHA-1", - "content" : "7af6a669488450c4a07c2c3254e2151df42d7d04" + "content" : "869cc6db9898899450852a5d89e77649dbc2e545" }, { "alg" : "SHA-256", - "content" : "27a770dc7ce50500918bb8c3c0660c98290630ec796b5e3cf6b90f403b3033c6" + "content" : "27dbc832bbeb28c70947d4d35fcc4a36b384911761831d8d5fc947cc1732d114" }, { "alg" : "SHA-512", - "content" : "663395a885561cc97eed411c67b496c06ec9a54906185a871de8743bf53e92152f4bc7c2a0118b7f3cfe85cc0a6c408ac6d589839b8d25c851637f85880331f2" + "content" : "b38980fb48ee7720a297190197e1ff20025ccaffad858a195234d4747773f4ed2ff2806b253ccd9d2121cddc71d1ac1fcc75ece9a07365db2089df89773add48" }, { "alg" : "SHA-384", - "content" : "85779b72d864894f1d3cdd489b0a419c0620281c4fd22a061f4a3fe2aee91015681889573200cd2124c3add48a3216a6" + "content" : "700d2a57ebc1672779fc11da69c29c822f8b0382bfb07afa5ef984abd2e38863b1ce8c2129c3ad173f796abebc14af96" }, { "alg" : "SHA3-384", - "content" : "0cfce80b012ba441be96368fe8af54e805100f7680fdbb7defae4dd07ff3c75cd0f89b993a61bef139a405637a73236f" + "content" : "de424a453da7d8c708948d8bf9cffcabb6f00fac592f0be36b3d53fa41b95bc42ab6e1fcb4525c3c15793de00ad34478" }, { "alg" : "SHA3-256", - "content" : "f7c5e25c9c16aad9f5482f3853660238db4f32be72c20f40383a1d20e0306f42" + "content" : "3f2edc3ae30c79ac6e5db6bc7f968dd164f252b173bd3780ef1e06f68fec2962" }, { "alg" : "SHA3-512", - "content" : "0f74369cdb67a58c0f89033723665320eb535d1c1e66049347f6b3e25cbf7d1f80b8fa3a7b3e0b4fa8eae8d9ec8c30510b65bab581adeaff3f94651fa214105a" + "content" : "73060df15758e595f9ad23967b9632b3b25584660362b8a660c699d7bfa092927edb2334ec711a2eca8394b03f0d32878e64b6b20411816b239f808747e7bcc2" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.jetbrains/annotations@24.1.0?type=jar", + "purl" : "pkg:maven/org.sonarsource.java/sonar-java-plugin@8.18.0.40025?type=jar", "externalReferences" : [ { - "type" : "website", - "url" : "https://github.com/JetBrains/java-annotations" + "type" : "build-system", + "url" : "https://cirrus-ci.com/github/SonarSource/sonar-java" }, { - "type" : "vcs", - "url" : "https://github.com/JetBrains/java-annotations" + "type" : "distribution-intake", + "url" : "file:./local-deployment" + }, + { + "type" : "issue-tracker", + "url" : "https://jira.sonarsource.com/browse/SONARJAVA" + }, + { + "type" : "mailing-list", + "url" : "https://community.sonarsource.com" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.jetbrains/annotations@24.1.0?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.java/sonar-java-plugin@8.18.0.40025?type=jar" }, { "publisher" : "SonarSource", - "group" : "org.sonarsource.api.plugin", - "name" : "sonar-plugin-api", - "version" : "9.13.0.360", - "description" : "Plugin API for SonarQube, SonarCloud and SonarLint", + "group" : "org.sonarsource.java", + "name" : "java-surefire", + "version" : "8.18.0.40025", + "description" : "Code Analyzer for Java :: Plugin to import JUnit report files", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "b401a934655540b37bf6765778a7b759" + "content" : "8ec0e95937cd6bad70824f4fcbcdfd13" }, { "alg" : "SHA-1", - "content" : "64b99cf118b048da0fa98a397b2e03f11c6970e9" + "content" : "74166214d6bc038b62ac39fb6068ee92a7cc2377" }, { "alg" : "SHA-256", - "content" : "f20ae1d944f84a611583c33900d8788aa855a0d9ea66493e1046539715d53c0c" + "content" : "e5b3e323d65d5d1e07c67f2a3c231d976665dd36a755e4a25a529e020ecf246e" }, { "alg" : "SHA-512", - "content" : "f6b8fa7447300c1f95e14e9be12d36419b302d1844bd069ceaae134b3caa54d546a337be3c66e8e25ca5dd78fb95e76f92306cf5c26ba0730e3c730d443c2822" + "content" : "5f8666b8cabc3605c88d1066b3a4f102677a4592a055cddbd0857667a4c97da0b5963d4b6e9b9443bfa9a9f8eb5122bea5230c54d1948a8829137e0adfda2c53" }, { "alg" : "SHA-384", - "content" : "5cbdc17456d4ab1959cd8ad59d64a733224a3d03aa0f1e12968e0e7c86785e465d3f27f7c54b13c858326b4ee8bd60a7" + "content" : "7f91179e70d48c4f157b7c21e2d66043f197f5e77e93ca22cc514121f8aeb904f0be2d41cca33e026b79a6954b93620a" }, { "alg" : "SHA3-384", - "content" : "8930616bed39525c4c5c0396f8c541268b46b1df45432ee66ca6af8609a6ebd1e904493f025ba4b045401930a3ea2a2d" + "content" : "1181d83f7f281f38d1fd32a113cf36d0aafc3315b0f96394d1509a55cb71107a32dffc689991f08ea34d24afa146de4d" }, { "alg" : "SHA3-256", - "content" : "4fb1225cc1bed06656fa92422d0425b44032725e6afb8d980c4af8cd8efc4b40" + "content" : "ee3151b15fa3040368071c28b161c21ffb9d0f0053ca3a869a8633790a8dbcb6" }, { "alg" : "SHA3-512", - "content" : "3a505b03e37ff9bd00248bf77344b880f206042a81b90eccbb42a78fe2496ff4f61c519f4ec77ded65d1f488b4caf6a69afae97a9a5a59f915ec8068176a0cbb" + "content" : "94b7e5bc75cd127797485f48d5acca3853cefa2e8c433487268f12b177cd06e4aa4783f009f7a835099f406ccf1a22b69d0c3c523f3ab84fe8b348da312bd677" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "https://www.gnu.org/licenses/lgpl-3.0.txt" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.sonarsource.api.plugin/sonar-plugin-api@9.13.0.360?type=jar", + "purl" : "pkg:maven/org.sonarsource.java/java-surefire@8.18.0.40025?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://www.sonarqube.org/" + "url" : "http://redirect.sonarsource.com/plugins/java.html/java-surefire" }, { - "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-plugin-api" - } - ], - "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.api.plugin/sonar-plugin-api@9.13.0.360?type=jar" - }, - { - "group" : "com.google.code.findbugs", - "name" : "jsr305", - "version" : "3.0.2", - "description" : "JSR305 Annotations for Findbugs", - "scope" : "required", - "hashes" : [ + "type" : "build-system", + "url" : "https://cirrus-ci.com/github/SonarSource/sonar-java" + }, + { + "type" : "distribution-intake", + "url" : "file:./local-deployment" + }, + { + "type" : "issue-tracker", + "url" : "https://jira.sonarsource.com/browse/SONARJAVA" + }, + { + "type" : "mailing-list", + "url" : "https://community.sonarsource.com" + }, + { + "type" : "vcs", + "url" : "https://github.com/SonarSource/sonar-java/java-surefire" + } + ], + "type" : "library", + "bom-ref" : "pkg:maven/org.sonarsource.java/java-surefire@8.18.0.40025?type=jar" + }, + { + "publisher" : "FasterXML", + "group" : "com.fasterxml.staxmate", + "name" : "staxmate", + "version" : "2.4.1", + "description" : "StaxMate is a light-weight framework that adds convenience to streaming XML-processing without significant additional overhead. It builds on top of a Stax (JSR-173) compliant XML processors such as Woodstox or Sjsxp (default Stax implementation of JDK 1.6) and offers two basic abstractions: Cursors, which build on XMLStreamReaders and Output objects, which build on XMLStreamWriters.", + "scope" : "required", + "hashes" : [ { "alg" : "MD5", - "content" : "dd83accb899363c32b07d7a1b2e4ce40" + "content" : "b79898a5756a297a63eb55af14e39a5d" }, { "alg" : "SHA-1", - "content" : "25ea2e8b0c338a877313bd4672d3fe056ea78f0d" + "content" : "1a61f6c66e732c05ca5d75269ac5d2ea288d22c9" }, { "alg" : "SHA-256", - "content" : "766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7" + "content" : "abfaceda67857ddcbd7e0c85fd54af393290b5b617cee4e4464dee8c24b13d0b" }, { "alg" : "SHA-512", - "content" : "bb09db62919a50fa5b55906013be6ca4fc7acb2e87455fac5eaf9ede2e41ce8bbafc0e5a385a561264ea4cd71bbbd3ef5a45e02d63277a201d06a0ae1636f804" + "content" : "1fb319e63b9537b9eb99dd162d333560c04f4855a58496d8e0826b1a6135cd423d0bc8e10e9a2c6bc946059089d3206af85b6f4618141632b1f1c50f41a49557" }, { "alg" : "SHA-384", - "content" : "ca0b169d3eb2d0922dc031133a021f861a043bb3e405a88728215fd6ff00fa52fdc7347842dcc2031472e3726164bdc4" + "content" : "6f1f6f7a27fb10e7ee6847ac18986b3c54b651e79da1fea3d9617ced89b7d575f3e6017d0a8b3500d146b32be0ac0511" }, { "alg" : "SHA3-384", - "content" : "9903fd7505218999f8262efedb3d935d64bcef84aae781064ab5e1b24755466b269517cada562fa140cd1d417ede57a1" + "content" : "8c12c3b529792653422d8d98a7a56d5ea2b483c835cdf28697f74059699f026883d59a9f29246ff66758b014e66221b1" }, { "alg" : "SHA3-256", - "content" : "223fda9a89a461afaae73b177a2dc20ed4a90f2f8757f5c65f3241b0510f00ff" + "content" : "a80836256d62c04f79a6123c77af82ca926a0bdc3c5b3c619f793af273662a31" }, { "alg" : "SHA3-512", - "content" : "3996b5af57a5d5c6a0cd62b11773360fb051dd86a2ba968476806a2a5d32049b82d69a24a3c694e8fe4d735be6a28e41000cc500cc2a9fb577e058045855d2d6" + "content" : "02a4e7752396dda6b0da136ee4743f7f7ff8211c6aa0a86276474cd17931135dc99f94780856171a4a2c5c0eaa02ca6ae79aedcaf3f35ec7b737e12455d45db4" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0" + "id" : "BSD-4-Clause" } } ], - "purl" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", + "purl" : "pkg:maven/com.fasterxml.staxmate/staxmate@2.4.1?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://findbugs.sourceforge.net/" + "url" : "http://staxmate.codehaus.org" }, { "type" : "distribution-intake", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, + { + "type" : "issue-tracker", + "url" : "https://github.com/FasterXML/StaxMate/issues" + }, { "type" : "vcs", - "url" : "https://code.google.com/p/jsr-305/" + "url" : "http://github.com/FasterXML/StaxMate" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar" + "bom-ref" : "pkg:maven/com.fasterxml.staxmate/staxmate@2.4.1?type=jar" }, { - "publisher" : "The Apache Software Foundation", - "group" : "org.apache.commons", - "name" : "commons-lang3", - "version" : "3.14.0", - "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.", + "publisher" : "SonarSource", + "group" : "org.sonarsource.java", + "name" : "java-frontend", + "version" : "8.18.0.40025", + "description" : "Code Analyzer for Java :: Front-end (Java Parser)", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "4e5c3f5e6b0b965ef241d7d72ac8971f" + "content" : "a30b3194ba4e4aaf19e64afaf2c0cd9d" }, { "alg" : "SHA-1", - "content" : "1ed471194b02f2c6cb734a0cd6f6f107c673afae" + "content" : "6c781ad5452a9f6c40efa651ec1514efd4956de0" }, { "alg" : "SHA-256", - "content" : "7b96bf3ee68949abb5bc465559ac270e0551596fa34523fddf890ec418dde13c" + "content" : "6da24fc369a912c40bad484b580d15e8df7fd4a603e999b79952c1e88f1a10a4" }, { "alg" : "SHA-512", - "content" : "0338b50767166e5746ada6d6aa2e071e7221d699323bfb629f7f204b294c1dc4cad140610a129ed751798443b43e74e0818989c7df7d33c5915aa29742be9ba8" + "content" : "77fcb592867445be61fb472dc11eb2ed91e4d7675f6050728fe34fef4488bad75cf5fbb128bdbe6874820ece7e752f684065b98a6b0690bcbbc081f0efdf7a9c" }, { "alg" : "SHA-384", - "content" : "908d0a22dc17aaa04caa5104cff7cad5b88b77eecb78dd5b3b3fefa22ff71ac50a4fb9e31c897ac243f9d841e4b3453d" + "content" : "827447252ad585c8ef98e9f737d2b5ec4529f6f68f0fd571bfae08f3264186a4a5c9d864b488b66d933877c8d13f7863" }, { "alg" : "SHA3-384", - "content" : "8a7f2e061b998780870eddd571620fbf3d3c70bcb54e24539d0db504f59d65bc6bda58136284498babe29fcc5eabb7a6" + "content" : "2eaeb68497c50d4bcd38ba010ab33f4833310fdf4c057d32ce622f01febd34d37d4b353b31ad53040a6dce7b1c287bf6" }, { "alg" : "SHA3-256", - "content" : "022bf1f8039fcea717e9e34dd96eb80cfff05b43c9cbb76e9739b2421e2d027c" + "content" : "a2c28164e5d0c37e00f10f6b5187a6b8c31f87d2d3d86b12f9721516f91034e7" }, { "alg" : "SHA3-512", - "content" : "0bcbc4edce974ea970c46e2da12ec98d9fd962c2cf64f757ac97136dec5623ca52af0c225895303c17ffabb57090e6772d7bd326d5e7438cef5454f8bbaeecfa" + "content" : "9163b1eac48b627a86db9c7b93fe258657561540fb605d926c645cb59e82fe6f72d1fb7d97120b4bc1488e27ede2420dbacb1ed021ff76642d10a2bc3cc54612" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0", - "url" : "https://www.apache.org/licenses/LICENSE-2.0" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar", + "purl" : "pkg:maven/org.sonarsource.java/java-frontend@8.18.0.40025?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://commons.apache.org/proper/commons-lang/" + "url" : "http://redirect.sonarsource.com/plugins/java.html/java-frontend" }, { "type" : "build-system", - "url" : "https://github.com/apache/commons-parent/actions" + "url" : "https://cirrus-ci.com/github/SonarSource/sonar-java" }, { "type" : "distribution-intake", - "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" + "url" : "file:./local-deployment" }, { "type" : "issue-tracker", - "url" : "https://issues.apache.org/jira/browse/LANG" + "url" : "https://jira.sonarsource.com/browse/SONARJAVA" }, { "type" : "mailing-list", - "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/" + "url" : "https://community.sonarsource.com" }, { "type" : "vcs", - "url" : "https://gitbox.apache.org/repos/asf?p=commons-lang.git" + "url" : "https://github.com/SonarSource/sonar-java/java-frontend" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.java/java-frontend@8.18.0.40025?type=jar" }, { - "group" : "com.google.code.gson", - "name" : "gson", - "version" : "2.10.1", - "description" : "Gson JSON library", + "publisher" : "SonarSource", + "group" : "org.sonarsource.java", + "name" : "jdt-package", + "version" : "1.6.0.160", + "description" : "Packaging of Eclipse JDT Core for SonarQube Java Analyzer", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "df6097815738cb31fc56391553210843" + "content" : "1df75f474b6bdb538899d8704b84757a" }, { "alg" : "SHA-1", - "content" : "b3add478d4382b78ea20b1671390a858002feb6c" + "content" : "1f8abb9d709c6ba2ab7ce3aa933857cb3735a1ce" }, { "alg" : "SHA-256", - "content" : "4241c14a7727c34feea6507ec801318a3d4a90f070e4525681079fb94ee4c593" + "content" : "5efd84c8e2e39a310e9139b503355e9f31eeb3bcce779860ce96944096cf064f" }, { "alg" : "SHA-512", - "content" : "7503e4b8d05c6cc0ecb3a94c5a2e070e049083a441003a79a0cdf474f4286699b4ba1d2a655ddabb8ba10c50e7c36a7045cccdaee465166d4630db647aba2727" + "content" : "fcb097a96b7c6903ed8e50c95cea915cdb4ab2f4398869b812489d8f639509f970646adcd66afc8004b0c14807e05510d4406d7215726775695b0abcbe602dc5" }, { "alg" : "SHA-384", - "content" : "48a4786bd6e1867f058ee4fb676fc82d9d9f64a6d7420d4a47ae2398504c9de73222636614aeb4a9fbf10ee143d72226" + "content" : "e500ad2d02142aa1fbbe1b9436f9e5bbb74d5c208b0c6aa0191725b126c9a3a4d2a21c708b2bd26a4f11a9ef880fbe07" }, { "alg" : "SHA3-384", - "content" : "3df9a0332c2766124fe7c915cfea665d2e318ccaa7212415fabd9e93e6eb77de538725fd2ef313cde46f6d814c9566ea" + "content" : "60bd6cd889de6164963d49fe557e13456d962893e74d56bda559c6b57bd18ab1e8a065e64a2d8317e13dd754052d3f23" }, { "alg" : "SHA3-256", - "content" : "d3374006d76d4f9acdf3d3a1a4f47899570f52442b2188f80c09a74f22139ecb" + "content" : "32c6d9249b541d8ff7b488f8c584d8f068caace22037ec0e2340e6e850b919b7" }, { "alg" : "SHA3-512", - "content" : "2b10c2f4fe39d8712b430ff171823d7172c0a06685c1eb7de511e90159cec0e094fb2a9b50b747c5b039cb10f1fce9edf82ecbf9c47f76a6f31c4e3cb7586cce" + "content" : "8378364906e74189f4255964961c90273743b41af7859c8bb946a092965b5787f37718ce6dccbed3cb531501361293fa96175327bd62d29a7ffe18be70caab78" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0", - "url" : "https://www.apache.org/licenses/LICENSE-2.0" + "id" : "EPL-2.0" } } ], - "purl" : "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar", + "purl" : "pkg:maven/org.sonarsource.java/jdt-package@1.6.0.160?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://github.com/google/gson/gson" + "url" : "http://docs.sonarqube.org/display/PLUG/Plugin+Library/jdt-package" }, { - "type" : "distribution-intake", - "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" + "type" : "build-system", + "url" : "https://cirrus-ci.com/github/SonarSource/sonar-java-jdt" }, { "type" : "issue-tracker", - "url" : "https://github.com/google/gson/issues" + "url" : "http://jira.sonarsource.com" + }, + { + "type" : "mailing-list", + "url" : "https://community.sonarsource.com" }, { "type" : "vcs", - "url" : "https://github.com/google/gson/gson/" + "url" : "https://github.com/SonarSource/sonar-java-jdt" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.java/jdt-package@1.6.0.160?type=jar" }, { "publisher" : "SonarSource", - "group" : "org.sonarsource.java", - "name" : "sonar-java-plugin", - "version" : "7.33.0.35775", - "description" : "Code Analyzer for Java", + "group" : "org.sonarsource.sslr", + "name" : "sslr-core", + "version" : "1.24.0.633", + "description" : "", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "1b7d9cc6384c6be9b2b2be09d39a4409" + "content" : "1aff676d028ebe3310dfdef58a42cd06" }, { "alg" : "SHA-1", - "content" : "74549fd0b22373ba0db5f5d8c9e83c4e1d4859d6" + "content" : "f2b17ad23d5cd2533c01b9cb3332dae18d9e1521" }, { "alg" : "SHA-256", - "content" : "84d7f2cce4bf4e66bacd053fd350489792519d83c292c2f4d5d8df0404450959" + "content" : "d178c71fca3520a686c229a20220910cebd95dd40c6c0b14bb68bca5a96087bc" }, { "alg" : "SHA-512", - "content" : "f70839584286b4141cb252727f299be7a6f27cc8714d66b9c8b4a97d19030c5e39277ed85019cb2ffd9cd59f4b5c7780dd2bdd8cccd14d49a7aa618640069eca" + "content" : "fbb6b6987aa0c3464fb71e09d4a89d97c3e2be7306e15ee64b1386732af7f100253ca919aae1f082362d5a92984dc0cbc5f076285f645af42e808171882f47e7" }, { "alg" : "SHA-384", - "content" : "ab79904167297307834e85b850b012fbdd22d6dbb938567ca8525219f8cd1cc2b725cc9ca781bca94dbab340580130ff" + "content" : "128ef920ed79a50b68b2fab9548ecf0aa1c86785f7097251b8aa1ccf95a78be592ff2066d4aef35553255d62e047907d" }, { "alg" : "SHA3-384", - "content" : "5b177240092d00c9399f08b3148b58a299f0bb7a2a82458e5d4f4d5d0e4b5f6eba4f8b6f82c02369e8343c4bb0aea360" + "content" : "52ab29e43f7310f16e090d3a03f3dd3ac38bc6e26e7d58f72f4119100b30b0d45e0024d43acb26be7ac87fd47749bb20" }, { "alg" : "SHA3-256", - "content" : "f5829afa58615feeb89cdea0b96fa63ffda9c1401d5ac33d1420398ff42e59f9" + "content" : "ae85cc20ac91a1d01af9f39b4a51f064ebd4166006b893afe4c5bf37bdec1a90" }, { "alg" : "SHA3-512", - "content" : "4dc73ffee4b763a67a89b13a7574c03c9b7bfd08591088c30c64f9cb2aacd028d9c1bbbb4e5a68e5751635d9a3547e798eb4577b555187f410476a38e10ed9fc" + "content" : "04cfc8a3f872d3a453ea05b8f652e96ac5988fa8735f89ee7ccfbf1abb8e92d9bae91fb445f18598c22a8159b7333d09003490177129539ff87f8b450344b095" } ], "licenses" : [ @@ -1925,23 +1935,19 @@ } } ], - "purl" : "pkg:maven/org.sonarsource.java/sonar-java-plugin@7.33.0.35775?type=jar", + "purl" : "pkg:maven/org.sonarsource.sslr/sslr-core@1.24.0.633?type=jar", "externalReferences" : [ - { - "type" : "website", - "url" : "http://redirect.sonarsource.com/plugins/java.html" - }, { "type" : "build-system", - "url" : "https://cirrus-ci.com/github/SonarSource/sonar-java" + "url" : "https://travis-ci.org/SonarSource/sslr" }, { "type" : "distribution-intake", - "url" : "file:./local-deployment" + "url" : "https://api.bintray.com/maven/sonarsource/SonarQube/org.sonarsource.sslr/;publish=1" }, { "type" : "issue-tracker", - "url" : "https://jira.sonarsource.com/browse/SONARJAVA" + "url" : "http://jira.sonarsource.com/browse/SSLR" }, { "type" : "mailing-list", @@ -1949,51 +1955,51 @@ }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-java" + "url" : "https://github.com/SonarSource/sslr/sslr-core" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.java/sonar-java-plugin@7.33.0.35775?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.sslr/sslr-core@1.24.0.633?type=jar" }, { "publisher" : "SonarSource", - "group" : "org.sonarsource.java", - "name" : "java-surefire", - "version" : "7.33.0.35775", - "description" : "Code Analyzer for Java", + "group" : "org.sonarsource.analyzer-commons", + "name" : "sonar-regex-parsing", + "version" : "2.18.0.3393", + "description" : "Logic useful to read and analyze regular expressions", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "ebad97c089ab298bbf410b83645b5c91" + "content" : "c9c38681ffebe27c85c27119dcbac4e2" }, { "alg" : "SHA-1", - "content" : "1d6e25230cb5a0818e76cbf250b1f443c1117fe9" + "content" : "887b8fb94772af059501ce252122d572da041615" }, { "alg" : "SHA-256", - "content" : "547a33116a008789a640ac520aca61b4aee460baf32d880f35ecbc247be17cf5" + "content" : "0c3ea5153be8a0766373b1992a18c91702a48b37647ca400a5cd077b2d78e9ba" }, { "alg" : "SHA-512", - "content" : "79967a8394b8bada006fe03ed3519f73f9f4856d09cfaef3db91ab1e0dbd828bb9c69178a8151b678420e95489ace27ce9a59693be65fc3511696b446118c572" + "content" : "830bd069a1714fd24676db83114479961e3baea2abd4884c549f147edb6b83eafe4c9230f429818a9adfba89a0c4a21d39eddbcf4c1b937cc65a65b09d1a00ef" }, { "alg" : "SHA-384", - "content" : "a3926f55e7e691e558e8fd2bed7da6f71cae00174987d108c5ccb5e4bff67052c1a7294ff83f93fecc89f0d37e72d2f2" + "content" : "ab21ccd7f07b9bceac88e85180e1f1643b43c30db4d8cdff030cd7cbc53753987284bfc1d412d7def8ec5380244fcfad" }, { "alg" : "SHA3-384", - "content" : "197a92ee27d6b823fe39f896604e292864f8e563ee9eebc8b7b8f98b5811c3bd3d31d1d991f91f305d61e78376c792fb" + "content" : "ae43098f0c1a4939136f8f285cf9ca44663c2c77fd1120dd338239e70799b713af401a1c334559565263a1dc7f8613ae" }, { "alg" : "SHA3-256", - "content" : "421298125883242fc4173246fd9f114c55e086270f0482a5b92f88462bf18f99" + "content" : "546a71b50a13237407e76548bf1fe5d61bf08df21dfa086bd17c2e3a103d25a0" }, { "alg" : "SHA3-512", - "content" : "ff3c88c85a17e2983655e522450641dd191aa2f8818734af99b576778662e7025c6d635c6edc3052b3c42415693b7ba5c2137c7cac7140460d9405fb0d2780f9" + "content" : "18dbb41e4e61ece31c96cd50cc7a1d85799119cd5a88fef79ac4553071a363f485161ada5324cd8ef8b4204d60f000f5fff39c4db0eba2d15e9babf59a01f889" } ], "licenses" : [ @@ -2004,23 +2010,19 @@ } } ], - "purl" : "pkg:maven/org.sonarsource.java/java-surefire@7.33.0.35775?type=jar", + "purl" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.18.0.3393?