<?xml version="1.0" encoding="UTF-8"?>
 <bom xmlns="http://cyclonedx.org/schema/bom/1.3" serialNumber="urn:uuid:07e7a6a6-b7bc-44e5-bf03-44f5affc40af" version="1">
   <metadata>
     <timestamp>2025-09-29T11:34:21Z</timestamp>
     <tools>
       <tool>
         <vendor>CycloneDX</vendor>
         <name>junkrat</name>
         <version>1.0.18</version>
         <hashes>
           <hash alg="SHA-256">82f47effc9c65760e6ec1e8ff2c1a1e040eedb5b1cbc9c82f3fe0678cf5b8317</hash>
         </hashes>
       </tool>
     </tools>
     <component bom-ref="pkg:maven/com.bytedance.bytehouse/driver-java@1.1.88" type="application">
       <group>com.bytedance.bytehouse</group>
       <name>driver-java</name>
       <version>1.1.88</version>
       <hashes>
         <hash alg="SHA-256">8c977888fd224cbc07debbdf7929f497bf3763e355d4917d41cc82d8cb2f7e1c</hash>
       </hashes>
       <purl>pkg:maven/com.bytedance.bytehouse/driver-java@1.1.88</purl>
       <externalReferences>
         <reference type="vcs">
           <url>https://code.byted.org/bytehouse/driver-java.git</url>
           <hashes>
             <hash alg="SHA-1">d225ea90956ab26ae3e84b4c95b9640aff589bd2</hash>
           </hashes>
         </reference>
         <reference type="distribution">
           <url>https://maven.byted.org/repository/releasescom/bytedance/bytehouse/driver-java/1.1.88/driver-java-1.1.88.jar</url>
           <hashes>
             <hash alg="SHA-256">8c977888fd224cbc07debbdf7929f497bf3763e355d4917d41cc82d8cb2f7e1c</hash>
           </hashes>
         </reference>
         <reference type="distribution">
           <url>https://maven.byted.org/repository/releasescom/bytedance/bytehouse/driver-java/1.1.88/driver-java-1.1.88-all.jar</url>
           <hashes>
             <hash alg="SHA-256">2b08515a7f04458358f080a150803a58c0b9f83c6a5d30d2efd7c934b561df27</hash>
           </hashes>
         </reference>
         <reference type="distribution">
           <url>https://maven.byted.org/repository/releasescom/bytedance/bytehouse/driver-java/1.1.88/driver-java-1.1.88-all.jar.md5</url>
           <hashes>
             <hash alg="SHA-256">4ea8bb4a9ffaeb990990d195d9a01a41a68f24cec28df9c6bfc23f21644a32d1</hash>
           </hashes>
         </reference>
         <reference type="distribution">
           <url>https://maven.byted.org/repository/releasescom/bytedance/bytehouse/driver-java/1.1.88/driver-java-1.1.88-all.jar.sha1</url>
           <hashes>
             <hash alg="SHA-256">678f17ded2c5c62f68375f3f83528090053640724200505d9685ffe59a1a9aab</hash>
           </hashes>
         </reference>
         <reference type="distribution">
           <url>https://maven.byted.org/repository/releasescom/bytedance/bytehouse/driver-java/1.1.88/driver-java-1.1.88-all.jar.sha256</url>
           <hashes>
             <hash alg="SHA-256">d472ecfe0a5ba51da677bf4ac6ff856b62dfbaf6a91b662ec4da670e48d35d69</hash>
           </hashes>
         </reference>
         <reference type="distribution">
           <url>https://maven.byted.org/repository/releasescom/bytedance/bytehouse/driver-java/1.1.88/driver-java-1.1.88-all.jar.sha512</url>
           <hashes>
             <hash alg="SHA-256">61f0ee0dc73a7651aa075f455ad2e591f8dff8c41e59d75b800d7ee2fa88066f</hash>
           </hashes>
         </reference>
         <reference type="distribution">
           <url>https://maven.byted.org/repository/releasescom/bytedance/bytehouse/driver-java/1.1.88/driver-java-1.1.88-sources.jar</url>
           <hashes>
             <hash alg="SHA-256">08c294fe62909a0126e8ae94bd5fd531da150a26d353bd82299d7e2a23f25422</hash>
           </hashes>
