<?xml version="1.0" encoding="UTF-8"?>
 <bom xmlns="http://cyclonedx.org/schema/bom/1.3" serialNumber="urn:uuid:02545de1-fb8a-484c-a09c-de5e7ebc7e30" version="1">
   <metadata>
     <timestamp>2025-09-09T03:34:40Z</timestamp>
     <tools>
       <tool>
         <vendor>CycloneDX</vendor>
         <name>junkrat</name>
         <version>1.0.18</version>
         <hashes>
           <hash alg="SHA-256">82f47effc9c65760e6ec1e8ff2c1a1e040eedb5b1cbc9c82f3fe0678cf5b8317</hash>
         </hashes>
       </tool>
     </tools>
     <component bom-ref="pkg:maven/com.bytedance.bytehouse/driver-java@1.1.87" type="application">
       <group>com.bytedance.bytehouse</group>
       <name>driver-java</name>
       <version>1.1.87</version>
       <hashes>
         <hash alg="SHA-256">22f86044f81d78d18a9b3eb6e9c3059700a5688b480ab3a01620a20552493f7b</hash>
       </hashes>
       <purl>pkg:maven/com.bytedance.bytehouse/driver-java@1.1.87</purl>
       <externalReferences>
         <reference type="vcs">
           <url>https://code.byted.org/bytehouse/driver-java.git</url>
           <hashes>
             <hash alg="SHA-1">d225ea90956ab26ae3e84b4c95b9640aff589bd2</hash>
           </hashes>
         </reference>
         <reference type="distribution">
           <url>https://maven.byted.org/repository/releasescom/bytedance/bytehouse/driver-java/1.1.87/driver-java-1.1.87.jar</url>
           <hashes>
             <hash alg="SHA-256">22f86044f81d78d18a9b3eb6e9c3059700a5688b480ab3a01620a20552493f7b</hash>
           </hashes>
         </reference>
         <reference type="distribution">
           <url>https://maven.byted.org/repository/releasescom/bytedance/bytehouse/driver-java/1.1.87/driver-java-1.1.87-all.jar</url>
           <hashes>
             <hash alg="SHA-256">39ac3787c5ae7a1a60d8104c163dc7d1ed6fcf6031a0d4b5c7f3195e268b84e2</hash>
           </hashes>
         </reference>
         <reference type="distribution">
           <url>https://maven.byted.org/repository/releasescom/bytedance/bytehouse/driver-java/1.1.87/driver-java-1.1.87-all.jar.md5</url>
           <hashes>
             <hash alg="SHA-256">ab6ac3e6d0bdc63bf44aaca186ea44c6dd179905a192dbf771d6111a83d6e778</hash>
           </hashes>
         </reference>
         <reference type="distribution">
           <url>https://maven.byted.org/repository/releasescom/bytedance/bytehouse/driver-java/1.1.87/driver-java-1.1.87-all.jar.sha1</url>
           <hashes>
             <hash alg="SHA-256">f39c82e6613d91959ab54d694d27bac2c1ef75727b3fae2725940f4f0c7577de</hash>
           </hashes>
         </reference>
         <reference type="distribution">
           <url>https://maven.byted.org/repository/releasescom/bytedance/bytehouse/driver-java/1.1.87/driver-java-1.1.87-all.jar.sha256</url>
           <hashes>
             <hash alg="SHA-256">e9cf57840928c93efbe5abd5bd295fabd3a7789ffb960ca3cd76ba3be2bdbd5c</hash>
           </hashes>
         </reference>
         <reference type="distribution">
           <url>https://maven.byted.org/repository/releasescom/bytedance/bytehouse/driver-java/1.1.87/driver-java-1.1.87-all.jar.sha512</url>
           <hashes>
             <hash alg="SHA-256">adc6c427d46253432f92cfc5e3b7e72d560cbdd062759c679b5d454ab715f417</hash>
           </hashes>
         </reference>
         <reference type="distribution">
           <url>https://maven.byted.org/repository/releasescom/bytedance/bytehouse/driver-java/1.1.87/driver-java-1.1.87-sources.jar</url>
           <hashes>
             <hash alg="SHA-256">fe6dc5c0c42ae954e8c1718bf4c8aff388ee03e642b93f9d290eb20703512edf</hash>
           </hashes>