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://redirect.sonarsource.com/plugins/java.html/java-surefire" + "url" : "http://docs.sonarqube.org/display/PLUG/Plugin+Library/sonar-analyzer-commons-parent/sonar-regex-parsing" }, { "type" : "build-system", - "url" : "https://cirrus-ci.com/github/SonarSource/sonar-java" - }, - { - "type" : "distribution-intake", - "url" : "file:./local-deployment" + "url" : "https://cirrus-ci.com/github/SonarSource/" }, { "type" : "issue-tracker", - "url" : "https://jira.sonarsource.com/browse/SONARJAVA" + "url" : "http://jira.sonarsource.com" }, { "type" : "mailing-list", @@ -2028,136 +2030,145 @@ }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-java/java-surefire" + "url" : "https://github.com/SonarSource/sonar-analyzer-commons/sonar-regex-parsing" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.java/java-surefire@7.33.0.35775?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.18.0.3393?type=jar" }, { - "publisher" : "FasterXML", - "group" : "com.fasterxml.staxmate", - "name" : "staxmate", - "version" : "2.4.1", - "description" : "StaxMate is a light-weight framework that adds convenience to streaming XML-processing without significant additional overhead. It builds on top of a Stax (JSR-173) compliant XML processors such as Woodstox or Sjsxp (default Stax implementation of JDK 1.6) and offers two basic abstractions: Cursors, which build on XMLStreamReaders and Output objects, which build on XMLStreamWriters.", + "publisher" : "SonarSource", + "group" : "org.sonarsource.java", + "name" : "java-checks", + "version" : "8.18.0.40025", + "description" : "Code Analyzer for Java :: Analyzer's checks", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "b79898a5756a297a63eb55af14e39a5d" + "content" : "1ac68532191b336b9c760c596dbabf9f" }, { "alg" : "SHA-1", - "content" : "1a61f6c66e732c05ca5d75269ac5d2ea288d22c9" + "content" : "6165e4a7c0bc4dd5bd6bdc8b74184f167bb5436b" }, { "alg" : "SHA-256", - "content" : "abfaceda67857ddcbd7e0c85fd54af393290b5b617cee4e4464dee8c24b13d0b" + "content" : "78b31d837169a372353c0b91ff2776590039996d8d50dbf033b774f6930d3b8c" }, { "alg" : "SHA-512", - "content" : "1fb319e63b9537b9eb99dd162d333560c04f4855a58496d8e0826b1a6135cd423d0bc8e10e9a2c6bc946059089d3206af85b6f4618141632b1f1c50f41a49557" + "content" : "07b461fd5a923bbd6a60379e61fc73924ad7bc3e1623257fbb16fee3390eb61e0d930dd80cb4e290da538c958546d8206a66fb433889665312df60b63aeccb1f" }, { "alg" : "SHA-384", - "content" : "6f1f6f7a27fb10e7ee6847ac18986b3c54b651e79da1fea3d9617ced89b7d575f3e6017d0a8b3500d146b32be0ac0511" + "content" : "d1227c576fd2372fdcb0240ef2c0fc5497aaca1251df248eabf8e767765e8023ad5e727fecdd3ade31b5af2022a9f519" }, { "alg" : "SHA3-384", - "content" : "8c12c3b529792653422d8d98a7a56d5ea2b483c835cdf28697f74059699f026883d59a9f29246ff66758b014e66221b1" + "content" : "5a6b215207811609717d9b39ddaa332369918cf91fbe3bba94ebfff23408624b1bade52b5cf03062d16364fd9c792ea8" }, { "alg" : "SHA3-256", - "content" : "a80836256d62c04f79a6123c77af82ca926a0bdc3c5b3c619f793af273662a31" + "content" : "030d53c3182415e2896ffc5898b155cac52587a006b327a51c6c5ab59714c012" }, { "alg" : "SHA3-512", - "content" : "02a4e7752396dda6b0da136ee4743f7f7ff8211c6aa0a86276474cd17931135dc99f94780856171a4a2c5c0eaa02ca6ae79aedcaf3f35ec7b737e12455d45db4" + "content" : "a5a4a3f41c1ba65066554808baeff26551c033ccb31ec561ab622e535984db16d9742107f5d07b7d3bc6f25ec92c410600eca7cdf1d9e36fd23a6246d1220db7" } ], "licenses" : [ { "license" : { - "id" : "BSD-4-Clause" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/com.fasterxml.staxmate/staxmate@2.4.1?type=jar", + "purl" : "pkg:maven/org.sonarsource.java/java-checks@8.18.0.40025?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://staxmate.codehaus.org" + "url" : "http://redirect.sonarsource.com/plugins/java.html/java-checks" + }, + { + "type" : "build-system", + "url" : "https://cirrus-ci.com/github/SonarSource/sonar-java" }, { "type" : "distribution-intake", - "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" + "url" : "file:./local-deployment" }, { "type" : "issue-tracker", - "url" : "https://github.com/FasterXML/StaxMate/issues" + "url" : "https://jira.sonarsource.com/browse/SONARJAVA" + }, + { + "type" : "mailing-list", + "url" : "https://community.sonarsource.com" }, { "type" : "vcs", - "url" : "http://github.com/FasterXML/StaxMate" + "url" : "https://github.com/SonarSource/sonar-java/java-checks" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.fasterxml.staxmate/staxmate@2.4.1?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.java/java-checks@8.18.0.40025?type=jar" }, { "publisher" : "SonarSource", "group" : "org.sonarsource.java", - "name" : "java-frontend", - "version" : "7.33.0.35775", - "description" : "Code Analyzer for Java", + "name" : "java-checks-common", + "version" : "8.18.0.40025", + "description" : "Code Analyzer for Java :: Common utilities for analyzer's checks", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "43bc91e0b5a11258625288f075b54633" + "content" : "5514880c7701b527cdcc574edae88dc7" }, { "alg" : "SHA-1", - "content" : "2f748efd6e152c3526efd52a446cc8930381a16d" + "content" : "5e3906963a6aee9229c0d5735ec5b0caba9c7a36" }, { "alg" : "SHA-256", - "content" : "f22c60ed403f37c5378f2241c110d5f1427d9f8ac88710236a1662887a0961a5" + "content" : "89aadedaaa0bd0e788c55b3a78a5b086fd0dbc4935e1ca9e8d15266c81dbc1eb" }, { "alg" : "SHA-512", - "content" : "5ab1acc211dec17121948a678e59be6f050b1ba5360bf93fb724b51ff6160a29892c3847e5b0ad1deb450472bbdd5387f28403504670537b82477348dd97ca41" + "content" : "c7e5eea32cd08b004728418429b1b1255751a50a33f5a58712ee7ebddb2f15883cbbc9a999d3d388274662e1b398f2121bdd8e28465a7b86b5702be57a211e0a" }, { "alg" : "SHA-384", - "content" : "9d57998dcddbcbbf9ebcf79a68b928ce6aa9c8770c2b7565771b457ed299545f5ddbcc99a13889af53ab12e391c618d6" + "content" : "74603a766b61c433df59fa6df8c140018dc181c84af0476242c22c4fefea6f3437cde005c253c21301be0209797ef6c8" }, { "alg" : "SHA3-384", - "content" : "64b3e663d553d1c3aa38d9e3b34cad8b38d440dc937bdb6e80edab6621f3c519d38ce4ec04f5353bf7e103cf315a808b" + "content" : "a9a28120b1353f47a2aff96a032d95d8988eb0b2c940bff0bcef27dc352b19950d0b1eb0de8a521f8c232cfc0b3abea5" }, { "alg" : "SHA3-256", - "content" : "3febae6771046e4a5909ec72a2b6cd1749f384c910f3a090443a26d4651a1953" + "content" : "eeb22c67995bfa542c898dc47195590c37da85116f30df4b367bd970c162084a" }, { "alg" : "SHA3-512", - "content" : "7555011fd0167dd38b798556104d02f2c5bd4b7e035065234f44ae22c7779c1a7fef4f3b17769d49deaf0635c99d211cb219ffac05da6c50ae1313f032565526" + "content" : "27adbd9adbd039453b3f8fc762117222650d45147cfb4ea26ad6daf65b994fd618f4b5a2173f0860fdaa5b1e096af32faa100c902377b811892d8664c094684a" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.sonarsource.java/java-frontend@7.33.0.35775?type=jar", + "purl" : "pkg:maven/org.sonarsource.java/java-checks-common@8.18.0.40025?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://redirect.sonarsource.com/plugins/java.html/java-frontend" + "url" : "http://redirect.sonarsource.com/plugins/java.html/java-checks-common" }, { "type" : "build-system", @@ -2177,69 +2188,70 @@ }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-java/java-frontend" + "url" : "https://github.com/SonarSource/sonar-java/java-checks-common" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.java/java-frontend@7.33.0.35775?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.java/java-checks-common@8.18.0.40025?type=jar" }, { "publisher" : "SonarSource", - "group" : "org.sonarsource.java", - "name" : "jdt-package", - "version" : "1.1.0.34", - "description" : "Parent pom of SonarSource public projects", + "group" : "org.sonarsource.analyzer-commons", + "name" : "sonar-analyzer-recognizers", + "version" : "2.18.0.3393", + "description" : "Shared code recognizers", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "b37dc58a62e2d0cf93c0721fd974c31c" + "content" : "c8fea2140f3d18005b73ba0cd39ac3cf" }, { "alg" : "SHA-1", - "content" : "505fc262c9e9347ff10f5c2e095a008db26a538b" + "content" : "f741f10d470867172afa510990c16877ede70222" }, { "alg" : "SHA-256", - "content" : "7ac622acdb900de5bb04529b822412731308f1f02a610e596b8a7789c28bde07" + "content" : "0b4ef58f3bba93170f115ec2a73eb5596276abc21219b7fa733240b6bc3f7d52" }, { "alg" : "SHA-512", - "content" : "c264a6a75e00b39325e2be6e9cc4cc9903fcbb97e1e60766f09a42bad4d00ef0bc76b741a9c76ca76bf60fe0052987362f4f564a78e0ef3a654fdad833a00cf4" + "content" : "8edf444d67195ff181307c7f27744833b7fa47ff54ee2c687c92761cd7e0900e302f71541d2ccb84a0436ac04fc28ccc79c4700452455db6c155c6ac774bf26d" }, { "alg" : "SHA-384", - "content" : "1f17c8e14bf19d6f93cd61f745ca681e2bf3ec5a2566a9233553e7d2c71f7896c7ee770c37db46536b98fd5cbb19f687" + "content" : "821446711dedcdcb0a20bae33560f7f5d86ca528b7277170b3fe539bc20ab41f90096c6d6cb6cb9b67a7738cf56029fd" }, { "alg" : "SHA3-384", - "content" : "40d04d2a79475f774b6a2b2a08b02387e2ac2c17e4b9b220fc1e59baf0554c569573d9abe22af1cff8e5fef69b4a43dd" + "content" : "c036fd79d7730afa956adbabd42edfd0fb5473e5b4534d2ecc480b2b587099d923ee97a9ee51e40e1e027a413fb7b33d" }, { "alg" : "SHA3-256", - "content" : "7bdaedda0da1edc3e63e8e62bcf3651b4d4169c24efa0baba01c368d2c6b7b74" + "content" : "aafdbc0fc6e44a212ee7cb7eb10d9cb4b23ceb25a532ea0a6508ea32141cb581" }, { "alg" : "SHA3-512", - "content" : "11854f8cb06c601f4e54488b0943a8eac7790dfacd3355e52b274e8a39fe0aec36fd25da6c5711c7c294eaf540958c88013a4b57e7399f76c51b9e75d451c0a5" + "content" : "747d1f9f8a556ff1c67bfa46aa1e8e8b9c7b76114e141845751376c7bb34d841349491766e6ed221938f6d64e8aed91663515d23283668711177d076f12eb852" } ], "licenses" : [ { "license" : { - "id" : "EPL-2.0" + "name" : "GNU LGPL 3", + "url" : "http://www.gnu.org/licenses/lgpl.txt" } } ], - "purl" : "pkg:maven/org.sonarsource.java/jdt-package@1.1.0.34?type=jar", + "purl" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.18.0.3393?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://docs.sonarqube.org/display/PLUG/Plugin+Library/jdt-package" + "url" : "http://docs.sonarqube.org/display/PLUG/Plugin+Library/sonar-analyzer-commons-parent/sonar-analyzer-recognizers" }, { "type" : "build-system", - "url" : "https://cirrus-ci.com/github/SonarSource/sonar-java-jdt" + "url" : "https://cirrus-ci.com/github/SonarSource/" }, { "type" : "issue-tracker", @@ -2251,295 +2263,264 @@ }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-java-jdt" + "url" : "https://github.com/SonarSource/sonar-analyzer-commons/sonar-analyzer-recognizers" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.java/jdt-package@1.1.0.34?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.18.0.3393?type=jar" }, { - "publisher" : "SonarSource", - "group" : "org.sonarsource.sslr", - "name" : "sslr-core", - "version" : "1.24.0.633", - "description" : "", + "publisher" : "Spring IO", + "group" : "org.springframework", + "name" : "spring-expression", + "version" : "6.1.21", + "description" : "Spring Expression Language (SpEL)", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "1aff676d028ebe3310dfdef58a42cd06" + "content" : "9ea32c5135a59a1264f13d8f8d5f355c" }, { "alg" : "SHA-1", - "content" : "f2b17ad23d5cd2533c01b9cb3332dae18d9e1521" + "content" : "72da3b3521a6788e143a47b0f7273ce7cf98c6f0" }, { "alg" : "SHA-256", - "content" : "d178c71fca3520a686c229a20220910cebd95dd40c6c0b14bb68bca5a96087bc" + "content" : "29597c579b6b051d0dd2f56775c6e0078ac5252eab5c940ae687bd5e1fcafbd7" }, { "alg" : "SHA-512", - "content" : "fbb6b6987aa0c3464fb71e09d4a89d97c3e2be7306e15ee64b1386732af7f100253ca919aae1f082362d5a92984dc0cbc5f076285f645af42e808171882f47e7" + "content" : "e54e346271cbc327b138f7a16d6c086f68290688c293753cc5513bc26a20ddd91ee194de32d91122432dae785692468d9d68971202e05c0571a65a44f0a518e1" }, { "alg" : "SHA-384", - "content" : "128ef920ed79a50b68b2fab9548ecf0aa1c86785f7097251b8aa1ccf95a78be592ff2066d4aef35553255d62e047907d" + "content" : "eb0349b3f3b4952f088a4243ab58b7167087e01a719babbe15e54c25d5b6cc3e8f52203542e447a465c3002a3588e6ec" }, { "alg" : "SHA3-384", - "content" : "52ab29e43f7310f16e090d3a03f3dd3ac38bc6e26e7d58f72f4119100b30b0d45e0024d43acb26be7ac87fd47749bb20" + "content" : "a2d39ba6e734731a7588f70fac0ab312d835674427c384e7bc7fde62340d2d1c48217ec0bbdc953b3f436550aa0dc796" }, { "alg" : "SHA3-256", - "content" : "ae85cc20ac91a1d01af9f39b4a51f064ebd4166006b893afe4c5bf37bdec1a90" + "content" : "be4aa16518c2a8cae7deb0b7f867a2a4be88a7a9b3030db00558615eae43d27c" }, { "alg" : "SHA3-512", - "content" : "04cfc8a3f872d3a453ea05b8f652e96ac5988fa8735f89ee7ccfbf1abb8e92d9bae91fb445f18598c22a8159b7333d09003490177129539ff87f8b450344b095" + "content" : "c4e3742d1ba2111bc4b72c1f9fcebff0d47c8466dd732d5f66ef2c7303a60d7da4e1a63fbf469df27075bf0f5174302dfa921722079425540151fd5e16fdfbfb" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "id" : "Apache-2.0" } } ], - "purl" : "pkg:maven/org.sonarsource.sslr/sslr-core@1.24.0.633?type=jar", + "purl" : "pkg:maven/org.springframework/spring-expression@6.1.21?type=jar", "externalReferences" : [ { - "type" : "build-system", - "url" : "https://travis-ci.org/SonarSource/sslr" - }, - { - "type" : "distribution-intake", - "url" : "https://api.bintray.com/maven/sonarsource/SonarQube/org.sonarsource.sslr/;publish=1" + "type" : "website", + "url" : "https://github.com/spring-projects/spring-framework" }, { "type" : "issue-tracker", - "url" : "http://jira.sonarsource.com/browse/SSLR" - }, - { - "type" : "mailing-list", - "url" : "https://community.sonarsource.com" + "url" : "https://github.com/spring-projects/spring-framework/issues" }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sslr/sslr-core" + "url" : "https://github.com/spring-projects/spring-framework" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.sslr/sslr-core@1.24.0.633?type=jar" + "bom-ref" : "pkg:maven/org.springframework/spring-expression@6.1.21?type=jar" }, { - "publisher" : "SonarSource", - "group" : "org.sonarsource.analyzer-commons", - "name" : "sonar-regex-parsing", - "version" : "2.8.0.2699", - "description" : "Logic useful to read and analyze regular expressions", + "publisher" : "Spring IO", + "group" : "org.springframework", + "name" : "spring-core", + "version" : "6.1.21", + "description" : "Spring Core", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "35a3545ee8cc01b7630817c10d3ad63b" + "content" : "3c233d75937864d95e9051eafa9205f1" }, { "alg" : "SHA-1", - "content" : "f30c693d63d35e55921b600d1cc02f6ab45fb162" + "content" : "dcc8607ee792439389e19111d83737b6b06ca4ac" }, { "alg" : "SHA-256", - "content" : "83710ff002b9faf8afb413a05a08b0530a3cf8ef130815d5a46c955c478664b5" + "content" : "0729b69e52ac8d9a8d03991315690f632bb0984620a0595e52580d7f3557298d" }, { "alg" : "SHA-512", - "content" : "0a10e363e24117e86650a1a8e9a10a637c4f99cee64405607be5da8c4bf4ecc413e67ed78acbd174b699b5c7325db5f0d623c10ded7e642a3e98f1f74e680f11" + "content" : "8d926d38d47cc510378bff4cbd59a951660e8b813a22ffe662490631eb0f85668b007a0ee6961f4a6db2a80dab75181e13196fac10076510dc155c897a6aa999" }, { "alg" : "SHA-384", - "content" : "c3775396d6d0c3001eb244d062e0f5262b78aae72a9d0ba5760dfa8eb5310112c403d0889cc73ade62a9fafcb515c635" + "content" : "b8d3fff87f154bd509d1844c68a005787729112fac80512fa5d6df43d32b1f2fde0bd33e6ba6038e5d57e6265c8b97e5" }, { "alg" : "SHA3-384", - "content" : "87bd8e6f2545740da80e5ad7c17600f1a3d0bd86aab07557e5f2fc3cdeccfc5654f030b0fe11c93e084da7a1e8b1d95b" + "content" : "d68af409a439cedb3b7da43946892d6012fb3000e849e929221a994cdd7ed1fd2791b1fbcc2b5903415ec6612f679cb9" }, { "alg" : "SHA3-256", - "content" : "85d791fcc5a6001f15ca84efff8a03c55b791a88745deca215c8108c8318ad1d" + "content" : "2a8bcfdbaae2b6c617f4896069b188e279faf8d169932c17f90c0e0ed4223fc0" }, { "alg" : "SHA3-512", - "content" : "024d92e865992b92d5c29a65ebec60a706ea8f0859de1c55312377ef22188396855b4403033d1e03a05208f37c3a24ea2e948f463cb3c5c9bc53c8d4266e5e03" + "content" : "2890d9f8375e68786ea993d22ea2d9fd7c45bcbcce07949013857d7a3ff89da0aadb22a34493180c0d1fe905e744b453510b1f87631bbce8eda84c7844389884" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "id" : "Apache-2.0" } } ], - "purl" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.8.0.2699?type=jar", + "purl" : "pkg:maven/org.springframework/spring-core@6.1.21?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://docs.sonarqube.org/display/PLUG/Plugin+Library/sonar-analyzer-commons-parent/sonar-regex-parsing" - }, - { - "type" : "build-system", - "url" : "https://cirrus-ci.com/github/SonarSource/" + "url" : "https://github.com/spring-projects/spring-framework" }, { "type" : "issue-tracker", - "url" : "http://jira.sonarsource.com" - }, - { - "type" : "mailing-list", - "url" : "https://community.sonarsource.com" + "url" : "https://github.com/spring-projects/spring-framework/issues" }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-analyzer-commons/sonar-regex-parsing" + "url" : "https://github.com/spring-projects/spring-framework" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.8.0.2699?type=jar" + "bom-ref" : "pkg:maven/org.springframework/spring-core@6.1.21?type=jar" }, { - "publisher" : "SonarSource", - "group" : "org.sonarsource.java", - "name" : "java-symbolic-execution", - "version" : "7.33.0.35775", - "description" : "Code Analyzer for Java", + "publisher" : "Spring IO", + "group" : "org.springframework", + "name" : "spring-jcl", + "version" : "6.1.21", + "description" : "Spring Commons Logging Bridge", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "232f45616c57791e1376b309b99d6bf3" + "content" : "0e017885cab7225c3859aaf24d3a96cb" }, { "alg" : "SHA-1", - "content" : "ea12ce7dc955bbafca59c3463ea1f44ad82e42ab" + "content" : "fa75fc86c26dbbc6fb816e5b7aa5fc83f4494423" }, { "alg" : "SHA-256", - "content" : "8ac28a32e08e60c451cc153bee71bc028f3c72e4ab0e3a9c91bdc5b131ad0f57" + "content" : "f77ae10f41eaf02bc94a6424a3bad1d80a58b168e6af032ecb40a474d9e4f82d" }, { "alg" : "SHA-512", - "content" : "6ad5b4c6b85757346f203924c26e908d5557ab4d03147afbf58e33e0f25fdb3999f94aee6973366d2441565466473c30c0861a1512c79f240cd35a9a97f0d35e" + "content" : "b0821cb6220914b2bc517f858d21c4a3b98b5a487ee94f29acf044153ba5a568a44fead4d003f71ffbad65f61791d01e33ec05859cdf2a3a1bb853469dc37753" }, { "alg" : "SHA-384", - "content" : "dbc472dd1173bcac5ba03e4a1165ed35bd7db93511cc8b99e5407aaaa65a56a92027d79c551a4df7120c2a8d87705797" + "content" : "84188cf73912ff5372b4ebc58fd0bc63ecc282240c896a987ebf3cfcbbc57cfeacd1a63ea5a9cd6fbcd3ea45e11a001a" }, { "alg" : "SHA3-384", - "content" : "1912414c5430f6b4711e20bb73e1076b5ad85babae3e8374fbb65f1dd3232ae380d9bc52891184befed50777dace89f9" + "content" : "a787e5682a3d41e20e726caf3e0eabd9fd0b33beff448bdd8915c5d1755eec973d7e9ea229a806b00a1d969941364614" }, { "alg" : "SHA3-256", - "content" : "a5cbfac546a7aaf0a2211c3f1beceb36e2ed3384c9d7d4ece2195d2932fba345" + "content" : "9ab47bf24ddfbb2dbe03a02e131d4b9bd7ada2da72badba7a7fadd0363895247" }, { "alg" : "SHA3-512", - "content" : "4f6974c7877b90dfb0acf4a6f8f412ea4f391164165ce3de75973c871e356a55fdc5ad4de3322a7e30e57f4d7caa87871b3671a63e19ca51a6f5b3cec949d281" + "content" : "3d537771c6060078daca6cb556d0a1571f9a685e0287c8c186f3f8e441ce0d7460040de7368c7a51d4dd99faa0d6216baa1013c8acc7f3b981eb30e25cccdaa3" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "id" : "Apache-2.0" } } ], - "purl" : "pkg:maven/org.sonarsource.java/java-symbolic-execution@7.33.0.35775?type=jar", + "purl" : "pkg:maven/org.springframework/spring-jcl@6.1.21?