         </reference>
         <reference type="distribution">
           <url>https://maven.byted.org/repository/releasescom/bytedance/bytehouse/driver-java/1.1.88/driver-java-1.1.88-sources.jar.md5</url>
           <hashes>
             <hash alg="SHA-256">911c4a2ec2bea1ec4c402fab08acb97c4071273d4b57232d85b82e47b38e4d1c</hash>
           </hashes>
         </reference>
         <reference type="distribution">
           <url>https://maven.byted.org/repository/releasescom/bytedance/bytehouse/driver-java/1.1.88/driver-java-1.1.88-sources.jar.sha1</url>
           <hashes>
             <hash alg="SHA-256">13c0caa91b6f603c12c6ba108fc914c1228a8aa83f2906f5171470170e75ba5b</hash>
           </hashes>
         </reference>
         <reference type="distribution">
           <url>https://maven.byted.org/repository/releasescom/bytedance/bytehouse/driver-java/1.1.88/driver-java-1.1.88-sources.jar.sha256</url>
           <hashes>
             <hash alg="SHA-256">dd65f9845a480d57c96a01b1cac3d3f102a58a0638daeb1311c2f8d999b9f9ca</hash>
           </hashes>
         </reference>
         <reference type="distribution">
           <url>https://maven.byted.org/repository/releasescom/bytedance/bytehouse/driver-java/1.1.88/driver-java-1.1.88-sources.jar.sha512</url>
           <hashes>
             <hash alg="SHA-256">0a275a004e82d559604a9792f8a26a203c3ac0c9cc9f7469855dcba3cddddcc2</hash>
           </hashes>
         </reference>
         <reference type="distribution">
           <url>https://maven.byted.org/repository/releasescom/bytedance/bytehouse/driver-java/1.1.88/driver-java-1.1.88.jar.md5</url>
           <hashes>
             <hash alg="SHA-256">34ac3cc0c2ad0044dc685690a5bfbb31755a0090ddf23287bbe9240008d3598d</hash>
           </hashes>
         </reference>
         <reference type="distribution">
           <url>https://maven.byted.org/repository/releasescom/bytedance/bytehouse/driver-java/1.1.88/driver-java-1.1.88.jar.sha1</url>
           <hashes>
             <hash alg="SHA-256">4e356f26528512425e450d9f0bdc5de1d31a392f2bdb07b0cec8435683e15a82</hash>
           </hashes>
         </reference>
         <reference type="distribution">
           <url>https://maven.byted.org/repository/releasescom/bytedance/bytehouse/driver-java/1.1.88/driver-java-1.1.88.jar.sha256</url>
           <hashes>
             <hash alg="SHA-256">dd2280ea8d85adbeb73822a0fb3eb8614dfd2444d881d4cbbf3aebb63a310f2c</hash>
           </hashes>
         </reference>
         <reference type="distribution">
           <url>https://maven.byted.org/repository/releasescom/bytedance/bytehouse/driver-java/1.1.88/driver-java-1.1.88.jar.sha512</url>
           <hashes>
             <hash alg="SHA-256">4c2b015669ec9c86fd8ae7125ec6c77d787c361fc27a954c300170b7f87833a2</hash>
           </hashes>
         </reference>
         <reference type="distribution">
           <url>https://maven.byted.org/repository/releasescom/bytedance/bytehouse/driver-java/1.1.88/driver-java-1.1.88.module</url>
           <hashes>
             <hash alg="SHA-256">72f725bdc33f9913d204716be5013027d0ef5544abad58c258f4584623780241</hash>
           </hashes>
         </reference>
         <reference type="distribution">
           <url>https://maven.byted.org/repository/releasescom/bytedance/bytehouse/driver-java/1.1.88/driver-java-1.1.88.module.md5</url>
           <hashes>
             <hash alg="SHA-256">143fb5f4ca0753f84302884c66d0c61e979711469e05dc7c217c938b4edda5eb</hash>
           </hashes>
         </reference>
         <reference type="distribution">
           <url>https://maven.byted.org/repository/releasescom/bytedance/bytehouse/driver-java/1.1.88/driver-java-1.1.88.module.sha1</url>