         </reference>
         <reference type="distribution">
           <url>https://maven.byted.org/repository/releasescom/bytedance/bytehouse/driver-java/1.1.87/driver-java-1.1.87-sources.jar.md5</url>
           <hashes>
             <hash alg="SHA-256">08912c85d37087f08b85115343cbd41db1cd6c66c357f72c83eca59cf59f26ee</hash>
           </hashes>
         </reference>
         <reference type="distribution">
           <url>https://maven.byted.org/repository/releasescom/bytedance/bytehouse/driver-java/1.1.87/driver-java-1.1.87-sources.jar.sha1</url>
           <hashes>
             <hash alg="SHA-256">9fc8acfc0e2494f474b8adcca554f5c7988d36f72ddfbf52dcb18806d9c61ba9</hash>
           </hashes>
         </reference>
         <reference type="distribution">
           <url>https://maven.byted.org/repository/releasescom/bytedance/bytehouse/driver-java/1.1.87/driver-java-1.1.87-sources.jar.sha256</url>
           <hashes>
             <hash alg="SHA-256">3e86fff7a7f3ff759950e6f5e3b4508a3096c50bb289228c724036176159736d</hash>
           </hashes>
         </reference>
         <reference type="distribution">
           <url>https://maven.byted.org/repository/releasescom/bytedance/bytehouse/driver-java/1.1.87/driver-java-1.1.87-sources.jar.sha512</url>
           <hashes>
             <hash alg="SHA-256">4f902c76a7732f821680948b9b02573cf5b9e85ef71540d303b649e3a5502b64</hash>
           </hashes>
         </reference>
         <reference type="distribution">
           <url>https://maven.byted.org/repository/releasescom/bytedance/bytehouse/driver-java/1.1.87/driver-java-1.1.87.jar.md5</url>
           <hashes>
             <hash alg="SHA-256">0d4855415f4a665f03a99a18aae85c7ea484c05526d0f5704d1db66610b08f05</hash>
           </hashes>
         </reference>
         <reference type="distribution">
           <url>https://maven.byted.org/repository/releasescom/bytedance/bytehouse/driver-java/1.1.87/driver-java-1.1.87.jar.sha1</url>
           <hashes>
             <hash alg="SHA-256">d9617114ac126500d00545eec573094f3a57db996c4a9cab183ccd9a2f03c976</hash>
           </hashes>
         </reference>
         <reference type="distribution">
           <url>https://maven.byted.org/repository/releasescom/bytedance/bytehouse/driver-java/1.1.87/driver-java-1.1.87.jar.sha256</url>
           <hashes>
             <hash alg="SHA-256">8659e7b71b8326e09e342826a94bd260d2d8cbaf3b4155e19109d07a7eeafa26</hash>
           </hashes>
         </reference>
         <reference type="distribution">
           <url>https://maven.byted.org/repository/releasescom/bytedance/bytehouse/driver-java/1.1.87/driver-java-1.1.87.jar.sha512</url>
           <hashes>
             <hash alg="SHA-256">6423c770b67b96c859f9437a2fbd35fac6c0f2640b92d7393d652962b7e4d806</hash>
           </hashes>
         </reference>
         <reference type="distribution">
           <url>https://maven.byted.org/repository/releasescom/bytedance/bytehouse/driver-java/1.1.87/driver-java-1.1.87.module</url>
           <hashes>
             <hash alg="SHA-256">f85498ab441b02e4d89011e49ca50903fc75405d2ae06b879212c0ef8a6f9f93</hash>
           </hashes>
         </reference>
         <reference type="distribution">
           <url>https://maven.byted.org/repository/releasescom/bytedance/bytehouse/driver-java/1.1.87/driver-java-1.1.87.module.md5</url>
           <hashes>
             <hash alg="SHA-256">d1f89da1f6196e1e99bc4d25943cd1c291170e0d0877c74bb848aaaef933a3c5</hash>
           </hashes>
         </reference>
         <reference type="distribution">
           <url>https://maven.byted.org/repository/releasescom/bytedance/bytehouse/driver-java/1.1.87/driver-java-1.1.87.module.sha1</url>
