)]}'
{
  "log": [
    {
      "commit": "71bf9f9a72cef5624a614aabb10985fa465355c4",
      "tree": "00f36024b30f6fa91e7e3569cb77206358d940bd",
      "parents": [
        "09ff42b75e61cbcef93ef6ecada40f6a8aed804b"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Wed Jul 15 18:01:23 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Wed Jul 15 18:01:23 2026 +0200"
      },
      "message": "pick up Ivy update\n"
    },
    {
      "commit": "09ff42b75e61cbcef93ef6ecada40f6a8aed804b",
      "tree": "5769dbbce57938e769b6482dad59e68336c92c76",
      "parents": [
        "3b548b65dc4b1abef771f1bc5a203f8162952952"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Sat Jul 11 16:15:03 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Sat Jul 11 16:15:03 2026 +0200"
      },
      "message": "allow a way to set the serial number of the generated BOM\n"
    },
    {
      "commit": "3b548b65dc4b1abef771f1bc5a203f8162952952",
      "tree": "b58399436178a336ece8f9c6b1a4eb044178a74a",
      "parents": [
        "4d111ad8776a7e9153f18646777f376282a01f1f"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Sun Jun 21 10:41:42 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Sun Jun 21 10:41:42 2026 +0200"
      },
      "message": "extract macrodef defined at least four times now into a task provided by the antlib\n"
    },
    {
      "commit": "4d111ad8776a7e9153f18646777f376282a01f1f",
      "tree": "eb5a67c6f10a7f5834d5c1b21d5773a3742bb56b",
      "parents": [
        "d88a4601a4d7b538bd547d6a7208406e52e6099e"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Sun Jun 21 09:58:09 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Sun Jun 21 09:58:09 2026 +0200"
      },
      "message": "stray closing p tag\n"
    },
    {
      "commit": "d88a4601a4d7b538bd547d6a7208406e52e6099e",
      "tree": "2bae4e5a6a0045890831176c9c094290a03a8458",
      "parents": [
        "71cb81dde4d745937742733aaf58a5b284ed7516"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Sat Jun 20 12:22:29 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Sat Jun 20 12:22:29 2026 +0200"
      },
      "message": "import bugfixes of common build\n"
    },
    {
      "commit": "71cb81dde4d745937742733aaf58a5b284ed7516",
      "tree": "7f63edb65099f51aff0a981721216e82e20c8848",
      "parents": [
        "9576d5e232e3e2e712fb4e2e4a6f8836fa6c4346"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Sat Jun 20 07:52:15 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Sat Jun 20 07:52:15 2026 +0200"
      },
      "message": "adjust ivy.xml\n"
    },
    {
      "commit": "9576d5e232e3e2e712fb4e2e4a6f8836fa6c4346",
      "tree": "42c02b253c51225a87c8e802c5365fbc8fd0fe72",
      "parents": [
        "b7a80e862d3f9b2d48fccaa12db3f37d89e5a455"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Fri Jun 19 21:38:36 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Fri Jun 19 21:38:36 2026 +0200"
      },
      "message": "CycloneDX Spec prefers .cdx.json\n\nhttps://cyclonedx.org/specification/overview/#recognized-file-patterns\n"
    },
    {
      "commit": "b7a80e862d3f9b2d48fccaa12db3f37d89e5a455",
      "tree": "17829935235ad57724323fa26ad89e9e46cbe941",
      "parents": [
        "e6ed5aa2efa74bea02fe1296b1dd75e9695f56b5"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Fri Jun 19 18:34:29 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Fri Jun 19 18:34:29 2026 +0200"
      },
      "message": "AntUnit 1.5.0\n"
    },
    {
      "commit": "e6ed5aa2efa74bea02fe1296b1dd75e9695f56b5",
      "tree": "976609af5aa7a881cc9579dbb129942eb57626d6",
      "parents": [
        "9d284f5be3604adba764b63d6de29a4ceccb9611"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Fri Jun 19 18:21:13 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Fri Jun 19 18:21:13 2026 +0200"
      },
      "message": "user common setup for SBOM\n"
    },
    {
      "commit": "9d284f5be3604adba764b63d6de29a4ceccb9611",
      "tree": "7fd4279a644252718fc3e1c10885a62318339c46",
      "parents": [
        "cd13226ae4aa850912a4249919a8f93bbea9ee59"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Sun Jun 14 15:08:52 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Sun Jun 14 15:08:52 2026 +0200"
      },
      "message": "since Locator is used directly, the dependency on ant-launcher is no longer just transitive\n"
    },
    {
      "commit": "cd13226ae4aa850912a4249919a8f93bbea9ee59",
      "tree": "7563ff8ba21bdceab062c06a6d12d11150a5eabc",
      "parents": [
        "64a0117d29e2c135cac3d0d5f4a2dbf570322c60"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Sun Jun 14 14:42:09 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Sun Jun 14 14:42:09 2026 +0200"
      },
      "message": "new resource collection that will help with SBOMs for tarballs\n"
    },
    {
      "commit": "64a0117d29e2c135cac3d0d5f4a2dbf570322c60",
      "tree": "d2e7e63d77a0a06aecdc63f0cb236213d512372e",
      "parents": [
        "2734d6c11e9cd18425daa0ac8fc0d3ddd9d49993"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Fri Jun 12 10:02:00 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Fri Jun 12 10:02:00 2026 +0200"
      },
      "message": "typo\n"
    },
    {
      "commit": "2734d6c11e9cd18425daa0ac8fc0d3ddd9d49993",
      "tree": "45bedfe2e045ed5c67638c864e927b3fe815f597",
      "parents": [
        "4ac4b166f1b1e1901450efd18e36a6da3e9f6b74"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Fri Jun 12 09:51:10 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Fri Jun 12 09:51:10 2026 +0200"
