<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:fdb2c910-4e19-4037-9e66-52b8bbca34cb" version="1" xmlns="http://cyclonedx.org/schema/bom/1.4">
  <metadata>
    <timestamp>2025-05-30T19:18:05Z</timestamp>
    <tools>
      <tool>
        <vendor>OWASP Foundation</vendor>
        <name>CycloneDX Maven plugin</name>
        <version>2.7.7</version>
        <hashes>
          <hash alg="MD5">436dfb24c63a322708e4a5143d8543af</hash>
          <hash alg="SHA-1">3ef2e8728dc9eff2f129c34057e46e9d2b10629a</hash>
          <hash alg="SHA-256">c185b79bf0f9264f43bc8c222c44db67bea275bb727e3327cf9aea6bf45292c9</hash>
          <hash alg="SHA-512">41488733e31e6c5315327dcc86187c2b9a6b96cd08f7e2157ce130688afde29c313fc6a73edb8a76333a930c78874aa2eac874448920030c0f7af0ac05e65ced</hash>
          <hash alg="SHA-384">f9462f86240fd9fc0942f34981e6d2371f252aa1a4e5e8c3c14e7f0f1a4e4de69ef972e51cf09a749afb6d97c13e67ed</hash>
          <hash alg="SHA3-384">c755af6239348bc7dd1e1e6b5f14f7cf7e1560d689b252d9610cd865fa4b419d0b8e26260731dfc5da2176b6e706b414</hash>
          <hash alg="SHA3-256">309aac91005470c9c834354ab918759e2ae7ec52fc1676002621a5bbdf3b7827</hash>
          <hash alg="SHA3-512">c634570dcf8302e61005e5fa91a9a0d9b81542f731967b3c9f6d3ef89e3b945bd36d7ab69e2ebad8124b9c05da504361c8b36a8ce528d844409eeb7df4eea6ce</hash>
        </hashes>
      </tool>
    </tools>
    <component type="library" bom-ref="pkg:maven/io.confluent.flink/flink-sql-avro-confluent-registry@1.18.1-cp4?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>io.confluent.flink</group>
      <name>flink-sql-avro-confluent-registry</name>
      <version>1.18.1-cp4</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.confluent.flink/flink-sql-avro-confluent-registry@1.18.1-cp4?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-formats/flink-sql-avro-confluent-registry</url></reference><reference type="distribution"><url>s3://cp-flink-staging-654654529379-us-west-2/maven-staging/8d90c4daf0d0f8bc70993bd95dd66334dfe655ec</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-formats/flink-sql-avro-confluent-registry</url></reference></externalReferences>
    </component>
    <properties>
      <property name="maven.goal">makeBom</property>
      <property name="maven.scopes">compile,provided,runtime,system</property>
    </properties>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/io.confluent.flink/flink-avro-confluent-registry@1.18.1-cp4?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>io.confluent.flink</group>
      <name>flink-avro-confluent-registry</name>
      <version>1.18.1-cp4</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">42bff1817e32edc663530b8182833143</hash>
        <hash alg="SHA-1">a33b447d1a1c78851575c5eb7d86bfb9f26d73e0</hash>
        <hash alg="SHA-256">9771bc7aa4f9a8d5f0c837c0d19a0ad041e41d1c4b1c584061b6de396b1769ea</hash>
        <hash alg="SHA-512">efd0bb10786b75ba77a67ce87af6c3f8c3ca68f5c8c8872cc08a200a107e58dbd7084b7a53b8fa7745146d00ad2ae912fee83968d2db64836cb36883397f16c3</hash>
        <hash alg="SHA-384">be4d439c2b4b5e6e1bead500e7e446e022bbc3c7f797916ee4f2e7a9eebcdfeb65ef61d9ac7e3b36e9430d2b223991f9</hash>
        <hash alg="SHA3-384">8c56e7fa6449ae376b04def9ffcb6cd534341c298c65a514207aa3c61ab9d9af29912678972723c235725e01d0b1b8f5</hash>
        <hash alg="SHA3-256">7407048d173aaf881a8a35fcbd726b50a3c22868e34afcf933e4f8e63216095c</hash>