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://redirect.sonarsource.com/plugins/java.html/java-symbolic-execution" - }, - { - "type" : "build-system", - "url" : "https://cirrus-ci.com/github/SonarSource/sonar-java" - }, - { - "type" : "distribution-intake", - "url" : "file:./local-deployment" + "url" : "https://github.com/spring-projects/spring-framework" }, { "type" : "issue-tracker", - "url" : "https://jira.sonarsource.com/browse/SONARJAVA" - }, - { - "type" : "mailing-list", - "url" : "https://community.sonarsource.com" + "url" : "https://github.com/spring-projects/spring-framework/issues" }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-java/java-symbolic-execution" + "url" : "https://github.com/spring-projects/spring-framework" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.java/java-symbolic-execution@7.33.0.35775?type=jar" + "bom-ref" : "pkg:maven/org.springframework/spring-jcl@6.1.21?type=jar" }, { "publisher" : "SonarSource", "group" : "org.sonarsource.java", - "name" : "java-checks", - "version" : "7.33.0.35775", - "description" : "Code Analyzer for Java", + "name" : "java-checks-aws", + "version" : "8.18.0.40025", + "description" : "Code Analyzer for Java :: Analyzer's checks for AWS", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "eaeb082ff51df115aaf0f3116faf4b84" + "content" : "8aed826c7d8696ce3699588cd6ff952b" }, { "alg" : "SHA-1", - "content" : "f11567226d2a4c2efcadf5545c3e0b1bb5f8142c" + "content" : "6cc1bba5a36b3eef6230e273866fc6dc309189af" }, { "alg" : "SHA-256", - "content" : "1eeb30e79298fa3cff7e7265a0d313a5572bdd726b8d83e83dcb1d144421c24b" + "content" : "5ee06300e5427acf74b378cf181a697b548a477ffcf1edfc216ae5345e40c1e0" }, { "alg" : "SHA-512", - "content" : "0034e5bf2e95fb181c476a3d1a5b111efcd22131f62d75eb6daf21da645b4e3ad8e35096274e3898e042a7463d831caea46a7840f843c10442d5f48b75041687" + "content" : "47ecef1096030771bb0c24c2b3c15ebe51ab8a6f66d76ae2683ea4b54821f9c914ecd694b877a186c26650db463aedfa57e9a172fe509de26ca4f0a19867be61" }, { "alg" : "SHA-384", - "content" : "c2e5daa8bb17411f2ad282755de82c02d98a4940a81a76c26167713a1b5f55f7551875ae8459b5b77934d42f37f5e8e5" + "content" : "242495b1e08269988e57a0e08730bb23d18fe614cf37af2ede8aa489a7a3ad581c0d5f970b7d25aee2db35f658649c26" }, { "alg" : "SHA3-384", - "content" : "7de6a308f476947ec7a132968be161ea98ab1f135d6286129fde8ee5f8a1044a295c9febf482d7f5a5f83b65e1ccd36f" + "content" : "f8f74f485da5f891e8a98701cc7d7267548ebeb2d04861239a891547abebdda1951cc16de0003c60db18fa48ad9696f9" }, { "alg" : "SHA3-256", - "content" : "8033896b6e57169054031f9d386f00cc0194f1cf930782becea1b12a5f5421f7" + "content" : "b60ad5ee6b83beabd93c21866b2bd05eaf340ead9ef9f4d1f38492546d103d89" }, { "alg" : "SHA3-512", - "content" : "789208a299ff2cbfe4ac9f6c647b0d703ff77040fce20e269b33a6d0712011d214704496d27ee8b63adf5778e4d8b58fde286e5a8f043f3b1813ec4c15a06fce" + "content" : "8bd74670d07ae07f638e31a27a8f8a00eb0fabd40337f3b601595c86769e31da58b969f08ca5424dbb48adc4d7c8477503a1d795cb8eeec3179f276273997685" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.sonarsource.java/java-checks@7.33.0.35775?type=jar", + "purl" : "pkg:maven/org.sonarsource.java/java-checks-aws@8.18.0.40025?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://redirect.sonarsource.com/plugins/java.html/java-checks" + "url" : "http://redirect.sonarsource.com/plugins/java.html/java-checks-aws" }, { "type" : "build-system", @@ -2559,66 +2540,66 @@ }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-java/java-checks" + "url" : "https://github.com/SonarSource/sonar-java/java-checks-aws" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.java/java-checks@7.33.0.35775?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.java/java-checks-aws@8.18.0.40025?type=jar" }, { "publisher" : "SonarSource", "group" : "org.sonarsource.java", - "name" : "java-checks-common", - "version" : "7.33.0.35775", - "description" : "Code Analyzer for Java", + "name" : "check-list", + "version" : "8.18.0.40025", + "description" : "Code Analyzer for Java :: Generate the list of checks at build time", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "377bec0957fff4818de779185dc9d46b" + "content" : "523e390cec46df34c6686d8f61181bef" }, { "alg" : "SHA-1", - "content" : "64e48e3a5d4bdc7ed674b21f8ddb393e548c9947" + "content" : "93c3737e36e776e9c9ba43293256d3ade559e656" }, { "alg" : "SHA-256", - "content" : "a5db4cf127e982760c049faf6a3df99fafccdd5e1d58b59afba30b206bde96b2" + "content" : "aa62feaefd959fe9c4a75280ddbee6ffe9b59181296c521e8d876676812ddf5a" }, { "alg" : "SHA-512", - "content" : "ebb84100013c73fd13cd502e5ea56a557568f5404b1b60d015ba5529c955c7ae70c612437cbb249068c7437d2dd4ef7f249a20f4f2090ea22c414123df062838" + "content" : "bba574e1f4a05a5fc7a70cb5f9deb5a1f68d8bcb6b2ad4859799e94ca18f622b15075f454e00e3d8fd5ac64827c06afc660ec73bc0db1402bdc3f5e4ebb16bbe" }, { "alg" : "SHA-384", - "content" : "a3e9a9cf69e639b84e22ef84a9937d8c8e829628ae2b203ec722394ad3b50e0c07fc1b6265d4bf8df3a86cac424125ef" + "content" : "a87fc3e9946eef5166f6393ca2ee064caf3763d19e3415779f0e5269b267790a897485fb8cf085ba84f535e2112fbbe3" }, { "alg" : "SHA3-384", - "content" : "abe29bc0a84ab6ec1dc55fe8d349f72e37865e46a7eb114d85328882711f00f344cb7252ef9adc449009b62a4350f7bd" + "content" : "9e9584346c363abd4a0aad992c54f60dfec95d7a7e8c3cc2834d878c72d1b8a5460c834eaeafc6045a7115af424bcacf" }, { "alg" : "SHA3-256", - "content" : "2bfc0c71aef10df37be7c91fea1ab5e1d90f018c859aa7e3f0844ce2246137fa" + "content" : "9ddbb48896bde9c6d4457d250d207daef592fe257f10ff0ed88cbb38990c9209" }, { "alg" : "SHA3-512", - "content" : "0e7d60391152b9fbc7b7238967dbf3c4c4c32e776f065b65e456c5ba5b88550723709c82125334fb749167231d602fd6bf3c610a7e83e2d34f3e339f139f71b6" + "content" : "7a3b54a4fd3db04d97df4040f10c27fb9993071eed45f1caac906d989b213995fddd8b7e74b92d68c6cc99709fc69b789f1a55bd55d1226adccaf80493869b8f" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.sonarsource.java/java-checks-common@7.33.0.35775?type=jar", + "purl" : "pkg:maven/org.sonarsource.java/check-list@8.18.0.40025?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://redirect.sonarsource.com/plugins/java.html/java-checks-common" + "url" : "http://redirect.sonarsource.com/plugins/java.html/check-list" }, { "type" : "build-system", @@ -2638,74 +2619,78 @@ }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-java/java-checks-common" + "url" : "https://github.com/SonarSource/sonar-java/check-list" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.java/java-checks-common@7.33.0.35775?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.java/check-list@8.18.0.40025?type=jar" }, { "publisher" : "SonarSource", - "group" : "org.sonarsource.analyzer-commons", - "name" : "sonar-analyzer-recognizers", - "version" : "2.8.0.2699", - "description" : "Shared code recognizers", + "group" : "org.sonarsource.java", + "name" : "external-reports", + "version" : "8.18.0.40025", + "description" : "Code Analyzer for Java :: External Reports Plugin", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "f9c0e3225c8cd152cd8385ab211c1211" + "content" : "0a2d44b03fd1c355461dd30c436d3097" }, { "alg" : "SHA-1", - "content" : "10fa0ef13f09632cc2d8a97990512a36252b2e2c" + "content" : "6374bd720414018d7ed56f80b2ed918ec94e6b2f" }, { "alg" : "SHA-256", - "content" : "5ba42aefbd8cf715575a9f40293a53b47cc82ba67943215a5382487e4042da50" + "content" : "38eb3bbdd4857c485d41a0a9deab123e2c9c4cba4e187dd1997efe72cdafdccc" }, { "alg" : "SHA-512", - "content" : "0659ad40421f8be0d492fedf4cee72c531d264d8b9aa9327e789b9277de0a5b037c0dba25a25bc1efb5a858a959941e7e6fa3c7e166ff908db1ea272b5f05486" + "content" : "ec05b2b58d09641b89777d15383f8ec27873aa1e2d97977af5365840b322e1a3e38a8d65c71dd7bf5b87fbca59e49bfc6e71dc7400efad987c51dcc5e9bd5e89" }, { "alg" : "SHA-384", - "content" : "7b629d1b28bab3012d347760905c7235e579c868460098c2f4e9e9127e3eef1fd08be8f8cff2400552a2f6ba3c735d18" + "content" : "dfde96d508de66a673c9e13298c958dfc2c6fb32e85c0b42450b3263ba4f3a09a254d893f08ae4b9f39d707e4cee22c7" }, { "alg" : "SHA3-384", - "content" : "e3f76485b0c60e07e0a8d93716847e12279c8914590d06000a95df859b952d2b1348a2c1b74a434f92aa36ae711ad858" + "content" : "41b976778dec610536e3b9eb679754ef9568cc8bb2beb7c7fe1d852c5d5879c682d8844a0c035ebe0b095626ea43203f" }, { "alg" : "SHA3-256", - "content" : "af4025e146ba6f1982d1351d1adcabee0a2acb8b90f7a7e8e76f019e408adc1f" + "content" : "42ddf81281e703791ae6f8c8d8adcc96da58390d4cb4b49668b4d3e3d1ba4bec" }, { "alg" : "SHA3-512", - "content" : "ec20e48bda7e839e8c30bdb52156bd42a856f176282c3b1fd3241a268e1674b582acee92f83d72b0247a03634e46a2a740326dda9c089b704605b45c69322606" + "content" : "586377b8e12c4b960ef1a3a5cf335e8e19db4da10de7346f140bf3eb56243229be4271603c2400a6bcedb87d06dce5f95cb11581e8eceb80e88a6ddb3e00a564" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.8.0.2699?type=jar", + "purl" : "pkg:maven/org.sonarsource.java/external-reports@8.18.0.40025?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://docs.sonarqube.org/display/PLUG/Plugin+Library/sonar-analyzer-commons-parent/sonar-analyzer-recognizers" + "url" : "http://redirect.sonarsource.com/plugins/java.html/external-reports" }, { "type" : "build-system", - "url" : "https://cirrus-ci.com/github/SonarSource/" + "url" : "https://cirrus-ci.com/github/SonarSource/sonar-java" + }, + { + "type" : "distribution-intake", + "url" : "file:./local-deployment" }, { "type" : "issue-tracker", - "url" : "http://jira.sonarsource.com" + "url" : "https://jira.sonarsource.com/browse/SONARJAVA" }, { "type" : "mailing-list", @@ -2713,249 +2698,130 @@ }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-analyzer-commons/sonar-analyzer-recognizers" + "url" : "https://github.com/SonarSource/sonar-java/external-reports" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.8.0.2699?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.java/external-reports@8.18.0.40025?type=jar" }, { - "publisher" : "Spring IO", - "group" : "org.springframework", - "name" : "spring-expression", - "version" : "6.1.5", - "description" : "Spring Expression Language (SpEL)", + "publisher" : "SonarSource", + "group" : "org.sonarsource.java", + "name" : "java-jsp", + "version" : "8.18.0.40025", + "description" : "Code Analyzer for Java :: JSP parser", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "1f268a22bb7c0cb80958953ffbc21125" + "content" : "7ad6c8d9c8472d350359adbb1bb2a117" }, { "alg" : "SHA-1", - "content" : "7e21cb1c6bbef1509e12d485b75ffc61278d9fa7" + "content" : "bf1f05662d4aa017bfab919bee32c6e985aea49b" }, { "alg" : "SHA-256", - "content" : "1f37b50dcaf091a43bb10d946178fff4082674497fd821438327815da14f7fd0" + "content" : "85520636a757ac333fb349873dada3386a2a89352bb6443a552612323a898e3a" }, { "alg" : "SHA-512", - "content" : "d5a13856a7f4619eaf1c9593f7739ec5cde37a555a98f0da4cb21aa591e87fb0bcdbd2a5da67d9b69a0dab0016f806c9d3f096bc8841c32bb98810daf1e5e7b7" + "content" : "34e2e4fd545dfab31f0f0dba626b61648a2daadfaa7f32483cb3b31aa2010e90639bcae4b2b3ac669d60ae3d0490ef59bf6d87ee61098d593c15b043ad8e43e1" }, { "alg" : "SHA-384", - "content" : "1e0c29ba819c5c8f5eb278a8f308a0119a476e81998ff5c7658b150352d357ef53c408566bd7a0b8023b7b41cabf4636" + "content" : "acb14999bcc8e0347f71ee453d3c58426e60de8f576904058391dbab16da82bfb0ac7083cdd73b6f26862b2ca06912cb" }, { "alg" : "SHA3-384", - "content" : "f9cefe146557fe266e6e38bc8fbe157c7ef10fc606edafaf901d393ab140d25dabf4e60ff79c6a45a83c7eff890d3cac" + "content" : "75c0fed98b9486927c2c767745222e6b93e7c8af00727abbc871380d5bb2b9d71ba9a9bede424aedfc0c057e5c564d02" }, { "alg" : "SHA3-256", - "content" : "ba29e269a74f3c452a64bd9e7a680c84c5c26b96397683c22435e4fcea8ecb9e" + "content" : "3ff452bc563a50565843c16d94fd729cdd4f76ce6b1847c5fd61d6504a6fb2a7" }, { "alg" : "SHA3-512", - "content" : "8de364ab79572c8d2af2dc22ea5768d323b7268e03ae977701024f17e6fede13f03e248ef44c6789dea3007723beb1454c7795b45f3834b6040510661b6dee54" + "content" : "96ad4a5625e3d8c3b6df8a224e75597da826ca3438e1e0c6fe805cfc0d246822ab98794250913691ed1c5ce201b9e938ca6af648e9d2f5f842efdaad78599341" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.springframework/spring-expression@6.1.5?type=jar", + "purl" : "pkg:maven/org.sonarsource.java/java-jsp@8.18.0.40025?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://github.com/spring-projects/spring-framework" - }, - { - "type" : "issue-tracker", - "url" : "https://github.com/spring-projects/spring-framework/issues" - }, - { - "type" : "vcs", - "url" : "https://github.com/spring-projects/spring-framework" - } - ], - "type" : "library", - "bom-ref" : "pkg:maven/org.springframework/spring-expression@6.1.5?type=jar" - }, - { - "publisher" : "Spring IO", - "group" : "org.springframework", - "name" : "spring-core", - "version" : "6.1.5", - "description" : "Spring Core", - "scope" : "required", - "hashes" : [ - { - "alg" : "MD5", - "content" : "6eeff94b635753591e74d979ffc2f793" - }, - { - "alg" : "SHA-1", - "content" : "6dae1b06ffacbb9abab636be2dbc6acd3b6e5d68" - }, - { - "alg" : "SHA-256", - "content" : "476dac28509b3f47d0b5e895a639fa75ac2218f074ce214e44832a836c469f7e" - }, - { - "alg" : "SHA-512", - "content" : "067d31ab99c842a586fbc1bf7aa7ac9aad0fa36d70f0e5bdb7e355514d66b1f6106dbb74ce15959a8dff8223a3e447ae30735e40f376e67f0ef8b70ed1a85002" - }, - { - "alg" : "SHA-384", - "content" : "25728b0246bc11715c8b1fec2a704b74a6c2bd6e41851b44aead5c76d0ad1493929bdbcef51dee8005404099388c03ee" - }, - { - "alg" : "SHA3-384", - "content" : "ba98714211e0a6d8337b876cd6452216d1752b5274671f476fa06a63931da1e8ff0d7d0b4105967ab68e6f967aa8b43e" + "url" : "http://redirect.sonarsource.com/plugins/java.html/java-jsp" }, { - "alg" : "SHA3-256", - "content" : "70c250de2d49aec369e3abf959c980036051ca0f54ddfc774840c95a8eabccae" + "type" : "build-system", + "url" : "https://cirrus-ci.com/github/SonarSource/sonar-java" }, { - "alg" : "SHA3-512", - "content" : "c4d9cb5d1a7a738f6a762bd8f9a0fbd2455f3900e702b77d5d1d76079ab1b614b7993f992473ea57639a57fdb46e985a3b29191b3d8a18215b97e82b31cdb3e7" - } - ], - "licenses" : [ - { - "license" : { - "id" : "Apache-2.0" - } - } - ], - "purl" : "pkg:maven/org.springframework/spring-core@6.1.5?type=jar", - "externalReferences" : [ - { - "type" : "website", - "url" : "https://github.com/spring-projects/spring-framework" + "type" : "distribution-intake", + "url" : "file:./local-deployment" }, { "type" : "issue-tracker", - "url" : "https://github.com/spring-projects/spring-framework/issues" - }, - { - "type" : "vcs", - "url" : "https://github.com/spring-projects/spring-framework" - } - ], - "type" : "library", - "bom-ref" : "pkg:maven/org.springframework/spring-core@6.1.5?type=jar" - }, - { - "publisher" : "Spring IO", - "group" : "org.springframework", - "name" : "spring-jcl", - "version" : "6.1.5", - "description" : "Spring Commons Logging Bridge", - "scope" : "required", - "hashes" : [ - { - "alg" : "MD5", - "content" : "4b7724c57ea12f13ce3fc49a18209b6c" - }, - { - "alg" : "SHA-1", - "content" : "896ae3519327731589c6e77521656b50ae32d5b3" - }, - { - "alg" : "SHA-256", - "content" : "c53540419e482242c815db6d6a8cd80af85a6a895e38329b9d9bd6b4616503eb" - }, - { - "alg" : "SHA-512", - "content" : "0de5bdae17924ab55ed7e6e97acbfeb60406fa99b10c1fd8a391f9f81c475691638535a297636fb79b51f02cf07d98ac613049235e9fdbf1186672c8b64c5967" - }, - { - "alg" : "SHA-384", - "content" : "2844ddc317d6fed2c80c5090e3b4b976a063ad5fce4bf8dbfa7c1034cb647497a830142ff7e70b7eb0c8cf742a091071" - }, - { - "alg" : "SHA3-384", - "content" : "dfc30f87671459ea2bdc8c25aa6ed814dd53a0ab60df4b98b44eb96ab28cd7bfce358c32b5ab8255d0c0d7ebba1a28b0" - }, - { - "alg" : "SHA3-256", - "content" : "a7a4153deabf0b46852c6539f1d0d63bac5963eaf9ef73209097c3bd4b2118c3" - }, - { - "alg" : "SHA3-512", - "content" : "62add3aa8ea534168ba2eb4e811628e35970e17a2ae350de376fd95e8e0d70045dc9f6748075bafe4f74ebec4278bb3e36243478e08b4329840c8f068b30cde9" - } - ], - "licenses" : [ - { - "license" : { - "id" : "Apache-2.0" - } - } - ], - "purl" : "pkg:maven/org.springframework/spring-jcl@6.1.5?type=jar", - "externalReferences" : [ - { - "type" : "website", - "url" : "https://github.com/spring-projects/spring-framework" + "url" : "https://jira.sonarsource.com/browse/SONARJAVA" }, { - "type" : "issue-tracker", - "url" : "https://github.com/spring-projects/spring-framework/issues" + "type" : "mailing-list", + "url" : "https://community.sonarsource.com" }, { "type" : "vcs", - "url" : "https://github.com/spring-projects/spring-framework" + "url" : "https://github.com/SonarSource/sonar-java/java-jsp" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.springframework/spring-jcl@6.1.5?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.java/java-jsp@8.18.0.40025?type=jar" }, { "publisher" : "SonarSource", - "group" : "org.sonarsource.java", - "name" : "java-checks-aws", - "version" : "7.33.0.35775", - "description" : "Code Analyzer for Java", + "group" : "org.sonarsource.analyzer-commons", + "name" : "sonar-analyzer-commons", + "version" : "2.18.0.3393", + "description" : "Logic useful for a language plugin", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "14dfa924e3e61569475db951d81dff71" + "content" : "86c3f760a4c1790b1af5c16eb246f8e0" }, { "alg" : "SHA-1", - "content" : "2af499d9be4ebd5d898db1eb13eb34ad3b2fb8e9" + "content" : "612043286321caa05aa4e7670b36dd41e826ae2d" }, { "alg" : "SHA-256", - "content" : "62148c334e45df290a958dd438ef662ba5fd29c4023de832d425e674f7c585fd" + "content" : "f7babd94546594b9d0427b1bf32cd8f60065b8e8d0a1436f6ac443b9faaa1bf0" }, { "alg" : "SHA-512", - "content" : "f9365f6002c6a51295e7a00a4255ad9eb693d52de2e4c3aa0161e722c58f57a565f97bd3e03e53f3fcc2b1b1af3753471b0ba707e8416f6d2c21f17fcb1b7071" + "content" : "b1d166c1ea81d0c89afc9b27e6d9457e6cf0c45afc8de7fa37607ed14b379ddbc1cb1c31bd2ebc25be3c980f1cf145686256dc1b0217f8af73c69d5eb11bb0a3" }, { "alg" : "SHA-384", - "content" : "45f68667d8e7543d39b51ebf451513bd085a573edfcee9b89c8154a61bda72d55f7085a1ccb132b306bb2dcebcb9b899" + "content" : "1d1bde067e0de39df2d0a35bfda18e9082c4f208411d45488a632a61b0acb04270a4016ad481a7aab1107608d121b90a" }, { "alg" : "SHA3-384", - "content" : "5a6ef9e7483108b215e37833d6d4321ae9ca11f2a2df09d02563d008228dd469e2ce9d9b307679fe16fc229a1a90f588" + "content" : "74a471351b75abc4d02989bde9e597307c807683bbac455a3b50aa98928d7dbf3f85db1d4c090c7c7b87299603d1f568" }, { "alg" : "SHA3-256", - "content" : "2c6b29354a7077d0a34a9c742a2e0a95310e2dbc40cab29527ec59aed9ac7b22" + "content" : "8a6c33facfe7d600d45ca3db4ef0e545e7bfa75a383ac9d05fe49df6ab695197" }, { "alg" : "SHA3-512", - "content" : "d19b4dfeca42f8ff8821621d241b12aec49fd8012cac5ccffefac6bd55ca2dca60ef40ee15a81460051fbf1797631a34c70fb4600a9e4182a581f082b8c5028e" + "content" : "68308ba7a0a3196f866436123817431cda045808cf617084af2efb84f53aa6907841ba67653fad166a347f92de0de2b2fea573e5e2fda734306cb3ca3ecf3319" } ], "licenses" : [ @@ -2966,23 +2832,19 @@ } } ], - "purl" : "pkg:maven/org.sonarsource.java/java-checks-aws@7.33.0.35775?type=jar", + "purl" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.18.0.3393?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://redirect.sonarsource.com/plugins/java.html/java-checks-aws" + "url" : "http://docs.sonarqube.org/display/PLUG/Plugin+Library/sonar-analyzer-commons-parent/sonar-analyzer-commons" }, { "type" : "build-system", - "url" : "https://cirrus-ci.com/github/SonarSource/sonar-java" - }, - { - "type" : "distribution-intake", - "url" : "file:./local-deployment" + "url" : "https://cirrus-ci.com/github/SonarSource/" }, { "type" : "issue-tracker", - "url" : "https://jira.sonarsource.com/browse/SONARJAVA" + "url" : "http://jira.sonarsource.com" }, { "type" : "mailing-list", @@ -2990,51 +2852,51 @@ }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-java/java-checks-aws" + "url" : "https://github.com/SonarSource/sonar-analyzer-commons/sonar-analyzer-commons" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.java/java-checks-aws@7.33.0.35775?