      },
      "message": "document the SHA3 \"problem\"\n\nhttps://github.com/CycloneDX/cyclonedx-core-java/issues/848\n"
    },
    {
      "commit": "4ac4b166f1b1e1901450efd18e36a6da3e9f6b74",
      "tree": "272b680f6fb4a0d9987b7d26d426e24251c231a1",
      "parents": [
        "e9b0e88241cbab6fc5f384ef08a9d9272ac24093"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Mon Jun 08 21:30:24 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Mon Jun 08 21:30:24 2026 +0200"
      },
      "message": "use Ant\u0027s Locator instead of reinventing it\n"
    },
    {
      "commit": "e9b0e88241cbab6fc5f384ef08a9d9272ac24093",
      "tree": "6d0abcd76821a6b950576c6baa5b272d2d855fae",
      "parents": [
        "b6f81afd5906ea765b9cd9df8ff89124a645a50d"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Sun Jun 07 07:50:06 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Sun Jun 07 07:50:06 2026 +0200"
      },
      "message": "fix locating of Antlib jar for tool information\n\nI\u0027ve written too much C# lately, it seems\n"
    },
    {
      "commit": "b6f81afd5906ea765b9cd9df8ff89124a645a50d",
      "tree": "b0de445b527b2b5082895224924f19e125496229",
      "parents": [
        "23571d9d062f5dd61c2056e062130b522c118fb6"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Fri Jun 05 09:54:56 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Fri Jun 05 09:54:56 2026 +0200"
      },
      "message": "also add documentation link to tool-meta\n"
    },
    {
      "commit": "23571d9d062f5dd61c2056e062130b522c118fb6",
      "tree": "73d5d718078f8e9f935e76e4488136dc10dd77e8",
      "parents": [
        "a873e80d3cb9f6a14e7389f5d822eb8214caa1aa"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Fri Jun 05 08:28:55 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Fri Jun 05 08:28:55 2026 +0200"
      },
      "message": "the BSI TR is not binding for the EU CRA, yet. Things may change.\n"
    },
    {
      "commit": "a873e80d3cb9f6a14e7389f5d822eb8214caa1aa",
      "tree": "a9287f8ef046dca0aea86b8ec4a6934834e5bbf0",
      "parents": [
        "42969ccaede33a114ad7b92357f5e535b85a94a0"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Fri Jun 05 08:18:51 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Fri Jun 05 08:18:51 2026 +0200"
      },
      "message": "maybe you sometimes don\u0027t want bom-externalReferences for internal SBOMs\n"
    },
    {
      "commit": "42969ccaede33a114ad7b92357f5e535b85a94a0",
      "tree": "f9c5c0f3414b2966a55e3caec2f557b006e3819f",
      "parents": [
        "1e9928e86d48ca486c759b96f0cfcff4679a7649"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Thu Jun 04 15:45:27 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Thu Jun 04 15:45:27 2026 +0200"
      },
      "message": "add security.txt link to tool component as well\n"
    },
    {
      "commit": "1e9928e86d48ca486c759b96f0cfcff4679a7649",
      "tree": "7f8b0f153858c46df0f537fd578228a1c902d1d3",
      "parents": [
        "477e65fa3d4b562d4a1798e96f36b2a65246193a"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Thu Jun 04 15:34:30 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Thu Jun 04 15:34:30 2026 +0200"
      },
      "message": "Ant has got a security.txt\n"
    },
    {
      "commit": "477e65fa3d4b562d4a1798e96f36b2a65246193a",
      "tree": "d9cbe010801c734d8e8e3bac72ba643dc0180438",
      "parents": [
        "8fd469413d5ae339a4663faede26b6b33f39e89f"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Thu Jun 04 15:29:02 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Thu Jun 04 15:29:02 2026 +0200"
      },
      "message": "add bom-type externalreferences when sbomLink is used\n"
    },
    {
      "commit": "8fd469413d5ae339a4663faede26b6b33f39e89f",
      "tree": "f29ddaaeeb1f570ed451b6d905e8026891292a18",
      "parents": [
        "caad2b677afb55b3600188106224295e52525028"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Thu Jun 04 15:09:41 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Thu Jun 04 15:09:41 2026 +0200"
      },
      "message": "add properties required by BSI TR for EU CRA\n\nsee\nhttps://www.bsi.bund.de/SharedDocs/Downloads/EN/BSI/Publications/TechGuidelines/TR03183/BSI-TR-03183-2_v2_1_0.pdf?__blob\u003dpublicationFile\u0026v\u003d5\nsection 8.2\n"
    },
    {
      "commit": "caad2b677afb55b3600188106224295e52525028",
      "tree": "93adc1835e999e1bd650318e75d9e5711144a33c",
      "parents": [
        "59936ed9fcff2812f323fd6ce6d2a7257d2ac75b"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Thu Jun 04 14:55:51 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Thu Jun 04 14:55:51 2026 +0200"
      },
      "message": "introduce propertyset\n"
    },
    {
      "commit": "59936ed9fcff2812f323fd6ce6d2a7257d2ac75b",
      "tree": "257a9e859c8166d13fb6977d190fd2e76c518f62",
      "parents": [
        "66199c153c8fcec792b286ac569484a8bb8cb327"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Thu Jun 04 14:18:11 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Thu Jun 04 14:18:11 2026 +0200"
      },
      "message": "more external references\n"
    },
    {
      "commit": "66199c153c8fcec792b286ac569484a8bb8cb327",
      "tree": "b64669b6728e8ff0ea80e795b7af1e3f5d953c49",
      "parents": [
        "1d1e1a7080e7d9d99b1dc3e115b774246c296f80"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Thu Jun 04 08:47:49 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Thu Jun 04 08:47:49 2026 +0200"
