<?xml version="1.0" encoding="UTF-8"?>
 <bom xmlns="http://cyclonedx.org/schema/bom/1.3" serialNumber="urn:uuid:e708639d-166b-4aec-bf1f-2cad802c86a8" version="1">
   <metadata>
     <timestamp>2026-08-31T11:00:15Z</timestamp>
     <tools>
       <tool>
         <vendor>CycloneDX</vendor>
         <name>junkrat</name>
         <version>1.0.18</version>
         <hashes>
           <hash alg="SHA-256">82f47effc9c65760e6ec1e8ff2c1a1e040eedb5b1cbc9c82f3fe0678cf5b8317</hash>
         </hashes>
       </tool>
     </tools>
     <component bom-ref="pkg:maven/com.bytedance.bytehouse/driver-java@1.1.96" type="application">
       <group>com.bytedance.bytehouse</group>
       <name>driver-java</name>
       <version>1.1.96</version>
       <hashes>
         <hash alg="SHA-256">7747e2e3cd61ada66b59dbbb232a6e91b825e0de4b352a792c3bdce44ccc7c82</hash>
       </hashes>
       <purl>pkg:maven/com.bytedance.bytehouse/driver-java@1.1.96</purl>
       <externalReferences>
         <reference type="vcs">
           <url>https://code.byted.org/bytehouse/driver-java.git</url>
           <hashes>
             <hash alg="SHA-1">add4a5ecf72b3b6402775cbbd1cb87e710ebbf85</hash>
           </hashes>
         </reference>
         <reference type="distribution">
           <url>https://maven.byted.org/repository/releasescom/bytedance/bytehouse/driver-java/1.1.96/driver-java-1.1.96.jar</url>
           <hashes>
             <hash alg="SHA-256">7747e2e3cd61ada66b59dbbb232a6e91b825e0de4b352a792c3bdce44ccc7c82</hash>
           </hashes>
         </reference>
         <reference type="distribution">
           <url>https://maven.byted.org/repository/releasescom/bytedance/bytehouse/driver-java/1.1.96/driver-java-1.1.96-all.jar</url>
           <hashes>
             <hash alg="SHA-256">cf5f958211d4dc3fc72147ee5eae2f6c85ad7e767d38ab79cfbb806ba7ba7203</hash>
           </hashes>
         </reference>
         <reference type="distribution">
           <url>https://maven.byted.org/repository/releasescom/bytedance/bytehouse/driver-java/1.1.96/driver-java-1.1.96-all.jar.md5</url>
           <hashes>
             <hash alg="SHA-256">45d2ee485c487df7586f2fe1a75cff989bea1d7f37cf75b87742f0e63315f0ff</hash>
           </hashes>
         </reference>
         <reference type="distribution">
           <url>https://maven.byted.org/repository/releasescom/bytedance/bytehouse/driver-java/1.1.96/driver-java-1.1.96-all.jar.sha1</url>
           <hashes>
             <hash alg="SHA-256">1ca9e4b856d4197a62ef1995db9598c3a463521b9100e3504c2f6e182d082d9b</hash>
           </hashes>
         </reference>
         <reference type="distribution">
           <url>https://maven.byted.org/repository/releasescom/bytedance/bytehouse/driver-java/1.1.96/driver-java-1.1.96-all.jar.sha256</url>
           <hashes>
             <hash alg="SHA-256">7413139a958a8098f8263c44cb0e34841e4c5e4a674443cf3bf43899e2bd3082</hash>
           </hashes>
         </reference>
         <reference type="distribution">
           <url>https://maven.byted.org/repository/releasescom/bytedance/bytehouse/driver-java/1.1.96/driver-java-1.1.96-all.jar.sha512</url>
           <hashes>
             <hash alg="SHA-256">21865616eab661fe622b842ba8b90babd59f0494fbac631ff2f3728425d6ac20</hash>
           </hashes>
         </reference>
         <reference type="distribution">
           <url>https://maven.byted.org/repository/releasescom/bytedance/bytehouse/driver-java/1.1.96/driver-java-1.1.96-sources.jar</url>
           <hashes>
             <hash alg="SHA-256">c0078b2e0867d2cc3aea7856710e8e55e3d2a0d6322ed497c3fc6b1d35beb4ac</hash>
           </hashes>