           <hashes>
             <hash alg="SHA-256">bab3523b38e1fe3e1582135fdff1ca3b76ba886c93f04a0735e866cedff15af4</hash>
           </hashes>
         </reference>
         <reference type="distribution">
           <url>https://maven.byted.org/repository/releasescom/bytedance/bytehouse/driver-java/1.1.88/driver-java-1.1.88.module.sha256</url>
           <hashes>
             <hash alg="SHA-256">d5eecb77c06eb554a5f56e354acfb511d2b82764aa645c8e4d66025246cd0049</hash>
           </hashes>
         </reference>
         <reference type="distribution">
           <url>https://maven.byted.org/repository/releasescom/bytedance/bytehouse/driver-java/1.1.88/driver-java-1.1.88.module.sha512</url>
           <hashes>
             <hash alg="SHA-256">67f19d3bdb26f89482024be5a302d9f0eec8b664d0d69fb1d89a3c7545b54ae7</hash>
           </hashes>
         </reference>
         <reference type="distribution">
           <url>https://maven.byted.org/repository/releasescom/bytedance/bytehouse/driver-java/1.1.88/driver-java-1.1.88.pom</url>
           <hashes>
             <hash alg="SHA-256">bd6171b30bf301b023029c8602c963f00953b71a6ae7fbdb1fba9c47583a84f6</hash>
           </hashes>
         </reference>
         <reference type="distribution">
           <url>https://maven.byted.org/repository/releasescom/bytedance/bytehouse/driver-java/1.1.88/driver-java-1.1.88.pom.md5</url>
           <hashes>
             <hash alg="SHA-256">c6b1d79a8596b2527a1a2d7f9c580293256a8e14d26bea5ca48a646afc63efce</hash>
           </hashes>
         </reference>
         <reference type="distribution">
           <url>https://maven.byted.org/repository/releasescom/bytedance/bytehouse/driver-java/1.1.88/driver-java-1.1.88.pom.sha1</url>
           <hashes>
             <hash alg="SHA-256">737ca73a218c5efe09e31f9ba6307700ebbd33a336051362968ede740db5b623</hash>
           </hashes>
         </reference>
         <reference type="distribution">
           <url>https://maven.byted.org/repository/releasescom/bytedance/bytehouse/driver-java/1.1.88/driver-java-1.1.88.pom.sha256</url>
           <hashes>
             <hash alg="SHA-256">c6effb898b56e1fd83684299b04e52672b8a6c21f4d59f0a9c1d0707d0bc7f14</hash>
           </hashes>
         </reference>
         <reference type="distribution">
           <url>https://maven.byted.org/repository/releasescom/bytedance/bytehouse/driver-java/1.1.88/driver-java-1.1.88.pom.sha512</url>
           <hashes>
             <hash alg="SHA-256">a7ce86a60fa5d105003687977eb4edda9606731b45e19c21e370c42cbc78b4f4</hash>
           </hashes>
         </reference>
       </externalReferences>
     </component>
   </metadata>
   <components>
     <component bom-ref="pkg:maven/com.bytedance.bytehouse/driver-java@1.1.88" type="library">
       <group>com.bytedance.bytehouse</group>
       <name>driver-java</name>
       <version>1.1.88</version>
       <scope>required</scope>
       <hashes>
         <hash alg="SHA-1">0000000000000000000000000000000000000000</hash>
       </hashes>
       <purl>pkg:maven/com.bytedance.bytehouse/driver-java@1.1.88</purl>
     </component>
     <component bom-ref="pkg:maven/io.airlift/aircompressor@0.18" type="library">
       <group>io.airlift</group>
       <name>aircompressor</name>
       <version>0.18</version>
       <scope>required</scope>
       <hashes>
         <hash alg="SHA-1">e0f4fbd9447c9ba3e5cc12950d7f8c54c82c4dd1</hash>
       </hashes>
       <purl>pkg:maven/io.airlift/aircompressor@0.18</purl>
     </component>
     <component bom-ref="pkg:maven/org.roaringbitmap/RoaringBitmap@0.9.15" type="library">