      },
      "message": "archiveUrl is wrong\n"
    },
    {
      "commit": "1d1e1a7080e7d9d99b1dc3e115b774246c296f80",
      "tree": "2a069d9bd9b121c3fddeac1f44ba955db50e8909",
      "parents": [
        "1af2644a75deb1cce5136947cfaa56fa7fb784da"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Thu Jun 04 07:27:26 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Thu Jun 04 07:27:26 2026 +0200"
      },
      "message": "no longer need the examples, we\u0027ve got a real release to show now\n"
    },
    {
      "commit": "1af2644a75deb1cce5136947cfaa56fa7fb784da",
      "tree": "ac6ff0c6f112929b67c3703ca468021b851668a3",
      "parents": [
        "20fbdfb76f523bfdba00666a3a112eedd68271f4"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Sun May 31 16:37:50 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Wed Jun 03 20:56:44 2026 +0200"
      },
      "message": "prepare RC1 of 0.1\n"
    },
    {
      "commit": "20fbdfb76f523bfdba00666a3a112eedd68271f4",
      "tree": "3932e6cfb0f3b809a39c1f042bb8b803aa2bb85c",
      "parents": [
        "450bf638930e5b2c5ca5ca77577501fb7016a70c"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Sun May 31 16:35:35 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Sun May 31 16:35:35 2026 +0200"
      },
      "message": "antlibs have got an extra directory layer for their releases\n"
    },
    {
      "commit": "450bf638930e5b2c5ca5ca77577501fb7016a70c",
      "tree": "dd50f5eaeb20bbb8353af47f783050f23eee8331",
      "parents": [
        "48f8669a85799c8ce1f1c7e64efa5391b8548492"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Sat May 30 18:13:19 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Sat May 30 18:13:19 2026 +0200"
      },
      "message": "don\u0027t poison metadata cache with extra tool data\n"
    },
    {
      "commit": "48f8669a85799c8ce1f1c7e64efa5391b8548492",
      "tree": "244ff06e0755dcb1e871a13a4ed071ca9706ecdc",
      "parents": [
        "bd9b56e2a7f29e250345903dacce1f898c1e3bed"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Sat May 30 08:18:16 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Sat May 30 08:18:16 2026 +0200"
      },
      "message": "still trying to understand the Gump failure\n"
    },
    {
      "commit": "bd9b56e2a7f29e250345903dacce1f898c1e3bed",
      "tree": "b28c099c69533dd2bcba2e26e94be2e42b75a98e",
      "parents": [
        "f76f840afd19982f0c4335b2d681beed55841cb0"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Sat May 30 08:05:46 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Sat May 30 08:06:03 2026 +0200"
      },
      "message": "update common to select fat-distribution configuration\n"
    },
    {
      "commit": "f76f840afd19982f0c4335b2d681beed55841cb0",
      "tree": "7549973124474a4b3883fc7160f8b46f9bcaaf12",
      "parents": [
        "47673a4a0da3c2076d2c2e77438fd66b7a126759"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Fri May 29 14:46:33 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Fri May 29 14:46:33 2026 +0200"
      },
      "message": "I don\u0027t want provided or test dependencies in fat-jar\n"
    },
    {
      "commit": "47673a4a0da3c2076d2c2e77438fd66b7a126759",
      "tree": "3bfc59ce8afd28e971815750f5e06673167563c0",
      "parents": [
        "c2a45a4762b02f4d8ebb297a58584ca348690a35"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Fri May 29 14:24:16 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Fri May 29 14:24:16 2026 +0200"
      },
      "message": "add manufacturer to SBOM to make EU CRA happy\n"
    },
    {
      "commit": "c2a45a4762b02f4d8ebb297a58584ca348690a35",
      "tree": "85d0dfbc3dc16139e876266a9ade3aed48d114b9",
      "parents": [
        "7fc2f22ae3ac2d67b0b4974432b2951368bf30fd"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Fri May 29 14:09:03 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Fri May 29 14:09:03 2026 +0200"
      },
      "message": "last update was incomplete\n"
    },
    {
      "commit": "7fc2f22ae3ac2d67b0b4974432b2951368bf30fd",
      "tree": "38a619fe27ca0c418174d25b5a74ab007bf7d2dc",
      "parents": [
        "4c0b03d67f31411e19cb2e2b65e18d018126057e"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Thu May 28 07:10:00 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Thu May 28 07:10:00 2026 +0200"
      },
      "message": "remove distributionbom for now\n"
    },
    {
      "commit": "4c0b03d67f31411e19cb2e2b65e18d018126057e",
      "tree": "132cfc89e48996534683a6223514e137a111f1cf",
      "parents": [
        "a8ecf93ecbd6364e3d96c853ec5639a67eaf8743"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Tue May 26 18:21:23 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Tue May 26 18:21:23 2026 +0200"
      },
      "message": "make supplier take the lead over manufacturer\n"
    },
    {
      "commit": "a8ecf93ecbd6364e3d96c853ec5639a67eaf8743",
      "tree": "2ecbf8cada1168e913df4501f84560404e45536b",
      "parents": [
        "2f545ed8ffb388f8da5cfad663f046ddb54d87ec"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Tue May 26 12:35:54 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Tue May 26 12:35:54 2026 +0200"
      },
      "message": "become more formal\n"
    },
    {
      "commit": "2f545ed8ffb388f8da5cfad663f046ddb54d87ec",
      "tree": "066c7b2ffc3f9d3ffac3846816ba32dfbf425378",
      "parents": [