        <hash alg="SHA3-512">fd6353e79c8a4e35764fef686885684d4d9c4f3d7cf6d81be1139ff6203af3ae5db42eeb4912138dabcf890f0f63cd96c03f81e98e9a7b260018b4c81e1440b3</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.confluent.flink/flink-avro-confluent-registry@1.18.1-cp4?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-formats/flink-avro-confluent-registry</url></reference><reference type="distribution"><url>s3://cp-flink-staging-654654529379-us-west-2/maven-staging/8d90c4daf0d0f8bc70993bd95dd66334dfe655ec</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-formats/flink-avro-confluent-registry</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.confluent/kafka-schema-registry-client@7.2.2?type=jar">
      <publisher>Confluent, Inc.</publisher>
      <group>io.confluent</group>
      <name>kafka-schema-registry-client</name>
      <version>7.2.2</version>
      <description>Schema Registry provides a RESTful interface for storing and retrieving versioned Avro
        schemas for use with Kafka.</description>
      <hashes>
        <hash alg="MD5">70de5957a959ba1c0a4fcb90744c9d23</hash>
        <hash alg="SHA-1">5458c066627767f114b97ba7a2fcbf13f9bf4daa</hash>
        <hash alg="SHA-256">4b2405f374af26ae3556e983f44812090c6f2006c63de58ad161b8b2a51e025e</hash>
        <hash alg="SHA-512">e034df9dc16d1eb917085a4aa4bbb78cf1340cb88322c2d7eebf6acad9bb8964fcdc941dfa641829e6cec3a52c14f819c9ccf64f46b3e2ed3dc587805b4d6d30</hash>
        <hash alg="SHA-384">f74866d1e1e9cad90fb118650d2bf3cd64fc04afaec83da12fa6aaa1a0a29f09077f8c469325f000e73f9995efe6999b</hash>
        <hash alg="SHA3-384">e928e61d180dc332e8f545afe9222f1d352b97e25295677230fd698e04f6a1c9496ed39af3f44c8e3a460a5cd1c2752b</hash>
        <hash alg="SHA3-256">2cada969690118c6b8a7e522bf513d37fc97e1e92f334a534c1df9e915d6df25</hash>
        <hash alg="SHA3-512">926f7db5ed95acbcaf3b6f36789b1ea2733f64f451eb8f4f8b5d510096e4ded3436d0e2c4f4d195be5744d20bd4e41d32a4421793ece1eb48c175e3ae99e49e2</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/io.confluent/kafka-schema-registry-client@7.2.2?type=jar</purl>
      <externalReferences><reference type="website"><url>http://confluent.io/kafka-schema-registry-client</url></reference><reference type="distribution"><url>s3://cp-flink-staging-654654529379-us-west-2/maven-staging/8d90c4daf0d0f8bc70993bd95dd66334dfe655ec</url></reference><reference type="vcs"><url>https://github.com/confluentinc/schema-registry/kafka-schema-registry-client</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.kafka/kafka-clients@7.2.2-ccs?type=jar">
      <group>org.apache.kafka</group>
      <name>kafka-clients</name>
      <version>7.2.2-ccs</version>
      <hashes>
        <hash alg="MD5">77b6695aec559c5fe17f412c789767ad</hash>
        <hash alg="SHA-1">ca252a7e40f4a52846e0867b5bd334a2eacbdda5</hash>
        <hash alg="SHA-256">f4ad1f7dd43935883b846693af22785017d204528f167b82c42e09d5093f32d5</hash>
        <hash alg="SHA-512">f9bbc88289f52b19e026ea269e4a95d0c7043364c8d2490df05a2161c8b4ce0c20128963b1d0133921e457e36657705bd294b78459b0658cfaf4298ca9a5a752</hash>
        <hash alg="SHA-384">9987bf23a4c3f2f95dcab6c285102afbb96a34396d9438106b97bfb53552bdf4f1a63cf9aaa4e51dbbebee27f9e127e6</hash>
        <hash alg="SHA3-384">4f30f74743c4d2de662cf1bf9ee1141cb929098b4f5580dfd028b4d2da8ed384c2149efb6ee48054baefac0cbf685329</hash>
        <hash alg="SHA3-256">dad9d622b68f0816919d9614e1f9acbb23ae3575addc8f2de0d0aad5ad6b8387</hash>
        <hash alg="SHA3-512">7d72fee4aa91266383ccb60614685256743ba2f301cb43de8b9965dcb32a794b1be8183161400c1439c0de268a94419206f1ea80cf997b795313d8cdc01a147c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.kafka/kafka-clients@7.2.2-ccs?type=jar</purl>
      <externalReferences><reference type="website"><url>https://kafka.apache.org</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.github.luben/zstd-jni@1.5.2-1?type=jar">
      <publisher>com.github.luben</publisher>