           <hashes>
             <hash alg="SHA-256">26108b821f4c3acc7b0b8c193d580c65de1f8b1bb7a48308d62ded4284b8f10a</hash>
           </hashes>
         </reference>
         <reference type="distribution">
           <url>https://maven.byted.org/repository/releasescom/bytedance/bytehouse/driver-java/1.1.87/driver-java-1.1.87.module.sha256</url>
           <hashes>
             <hash alg="SHA-256">62722e7f446364282c1e747c90ffd11db0d2ddcca43ae998a7b0e973b6ad3cfc</hash>
           </hashes>
         </reference>
         <reference type="distribution">
           <url>https://maven.byted.org/repository/releasescom/bytedance/bytehouse/driver-java/1.1.87/driver-java-1.1.87.module.sha512</url>
           <hashes>
             <hash alg="SHA-256">81eeca0d672daa75ad0aca11d9cb73044c7b3a01904fe02500328ce399ea246f</hash>
           </hashes>
         </reference>
         <reference type="distribution">
           <url>https://maven.byted.org/repository/releasescom/bytedance/bytehouse/driver-java/1.1.87/driver-java-1.1.87.pom</url>
           <hashes>
             <hash alg="SHA-256">b933b283bf79d7fc156bf3ae6f13f45d31dab73995e90d35cfbd50400d199ba7</hash>
           </hashes>
         </reference>
         <reference type="distribution">
           <url>https://maven.byted.org/repository/releasescom/bytedance/bytehouse/driver-java/1.1.87/driver-java-1.1.87.pom.md5</url>
           <hashes>
             <hash alg="SHA-256">a216541e83bf9abf51e82459ba3933e0f09d4b872df64cf02e2e7e3988237177</hash>
           </hashes>
         </reference>
         <reference type="distribution">
           <url>https://maven.byted.org/repository/releasescom/bytedance/bytehouse/driver-java/1.1.87/driver-java-1.1.87.pom.sha1</url>
           <hashes>
             <hash alg="SHA-256">cf51b213e4426dbc4c8be1f6850fe61d3b550e2e29f2294ff888ed0e8e276d34</hash>
           </hashes>
         </reference>
         <reference type="distribution">
           <url>https://maven.byted.org/repository/releasescom/bytedance/bytehouse/driver-java/1.1.87/driver-java-1.1.87.pom.sha256</url>
           <hashes>
             <hash alg="SHA-256">9216b7b425f8c847d2007ef682f6b7795a4fa36e53f011a378b019251309dc02</hash>
           </hashes>
         </reference>
         <reference type="distribution">
           <url>https://maven.byted.org/repository/releasescom/bytedance/bytehouse/driver-java/1.1.87/driver-java-1.1.87.pom.sha512</url>
           <hashes>
             <hash alg="SHA-256">512d7b2b757c5ebd0e7f2074bdf2075f72992e72eeac589bce46ed4b5d80a50b</hash>
           </hashes>
         </reference>
       </externalReferences>
     </component>
   </metadata>
   <components>
     <component bom-ref="pkg:maven/com.bytedance.bytehouse/driver-java@1.1.87" type="library">
       <group>com.bytedance.bytehouse</group>
       <name>driver-java</name>
       <version>1.1.87</version>
       <scope>required</scope>
       <hashes>
         <hash alg="SHA-1">0000000000000000000000000000000000000000</hash>
       </hashes>
       <purl>pkg:maven/com.bytedance.bytehouse/driver-java@1.1.87</purl>
     </component>
     <component bom-ref="pkg:maven/io.airlift/aircompressor@0.18" type="library">
       <group>io.airlift</group>
       <name>aircompressor</name>
       <version>0.18</version>
       <scope>required</scope>
       <hashes>
         <hash alg="SHA-1">e0f4fbd9447c9ba3e5cc12950d7f8c54c82c4dd1</hash>
       </hashes>
       <purl>pkg:maven/io.airlift/aircompressor@0.18</purl>
     </component>
     <component bom-ref="pkg:maven/org.roaringbitmap/RoaringBitmap@0.9.15" type="library">