        "746867e710c3dd4486bf56c436aa17f44b093c7c"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Tue May 26 12:32:09 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Tue May 26 12:32:09 2026 +0200"
      },
      "message": "add warning about API instability\n"
    },
    {
      "commit": "746867e710c3dd4486bf56c436aa17f44b093c7c",
      "tree": "42ca71b458b25a6d60a621d73c93036ef817dae6",
      "parents": [
        "14cb6812a028088bef295b84107a5da3f02226ed"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Mon May 25 13:06:10 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Mon May 25 13:06:10 2026 +0200"
      },
      "message": "try to fix Gump test failure\n"
    },
    {
      "commit": "14cb6812a028088bef295b84107a5da3f02226ed",
      "tree": "2155f8e266859a2e81da6cb32ead435c3dff6f16",
      "parents": [
        "1c83c95819aff2f28faf46f9e267ccfec6c45c6a"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Mon May 25 13:05:34 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Mon May 25 13:05:34 2026 +0200"
      },
      "message": "use gitbox instead of hithub for VCS links\n"
    },
    {
      "commit": "1c83c95819aff2f28faf46f9e267ccfec6c45c6a",
      "tree": "3fc6623019608be97936b6e1a33388ef5e3db4d9",
      "parents": [
        "167e89bb7ab40b3dd98b46c41906198f0e8e6054"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Mon May 25 12:51:21 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Mon May 25 12:51:21 2026 +0200"
      },
      "message": "yes, please try it out\n"
    },
    {
      "commit": "167e89bb7ab40b3dd98b46c41906198f0e8e6054",
      "tree": "21ed506abd4fd2822c5301f25ec54e3667ceba2a",
      "parents": [
        "86dc58e757af4ee5f0aa5d826cd9ee5aa77a5822"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Sat May 23 18:22:13 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Sat May 23 18:22:13 2026 +0200"
      },
      "message": "use versioned dependencies in -withdeps tarballs\n"
    },
    {
      "commit": "86dc58e757af4ee5f0aa5d826cd9ee5aa77a5822",
      "tree": "e598facb5ce101c020fb1e7926c34af531a84d82",
      "parents": [
        "08ae8826e7ec914bf69c477023bee930c0b5c47f"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Sat May 23 18:04:03 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Sat May 23 18:04:03 2026 +0200"
      },
      "message": "add license to BOMs\n"
    },
    {
      "commit": "08ae8826e7ec914bf69c477023bee930c0b5c47f",
      "tree": "2a3fbba6a2d704eedd6aa88c96c987714dafd46e",
      "parents": [
        "70d9fa688fb87d507ce1b6adef171943a61f6ba4"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Sat May 23 18:03:35 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Sat May 23 18:03:35 2026 +0200"
      },
      "message": "initial test for distributionbom\n"
    },
    {
      "commit": "70d9fa688fb87d507ce1b6adef171943a61f6ba4",
      "tree": "312bf1e4c5d1a5aad11f24ae0d9d533439028c3a",
      "parents": [
        "d8c0f08d4ab35ac6e6e7849ad11aedf3af5114e0"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Sat May 23 17:48:40 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Sat May 23 17:48:40 2026 +0200"
      },
      "message": "add jar as nested component to binary distribution SBOMs\n"
    },
    {
      "commit": "d8c0f08d4ab35ac6e6e7849ad11aedf3af5114e0",
      "tree": "ef3b9372fd99fcd842c5ce0e804a7a5792c9133f",
      "parents": [
        "7584d45063e32b840c8310f9a757675a06668847"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Sat May 23 17:48:01 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Sat May 23 17:48:01 2026 +0200"
      },
      "message": "try to generalize logic for tarball boms\n"
    },
    {
      "commit": "7584d45063e32b840c8310f9a757675a06668847",
      "tree": "ae69b229acb2ae5556fc9a7f056e3f5d6d66e595",
      "parents": [
        "fe4b81e240a4d87081252c06575e45d30e0a1809"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Sat May 23 13:32:35 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Sat May 23 13:32:35 2026 +0200"
      },
      "message": "component bom-refs must be unique\n"
    },
    {
      "commit": "fe4b81e240a4d87081252c06575e45d30e0a1809",
      "tree": "bfb80ad0a22a14781a70d751240c0a05d1a71b7e",
      "parents": [
        "ef0063a2ebb37f65bee048b253163bee74da5cf1"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Sat May 23 13:32:03 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Sat May 23 13:32:03 2026 +0200"
      },
      "message": "ignore distribution directory\n"
    },
    {
      "commit": "ef0063a2ebb37f65bee048b253163bee74da5cf1",
      "tree": "f4c8dc8c81412c2dddbd2fab6008ab47a0e1eefd",
      "parents": [
        "c9e60ebe08269c66093d6a126bda34f7ee115fc4"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Sat May 23 13:23:39 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Sat May 23 13:23:39 2026 +0200"
      },
      "message": "don\u0027t apply group:name:version logic to purl of non-Java ecosystems\n"
    },
    {
      "commit": "c9e60ebe08269c66093d6a126bda34f7ee115fc4",
      "tree": "30b696aac008f6fe183181a9d7eb3211585e3abc",
      "parents": [
        "7d58ede027f4fc026ad412bc216ffad8850f426a"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Sat May 23 12:47:02 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Sat May 23 12:47:02 2026 +0200"
      },
      "message": "more explicit component definitions\n"
    },
    {
      "commit": "7d58ede027f4fc026ad412bc216ffad8850f426a",
      "tree": "6323bbe325b368510aed4b73ae511dcc4ff354ca",
