diff --git a/ReleaseNotes.md b/ReleaseNotes.md index bfb2fa9..1b8d701 100644 --- a/ReleaseNotes.md +++ b/ReleaseNotes.md @@ -1,3 +1,9 @@ +## Release 3.8.1 + +* We fixed an issue in the Task Inbox and Task Dashboard pages where the ‘Assignee(s)' column did not display the Assignee name(s). + +_______ + ## Release 3.8.0 * We upgraded the module to Mendix 10.12.0 diff --git a/Releases/WorkflowCommons-3-8-1.mpk b/Releases/WorkflowCommons-3-8-1.mpk new file mode 100644 index 0000000..8e20aa0 Binary files /dev/null and b/Releases/WorkflowCommons-3-8-1.mpk differ diff --git a/Source/ExpenseRequestStarterApp.mpr b/Source/ExpenseRequestStarterApp.mpr index c617d56..8e8c90a 100644 Binary files a/Source/ExpenseRequestStarterApp.mpr and b/Source/ExpenseRequestStarterApp.mpr differ diff --git a/Source/vendorlib/vendorlib-sbom.json b/Source/vendorlib/vendorlib-sbom.json index b1965d6..587f8ee 100644 --- a/Source/vendorlib/vendorlib-sbom.json +++ b/Source/vendorlib/vendorlib-sbom.json @@ -21,42 +21,42 @@ }, "components" : [ { - "group" : "commons-logging", - "name" : "commons-logging", - "version" : "1.2", - "description" : "Apache Commons Logging is a thin adapter allowing configurable bridging to other, well known logging systems.", + "group" : "commons-io", + "name" : "commons-io", + "version" : "2.11.0", + "description" : "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.", "hashes" : [ { "alg" : "MD5", - "content" : "040b4b4d8eac886f6b4a2a3bd2f31b00" + "content" : "3b4b7ccfaeceeac240b804839ee1a1ca" }, { "alg" : "SHA-1", - "content" : "4bfc12adfe4842bf07b657f0369c4cb522955686" + "content" : "a2503f302b11ebde7ebc3df41daebe0e4eea3689" }, { "alg" : "SHA-256", - "content" : "daddea1ea0be0f56978ab3006b8ac92834afeefbd9b7e4e6316fca57df0fa636" + "content" : "961b2f6d87dbacc5d54abf45ab7a6e2495f89b75598962d8c723cea9bc210908" }, { "alg" : "SHA-512", - "content" : "ed00dbfabd9ae00efa26dd400983601d076fe36408b7d6520084b447e5d1fa527ce65bd6afdcb58506c3a808323d28e88f26cb99c6f5db9ff64f6525ecdfa557" + "content" : "5bd78eed456ede30119319c5bed8e3e4c443b6fd7bdb3a7a5686647bd83094d0c3e2832a7575cfb60e4ef25f08106b93476939d3adcfecf5533cc030b3039e10" }, { "alg" : "SHA-384", - "content" : "ac20720d7156131478205f1b454395abf84cfc8da2f163301af32f63bd3c4764bd26cb54ed53800f33193ae591f3ce9c" + "content" : "114f1e324d90ad887c177876d410f5787a8e8da6c48d4b2862d365802c0efded3a88cb24046976bf6276cadad3712f0f" }, { "alg" : "SHA3-384", - "content" : "628eb4407e95dca84da1a06b08a6d9b832a49de8472b1b217e8607f08efeeed18b996232d64dd07f03e78e0e3bb4b078" + "content" : "80288c03ad4d80d69f91d056ffc5570d49a9c76bf54ad2dff0121ecde26a560df76d05156f281f5c6db2a38ff07a873d" }, { "alg" : "SHA3-256", - "content" : "9aab62deccf156ee6e324c925dfc30ecb53e8465802863a551901a461424e807" + "content" : "5adfb5ccaf5f21a549422f426118a9542673926fcd18c68390cf813e791dcf6c" }, { "alg" : "SHA3-512", - "content" : "3fd76857f6d20c03799537cc961c1c4ddf1c375c6c192fb982363e3b9397ba138b77f24ef38b4202f44e37586789c0320e4de18fdadd2772304fd14a9b26d552" + "content" : "7573f47f0babb53cefdc7c2309a0b982d800139064537b0797da442853d081010ad7c3c74a500598a0f800639a5d540eca21963ea652c68613907059bd4278c2" } ], "licenses" : [ @@ -66,160 +66,133 @@ } } ], - "purl" : "pkg:maven/commons-logging/commons-logging@1.2?type=jar", + "purl" : "pkg:maven/commons-io/commons-io@2.11.0?type=jar", "modified" : false, "externalReferences" : [ { "type" : "issue-tracker", - "url" : "http://issues.apache.org/jira/browse/LOGGING" + "url" : "https://issues.apache.org/jira/browse/IO" }, { "type" : "vcs", - "url" : "http://svn.apache.org/repos/asf/commons/proper/logging/trunk" + "url" : "https://gitbox.apache.org/repos/asf?p=commons-io.git" } ], "type" : "library", - "bom-ref" : "pkg:maven/commons-logging/commons-logging@1.2?type=jar" + "bom-ref" : "pkg:maven/commons-io/commons-io@2.11.0?type=jar" }, { - "group" : "org.apache.httpcomponents.client5", - "name" : "httpclient5", - "version" : "5.2.1", - "description" : "Apache HttpComponents Client", + "publisher" : "JUnit", + "group" : "junit", + "name" : "junit", + "version" : "4.13.1", + "description" : "JUnit is a unit testing framework for Java, created by Erich Gamma and Kent Beck.", "hashes" : [ { "alg" : "MD5", - "content" : "fbbefc687f2e0c55b34b77edf53d486a" + "content" : "83d91f209ddcb104776fa41c448c7ee2" }, { "alg" : "SHA-1", - "content" : "0c900514d3446d9ce5d9dbd90c21192048125440" + "content" : "cdd00374f1fee76b11e2a9d127405aa3f6be5b6a" }, { "alg" : "SHA-256", - "content" : "9355f3876baf82fec13ced22c12b62d57536230836406d359459128e4f73ed51" + "content" : "c30719db974d6452793fe191b3638a5777005485bae145924044530ffa5f6122" }, { "alg" : "SHA-512", - "content" : "0f8cbc1b287f56af9565532aa6e16abbf8e14ce9e22d682eb155b24f9b36e3801306373b03cb9a3ad88963acff15138f949ec48ebe84491230a490a7c745b18b" + "content" : "29769fb462c7db2fcca6de3a24b445ae252a7570950f9a2163e14c478f854e47056444d90b2d40f4cf4e3f37c03faacf694c2db12763e173c44362af50176b1f" }, { "alg" : "SHA-384", - "content" : "b828737744748cf6cf4d78f87f3c84bc90723eef7ad8ae68785504fb20389d08dbd4b13a66dddeb3a7d96adf5dd70d54" + "content" : "f98da9852bdc5fc022399a85c1fa234ba80d3bf8f492034971175f70464cd9f2d08d65954f92f33ae250050d9f5ae160" }, { "alg" : "SHA3-384", - "content" : "8946c3ef57726352db0621b9f604c88b5065901285f547173d708b48420f3586c04f84d0dd6a86159e8b494d50561361" + "content" : "79a11e53c134bf2a6fcffd64b1371bacdcbda3eff96094970a5123fb9eaca195044313a647ed7bfa21c0ef9f36994bd2" }, { "alg" : "SHA3-256", - "content" : "6ab0c8554953cd7d42a9ca03659c8fb8a79be8979084847aea619044ea8dba35" + "content" : "2c44fd3ad2e0e1f2f5ce27f9efd357cecdeb38d074ac8bb23fbd7be683c53e99" }, { "alg" : "SHA3-512", - "content" : "e8db6667d9b300c728b0ea4e693f09a49283e27362d123a17e860188b4f03d2c34f57b62ab714ead1202820748c28bae9af4cbe6c43876877573f173e27bdd10" + "content" : "c34310659381936cf3f16a58f90372a2a3829e020889a7cab118127e6c96e5dc120f350a89d56abfffbfe1862aca51e8e419f48429fb8e5ea3a54f0b3ef809c2" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0" + "id" : "EPL-1.0", + "url" : "http://www.eclipse.org/legal/epl-v10.html" } } ], - "purl" : "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.2.1?type=jar", + "purl" : "pkg:maven/junit/junit@4.13.1?type=jar", "modified" : false, - "type" : "library", - "bom-ref" : "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.2.1?type=jar" - }, - { - "group" : "org.apache.httpcomponents.core5", - "name" : "httpcore5-h2", - "version" : "5.2", - "description" : "Apache HttpComponents HTTP/2 Core Components", - "hashes" : [ - { - "alg" : "MD5", - "content" : "272112133e0dd0559efdd8f5e615a344" - }, - { - "alg" : "SHA-1", - "content" : "698bd8c759ccc7fd7398f3179ff45d0e5a7ccc16" - }, - { - "alg" : "SHA-256", - "content" : "5a087fb8c619979d492a83546f351ddadf32b28cc6a32923229f3fc777171578" - }, + "externalReferences" : [ { - "alg" : "SHA-512", - "content" : "3c8ebdbe931d014e390a2b42aeae1ec3ae0def07c54a0c18927d0db1afed978fd9730455602c7692393bba029b07bdd43356a5b779f5d79b285d9e36d0c448d1" + "type" : "website", + "url" : "http://www.junit.org" }, { - "alg" : "SHA-384", - "content" : "a1ab74afe0b503a3cf8eb3b060b6696a174aca2b55d728add196d46aaa5c9dce0d81de4e26e2e44482fbeb0cad197f63" + "type" : "build-system", + "url" : "https://travis-ci.org/junit-team/junit4" }, { - "alg" : "SHA3-384", - "content" : "13fd21b5aaab5f9fc0d8ecbba20196a02dade84e992c4a686ef5c9a98c3366674d201e42f8555cef7042b1ba6d4ad256" + "type" : "distribution", + "url" : "https://github.com/junit-team/junit4/wiki/Download-and-Install" }, { - "alg" : "SHA3-256", - "content" : "62e29bad6d6c936fba13033ddc64153accd59dc964ed9f3dd7c1bd14212b834d" + "type" : "issue-tracker", + "url" : "https://github.com/junit-team/junit4/issues" }, { - "alg" : "SHA3-512", - "content" : "3c891ebf18f05498d732eef4aacf607e0e526bb5d6a821e795601896d80dbf5244a36674f9688bdceff7f8965b8e893c88cc9deb662b7ac206b2c32b2b796e32" - } - ], - "licenses" : [ - { - "license" : { - "id" : "Apache-2.0" - } + "type" : "vcs", + "url" : "https://github.com/junit-team/junit4" } ], - "purl" : "pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.2?type=jar", - "modified" : false, "type" : "library", - "bom-ref" : "pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.2?type=jar" + "bom-ref" : "pkg:maven/junit/junit@4.13.1?type=jar" }, { - "group" : "com.google.guava", - "name" : "listenablefuture", - "version" : "9999.0-empty-to-avoid-conflict-with-guava", - "description" : "An empty artifact that Guava depends on to signal that it is providing ListenableFuture -- but is also available in a second \"version\" that contains com.google.common.util.concurrent.ListenableFuture class, without any other Guava classes. The idea is: - If users want only ListenableFuture, they depend on listenablefuture-1.0. - If users want all of Guava, they depend on guava, which, as of Guava 27.0, depends on listenablefuture-9999.0-empty-to-avoid-conflict-with-guava. The 9999.0-... version number is enough for some build systems (notably, Gradle) to select that empty artifact over the \"real\" listenablefuture-1.0 -- avoiding a conflict with the copy of ListenableFuture in guava itself. If users are using an older version of Guava or a build system other than Gradle, they may see class conflicts. If so, they can solve them by manually excluding the listenablefuture artifact or manually forcing their build systems to use 9999.0-....", + "group" : "commons-logging", + "name" : "commons-logging", + "version" : "1.2", + "description" : "Apache Commons Logging is a thin adapter allowing configurable bridging to other, well known logging systems.", "hashes" : [ { "alg" : "MD5", - "content" : "d094c22570d65e132c19cea5d352e381" + "content" : "040b4b4d8eac886f6b4a2a3bd2f31b00" }, { "alg" : "SHA-1", - "content" : "b421526c5f297295adef1c886e5246c39d4ac629" + "content" : "4bfc12adfe4842bf07b657f0369c4cb522955686" }, { "alg" : "SHA-256", - "content" : "b372a037d4230aa57fbeffdef30fd6123f9c0c2db85d0aced00c91b974f33f99" + "content" : "daddea1ea0be0f56978ab3006b8ac92834afeefbd9b7e4e6316fca57df0fa636" }, { "alg" : "SHA-512", - "content" : "c5987a979174cbacae2e78b319f080420cc71bcdbcf7893745731eeb93c23ed13bff8d4599441f373f3a246023d33df03e882de3015ee932a74a774afdd0782f" + "content" : "ed00dbfabd9ae00efa26dd400983601d076fe36408b7d6520084b447e5d1fa527ce65bd6afdcb58506c3a808323d28e88f26cb99c6f5db9ff64f6525ecdfa557" }, { "alg" : "SHA-384", - "content" : "caff9b74079f95832ca7f6029346b34b606051cc8c5a4389fac263511d277ada0c55f28b0d43011055b268c6eb7184d5" + "content" : "ac20720d7156131478205f1b454395abf84cfc8da2f163301af32f63bd3c4764bd26cb54ed53800f33193ae591f3ce9c" }, { "alg" : "SHA3-384", - "content" : "e939f08df0545847ea0d3e4b04a114b08499ad069ba8ec9461d1779f87a56e0c37273630a0f4c14e78c348d3ac7eb97f" + "content" : "628eb4407e95dca84da1a06b08a6d9b832a49de8472b1b217e8607f08efeeed18b996232d64dd07f03e78e0e3bb4b078" }, { "alg" : "SHA3-256", - "content" : "1f0a8b1177773b3a8ace839df5eed63cbf56b24a38714898a6e4ed065c42559f" + "content" : "9aab62deccf156ee6e324c925dfc30ecb53e8465802863a551901a461424e807" }, { "alg" : "SHA3-512", - "content" : "6b495ecc2a18b17365cb08d124a0da47f04bcdde81927b5245edf3edd8e498c3c3fb92ce6a4127f660bac851bb1d3e4510e5c20d03be47ce99dc296d360db285" + "content" : "3fd76857f6d20c03799537cc961c1c4ddf1c375c6c192fb982363e3b9397ba138b77f24ef38b4202f44e37586789c0320e4de18fdadd2772304fd14a9b26d552" } ], "licenses" : [ @@ -229,48 +202,58 @@ } } ], - "purl" : "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar", + "purl" : "pkg:maven/commons-logging/commons-logging@1.2?type=jar", "modified" : false, + "externalReferences" : [ + { + "type" : "issue-tracker", + "url" : "http://issues.apache.org/jira/browse/LOGGING" + }, + { + "type" : "vcs", + "url" : "http://svn.apache.org/repos/asf/commons/proper/logging/trunk" + } + ], "type" : "library", - "bom-ref" : "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar" + "bom-ref" : "pkg:maven/commons-logging/commons-logging@1.2?type=jar" }, { - "group" : "org.apache.httpcomponents.core5", - "name" : "httpcore5", - "version" : "5.2", - "description" : "Apache HttpComponents HTTP/1.1 core components", + "group" : "org.apache.httpcomponents.client5", + "name" : "httpclient5", + "version" : "5.2.1", + "description" : "Apache HttpComponents Client", "hashes" : [ { "alg" : "MD5", - "content" : "3a40241f9a99cf063f347dfb73c5c4e8" + "content" : "fbbefc687f2e0c55b34b77edf53d486a" }, { "alg" : "SHA-1", - "content" : "ab7d251b8dfa3f2878f1eefbcca0e1fc0ebeba27" + "content" : "0c900514d3446d9ce5d9dbd90c21192048125440" }, { "alg" : "SHA-256", - "content" : "293321cbf594d79ea8a0cb0214f75f146d17f088be17ad5ce11c2fe864df124c" + "content" : "9355f3876baf82fec13ced22c12b62d57536230836406d359459128e4f73ed51" }, { "alg" : "SHA-512", - "content" : "214dcc370a8ca0c7fdb7c7afdea37a0bf1b9ba838aa3e074d64b0d9b950ebc7ff1dae87892fad0f44cc6d56828101d640584b45358ace20076f19a78aa503300" + "content" : "0f8cbc1b287f56af9565532aa6e16abbf8e14ce9e22d682eb155b24f9b36e3801306373b03cb9a3ad88963acff15138f949ec48ebe84491230a490a7c745b18b" }, { "alg" : "SHA-384", - "content" : "af7cbc6d6ba74d974665529431a57de332c69cf5bd5080368015de28e7a9f652c2daa777e78bec68350c95d168ec2280" + "content" : "b828737744748cf6cf4d78f87f3c84bc90723eef7ad8ae68785504fb20389d08dbd4b13a66dddeb3a7d96adf5dd70d54" }, { "alg" : "SHA3-384", - "content" : "22dfb21741aef07351a10123e1531db56cac4b2a158fdcf27d6ebc937b9e23169926741c27b9dcec2a29acc866549f38" + "content" : "8946c3ef57726352db0621b9f604c88b5065901285f547173d708b48420f3586c04f84d0dd6a86159e8b494d50561361" }, { "alg" : "SHA3-256", - "content" : "3a97502a187ede8286a82c46af76cc8088e6b75de7f971a03ce0845ee5163ca6" + "content" : "6ab0c8554953cd7d42a9ca03659c8fb8a79be8979084847aea619044ea8dba35" }, { "alg" : "SHA3-512", - "content" : "9e814868255af14978947519b640d362f41bfddda6c9e47caf07e31403c2b0a64776e521d77b7df56a8970f173a509ec01e667b0863b11738b45ab6fadddfff1" + "content" : "e8db6667d9b300c728b0ea4e693f09a49283e27362d123a17e860188b4f03d2c34f57b62ab714ead1202820748c28bae9af4cbe6c43876877573f173e27bdd10" } ], "licenses" : [ @@ -280,85 +263,60 @@ } } ], - "purl" : "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.2?type=jar", + "purl" : "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.2.1?type=jar", "modified" : false, "type" : "library", - "bom-ref" : "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.2?type=jar" + "bom-ref" : "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.2.1?type=jar" }, { - "publisher" : "JUnit", - "group" : "junit", - "name" : "junit", - "version" : "4.13.1", - "description" : "JUnit is a unit testing framework for Java, created by Erich Gamma and Kent Beck.", + "group" : "com.google.errorprone", + "name" : "error_prone_annotations", + "version" : "2.18.0", "hashes" : [ { "alg" : "MD5", - "content" : "83d91f209ddcb104776fa41c448c7ee2" + "content" : "64145d0e7fee5a69ed7b84cf402de998" }, { "alg" : "SHA-1", - "content" : "cdd00374f1fee76b11e2a9d127405aa3f6be5b6a" + "content" : "89b684257096f548fa39a7df9fdaa409d4d4df91" }, { "alg" : "SHA-256", - "content" : "c30719db974d6452793fe191b3638a5777005485bae145924044530ffa5f6122" + "content" : "9e6814cb71816988a4fd1b07a993a8f21bb7058d522c162b1de849e19bea54ae" }, { "alg" : "SHA-512", - "content" : "29769fb462c7db2fcca6de3a24b445ae252a7570950f9a2163e14c478f854e47056444d90b2d40f4cf4e3f37c03faacf694c2db12763e173c44362af50176b1f" + "content" : "3cea86be94bb8ae40d21ad4bf7d7f6b2233e89593b7b741ad84c78840cd3837bb5136f52e62fe9ae0953d7b190c46ad3edc102dfa97b4c7ea472a80206bf5db7" }, { "alg" : "SHA-384", - "content" : "f98da9852bdc5fc022399a85c1fa234ba80d3bf8f492034971175f70464cd9f2d08d65954f92f33ae250050d9f5ae160" + "content" : "7622eb33f83f03ab32b710b36c2fe836e24c5318f65fb8c0631a99507ca3ae65c2df8e33b63a5ce853b9cab6d9cb32e5" }, { "alg" : "SHA3-384", - "content" : "79a11e53c134bf2a6fcffd64b1371bacdcbda3eff96094970a5123fb9eaca195044313a647ed7bfa21c0ef9f36994bd2" + "content" : "1ea52a5ce2a9ee1a960dc2a1bbe4b009d4d6a4448498e4cd76401605fa877662911e8c93b2b8bfda57bedc56c83f10a0" }, { "alg" : "SHA3-256", - "content" : "2c44fd3ad2e0e1f2f5ce27f9efd357cecdeb38d074ac8bb23fbd7be683c53e99" + "content" : "ed53f4295da75753267f241315352c4a39e60796f04e1c0c12d29c3a38be48ed" }, { "alg" : "SHA3-512", - "content" : "c34310659381936cf3f16a58f90372a2a3829e020889a7cab118127e6c96e5dc120f350a89d56abfffbfe1862aca51e8e419f48429fb8e5ea3a54f0b3ef809c2" + "content" : "8266b313bd4e1170daf60642e838841370d99bc24b2a1f91825ca22037a6a30ff15cc76069f8e8770f1dc12772c277ee1320de67e815041697d93d6d7ba884fb" } ], "licenses" : [ { "license" : { - "id" : "EPL-1.0", - "url" : "http://www.eclipse.org/legal/epl-v10.html" + "id" : "Apache-2.0" } } ], - "purl" : "pkg:maven/junit/junit@4.13.1?type=jar", + "purl" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar", "modified" : false, - "externalReferences" : [ - { - "type" : "website", - "url" : "http://www.junit.org" - }, - { - "type" : "build-system", - "url" : "https://travis-ci.org/junit-team/junit4" - }, - { - "type" : "distribution", - "url" : "https://github.com/junit-team/junit4/wiki/Download-and-Install" - }, - { - "type" : "issue-tracker", - "url" : "https://github.com/junit-team/junit4/issues" - }, - { - "type" : "vcs", - "url" : "https://github.com/junit-team/junit4" - } - ], "type" : "library", - "bom-ref" : "pkg:maven/junit/junit@4.13.1?type=jar" + "bom-ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar" }, { "group" : "com.google.j2objc", @@ -412,93 +370,93 @@ "bom-ref" : "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar" }, { - "group" : "org.hamcrest", - "name" : "hamcrest-core", - "version" : "1.3", - "description" : "This is the core API of hamcrest matcher framework to be used by third-party framework providers. This includes the a foundation set of matcher implementations for common operations.", + "group" : "org.apache.httpcomponents.core5", + "name" : "httpcore5-h2", + "version" : "5.2", + "description" : "Apache HttpComponents HTTP/2 Core Components", "hashes" : [ { "alg" : "MD5", - "content" : "6393363b47ddcbba82321110c3e07519" + "content" : "272112133e0dd0559efdd8f5e615a344" }, { "alg" : "SHA-1", - "content" : "42a25dc3219429f0e5d060061f71acb49bf010a0" + "content" : "698bd8c759ccc7fd7398f3179ff45d0e5a7ccc16" }, { "alg" : "SHA-256", - "content" : "66fdef91e9739348df7a096aa384a5685f4e875584cce89386a7a47251c4d8e9" + "content" : "5a087fb8c619979d492a83546f351ddadf32b28cc6a32923229f3fc777171578" }, { "alg" : "SHA-512", - "content" : "e237ae735aac4fa5a7253ec693191f42ef7ddce384c11d29fbf605981c0be077d086757409acad53cb5b9e53d86a07cc428d459ff0f5b00d32a8cbbca390be49" + "content" : "3c8ebdbe931d014e390a2b42aeae1ec3ae0def07c54a0c18927d0db1afed978fd9730455602c7692393bba029b07bdd43356a5b779f5d79b285d9e36d0c448d1" }, { "alg" : "SHA-384", - "content" : "4b5297d2a12cc32b824153afc83f1ba9f1869ca288330f0a2f759659d09e4c420eb6ba4a1efbfa0657b625edd41293d5" + "content" : "a1ab74afe0b503a3cf8eb3b060b6696a174aca2b55d728add196d46aaa5c9dce0d81de4e26e2e44482fbeb0cad197f63" }, { "alg" : "SHA3-384", - "content" : "b14d34985c0a78cf0ba19b5a18bffd403e08adcb2afde228ddef6e16121c7046dbebf58c04d3419311c4496c48aa93be" + "content" : "13fd21b5aaab5f9fc0d8ecbba20196a02dade84e992c4a686ef5c9a98c3366674d201e42f8555cef7042b1ba6d4ad256" }, { "alg" : "SHA3-256", - "content" : "f679af77deedf69b3c3066f7916583848c6fd32a950f9c0b0e2ef1da121717ba" + "content" : "62e29bad6d6c936fba13033ddc64153accd59dc964ed9f3dd7c1bd14212b834d" }, { "alg" : "SHA3-512", - "content" : "bca821931e438a1977b7b4356b5f8cebf485634f82159d505c48267c34e6a0f4fde9c2917331365f66dc0e52e2ca3a2db5256863584110c27ecebefc28741f63" + "content" : "3c891ebf18f05498d732eef4aacf607e0e526bb5d6a821e795601896d80dbf5244a36674f9688bdceff7f8965b8e893c88cc9deb662b7ac206b2c32b2b796e32" } ], "licenses" : [ { "license" : { - "id" : "BSD-3-Clause" + "id" : "Apache-2.0" } } ], - "purl" : "pkg:maven/org.hamcrest/hamcrest-core@1.3?type=jar", + "purl" : "pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.2?type=jar", "modified" : false, "type" : "library", - "bom-ref" : "pkg:maven/org.hamcrest/hamcrest-core@1.3?type=jar" + "bom-ref" : "pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.2?type=jar" }, { - "group" : "org.apache.commons", - "name" : "commons-text", - "version" : "1.10.0", - "description" : "Apache Commons Text is a library focused on algorithms working on strings.", + "group" : "com.google.guava", + "name" : "guava", + "version" : "32.0.1-jre", + "description" : "Guava is a suite of core and expanded libraries that include utility classes, Google's collections, I/O classes, and much more.", "hashes" : [ { "alg" : "MD5", - "content" : "4afc9bfa2d31dbf7330c98fcc954b892" + "content" : "6951895e804b36322214c95917e598d4" }, { "alg" : "SHA-1", - "content" : "3363381aef8cef2dbc1023b3e3a9433b08b64e01" + "content" : "6e5d51a72d142f2d40a57dfb897188b36a95b489" }, { "alg" : "SHA-256", - "content" : "770cd903fa7b604d1f7ef7ba17f84108667294b2b478be8ed1af3bffb4ae0018" + "content" : "bd7fa227591fb8509677d0d1122cf95158f3b8a9f45653f58281d879f6dc48c5" }, { "alg" : "SHA-512", - "content" : "afd836a1094449e0a791fee67363666c47b6d24acff353a5089b837b332c0f4af89565c354682521e37062d20e6b52d70c77bb4f24cca9b9532c274fc708a831" + "content" : "5dbe7a697511cfbe44f3ffb954e32e997677ecc61f03bb7bb374f1b8fa4a931a95cd9d1f5288eb5d42e2aa380e3241b35059786c07edc48e5aa67c30cddad8a5" }, { "alg" : "SHA-384", - "content" : "06c56e6e513dd77cf10d0da46cdea08c34e220e81fa024735b668c6650df4234e564fe865ff5cafea963f56b1e8ffd4a" + "content" : "abad4556e073fb38062c636b6599ceed992302c7d98150e3842d32ce92f6aac7d630633c56efa581523d591361fcf898" }, { "alg" : "SHA3-384", - "content" : "f09065ed066c25debf8c78cbb0bcc738e1ea283302ec992dcfb649acb90091cff879465c65a162e94534d454e3b4e9bb" + "content" : "c7b02d77e04c567e8870674f71a60141e83ca9e5e9180138450ede78ad7f2be8b6636c514096e15ba2921c2889427852" }, { "alg" : "SHA3-256", - "content" : "0b59c567164bb755f2353b78ba66744000a8c4b35e1df05255b080a21c3a3dd5" + "content" : "17f18d8631c9bff9234c214522ce89eb1feef27a4dfe990760d4943ad3de710d" }, { "alg" : "SHA3-512", - "content" : "f0fbce02a862b70f472a27d0722c54ac111ca2eb94584b8b0b73d1926aec26047cd92542ad0b3cf980a6825077587f41b194aa93d6f6350d1b87e59e8df1be7c" + "content" : "7cf7847812b47cc232ef3c27719457dd19610b3e3bb25c1be640821a3a2be67781047f41e34491b5c8ed68010bbb1d53c5f7706633f3a3f44f3f3133bb7635ec" } ], "licenses" : [ @@ -508,58 +466,48 @@ } } ], - "purl" : "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar", + "purl" : "pkg:maven/com.google.guava/guava@32.0.1-jre?type=jar", "modified" : false, - "externalReferences" : [ - { - "type" : "issue-tracker", - "url" : "https://issues.apache.org/jira/browse/TEXT" - }, - { - "type" : "vcs", - "url" : "https://gitbox.apache.org/repos/asf?p=commons-text.git" - } - ], "type" : "library", - "bom-ref" : "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar" + "bom-ref" : "pkg:maven/com.google.guava/guava@32.0.1-jre?type=jar" }, { - "group" : "com.googlecode.owasp-java-html-sanitizer", - "name" : "owasp-java-html-sanitizer", - "version" : "20211018.2", - "description" : "Takes third-party HTML and produces HTML that is safe to embed in your web application. Fast and easy to configure.", + "group" : "org.apache.pdfbox", + "name" : "pdfbox", + "version" : "2.0.30", + "description" : "The Apache PDFBox library is an open source Java tool for working with PDF documents.", "hashes" : [ { "alg" : "MD5", - "content" : "5b0008f2b94e1d3100de8d3cdcb670cb" + "content" : "da9a5490ecf28832ee6d003f9bcd95bd" }, { "alg" : "SHA-1", - "content" : "a3226c13cf72633122e94810a53e60529dae2b80" + "content" : "730753a91f7f2c574eb09a8af7288065d1e551bd" }, { "alg" : "SHA-256", - "content" : "48234cd74e35d91a31a683820a35b5b6d11b55527f32a5b162c6757408b95d7a" + "content" : "abb468d07abe76e34efb3337d1cfd48e365241623320e277e8341ce3cd670760" }, { "alg" : "SHA-512", - "content" : "2aa772e369e93ae10fff441e063f0439ab36d87803dfcd76b492dbe61848c2b976649a921b9518c6dff9e8751dc9bff0802e1ef793d8cdb232f8e0da77e34732" + "content" : "3727ede4a890c7c5c23e048fa037e013e8a3c85fcbe014e239c8c4dc7044a45b1143c4d773973f4f78032fb98d427486dd38f79f22dd6fb62dd713fee82e754f" }, { "alg" : "SHA-384", - "content" : "0caedafcf42e8a2e6a7a10665f48c9ae5cdbb586bbd5337bd63600a91362ec329c12558ce4d967f42ea7d7c83769e69f" + "content" : "d191b697ea322c23fe8a142fae04b8d84eb67d9852af5f7d89caf85db4c6573eafc830093f51edaa1622e6330090e860" }, { "alg" : "SHA3-384", - "content" : "aae645eb112a6d5bce213a766a6cf76df828545df07438340b007e9eb8db546e62b2a01d94385daea86bfb7b1952c34a" + "content" : "ba9f6d207a618edf1f9d496731538f2e774ce1238fb8252665cb1efedd4d17c85e319663cf2b8c9bd415ee17ea926bda" }, { "alg" : "SHA3-256", - "content" : "c805dca696ff5b10f8c21fca1e99c0771d3778507888ab7da4aa939a6c770e61" + "content" : "9b62e73a41d0f73b805918bbc2c9da4c60e86d454366bf9ae56917264fc8d085" }, { "alg" : "SHA3-512", - "content" : "851caf550ca3f5cf9ff38c0961d18c60e752df41b6a8a28a8c856ea8e421cc9de7090155f688cffc889b576aa4ff0558b1138b1810ed25b135c1f68509c8be7f" + "content" : "41f714619824293519067fd3ba3e7295595f447778e60b21209bd09a46222af0d8492d7cc6a72e1d16012d727402c9e3a1767959be788c5e3a49ad537f3bf3ad" } ], "licenses" : [ @@ -569,48 +517,48 @@ } } ], - "purl" : "pkg:maven/com.googlecode.owasp-java-html-sanitizer/owasp-java-html-sanitizer@20211018.2?type=jar", + "purl" : "pkg:maven/org.apache.pdfbox/pdfbox@2.0.30?type=jar", "modified" : false, "type" : "library", - "bom-ref" : "pkg:maven/com.googlecode.owasp-java-html-sanitizer/owasp-java-html-sanitizer@20211018.2?type=jar" + "bom-ref" : "pkg:maven/org.apache.pdfbox/pdfbox@2.0.30?type=jar" }, { - "group" : "org.apache.pdfbox", - "name" : "pdfbox", - "version" : "2.0.30", - "description" : "The Apache PDFBox library is an open source Java tool for working with PDF documents.", + "group" : "com.google.code.findbugs", + "name" : "jsr305", + "version" : "3.0.2", + "description" : "JSR305 Annotations for Findbugs", "hashes" : [ { "alg" : "MD5", - "content" : "da9a5490ecf28832ee6d003f9bcd95bd" + "content" : "dd83accb899363c32b07d7a1b2e4ce40" }, { "alg" : "SHA-1", - "content" : "730753a91f7f2c574eb09a8af7288065d1e551bd" + "content" : "25ea2e8b0c338a877313bd4672d3fe056ea78f0d" }, { "alg" : "SHA-256", - "content" : "abb468d07abe76e34efb3337d1cfd48e365241623320e277e8341ce3cd670760" + "content" : "766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7" }, { "alg" : "SHA-512", - "content" : "3727ede4a890c7c5c23e048fa037e013e8a3c85fcbe014e239c8c4dc7044a45b1143c4d773973f4f78032fb98d427486dd38f79f22dd6fb62dd713fee82e754f" + "content" : "bb09db62919a50fa5b55906013be6ca4fc7acb2e87455fac5eaf9ede2e41ce8bbafc0e5a385a561264ea4cd71bbbd3ef5a45e02d63277a201d06a0ae1636f804" }, { "alg" : "SHA-384", - "content" : "d191b697ea322c23fe8a142fae04b8d84eb67d9852af5f7d89caf85db4c6573eafc830093f51edaa1622e6330090e860" + "content" : "ca0b169d3eb2d0922dc031133a021f861a043bb3e405a88728215fd6ff00fa52fdc7347842dcc2031472e3726164bdc4" }, { "alg" : "SHA3-384", - "content" : "ba9f6d207a618edf1f9d496731538f2e774ce1238fb8252665cb1efedd4d17c85e319663cf2b8c9bd415ee17ea926bda" + "content" : "9903fd7505218999f8262efedb3d935d64bcef84aae781064ab5e1b24755466b269517cada562fa140cd1d417ede57a1" }, { "alg" : "SHA3-256", - "content" : "9b62e73a41d0f73b805918bbc2c9da4c60e86d454366bf9ae56917264fc8d085" + "content" : "223fda9a89a461afaae73b177a2dc20ed4a90f2f8757f5c65f3241b0510f00ff" }, { "alg" : "SHA3-512", - "content" : "41f714619824293519067fd3ba3e7295595f447778e60b21209bd09a46222af0d8492d7cc6a72e1d16012d727402c9e3a1767959be788c5e3a49ad537f3bf3ad" + "content" : "3996b5af57a5d5c6a0cd62b11773360fb051dd86a2ba968476806a2a5d32049b82d69a24a3c694e8fe4d735be6a28e41000cc500cc2a9fb577e058045855d2d6" } ], "licenses" : [ @@ -620,48 +568,54 @@ } } ], - "purl" : "pkg:maven/org.apache.pdfbox/pdfbox@2.0.30?type=jar", + "purl" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", "modified" : false, + "externalReferences" : [ + { + "type" : "vcs", + "url" : "https://code.google.com/p/jsr-305/" + } + ], "type" : "library", - "bom-ref" : "pkg:maven/org.apache.pdfbox/pdfbox@2.0.30?type=jar" + "bom-ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar" }, { - "group" : "com.google.code.findbugs", - "name" : "jsr305", - "version" : "3.0.2", - "description" : "JSR305 Annotations for Findbugs", + "group" : "org.apache.commons", + "name" : "commons-lang3", + "version" : "3.12.0", + "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.", "hashes" : [ { "alg" : "MD5", - "content" : "dd83accb899363c32b07d7a1b2e4ce40" + "content" : "19fe50567358922bdad277959ea69545" }, { "alg" : "SHA-1", - "content" : "25ea2e8b0c338a877313bd4672d3fe056ea78f0d" + "content" : "c6842c86792ff03b9f1d1fe2aab8dc23aa6c6f0e" }, { "alg" : "SHA-256", - "content" : "766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7" + "content" : "d919d904486c037f8d193412da0c92e22a9fa24230b9d67a57855c5c31c7e94e" }, { "alg" : "SHA-512", - "content" : "bb09db62919a50fa5b55906013be6ca4fc7acb2e87455fac5eaf9ede2e41ce8bbafc0e5a385a561264ea4cd71bbbd3ef5a45e02d63277a201d06a0ae1636f804" + "content" : "fbdbc0943cb3498b0148e86a39b773f97c8e6013740f72dbc727faeabea402073e2cc8c4d68198e5fc6b08a13b7700236292e99d4785f2c9989f2e5fac11fd81" }, { "alg" : "SHA-384", - "content" : "ca0b169d3eb2d0922dc031133a021f861a043bb3e405a88728215fd6ff00fa52fdc7347842dcc2031472e3726164bdc4" + "content" : "c34b8a0e0eba2168ad56fedeb7a1d710b6f1d3f1ce6aae99a4e0247bd120efbbadc8dcb2f731045b8a16e3efd30604dc" }, { "alg" : "SHA3-384", - "content" : "9903fd7505218999f8262efedb3d935d64bcef84aae781064ab5e1b24755466b269517cada562fa140cd1d417ede57a1" + "content" : "8ad6ebe7754bf0caa8cda7e59c0e95360d76e06a7ad6aeec5637985519dbd1dd06e7eed04711039f36ec4c49de280def" }, { "alg" : "SHA3-256", - "content" : "223fda9a89a461afaae73b177a2dc20ed4a90f2f8757f5c65f3241b0510f00ff" + "content" : "18ef639b2aeeb5aedffb18dbf20c79f33e300d99fb31b131689639cc470e6e4c" }, { "alg" : "SHA3-512", - "content" : "3996b5af57a5d5c6a0cd62b11773360fb051dd86a2ba968476806a2a5d32049b82d69a24a3c694e8fe4d735be6a28e41000cc500cc2a9fb577e058045855d2d6" + "content" : "fbea96114dcf4f31cfaaa99987be756ddda3a6c74f8c835461997df794d54b92da1f60fe5c3f1f2a43cb8c5f5db7f4048bef77c70993673c7a93f3660fffc8da" } ], "licenses" : [ @@ -671,54 +625,58 @@ } } ], - "purl" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", + "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar", "modified" : false, "externalReferences" : [ + { + "type" : "issue-tracker", + "url" : "https://issues.apache.org/jira/browse/LANG" + }, { "type" : "vcs", - "url" : "https://code.google.com/p/jsr-305/" + "url" : "https://gitbox.apache.org/repos/asf?p=commons-lang.git" } ], "type" : "library", - "bom-ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar" + "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar" }, { - "group" : "com.google.guava", - "name" : "failureaccess", - "version" : "1.0.1", - "description" : "Contains com.google.common.util.concurrent.internal.InternalFutureFailureAccess and InternalFutures. Most users will never need to use this artifact. Its classes is conceptually a part of Guava, but they're in this separate artifact so that Android libraries can use them without pulling in all of Guava (just as they can use ListenableFuture by depending on the listenablefuture artifact).", + "group" : "org.apache.pdfbox", + "name" : "fontbox", + "version" : "2.0.30", + "description" : "The Apache FontBox library is an open source Java tool to obtain low level information from font files. FontBox is a subproject of Apache PDFBox.", "hashes" : [ { "alg" : "MD5", - "content" : "091883993ef5bfa91da01dcc8fc52236" + "content" : "3a7b597c9dbd56e18455e6efca52cbb3" }, { "alg" : "SHA-1", - "content" : "1dcf1de382a0bf95a3d8b0849546c88bac1292c9" + "content" : "555e5d59a4d83c95c4330f018a6c32861880b6df" }, { "alg" : "SHA-256", - "content" : "a171ee4c734dd2da837e4b16be9df4661afab72a41adaf31eb84dfdaf936ca26" + "content" : "aae7518f9c17d347531e63b22a46de582cb78f7e45d079a78a79dc9bdb23f8ba" }, { "alg" : "SHA-512", - "content" : "f8d59b808d6ba617252305b66d5590937da9b2b843d492d06b8d0b1b1f397e39f360d5817707797b979a5bf20bf21987b35333e7a15c44ed7401fea2d2119cae" + "content" : "61eb46fee25826a8b0750fbe3823504e043f7e809f6ac3d144a1ba773195de29ebcffe30faee1bc9d2db50c94c45ebf65b67eb19e3358dbabf7878d36f133396" }, { "alg" : "SHA-384", - "content" : "67659dbd9647ec303d7f15128dc9dba19b98fd8d74758ee3b602451e32c855e236ccaafe08edf4bbfa245f981268440f" + "content" : "ca4ccf8281e1b481f83b8e156a3c2cfab0590f3d0a0a19f9cf80997966170affb01da293bacb880ae70ff8e6f54deb0e" }, { "alg" : "SHA3-384", - "content" : "1460875f0331c5fa3791772a6a322a7db180261bc2adacf7271df1fbf3b088a587a755a604c039982cb593c5cfc1f101" + "content" : "184a9a72f221f34fb98b9d5e132b74b18bab569b8f6e86a5e1e7b88e5d6f82095607809e2cd98620f43cdbd3efd0b277" }, { "alg" : "SHA3-256", - "content" : "ea86406e75fcd93eafe3cde1b3135ba485f1bb9b75fed98894a0bf1f0aee04f0" + "content" : "1c1333b59673e8caf3db1fc6453ce9c799b133faaee9017c2860a03257107325" }, { "alg" : "SHA3-512", - "content" : "52ac0f487ab5dd27c9f2e54fd1d84c7a620cae9d49be4072aa2b11501787bf4391ddaa13d02eccdf19e8eea46aecbea5f6064b26777c1b836108a280652e04ac" + "content" : "4b018c517e51185debe39adc9237728b6a189cbfc8053bc8401fa2c115f2a40c1e242b5ce1ebf0339480bc332bd4681e9a3dcbb1c4c5bc8d7fca16f202e3ef5b" } ], "licenses" : [ @@ -728,10 +686,10 @@ } } ], - "purl" : "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar", + "purl" : "pkg:maven/org.apache.pdfbox/fontbox@2.0.30?type=jar", "modified" : false, "type" : "library", - "bom-ref" : "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar" + "bom-ref" : "pkg:maven/org.apache.pdfbox/fontbox@2.0.30?type=jar" }, { "group" : "org.slf4j", @@ -787,41 +745,41 @@ }, { "group" : "com.google.guava", - "name" : "guava", - "version" : "32.0.1-jre", - "description" : "Guava is a suite of core and expanded libraries that include utility classes, Google's collections, I/O classes, and much more.", + "name" : "listenablefuture", + "version" : "9999.0-empty-to-avoid-conflict-with-guava", + "description" : "An empty artifact that Guava depends on to signal that it is providing ListenableFuture -- but is also available in a second \"version\" that contains com.google.common.util.concurrent.ListenableFuture class, without any other Guava classes. The idea is: - If users want only ListenableFuture, they depend on listenablefuture-1.0. - If users want all of Guava, they depend on guava, which, as of Guava 27.0, depends on listenablefuture-9999.0-empty-to-avoid-conflict-with-guava. The 9999.0-... version number is enough for some build systems (notably, Gradle) to select that empty artifact over the \"real\" listenablefuture-1.0 -- avoiding a conflict with the copy of ListenableFuture in guava itself. If users are using an older version of Guava or a build system other than Gradle, they may see class conflicts. If so, they can solve them by manually excluding the listenablefuture artifact or manually forcing their build systems to use 9999.0-....", "hashes" : [ { "alg" : "MD5", - "content" : "6951895e804b36322214c95917e598d4" + "content" : "d094c22570d65e132c19cea5d352e381" }, { "alg" : "SHA-1", - "content" : "6e5d51a72d142f2d40a57dfb897188b36a95b489" + "content" : "b421526c5f297295adef1c886e5246c39d4ac629" }, { "alg" : "SHA-256", - "content" : "bd7fa227591fb8509677d0d1122cf95158f3b8a9f45653f58281d879f6dc48c5" + "content" : "b372a037d4230aa57fbeffdef30fd6123f9c0c2db85d0aced00c91b974f33f99" }, { "alg" : "SHA-512", - "content" : "5dbe7a697511cfbe44f3ffb954e32e997677ecc61f03bb7bb374f1b8fa4a931a95cd9d1f5288eb5d42e2aa380e3241b35059786c07edc48e5aa67c30cddad8a5" + "content" : "c5987a979174cbacae2e78b319f080420cc71bcdbcf7893745731eeb93c23ed13bff8d4599441f373f3a246023d33df03e882de3015ee932a74a774afdd0782f" }, { "alg" : "SHA-384", - "content" : "abad4556e073fb38062c636b6599ceed992302c7d98150e3842d32ce92f6aac7d630633c56efa581523d591361fcf898" + "content" : "caff9b74079f95832ca7f6029346b34b606051cc8c5a4389fac263511d277ada0c55f28b0d43011055b268c6eb7184d5" }, { "alg" : "SHA3-384", - "content" : "c7b02d77e04c567e8870674f71a60141e83ca9e5e9180138450ede78ad7f2be8b6636c514096e15ba2921c2889427852" + "content" : "e939f08df0545847ea0d3e4b04a114b08499ad069ba8ec9461d1779f87a56e0c37273630a0f4c14e78c348d3ac7eb97f" }, { "alg" : "SHA3-256", - "content" : "17f18d8631c9bff9234c214522ce89eb1feef27a4dfe990760d4943ad3de710d" + "content" : "1f0a8b1177773b3a8ace839df5eed63cbf56b24a38714898a6e4ed065c42559f" }, { "alg" : "SHA3-512", - "content" : "7cf7847812b47cc232ef3c27719457dd19610b3e3bb25c1be640821a3a2be67781047f41e34491b5c8ed68010bbb1d53c5f7706633f3a3f44f3f3133bb7635ec" + "content" : "6b495ecc2a18b17365cb08d124a0da47f04bcdde81927b5245edf3edd8e498c3c3fb92ce6a4127f660bac851bb1d3e4510e5c20d03be47ce99dc296d360db285" } ], "licenses" : [ @@ -831,226 +789,258 @@ } } ], - "purl" : "pkg:maven/com.google.guava/guava@32.0.1-jre?type=jar", + "purl" : "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar", "modified" : false, "type" : "library", - "bom-ref" : "pkg:maven/com.google.guava/guava@32.0.1-jre?type=jar" + "bom-ref" : "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar" }, { - "group" : "commons-io", - "name" : "commons-io", - "version" : "2.11.0", - "description" : "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.", + "group" : "org.hamcrest", + "name" : "hamcrest-core", + "version" : "1.3", + "description" : "This is the core API of hamcrest matcher framework to be used by third-party framework providers. This includes the a foundation set of matcher implementations for common operations.", "hashes" : [ { "alg" : "MD5", - "content" : "3b4b7ccfaeceeac240b804839ee1a1ca" + "content" : "6393363b47ddcbba82321110c3e07519" }, { "alg" : "SHA-1", - "content" : "a2503f302b11ebde7ebc3df41daebe0e4eea3689" + "content" : "42a25dc3219429f0e5d060061f71acb49bf010a0" }, { "alg" : "SHA-256", - "content" : "961b2f6d87dbacc5d54abf45ab7a6e2495f89b75598962d8c723cea9bc210908" + "content" : "66fdef91e9739348df7a096aa384a5685f4e875584cce89386a7a47251c4d8e9" }, { "alg" : "SHA-512", - "content" : "5bd78eed456ede30119319c5bed8e3e4c443b6fd7bdb3a7a5686647bd83094d0c3e2832a7575cfb60e4ef25f08106b93476939d3adcfecf5533cc030b3039e10" + "content" : "e237ae735aac4fa5a7253ec693191f42ef7ddce384c11d29fbf605981c0be077d086757409acad53cb5b9e53d86a07cc428d459ff0f5b00d32a8cbbca390be49" }, { "alg" : "SHA-384", - "content" : "114f1e324d90ad887c177876d410f5787a8e8da6c48d4b2862d365802c0efded3a88cb24046976bf6276cadad3712f0f" + "content" : "4b5297d2a12cc32b824153afc83f1ba9f1869ca288330f0a2f759659d09e4c420eb6ba4a1efbfa0657b625edd41293d5" }, { "alg" : "SHA3-384", - "content" : "80288c03ad4d80d69f91d056ffc5570d49a9c76bf54ad2dff0121ecde26a560df76d05156f281f5c6db2a38ff07a873d" + "content" : "b14d34985c0a78cf0ba19b5a18bffd403e08adcb2afde228ddef6e16121c7046dbebf58c04d3419311c4496c48aa93be" }, { "alg" : "SHA3-256", - "content" : "5adfb5ccaf5f21a549422f426118a9542673926fcd18c68390cf813e791dcf6c" + "content" : "f679af77deedf69b3c3066f7916583848c6fd32a950f9c0b0e2ef1da121717ba" }, { "alg" : "SHA3-512", - "content" : "7573f47f0babb53cefdc7c2309a0b982d800139064537b0797da442853d081010ad7c3c74a500598a0f800639a5d540eca21963ea652c68613907059bd4278c2" + "content" : "bca821931e438a1977b7b4356b5f8cebf485634f82159d505c48267c34e6a0f4fde9c2917331365f66dc0e52e2ca3a2db5256863584110c27ecebefc28741f63" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0" + "id" : "BSD-3-Clause" } } ], - "purl" : "pkg:maven/commons-io/commons-io@2.11.0?type=jar", + "purl" : "pkg:maven/org.hamcrest/hamcrest-core@1.3?type=jar", "modified" : false, - "externalReferences" : [ - { - "type" : "issue-tracker", - "url" : "https://issues.apache.org/jira/browse/IO" - }, - { - "type" : "vcs", - "url" : "https://gitbox.apache.org/repos/asf?p=commons-io.git" - } - ], "type" : "library", - "bom-ref" : "pkg:maven/commons-io/commons-io@2.11.0?type=jar" + "bom-ref" : "pkg:maven/org.hamcrest/hamcrest-core@1.3?type=jar" }, { - "group" : "org.apache.commons", - "name" : "commons-lang3", - "version" : "3.12.0", - "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.", + "group" : "org.checkerframework", + "name" : "checker-qual", + "version" : "3.33.0", + "description" : "checker-qual contains annotations (type qualifiers) that a programmer writes to specify Java code for type-checking by the Checker Framework.", "hashes" : [ { "alg" : "MD5", - "content" : "19fe50567358922bdad277959ea69545" + "content" : "fc9418b779d9d57dcd52197006cbdb9b" }, { "alg" : "SHA-1", - "content" : "c6842c86792ff03b9f1d1fe2aab8dc23aa6c6f0e" + "content" : "de2b60b62da487644fc11f734e73c8b0b431238f" }, { "alg" : "SHA-256", - "content" : "d919d904486c037f8d193412da0c92e22a9fa24230b9d67a57855c5c31c7e94e" + "content" : "e316255bbfcd9fe50d165314b85abb2b33cb2a66a93c491db648e498a82c2de1" }, { "alg" : "SHA-512", - "content" : "fbdbc0943cb3498b0148e86a39b773f97c8e6013740f72dbc727faeabea402073e2cc8c4d68198e5fc6b08a13b7700236292e99d4785f2c9989f2e5fac11fd81" + "content" : "049c446677b7b386f3fb501bf65e032bdf2b1b29a3f545848035fff2b683cd275380cf302e30eea641af7f0801f779bcda3d82a71d928e4176f564f796640a64" }, { "alg" : "SHA-384", - "content" : "c34b8a0e0eba2168ad56fedeb7a1d710b6f1d3f1ce6aae99a4e0247bd120efbbadc8dcb2f731045b8a16e3efd30604dc" + "content" : "ddf7a0f70421d1ed75e93c0a30434a4862c3905e433223e19861323cf0994e843392b746003040f10a7db6fc960b8aa6" }, { "alg" : "SHA3-384", - "content" : "8ad6ebe7754bf0caa8cda7e59c0e95360d76e06a7ad6aeec5637985519dbd1dd06e7eed04711039f36ec4c49de280def" + "content" : "edf079834fdd23317851318504b2fcc10b055cdb5cc4ada9c773d1b6c815ed6dd193c433d2b83103f070fd521021ff33" }, { "alg" : "SHA3-256", - "content" : "18ef639b2aeeb5aedffb18dbf20c79f33e300d99fb31b131689639cc470e6e4c" + "content" : "56244f45b03fc2a472b35489324e392e6001fac088d19f33629a87adb74a0575" }, { "alg" : "SHA3-512", - "content" : "fbea96114dcf4f31cfaaa99987be756ddda3a6c74f8c835461997df794d54b92da1f60fe5c3f1f2a43cb8c5f5db7f4048bef77c70993673c7a93f3660fffc8da" + "content" : "e0516c11fe613f258bf9ad39358a8d9fb7c8df57ff9aaca5d6d16055c196fac4ed3b4185f2501a3bdf7aeb1fe142693b1d788bdaa73366be1af15762bb3591a4" } ], "licenses" : [ { "license" : { - "id" : "Apache-2.0" + "id" : "MIT" } } ], - "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar", + "purl" : "pkg:maven/org.checkerframework/checker-qual@3.33.0?type=jar", "modified" : false, "externalReferences" : [ - { - "type" : "issue-tracker", - "url" : "https://issues.apache.org/jira/browse/LANG" - }, { "type" : "vcs", - "url" : "https://gitbox.apache.org/repos/asf?p=commons-lang.git" + "url" : "https://github.com/typetools/checker-framework.git" } ], "type" : "library", - "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar" + "bom-ref" : "pkg:maven/org.checkerframework/checker-qual@3.33.0?type=jar" }, { - "group" : "org.checkerframework", - "name" : "checker-qual", - "version" : "3.33.0", - "description" : "checker-qual contains annotations (type qualifiers) that a programmer writes to specify Java code for type-checking by the Checker Framework.", + "group" : "com.googlecode.owasp-java-html-sanitizer", + "name" : "owasp-java-html-sanitizer", + "version" : "20211018.2", + "description" : "Takes third-party HTML and produces HTML that is safe to embed in your web application. Fast and easy to configure.", "hashes" : [ { "alg" : "MD5", - "content" : "fc9418b779d9d57dcd52197006cbdb9b" + "content" : "5b0008f2b94e1d3100de8d3cdcb670cb" }, { "alg" : "SHA-1", - "content" : "de2b60b62da487644fc11f734e73c8b0b431238f" + "content" : "a3226c13cf72633122e94810a53e60529dae2b80" }, { "alg" : "SHA-256", - "content" : "e316255bbfcd9fe50d165314b85abb2b33cb2a66a93c491db648e498a82c2de1" + "content" : "48234cd74e35d91a31a683820a35b5b6d11b55527f32a5b162c6757408b95d7a" }, { "alg" : "SHA-512", - "content" : "049c446677b7b386f3fb501bf65e032bdf2b1b29a3f545848035fff2b683cd275380cf302e30eea641af7f0801f779bcda3d82a71d928e4176f564f796640a64" + "content" : "2aa772e369e93ae10fff441e063f0439ab36d87803dfcd76b492dbe61848c2b976649a921b9518c6dff9e8751dc9bff0802e1ef793d8cdb232f8e0da77e34732" }, { "alg" : "SHA-384", - "content" : "ddf7a0f70421d1ed75e93c0a30434a4862c3905e433223e19861323cf0994e843392b746003040f10a7db6fc960b8aa6" + "content" : "0caedafcf42e8a2e6a7a10665f48c9ae5cdbb586bbd5337bd63600a91362ec329c12558ce4d967f42ea7d7c83769e69f" }, { "alg" : "SHA3-384", - "content" : "edf079834fdd23317851318504b2fcc10b055cdb5cc4ada9c773d1b6c815ed6dd193c433d2b83103f070fd521021ff33" + "content" : "aae645eb112a6d5bce213a766a6cf76df828545df07438340b007e9eb8db546e62b2a01d94385daea86bfb7b1952c34a" }, { "alg" : "SHA3-256", - "content" : "56244f45b03fc2a472b35489324e392e6001fac088d19f33629a87adb74a0575" + "content" : "c805dca696ff5b10f8c21fca1e99c0771d3778507888ab7da4aa939a6c770e61" }, { "alg" : "SHA3-512", - "content" : "e0516c11fe613f258bf9ad39358a8d9fb7c8df57ff9aaca5d6d16055c196fac4ed3b4185f2501a3bdf7aeb1fe142693b1d788bdaa73366be1af15762bb3591a4" + "content" : "851caf550ca3f5cf9ff38c0961d18c60e752df41b6a8a28a8c856ea8e421cc9de7090155f688cffc889b576aa4ff0558b1138b1810ed25b135c1f68509c8be7f" } ], "licenses" : [ { "license" : { - "id" : "MIT" + "id" : "Apache-2.0" } } ], - "purl" : "pkg:maven/org.checkerframework/checker-qual@3.33.0?type=jar", + "purl" : "pkg:maven/com.googlecode.owasp-java-html-sanitizer/owasp-java-html-sanitizer@20211018.2?type=jar", "modified" : false, - "externalReferences" : [ + "type" : "library", + "bom-ref" : "pkg:maven/com.googlecode.owasp-java-html-sanitizer/owasp-java-html-sanitizer@20211018.2?type=jar" + }, + { + "group" : "com.google.guava", + "name" : "failureaccess", + "version" : "1.0.1", + "description" : "Contains com.google.common.util.concurrent.internal.InternalFutureFailureAccess and InternalFutures. Most users will never need to use this artifact. Its classes is conceptually a part of Guava, but they're in this separate artifact so that Android libraries can use them without pulling in all of Guava (just as they can use ListenableFuture by depending on the listenablefuture artifact).", + "hashes" : [ { - "type" : "vcs", - "url" : "https://github.com/typetools/checker-framework.git" + "alg" : "MD5", + "content" : "091883993ef5bfa91da01dcc8fc52236" + }, + { + "alg" : "SHA-1", + "content" : "1dcf1de382a0bf95a3d8b0849546c88bac1292c9" + }, + { + "alg" : "SHA-256", + "content" : "a171ee4c734dd2da837e4b16be9df4661afab72a41adaf31eb84dfdaf936ca26" + }, + { + "alg" : "SHA-512", + "content" : "f8d59b808d6ba617252305b66d5590937da9b2b843d492d06b8d0b1b1f397e39f360d5817707797b979a5bf20bf21987b35333e7a15c44ed7401fea2d2119cae" + }, + { + "alg" : "SHA-384", + "content" : "67659dbd9647ec303d7f15128dc9dba19b98fd8d74758ee3b602451e32c855e236ccaafe08edf4bbfa245f981268440f" + }, + { + "alg" : "SHA3-384", + "content" : "1460875f0331c5fa3791772a6a322a7db180261bc2adacf7271df1fbf3b088a587a755a604c039982cb593c5cfc1f101" + }, + { + "alg" : "SHA3-256", + "content" : "ea86406e75fcd93eafe3cde1b3135ba485f1bb9b75fed98894a0bf1f0aee04f0" + }, + { + "alg" : "SHA3-512", + "content" : "52ac0f487ab5dd27c9f2e54fd1d84c7a620cae9d49be4072aa2b11501787bf4391ddaa13d02eccdf19e8eea46aecbea5f6064b26777c1b836108a280652e04ac" + } + ], + "licenses" : [ + { + "license" : { + "id" : "Apache-2.0" + } } ], + "purl" : "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar", + "modified" : false, "type" : "library", - "bom-ref" : "pkg:maven/org.checkerframework/checker-qual@3.33.0?type=jar" + "bom-ref" : "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar" }, { - "group" : "com.google.errorprone", - "name" : "error_prone_annotations", - "version" : "2.18.0", + "group" : "org.apache.httpcomponents.core5", + "name" : "httpcore5", + "version" : "5.2", + "description" : "Apache HttpComponents HTTP/1.1 core components", "hashes" : [ { "alg" : "MD5", - "content" : "64145d0e7fee5a69ed7b84cf402de998" + "content" : "3a40241f9a99cf063f347dfb73c5c4e8" }, { "alg" : "SHA-1", - "content" : "89b684257096f548fa39a7df9fdaa409d4d4df91" + "content" : "ab7d251b8dfa3f2878f1eefbcca0e1fc0ebeba27" }, { "alg" : "SHA-256", - "content" : "9e6814cb71816988a4fd1b07a993a8f21bb7058d522c162b1de849e19bea54ae" + "content" : "293321cbf594d79ea8a0cb0214f75f146d17f088be17ad5ce11c2fe864df124c" }, { "alg" : "SHA-512", - "content" : "3cea86be94bb8ae40d21ad4bf7d7f6b2233e89593b7b741ad84c78840cd3837bb5136f52e62fe9ae0953d7b190c46ad3edc102dfa97b4c7ea472a80206bf5db7" + "content" : "214dcc370a8ca0c7fdb7c7afdea37a0bf1b9ba838aa3e074d64b0d9b950ebc7ff1dae87892fad0f44cc6d56828101d640584b45358ace20076f19a78aa503300" }, { "alg" : "SHA-384", - "content" : "7622eb33f83f03ab32b710b36c2fe836e24c5318f65fb8c0631a99507ca3ae65c2df8e33b63a5ce853b9cab6d9cb32e5" + "content" : "af7cbc6d6ba74d974665529431a57de332c69cf5bd5080368015de28e7a9f652c2daa777e78bec68350c95d168ec2280" }, { "alg" : "SHA3-384", - "content" : "1ea52a5ce2a9ee1a960dc2a1bbe4b009d4d6a4448498e4cd76401605fa877662911e8c93b2b8bfda57bedc56c83f10a0" + "content" : "22dfb21741aef07351a10123e1531db56cac4b2a158fdcf27d6ebc937b9e23169926741c27b9dcec2a29acc866549f38" }, { "alg" : "SHA3-256", - "content" : "ed53f4295da75753267f241315352c4a39e60796f04e1c0c12d29c3a38be48ed" + "content" : "3a97502a187ede8286a82c46af76cc8088e6b75de7f971a03ce0845ee5163ca6" }, { "alg" : "SHA3-512", - "content" : "8266b313bd4e1170daf60642e838841370d99bc24b2a1f91825ca22037a6a30ff15cc76069f8e8770f1dc12772c277ee1320de67e815041697d93d6d7ba884fb" + "content" : "9e814868255af14978947519b640d362f41bfddda6c9e47caf07e31403c2b0a64776e521d77b7df56a8970f173a509ec01e667b0863b11738b45ab6fadddfff1" } ], "licenses" : [ @@ -1060,48 +1050,48 @@ } } ], - "purl" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar", + "purl" : "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.2?type=jar", "modified" : false, "type" : "library", - "bom-ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0?type=jar" + "bom-ref" : "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.2?type=jar" }, { - "group" : "org.apache.pdfbox", - "name" : "fontbox", - "version" : "2.0.30", - "description" : "The Apache FontBox library is an open source Java tool to obtain low level information from font files. FontBox is a subproject of Apache PDFBox.", + "group" : "org.apache.commons", + "name" : "commons-text", + "version" : "1.10.0", + "description" : "Apache Commons Text is a library focused on algorithms working on strings.", "hashes" : [ { "alg" : "MD5", - "content" : "3a7b597c9dbd56e18455e6efca52cbb3" + "content" : "4afc9bfa2d31dbf7330c98fcc954b892" }, { "alg" : "SHA-1", - "content" : "555e5d59a4d83c95c4330f018a6c32861880b6df" + "content" : "3363381aef8cef2dbc1023b3e3a9433b08b64e01" }, { "alg" : "SHA-256", - "content" : "aae7518f9c17d347531e63b22a46de582cb78f7e45d079a78a79dc9bdb23f8ba" + "content" : "770cd903fa7b604d1f7ef7ba17f84108667294b2b478be8ed1af3bffb4ae0018" }, { "alg" : "SHA-512", - "content" : "61eb46fee25826a8b0750fbe3823504e043f7e809f6ac3d144a1ba773195de29ebcffe30faee1bc9d2db50c94c45ebf65b67eb19e3358dbabf7878d36f133396" + "content" : "afd836a1094449e0a791fee67363666c47b6d24acff353a5089b837b332c0f4af89565c354682521e37062d20e6b52d70c77bb4f24cca9b9532c274fc708a831" }, { "alg" : "SHA-384", - "content" : "ca4ccf8281e1b481f83b8e156a3c2cfab0590f3d0a0a19f9cf80997966170affb01da293bacb880ae70ff8e6f54deb0e" + "content" : "06c56e6e513dd77cf10d0da46cdea08c34e220e81fa024735b668c6650df4234e564fe865ff5cafea963f56b1e8ffd4a" }, { "alg" : "SHA3-384", - "content" : "184a9a72f221f34fb98b9d5e132b74b18bab569b8f6e86a5e1e7b88e5d6f82095607809e2cd98620f43cdbd3efd0b277" + "content" : "f09065ed066c25debf8c78cbb0bcc738e1ea283302ec992dcfb649acb90091cff879465c65a162e94534d454e3b4e9bb" }, { "alg" : "SHA3-256", - "content" : "1c1333b59673e8caf3db1fc6453ce9c799b133faaee9017c2860a03257107325" + "content" : "0b59c567164bb755f2353b78ba66744000a8c4b35e1df05255b080a21c3a3dd5" }, { "alg" : "SHA3-512", - "content" : "4b018c517e51185debe39adc9237728b6a189cbfc8053bc8401fa2c115f2a40c1e242b5ce1ebf0339480bc332bd4681e9a3dcbb1c4c5bc8d7fca16f202e3ef5b" + "content" : "f0fbce02a862b70f472a27d0722c54ac111ca2eb94584b8b0b73d1926aec26047cd92542ad0b3cf980a6825077587f41b194aa93d6f6350d1b87e59e8df1be7c" } ], "licenses" : [ @@ -1111,10 +1101,20 @@ } } ], - "purl" : "pkg:maven/org.apache.pdfbox/fontbox@2.0.30?type=jar", + "purl" : "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar", "modified" : false, + "externalReferences" : [ + { + "type" : "issue-tracker", + "url" : "https://issues.apache.org/jira/browse/TEXT" + }, + { + "type" : "vcs", + "url" : "https://gitbox.apache.org/repos/asf?p=commons-text.git" + } + ], "type" : "library", - "bom-ref" : "pkg:maven/org.apache.pdfbox/fontbox@2.0.30?type=jar" + "bom-ref" : "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar" } ], "dependencies" : [