       <group>org.roaringbitmap</group>
       <name>RoaringBitmap</name>
       <version>0.9.15</version>
       <scope>required</scope>
       <hashes>
         <hash alg="SHA-1">a704d8a1a1f93225c38ecdba12ce5c90f5b2791c</hash>
       </hashes>
       <purl>pkg:maven/org.roaringbitmap/RoaringBitmap@0.9.15</purl>
     </component>
     <component bom-ref="pkg:maven/org.roaringbitmap/shims@0.9.15" type="library">
       <group>org.roaringbitmap</group>
       <name>shims</name>
       <version>0.9.15</version>
       <scope>required</scope>
       <hashes>
         <hash alg="SHA-1">6b712f46643ff8296537a89f786f2703e514955e</hash>
       </hashes>
       <purl>pkg:maven/org.roaringbitmap/shims@0.9.15</purl>
     </component>
     <component bom-ref="pkg:maven/com.auth0/java-jwt@3.19.2" type="library">
       <group>com.auth0</group>
       <name>java-jwt</name>
       <version>3.19.2</version>
       <scope>required</scope>
       <hashes>
         <hash alg="SHA-1">497c48847dcc1074d1060f9be08166aaf0853764</hash>
       </hashes>
       <purl>pkg:maven/com.auth0/java-jwt@3.19.2</purl>
     </component>
     <component bom-ref="pkg:maven/org.json/json@20231013" type="library">
       <group>org.json</group>
       <name>json</name>
       <version>20231013</version>
       <scope>required</scope>
       <hashes>
         <hash alg="SHA-1">e22e0c040fe16f04ffdb85d851d77b07fc05ea52</hash>
       </hashes>
       <purl>pkg:maven/org.json/json@20231013</purl>
     </component>
     <component bom-ref="pkg:maven/org.apache.commons/commons-csv@1.5" type="library">
       <group>org.apache.commons</group>
       <name>commons-csv</name>
       <version>1.5</version>
       <scope>required</scope>
       <hashes>
         <hash alg="SHA-1">e10f140af5b82167640f254fa9d88e35ad74329c</hash>
       </hashes>
       <purl>pkg:maven/org.apache.commons/commons-csv@1.5</purl>
     </component>
     <component bom-ref="pkg:maven/org.apache.httpcomponents/httpclient@4.5.13" type="library">
       <group>org.apache.httpcomponents</group>
       <name>httpclient</name>
       <version>4.5.13</version>
       <scope>required</scope>
       <hashes>
         <hash alg="SHA-1">e5f6cae5ca7ecaac1ec2827a9e2d65ae2869cada</hash>
       </hashes>
       <purl>pkg:maven/org.apache.httpcomponents/httpclient@4.5.13</purl>
     </component>
     <component bom-ref="pkg:maven/org.apache.httpcomponents/httpcore@4.4.13" type="library">
       <group>org.apache.httpcomponents</group>
       <name>httpcore</name>
       <version>4.4.13</version>
       <scope>required</scope>
       <hashes>
         <hash alg="SHA-1">853b96d3afbb7bf8cc303fe27ee96836a10c1834</hash>
       </hashes>
       <purl>pkg:maven/org.apache.httpcomponents/httpcore@4.4.13</purl>
     </component>
     <component bom-ref="pkg:maven/commons-logging/commons-logging@1.2" type="library">
       <group>commons-logging</group>
       <name>commons-logging</name>
       <version>1.2</version>
       <scope>required</scope>
       <hashes>
         <hash alg="SHA-1">4bfc12adfe4842bf07b657f0369c4cb522955686</hash>
       </hashes>
       <purl>pkg:maven/commons-logging/commons-logging@1.2</purl>
     </component>
     <component bom-ref="pkg:maven/commons-codec/commons-codec@1.11" type="library">
       <group>commons-codec</group>
       <name>commons-codec</name>
       <version>1.11</version>
       <scope>required</scope>
       <hashes>
         <hash alg="SHA-1">3acb4705652e16236558f0f4f2192cc33c3bd189</hash>
       </hashes>
       <purl>pkg:maven/commons-codec/commons-codec@1.11</purl>
     </component>