      "parents": [
        "553679436d69d11285bd55b0bce569045727a7a3"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Fri May 22 23:18:21 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Fri May 22 23:18:21 2026 +0200"
      },
      "message": "upload CycloneDX SBOMs as well\n"
    },
    {
      "commit": "553679436d69d11285bd55b0bce569045727a7a3",
      "tree": "c1365ace97ab081f1d7fa71e08503d15e2be0d15",
      "parents": [
        "e15c591b4682794a5b54973405465ad4996595f6"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Fri May 22 23:17:42 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Fri May 22 23:17:42 2026 +0200"
      },
      "message": "only re-generate SBOM when anything has changed\n"
    },
    {
      "commit": "e15c591b4682794a5b54973405465ad4996595f6",
      "tree": "9d1f7751262d777a154fcb693b20ade35fa0fb8d",
      "parents": [
        "650134862f1307e7eb18e00866272f386663d93e"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Fri May 22 22:39:48 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Fri May 22 22:39:48 2026 +0200"
      },
      "message": "POM with dependencies\n"
    },
    {
      "commit": "650134862f1307e7eb18e00866272f386663d93e",
      "tree": "d3682fd3e2e8f141a087deaeb56d0023cb478400",
      "parents": [
        "47b22af97f14b8c7ae40c84833345e900830690e"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Fri May 22 22:29:14 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Fri May 22 22:29:14 2026 +0200"
      },
      "message": "create SBOMs for the release archives\n"
    },
    {
      "commit": "47b22af97f14b8c7ae40c84833345e900830690e",
      "tree": "afc94f68bcb20374b18a2f8adf180ba5d0414fe0",
      "parents": [
        "03328380015b6e36d8c021ef0931c2debc961b6b"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Fri May 22 14:17:31 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Fri May 22 14:17:31 2026 +0200"
      },
      "message": "create SBOM for this antlib\n"
    },
    {
      "commit": "03328380015b6e36d8c021ef0931c2debc961b6b",
      "tree": "d0d3518c29141d824465f7ef61517b8012ce74af",
      "parents": [
        "16204eb1a5f819533020283f61a9d145131c30dc"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Fri May 22 13:53:49 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Fri May 22 13:53:49 2026 +0200"
      },
      "message": "properly use overridden dependencies of resolved components\n"
    },
    {
      "commit": "16204eb1a5f819533020283f61a9d145131c30dc",
      "tree": "a2e483ce05ab3ab0d00ededb39ebca7c2e15dd9a",
      "parents": [
        "f747c8ecebb6684ce9e693fa33933cd58cc2077a"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Fri May 22 09:47:14 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Fri May 22 09:47:54 2026 +0200"
      },
      "message": "log something when you perform work\n"
    },
    {
      "commit": "f747c8ecebb6684ce9e693fa33933cd58cc2077a",
      "tree": "c2c819289e361ad8dbe18a3ee87c322af955f604",
      "parents": [
        "2406cae6115549233e434d15b4e80526cf466c11"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Sun May 17 17:57:48 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Sun May 17 17:57:48 2026 +0200"
      },
      "message": "javadoc warnings\n"
    },
    {
      "commit": "2406cae6115549233e434d15b4e80526cf466c11",
      "tree": "16f341af4f44c8d0867a2aa35e064b8b915c30f3",
      "parents": [
        "8566c33c012d6fea01054fb86e118a7da2b35560"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Sun May 17 15:00:27 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Sun May 17 15:00:27 2026 +0200"
      },
      "message": "make a few methods more accessible\n"
    },
    {
      "commit": "8566c33c012d6fea01054fb86e118a7da2b35560",
      "tree": "0e445867ea767f7986b6a85d14263ee9b9857a2c",
      "parents": [
        "2bdd91e604da5c6f79e61ff9decd59cc3cd68da0"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Sun May 17 14:48:58 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Sun May 17 14:48:58 2026 +0200"
      },
      "message": "unused method\n"
    },
    {
      "commit": "2bdd91e604da5c6f79e61ff9decd59cc3cd68da0",
      "tree": "5c729c559e7fd3c9aee662a1a58c362e9cc46105",
      "parents": [
        "4211f0155b527397ffa10d7b14e010db0e5cfb56"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Sun May 17 14:39:15 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Sun May 17 14:39:15 2026 +0200"
      },
      "message": "allow other tools to be added to metadata.tools.components\n"
    },
    {
      "commit": "4211f0155b527397ffa10d7b14e010db0e5cfb56",
      "tree": "31ce9282cb85a9b69c0ce73f1e529ca4e9733b62",
      "parents": [
        "1cb11be50787d04373cc28bab72c11012a3afe14"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Sun May 17 13:09:34 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Sun May 17 13:09:34 2026 +0200"
      },
      "message": "ugrade common\n"
    },
    {
      "commit": "1cb11be50787d04373cc28bab72c11012a3afe14",
      "tree": "cf1a6a18e5085508270bd37cf6b350939b9de74b",
      "parents": [
        "e3f32911ccc9a1fface99cdcc8c03d8c047e3520"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Sun May 17 10:37:01 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Sun May 17 10:37:01 2026 +0200"
      },
      "message": "add version to the docs\n"
    },
    {
      "commit": "e3f32911ccc9a1fface99cdcc8c03d8c047e3520",
      "tree": "d63a31dec403163a5e58f1eddcd03df0aa46ae4d",
      "parents": [