         </reference>
         <reference type="distribution">
           <url>https://maven.byted.org/repository/releasescom/bytedance/bytehouse/driver-java/1.1.96/driver-java-1.1.96-sources.jar.md5</url>
           <hashes>
             <hash alg="SHA-256">46f03e6f6ca3e54b14d3a91e8f5d9d7187d941e2c79b3b9355d9f68bd721a577</hash>
           </hashes>
         </reference>
         <reference type="distribution">
           <url>https://maven.byted.org/repository/releasescom/bytedance/bytehouse/driver-java/1.1.96/driver-java-1.1.96-sources.jar.sha1</url>
           <hashes>
             <hash alg="SHA-256">4a2efde5ce0a99e12b796c327f54795996675bd6a4a9a1c189152853f85900b7</hash>
           </hashes>
         </reference>
         <reference type="distribution">
           <url>https://maven.byted.org/repository/releasescom/bytedance/bytehouse/driver-java/1.1.96/driver-java-1.1.96-sources.jar.sha256</url>
           <hashes>
             <hash alg="SHA-256">f5787b058ed5baa433f037822cdc9b3c17070935dec3755baba8343e8545d946</hash>
           </hashes>
         </reference>
         <reference type="distribution">
           <url>https://maven.byted.org/repository/releasescom/bytedance/bytehouse/driver-java/1.1.96/driver-java-1.1.96-sources.jar.sha512</url>
           <hashes>
             <hash alg="SHA-256">f958ea4b29d199b9f8be402c403a53a8d0b2f42a998561cc352109b0e5fdb8d9</hash>
           </hashes>
         </reference>
         <reference type="distribution">
           <url>https://maven.byted.org/repository/releasescom/bytedance/bytehouse/driver-java/1.1.96/driver-java-1.1.96.jar.md5</url>
           <hashes>
             <hash alg="SHA-256">141eb1819b1b3722742b30e47198f257a5eefeb54869fa62e09d713ae2b8d547</hash>
           </hashes>
         </reference>
         <reference type="distribution">
           <url>https://maven.byted.org/repository/releasescom/bytedance/bytehouse/driver-java/1.1.96/driver-java-1.1.96.jar.sha1</url>
           <hashes>
             <hash alg="SHA-256">9f468b0c412386ed076cd6ff17a803c70d3a3119559c94aa50bcb8b3f761f5f6</hash>
           </hashes>
         </reference>
         <reference type="distribution">
           <url>https://maven.byted.org/repository/releasescom/bytedance/bytehouse/driver-java/1.1.96/driver-java-1.1.96.jar.sha256</url>
           <hashes>
             <hash alg="SHA-256">f17e05aac064051bfcf190e01c8fa7e785b8bb418ed7a5df888a7fb597b81847</hash>
           </hashes>
         </reference>
         <reference type="distribution">
           <url>https://maven.byted.org/repository/releasescom/bytedance/bytehouse/driver-java/1.1.96/driver-java-1.1.96.jar.sha512</url>
           <hashes>
             <hash alg="SHA-256">21a5a3743978b6f20844342b6c1bb77cb6ad9c458cf8d985647de5ce8e47f5bb</hash>
           </hashes>
         </reference>
         <reference type="distribution">
           <url>https://maven.byted.org/repository/releasescom/bytedance/bytehouse/driver-java/1.1.96/driver-java-1.1.96.module</url>
           <hashes>
             <hash alg="SHA-256">74113d80475c2453a8c00d57af3b60ed846911d8d6df090fd91776a242086dc8</hash>
           </hashes>
         </reference>
         <reference type="distribution">
           <url>https://maven.byted.org/repository/releasescom/bytedance/bytehouse/driver-java/1.1.96/driver-java-1.1.96.module.md5</url>
           <hashes>
             <hash alg="SHA-256">a6c403fce0e6dcb3327b0e6bdc33427b76dd8b63001aa89f45ffd7f6f58e21d4</hash>
           </hashes>
         </reference>
         <reference type="distribution">
           <url>https://maven.byted.org/repository/releasescom/bytedance/bytehouse/driver-java/1.1.96/driver-java-1.1.96.module.sha1</url>