     <component bom-ref="pkg:maven/com.alibaba/fastjson@1.2.83" type="library">
       <group>com.alibaba</group>
       <name>fastjson</name>
       <version>1.2.83</version>
       <scope>required</scope>
       <hashes>
         <hash alg="SHA-1">9ee94951bc107d382519975d04bc950b6c6ab297</hash>
       </hashes>
       <purl>pkg:maven/com.alibaba/fastjson@1.2.83</purl>
     </component>
     <component bom-ref="pkg:maven/org.apache.commons/commons-lang3@3.10" type="library">
       <group>org.apache.commons</group>
       <name>commons-lang3</name>
       <version>3.10</version>
       <scope>required</scope>
       <hashes>
         <hash alg="SHA-1">e155460aaf5b464062a09c3923f089ce99128a17</hash>
       </hashes>
       <purl>pkg:maven/org.apache.commons/commons-lang3@3.10</purl>
     </component>
     <component bom-ref="pkg:maven/com.google.protobuf/protobuf-java@3.16.3" type="library">
       <group>com.google.protobuf</group>
       <name>protobuf-java</name>
       <version>3.16.3</version>
       <scope>required</scope>
       <hashes>
         <hash alg="SHA-1">0000000000000000000000000000000000000000</hash>
       </hashes>
       <purl>pkg:maven/com.google.protobuf/protobuf-java@3.16.3</purl>
     </component>
     <component bom-ref="pkg:maven/com.google.protobuf/protobuf-java-util@3.23.4" type="library">
       <group>com.google.protobuf</group>
       <name>protobuf-java-util</name>
       <version>3.23.4</version>
       <scope>required</scope>
       <hashes>
         <hash alg="SHA-1">a6f68e7f4edfcbe7b9cbce1bf2923dc62d9aa0bd</hash>
       </hashes>
       <purl>pkg:maven/com.google.protobuf/protobuf-java-util@3.23.4</purl>
     </component>
     <component bom-ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2" type="library">
       <group>com.google.code.findbugs</group>
       <name>jsr305</name>
       <version>3.0.2</version>
       <scope>required</scope>
       <hashes>
         <hash alg="SHA-1">25ea2e8b0c338a877313bd4672d3fe056ea78f0d</hash>
       </hashes>
       <purl>pkg:maven/com.google.code.findbugs/jsr305@3.0.2</purl>
     </component>
     <component bom-ref="pkg:maven/com.google.code.gson/gson@2.8.9" type="library">
       <group>com.google.code.gson</group>
       <name>gson</name>
       <version>2.8.9</version>
       <scope>required</scope>
       <hashes>
         <hash alg="SHA-1">8a432c1d6825781e21a02db2e2c33c5fde2833b9</hash>
       </hashes>
       <purl>pkg:maven/com.google.code.gson/gson@2.8.9</purl>
     </component>
     <component bom-ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0" type="library">
       <group>com.google.errorprone</group>
       <name>error_prone_annotations</name>
       <version>2.18.0</version>
       <scope>required</scope>
       <hashes>
         <hash alg="SHA-1">89b684257096f548fa39a7df9fdaa409d4d4df91</hash>
       </hashes>
       <purl>pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0</purl>
     </component>
     <component bom-ref="pkg:maven/com.google.guava/guava@32.0.1-jre" type="library">
       <group>com.google.guava</group>
       <name>guava</name>
       <version>32.0.1-jre</version>
       <scope>required</scope>
       <hashes>
         <hash alg="SHA-1">6e5d51a72d142f2d40a57dfb897188b36a95b489</hash>
       </hashes>
       <purl>pkg:maven/com.google.guava/guava@32.0.1-jre</purl>
     </component>
     <component bom-ref="pkg:maven/com.google.guava/failureaccess@1.0.1" type="library">
       <group>com.google.guava</group>
       <name>failureaccess</name>
       <version>1.0.1</version>
       <scope>required</scope>
       <hashes>