       <group>org.roaringbitmap</group>
       <name>RoaringBitmap</name>
       <version>0.9.15</version>
       <scope>required</scope>
       <hashes>
         <hash alg="SHA-1">a704d8a1a1f93225c38ecdba12ce5c90f5b2791c</hash>
       </hashes>
       <purl>pkg:maven/org.roaringbitmap/RoaringBitmap@0.9.15</purl>
     </component>
     <component bom-ref="pkg:maven/org.roaringbitmap/shims@0.9.15" type="library">
       <group>org.roaringbitmap</group>
       <name>shims</name>
       <version>0.9.15</version>
       <scope>required</scope>
       <hashes>
         <hash alg="SHA-1">6b712f46643ff8296537a89f786f2703e514955e</hash>
       </hashes>
       <purl>pkg:maven/org.roaringbitmap/shims@0.9.15</purl>
     </component>
     <component bom-ref="pkg:maven/com.auth0/java-jwt@3.19.2" type="library">
       <group>com.auth0</group>
       <name>java-jwt</name>
       <version>3.19.2</version>
       <scope>required</scope>
       <hashes>
         <hash alg="SHA-1">497c48847dcc1074d1060f9be08166aaf0853764</hash>
       </hashes>
       <purl>pkg:maven/com.auth0/java-jwt@3.19.2</purl>
     </component>
     <component bom-ref="pkg:maven/org.json/json@20231013" type="library">
       <group>org.json</group>
       <name>json</name>
       <version>20231013</version>
       <scope>required</scope>
       <hashes>
         <hash alg="SHA-1">e22e0c040fe16f04ffdb85d851d77b07fc05ea52</hash>
       </hashes>
       <purl>pkg:maven/org.json/json@20231013</purl>
     </component>
     <component bom-ref="pkg:maven/org.apache.commons/commons-csv@1.5" type="library">
       <group>org.apache.commons</group>
       <name>commons-csv</name>
       <version>1.5</version>
       <scope>required</scope>
       <hashes>
         <hash alg="SHA-1">e10f140af5b82167640f254fa9d88e35ad74329c</hash>
       </hashes>
       <purl>pkg:maven/org.apache.commons/commons-csv@1.5</purl>
     </component>
     <component bom-ref="pkg:maven/org.apache.httpcomponents/httpclient@4.5.13" type="library">
       <group>org.apache.httpcomponents</group>
       <name>httpclient</name>
       <version>4.5.13</version>
       <scope>required</scope>
       <hashes>
         <hash alg="SHA-1">e5f6cae5ca7ecaac1ec2827a9e2d65ae2869cada</hash>
       </hashes>
       <purl>pkg:maven/org.apache.httpcomponents/httpclient@4.5.13</purl>
     </component>
     <component bom-ref="pkg:maven/org.apache.httpcomponents/httpcore@4.4.13" type="library">
       <group>org.apache.httpcomponents</group>
       <name>httpcore</name>
       <version>4.4.13</version>
       <scope>required</scope>
       <hashes>
         <hash alg="SHA-1">853b96d3afbb7bf8cc303fe27ee96836a10c1834</hash>
       </hashes>
       <purl>pkg:maven/org.apache.httpcomponents/httpcore@4.4.13</purl>
     </component>
     <component bom-ref="pkg:maven/commons-logging/commons-logging@1.2" type="library">
       <group>commons-logging</group>
       <name>commons-logging</name>
       <version>1.2</version>
       <scope>required</scope>
       <hashes>
         <hash alg="SHA-1">4bfc12adfe4842bf07b657f0369c4cb522955686</hash>
       </hashes>
       <purl>pkg:maven/commons-logging/commons-logging@1.2</purl>
     </component>
     <component bom-ref="pkg:maven/commons-codec/commons-codec@1.11" type="library">
       <group>commons-codec</group>
       <name>commons-codec</name>
       <version>1.11</version>
       <scope>required</scope>
       <hashes>
         <hash alg="SHA-1">3acb4705652e16236558f0f4f2192cc33c3bd189</hash>
       </hashes>
       <purl>pkg:maven/commons-codec/commons-codec@1.11</purl>
     </component>