      <group>com.github.luben</group>
      <name>zstd-jni</name>
      <version>1.5.2-1</version>
      <description>JNI bindings for Zstd native library that provides fast and high compression lossless algorithm for Java and all JVM languages.</description>
      <hashes>
        <hash alg="MD5">2909788860e8e3ee29d51b327a43ca24</hash>
        <hash alg="SHA-1">fad786abc1d1b81570e8d9a2fc8a1ef479bc27b6</hash>
        <hash alg="SHA-256">93f7e4cbc907c2650f89f9f0bec94873735a58f1e4b66a54973294e4ec1878e8</hash>
        <hash alg="SHA-512">92174059714b98d4275dca1b057c857766267afe6ae2b27bfdfe50395cb90a3ec973032977a074c5ce516a3769336e6bf63d3bbde95bea165c409f1c990a651d</hash>
        <hash alg="SHA-384">cdc9284a4537fcf83166bae1c4731463d94ad9615f91200c4da6368ddbd769314e87453e9114649c694966e6c77d4883</hash>
        <hash alg="SHA3-384">7fc38f70a3160e3a3e308c56e8b3bd5bcb42567f4739abdfd301f9e5ee74b1be0d1d072f6cf07270e61ac0a6ed6bf8d8</hash>
        <hash alg="SHA3-256">3d7fdef386e28e112621eea44bc6d6798dc68c8cf690acc2b74db5d221bc5faf</hash>
        <hash alg="SHA3-512">693b3b3d29e63690ae9c1215cc84d8e77f4de28e664eb184bf9ad4697389b8230f75f490ba653feb191b3e039eeab9415f3c56b5d2786d85e48dfd8035df4e14</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-2-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.github.luben/zstd-jni@1.5.2-1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/luben/zstd-jni</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.xerial.snappy/snappy-java@1.1.10.4?type=jar">
      <publisher>xerial.org</publisher>
      <group>org.xerial.snappy</group>
      <name>snappy-java</name>
      <version>1.1.10.4</version>
      <description>snappy-java: A fast compression/decompression library</description>
      <hashes>
        <hash alg="MD5">d1d3b91e925c46a1a0f68b87298bafe8</hash>
        <hash alg="SHA-1">50d0390056017158bdc75c063efd5c2a898d5f0c</hash>
        <hash alg="SHA-256">55b30c94e5c4cc2d4b6976916098d0678a8a6cc7427fa8c875621bd94e731ac8</hash>
        <hash alg="SHA-512">9e52bad4eaa0d0a2e0083cdd3433d84c4bb44c4d3f0314a48c3d6eacbb64d0f4fb2d71197944115618a598eb4a4941c13af2a9ec676b003fb3462ddac58bbe41</hash>
        <hash alg="SHA-384">9539e8eb2dea244f07a7216db38970e3f336b5dc9d132cbe54e201c818dba3e02a1fc467b4529a18eca7127f86d742dd</hash>
        <hash alg="SHA3-384">d5d5ef5d8b050f200ae29855a4b6f5e278215d0a97a69d3653dc1aa716f9847b3c305312a3c994d46721615ba02fc7c8</hash>
        <hash alg="SHA3-256">bbbb3ff43a24094bf2c77dd8c8f94b06d62d158da0d2c3399de3a2993df9986e</hash>
        <hash alg="SHA3-512">de2aa7e7fada466f24ccda07123e2877446733dd48e4b914d25b0d296f677e17a24f182a0e9216e77b261143b774ccaadcfd2854dde1bf36cb2c6db6cdf78b3c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.xerial.snappy/snappy-java@1.1.10.4?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/xerial/snappy-java</url></reference><reference type="vcs"><url>https://github.com/xerial/snappy-java</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-compress@1.21?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-compress</name>
      <version>1.21</version>
      <description>Apache Commons Compress software defines an API for working with
compression and archive formats.  These include: bzip2, gzip, pack200,
lzma, xz, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4,
Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.</description>
      <hashes>
        <hash alg="MD5">2a713d10331bc4e13459a3dc0463f16f</hash>
        <hash alg="SHA-1">4ec95b60d4e86b5c95a0e919cb172a0af98011ef</hash>
        <hash alg="SHA-256">6aecfd5459728a595601cfa07258d131972ffc39b492eb48bdd596577a2f244a</hash>