           <hashes>
             <hash alg="SHA-256">748ea1ae87bf4138df298b9376e591c00fe2251f06ff8dcae72ff2d70dfbc81b</hash>
           </hashes>
         </reference>
         <reference type="distribution">
           <url>https://maven.byted.org/repository/releasescom/bytedance/bytehouse/driver-java/1.1.96/driver-java-1.1.96.module.sha256</url>
           <hashes>
             <hash alg="SHA-256">a2e19b7dcfb11315da9a1ece839e1ec2eced41c436012c41cc5a6b2574547e05</hash>
           </hashes>
         </reference>
         <reference type="distribution">
           <url>https://maven.byted.org/repository/releasescom/bytedance/bytehouse/driver-java/1.1.96/driver-java-1.1.96.module.sha512</url>
           <hashes>
             <hash alg="SHA-256">158e9ffed3bf960cf9b29b230f6bcec7988d4e0e107be0db8cef93faad2847cd</hash>
           </hashes>
         </reference>
         <reference type="distribution">
           <url>https://maven.byted.org/repository/releasescom/bytedance/bytehouse/driver-java/1.1.96/driver-java-1.1.96.pom</url>
           <hashes>
             <hash alg="SHA-256">8ccddcdeb750d07c218af887804236bd620813dae5a302413ba0ca5f31ab1cc3</hash>
           </hashes>
         </reference>
         <reference type="distribution">
           <url>https://maven.byted.org/repository/releasescom/bytedance/bytehouse/driver-java/1.1.96/driver-java-1.1.96.pom.md5</url>
           <hashes>
             <hash alg="SHA-256">6b4f73b60bc7ff411f34c7e265535148d5f0ca16d9b53b38234d221826c93cb9</hash>
           </hashes>
         </reference>
         <reference type="distribution">
           <url>https://maven.byted.org/repository/releasescom/bytedance/bytehouse/driver-java/1.1.96/driver-java-1.1.96.pom.sha1</url>
           <hashes>
             <hash alg="SHA-256">17ed600ef21a026ca55ebe28c49b6e70c11360e06ab338d82160132c3b6fc8b9</hash>
           </hashes>
         </reference>
         <reference type="distribution">
           <url>https://maven.byted.org/repository/releasescom/bytedance/bytehouse/driver-java/1.1.96/driver-java-1.1.96.pom.sha256</url>
           <hashes>
             <hash alg="SHA-256">5ab7525c758ebbe52e73e879d0c57cb48584b5b9374f5d7c9805bcd78229acbc</hash>
           </hashes>
         </reference>
         <reference type="distribution">
           <url>https://maven.byted.org/repository/releasescom/bytedance/bytehouse/driver-java/1.1.96/driver-java-1.1.96.pom.sha512</url>
           <hashes>
             <hash alg="SHA-256">67b3646b287e50a9afa77d6f493a3826867988777865c7c5640cabf42ac8b50b</hash>
           </hashes>
         </reference>
       </externalReferences>
     </component>
   </metadata>
   <components>
     <component bom-ref="pkg:maven/com.bytedance.bytehouse/driver-java@1.1.96" type="library">
       <group>com.bytedance.bytehouse</group>
       <name>driver-java</name>
       <version>1.1.96</version>
       <scope>required</scope>
       <hashes>
         <hash alg="SHA-1">0000000000000000000000000000000000000000</hash>
       </hashes>
       <purl>pkg:maven/com.bytedance.bytehouse/driver-java@1.1.96</purl>
     </component>
     <component bom-ref="pkg:maven/io.airlift/aircompressor@0.18" type="library">
       <group>io.airlift</group>
       <name>aircompressor</name>
       <version>0.18</version>
       <scope>required</scope>
       <hashes>
         <hash alg="SHA-1">e0f4fbd9447c9ba3e5cc12950d7f8c54c82c4dd1</hash>
       </hashes>
       <purl>pkg:maven/io.airlift/aircompressor@0.18</purl>
     </component>
     <component bom-ref="pkg:maven/org.roaringbitmap/RoaringBitmap@0.9.15" type="library">
