88.0.0

What's Changed

🛠 Breaking Changes

• 44bf368 refactor!: Rename a Gradle module to match the Git curation provider
• fe47add refactor(gradle)!: Split out authentication utilities to a new module
• e4379ef refactor(plugins)!: Rename description to summary
• db57349 refactor(spdx)!: Split out expression-related code to a new Gradle module

🐞 Bug Fixes

• 4cc2fbe maven: Use unlimited JAXP XML processing with Java >= 24
• 2adf5e4 model: Adhere to omitExcluded for projects in getDependencies()
• 14c0f5c ort-utils: Read the request body before responding in a test
• 33f9795 ort-utils: Set the body size to -1 when not sending any body in tests

🎉 New Features

• 1d8bd43 gradle: Support HTTP header authentication for repositories
• 4632b4c ort-config: Extract a generic GitPackageCurationProvider
• d926869 plugins: Add description property to PluginDescriptor

🐘 Build & ⚙️ CI

• 5392863 cli-test-launcher: Do not tap into the file-system to get funTests
• deabfba gradle: Apply dependency-analysis as a settings plugin
• 320dd08 gradle: Apply the sort-dependencies plugin
• 4212953 gradle: Do not use libs in convention plugins
• 18fdf4e gradle: Enable more dependency analysis rules
• b219898 gradle: Remove all unused dependencies
• fae8ac1 gradle: Use correct configurations for dependencies
• 5ddb211 model: Reduce to runtimeOnly dependencies where possible
• 3f7c081 static-analysis: Add a check for build health
• e0694bc static-analysis: Include checking for sorted dependencies

📖 Documentation

• f3266f3 gradle: Add links to configuration roles for reference
• 40ef461 gradle: Document why a dependency analysis rule is disabled
• 287efcd gradle: Remove some weird chars from a because string
• 988cc27 model: Add a missing "the"
• c39bb92 model: Further clarify the term provenance in two cases
• 48a5b0e plugins: Document how class docs are used as plugin descriptions
• 9530a42 plugins: Trivially improve the plugin docs
• 93171d3 skills: Start adding code-review skills for Copilot
• 6e3f0ac website: Show the plugin descriptions
• 4673835 Move OrtProject package manager docs to the plugin

🔧 Chores

• 6e6d13e gradle: Remove inconsistent test fixtures comments
• 019abdf maven: Log Tycho stderr output for debugging
• 695cc6d model: Improve the construction of the used patterns
• 68b931a ort-utils: Let the system pick an ephemeral port for testing
• dd1085c ort-utils: Use a ConcurrentHashMap for requests in tests
• 25df745 spdx-expression: Make all mapping types explicit for clarity
• 71d5687 Give utility files more fitting names

🚀 Dependency Updates

• b8f4b68 update actions/checkout action to v6.0.3
• 8ca6af1 update aws-java-sdk-v2 monorepo to v2.46.0
• a57068a update aws-java-sdk-v2 monorepo to v2.46.3
• f0d9382 update buildconfigplugin to v6.0.10
• 17b080f update ch.qos.logback:logback-classic to v1.5.34
• 9fac900 update com.autonomousapps.build-health to v3.14.1
• f98024b update docusaurus monorepo to v3.10.1
• b1b82c2 update flox/install-flox-action action to v2.5.1
• d687fae update github/codeql-action action to v4.36.1
• 6cc8e02 update graalvm/setup-graalvm action to v1.5.4
• 5672f01 update io.mockk:mockk to v1.14.11
• bfcc3b5 update jackson monorepo to v2.22.0
• 910e103 update jgit to v7.7.0.202606012155-r
• 11569d5 update net.sf.saxon:saxon-he to v13
• c3c3589 update umbrelladocs/action-linkspector action to v1.5.2

🚜 Refactorings

• a254b38 gradle-plugin: Drop a when in favor of early returns
• 555bc12 gradle-plugin: Drop another when in favor of early returns
• e3dcbad gradle-plugin: Factor out getPomFile()
• 5c87913 gradle-plugin: Factor out toOrtDependency()
• 32a3f6f gradle-plugin: Inline selectedComponent
• c2ccd72 spdx: Migrate from Jackson to KxS
• 402b766 spdx-expression: Avoid Jackson for mapping deserialization

💡 Other Changes

• 212a470 style(gradle): Sort dependencies automatically
• 4401b96 style(plugins): Consistently use single-line docs where possible