        <hash alg="SHA-512">c92d9a12547aab475e057955ad815fdfe92ff44c78383fa5af54b089f1bff5525126ef6aef93334f3bfc22e2fef4ad0d969f69384e978a83a55f011a53e7e471</hash>
        <hash alg="SHA-384">da56f95d420cd7278cee646f4cd0e7a5ee12b6a2894efaec12f0ff7b56c3d43e5db736fe1ed66ff91118b16f2d64ebef</hash>
        <hash alg="SHA3-384">6d3dc0198dd523a49fa94e054841aece853577b5c3ea1029fc288ad9ff580ab1b65ea99ddbe58c42125054e8c43be461</hash>
        <hash alg="SHA3-256">37d4a014b50393793d35c70431bd8a1842c197d854c6f174dfa946b9edc2b841</hash>
        <hash alg="SHA3-512">61609f60746406a7cb1ef3f979488beca6674fde208c9025d3fdee115de4767e8a4a1ee38f5bf79ac0104505ddb3558f1feeba5e318d6545647120ac60db6b89</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-compress@1.21?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-compress/</url></reference><reference type="build-system"><url>https://builds.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/COMPRESS</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-compress.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.3?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.core</group>
      <name>jackson-databind</name>
      <version>2.14.3</version>
      <description>General data-binding functionality for Jackson: works on core streaming API</description>
      <hashes>
        <hash alg="MD5">d9aed5b42f6769cb06d6802250aed19b</hash>
        <hash alg="SHA-1">ba0373b04bf0f03b0cd268cd2e5e8444aaaf9208</hash>
        <hash alg="SHA-256">ef0694046dc86e8a601e69efef24cda88a85773aaf012f5b9b1167d6f2e7de45</hash>
        <hash alg="SHA-512">54f4842e09b4166bc0c0851407bdf988a0f88d5f68d58134eb0d393c80e20b337545fffa96c3563b79b71b105d9e55713815749af48cab752633d98c0dbfcf99</hash>
        <hash alg="SHA-384">624b07a0b597c07a2c82cd6fbbb31d796c69a189931b73b7ce9c35dd0aca6dfca378d08c05e943b10c7f12e06904bb04</hash>
        <hash alg="SHA3-384">4f4a4e2f2c75e03a48d163ece5d9902cdec5959cfb23079b68559fa5ef481bc2582c77c428a2380b87470819d4c4d706</hash>
        <hash alg="SHA3-256">0882e9419fc6aaf3bbab0be8e78cd915336e1f4d3806dcaf9cdc17117e37c9ea</hash>
        <hash alg="SHA3-512">a62a293254cc190f1ef40eec99ef95e7342b3c2858673e4f881144084d28393009f19a49137ace8c4f44f551d5e99b163f8d8e73d9d4b951e133d08b106af7b1</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/FasterXML/jackson</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/FasterXML/jackson-databind/issues</url></reference><reference type="vcs"><url>https://github.com/FasterXML/jackson-databind</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.3?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.core</group>
      <name>jackson-annotations</name>
      <version>2.14.3</version>
      <description>Core annotations used for value types, used by Jackson data binding package.</description>
      <hashes>
        <hash alg="MD5">f6ee414687751fbadc55998ec49b3ea6</hash>
        <hash alg="SHA-1">b49701acb02b8e95ae1967821cfbafc220cf5795</hash>
        <hash alg="SHA-256">ea1b3a9ec60a353f4d7e78559c7140abb9bcf71b31456e9d57c8289f7cf397f1</hash>
        <hash alg="SHA-512">d265ba6cc1d20721ba7803416005f25d70036cd659bf6071f4d3250d7dab272a2522d7db282e50aeae994907556ef63155d2c0bcc0bd1c96c6460143ff5a8d53</hash>
        <hash alg="SHA-384">551a607644bcb3f3c06ac9c94861858a0d8f2b62b9120d34f5c2aad94a3a0e75478a94dca7eb290d9814c8dec739905e</hash>
        <hash alg="SHA3-384">79bef0386d15bd152d94ba9e67849eb25c7c4eafd3e8a50c504304dad4653423d78cb8cb54d3853370334519219b5c80</hash>
        <hash alg="SHA3-256">6ed193820d6577652884528ce3d0378516483d51a87652aa7209f3f7ef8326f2</hash>