       <group>org.roaringbitmap</group>
       <name>RoaringBitmap</name>
       <version>0.9.15</version>
       <scope>required</scope>
       <hashes>
         <hash alg="SHA-1">a704d8a1a1f93225c38ecdba12ce5c90f5b2791c</hash>
       </hashes>
       <purl>pkg:maven/org.roaringbitmap/RoaringBitmap@0.9.15</purl>
     </component>
     <component bom-ref="pkg:maven/org.roaringbitmap/shims@0.9.15" type="library">
       <group>org.roaringbitmap</group>
       <name>shims</name>
       <version>0.9.15</version>
       <scope>required</scope>
       <hashes>
         <hash alg="SHA-1">6b712f46643ff8296537a89f786f2703e514955e</hash>
       </hashes>
       <purl>pkg:maven/org.roaringbitmap/shims@0.9.15</purl>
     </component>
     <component bom-ref="pkg:maven/com.auth0/java-jwt@3.19.2" type="library">
       <group>com.auth0</group>
       <name>java-jwt</name>
       <version>3.19.2</version>
       <scope>required</scope>
       <hashes>
         <hash alg="SHA-1">497c48847dcc1074d1060f9be08166aaf0853764</hash>
       </hashes>
       <purl>pkg:maven/com.auth0/java-jwt@3.19.2</purl>
     </component>
     <component bom-ref="pkg:maven/org.json/json@20231013" type="library">
       <group>org.json</group>
       <name>json</name>
       <version>20231013</version>
       <scope>required</scope>
       <hashes>
         <hash alg="SHA-1">e22e0c040fe16f04ffdb85d851d77b07fc05ea52</hash>
       </hashes>
       <purl>pkg:maven/org.json/json@20231013</purl>
     </component>
     <component bom-ref="pkg:maven/org.apache.commons/commons-csv@1.5" type="library">
       <group>org.apache.commons</group>
       <name>commons-csv</name>
       <version>1.5</version>
       <scope>required</scope>
       <hashes>
         <hash alg="SHA-1">e10f140af5b82167640f254fa9d88e35ad74329c</hash>
       </hashes>
       <purl>pkg:maven/org.apache.commons/commons-csv@1.5</purl>
     </component>
     <component bom-ref="pkg:maven/org.apache.httpcomponents/httpclient@4.5.13" type="library">
       <group>org.apache.httpcomponents</group>
       <name>httpclient</name>
       <version>4.5.13</version>
       <scope>required</scope>
       <hashes>
         <hash alg="SHA-1">e5f6cae5ca7ecaac1ec2827a9e2d65ae2869cada</hash>
       </hashes>
       <purl>pkg:maven/org.apache.httpcomponents/httpclient@4.5.13</purl>
     </component>
     <component bom-ref="pkg:maven/org.apache.httpcomponents/httpcore@4.4.13" type="library">
       <group>org.apache.httpcomponents</group>
       <name>httpcore</name>
       <version>4.4.13</version>
       <scope>required</scope>
       <hashes>
         <hash alg="SHA-1">853b96d3afbb7bf8cc303fe27ee96836a10c1834</hash>
       </hashes>
       <purl>pkg:maven/org.apache.httpcomponents/httpcore@4.4.13</purl>
     </component>
     <component bom-ref="pkg:maven/commons-logging/commons-logging@1.2" type="library">
       <group>commons-logging</group>
       <name>commons-logging</name>
       <version>1.2</version>
       <scope>required</scope>
       <hashes>
         <hash alg="SHA-1">4bfc12adfe4842bf07b657f0369c4cb522955686</hash>
       </hashes>
       <purl>pkg:maven/commons-logging/commons-logging@1.2</purl>
     </component>
     <component bom-ref="pkg:maven/commons-codec/commons-codec@1.11" type="library">
       <group>commons-codec</group>
       <name>commons-codec</name>
       <version>1.11</version>
       <scope>required</scope>
       <hashes>
         <hash alg="SHA-1">3acb4705652e16236558f0f4f2192cc33c3bd189</hash>
       </hashes>
       <purl>pkg:maven/commons-codec/commons-codec@1.11</purl>
     </component>