        "d6d518e861d2f47db9712c0fe758661fe03944e1"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Sun May 17 09:09:14 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Sun May 17 09:09:14 2026 +0200"
      },
      "message": "descrbe componentbom nested elements\n"
    },
    {
      "commit": "d6d518e861d2f47db9712c0fe758661fe03944e1",
      "tree": "cb4c50498d723fe43eccffb6dd41d342bbddabcf",
      "parents": [
        "8b478d8cdeeaee742b65862c3af4cb110e32979d"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Sat May 16 22:24:37 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Sat May 16 22:26:41 2026 +0200"
      },
      "message": "document attributes of componentbom task\n"
    },
    {
      "commit": "8b478d8cdeeaee742b65862c3af4cb110e32979d",
      "tree": "98a38ca37d7ad345a2203ff91345b524c4b46abd",
      "parents": [
        "b63c894b3f47061e09a6b3af902ca9ce1b4f5ff1",
        "cbdb57c725dc897a7843849b3f63be1523f181fa"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Sat May 16 16:10:12 2026 +0000"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Sat May 16 16:10:12 2026 +0000"
      },
      "message": "Merge pull request #1 from apache/infrastructure-ruleset-bot/default-branch-protection\n\n[INFRA] Set up default rulesets for default and release branches"
    },
    {
      "commit": "b63c894b3f47061e09a6b3af902ca9ce1b4f5ff1",
      "tree": "17608008c53383b26b4f616040527c4e11c2cc60",
      "parents": [
        "358493dbe9350aa7f9eff6b810d122c97afe42e1"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Sat May 16 14:31:27 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Sat May 16 14:31:27 2026 +0200"
      },
      "message": "the SBOM itself can have a license\n"
    },
    {
      "commit": "358493dbe9350aa7f9eff6b810d122c97afe42e1",
      "tree": "908b8c946d42b2cf22a015ada19eae0327a39e2a",
      "parents": [
        "159b3096753ce55143498c8eb3ef589d53dc38f4"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Sat May 16 13:53:31 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Sat May 16 14:22:51 2026 +0200"
      },
      "message": "only copy licenses if there are any\n"
    },
    {
      "commit": "159b3096753ce55143498c8eb3ef589d53dc38f4",
      "tree": "b814fe5705b2bd5d91d5eed1a8426975093c51ad",
      "parents": [
        "eb3e7788473156a4091eb89632b4d25b19d42e6c"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Sat May 16 13:22:24 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Sat May 16 13:49:12 2026 +0200"
      },
      "message": "tweaks\n"
    },
    {
      "commit": "eb3e7788473156a4091eb89632b4d25b19d42e6c",
      "tree": "041f6505950b9213a13f6e8c3089c743608af7d8",
      "parents": [
        "aebc4fd0a02cd59485903e4f027384bdc9021937"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Sat May 16 12:18:59 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Sat May 16 12:18:59 2026 +0200"
      },
      "message": "properly describe what happens when linking external SBOMs\n\nand make the implementation agree with what I just came up with :-)\n"
    },
    {
      "commit": "cbdb57c725dc897a7843849b3f63be1523f181fa",
      "tree": "9e37761695edfe1a3ab63fe5d6325dd5fb3a0753",
      "parents": [
        "aebc4fd0a02cd59485903e4f027384bdc9021937"
      ],
      "author": {
        "name": "The Apache Software Foundation",
        "email": "root-asf-gitbox-commits@apache.org",
        "time": "Fri May 15 13:50:59 2026 -0500"
      },
      "committer": {
        "name": "The Apache Software Foundation",
        "email": "root-asf-gitbox-commits@apache.org",
        "time": "Fri May 15 13:50:59 2026 -0500"
      },
      "message": "Set up default protection ruleset for default and release branches"
    },
    {
      "commit": "aebc4fd0a02cd59485903e4f027384bdc9021937",
      "tree": "25fb705d6d12c833412ac2c2b1892ffc7eebfec2",
      "parents": [
        "7775f3f03e06136a2193789bb8366e19d0dacfb5"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Fri May 15 16:32:31 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Fri May 15 16:32:31 2026 +0200"
      },
      "message": "test refid handling\n"
    },
    {
      "commit": "7775f3f03e06136a2193789bb8366e19d0dacfb5",
      "tree": "80686de6de6a050befb0d97a68b3b5509598508f",
      "parents": [
        "958317657da5fc50d1ba2a0c80e1245735095e75"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Fri May 15 15:51:38 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Fri May 15 15:51:38 2026 +0200"
      },
      "message": "document and test nested components (and handle their dependencies)\n"
    },
    {
      "commit": "958317657da5fc50d1ba2a0c80e1245735095e75",
      "tree": "b43e2495d9f9264af684f76c56af45c4932d7913",
      "parents": [
        "d3baf8b954a2dfdfa058b2053c9a4cd0c99f208c"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Fri May 15 13:39:19 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Fri May 15 13:39:19 2026 +0200"
      },
      "message": "fail with a useful error message if dependees lack bom-ref\n"
    },
    {
      "commit": "d3baf8b954a2dfdfa058b2053c9a4cd0c99f208c",
      "tree": "4e04b8d31ee06c9f6f621834189103848122f98d",
      "parents": [
        "ac4767a2e11def1a2602c3280b03a93f6ab623f6"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Fri May 15 12:23:44 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Fri May 15 12:23:44 2026 +0200"
      },
      "message": "extend tests\n"
    },
    {
      "commit": "ac4767a2e11def1a2602c3280b03a93f6ab623f6",