        <hash alg="SHA3-512">bc5748486a715352e318d809fb3483de615e15422c3264cc52806f4a367035cfbfdaf5258ba460b13e55d25adfc38ee39444f4b7460dfd2cf927817c4c6776ac</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/FasterXML/jackson</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/FasterXML/jackson-annotations/issues</url></reference><reference type="vcs"><url>https://github.com/FasterXML/jackson-annotations</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.3?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.core</group>
      <name>jackson-core</name>
      <version>2.14.3</version>
      <description>Core Jackson processing abstractions (aka Streaming API), implementation for JSON</description>
      <hashes>
        <hash alg="MD5">abb25b80cda20ddc2cd3bbd8fccd0d34</hash>
        <hash alg="SHA-1">4fa101f81504ed6811bf1823270adb51a9b45ff3</hash>
        <hash alg="SHA-256">7ee2debad3c002e97b28b84d5f1b2044a38e780abb673948238f5bc656e2fe44</hash>
        <hash alg="SHA-512">7907fbde57f1ebd18d0935d34c5c9657e7dcff924c540b6ba732f87ed2e9e653ee499b21b464b3b74fa569d5865ffa717b8e2098d600a5f74cef4e97f39cc7d5</hash>
        <hash alg="SHA-384">0d584c6b0ce820441e7e8f341d567924ab236de62f4ad8a40f1af37e983946ea07a9de3a4b607b76bf3c421a02720d0e</hash>
        <hash alg="SHA3-384">4163ac7d8f4fe59319c2fb76bfadcca883bc5fb92b9525d2d930284063cb384b4a7faac49829c4195aaffe64f4054447</hash>
        <hash alg="SHA3-256">52215985453eacefd6659967b51b684d7ebcc30a26163f31b8b7b0f5864fb7b4</hash>
        <hash alg="SHA3-512">e15a4a70c5bf68f77f535931c9d4ab4907efc80ce9d60a49d02fbd259511284e307f0fbbdbf60dcd2930c017a2f9a39c25541a528b6947d1d2388a28db299022</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/FasterXML/jackson-core</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/FasterXML/jackson-core/issues</url></reference><reference type="vcs"><url>https://github.com/FasterXML/jackson-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.guava/guava@30.1.1-jre?type=jar">
      <group>com.google.guava</group>
      <name>guava</name>
      <version>30.1.1-jre</version>
      <description>Guava is a suite of core and expanded libraries that include
    utility classes, Google's collections, I/O classes, and
    much more.</description>
      <hashes>
        <hash alg="MD5">05374f163d0a4141db672fff9df95b12</hash>
        <hash alg="SHA-1">87e0fd1df874ea3cbe577702fe6f17068b790fd8</hash>
        <hash alg="SHA-256">44ce229ce26d880bf3afc362bbfcec34d7e6903d195bbb1db9f3b6e0d9834f06</hash>
        <hash alg="SHA-512">025cdd70db7d896d57cc04a8a735ded609b393e8d56af23d454198b64a263147ab0d68fbdffabcb926b143433fccdc022f76aaed658b9448c5ce85f07c42140f</hash>
        <hash alg="SHA-384">5a7d9c9792f0912bf49ecc97fabbce703408e2009f84a827ca3ff3bc5a3e171f2759821a75da155b4e45e5ad87893053</hash>
        <hash alg="SHA3-384">f9870f5a878e7c21c70973b8c6269c7f11a81543c2318c4542e1f471276483d74694d3a80892e71eff34599c3dce8e12</hash>
        <hash alg="SHA3-256">6178c64bce389dd1a93d9c34fe5dc75e91d5af0c1f0d1956b0466e807ad6fa3c</hash>
        <hash alg="SHA3-512">06a197858dbccd9ae008a50224a1e94e2bb71197dde13ea9b95c014001bfd4730da2faca306103848666df5b696df28954f365645d19b38bb3b75244b0bf14ca</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.guava/guava@30.1.1-jre?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/google/guava/guava</url></reference><reference type="build-system"><url>https://travis-ci.org/google/guava</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/google/guava/issues</url></reference><reference type="vcs"><url>https://github.com/google/guava/guava</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.confluent/common-utils@7.2.2?type=jar">
      <publisher>Confluent, Inc.</publisher>