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.18.0.3393?type=jar" }, { "publisher" : "SonarSource", - "group" : "org.sonarsource.java", - "name" : "external-reports", - "version" : "7.33.0.35775", - "description" : "Code Analyzer for Java", + "group" : "org.sonarsource.analyzer-commons", + "name" : "sonar-xml-parsing", + "version" : "2.18.0.3393", + "description" : "Logic useful to read and analyze XML files", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "b07b7b394b1de4dadcdd41bf472bff97" + "content" : "42a57e652799b8d75ed82ed71af3e8a8" }, { "alg" : "SHA-1", - "content" : "bc9c1e1cb3f4abca42ddb1b6ffc027eb2fd4c68e" + "content" : "d776689581869043b0d5225d9def870872530ab9" }, { "alg" : "SHA-256", - "content" : "aabc8b03f2c9c042ad4d1d25ada8281dd029480e9f59831d98e91adca67fee08" + "content" : "b383b5147a2b186d91f3efcca0cfa9be9e87371e79c0e61f38332b24f152286f" }, { "alg" : "SHA-512", - "content" : "b60270c2b3d038cc3b3387ba052a79c2e5fad1b0536a5a1f2e4bfa98da3046ae451503f7837a214359dd6c6052cdbdf5d8776fbab5648bcc31ac974830a6c16d" + "content" : "04334f2ed4bd53436f9ca5755f836df11147951e5e09ba375e7217a9ddb629172f550eddb978c1ecc3a9e76764db7c82aa05c925f53cb720ca6f0684c2d95197" }, { "alg" : "SHA-384", - "content" : "943d62b27e66b0b7472c0115f9749fe109343ee1409eb6ba57ffd3776eddfb92bf28c4c1f664aefc08e891d29d5ea2e8" + "content" : "5cbbd8a9a784f94c77bac285538e6894c6cf67f5e5da50745633dab13583e6027c7b2620df4c0412cdcbb4bbf7dfb33f" }, { "alg" : "SHA3-384", - "content" : "ff834b86b09d0b11bd4fd9da2245b52c76d540af4bbc858d2478f40444c2a632ca671eac45b65097c0014456a7d553ba" + "content" : "3d74f27c2a90595595c59d4f3551e11037f70de03afb7669a59217a42c32e41318ccf53a4911e97c94d4ef7c5d909498" }, { "alg" : "SHA3-256", - "content" : "b632f307cefea8b5fafe516db380b7160da28677ed0657db17332250ee40b26d" + "content" : "e798859717811fa3dd11cdc3e7c518593dad3f1eea35e7880250c832cdb6c51e" }, { "alg" : "SHA3-512", - "content" : "81ae57ff106ae7f468dfa23a5d7fd828915cbe1bcc6b21ba988a255287a7d40858979aaede906f3cf277f93117eb7ec919e003083622d061b3149a2d15eb765b" + "content" : "757eb040f0c6dc7a39dfba5f3842962b27433593e7993fc755ecd2d2ab362ee58b04c95ea9f4817b43a518f51144f18cd1e9f85875a79c6234ef0f667f1ff536" } ], "licenses" : [ @@ -3045,23 +2907,19 @@ } } ], - "purl" : "pkg:maven/org.sonarsource.java/external-reports@7.33.0.35775?type=jar", + "purl" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.18.0.3393?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://redirect.sonarsource.com/plugins/java.html/external-reports" + "url" : "http://docs.sonarqube.org/display/PLUG/Plugin+Library/sonar-analyzer-commons-parent/sonar-xml-parsing" }, { "type" : "build-system", - "url" : "https://cirrus-ci.com/github/SonarSource/sonar-java" - }, - { - "type" : "distribution-intake", - "url" : "file:./local-deployment" + "url" : "https://cirrus-ci.com/github/SonarSource/" }, { "type" : "issue-tracker", - "url" : "https://jira.sonarsource.com/browse/SONARJAVA" + "url" : "http://jira.sonarsource.com" }, { "type" : "mailing-list", @@ -3069,129 +2927,115 @@ }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-java/external-reports" + "url" : "https://github.com/SonarSource/sonar-analyzer-commons/sonar-xml-parsing" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.java/external-reports@7.33.0.35775?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.18.0.3393?type=jar" }, { - "publisher" : "SonarSource", - "group" : "org.sonarsource.java", - "name" : "java-jsp", - "version" : "7.33.0.35775", - "description" : "Code Analyzer for Java", + "group" : "com.google.code.findbugs", + "name" : "jsr305", + "version" : "3.0.2", + "description" : "JSR305 Annotations for Findbugs", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "e0890ace531478ef8ac18849d78cd9e5" + "content" : "dd83accb899363c32b07d7a1b2e4ce40" }, { "alg" : "SHA-1", - "content" : "a8cecb5145490f15b35742712345b5919726ad89" + "content" : "25ea2e8b0c338a877313bd4672d3fe056ea78f0d" }, { "alg" : "SHA-256", - "content" : "ae1ee6f32a16217667ea46a973f7c93a6f66ef7052a2d1e24d6e8f78c02f96bf" + "content" : "766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7" }, { "alg" : "SHA-512", - "content" : "b7fcefd8fa7174db020947db1a41aff0e5c25191fbd8feb8c53438a42604a50b342ac072f571eaf6b0d54915e9106dc5bc6304d5899dbee90e20dcfc08139ca9" + "content" : "bb09db62919a50fa5b55906013be6ca4fc7acb2e87455fac5eaf9ede2e41ce8bbafc0e5a385a561264ea4cd71bbbd3ef5a45e02d63277a201d06a0ae1636f804" }, { "alg" : "SHA-384", - "content" : "39420fa5bb00153057946a5b667877475bdb65923dd9af86acc6db63f3bbb9471de9735e4ed16a03b3c3a2c6da3118df" + "content" : "ca0b169d3eb2d0922dc031133a021f861a043bb3e405a88728215fd6ff00fa52fdc7347842dcc2031472e3726164bdc4" }, { "alg" : "SHA3-384", - "content" : "6defb43802dfd77c5a549fd7d28ffdf85711623dd24d28520e1e2d96677e47a69c5661029a028d7ca13ea3fa75697a00" + "content" : "9903fd7505218999f8262efedb3d935d64bcef84aae781064ab5e1b24755466b269517cada562fa140cd1d417ede57a1" }, { "alg" : "SHA3-256", - "content" : "54265f768ea5687f500b148e81ac1c3a41c0ac1d9eeb3e2154ebe4507bef46f6" + "content" : "223fda9a89a461afaae73b177a2dc20ed4a90f2f8757f5c65f3241b0510f00ff" }, { "alg" : "SHA3-512", - "content" : "8530ff5df32f8250d5d3a68e81bf4f1e0d0add2a69fe6c2de5dc94b01bbe2e99a86fec11494f4d95239040ee2f736ae305c94b23376475ea7c981cdad6054c85" + "content" : "3996b5af57a5d5c6a0cd62b11773360fb051dd86a2ba968476806a2a5d32049b82d69a24a3c694e8fe4d735be6a28e41000cc500cc2a9fb577e058045855d2d6" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "id" : "Apache-2.0" } } ], - "purl" : "pkg:maven/org.sonarsource.java/java-jsp@7.33.0.35775?type=jar", + "purl" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://redirect.sonarsource.com/plugins/java.html/java-jsp" - }, - { - "type" : "build-system", - "url" : "https://cirrus-ci.com/github/SonarSource/sonar-java" + "url" : "http://findbugs.sourceforge.net/" }, { "type" : "distribution-intake", - "url" : "file:./local-deployment" - }, - { - "type" : "issue-tracker", - "url" : "https://jira.sonarsource.com/browse/SONARJAVA" - }, - { - "type" : "mailing-list", - "url" : "https://community.sonarsource.com" + "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-java/java-jsp" + "url" : "https://code.google.com/p/jsr-305/" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.java/java-jsp@7.33.0.35775?type=jar" + "bom-ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar" }, { - "group" : "org.apache.tomcat.embed", - "name" : "tomcat-embed-jasper", - "version" : "9.0.84", - "description" : "Core Tomcat implementation", + "group" : "xerces", + "name" : "xercesImpl", + "version" : "2.12.2", + "description" : "Xerces2 provides high performance, fully compliant XML parsers in the Apache Xerces family. This new version of Xerces continues to build upon the Xerces Native Interface (XNI), a complete framework for building parser components and configurations that is extremely modular and easy to program. The Apache Xerces2 parser is the reference implementation of XNI but other parser components, configurations, and parsers can be written using the Xerces Native Interface. For complete design and implementation documents, refer to the XNI Manual. Xerces2 provides fully conforming XML Schema 1.0 and 1.1 processors. An experimental implementation of the \"XML Schema Definition Language (XSD): Component Designators (SCD) Candidate Recommendation (January 2010)\" is also provided for evaluation. For more information, refer to the XML Schema page. Xerces2 also provides a complete implementation of the Document Object Model Level 3 Core and Load/Save W3C Recommendations and provides a complete implementation of the XML Inclusions (XInclude) W3C Recommendation. It also provides support for OASIS XML Catalogs v1.1. Xerces2 is able to parse documents written according to the XML 1.1 Recommendation, except that it does not yet provide an option to enable normalization checking as described in section 2.13 of this specification. It also handles namespaces according to the XML Namespaces 1.1 Recommendation, and will correctly serialize XML 1.1 documents if the DOM level 3 load/save APIs are in use.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "22b13ffeab24c14943b58adaee3d15f6" + "content" : "40e4f2d5aacfbf51a9a1572d77a0e5e9" }, { "alg" : "SHA-1", - "content" : "5fcf71c9c39e54c9ca51c304dd7bb2f5558e3286" + "content" : "f051f988aa2c9b4d25d05f95742ab0cc3ed789e2" }, { "alg" : "SHA-256", - "content" : "3f08ff872bf83defa70c20274ab597aaf23ea95c1ff50f4b98e0c9a2a25c1106" + "content" : "6fc991829af1708d15aea50c66f0beadcd2cfeb6968e0b2f55c1b0909883fe16" }, { "alg" : "SHA-512", - "content" : "89d83d9250be2cfc2d1471133461107dd4fdab532439f7827771f7d2ac202a4c9d57aabed5a7f84fa7a5b1474ce67b60ccdfbd08e2fd4980af1cf133ac69a2c1" + "content" : "bfd21f2350bf0bb546a68d3303f28c6a15cee1e630138c169344c3f65fe39a15e61c6ff4e5239f38f2f1f9e488eff4d5565a4a0774263064ab6a30aa9fcaaed3" }, { "alg" : "SHA-384", - "content" : "688680dcea5c8c055cfd461a29c601f0533bf448b9659d0491ee60107c9f8080fb91e2705cc319ab83cdc791f79b916e" + "content" : "0a35ae0744f05973997b0710cc8d1d774867bc1c1b63ef5bf5f554d1b4c4ab42033f7819430e05ac623e7c8630aa7c52" }, { "alg" : "SHA3-384", - "content" : "0afb2f67992e9b3d891729c4f65c1804259180f459056f9e608c29d479eb5661a2eb23b46a240ff08d834c0940068f2b" + "content" : "b016ed02d907b21c90b4a2560aa4c778e8aad1b5ecb0ba62777f668166c6e7b8a0c0deef7d1e63b7a9b1092c64c8a4a6" }, { "alg" : "SHA3-256", - "content" : "58917d6995c9fc52fd102c6e26dad93af8e43ef5b8ee1dee7932c2aa947d261c" + "content" : "875856aafff433840ee9933c01018cd18c0a13b46bd4472853698ef1dff83168" }, { "alg" : "SHA3-512", - "content" : "453c585ccdeb65f90a65d3e9d7aedfc0ef6d68cd3a905f24584802d7029b1d79d7bab4a28b2b0f9d12cc41d2c395b87ddcc8e6568e98aae21fd076ed1c4b7bb7" + "content" : "1587332fb01515a72b7856b1f566070dcd26fef33c5070039c28684215466a9b9d3a4625cf7181443e3c3a67a313a938cf0775f39b96daf43f5edd4772143c23" } ], "licenses" : [ @@ -3201,54 +3045,58 @@ } } ], - "purl" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@9.0.84?type=jar", + "purl" : "pkg:maven/xerces/xercesImpl@2.12.2?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://tomcat.apache.org/" + "url" : "https://xerces.apache.org/xerces2-j/" + }, + { + "type" : "vcs", + "url" : "https://svn.apache.org/repos/asf/xerces/java/" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@9.0.84?type=jar" + "bom-ref" : "pkg:maven/xerces/xercesImpl@2.12.2?type=jar" }, { - "group" : "org.apache.tomcat.embed", - "name" : "tomcat-embed-core", - "version" : "9.0.84", - "description" : "Core Tomcat implementation", + "group" : "xml-apis", + "name" : "xml-apis", + "version" : "1.4.01", + "description" : "xml-commons provides an Apache-hosted set of DOM, SAX, and JAXP interfaces for use in other xml-based projects. Our hope is that we can standardize on both a common version and packaging scheme for these critical XML standards interfaces to make the lives of both our developers and users easier. The External Components portion of xml-commons contains interfaces that are defined by external standards organizations. For DOM, that's the W3C; for SAX it's David Megginson and sax.sourceforge.net; for JAXP it's Sun.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "2a5bc72d7f698bc42784cb7afa20e808" + "content" : "7eaad6fea5925cca6c36ee8b3e02ac9d" }, { "alg" : "SHA-1", - "content" : "d0cd4045defc2ecf7ccfdc901925eed427bcba3e" + "content" : "3789d9fada2d3d458c4ba2de349d48780f381ee3" }, { "alg" : "SHA-256", - "content" : "29daf71c4b5f5ed0c0983a83ebd96ee74df905e406534b4c5412cc92c2aca2b7" + "content" : "a840968176645684bb01aed376e067ab39614885f9eee44abe35a5f20ebe7fad" }, { "alg" : "SHA-512", - "content" : "e28752b186c5eaad6df750719e70bd9ab33f4924f293b622ed4a7198ad15fe5e998b6b7ddee230ce564e7ec0b71871fa5c2362f6c4cb65b2872e3f25ef0840e6" + "content" : "8db0283b6840cd6407957d296b802e3edf90653e2722f8e29f86c1c0b60996c4b43e9e065e6864dab89b2138ddb0174d9b4fdda4a93f94eeb884783db82f3268" }, { "alg" : "SHA-384", - "content" : "0df38c977446ce1bb1b6d17b544f3778b4891d6ef499bb1f53dfe8cca457ec8afdb8c061f17e966574d4fd9859517580" + "content" : "bce0ec0f0f692213a1110197c4a11c333673ae0630481255d12b441a8cba70aecfaf104c3d8d9b500ed2a0a19a2bfcce" }, { "alg" : "SHA3-384", - "content" : "eb18577b10a3e3cdabd0483e4545226f4fa8d8c2c3d8eb88b9782aeee1ae9d9bc03d76d19c6b5e886b668fe795d38975" + "content" : "c1d8154ef6eee57dfe6ae9a1c1a2525e9ec2aab3631911a53c064ea6480c0b3b1ce8dd079db7b3693d7ef81daba28ace" }, { "alg" : "SHA3-256", - "content" : "58006ad9c9fc8e3b18472ad550d72bcd7c9364ecdc586db3f194116694179bb8" + "content" : "09eb76497eac5012ce1000c52f4e597c4941a44b9d960b1ac58a19beb2dd63fc" }, { "alg" : "SHA3-512", - "content" : "bda4e7479e4b6015f78b24ffca33be9d99d0606acff96f4d18d8e713f261835e16cf26cce800657c28a279fcd1c3e8aa6e5050d5463e1850526364306e003e2a" + "content" : "1e4eb902e50b3388da4d161ee49f4d47b61dddd2ad10e6ef6cbb67c4ebc9043e0b65ae59a4a0c8eb03dd28814ce4aedd7e0d4962a0aedc3bdcf7de37cde38f66" } ], "licenses" : [ @@ -3256,56 +3104,81 @@ "license" : { "id" : "Apache-2.0" } + }, + { + "license" : { + "id" : "SAX-PD", + "url" : "http://www.saxproject.org/copying.html" + } + }, + { + "license" : { + "name" : "The W3C License", + "url" : "http://www.w3.org/TR/2004/REC-DOM-Level-3-Core-20040407/java-binding.zip" + } } ], - "purl" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.84?type=jar", + "purl" : "pkg:maven/xml-apis/xml-apis@1.4.01?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://tomcat.apache.org/" + "url" : "http://xml.apache.org/commons/components/external/" + }, + { + "type" : "issue-tracker", + "url" : "http://issues.apache.org/bugzilla/" + }, + { + "type" : "mailing-list", + "url" : "http://mail-archives.apache.org/mod_mbox/xml-commons-dev/" + }, + { + "type" : "vcs", + "url" : "https://svn.apache.org/viewvc/xml/commons/tags/xml-commons-external-1_4_01/" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.84?type=jar" + "bom-ref" : "pkg:maven/xml-apis/xml-apis@1.4.01?type=jar" }, { - "group" : "org.apache.tomcat", - "name" : "tomcat-annotations-api", - "version" : "9.0.84", - "description" : "Annotations Package", + "publisher" : "FasterXML", + "group" : "com.fasterxml.woodstox", + "name" : "woodstox-core", + "version" : "6.4.0", + "description" : "Woodstox is a high-performance XML processor that implements Stax (JSR-173), SAX2 and Stax2 APIs", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "f590e2b4b16de6e9bc4b7f48380a79d3" + "content" : "afcba1114fca8199ef26346dd6011e90" }, { "alg" : "SHA-1", - "content" : "86186a099bb355a174243f812d58aaf113768b91" + "content" : "c47579857bbf12c85499f431d4ecf27d77976b7c" }, { "alg" : "SHA-256", - "content" : "b801c2be650483f7a91a6c50a2a93768c0fddc7ec54d0ca0d5e69bc92ef2758a" + "content" : "d6eb9f2f40049a7a808baf11ffba0737648e62ff52fde9271d808e5d57a27279" }, { "alg" : "SHA-512", - "content" : "bfe97892d8e218adcd01a473ca51d7bc3a59bec953fca3752e19d73519972eb7665cf9fc098a74cafb8cdff8fc773ac32424af7b3e865d6bfdaafaab59cb9fb1" + "content" : "7da4cd51f7082e59b3cb78988cda78bf162e2b02457caf17242cb9cea9b8002ada15d4dfe774ca0355acdea95c88b67c4d06a27a61653cb84c9a46d27b2726c6" }, { "alg" : "SHA-384", - "content" : "7a97a614983641796ef33723f036bfba309c4f6d1fdf860058c795d826ebe311248822a705880de9d48e5a6d456bc471" + "content" : "6e25d32eb4c127f7129ccd912ff882625d3fa43e8eba9bc55013a27a61806d1b865ec809bd21d58d3dbfa3d9e2a3d516" }, { "alg" : "SHA3-384", - "content" : "4af95a177b0bd0b0477b61a15b167592cf5e8ea0973f756d7850a6792e0da215b2ac1995cdec027169f0e78dc6fa5487" + "content" : "d384bf82404b7642340eb1a3f88e2d1e366bf3282534943f98c5f4946656f7e6ea86ba6c7bfeed7c4fda1678afdd282e" }, { "alg" : "SHA3-256", - "content" : "8c4a3599140a0e684eb0f5aac9cea0857687d00d8bb3dc175cc88ae26ffe8337" + "content" : "7d1e5fbd3f4197fcf6f4d097bc742a0b3f02fe9ae36ef4385362afab6cc85bee" }, { "alg" : "SHA3-512", - "content" : "559a0b35852d37bc7115cd09ffb1684c6613eb5fde071e7503c483b46e32be0a7e2bc62d7386a999ac9e8c9d2548fed4c8d420465d0b8125f15fc554bf659a38" + "content" : "6020db3580dac2d5c0b7656a062b982d234952fc3feac5dfbb12f91bc019b6af430123ad46e5b5de28d7cb9562aec582febdbbfae8ce35ebc2ce0b837a335af6" } ], "licenses" : [ @@ -3315,135 +3188,165 @@ } } ], - "purl" : "pkg:maven/org.apache.tomcat/tomcat-annotations-api@9.0.84?type=jar", + "purl" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.4.0?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://tomcat.apache.org/" + "url" : "https://github.com/FasterXML/woodstox" + }, + { + "type" : "distribution-intake", + "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" + }, + { + "type" : "issue-tracker", + "url" : "https://github.com/FasterXML/woodstox/issues" + }, + { + "type" : "vcs", + "url" : "https://github.com/FasterXML/woodstox" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.apache.tomcat/tomcat-annotations-api@9.0.84?type=jar" + "bom-ref" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.4.0?type=jar" }, { - "group" : "org.apache.tomcat.embed", - "name" : "tomcat-embed-el", - "version" : "9.0.84", - "description" : "Core Tomcat implementation", + "publisher" : "SonarSource", + "group" : "org.sonarsource.analyzer-commons", + "name" : "sonar-performance-measure", + "version" : "2.18.0.3393", + "description" : "Logic to capture a hierarchy of performance measures, save it into a file, and merge files", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "3a0cd4945a15ee8d37f4b23cf2216e3d" + "content" : "1854d57f67661c6950374be29145a017" }, { "alg" : "SHA-1", - "content" : "3fc7c06e3f2c23baf8bfd64320376fa701633602" + "content" : "eb02954016253fd34551a4641e3215fdafc239c6" }, { "alg" : "SHA-256", - "content" : "22370f6a152da44c9a7ea15e597f22ef6b057a8d3278f69ff50cc3452473bf97" + "content" : "4a3f60003f00a88695158a522cfbb7119c2c696991f13b7ca391e7c1eaf46d34" }, { "alg" : "SHA-512", - "content" : "3373ff62438698fc3223e7474efca16bdc2a9dc9759e5815ccb8a0e3cc722ba2d581292b60b52eb1d86beb7c705b2640c81d69dfa7162f477d6ed1be8928d748" + "content" : "f3f2cc2211f00a66c33cd81ef996557fda3ee89421b2fc4565c376dadc22dc2a25eb327e5dfa041f3c48b8fa8620b797ec6762fd74d3ddde0184e6598c211d39" }, { "alg" : "SHA-384", - "content" : "7d018a18156839d5c3c92ac091a53710944e00955443f1a0b051b3cb40f0c7fc9a925efc776ab09f1f0a569102cca101" + "content" : "54138af00ebd5d85cb2f776d75d2455de1a058e657dff84d8e19a563d720fa819a1efd4d432a1d3c2dcb2fa31158c184" }, { "alg" : "SHA3-384", - "content" : "4f300a9fd6932daa3ff4db977860f66a7f88157e72e1481f1981d5597a4666daf76a309d5ff10312ba0968b56f0e4bbd" + "content" : "7855e1aba9691493ebd9a5d79ace4cbccdc1f9fd9194a8300f6b71367014e7fdaf04a7aa9db87ed195b7d738552e6080" }, { "alg" : "SHA3-256", - "content" : "ac2d6743eafb0210717527467f014d8fd8ac97a12c5f2aaccf1922b01c4d268d" + "content" : "f65d3d9a6737a6bd62c31d2d463d011512c3aa434d0575d6e54a95dc00bc5c6e" }, { "alg" : "SHA3-512", - "content" : "656900dad4ca2261cdc8ffa7febfbf4edfe87e2cb32a8a34b830f0f3248ae707a473a82f69487a70003c3b2c0e92ed998c082ec22f172c86b8565b62b7df74ad" + "content" : "34d64169af99b65d4ee59cfd414e189af6ea00ae5118aae5976e1ec76752631138c08eae42b96e95f9668123bbe44a17907c7556003e0dfd988723fc50db0d31" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0" + "name" : "GNU LGPL 3", + "url" : "http://www.gnu.org/licenses/lgpl.txt" } } ], - "purl" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.84?type=jar", + "purl" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.18.0.3393?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://tomcat.apache.org/" + "url" : "http://docs.sonarqube.org/display/PLUG/Plugin+Library/sonar-analyzer-commons-parent/sonar-performance-measure" + }, + { + "type" : "build-system", + "url" : "https://cirrus-ci.com/github/SonarSource/" + }, + { + "type" : "issue-tracker", + "url" : "http://jira.sonarsource.com" + }, + { + "type" : "mailing-list", + "url" : "https://community.sonarsource.com" + }, + { + "type" : "vcs", + "url" : "https://github.com/SonarSource/sonar-analyzer-commons/sonar-performance-measure" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.84?