      "tree": "c2cce5db4c323976ed818d553a5e0f525801f4e9",
      "parents": [
        "1d150fb008010d52bc2c60f3b71c71886e41a7d1"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Thu May 14 21:54:04 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Thu May 14 21:54:04 2026 +0200"
      },
      "message": "document the simple part of component and add some tests\n"
    },
    {
      "commit": "1d150fb008010d52bc2c60f3b71c71886e41a7d1",
      "tree": "3a9a54c7bad31fcabfbeb738a0fbad9c3fbbc13a",
      "parents": [
        "57a2261dda2654a045735385891cbaf8951fbbd7"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Thu May 14 17:47:41 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Thu May 14 17:47:41 2026 +0200"
      },
      "message": "allow component type and scope to be set using spec-names\n"
    },
    {
      "commit": "57a2261dda2654a045735385891cbaf8951fbbd7",
      "tree": "b293006128f261286f6fc7d915e287ff517ed32a",
      "parents": [
        "c13282ef79b90c8aa652f546586d5166a872aa53"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Thu May 14 15:23:28 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Thu May 14 15:23:28 2026 +0200"
      },
      "message": "document and test organization type\n"
    },
    {
      "commit": "c13282ef79b90c8aa652f546586d5166a872aa53",
      "tree": "a10c559744c4ff50af542c1ed53bc1ca65a7756d",
      "parents": [
        "d86663232f0d7e52f29f2bb216c0b9510bcaa9a4"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Thu May 14 15:03:26 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Thu May 14 15:03:26 2026 +0200"
      },
      "message": "implicitly test \"all\" outputformat\n"
    },
    {
      "commit": "d86663232f0d7e52f29f2bb216c0b9510bcaa9a4",
      "tree": "bdf8afeba6778f567071103771998a9dcd6a3409",
      "parents": [
        "43bb531ed8a2d988486955c96f38bbe292305d04"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Thu May 14 14:58:30 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Thu May 14 14:58:30 2026 +0200"
      },
      "message": "make OutputFormat more useful\n"
    },
    {
      "commit": "43bb531ed8a2d988486955c96f38bbe292305d04",
      "tree": "017dad8bb8244335d334b550763a42e6f56bf03b",
      "parents": [
        "799455d1d22e5edc4acea513bd9ffa30079c673a"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Thu May 14 12:45:48 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Thu May 14 12:45:48 2026 +0200"
      },
      "message": "make SpecVersion more useful\n"
    },
    {
      "commit": "799455d1d22e5edc4acea513bd9ffa30079c673a",
      "tree": "bb88fd1c63fcb0de218168dfd1ca0a4380d36825",
      "parents": [
        "90ce8d9665716cfaf588ba2aa4efa3e65ec88fc5"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Thu May 14 09:20:49 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Thu May 14 09:20:49 2026 +0200"
      },
      "message": "document and test license type\n"
    },
    {
      "commit": "90ce8d9665716cfaf588ba2aa4efa3e65ec88fc5",
      "tree": "9153a08d69b525d74be23f860975ffe59ae31cae",
      "parents": [
        "7c4ac14bc627ebb52b053bacc6ffd14a5a706fa8"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Wed May 13 06:11:02 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Wed May 13 06:11:02 2026 +0200"
      },
      "message": "document externalreferenceset\n"
    },
    {
      "commit": "7c4ac14bc627ebb52b053bacc6ffd14a5a706fa8",
      "tree": "43e52b61ffcb86713d42d1ca69ef5d9ea2f1d567",
      "parents": [
        "15e7c6f63891d623769795acbfff60d15000723e"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Wed May 13 05:41:29 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Wed May 13 05:41:29 2026 +0200"
      },
      "message": "support names as defined by the spec for externalReference\u0027s type\n"
    },
    {
      "commit": "15e7c6f63891d623769795acbfff60d15000723e",
      "tree": "1297c861e6a8a8943d3554285276657b94acb54c",
      "parents": [
        "7a3a78442abe831be1ed577bafc8f63cfcb13002"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Wed May 13 05:30:05 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Wed May 13 05:30:05 2026 +0200"
      },
      "message": "document and test external reference\n"
    },
    {
      "commit": "7a3a78442abe831be1ed577bafc8f63cfcb13002",
      "tree": "e4b48410f40dc8d1a1769b69ba6b881557d1317b",
      "parents": [
        "acece404f499748f296da8533255726d276b9c69"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Wed May 13 05:02:12 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Wed May 13 05:02:49 2026 +0200"
      },
      "message": "skeleton doc\n"
    },
    {
      "commit": "acece404f499748f296da8533255726d276b9c69",
      "tree": "d93bf2ad694b01a534a1a04bfac7424337cdd290",
      "parents": [
        "666a9b0047c8f4dd2434742dd7fe5ebcb7b72410"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Mon May 11 21:38:24 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Mon May 11 21:38:24 2026 +0200"
      },
      "message": "make external references easier to reuse\n\nAnt\u0027s own build will require the same references for each jar and nine\ntarballs\n"
    },
    {
      "commit": "666a9b0047c8f4dd2434742dd7fe5ebcb7b72410",
      "tree": "319b4e1c70550f82d2a487f1c3112566da6e218d",
      "parents": [
        "91b7d51005dab4232989fd585df45236a6f2e45d"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Mon May 11 20:58:46 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Mon May 11 20:58:46 2026 +0200"