      <group>io.confluent</group>
      <name>common-utils</name>
      <version>7.2.2</version>
      <description>Common utilities, including metrics and config.</description>
      <hashes>
        <hash alg="MD5">f392fe6a12f3dfa8f66d3c5b3d5fc1bb</hash>
        <hash alg="SHA-1">8bfc0e7eed95e6d5d9a54cf0f542d7bc24ecdc30</hash>
        <hash alg="SHA-256">591847307715ec705d73c81db018d0a7d754a7e694e63472ce2ba5746002ca16</hash>
        <hash alg="SHA-512">882d83540ab701e593fd97a6cabc11cee02a6c017e440cded8a365ddd69eb7ce9459ad99f505e729caaffc4d7e1312d2f7e4769400f8d733d1abc07240981853</hash>
        <hash alg="SHA-384">d4ca10aae92a766dda9cbea71a69bde356ffa743b33b3d2e147c300e945d7099189af2deb66c4ff08841c02376e59480</hash>
        <hash alg="SHA3-384">015b8ca524814f3c9cb04739c814cacd7b559bbdb588a541da7aa9bfe512067f8b688d6c294bdbab90200f75470fd5b2</hash>
        <hash alg="SHA3-256">674b906307a3371a8d9e4bc53039515923d5ce9bc46c5112587a60eff2b834dc</hash>
        <hash alg="SHA3-512">5e5153f9177b8962a29e88dc35ffb3ab39f9fbb165bfa1d8760077e4befdc48d3cf941fcfe001c34916dd08d3193a2bb91c12fae8191b860f16747e6e09bf7e5</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/io.confluent/common-utils@7.2.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://confluent.io/common-utils</url></reference><reference type="distribution"><url>s3://cp-flink-staging-654654529379-us-west-2/maven-staging/8d90c4daf0d0f8bc70993bd95dd66334dfe655ec</url></reference><reference type="vcs"><url>https://github.com/confluentinc/common/common-utils</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.confluent.flink/flink-avro@1.18.1-cp4?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>io.confluent.flink</group>
      <name>flink-avro</name>
      <version>1.18.1-cp4</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">25828fdaaac3c20a4957c2a34c066f80</hash>
        <hash alg="SHA-1">d187318f2860e92313f9e5d0d76b576908025a73</hash>
        <hash alg="SHA-256">3627f7c24db36824aef358444c994eaf74267d55a3f077aa63ede1dfe4e71c49</hash>
        <hash alg="SHA-512">a87b5ca4cb074a4c6224ff978846c7473bc79665d6db7a5926414450bdc79edc3a466c81ce1b55595e3eb630860625958dc1bf20f0992e48aa308a8922aae78e</hash>
        <hash alg="SHA-384">e00bc2c2beca576599a6d111a6b3c0436e0cf351a10208dcfcdbbd9f76886257a025620407766e4753b12f012cb0db6e</hash>
        <hash alg="SHA3-384">b305b3c35a661c791b95a6dbae27c3c5fadf8254308d3d7487d4041bd11f6b2decb06021beec3b79db42bef72a503bab</hash>
        <hash alg="SHA3-256">8f1dcb2bed79a60fe5e2b7388a578f2ab4c24f6e4df271ee0082a48b1a138e41</hash>
        <hash alg="SHA3-512">db12c8c5e99861536fe0c7c0b0b4f367c6773c0d3b31acff7e468bbe31892e683caa42a99911f15dc092a7be960e752ce253cead6598f4f6f530fce9695ea2ec</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.confluent.flink/flink-avro@1.18.1-cp4?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-formats/flink-avro</url></reference><reference type="distribution"><url>s3://cp-flink-staging-654654529379-us-west-2/maven-staging/8d90c4daf0d0f8bc70993bd95dd66334dfe655ec</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-formats/flink-avro</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.avro/avro@1.11.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.avro</group>
      <name>avro</name>
      <version>1.11.3</version>
      <description>Avro core components</description>
      <hashes>
        <hash alg="MD5">0ce474e395d0aad56c11293fd68ccb52</hash>
        <hash alg="SHA-1">02b463409b373bff9ece09f54a43d42da5cea55a</hash>
        <hash alg="SHA-256">4554aa8f8175f999fc56e35d8d294d634480992ce02406a52c650f521997e436</hash>
