87.2.0
Note
- This release is missing attestations due to a publishing error.
- It is recommended to review your ORT configuration, e.g.
$HOME/.ort/config/config.yml, against documentation updates of 8d26884. - As of b8ca7f9 additional files are included into file archives. For this to take effect, all existing file archives must be deleted (recommended) from the configured file archive storage.
What's Changed
🐞 Bug Fixes
- 2305784 bazel: Use the correct syntax for the fallback version
- a0d6807 model: Stop using notice files as resolved license files
- 098ed19 spdx: Track visited nodes per project type
🎉 New Features
- 17e9c6e bazel: Allow to configure the Bazel version directly
- 43bbdd9 evaluator: Add
getNonApplicablePackageLicenseChoices() - caa0da8 evaluator: Add
getNonApplicableRepositoryLicenseChoices() - 77c47ef model: Add
effectiveLicenseAndAppliedChoices() - b8ca7f9 model: Broaden the condition for including files in file archives
- b52339b spdx: Add
applyAndGetChoices()
✅ Tests
- 9e21070 evaluator: Factor out
OrtResult.setLicenseChoices() - 05c7db4 mix: Update expected results
- d6a8479 model: Ensure default patterns do not include arbitrary files
- fac6b74 model: Factor out
DEFAULT_PATTERNS - 4c75ddf model: Trivially simplify some assertions
- 5e94b25 python: Update expected results
🐘 Build & ⚙️ CI
- a009a16 detekt-rules: Remove an obsolete work-around
- b9b5176 gradle: Work around the TAPI strictly depending on slf4j-api 2.0.17
📖 Documentation
- 4a4fd89 bazel: Move a code comment to the correct line
- 4eccaca model: Document that filename patterns get prepended with
"**/"
🔧 Chores
- ca1d5fc model: Introduce a helper function to delete files on exit
- f845b89 model: Move
getSubdirectoryForProvenance()nearby its only use - ad73569 model: Remove Maven-specific logic from file archive creation
- 8ce7a98 spdx: Add a default value for
SpdxLicenseChoice.given - 1b0d51a spdx: Remove a default argument to address an IDE hint
🚀 Dependency Updates
- 6e18129 bazel: Use a newer fallback version
- 0ae2264 Update the dependency-analysis-gradle-plugin to version 3.13.0
- f1a5a62 Update the dependency-analysis-gradle-plugin to version 3.14.0
- b2501ca update aws-java-sdk-v2 monorepo to v2.44.14
- b9a94a2 update ch.qos.logback:logback-classic to v1.5.33
- 70bfb2f update com.networknt:json-schema-validator to v3.0.3
- 981a7f3 update dev.panuszewski.typesafe-conventions to v0.11.1
- 4c27bb7 update docker/build-push-action action to v7.2.0
- d36c1e2 update docker/login-action action to v4.2.0
- d938a03 update docker/metadata-action action to v6.1.0
- b5f49ae update docker/setup-buildx-action action to v4.1.0
- 23663c3 update github/codeql-action action to v4.36.0
- 5311aad update io.ktor:ktor-version-catalog to v3.5.0
- 1de3472 update ksp monorepo to v2.3.9
- b2e0293 update org.apache.tika:tika-core to v3.3.1
- 7f749ec update org.graalvm.buildtools:native-gradle-plugin to v1.1.1
- 7f31a8b update org.slf4j:slf4j-api to v2.0.18