      },
      "message": "add some more links\n"
    },
    {
      "commit": "91b7d51005dab4232989fd585df45236a6f2e45d",
      "tree": "e3f86b24ec0970aba762fd909090dbb28355c458",
      "parents": [
        "64bd25d87b7367f8ce00b7aee1587e341d9bd276"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Mon May 11 20:39:13 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Mon May 11 20:39:13 2026 +0200"
      },
      "message": "simple way to add \"file\" components useful for tarballs\n"
    },
    {
      "commit": "64bd25d87b7367f8ce00b7aee1587e341d9bd276",
      "tree": "9d47508f9949c94b51599d087e609ce46e268271",
      "parents": [
        "da8b68f81f7ea2af0e751c2fdc27f9b247670312"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Mon May 11 19:20:52 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Mon May 11 19:20:52 2026 +0200"
      },
      "message": "fix json-validator URI\n"
    },
    {
      "commit": "da8b68f81f7ea2af0e751c2fdc27f9b247670312",
      "tree": "95fd55dbcfcec78c23c8f590f1d1954b8072dda9",
      "parents": [
        "5d326d47fbaf57baaa9b8200c44a56f750442611"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Sat May 09 10:05:18 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Sat May 09 10:05:18 2026 +0200"
      },
      "message": "more links for the CycloneDX Antlib itself\n"
    },
    {
      "commit": "5d326d47fbaf57baaa9b8200c44a56f750442611",
      "tree": "1389ed795367cbd315bccd870ab7849f3dbba98b",
      "parents": [
        "69dd1221eeaac249f8c6d61c5d7815b824b114ae"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Sat May 09 08:20:29 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Sat May 09 08:20:29 2026 +0200"
      },
      "message": "extend maximal test to be really maximal\n"
    },
    {
      "commit": "69dd1221eeaac249f8c6d61c5d7815b824b114ae",
      "tree": "22676529b9188ac2df626c112529bbf8cdf8534d",
      "parents": [
        "e5a58029d614f105257a795e163d497752913694"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Fri May 08 22:50:42 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Fri May 08 22:50:42 2026 +0200"
      },
      "message": "properly check for circular references\n"
    },
    {
      "commit": "e5a58029d614f105257a795e163d497752913694",
      "tree": "741699c0d312dd0f2872165e2f49cf8f8ed6e1e7",
      "parents": [
        "ab0c8830aa20ed87fc812c5654acde20d73ed9a5"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Fri May 08 21:55:23 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Fri May 08 21:55:23 2026 +0200"
      },
      "message": "add support for nested components\n"
    },
    {
      "commit": "ab0c8830aa20ed87fc812c5654acde20d73ed9a5",
      "tree": "060c87189a1b4f3c81f466475f426f7b829783fc",
      "parents": [
        "3606e6e481b324bd116326eaee1338ab946084b5"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Fri May 08 21:50:17 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Fri May 08 21:50:17 2026 +0200"
      },
      "message": "properly deal with circular references\n"
    },
    {
      "commit": "3606e6e481b324bd116326eaee1338ab946084b5",
      "tree": "886625930ffae9c05dbf99a9a422d524967d287b",
      "parents": [
        "e8e8df936c17e971132f897ac70140be5bfd25a7"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Fri May 08 18:49:31 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Fri May 08 18:49:31 2026 +0200"
      },
      "message": "support more component fields\n"
    },
    {
      "commit": "e8e8df936c17e971132f897ac70140be5bfd25a7",
      "tree": "50c302309402862ce83e4f7366d4396e1576a953",
      "parents": [
        "6dbc2fdc7a4dd3ab88f63afe1d3d175ffab68e66"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Fri May 08 18:20:38 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Fri May 08 18:20:38 2026 +0200"
      },
      "message": "allow imported SBOMs to provide components for their dependencies\n\nbut don\u0027t do so transitively, as we are talking about manual\ndependency management for this task.\n"
    },
    {
      "commit": "6dbc2fdc7a4dd3ab88f63afe1d3d175ffab68e66",
      "tree": "6804685ba3b040d6c328db12d77f8b9d6da10403",
      "parents": [
        "76999f0c68fb082a5702e7eb8900742d57f4defe"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Fri May 08 14:49:15 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Fri May 08 14:49:15 2026 +0200"
      },
      "message": "reference components by their SBOM\n"
    },
    {
      "commit": "76999f0c68fb082a5702e7eb8900742d57f4defe",
      "tree": "f48c258bd26a745ea4a4c97861b72e8e1be86835",
      "parents": [
        "9ea6222e87dadb7e26ce2750d69d50ffd07ce6d4"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Fri May 08 13:55:18 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Fri May 08 13:55:18 2026 +0200"
      },
      "message": "bump cylconedx-core-java version\n"
    },
    {
      "commit": "9ea6222e87dadb7e26ce2750d69d50ffd07ce6d4",
      "tree": "d3e461129d6c77fb3502de4f54fa75c9a0a1881c",
      "parents": [
        "222e64da74ce81b2c1526c237a500f96de3a24cb"
      ],
      "author": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Sat May 02 14:04:02 2026 +0200"
      },
      "committer": {
        "name": "Stefan Bodewig",
        "email": "bodewig@apache.org",
        "time": "Sat May 02 14:04:02 2026 +0200"
      },
      "message": "make specVersion configurable\n"
    }
  ],
  "next": "222e64da74ce81b2c1526c237a500f96de3a24cb"
}