        <hash alg="SHA-512">06829cf06127621042d024668c1c4c7b68b19e9a54e51495c03ead0ce600291e675da6f081307b8a949be45a6f6e6fe55ee1af1a69990ae47dc300277ab3493d</hash>
        <hash alg="SHA-384">991cab21cebff4d891c2d8f9c1c09761f06bc438f71ca811b482a35536e379da4e84d84645a9527330ff725dc2ff1da8</hash>
        <hash alg="SHA3-384">e45b18b7c17bd057f1ce019e16f79981adf7a6bf679d99dfe698cd4dea33d5b08b34423c7543afd461d5ba59d60cfac6</hash>
        <hash alg="SHA3-256">331a066d124e3bbfb056c535cd93839363a91f983bd4b37dbddc6394ecd47f23</hash>
        <hash alg="SHA3-512">54aac1cfe1db9d7fc3476452d91542d56f0b4105c3a1c782d946c1140b19ecb1856771d0af9c1c1b6aecc5087e47d8c377aa63fd86baa3ee2050b9f740f3eebe</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.avro/avro@1.11.3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://avro.apache.org</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/AVRO</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/avro-dev/</url></reference><reference type="vcs"><url>scm:git:https://github.com/apache/avro/avro-parent/avro</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>slf4j-api</name>
      <version>1.7.36</version>
      <description>The slf4j API</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">872da51f5de7f3923da4de871d57fd85</hash>
        <hash alg="SHA-1">6c62681a2f655b49963a5983b8b0950a6120ae14</hash>
        <hash alg="SHA-256">d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0</hash>
        <hash alg="SHA-512">f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b</hash>
        <hash alg="SHA-384">2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a</hash>
        <hash alg="SHA3-384">3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b</hash>
        <hash alg="SHA3-256">ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881</hash>
        <hash alg="SHA3-512">14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.slf4j.org</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/qos-ch/slf4j/slf4j-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-shaded-force-shading@17.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-shaded-force-shading</name>
      <version>17.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">6890ff555c82f3bb156cf9c73bf09cf9</hash>
        <hash alg="SHA-1">345c153973a17fb8a98d368352e14893edcbd610</hash>
        <hash alg="SHA-256">dcc7dff160a40b74fa5db2805b2004153ffd0517968f3c7843a8ee43be82e710</hash>
        <hash alg="SHA-512">9de23513832248618b78e279c0e3900f5cafb7193254ef6818b4f0b6f3b70045dd9cc4fdd13caeeca8b70a44f38201ce055f07248cdf08930a20e1b7a73997ff</hash>
        <hash alg="SHA-384">063611872b4b1a1718e0472e32198bded0d74fa656e5c47a7b20038cd5ff70106e3109b60fe882880feea486e1ef83bf</hash>
        <hash alg="SHA3-384">26f9225d2c401391133dabc97340d1048504deaaae3c6b02ba20b83d4efe8c53a6d4f4e63a04e4317f9bce6b1a1ee013</hash>
        <hash alg="SHA3-256">aae3e6da763019cc2fd4919df572a3653b46aedaf60a3adb3d28bc7f94023523</hash>
        <hash alg="SHA3-512">e616e089fb70dc79503b6c235bd8d14c6e7c8e608c87bb4fcd02fe86d6ba27985bac4f144843af9fc7a7c495de7057320ccddea9f571c42bdcaa1c73966f265f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-shaded-force-shading@17.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://flink.apache.org/flink-shaded-force-shading</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink-shaded/flink-shaded-force-shading</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar">
      <group>com.google.code.findbugs</group>
      <name>jsr305</name>
      <version>1.3.9</version>
      <description>JSR305 Annotations for Findbugs</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">1d5a772e400b04bb67a7ef4a0e0996d8</hash>