     <component bom-ref="pkg:maven/com.alibaba/fastjson@1.2.83" type="library">
       <group>com.alibaba</group>
       <name>fastjson</name>
       <version>1.2.83</version>
       <scope>required</scope>
       <hashes>
         <hash alg="SHA-1">9ee94951bc107d382519975d04bc950b6c6ab297</hash>
       </hashes>
       <purl>pkg:maven/com.alibaba/fastjson@1.2.83</purl>
     </component>
     <component bom-ref="pkg:maven/org.apache.commons/commons-lang3@3.10" type="library">
       <group>org.apache.commons</group>
       <name>commons-lang3</name>
       <version>3.10</version>
       <scope>required</scope>
       <hashes>
         <hash alg="SHA-1">e155460aaf5b464062a09c3923f089ce99128a17</hash>
       </hashes>
       <purl>pkg:maven/org.apache.commons/commons-lang3@3.10</purl>
     </component>
     <component bom-ref="pkg:maven/com.google.protobuf/protobuf-java@3.16.3" type="library">
       <group>com.google.protobuf</group>
       <name>protobuf-java</name>
       <version>3.16.3</version>
       <scope>required</scope>
       <hashes>
         <hash alg="SHA-1">0000000000000000000000000000000000000000</hash>
       </hashes>
       <purl>pkg:maven/com.google.protobuf/protobuf-java@3.16.3</purl>
     </component>
     <component bom-ref="pkg:maven/com.google.protobuf/protobuf-java-util@3.23.4" type="library">
       <group>com.google.protobuf</group>
       <name>protobuf-java-util</name>
       <version>3.23.4</version>
       <scope>required</scope>
       <hashes>
         <hash alg="SHA-1">a6f68e7f4edfcbe7b9cbce1bf2923dc62d9aa0bd</hash>
       </hashes>
       <purl>pkg:maven/com.google.protobuf/protobuf-java-util@3.23.4</purl>
     </component>
     <component bom-ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2" type="library">
       <group>com.google.code.findbugs</group>
       <name>jsr305</name>
       <version>3.0.2</version>
       <scope>required</scope>
       <hashes>
         <hash alg="SHA-1">25ea2e8b0c338a877313bd4672d3fe056ea78f0d</hash>
       </hashes>
       <purl>pkg:maven/com.google.code.findbugs/jsr305@3.0.2</purl>
     </component>
     <component bom-ref="pkg:maven/com.google.code.gson/gson@2.8.9" type="library">
       <group>com.google.code.gson</group>
       <name>gson</name>
       <version>2.8.9</version>
       <scope>required</scope>
       <hashes>
         <hash alg="SHA-1">8a432c1d6825781e21a02db2e2c33c5fde2833b9</hash>
       </hashes>
       <purl>pkg:maven/com.google.code.gson/gson@2.8.9</purl>
     </component>
     <component bom-ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0" type="library">
       <group>com.google.errorprone</group>
       <name>error_prone_annotations</name>
       <version>2.18.0</version>
       <scope>required</scope>
       <hashes>
         <hash alg="SHA-1">89b684257096f548fa39a7df9fdaa409d4d4df91</hash>
       </hashes>
       <purl>pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0</purl>
     </component>
     <component bom-ref="pkg:maven/com.google.guava/guava@32.0.1-jre" type="library">
       <group>com.google.guava</group>
       <name>guava</name>
       <version>32.0.1-jre</version>
       <scope>required</scope>
       <hashes>
         <hash alg="SHA-1">6e5d51a72d142f2d40a57dfb897188b36a95b489</hash>
       </hashes>
       <purl>pkg:maven/com.google.guava/guava@32.0.1-jre</purl>
     </component>
     <component bom-ref="pkg:maven/com.google.guava/failureaccess@1.0.1" type="library">
       <group>com.google.guava</group>
       <name>failureaccess</name>
       <version>1.0.1</version>
       <scope>required</scope>
       <hashes>