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.18.0.3393?type=jar" }, { "publisher" : "SonarSource", - "group" : "org.sonarsource.analyzer-commons", - "name" : "sonar-analyzer-commons", - "version" : "2.8.0.2699", - "description" : "Logic useful for a language plugin", + "group" : "org.sonarsource.python", + "name" : "sonar-python-plugin", + "version" : "5.16.0.29940", + "description" : "Code Analyzer for Python", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "e1a59ec0809b06b3f5e2c8e97a76b218" + "content" : "96af3be952506f19faa9797702af83d2" }, { "alg" : "SHA-1", - "content" : "cada74c92a33d57d5bdb70b8178a9006754e601c" + "content" : "7358996b700859eefb489750874f6b276555ae44" }, { "alg" : "SHA-256", - "content" : "e9e17c3b6e02624cc1981dc7c2100f9ea67b96aec66e6a785e0ed5202febd854" + "content" : "161047717514eb4299847263ccb553df5e5be8fc9ceb081aaf4015fa834c734a" }, { "alg" : "SHA-512", - "content" : "9197a2c16edd4ccbc39a33fe75e4a4175700306d9d1df2f4e146de37728aa8483a3355993bb8e8fb77ef9ff17490427cf55566d81364d82495f3e49c62ee21f2" + "content" : "09689460be8675a15d4f1c2cecb868563c94a54c311f992bdd190aef37300a80760966216f73c12824765d7a7562735799b9c08f0606f465b03c299778110b31" }, { "alg" : "SHA-384", - "content" : "8385239d7eb9d7bc972fbb63ed5d887b2089129844037c957f0cc5bcd34b8a20deea0531022af0832193f020e94ad5fe" + "content" : "bc18a99dabb6a1f04cd2bfdaffd3e1ba70688d16716b8cf40c9a751e94c6312b721b31478d7ea1baf3095da0654e6ae1" }, { "alg" : "SHA3-384", - "content" : "ce192d54341470644acee6f91217ddeb62f28d1ac2da58b0f73fb8ec9e5278463457f74dc4a264349051b6fc3dc25c3a" + "content" : "5d4803f25bb278676d6aa3ec55c6fd4db93fb42d5966fe73f0d7c6ecc2edcd2633154defacccd021b82574399e095c6c" }, { "alg" : "SHA3-256", - "content" : "a521179e465dec4a69e93e393df68d9c6719f393654a1e584bd3ff7a0cd39891" + "content" : "b5898d3547c883a1aeaeb1175ed6bf9b691ae896210df2a0ce22b74295ddc004" }, { "alg" : "SHA3-512", - "content" : "36968ac582180921cb12e613073d261111b81ca042e47624bc07176f6926c6f7a40a11077e51d5e460add84747348b4a962cda95c6b6c1ffe372e032c570ad89" + "content" : "22c2445b64a2d200eb021df6bf93ef083c5487bde5c7923df897941445fd7f77eb9eac76542924195c8fdf17d43a3336a9b91f7c507ce8c36265447d8b77472c" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.8.0.2699?type=jar", + "purl" : "pkg:maven/org.sonarsource.python/sonar-python-plugin@5.16.0.29940?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://docs.sonarqube.org/display/PLUG/Plugin+Library/sonar-analyzer-commons-parent/sonar-analyzer-commons" + "url" : "http://redirect.sonarsource.com/plugins/python.html" }, { "type" : "build-system", - "url" : "https://cirrus-ci.com/github/SonarSource/" + "url" : "https://cirrus-ci.com/github/SonarSource/sonar-python" }, { "type" : "issue-tracker", - "url" : "http://jira.sonarsource.com" + "url" : "https://jira.sonarsource.com/browse/SONARPY" }, { "type" : "mailing-list", @@ -3451,74 +3354,74 @@ }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-analyzer-commons/sonar-analyzer-commons" + "url" : "https://github.com/SonarCommunity/sonar-python" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.8.0.2699?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.python/sonar-python-plugin@5.16.0.29940?type=jar" }, { "publisher" : "SonarSource", - "group" : "org.sonarsource.analyzer-commons", - "name" : "sonar-xml-parsing", - "version" : "2.8.0.2699", - "description" : "Logic useful to read and analyze XML files", + "group" : "org.sonarsource.python", + "name" : "python-frontend", + "version" : "5.16.0.29940", + "description" : "Parent pom of SonarSource public projects", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "eeb2d8b488da7bd7c98cfb49b3d06830" + "content" : "af8fb4754bb34b00450e1886e6e35f24" }, { "alg" : "SHA-1", - "content" : "03e14b69bc7a2abbc0a595851f8f31540b208dd6" + "content" : "3d29bbb908e0740432fd9e29f6f9fef3b61fa8bf" }, { "alg" : "SHA-256", - "content" : "408ec4b66b8fda3fe8a333858aed7cbb3340f570790468f8a789de4cbf2c8c91" + "content" : "2bf0a615cb8804200e9de8c3b407b6a928a16b34349f43c76bf9f6c548e8000c" }, { "alg" : "SHA-512", - "content" : "35be20dfa7f82d0ba024c2614359e4b52ac295a2c416d854103b3a7f9739d04e2eb3bb927064fe9ac11ed9dbe5f91f8a266fd16a2ed40675b50c43836d132829" + "content" : "0b42071f37c0cf8dfc46c3a3ed915bdc1d99b0bc41706200305c7f962f7b14c79e19eb42f99488b874d45267015de3f9762d903d6c03c7fb1c4bd1ac331c45d8" }, { "alg" : "SHA-384", - "content" : "426ea2055c0c9f6642b68a7b2eccbf4d7ee802dd3bfc010564b108a8c5cf54a3a9ce7fd3d07ab4adbbd54fa52bee64b5" + "content" : "5411758030a57ffedc16b7b9f93592107920e01b27b8b6b98c3cb0cec1bbb3eecfc0dfc36ba130b2616507a703938560" }, { "alg" : "SHA3-384", - "content" : "9bfe10431714c647f99ce6b8e4d8eaaa6b80862985380a5ce4da37cdcf95cf324f9008b9dd46e81e8ecaacd19fa8e1c3" + "content" : "d2054bd5b799463c0364aebef1024584f37fc63b122b0d9a137d5d052b152ef3b23ebb64961222adc72f30e49ccdbe3d" }, { "alg" : "SHA3-256", - "content" : "2c47cf7bd11d40d40d1da9406bbd00a578bee08621cf341598d8fad4c4e8f7d9" + "content" : "6eaa8027ba8e0f7c11c2a2da14084630735110429505016fd92d8292c33637f4" }, { "alg" : "SHA3-512", - "content" : "4eb5a2b0f0b527231f0bfb1bae4c798713e615a7c5929c0ac09f49b3d9fa5eb12cee0775842e6b7033d7163803a3737595fdf9f221eeaef69e43875c87b6c3bf" + "content" : "35de0af96a078f4bc7709776d051b3d40c5f965647096114d33cb47c2fda0aacef5453af4475302a074e351c796b30315daa182fc69f780f515ac046a19e9ff0" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.8.0.2699?type=jar", + "purl" : "pkg:maven/org.sonarsource.python/python-frontend@5.16.0.29940?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://docs.sonarqube.org/display/PLUG/Plugin+Library/sonar-analyzer-commons-parent/sonar-xml-parsing" + "url" : "https://docs.sonarsource.com/sonarqube-server/latest/extension-guide/developing-a-plugin/plugin-basics/python/python-frontend/" }, { "type" : "build-system", - "url" : "https://cirrus-ci.com/github/SonarSource/" + "url" : "https://cirrus-ci.com/github/SonarSource/sonar-python" }, { "type" : "issue-tracker", - "url" : "http://jira.sonarsource.com" + "url" : "https://jira.sonarsource.com/browse/SONARPY" }, { "type" : "mailing-list", @@ -3526,111 +3429,117 @@ }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-analyzer-commons/sonar-xml-parsing" + "url" : "https://github.com/SonarSource/sonar-python/python-frontend" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.8.0.2699?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.python/python-frontend@5.16.0.29940?type=jar" }, { - "group" : "xerces", - "name" : "xercesImpl", - "version" : "2.12.2", - "description" : "Xerces2 provides high performance, fully compliant XML parsers in the Apache Xerces family. This new version of Xerces continues to build upon the Xerces Native Interface (XNI), a complete framework for building parser components and configurations that is extremely modular and easy to program. The Apache Xerces2 parser is the reference implementation of XNI but other parser components, configurations, and parsers can be written using the Xerces Native Interface. For complete design and implementation documents, refer to the XNI Manual. Xerces2 provides fully conforming XML Schema 1.0 and 1.1 processors. An experimental implementation of the \"XML Schema Definition Language (XSD): Component Designators (SCD) Candidate Recommendation (January 2010)\" is also provided for evaluation. For more information, refer to the XML Schema page. Xerces2 also provides a complete implementation of the Document Object Model Level 3 Core and Load/Save W3C Recommendations and provides a complete implementation of the XML Inclusions (XInclude) W3C Recommendation. It also provides support for OASIS XML Catalogs v1.1. Xerces2 is able to parse documents written according to the XML 1.1 Recommendation, except that it does not yet provide an option to enable normalization checking as described in section 2.13 of this specification. It also handles namespaces according to the XML Namespaces 1.1 Recommendation, and will correctly serialize XML 1.1 documents if the DOM level 3 load/save APIs are in use.", + "group" : "com.google.protobuf", + "name" : "protobuf-java", + "version" : "4.29.0", + "description" : "Core Protocol Buffers library. Protocol Buffers are a way of encoding structured data in an efficient yet extensible format.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "40e4f2d5aacfbf51a9a1572d77a0e5e9" + "content" : "5de9c1cc9a647278ab03d76ccfb8ff9d" }, { "alg" : "SHA-1", - "content" : "f051f988aa2c9b4d25d05f95742ab0cc3ed789e2" + "content" : "ffea90ab158435d68de76951857ef5f8b0f98365" }, { "alg" : "SHA-256", - "content" : "6fc991829af1708d15aea50c66f0beadcd2cfeb6968e0b2f55c1b0909883fe16" + "content" : "16901851ebe5e89fe88aaad3c26866373695bc2e30627bb8932847e2f5fc2e76" }, { "alg" : "SHA-512", - "content" : "bfd21f2350bf0bb546a68d3303f28c6a15cee1e630138c169344c3f65fe39a15e61c6ff4e5239f38f2f1f9e488eff4d5565a4a0774263064ab6a30aa9fcaaed3" + "content" : "ed9aae4faa56c04dc086af07078db3734f675eb4188bb2be98c94cc59a8e4e77b74195c47d70c7b697bc3b938e106fdc137ffda5358b3029795f28e7d9216d68" }, { "alg" : "SHA-384", - "content" : "0a35ae0744f05973997b0710cc8d1d774867bc1c1b63ef5bf5f554d1b4c4ab42033f7819430e05ac623e7c8630aa7c52" + "content" : "d204ff730ba5eff0eddd9439f05ab89e87194fc6c69d50054da593ab7537495207374840701867856ea1e9aa87ef1e14" }, { "alg" : "SHA3-384", - "content" : "b016ed02d907b21c90b4a2560aa4c778e8aad1b5ecb0ba62777f668166c6e7b8a0c0deef7d1e63b7a9b1092c64c8a4a6" + "content" : "9a3dc4e7ef4e1488b6ee4a653d9f47569bb3f543012ec20fe695d1bba2a7da8e329ffe70d5ef8e43fd9da1721fe3f3c1" }, { "alg" : "SHA3-256", - "content" : "875856aafff433840ee9933c01018cd18c0a13b46bd4472853698ef1dff83168" + "content" : "16fec3a2d08bcc363c69d2a260a78020636d94dd4ed929050d8e8b51d37960f0" }, { "alg" : "SHA3-512", - "content" : "1587332fb01515a72b7856b1f566070dcd26fef33c5070039c28684215466a9b9d3a4625cf7181443e3c3a67a313a938cf0775f39b96daf43f5edd4772143c23" + "content" : "37c5a864aa97fd50a88a5c9b2a9c7eedd646eb4655ec041502e1892efb55b2f22e9f2292dcca120e74755a11f92dc41616e1dc6919d8906fe2c5802e25ed1187" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0" + "id" : "BSD-3-Clause", + "url" : "https://opensource.org/licenses/BSD-3-Clause" } } ], - "purl" : "pkg:maven/xerces/xercesImpl@2.12.2?type=jar", + "purl" : "pkg:maven/com.google.protobuf/protobuf-java@4.29.0?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://xerces.apache.org/xerces2-j/" + "url" : "https://developers.google.com/protocol-buffers/protobuf-java/" + }, + { + "type" : "distribution-intake", + "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "vcs", - "url" : "https://svn.apache.org/repos/asf/xerces/java/" + "url" : "https://github.com/protocolbuffers/protobuf/protobuf-java" } ], "type" : "library", - "bom-ref" : "pkg:maven/xerces/xercesImpl@2.12.2?type=jar" + "bom-ref" : "pkg:maven/com.google.protobuf/protobuf-java@4.29.0?type=jar" }, { - "group" : "xml-apis", - "name" : "xml-apis", - "version" : "1.4.01", - "description" : "xml-commons provides an Apache-hosted set of DOM, SAX, and JAXP interfaces for use in other xml-based projects. Our hope is that we can standardize on both a common version and packaging scheme for these critical XML standards interfaces to make the lives of both our developers and users easier. The External Components portion of xml-commons contains interfaces that are defined by external standards organizations. For DOM, that's the W3C; for SAX it's David Megginson and sax.sourceforge.net; for JAXP it's Sun.", + "publisher" : "FasterXML", + "group" : "com.fasterxml.jackson.core", + "name" : "jackson-databind", + "version" : "2.20.1", + "description" : "General data-binding functionality for Jackson: works on core streaming API", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "7eaad6fea5925cca6c36ee8b3e02ac9d" + "content" : "49d7b7226df5ed4a036e48997a03d066" }, { "alg" : "SHA-1", - "content" : "3789d9fada2d3d458c4ba2de349d48780f381ee3" + "content" : "9586a7fe0e1775de0e54237fa6a2c8455c93ac06" }, { "alg" : "SHA-256", - "content" : "a840968176645684bb01aed376e067ab39614885f9eee44abe35a5f20ebe7fad" + "content" : "34bbeb4526fff4f8565b12106bf85a6afcbae858966d489b54214ac46b2e26e8" }, { "alg" : "SHA-512", - "content" : "8db0283b6840cd6407957d296b802e3edf90653e2722f8e29f86c1c0b60996c4b43e9e065e6864dab89b2138ddb0174d9b4fdda4a93f94eeb884783db82f3268" + "content" : "16906e9c2f1962649eb21de148f362fedf2ce903c7ca0e6d68a01d43dbe8402b70cc537c104f36bc40a2bed6601162e7c21663735582e25bff7e27852be1405d" }, { "alg" : "SHA-384", - "content" : "bce0ec0f0f692213a1110197c4a11c333673ae0630481255d12b441a8cba70aecfaf104c3d8d9b500ed2a0a19a2bfcce" + "content" : "0591935cdfed1d65fa4a2820133ba129384f71921228ffe093f343d3ebf0b699762810d9208641726111015f0e35753b" }, { "alg" : "SHA3-384", - "content" : "c1d8154ef6eee57dfe6ae9a1c1a2525e9ec2aab3631911a53c064ea6480c0b3b1ce8dd079db7b3693d7ef81daba28ace" + "content" : "855ccd449944e7884f8088c8c5b224e6e2f63bcd3123502618b4f5ded025e5978143af8c5d31215276932bc3bb089472" }, { "alg" : "SHA3-256", - "content" : "09eb76497eac5012ce1000c52f4e597c4941a44b9d960b1ac58a19beb2dd63fc" + "content" : "53732171c9f2bdeaa40017a34683a00ac11e8a8c1bcefaed07eb91e629e20376" }, { "alg" : "SHA3-512", - "content" : "1e4eb902e50b3388da4d161ee49f4d47b61dddd2ad10e6ef6cbb67c4ebc9043e0b65ae59a4a0c8eb03dd28814ce4aedd7e0d4962a0aedc3bdcf7de37cde38f66" + "content" : "05017efae94bc3c83131aaaa7911f20e7c367502cd2cd05c6cedabc877b55724bcde2521ba1da15bf1c1c3ccb1a235124b39b2d4860142f2b89d4df197cf5c83" } ], "licenses" : [ @@ -3638,81 +3547,69 @@ "license" : { "id" : "Apache-2.0" } - }, - { - "license" : { - "id" : "SAX-PD", - "url" : "http://www.saxproject.org/copying.html" - } - }, - { - "license" : { - "name" : "The W3C License", - "url" : "http://www.w3.org/TR/2004/REC-DOM-Level-3-Core-20040407/java-binding.zip" - } } ], - "purl" : "pkg:maven/xml-apis/xml-apis@1.4.01?type=jar", + "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://xml.apache.org/commons/components/external/" + "url" : "https://github.com/FasterXML/jackson" }, { - "type" : "issue-tracker", - "url" : "http://issues.apache.org/bugzilla/" + "type" : "distribution-intake", + "url" : "https://central.sonatype.com/api/v1/publisher" }, { - "type" : "mailing-list", - "url" : "http://mail-archives.apache.org/mod_mbox/xml-commons-dev/" + "type" : "issue-tracker", + "url" : "https://github.com/FasterXML/jackson-databind/issues" }, { "type" : "vcs", - "url" : "https://svn.apache.org/viewvc/xml/commons/tags/xml-commons-external-1_4_01/" + "url" : "https://github.com/FasterXML/jackson-databind" } ], "type" : "library", - "bom-ref" : "pkg:maven/xml-apis/xml-apis@1.4.01?type=jar" + "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1?type=jar" }, { "publisher" : "FasterXML", - "group" : "com.fasterxml.woodstox", - "name" : "woodstox-core", - "version" : "6.4.0", - "description" : "Woodstox is a high-performance XML processor that implements Stax (JSR-173), SAX2 and Stax2 APIs", + "group" : "com.fasterxml.jackson.core", + "name" : "jackson-annotations", + "version" : "2.20", + "description" : "Core annotations used for value types, used by Jackson data binding package.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "afcba1114fca8199ef26346dd6011e90" + "content" : "b901def3c20752817f27130e4b8d6640" }, { "alg" : "SHA-1", - "content" : "c47579857bbf12c85499f431d4ecf27d77976b7c" + "content" : "6a5e7291ea3f2b590a7ce400adb7b3aea4d7e12c" }, { "alg" : "SHA-256", - "content" : "d6eb9f2f40049a7a808baf11ffba0737648e62ff52fde9271d808e5d57a27279" + "content" : "959a2ffb2d591436f51f183c6a521fc89347912f711bf0cae008cdf045d95319" }, { "alg" : "SHA-512", - "content" : "7da4cd51f7082e59b3cb78988cda78bf162e2b02457caf17242cb9cea9b8002ada15d4dfe774ca0355acdea95c88b67c4d06a27a61653cb84c9a46d27b2726c6" + "content" : "8926d89bfe7f427c7793f6af619249540f23f82eae055dd03d4cb163ff603a43dd6a3ebe43528d00789aed3df0dd2f10e08552fdec53e2691849b9769f57f0c9" }, { "alg" : "SHA-384", - "content" : "6e25d32eb4c127f7129ccd912ff882625d3fa43e8eba9bc55013a27a61806d1b865ec809bd21d58d3dbfa3d9e2a3d516" + "content" : "40ee4c1438a5a190624dff9deca83377f7e60690b4535359b2a79924f736bff7c8d077e5b01c6c8972735dc152f2ccf4" }, { "alg" : "SHA3-384", - "content" : "d384bf82404b7642340eb1a3f88e2d1e366bf3282534943f98c5f4946656f7e6ea86ba6c7bfeed7c4fda1678afdd282e" + "content" : "0fc0f697d03692b63c2b11fcabac51c630278ed6df15420975263ea4ad19418b3b71b7889497ed20a150035f9bcba79d" }, { "alg" : "SHA3-256", - "content" : "7d1e5fbd3f4197fcf6f4d097bc742a0b3f02fe9ae36ef4385362afab6cc85bee" + "content" : "6bf49e384735969af020f758b255ceed26af92d4cf456f6e7b83e8de53289f93" }, { "alg" : "SHA3-512", - "content" : "6020db3580dac2d5c0b7656a062b982d234952fc3feac5dfbb12f91bc019b6af430123ad46e5b5de28d7cb9562aec582febdbbfae8ce35ebc2ce0b837a335af6" + "content" : "3372f6c456a7f6a33ebc3ecc65daaf36288be2a14b1f2cb9fcd7387c07acab1c69ae803a366e5d12adf4934970ffd2e34017917c5f16a6d563bc94810f228ab3" } ], "licenses" : [ @@ -3722,157 +3619,152 @@ } } ], - "purl" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.4.0?type=jar", + "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.20?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://github.com/FasterXML/woodstox" + "url" : "https://github.com/FasterXML/jackson" }, { "type" : "distribution-intake", - "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" + "url" : "https://central.sonatype.com/api/v1/publisher" }, { "type" : "issue-tracker", - "url" : "https://github.com/FasterXML/woodstox/issues" + "url" : "https://github.com/FasterXML/jackson-annotations/issues" }, { "type" : "vcs", - "url" : "https://github.com/FasterXML/woodstox" + "url" : "https://github.com/FasterXML/jackson-annotations" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.4.0?type=jar" + "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.20?type=jar" }, - { - "publisher" : "SonarSource", - "group" : "org.sonarsource.analyzer-commons", - "name" : "sonar-performance-measure", - "version" : "2.8.0.2699", - "description" : "Logic to capture a hierarchy of performance measures, save it into a file, and merge files", + { + "publisher" : "FasterXML", + "group" : "com.fasterxml.jackson.core", + "name" : "jackson-core", + "version" : "2.20.1", + "description" : "Core Jackson processing abstractions (aka Streaming API), implementation for JSON", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "bfdcb3a88a97fe66b288f61921bab1ae" + "content" : "889b2c417b61c9f4f460b06957147234" }, { "alg" : "SHA-1", - "content" : "0ecfd7e49341de39ad53f9608c31f30b6a10c441" + "content" : "5734323adfece72111769b0ae38a6cf803e3d178" }, { "alg" : "SHA-256", - "content" : "ebba386ff08f8bbe6e9a37a0666e91c8c8561af5e8b24de484a520e828ec64e7" + "content" : "ffab4d957daa2796cf24cb66d0b78a7090f1bcbe17c3a4578f09affaaf137089" }, { "alg" : "SHA-512", - "content" : "02d37166706b1a93248cfb82731318304950162814292a295f0252d0f5d7ec734cedaf4a9f960d30c85dc8bac0ee59d75089f5ae10c88212b98e4de7ef7c4d8b" + "content" : "0463e1c2e1d8e8cfa4954dfce491583f0ec9ec1de6e6f342d1e5f0c63dcfb959673552a279ec4e6b6cc69e6ac2de6d42dd512149ceb76620b5d780db7325e6a7" }, { "alg" : "SHA-384", - "content" : "84f70dfb7e80d7a6c1dad5ac31ce743f0da036e683881acf172d35f7d21ccbb3296165b88fcd4b2167cdc1234956bcdb" + "content" : "a279b2d57d019a05f65762ce670ce23e02466b11276d8c0687f3bb5ed40a8a1854bfe6dd2dc157d0f5695186f7d9a65a" }, { "alg" : "SHA3-384", - "content" : "e89f15bf1b1ff83ce691bd755daab7a6ac6cfb416ccdc12ebd1a7f427da2224c4b8371062ebaa3fa63ba878473e7a8d2" + "content" : "06b9f33e030a99fa95d171118ab668bee42e32b35b85e05750f8514128dbadc94026afde16dbadc0ff786027b09712a4" }, { "alg" : "SHA3-256", - "content" : "c08c9694411c5561032ace350fb1bb2201f3bfd0aa217e48047a399eb26e26c2" + "content" : "3e83a1a349d8ba3a4e76ee983f04b259a85263dda5090f55aae5535109c4b6c0" }, { "alg" : "SHA3-512", - "content" : "a47781adf6a0dd209579e9c09ddb1f53c88bf89dadd4a7829655599eaea3399f9a71cf7e3b9c831c0f7e86904d5de2e97a6c3df8c0c0126ce8f4f4ad73cda1a3" + "content" : "87b3a61a71a625adfc6b9b402079c26b223e19535ca5af07e4130932d479f9c22e90696911050d8ab8a09a6209651fe2f25f54d7d9a1493b6dab6f8acb76203d" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "id" : "Apache-2.0" } } ], - "purl" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.8.0.2699?type=jar", + "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.1?