        <hash alg="SHA-1">40719ea6961c0cb6afaeb6a921eaa1f6afd4cfdf</hash>
        <hash alg="SHA-256">905721a0eea90a81534abb7ee6ef4ea2e5e645fa1def0a5cd88402df1b46c9ed</hash>
        <hash alg="SHA-512">06da282cfd8e30d9f8cf17702b8709172b00e22b75a627a1d85f8989615b8a1a401bc25d9aee7b14aed1d9b5df73bf2ea8d66f9c8468d9577c29f0ccfa2cc70a</hash>
        <hash alg="SHA-384">56e6b41ef62eb5edfed0203802cefae9c2df86388148e420bb0c687abb2b80e14d5c2a82d5b35dce4badaf148f94eada</hash>
        <hash alg="SHA3-384">58c3bf89fa1afa75c2c5078159fd28e27b2273d437f26aaaa7391310b6f0823f3cf476a24f5631c0881f3f7e946d99be</hash>
        <hash alg="SHA3-256">c333ea5faedfa78e0614a2620438d5724eab093df4e960918391b6a44c2915b0</hash>
        <hash alg="SHA3-512">67ec31448e156cc72dd036060b460bb2667a13b1cbe500b6b7eed3235b1994b44c39f440ebd07b21ec9595b166ad61121d4f6a132b5b313c558ab21b72599425</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar</purl>
      <externalReferences><reference type="website"><url>http://findbugs.sourceforge.net/</url></reference><reference type="vcs"><url>http://findbugs.googlecode.com/svn/trunk/</url></reference></externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/io.confluent.flink/flink-sql-avro-confluent-registry@1.18.1-cp4?type=jar">
      <dependency ref="pkg:maven/io.confluent.flink/flink-avro-confluent-registry@1.18.1-cp4?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-force-shading@17.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.confluent.flink/flink-avro-confluent-registry@1.18.1-cp4?type=jar">
      <dependency ref="pkg:maven/io.confluent/kafka-schema-registry-client@7.2.2?type=jar"/>
      <dependency ref="pkg:maven/io.confluent.flink/flink-avro@1.18.1-cp4?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.confluent/kafka-schema-registry-client@7.2.2?type=jar">
      <dependency ref="pkg:maven/org.apache.kafka/kafka-clients@7.2.2-ccs?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-compress@1.21?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.3?type=jar"/>
      <dependency ref="pkg:maven/com.google.guava/guava@30.1.1-jre?type=jar"/>
      <dependency ref="pkg:maven/io.confluent/common-utils@7.2.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.kafka/kafka-clients@7.2.2-ccs?type=jar">
      <dependency ref="pkg:maven/com.github.luben/zstd-jni@1.5.2-1?type=jar"/>
      <dependency ref="pkg:maven/org.xerial.snappy/snappy-java@1.1.10.4?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.github.luben/zstd-jni@1.5.2-1?type=jar"/>
    <dependency ref="pkg:maven/org.xerial.snappy/snappy-java@1.1.10.4?type=jar"/>
    <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-compress@1.21?type=jar"/>
    <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.3?type=jar">
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.3?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.3?type=jar"/>
    <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.3?type=jar"/>
    <dependency ref="pkg:maven/com.google.guava/guava@30.1.1-jre?type=jar"/>
    <dependency ref="pkg:maven/io.confluent/common-utils@7.2.2?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.confluent.flink/flink-avro@1.18.1-cp4?type=jar">
      <dependency ref="pkg:maven/org.apache.avro/avro@1.11.3?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.avro/avro@1.11.3?type=jar">
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.3?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-compress@1.21?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    <dependency ref="pkg:maven/org.apache.flink/flink-shaded-force-shading@17.0?type=jar"/>
  </dependencies>
</bom>