         <hash alg="SHA-1">1dcf1de382a0bf95a3d8b0849546c88bac1292c9</hash>
       </hashes>
       <purl>pkg:maven/com.google.guava/failureaccess@1.0.1</purl>
     </component>
     <component bom-ref="pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava" type="library">
       <group>com.google.guava</group>
       <name>listenablefuture</name>
       <version>9999.0-empty-to-avoid-conflict-with-guava</version>
       <scope>required</scope>
       <hashes>
         <hash alg="SHA-1">b421526c5f297295adef1c886e5246c39d4ac629</hash>
       </hashes>
       <purl>pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava</purl>
     </component>
     <component bom-ref="pkg:maven/org.checkerframework/checker-qual@3.33.0" type="library">
       <group>org.checkerframework</group>
       <name>checker-qual</name>
       <version>3.33.0</version>
       <scope>required</scope>
       <hashes>
         <hash alg="SHA-1">de2b60b62da487644fc11f734e73c8b0b431238f</hash>
       </hashes>
       <purl>pkg:maven/org.checkerframework/checker-qual@3.33.0</purl>
     </component>
     <component bom-ref="pkg:maven/com.google.j2objc/j2objc-annotations@2.8" type="library">
       <group>com.google.j2objc</group>
       <name>j2objc-annotations</name>
       <version>2.8</version>
       <scope>required</scope>
       <hashes>
         <hash alg="SHA-1">c85270e307e7b822f1086b93689124b89768e273</hash>
       </hashes>
       <purl>pkg:maven/com.google.j2objc/j2objc-annotations@2.8</purl>
     </component>
   </components>
   <dependencies>
     <dependency ref="pkg:maven/com.bytedance.bytehouse/driver-java@1.1.96">
       <dependency ref="pkg:maven/com.bytedance.bytehouse/driver-java@1.1.96"></dependency>
       <dependency ref="pkg:maven/io.airlift/aircompressor@0.18"></dependency>
       <dependency ref="pkg:maven/org.roaringbitmap/RoaringBitmap@0.9.15"></dependency>
       <dependency ref="pkg:maven/org.roaringbitmap/shims@0.9.15"></dependency>
       <dependency ref="pkg:maven/com.auth0/java-jwt@3.19.2"></dependency>
       <dependency ref="pkg:maven/org.json/json@20231013"></dependency>
       <dependency ref="pkg:maven/org.apache.commons/commons-csv@1.5"></dependency>
       <dependency ref="pkg:maven/org.apache.httpcomponents/httpclient@4.5.13"></dependency>
       <dependency ref="pkg:maven/org.apache.httpcomponents/httpcore@4.4.13"></dependency>
       <dependency ref="pkg:maven/commons-logging/commons-logging@1.2"></dependency>
       <dependency ref="pkg:maven/commons-codec/commons-codec@1.11"></dependency>
       <dependency ref="pkg:maven/com.alibaba/fastjson@1.2.83"></dependency>
       <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.10"></dependency>
       <dependency ref="pkg:maven/com.google.protobuf/protobuf-java@3.16.3"></dependency>
       <dependency ref="pkg:maven/com.google.protobuf/protobuf-java-util@3.23.4"></dependency>
       <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2"></dependency>
       <dependency ref="pkg:maven/com.google.code.gson/gson@2.8.9"></dependency>
       <dependency ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.18.0"></dependency>
       <dependency ref="pkg:maven/com.google.guava/guava@32.0.1-jre"></dependency>
       <dependency ref="pkg:maven/com.google.guava/failureaccess@1.0.1"></dependency>
       <dependency ref="pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava"></dependency>
       <dependency ref="pkg:maven/org.checkerframework/checker-qual@3.33.0"></dependency>
       <dependency ref="pkg:maven/com.google.j2objc/j2objc-annotations@2.8"></dependency>
     </dependency>
   </dependencies>
 </bom>