     <component bom-ref="pkg:maven/com.alibaba/fastjson@1.2.83" type="library">
       <group>com.alibaba</group>
       <name>fastjson</name>
       <version>1.2.83</version>
       <scope>required</scope>
       <hashes>
         <hash alg="SHA-1">9ee94951bc107d382519975d04bc950b6c6ab297</hash>
       </hashes>
       <purl>pkg:maven/com.alibaba/fastjson@1.2.83</purl>
     </component>
     <component bom-ref="pkg:maven/org.apache.commons/commons-lang3@3.10" type="library">
       <group>org.apache.commons</group>
       <name>commons-lang3</name>
       <version>3.10</version>
       <scope>required</scope>
       <hashes>
         <hash alg="SHA-1">e155460aaf5b464062a09c3923f089ce99128a17</hash>
       </hashes>
       <purl>pkg:maven/org.apache.commons/commons-lang3@3.10</purl>
     </component>
     <component bom-ref="pkg:maven/com.google.protobuf/protobuf-java@3.16.3" type="library">
       <group>com.google.protobuf</group>
       <name>protobuf-java</name>
       <version>3.16.3</version>
       <scope>required</scope>
       <hashes>
         <hash alg="SHA-1">0000000000000000000000000000000000000000</hash>
       </hashes>
       <purl>pkg:maven/com.google.protobuf/protobuf-java@3.16.3</purl>
     </component>
     <component bom-ref="pkg:maven/com.google.protobuf/protobuf-java-util@3.23.4" type="library">
       <group>com.google.protobuf</group>
       <name>protobuf-java-util</name>
       <version>3.23.4</version>
       <scope>required</scope>
       <hashes>
         <hash alg="SHA-1">a6f68e7f4edfcbe7b9cbce1bf2923dc62d9aa0bd</hash>
       </hashes>
       <purl>pkg:maven/com.google.protobuf/protobuf-java-util@3.23.4</purl>
     </component>
     <component bom-ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2" type="library">
       <group>com.google.code.findbugs</group>
       <name>jsr305</name>
       <version>3.0.2</version>
       <scope>required</scope>
       <hashes>
         <hash alg="SHA-1">25ea2e8b0c338a877313bd4672d3fe056ea78f0d</hash>
       </hashes>
       <purl>pkg:maven/com.google.code.findbugs/jsr305@3.0.2</purl>
     </component>
     <component bom-ref="pkg:maven/com.google.code.gson/gson@2.8.9" type="library">
       <group>com.google.code.gson</group>
       <name>gson</name>
       <version>2.8.9</version>
       <scope>required</scope>
       <hashes>
         <hash alg="SHA-1">8a432c1d6825781e21a02db2e2c33c5fde2833b9</hash>
       </hashes>
       <purl>pkg:maven/com.google.code.gson/gson@2.8.9</purl>
     </component>
     <component bom-ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0" type="library">
       <group>com.google.errorprone</group>
       <name>error_prone_annotations</name>
       <version>2.18.0</version>
       <scope>required</scope>
       <hashes>
         <hash alg="SHA-1">89b684257096f548fa39a7df9fdaa409d4d4df91</hash>
       </hashes>
       <purl>pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0</purl>
     </component>
     <component bom-ref="pkg:maven/com.google.guava/guava@32.0.1-jre" type="library">
       <group>com.google.guava</group>
       <name>guava</name>
       <version>32.0.1-jre</version>
       <scope>required</scope>
       <hashes>
         <hash alg="SHA-1">6e5d51a72d142f2d40a57dfb897188b36a95b489</hash>
       </hashes>
       <purl>pkg:maven/com.google.guava/guava@32.0.1-jre</purl>
     </component>
     <component bom-ref="pkg:maven/com.google.guava/failureaccess@1.0.1" type="library">
       <group>com.google.guava</group>
       <name>failureaccess</name>
       <version>1.0.1</version>
       <scope>required</scope>
       <hashes>