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://docs.sonarqube.org/display/PLUG/Plugin+Library/sonar-analyzer-commons-parent/sonar-performance-measure" + "url" : "https://github.com/FasterXML/jackson-core" }, { - "type" : "build-system", - "url" : "https://cirrus-ci.com/github/SonarSource/" + "type" : "distribution-intake", + "url" : "https://central.sonatype.com/api/v1/publisher" }, { "type" : "issue-tracker", - "url" : "http://jira.sonarsource.com" - }, - { - "type" : "mailing-list", - "url" : "https://community.sonarsource.com" + "url" : "https://github.com/FasterXML/jackson-core/issues" }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-analyzer-commons/sonar-performance-measure" + "url" : "https://github.com/FasterXML/jackson-core" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.8.0.2699?type=jar" + "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.1?type=jar" }, { - "publisher" : "SonarSource and Waleri Enns", + "publisher" : "SonarSource", "group" : "org.sonarsource.python", - "name" : "sonar-python-plugin", - "version" : "4.17.0.14845", - "description" : "Code Analyzer for Python", + "name" : "python-checks", + "version" : "5.16.0.29940", + "description" : "Parent pom of SonarSource public projects", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "a1f37ca54b6407c29e14d6a84ef527be" + "content" : "c6a6f14dd43b2ca777639d045d371686" }, { "alg" : "SHA-1", - "content" : "d2a19e1624695b1a8bf7691c028be1c1d795c3b4" + "content" : "7420c64bb23358297f8fb465d194b0abc81a268d" }, { "alg" : "SHA-256", - "content" : "4745222f0e3ff47ae4bef17fe6e6c8f50234c69d4992e81628c52217f3443564" + "content" : "8d71a04ae268809a329169124e821538409f323c25738a787f1004691830947a" }, { "alg" : "SHA-512", - "content" : "7fb3dc79348493ea5a16c8a436db16665126137f0dfcc146fd75dac317a686c26f81499e5a370341e87374fe28006670f48d7424ab2c7988e8e51a842872fc4a" + "content" : "49cc6c1c1f6d4ab7691e52ee582edc2dc4320706f0cba8b0264232bb8c648e0c1411fc349480d4126909275bc722a26ce7dc1d0442b0fe800d68e43dd502e8e0" }, { "alg" : "SHA-384", - "content" : "55bff9b2c2d2fede0efcaa6c64835bb2e42e94d4ba6196168d4d5b2f7fbd65cd8c03ae85f39937d27f873edcc359d565" + "content" : "0ec195c2cd805ba066715992213efab8234ad4fea211d38c11621b764ce81a82ec4eb13f372c3a6ae77663319de497ca" }, { "alg" : "SHA3-384", - "content" : "f38a0bc3cfd4b5d024c210e71fc0b63f41cc4bbac4bc501905fad95ceda64f81e39c3a53ca50b5c1e25250e802ce8a92" + "content" : "d59fe66bc7a1621385b1a8e6d9e7e9aba25f5bcd1bf7460aaeea718a9fdefa1f01d65bc6bbf08c4ea20d6ff5533321d5" }, { "alg" : "SHA3-256", - "content" : "2a9a49aac638a35dbc0ec3d31a79cb92a87bb148ce46ca7072bbb4d732a0cda6" + "content" : "6b6d15ca4b8e534cfb0a5b3a9dc4ea328d07647a6a5029cc5bc36cc0e33f4ae7" }, { "alg" : "SHA3-512", - "content" : "5861b8fa999a2e4117429bf16c4ee05f765050a41ca59fd6beb2499ac24020a0693f366b6807bce569cf789be4ef075ab320aa02580712ad32d0b10a0b1b34d4" + "content" : "258f4367d5303ee344945915f54637c52cdfd441d3ec1a642172dd417815e38993f14b35154b0d9c7d3f49dfad666e9cb2ca26a9993f52815180b4bb6bdf8dce" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.sonarsource.python/sonar-python-plugin@4.17.0.14845?type=jar", + "purl" : "pkg:maven/org.sonarsource.python/python-checks@5.16.0.29940?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://redirect.sonarsource.com/plugins/python.html" + "url" : "https://docs.sonarsource.com/sonarqube-server/latest/extension-guide/developing-a-plugin/plugin-basics/python/python-checks/" }, { "type" : "build-system", @@ -3888,66 +3780,66 @@ }, { "type" : "vcs", - "url" : "https://github.com/SonarCommunity/sonar-python" + "url" : "https://github.com/SonarSource/sonar-python/python-checks" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.python/sonar-python-plugin@4.17.0.14845?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.python/python-checks@5.16.0.29940?type=jar" }, { - "publisher" : "SonarSource and Waleri Enns", + "publisher" : "SonarSource", "group" : "org.sonarsource.python", - "name" : "python-frontend", - "version" : "4.17.0.14845", + "name" : "python-commons", + "version" : "5.16.0.29940", "description" : "Parent pom of SonarSource public projects", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "c55cb48cedabf79f2877ebb9d88f6b58" + "content" : "9d94ffb59a75cf874e054eb124bc1815" }, { "alg" : "SHA-1", - "content" : "4ff8dfa5ea7d5ad5847562d95396b919308caea3" + "content" : "0c4756f9dd9cc5caf3acc856171694e2fa033bcc" }, { "alg" : "SHA-256", - "content" : "437b54530740f33ae5e46bdf8348d1440684f7d1cb318a7ee058689bd9b97c76" + "content" : "5fb75ed5d0f7767f3d5877e1fc44a2cb4498b83c482e1e4cefd5c878f118225e" }, { "alg" : "SHA-512", - "content" : "4928573b4dde5237b3056a25d01fdcaa0d8477f66517d0939d332ff8ba434b6a03d884095701f4b571af131b3afc6b57feee148d69d86b8e62a3a4d39d2d1001" + "content" : "d8aa8345c5a55aa6a9cbcb261277e0f36e4756ea4a4d9dc99410053781a6305f9c98e1d0c2f0253e9e6140c40f6f9f19da26e7e85913407b42b20808aebfe9f0" }, { "alg" : "SHA-384", - "content" : "859f11ab3b6590bc07f6a082ef8d87775939341e064abd4c840ad326640c71b84e99a8ae281f0bece8bd5b8196db1c0d" + "content" : "ee39919d1c32d29c16e41ef2259b5b71f5670244c9c9b1224972eb4d38c90e963dedb6108ce8c0243e322086e585a3da" }, { "alg" : "SHA3-384", - "content" : "7dc1a501021011058c6e46cf0e069103aca9687de27aea29c42196af8d74c09ed668ec77284abafc12d635f4e0c9154e" + "content" : "ddc8bf3b9b5d30bb0916c90f676061729666587f674827a29dcb21a08fe4d59e42f5ce818c5730e2aa21f1befa74c130" }, { "alg" : "SHA3-256", - "content" : "84a8def8e68682978bda393edba28e6caa7d4c333fffce5c09a24e54a4104d20" + "content" : "da0ff73c07625578b2d3d55fcc5cd16406762ad670a77c46e7128f6c4e90ec3b" }, { "alg" : "SHA3-512", - "content" : "b44fdef1e3482a1f65d0d5345c69fb78ed32cee27f96abab033ae1e3e26923efd69e8b213ae7c9c367c0e9a87df3785154ecc58961a5261513dc1fb3e260d50d" + "content" : "624e8aaaee39fcad526d4e2699174f8aa9804fc1cb08418dd742374a91fdc3fd474173f59e64508a74029080e9e56d9c6c32e311b71533eba3eead882c4a736f" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" } } ], - "purl" : "pkg:maven/org.sonarsource.python/python-frontend@4.17.0.14845?type=jar", + "purl" : "pkg:maven/org.sonarsource.python/python-commons@5.16.0.29940?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://docs.sonarqube.org/display/PLUG/Plugin+Library/python/python-frontend" + "url" : "https://docs.sonarsource.com/sonarqube-server/latest/extension-guide/developing-a-plugin/plugin-basics/python/python-commons/" }, { "type" : "build-system", @@ -3963,210 +3855,210 @@ }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-python/python-frontend" + "url" : "https://github.com/SonarSource/sonar-python/python-commons" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.python/python-frontend@4.17.0.14845?type=jar" + "bom-ref" : "pkg:maven/org.sonarsource.python/python-commons@5.16.0.29940?type=jar" }, { - "group" : "com.google.protobuf", - "name" : "protobuf-java", - "version" : "3.25.1", - "description" : "Core Protocol Buffers library. Protocol Buffers are a way of encoding structured data in an efficient yet extensible format.", + "publisher" : "FasterXML", + "group" : "com.fasterxml.jackson.dataformat", + "name" : "jackson-dataformat-toml", + "version" : "2.20.1", + "description" : "Support for reading and writing TOML-encoded data via Jackson abstractions.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "7dc81d3c2187ce5627d134a37df88cc0" + "content" : "f3d12c27f5c0744054e8716f3ee4b3d2" }, { "alg" : "SHA-1", - "content" : "2933a5c3f022456d8842323fe0d7fb2d25a7e3c7" + "content" : "1f4f7249289053551eac7bc8ac6e646576d03e1a" }, { "alg" : "SHA-256", - "content" : "48a8e58a1a8f82eff141a7a388d38dfe77d7a48d5e57c9066ee37f19147e20df" + "content" : "3936e3fb83edd2754bb317d17a63cded43b5fac4fb82eabb4aaa502bb52f9835" }, { "alg" : "SHA-512", - "content" : "d4adb935097c4fee13838ea7c166b41a9c34977e436d2fa5e5e92aac1a95462846463895ad994858a442079627696ca14618ff97a0039abd3fcb8671d7961d3a" + "content" : "cd31529a28ff83585d8d5944943c528d4d26e0f547c5ed804c90a8c642b0cd34553d2f4b7878903312a06d4ad86351aa6591294dba4f61b0bb03da317aeef870" }, { "alg" : "SHA-384", - "content" : "2fc41e52f529bcbbe4d8938d262153ee7e7a098d51fc84a2720bade27aff0247af47629c3caa630b706001d769714d1c" + "content" : "e2f0cbd883ee0745e6c27d0cf83c1e48869f89cb444c099e553f25105d7800949b1db37fc5db5055e321fdce8b13ebde" }, { "alg" : "SHA3-384", - "content" : "9ff49c91b6ca5e5ebc8005b6179d171f3bb549b9ef667c694ea6cebe842bccbea1bedb2bab69d97e89270900915f125b" + "content" : "fd0c36a837dd0b756c3622606b1490218cba364f30d148bac78dfee7dbb1117a9f1504a2e0cac8d83cf6cdb17f0ecf7b" }, { "alg" : "SHA3-256", - "content" : "e3794da30f03c61b916aeb9aa2af625792dc7f236bf2bd16cbfffbf3ef186d59" + "content" : "58d572441da65e6c63de352d608a144b280bd3754a06128d1da840494c70ce6b" }, { "alg" : "SHA3-512", - "content" : "1d3bfb11f6cae1912bd5cd04aef53ae725d705e598fafaa185903d2c534ca2f88ad919321ec4bcdca36c9b1515097c5d47aa6868f5bd3b93732337bd564b3bb7" + "content" : "bdbc867b3d2a993b277d19c230f84dd52a8db5f6638f9a90f6d613b9eb7b2f49e3404dc78dba4877fdad3ed5bd255f27be808ec287898c833ee2347ee44a94f4" } ], "licenses" : [ { "license" : { - "id" : "BSD-3-Clause", - "url" : "https://opensource.org/licenses/BSD-3-Clause" + "id" : "Apache-2.0" } } ], - "purl" : "pkg:maven/com.google.protobuf/protobuf-java@3.25.1?type=jar", + "purl" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-toml@2.20.1?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "https://developers.google.com/protocol-buffers/protobuf-java/" + "url" : "https://github.com/FasterXML/jackson-dataformats-text" }, { "type" : "distribution-intake", - "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" + "url" : "https://central.sonatype.com/api/v1/publisher" + }, + { + "type" : "issue-tracker", + "url" : "https://github.com/FasterXML/jackson-dataformats-text/issues" }, { "type" : "vcs", - "url" : "https://github.com/protocolbuffers/protobuf/protobuf-java" + "url" : "https://github.com/FasterXML/jackson-dataformats-text/jackson-dataformat-toml" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.google.protobuf/protobuf-java@3.25.1?type=jar" + "bom-ref" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-toml@2.20.1?type=jar" }, { - "publisher" : "SonarSource and Waleri Enns", - "group" : "org.sonarsource.python", - "name" : "python-checks", - "version" : "4.17.0.14845", - "description" : "Parent pom of SonarSource public projects", + "publisher" : "FasterXML", + "group" : "com.fasterxml.jackson.datatype", + "name" : "jackson-datatype-jdk8", + "version" : "2.20.1", + "description" : "Add-on module for Jackson (https://github.com/FasterXML/jackson) to support JDK 8 data types.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "077f9306a20f8a6eca092f54a53a26e3" + "content" : "9360afe5a78d29ce5510f670b3286e77" }, { "alg" : "SHA-1", - "content" : "ef43f45c57346b910ac422d7aff2ab4b6fe25894" + "content" : "6a8bbc260ba834f67220117d9f08510d69c4a3f0" }, { "alg" : "SHA-256", - "content" : "7d6e1743538dbfa7310bc54fbb7e511a6fd8633549018d7e2b4ba67019a3123e" + "content" : "6821cdd695e95c4e6853ec855a7432c71f2f4be318b3ca190fbbf8a2e5f981f2" }, { "alg" : "SHA-512", - "content" : "f628f82e470f9af8e0da159464ef41996b5edbbab7ead94db853afc54992d8f155994becbb9acdfe4af46a41fbf5e3ae01ba6b17078d1e20861da5e4eedccafc" + "content" : "9aceae6ea4ac56a038982fc45e91942cc15d68b7e07e044c1e75a71760b2eb02e23a344f36966093be670a2d1f656146492f11148da06a4044b4a5d78e523beb" }, { "alg" : "SHA-384", - "content" : "43302f43c32c5b35c4f7b85e901c457ad7ce7c1d0cc8d891dceb828018d0fa06c09fd7b6a34764f187b0deb8f002db96" + "content" : "c55990a25083046bd3881b656d5fa351e5d2115ce861427cc8bdc64acbf85f9a3ea739f3510eedfc0372f226ed7ebd2a" }, { "alg" : "SHA3-384", - "content" : "2c847248451a6f0874fa6d91dedd203c7492db05161c15235d709e9e9bc6d8ff5900b7c60e0aeea74fb7566cb1a3db3e" + "content" : "9556b354a7fdf5324aa22d6a00b308508bfb55555c2a31ca159c2b9f35f8a3d4e904a7eb15388f6532bb464fcc642db5" }, { "alg" : "SHA3-256", - "content" : "32f3d74c14e3918b8af6c98cc32304cc5d0b835348cd15734033307e4e871d2f" + "content" : "b4018fdef370f16380205cf366a9b84f4721b5ff0a800e72e0a1a23f4a58848a" }, { "alg" : "SHA3-512", - "content" : "2429a23270a66433e76eade81bb8b8acd3d91b55a587c6230ecc1282e71b2fcd61d9867d100fe04b74d387516a7c0df4124d8aa82f300c07a82dba20b4c01920" + "content" : "9f9db93cecb859df97455ddfa61136406700ae786715a3754e0ac9f9993deb9df62c44e08233dcf463e792fcbba9a25e7472e34dba5970d9df7eecf959c71875" } ], "licenses" : [ { "license" : { - "name" : "GNU LGPL 3", - "url" : "http://www.gnu.org/licenses/lgpl.txt" + "id" : "Apache-2.0" } } ], - "purl" : "pkg:maven/org.sonarsource.python/python-checks@4.17.0.14845?type=jar", + "purl" : "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.20.1?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://docs.sonarqube.org/display/PLUG/Plugin+Library/python/python-checks" + "url" : "https://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jdk8" }, { - "type" : "build-system", - "url" : "https://cirrus-ci.com/github/SonarSource/sonar-python" + "type" : "distribution-intake", + "url" : "https://central.sonatype.com/api/v1/publisher" }, { "type" : "issue-tracker", - "url" : "https://jira.sonarsource.com/browse/SONARPY" - }, - { - "type" : "mailing-list", - "url" : "https://community.sonarsource.com" + "url" : "https://github.com/FasterXML/jackson-modules-java8/issues" }, { "type" : "vcs", - "url" : "https://github.com/SonarSource/sonar-python/python-checks" + "url" : "http://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jdk8" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.sonarsource.python/python-checks@4.17.0.14845?type=jar" + "bom-ref" : "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.20.1?type=jar" }, { "publisher" : "The Apache Software Foundation", - "group" : "commons-lang", - "name" : "commons-lang", - "version" : "2.6", - "description" : "Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.", + "group" : "org.apache.commons", + "name" : "commons-text", + "version" : "1.14.0", + "description" : "Apache Commons Text is a set of utility functions and reusable components for processing and manipulating text in a Java environment.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "4d5c1693079575b362edf41500630bbd" + "content" : "54960a12a82d52df3d5548d6934d87b2" }, { "alg" : "SHA-1", - "content" : "0ce1edb914c94ebc388f086c6827e8bdeec71ac2" + "content" : "adcb0d4c67eabc79682604b47eb852aaff21138a" }, { "alg" : "SHA-256", - "content" : "50f11b09f877c294d56f24463f47d28f929cf5044f648661c0f0cfbae9a2f49c" + "content" : "121fce2282910c8f0c3ba793a5436b31beb710423cbe2d574a3fb7a73c508e92" }, { "alg" : "SHA-512", - "content" : "4a5a3dbe4941c645e2cca068cca5c1882cfe988b02e7cd981d1e51784900767d1deab0e0e0566f559c9fcabb4a180e436d5bb948902d4f4106f37360466afb42" + "content" : "4975879372241025bd0a47fe540ed7d0cd3e5eba474b12af67a8c6016be0fbb4f4a3a4a0064f4d2b6aebce67d88ee814da345a5ba3a6ee4f6293b3b4e7bbd065" }, { "alg" : "SHA-384", - "content" : "9725bc421adc1dbcd6f937eca0f3075d186a2b353ece4cef66b0fe81bb8d3f7d7641c43e86d657ef526c719f0c2a8c90" + "content" : "a038f1a8b58bb7ec17ba55238d3e40f5d9386dfb17870630a728b22741a9592819374e9abbbc6402a439eea4db5b739a" }, { "alg" : "SHA3-384", - "content" : "4bc4eaaf2580ded6d552b96ae5261c936de95f69a1d137c47279c51bf2aa1406ae44f69ccc94486267b8441e53c4bd74" + "content" : "5325922bb72aa73d2d51cb3fb5592fc77097614fd3ab3ac77e3acdc0fe1dc8c18893cdd9a05768bb725fa40dd8c14527" }, { "alg" : "SHA3-256", - "content" : "b68d49ef037d428ea0c3e67a7a20f3d68a134bef30a1639ec08d28886b9f5629" + "content" : "31008266592ec8503bcc7f6b4e7125b0e377f57f3a697cdcb02ee7f20f84ddf1" }, { "alg" : "SHA3-512", - "content" : "2e9ffc0608827cffc0b48b7a0f35d371c66586c99fea2910f7c2a237c7c57d9ae4d65de7c8e018362c2e4f963c2f70a9196cebf35457f1dd0cea6c65c256f673" + "content" : "385249425d8c6ab181039195a03c6337f393a1e1419527e9f072d695367bc0bd6546e752d1912df557bd8788329f7609aa1c63ce42eb135e2d27b6141ce9280f" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0" + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], - "purl" : "pkg:maven/commons-lang/commons-lang@2.6?type=jar", + "purl" : "pkg:maven/org.apache.commons/commons-text@1.14.0?type=jar", "externalReferences" : [ { "type" : "website", - "url" : "http://commons.apache.org/lang/" + "url" : "https://commons.apache.org/proper/commons-text" }, { "type" : "build-system", - "url" : "http://vmbuild.apache.org/continuum/" + "url" : "https://github.com/apache/commons-text/actions" }, { "type" : "distribution-intake", @@ -4174,19 +4066,19 @@ }, { "type" : "issue-tracker", - "url" : "http://issues.apache.org/jira/browse/LANG" + "url" : "https://issues.apache.org/jira/browse/TEXT" }, { "type" : "mailing-list", - "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/" + "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/" }, { "type" : "vcs", - "url" : "http://svn.apache.org/viewvc/commons/proper/lang/branches/LANG_2_X" + "url" : "https://gitbox.apache.org/repos/asf?p=commons-text.git" } ], "type" : "library", - "bom-ref" : "pkg:maven/commons-lang/commons-lang@2.6?type=jar" + "bom-ref" : "pkg:maven/org.apache.commons/commons-text@1.14.0?type=jar" }, { "publisher" : "Codehaus", @@ -4385,55 +4277,119 @@ "type" : "library", "bom-ref" : "pkg:maven/org.codehaus.woodstox/stax2-api@3.1.4?type=jar" }, + { + "publisher" : "SonarSource", + "group" : "org.sonarsource.go", + "name" : "sonar-go-plugin", + "version" : "1.32.0.5128", + "description" : "Code Analyzer for Go", + "scope" : "required", + "hashes" : [ + { + "alg" : "MD5", + "content" : "ea2de97a8b1020865b993afe78aff72f" + }, + { + "alg" : "SHA-1", + "content" : "daa3ce9acfba33b2dba823c64d72bf3a0fa2b25d" + }, + { + "alg" : "SHA-256", + "content" : "7ad9dd5e478be53d58ad12d060f0e4aaa5e5eb9f5fcb28411c8083da2d5e0b19" + }, + { + "alg" : "SHA-512", + "content" : "3176550be29c19e7fb8b90b6993b29f3b8b4b51ddfa4509bab6de91edc4d7b40e3384dc48df7731262cb671379d2c4163eef78565389a391a43d450dcba56996" + }, + { + "alg" : "SHA-384", + "content" : "b1e7333047001ad10c6058a5ede6bc27651bae3335c0faadc1a6bda3ba1b66b90f45aec62389eaa9ec41eba836dc0d52" + }, + { + "alg" : "SHA3-384", + "content" : "18184263d523ab59b12019479a129e608f201e2c096745e869d72e029c78d41409d64934307b1f1a343ab0e1475978f3" + }, + { + "alg" : "SHA3-256", + "content" : "3fddc018fee60147c78382440a963bf6812bf496bb1d25090b50475e185a0844" + }, + { + "alg" : "SHA3-512", + "content" : "c1fc155244473f90fcc327f33055b06cb2fb35a203421b832f627d12150d851640a407a84dd47498b372ad0337bb1881ffa8aeab9fec85cb5e04b924989c5db5" + } + ], + "licenses" : [ + { + "license" : { + "name" : "SSALv1", + "url" : "https://sonarsource.com/license/ssal/" + } + } + ], + "purl" : "pkg:maven/org.sonarsource.go/sonar-go-plugin@1.32.0.5128?type=jar", + "externalReferences" : [ + { + "type" : "website", + "url" : "http://www.sonarqube.org/" + }, + { + "type" : "vcs", + "url" : "https://github.com/SonarSource/sonar-go" + } + ], + "type" : "library", + "bom-ref" : "pkg:maven/org.sonarsource.go/sonar-go-plugin@1.32.0.5128?type=jar" + }, { "publisher" : "The Apache Software Foundation", "group" : "commons-codec", "name" : "commons-codec", - "version" : "1.15", - "description" : "The Apache Commons Codec package contains simple encoder and decoders for various formats such as Base64 and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.", + "version" : "1.19.0", + "description" : "The Apache Commons Codec component contains encoders and decoders for formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "303baf002ce6d382198090aedd9d79a2" + "content" : "e46fa78c69544eb6239c4e8447e72544" }, { "alg" : "SHA-1", - "content" : "49d94806b6e3dc933dacbd8acb0fdbab8ebd1e5d" + "content" : "8c0dbe3ae883fceda9b50a6c76e745e548073388" }, { "alg" : "SHA-256", - "content" : "b3e9f6d63a790109bf0d056611fbed1cf69055826defeb9894a71369d246ed63" + "content" : "5c3881e4f556855e9c532927ee0c9dfde94cc66760d5805c031a59887070af5f" }, { "alg" : "SHA-512", - "content" : "da30a716770795fce390e4dd340a8b728f220c6572383ffef55bd5839655d5611fcc06128b2144f6cdcb36f53072a12ec80b04afee787665e7ad0b6e888a6787" + "content" : "d98a7a1cfcc08aa9cce4f7778e3f37ecb99da7b1da01944e5fa8faf06fbf9f969f2efb0b416832f419d53085250f711c071f1dac9fa0968483c37034198367fb" }, { "alg" : "SHA-384", - "content" : "05d0506283716472175d44c2a4766523397bf8a007c18848f9c9a61718cc8aa437f9cb4b91771037ab29a960860b62a0" + "content" : "f0edec3cd84b2320e6930380d3fe13335d33f041470d27fb93789db0c696ec01dda21b471f0015bf70bffffcbfdb67c0" }, { "alg" : "SHA3-384", - "content" : "12fad4ef78274b06f97b1243cea6f970088abde082d2de9377d915a34b44f7d7d67807c03e59c849b69f1544e2a9a1be" + "content" : "ce771ef9f0df326a34ab37e70f710801bb18d545aca0ee492db62770db323ab8a0b5082123ca4826f3d3182748537cfc" }, { "alg" : "SHA3-256", - "content" : "87be248f33f241121f54aad61a9a460a79eabefbf1b5b0dd22aeb95b581f727e" + "content" : "8296db95bb2fac86a0eb68e61e9730084f4272ad6a4a4327a5259c631840e98e" }, { "alg" : "SHA3-512", - "content" : "8c992c9c569ebaa0bf956a4c5b34fbf5e1ed1c212c2dd896fa216183ee0bcd341e96698af4b9cec7e8880762faa081a3d3a27f51349aa457cb8e373e4f57c788" + "content" : "05da2f8674a257c5d8a1137cadbda71d2635f22237450bf2cbc980380a56905247bea38049c8cd80e60077be2be73b1eae6b466c228e4277763a54979cf856fb" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0" + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], - "purl" : "pkg:maven/commons-codec/commons-codec@1.15?type=jar", + "purl" : "pkg:maven/commons-codec/commons-codec@1.19.0?type=jar", "externalReferences" : [ { "type" : "website", @@ -4441,7 +4397,7 @@ }, { "type" : "build-system", - "url" : "https://builds.apache.org/" + "url" : "https://github.com/apache/commons-cli/actions" }, { "type" : "distribution-intake", @@ -4461,57 +4417,58 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/commons-codec/commons-codec@1.15?type=jar" + "bom-ref" : "pkg:maven/commons-codec/commons-codec@1.19.0?type=jar" }, { "publisher" : "The Apache Software Foundation", "group" : "commons-io", "name" : "commons-io", - "version" : "2.11.0", + "version" : "2.20.0", "description" : "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "3b4b7ccfaeceeac240b804839ee1a1ca" + "content" : "94e7e6b9b5fe82388687b584d3571081" }, { "alg" : "SHA-1", - "content" : "a2503f302b11ebde7ebc3df41daebe0e4eea3689" + "content" : "36f3474daec2849c149e877614e7f979b2082cd2" }, { "alg" : "SHA-256", - "content" : "961b2f6d87dbacc5d54abf45ab7a6e2495f89b75598962d8c723cea9bc210908" + "content" : "df90bba0fe3cb586b7f164e78fe8f8f4da3f2dd5c27fa645f888100ccc25dd72" }, { "alg" : "SHA-512", - "content" : "5bd78eed456ede30119319c5bed8e3e4c443b6fd7bdb3a7a5686647bd83094d0c3e2832a7575cfb60e4ef25f08106b93476939d3adcfecf5533cc030b3039e10" + "content" : "fea08e150473673b0608eaee3ae1cb4e73834039db80d3b758710d6baf3a5840a0878a4eb64739ae9bb21ccc7148c8520fe873616a3f6d5cdb4305deabdd015c" }, { "alg" : "SHA-384", - "content" : "114f1e324d90ad887c177876d410f5787a8e8da6c48d4b2862d365802c0efded3a88cb24046976bf6276cadad3712f0f" + "content" : "22db5e18e3512ed44474e75a124a052d5a1a6f35ce458f6a201a5ccc9510c57c10c117dba80ac6ce91745cf2b51e63f2" }, { "alg" : "SHA3-384", - "content" : "80288c03ad4d80d69f91d056ffc5570d49a9c76bf54ad2dff0121ecde26a560df76d05156f281f5c6db2a38ff07a873d" + "content" : "a70700d24df3c276ff387c359e0e940b834e413b72a49917de9a82615836eca8cca1bee1ed71790606c795da795e9151" }, { "alg" : "SHA3-256", - "content" : "5adfb5ccaf5f21a549422f426118a9542673926fcd18c68390cf813e791dcf6c" + "content" : "a8d044d3a4a069d0f20d24112b6427a3a6f02a925b31b932721d1f545ff32cec" }, { "alg" : "SHA3-512", - "content" : "7573f47f0babb53cefdc7c2309a0b982d800139064537b0797da442853d081010ad7c3c74a500598a0f800639a5d540eca21963ea652c68613907059bd4278c2" + "content" : "3417bf811d7e5fc1e71b8540f3379751434ea8540c421ff2c8bb5f5ce34401cd0ad8a829b65aa55e055c57141181762c4827099352c2bba453e48ad2df67526a" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0" + "id" : "Apache-2.0", + "url" : "https://www.apache.org/licenses/LICENSE-2.0" } } ], - "purl" : "pkg:maven/commons-io/commons-io@2.11.0?type=jar", + "purl" : "pkg:maven/commons-io/commons-io@2.20.0?type=jar", "externalReferences" : [ { "type" : "website", @@ -4519,7 +4476,7 @@ }, { "type" : "build-system", - "url" : "https://builds.apache.org/" + "url" : "https://github.com/apache/commons-io/actions" }, { "type" : "distribution-intake", @@ -4539,47 +4496,47 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/commons-io/commons-io@2.11.0?type=jar" + "bom-ref" : "pkg:maven/commons-io/commons-io@2.20.0?type=jar" }, { "publisher" : "Google Inc.", "group" : "com.google.googlejavaformat", "name" : "google-java-format", - "version" : "1.22.0", + "version" : "1.28.0", "description" : "A Java source code formatter that follows Google Java Style.", "scope" : "required", "hashes" : [ { "alg" : "MD5", - "content" : "fd1fbd4edf5d8eaca565217ff981b94b" + "content" : "8e2d4037e876b608ab0356477b5ead98" }, { "alg" : "SHA-1", - "content" : "6e31a0877a51e91076c857794a0b1df7af876b2d" + "content" : "f57d0ad670cc32c4d4a4ffb2cbef44a3dfddeecd" }, { "alg" : "SHA-256", - "content" : "4f4bdba0f2a3d7e84be47683a0c2a4ba69024d29d906d09784181f68f04af792" + "content" : "41dfe4d1012794ed15e0ffd70f89fd4fa65d5f15ce0bc0c70f8c2c127d6d010d" }, { "alg" : "SHA-512", - "content" : "d2006def13e5144e12568298014a23c86299a62e2bb7757c63f5f25405b1adb6f60b3f2f54bed9583cdd24cae71088e9f7aa846a10a089cce2a25972e48c7649" + "content" : "87bf18026e543bc9135d58153f05b8bf58b48bd59cec96e774e3f68bc8d601b9789924a9917b9a4f57b8a69bbe24dd20aef0a65543a63e7101b39317469346d2" }, { "alg" : "SHA-384", - "content" : "4aed1de35a09b196347064d45a5996fd7467c9b5cca0faf4655cbeb756053810cd3af2e45d74401aee626e30b1693ca7" + "content" : "bfd9e42e51d696fa079aa12d3541645873724ce48989615723533aba58fc3e4f77a37e9102bad2b391dc0252b449bad9" }, { "alg" : "SHA3-384", - "content" : "28fc6265d1886418ca44d1c7eea8709a2f38ba5b3f8cedb6a44d1a36f676e533662b61105db8b8d1f69fc4796fbcc8bd" + "content" : "b48a456db7981843ffc51f60511d4a5d52072bbe89da4dda6560cee4414493236e94ad1af4c5564449fb000501ca6ef4" }, { "alg" : "SHA3-256", - "content" : "08098285fccec01b2f3fce2e46ac210deb79862f21cb4ae96ff3a1a040df0809" + "content" : "ae18cf36a9212cdb243e3900cca7f9059273dfdf227fb97a189b5ae84cc989e4" }, { "alg" : "SHA3-512", - "content" : "122e32ab36408a79ed1153660ab1ba7639212d30921ea022da9affc19f76c5d874241a8584fc5c992ce74d2f01c2e06fddc784aee11c6d4238fc645ade3a1880" + "content" : "ac1207d9b7d8be02a222d1f11b44a5bcf1d95924404926698c8f23ba3688cfc49fc81e594e4f48d03ebbbf0ccc638706433ed462499b5b4d083538eb7e37541e" } ], "licenses" : [ @@ -4589,16 +4546,12 @@ } } ], - "purl" : "pkg:maven/com.google.googlejavaformat/google-java-format@1.22.0?type=jar", + "purl" : "pkg:maven/com.google.googlejavaformat/google-java-format@1.28.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/google/google-java-format/google-java-format" }, - { - "type" : "distribution-intake", - "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" - }, { "type" : "issue-tracker", "url" : "http://github.com/google/google-java-format/issues" @@ -4609,7 +4562,7 @@ } ], "type" : "library", - "bom-ref" : "pkg:maven/com.google.googlejavaformat/google-java-format@1.22.0?type=jar" + "bom-ref" : "pkg:maven/com.google.googlejavaformat/google-java-format@1.28.0?type=jar" }, { "group" : "com.google.guava", @@ -4891,68 +4844,6 @@ "type" : "library", "bom-ref" : "pkg:maven/org.checkerframework/checker-qual@3.37.0?type=jar" }, - { - "publisher" : "Google LLC", - "group" : "com.google.errorprone", - "name" : "error_prone_annotations", - "version" : "2.21.1", - "description" : "Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.", - "scope" : "required", - "hashes" : [ - { - "alg" : "MD5", - "content" : "75fe4fe33d308dd6cee3b601de902d27" - }, - { - "alg" : "SHA-1", - "content" : "6d9b10773b5237df178a7b3c1b4208df7d0e7f94" - }, - { - "alg" : "SHA-256", - "content" : "d1f3c66aa91ac52549e00ae3b208ba4b9af7d72d68f230643553beb38e6118ac" - }, - { - "alg" : "SHA-512", - "content" : "530318bcdf1ed8eeee408fc5a0775f1792cbf012b4ec55217a4498c8d2983b230a4d071b9e115565b0411faa51dd938823d9b619beb6786212c375ad3d1ebd8a" - }, - { - "alg" : "SHA-384", - "content" : "88e628431966a9b5cc19f96159874cefde1558e51d2ce233a0c2d47914eb9c6256f95882605a87cc6629a21ff70b72b4" - }, - { - "alg" : "SHA3-384", - "content" : "ebc750b211532fef9a84c3682d47f00b877e4082716ead1f4f883f02ab35bda8d5acfc475722215c4fe6ed9cfd54f43a" - }, - { - "alg" : "SHA3-256", - "content" : "9b4f193bf2f541844c6b1b5cf2d1c7f6e9465b97804d155f34530b203184e1ae" - }, - { - "alg" : "SHA3-512", - "content" : "1d76781cef387a185fd4fb69960394556062969bbbe0be74d0fb11f7c73758e5d35ff546ab04f6382c21c63705a1ffb975a549bf4d846fde54e412ecd4641485" - } - ], - "licenses" : [ - { - "license" : { - "id" : "Apache-2.0" - } - } - ], - "purl" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.21.1?type=jar", - "externalReferences" : [ - { - "type" : "website", - "url" : "https://errorprone.info/error_prone_annotations" - }, - { - "type" : "vcs", - "url" : "https://github.com/google/error-prone/error_prone_annotations" - } - ], - "type" : "library", - "bom-ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.21.1?type=jar" - }, { "group" : "com.google.j2objc", "name" : "j2objc-annotations", @@ -5021,113 +4912,108 @@ ], "dependencies" : [ { - "ref" : "pkg:maven/com.ibm/sonar-cryptography-plugin@1.0.3-SNAPSHOT?type=sonar-plugin", + "ref" : "pkg:maven/com.ibm/sonar-cryptography-plugin@2.0.0-SNAPSHOT?type=sonar-plugin", "dependsOn" : [ - "pkg:maven/com.ibm/java@1.0.3-SNAPSHOT?type=jar", - "pkg:maven/com.ibm/python@1.0.3-SNAPSHOT?type=jar", - "pkg:maven/org.jetbrains/annotations@24.1.0?type=jar", - "pkg:maven/org.sonarsource.api.plugin/sonar-plugin-api@9.13.0.360?type=jar", - "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", - "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar", - "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar", - "pkg:maven/org.sonarsource.java/sonar-java-plugin@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.python/sonar-python-plugin@4.17.0.14845?type=jar", - "pkg:maven/com.google.googlejavaformat/google-java-format@1.22.0?type=jar" + "pkg:maven/com.ibm/java@2.0.0-SNAPSHOT?type=jar", + "pkg:maven/com.ibm/python@2.0.0-SNAPSHOT?type=jar", + "pkg:maven/com.ibm/go@2.0.0-SNAPSHOT?type=jar", + "pkg:maven/org.sonarsource.api.plugin/sonar-plugin-api@13.4.3.4290?type=jar", + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", + "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar", + "pkg:maven/org.sonarsource.java/sonar-java-plugin@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.python/sonar-python-plugin@5.16.0.29940?type=jar", + "pkg:maven/org.sonarsource.go/sonar-go-plugin@1.32.0.5128?type=jar", + "pkg:maven/com.google.googlejavaformat/google-java-format@1.28.0?type=jar" ] }, { - "ref" : "pkg:maven/com.ibm/java@1.0.3-SNAPSHOT?type=jar", + "ref" : "pkg:maven/com.ibm/java@2.0.0-SNAPSHOT?type=jar", "dependsOn" : [ - "pkg:maven/com.ibm/engine@1.0.3-SNAPSHOT?type=jar", - "pkg:maven/com.ibm/output@1.0.3-SNAPSHOT?type=jar", - "pkg:maven/com.ibm/enricher@1.0.3-SNAPSHOT?type=jar", - "pkg:maven/org.bouncycastle/bcpkix-jdk18on@1.78?type=jar", - "pkg:maven/org.jetbrains/annotations@24.1.0?type=jar", - "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", - "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar", - "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar", - "pkg:maven/org.sonarsource.java/sonar-java-plugin@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.python/sonar-python-plugin@4.17.0.14845?type=jar", - "pkg:maven/com.google.googlejavaformat/google-java-format@1.22.0?type=jar" + "pkg:maven/com.ibm/engine@2.0.0-SNAPSHOT?type=jar", + "pkg:maven/com.ibm/output@2.0.0-SNAPSHOT?type=jar", + "pkg:maven/com.ibm/enricher@2.0.0-SNAPSHOT?type=jar", + "pkg:maven/com.ibm/rules@2.0.0-SNAPSHOT?type=jar", + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", + "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar", + "pkg:maven/org.sonarsource.java/sonar-java-plugin@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.python/sonar-python-plugin@5.16.0.29940?type=jar", + "pkg:maven/org.sonarsource.go/sonar-go-plugin@1.32.0.5128?type=jar", + "pkg:maven/com.google.googlejavaformat/google-java-format@1.28.0?type=jar" ] }, { - "ref" : "pkg:maven/com.ibm/engine@1.0.3-SNAPSHOT?type=jar", + "ref" : "pkg:maven/com.ibm/engine@2.0.0-SNAPSHOT?type=jar", "dependsOn" : [ - "pkg:maven/com.ibm/common@1.0.3-SNAPSHOT?type=jar", - "pkg:maven/org.jetbrains/annotations@24.1.0?type=jar", - "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", - "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar", - "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar", - "pkg:maven/org.sonarsource.java/sonar-java-plugin@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.python/sonar-python-plugin@4.17.0.14845?type=jar", - "pkg:maven/com.google.googlejavaformat/google-java-format@1.22.0?type=jar" + "pkg:maven/com.ibm/common@2.0.0-SNAPSHOT?type=jar", + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", + "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar", + "pkg:maven/org.sonarsource.java/sonar-java-plugin@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.python/sonar-python-plugin@5.16.0.29940?type=jar", + "pkg:maven/org.sonarsource.go/sonar-go-plugin@1.32.0.5128?type=jar", + "pkg:maven/com.google.googlejavaformat/google-java-format@1.28.0?type=jar" ] }, { - "ref" : "pkg:maven/com.ibm/common@1.0.3-SNAPSHOT?type=jar", + "ref" : "pkg:maven/com.ibm/common@2.0.0-SNAPSHOT?type=jar", "dependsOn" : [ - "pkg:maven/org.jetbrains/annotations@24.1.0?type=jar", - "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", - "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar", - "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar", - "pkg:maven/org.sonarsource.java/sonar-java-plugin@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.python/sonar-python-plugin@4.17.0.14845?type=jar", - "pkg:maven/com.google.googlejavaformat/google-java-format@1.22.0?type=jar" + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", + "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar", + "pkg:maven/org.sonarsource.java/sonar-java-plugin@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.python/sonar-python-plugin@5.16.0.29940?type=jar", + "pkg:maven/org.sonarsource.go/sonar-go-plugin@1.32.0.5128?type=jar", + "pkg:maven/com.google.googlejavaformat/google-java-format@1.28.0?type=jar" ] }, { - "ref" : "pkg:maven/org.jetbrains/annotations@24.1.0?type=jar", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", + "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar", - "dependsOn" : [ ] + "ref" : "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar", + "dependsOn" : [ + "pkg:maven/com.google.errorprone/error_prone_annotations@2.41.0?type=jar" + ] }, { - "ref" : "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar", + "ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.41.0?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/org.sonarsource.java/sonar-java-plugin@7.33.0.35775?type=jar", + "ref" : "pkg:maven/org.sonarsource.java/sonar-java-plugin@8.18.0.40025?type=jar", "dependsOn" : [ - "pkg:maven/org.sonarsource.java/java-surefire@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.java/java-frontend@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.java/java-symbolic-execution@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.java/java-checks@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.java/java-checks-aws@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.java/external-reports@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.java/java-jsp@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.8.0.2699?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.8.0.2699?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.8.0.2699?type=jar" + "pkg:maven/org.sonarsource.java/java-surefire@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.java/java-frontend@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.java/java-checks@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.java/java-checks-aws@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.java/check-list@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.java/external-reports@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.java/java-jsp@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.18.0.3393?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.18.0.3393?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.18.0.3393?type=jar" ] }, { - "ref" : "pkg:maven/org.sonarsource.java/java-surefire@7.33.0.35775?type=jar", + "ref" : "pkg:maven/org.sonarsource.java/java-surefire@8.18.0.40025?type=jar", "dependsOn" : [ - "pkg:maven/org.sonarsource.java/java-frontend@7.33.0.35775?type=jar", + "pkg:maven/org.sonarsource.java/java-frontend@8.18.0.40025?type=jar", "pkg:maven/com.fasterxml.staxmate/staxmate@2.4.1?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.8.0.2699?type=jar" + "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.18.0.3393?type=jar" ] }, { - "ref" : "pkg:maven/org.sonarsource.java/java-frontend@7.33.0.35775?type=jar", + "ref" : "pkg:maven/org.sonarsource.java/java-frontend@8.18.0.40025?type=jar", "dependsOn" : [ - "pkg:maven/org.sonarsource.java/jdt-package@1.1.0.34?type=jar", + "pkg:maven/org.sonarsource.java/jdt-package@1.6.0.160?type=jar", "pkg:maven/org.sonarsource.sslr/sslr-core@1.24.0.633?type=jar", - "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.8.0.2699?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.8.0.2699?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.8.0.2699?type=jar" + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.18.0.3393?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.18.0.3393?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.18.0.3393?type=jar" ] }, { - "ref" : "pkg:maven/org.sonarsource.java/jdt-package@1.1.0.34?type=jar", + "ref" : "pkg:maven/org.sonarsource.java/jdt-package@1.6.0.160?type=jar", "dependsOn" : [ ] }, { @@ -5137,20 +5023,24 @@ ] }, { - "ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.8.0.2699?type=jar", + "ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", + "dependsOn" : [ ] + }, + { + "ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.18.0.3393?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.8.0.2699?type=jar", + "ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.18.0.3393?type=jar", "dependsOn" : [ "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar" ] }, { - "ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.8.0.2699?type=jar", + "ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.18.0.3393?type=jar", "dependsOn" : [ "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", - "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar" + "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar" ] }, { @@ -5164,7 +5054,7 @@ "dependsOn" : [ ] }, { - "ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.8.0.2699?type=jar", + "ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.18.0.3393?type=jar", "dependsOn" : [ "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", "pkg:maven/xerces/xercesImpl@2.12.2?type=jar", @@ -5189,117 +5079,97 @@ ] }, { - "ref" : "pkg:maven/org.sonarsource.java/java-symbolic-execution@7.33.0.35775?type=jar", - "dependsOn" : [ - "pkg:maven/org.sonarsource.java/java-frontend@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.8.0.2699?type=jar" - ] - }, - { - "ref" : "pkg:maven/org.sonarsource.java/java-checks@7.33.0.35775?type=jar", + "ref" : "pkg:maven/org.sonarsource.java/java-checks@8.18.0.40025?type=jar", "dependsOn" : [ - "pkg:maven/org.sonarsource.java/java-frontend@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.java/java-checks-common@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.java/java-symbolic-execution@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.8.0.2699?type=jar", - "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar", - "pkg:maven/org.springframework/spring-expression@6.1.5?type=jar" + "pkg:maven/org.sonarsource.java/java-frontend@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.java/java-checks-common@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.18.0.3393?type=jar", + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", + "pkg:maven/org.springframework/spring-expression@6.1.21?type=jar" ] }, { - "ref" : "pkg:maven/org.sonarsource.java/java-checks-common@7.33.0.35775?type=jar", + "ref" : "pkg:maven/org.sonarsource.java/java-checks-common@8.18.0.40025?type=jar", "dependsOn" : [ - "pkg:maven/org.sonarsource.java/java-frontend@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.8.0.2699?type=jar", - "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar" + "pkg:maven/org.sonarsource.java/java-frontend@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.18.0.3393?type=jar", + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar" ] }, { - "ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.8.0.2699?type=jar", + "ref" : "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.18.0.3393?type=jar", "dependsOn" : [ "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar" ] }, { - "ref" : "pkg:maven/org.springframework/spring-expression@6.1.5?type=jar", + "ref" : "pkg:maven/org.springframework/spring-expression@6.1.21?type=jar", "dependsOn" : [ - "pkg:maven/org.springframework/spring-core@6.1.5?type=jar" + "pkg:maven/org.springframework/spring-core@6.1.21?type=jar" ] }, { - "ref" : "pkg:maven/org.springframework/spring-core@6.1.5?type=jar", + "ref" : "pkg:maven/org.springframework/spring-core@6.1.21?type=jar", "dependsOn" : [ - "pkg:maven/org.springframework/spring-jcl@6.1.5?type=jar" + "pkg:maven/org.springframework/spring-jcl@6.1.21?type=jar" ] }, { - "ref" : "pkg:maven/org.springframework/spring-jcl@6.1.5?type=jar", + "ref" : "pkg:maven/org.springframework/spring-jcl@6.1.21?