         <hash alg="SHA-1">1dcf1de382a0bf95a3d8b0849546c88bac1292c9</hash>
       </hashes>
       <purl>pkg:maven/com.google.guava/failureaccess@1.0.1</purl>
     </component>
     <component bom-ref="pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava" type="library">
       <group>com.google.guava</group>
       <name>listenablefuture</name>
       <version>9999.0-empty-to-avoid-conflict-with-guava</version>
       <scope>required</scope>
       <hashes>
         <hash alg="SHA-1">b421526c5f297295adef1c886e5246c39d4ac629</hash>
       </hashes>
       <purl>pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava</purl>
     </component>
     <component bom-ref="pkg:maven/org.checkerframework/checker-qual@3.33.0" type="library">
       <group>org.checkerframework</group>
       <name>checker-qual</name>
       <version>3.33.0</version>
       <scope>required</scope>
       <hashes>
         <hash alg="SHA-1">de2b60b62da487644fc11f734e73c8b0b431238f</hash>
       </hashes>
       <purl>pkg:maven/org.checkerframework/checker-qual@3.33.0</purl>
     </component>
     <component bom-ref="pkg:maven/com.google.j2objc/j2objc-annotations@2.8" type="library">
       <group>com.google.j2objc</group>
       <name>j2objc-annotations</name>
       <version>2.8</version>
       <scope>required</scope>
       <hashes>
         <hash alg="SHA-1">c85270e307e7b822f1086b93689124b89768e273</hash>
       </hashes>
       <purl>pkg:maven/com.google.j2objc/j2objc-annotations@2.8</purl>
     </component>
   </components>
   <dependencies>
     <dependency ref="pkg:maven/com.bytedance.bytehouse/driver-java@1.1.88">
       <dependency ref="pkg:maven/com.bytedance.bytehouse/driver-java@1.1.88"></dependency>
       <dependency ref="pkg:maven/io.airlift/aircompressor@0.18"></dependency>
       <dependency ref="pkg:maven/org.roaringbitmap/RoaringBitmap@0.9.15"></dependency>
       <dependency ref="pkg:maven/org.roaringbitmap/shims@0.9.15"></dependency>
       <dependency ref="pkg:maven/com.auth0/java-jwt@3.19.2"></dependency>
       <dependency ref="pkg:maven/org.json/json@20231013"></dependency>
       <dependency ref="pkg:maven/org.apache.commons/commons-csv@1.5"></dependency>
       <dependency ref="pkg:maven/org.apache.httpcomponents/httpclient@4.5.13"></dependency>
       <dependency ref="pkg:maven/org.apache.httpcomponents/httpcore@4.4.13"></dependency>
       <dependency ref="pkg:maven/commons-logging/commons-logging@1.2"></dependency>
       <dependency ref="pkg:maven/commons-codec/commons-codec@1.11"></dependency>
       <dependency ref="pkg:maven/com.alibaba/fastjson@1.2.83"></dependency>
       <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.10"></dependency>
       <dependency ref="pkg:maven/com.google.protobuf/protobuf-java@3.16.3"></dependency>
       <dependency ref="pkg:maven/com.google.protobuf/protobuf-java-util@3.23.4"></dependency>
       <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2"></dependency>
       <dependency ref="pkg:maven/com.google.code.gson/gson@2.8.9"></dependency>
       <dependency ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0"></dependency>
       <dependency ref="pkg:maven/com.google.guava/guava@32.0.1-jre"></dependency>
       <dependency ref="pkg:maven/com.google.guava/failureaccess@1.0.1"></dependency>
       <dependency ref="pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava"></dependency>
       <dependency ref="pkg:maven/org.checkerframework/checker-qual@3.33.0"></dependency>
       <dependency ref="pkg:maven/com.google.j2objc/j2objc-annotations@2.8"></dependency>
     </dependency>
   </dependencies>
 </bom>