         <hash alg="SHA-1">1dcf1de382a0bf95a3d8b0849546c88bac1292c9</hash>
       </hashes>
       <purl>pkg:maven/com.google.guava/failureaccess@1.0.1</purl>
     </component>
     <component bom-ref="pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava" type="library">
       <group>com.google.guava</group>
       <name>listenablefuture</name>
       <version>9999.0-empty-to-avoid-conflict-with-guava</version>
       <scope>required</scope>
       <hashes>
         <hash alg="SHA-1">b421526c5f297295adef1c886e5246c39d4ac629</hash>
       </hashes>
       <purl>pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava</purl>
     </component>
     <component bom-ref="pkg:maven/org.checkerframework/checker-qual@3.33.0" type="library">
       <group>org.checkerframework</group>
       <name>checker-qual</name>
       <version>3.33.0</version>
       <scope>required</scope>
       <hashes>
         <hash alg="SHA-1">de2b60b62da487644fc11f734e73c8b0b431238f</hash>
       </hashes>
       <purl>pkg:maven/org.checkerframework/checker-qual@3.33.0</purl>
     </component>
     <component bom-ref="pkg:maven/com.google.j2objc/j2objc-annotations@2.8" type="library">
       <group>com.google.j2objc</group>
       <name>j2objc-annotations</name>
       <version>2.8</version>
       <scope>required</scope>
       <hashes>
         <hash alg="SHA-1">c85270e307e7b822f1086b93689124b89768e273</hash>
       </hashes>
       <purl>pkg:maven/com.google.j2objc/j2objc-annotations@2.8</purl>
     </component>
   </components>
   <dependencies>
     <dependency ref="pkg:maven/com.bytedance.bytehouse/driver-java@1.1.87">
       <dependency ref="pkg:maven/com.bytedance.bytehouse/driver-java@1.1.87"></dependency>
       <dependency ref="pkg:maven/io.airlift/aircompressor@0.18"></dependency>
       <dependency ref="pkg:maven/org.roaringbitmap/RoaringBitmap@0.9.15"></dependency>
       <dependency ref="pkg:maven/org.roaringbitmap/shims@0.9.15"></dependency>
       <dependency ref="pkg:maven/com.auth0/java-jwt@3.19.2"></dependency>
       <dependency ref="pkg:maven/org.json/json@20231013"></dependency>
       <dependency ref="pkg:maven/org.apache.commons/commons-csv@1.5"></dependency>
       <dependency ref="pkg:maven/org.apache.httpcomponents/httpclient@4.5.13"></dependency>
       <dependency ref="pkg:maven/org.apache.httpcomponents/httpcore@4.4.13"></dependency>
       <dependency ref="pkg:maven/commons-logging/commons-logging@1.2"></dependency>
       <dependency ref="pkg:maven/commons-codec/commons-codec@1.11"></dependency>
       <dependency ref="pkg:maven/com.alibaba/fastjson@1.2.83"></dependency>
       <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.10"></dependency>
       <dependency ref="pkg:maven/com.google.protobuf/protobuf-java@3.16.3"></dependency>
       <dependency ref="pkg:maven/com.google.protobuf/protobuf-java-util@3.23.4"></dependency>
       <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2"></dependency>
       <dependency ref="pkg:maven/com.google.code.gson/gson@2.8.9"></dependency>
       <dependency ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0"></dependency>
       <dependency ref="pkg:maven/com.google.guava/guava@32.0.1-jre"></dependency>
       <dependency ref="pkg:maven/com.google.guava/failureaccess@1.0.1"></dependency>
       <dependency ref="pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava"></dependency>
       <dependency ref="pkg:maven/org.checkerframework/checker-qual@3.33.0"></dependency>
       <dependency ref="pkg:maven/com.google.j2objc/j2objc-annotations@2.8"></dependency>
     </dependency>
   </dependencies>
 </bom>