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/org.sonarsource.java/java-checks-aws@7.33.0.35775?type=jar", - "dependsOn" : [ - "pkg:maven/org.sonarsource.java/java-frontend@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.java/java-checks-common@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.8.0.2699?type=jar", - "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar" - ] - }, - { - "ref" : "pkg:maven/org.sonarsource.java/external-reports@7.33.0.35775?type=jar", + "ref" : "pkg:maven/org.sonarsource.java/java-checks-aws@8.18.0.40025?type=jar", "dependsOn" : [ - "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.8.0.2699?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.8.0.2699?type=jar" + "pkg:maven/org.sonarsource.java/java-frontend@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.java/java-checks-common@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-recognizers@2.18.0.3393?type=jar", + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar" ] }, { - "ref" : "pkg:maven/org.sonarsource.java/java-jsp@7.33.0.35775?type=jar", + "ref" : "pkg:maven/org.sonarsource.java/check-list@8.18.0.40025?type=jar", "dependsOn" : [ - "pkg:maven/org.sonarsource.java/java-frontend@7.33.0.35775?type=jar", - "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@9.0.84?type=jar" + "pkg:maven/org.sonarsource.java/java-checks@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.java/java-checks-aws@8.18.0.40025?type=jar", + "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar" ] }, { - "ref" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper@9.0.84?type=jar", + "ref" : "pkg:maven/org.sonarsource.java/external-reports@8.18.0.40025?type=jar", "dependsOn" : [ - "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.84?type=jar", - "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.84?type=jar" + "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.18.0.3393?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.18.0.3393?type=jar" ] }, { - "ref" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.84?type=jar", + "ref" : "pkg:maven/org.sonarsource.java/java-jsp@8.18.0.40025?type=jar", "dependsOn" : [ - "pkg:maven/org.apache.tomcat/tomcat-annotations-api@9.0.84?type=jar" + "pkg:maven/org.sonarsource.java/java-frontend@8.18.0.40025?type=jar" ] }, { - "ref" : "pkg:maven/org.apache.tomcat/tomcat-annotations-api@9.0.84?type=jar", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.84?type=jar", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:maven/org.sonarsource.python/sonar-python-plugin@4.17.0.14845?type=jar", + "ref" : "pkg:maven/org.sonarsource.python/sonar-python-plugin@5.16.0.29940?type=jar", "dependsOn" : [ - "pkg:maven/org.sonarsource.python/python-frontend@4.17.0.14845?type=jar", - "pkg:maven/org.sonarsource.python/python-checks@4.17.0.14845?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.8.0.2699?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.8.0.2699?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.8.0.2699?type=jar", - "pkg:maven/commons-lang/commons-lang@2.6?type=jar", + "pkg:maven/org.sonarsource.python/python-frontend@5.16.0.29940?type=jar", + "pkg:maven/org.sonarsource.python/python-checks@5.16.0.29940?type=jar", + "pkg:maven/org.sonarsource.python/python-commons@5.16.0.29940?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.18.0.3393?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.18.0.3393?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.18.0.3393?type=jar", + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", "pkg:maven/org.codehaus.staxmate/staxmate@2.0.1?type=jar" ] }, { - "ref" : "pkg:maven/org.sonarsource.python/python-frontend@4.17.0.14845?type=jar", + "ref" : "pkg:maven/org.sonarsource.python/python-frontend@5.16.0.29940?type=jar", "dependsOn" : [ "pkg:maven/org.sonarsource.sslr/sslr-core@1.24.0.633?type=jar", "pkg:maven/com.google.guava/guava@32.1.3-jre?type=jar", - "pkg:maven/com.google.protobuf/protobuf-java@3.25.1?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.8.0.2699?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.8.0.2699?type=jar" + "pkg:maven/com.google.protobuf/protobuf-java@4.29.0?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-regex-parsing@2.18.0.3393?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.18.0.3393?type=jar", + "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1?type=jar" ] }, { @@ -5309,7 +5179,7 @@ "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar", "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", "pkg:maven/org.checkerframework/checker-qual@3.37.0?type=jar", - "pkg:maven/com.google.errorprone/error_prone_annotations@2.21.1?type=jar", + "pkg:maven/com.google.errorprone/error_prone_annotations@2.41.0?type=jar", "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar" ] }, @@ -5326,33 +5196,75 @@ "dependsOn" : [ ] }, { - "ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.21.1?type=jar", + "ref" : "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar", + "ref" : "pkg:maven/com.google.protobuf/protobuf-java@4.29.0?type=jar", + "dependsOn" : [ ] + }, + { + "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1?type=jar", + "dependsOn" : [ + "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.20?type=jar", + "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.1?type=jar" + ] + }, + { + "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.20?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/com.google.protobuf/protobuf-java@3.25.1?type=jar", + "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.1?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/org.sonarsource.python/python-checks@4.17.0.14845?type=jar", + "ref" : "pkg:maven/org.sonarsource.python/python-checks@5.16.0.29940?type=jar", "dependsOn" : [ - "pkg:maven/org.sonarsource.python/python-frontend@4.17.0.14845?type=jar", - "pkg:maven/commons-io/commons-io@2.11.0?type=jar", - "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar", - "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.8.0.2699?type=jar" + "pkg:maven/org.sonarsource.python/python-frontend@5.16.0.29940?type=jar", + "pkg:maven/commons-io/commons-io@2.20.0?type=jar", + "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.18.0.3393?type=jar" ] }, { - "ref" : "pkg:maven/commons-io/commons-io@2.11.0?type=jar", + "ref" : "pkg:maven/commons-io/commons-io@2.20.0?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/commons-lang/commons-lang@2.6?type=jar", - "dependsOn" : [ ] + "ref" : "pkg:maven/org.sonarsource.python/python-commons@5.16.0.29940?type=jar", + "dependsOn" : [ + "pkg:maven/org.sonarsource.python/python-frontend@5.16.0.29940?type=jar", + "pkg:maven/org.sonarsource.python/python-checks@5.16.0.29940?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-analyzer-commons@2.18.0.3393?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-xml-parsing@2.18.0.3393?type=jar", + "pkg:maven/org.sonarsource.analyzer-commons/sonar-performance-measure@2.18.0.3393?type=jar", + "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-toml@2.20.1?type=jar", + "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.20.1?type=jar", + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", + "pkg:maven/org.apache.commons/commons-text@1.14.0?type=jar", + "pkg:maven/org.codehaus.staxmate/staxmate@2.0.1?type=jar" + ] + }, + { + "ref" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-toml@2.20.1?type=jar", + "dependsOn" : [ + "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1?type=jar", + "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.1?type=jar" + ] + }, + { + "ref" : "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.20.1?type=jar", + "dependsOn" : [ + "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.1?type=jar", + "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1?type=jar" + ] + }, + { + "ref" : "pkg:maven/org.apache.commons/commons-text@1.14.0?type=jar", + "dependsOn" : [ + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar" + ] }, { "ref" : "pkg:maven/org.codehaus.staxmate/staxmate@2.0.1?type=jar", @@ -5366,44 +5278,47 @@ "dependsOn" : [ ] }, { - "ref" : "pkg:maven/com.google.googlejavaformat/google-java-format@1.22.0?type=jar", + "ref" : "pkg:maven/org.sonarsource.go/sonar-go-plugin@1.32.0.5128?type=jar", + "dependsOn" : [ ] + }, + { + "ref" : "pkg:maven/com.google.googlejavaformat/google-java-format@1.28.0?type=jar", "dependsOn" : [ "pkg:maven/com.google.guava/guava@32.1.3-jre?type=jar" ] }, { - "ref" : "pkg:maven/com.ibm/output@1.0.3-SNAPSHOT?type=jar", + "ref" : "pkg:maven/com.ibm/output@2.0.0-SNAPSHOT?type=jar", "dependsOn" : [ - "pkg:maven/org.cyclonedx/cyclonedx-core-java@8.1.0-SNAPSHOT?type=jar", - "pkg:maven/com.ibm/mapper@1.0.3-SNAPSHOT?type=jar", - "pkg:maven/com.ibm/engine@1.0.3-SNAPSHOT?type=jar", - "pkg:maven/org.jetbrains/annotations@24.1.0?type=jar", - "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", - "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar", - "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar", - "pkg:maven/org.sonarsource.java/sonar-java-plugin@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.python/sonar-python-plugin@4.17.0.14845?type=jar", - "pkg:maven/com.google.googlejavaformat/google-java-format@1.22.0?type=jar" + "pkg:maven/org.cyclonedx/cyclonedx-core-java@11.0.1?type=jar", + "pkg:maven/com.ibm/mapper@2.0.0-SNAPSHOT?type=jar", + "pkg:maven/com.ibm/engine@2.0.0-SNAPSHOT?type=jar", + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", + "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar", + "pkg:maven/org.sonarsource.java/sonar-java-plugin@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.python/sonar-python-plugin@5.16.0.29940?type=jar", + "pkg:maven/org.sonarsource.go/sonar-go-plugin@1.32.0.5128?type=jar", + "pkg:maven/com.google.googlejavaformat/google-java-format@1.28.0?type=jar" ] }, { - "ref" : "pkg:maven/org.cyclonedx/cyclonedx-core-java@8.1.0-SNAPSHOT?type=jar", + "ref" : "pkg:maven/org.cyclonedx/cyclonedx-core-java@11.0.1?type=jar", "dependsOn" : [ - "pkg:maven/commons-codec/commons-codec@1.15?type=jar", - "pkg:maven/commons-io/commons-io@2.11.0?type=jar", - "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar", - "pkg:maven/org.apache.commons/commons-collections4@4.4?type=jar", + "pkg:maven/commons-codec/commons-codec@1.19.0?type=jar", + "pkg:maven/commons-io/commons-io@2.20.0?type=jar", + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", + "pkg:maven/org.apache.commons/commons-collections4@4.5.0?type=jar", "pkg:maven/com.github.package-url/packageurl-java@1.5.0?type=jar", - "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.16.1?type=jar", - "pkg:maven/com.networknt/json-schema-validator@1.0.87?type=jar" + "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.20.1?type=jar", + "pkg:maven/com.networknt/json-schema-validator@1.5.9?type=jar" ] }, { - "ref" : "pkg:maven/commons-codec/commons-codec@1.15?type=jar", + "ref" : "pkg:maven/commons-codec/commons-codec@1.19.0?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/org.apache.commons/commons-collections4@4.4?type=jar", + "ref" : "pkg:maven/org.apache.commons/commons-collections4@4.5.0?type=jar", "dependsOn" : [ ] }, { @@ -5411,120 +5326,115 @@ "dependsOn" : [ ] }, { - "ref" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.16.1?type=jar", + "ref" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.20.1?type=jar", "dependsOn" : [ - "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.16.1?type=jar", - "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.16.1?type=jar", - "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.16.1?type=jar", + "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.1?type=jar", + "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.20?type=jar", + "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1?type=jar", "pkg:maven/org.codehaus.woodstox/stax2-api@3.1.4?type=jar", "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.4.0?type=jar" ] }, { - "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.16.1?type=jar", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.16.1?type=jar", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.16.1?type=jar", - "dependsOn" : [ - "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.16.1?type=jar", - "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.16.1?type=jar" - ] - }, - { - "ref" : "pkg:maven/com.networknt/json-schema-validator@1.0.87?type=jar", + "ref" : "pkg:maven/com.networknt/json-schema-validator@1.5.9?type=jar", "dependsOn" : [ - "pkg:maven/com.ethlo.time/itu@1.7.0?type=jar", - "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.16.1?type=jar", - "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.15.2?type=jar", - "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar" + "pkg:maven/com.ethlo.time/itu@1.14.0?type=jar", + "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1?type=jar", + "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.18.3?type=jar", + "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar" ] }, { - "ref" : "pkg:maven/com.ethlo.time/itu@1.7.0?type=jar", + "ref" : "pkg:maven/com.ethlo.time/itu@1.14.0?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.15.2?type=jar", + "ref" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.18.3?type=jar", "dependsOn" : [ - "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.16.1?type=jar", - "pkg:maven/org.yaml/snakeyaml@2.0?type=jar", - "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.16.1?type=jar" + "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.20.1?type=jar", + "pkg:maven/org.yaml/snakeyaml@2.3?type=jar", + "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.20.1?type=jar" ] }, { - "ref" : "pkg:maven/org.yaml/snakeyaml@2.0?type=jar", + "ref" : "pkg:maven/org.yaml/snakeyaml@2.3?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar", + "ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar", "dependsOn" : [ ] }, { - "ref" : "pkg:maven/com.ibm/mapper@1.0.3-SNAPSHOT?type=jar", + "ref" : "pkg:maven/com.ibm/mapper@2.0.0-SNAPSHOT?type=jar", "dependsOn" : [ - "pkg:maven/com.ibm/engine@1.0.3-SNAPSHOT?type=jar", - "pkg:maven/org.jetbrains/annotations@24.1.0?type=jar", - "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", - "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar", - "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar", - "pkg:maven/org.sonarsource.java/sonar-java-plugin@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.python/sonar-python-plugin@4.17.0.14845?type=jar", - "pkg:maven/com.google.googlejavaformat/google-java-format@1.22.0?type=jar" + "pkg:maven/com.ibm/engine@2.0.0-SNAPSHOT?type=jar", + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", + "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar", + "pkg:maven/org.sonarsource.java/sonar-java-plugin@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.python/sonar-python-plugin@5.16.0.29940?type=jar", + "pkg:maven/org.sonarsource.go/sonar-go-plugin@1.32.0.5128?type=jar", + "pkg:maven/com.google.googlejavaformat/google-java-format@1.28.0?type=jar" ] }, { - "ref" : "pkg:maven/com.ibm/enricher@1.0.3-SNAPSHOT?type=jar", + "ref" : "pkg:maven/com.ibm/enricher@2.0.0-SNAPSHOT?type=jar", "dependsOn" : [ - "pkg:maven/com.ibm/mapper@1.0.3-SNAPSHOT?type=jar", - "pkg:maven/org.jetbrains/annotations@24.1.0?type=jar", - "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", - "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar", - "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar", - "pkg:maven/org.sonarsource.java/sonar-java-plugin@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.python/sonar-python-plugin@4.17.0.14845?type=jar", - "pkg:maven/com.google.googlejavaformat/google-java-format@1.22.0?type=jar" + "pkg:maven/com.ibm/mapper@2.0.0-SNAPSHOT?type=jar", + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", + "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar", + "pkg:maven/org.sonarsource.java/sonar-java-plugin@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.python/sonar-python-plugin@5.16.0.29940?type=jar", + "pkg:maven/org.sonarsource.go/sonar-go-plugin@1.32.0.5128?type=jar", + "pkg:maven/com.google.googlejavaformat/google-java-format@1.28.0?type=jar" ] }, { - "ref" : "pkg:maven/org.bouncycastle/bcpkix-jdk18on@1.78?type=jar", + "ref" : "pkg:maven/com.ibm/rules@2.0.0-SNAPSHOT?type=jar", "dependsOn" : [ - "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.78?type=jar", - "pkg:maven/org.bouncycastle/bcutil-jdk18on@1.78?type=jar" + "pkg:maven/com.ibm/mapper@2.0.0-SNAPSHOT?type=jar", + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", + "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar", + "pkg:maven/org.sonarsource.java/sonar-java-plugin@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.python/sonar-python-plugin@5.16.0.29940?type=jar", + "pkg:maven/org.sonarsource.go/sonar-go-plugin@1.32.0.5128?type=jar", + "pkg:maven/com.google.googlejavaformat/google-java-format@1.28.0?type=jar" ] }, { - "ref" : "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.78?type=jar", - "dependsOn" : [ ] - }, - { - "ref" : "pkg:maven/org.bouncycastle/bcutil-jdk18on@1.78?type=jar", + "ref" : "pkg:maven/com.ibm/python@2.0.0-SNAPSHOT?type=jar", "dependsOn" : [ - "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.78?type=jar" + "pkg:maven/com.ibm/engine@2.0.0-SNAPSHOT?type=jar", + "pkg:maven/com.ibm/output@2.0.0-SNAPSHOT?type=jar", + "pkg:maven/com.ibm/enricher@2.0.0-SNAPSHOT?type=jar", + "pkg:maven/com.ibm/rules@2.0.0-SNAPSHOT?type=jar", + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", + "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar", + "pkg:maven/org.sonarsource.java/sonar-java-plugin@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.python/sonar-python-plugin@5.16.0.29940?type=jar", + "pkg:maven/org.sonarsource.go/sonar-go-plugin@1.32.0.5128?type=jar", + "pkg:maven/com.google.googlejavaformat/google-java-format@1.28.0?type=jar" ] }, { - "ref" : "pkg:maven/com.ibm/python@1.0.3-SNAPSHOT?type=jar", + "ref" : "pkg:maven/com.ibm/go@2.0.0-SNAPSHOT?type=jar", "dependsOn" : [ - "pkg:maven/com.ibm/engine@1.0.3-SNAPSHOT?type=jar", - "pkg:maven/com.ibm/output@1.0.3-SNAPSHOT?type=jar", - "pkg:maven/com.ibm/enricher@1.0.3-SNAPSHOT?type=jar", - "pkg:maven/org.jetbrains/annotations@24.1.0?type=jar", - "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", - "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar", - "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar", - "pkg:maven/org.sonarsource.java/sonar-java-plugin@7.33.0.35775?type=jar", - "pkg:maven/org.sonarsource.python/sonar-python-plugin@4.17.0.14845?type=jar", - "pkg:maven/com.google.googlejavaformat/google-java-format@1.22.0?type=jar" + "pkg:maven/com.ibm/engine@2.0.0-SNAPSHOT?type=jar", + "pkg:maven/com.ibm/output@2.0.0-SNAPSHOT?type=jar", + "pkg:maven/com.ibm/enricher@2.0.0-SNAPSHOT?type=jar", + "pkg:maven/com.ibm/rules@2.0.0-SNAPSHOT?type=jar", + "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar", + "pkg:maven/com.google.code.gson/gson@2.13.2?type=jar", + "pkg:maven/org.sonarsource.java/sonar-java-plugin@8.18.0.40025?type=jar", + "pkg:maven/org.sonarsource.python/sonar-python-plugin@5.16.0.29940?type=jar", + "pkg:maven/org.sonarsource.go/sonar-go-plugin@1.32.0.5128?type=jar", + "pkg:maven/com.google.googlejavaformat/google-java-format@1.28.0?type=jar" ] }, { - "ref" : "pkg:maven/org.sonarsource.api.plugin/sonar-plugin-api@9.13.0.360?type=jar", - "dependsOn" : [ ] + "ref" : "pkg:maven/org.sonarsource.api.plugin/sonar-plugin-api@13.4.3.4290?type=jar", + "dependsOn" : [ + "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar" + ] } ] } \ No newline at end of file