89.3.0

What's Changed

🐞 Bug Fixes

• bab80ca downloader: Use exit code 2 for non-fatal failures
• 5377fed flox: Make all script error output go to stderr
• 7f56917 vulnerable-code: Hard-code "VCIO_API_AGENT" as the User-Agent

🎉 New Features

• 24ed320 commands: Print a docs link when outputting rule violations
• a10f5bc flox: Add Provenant as a Nix flake
• a47b842 flox: Add a convenience script to run ORT commands
• 096ad4f flox: Add a convenience script to run all tests
• abc0eec osv: Enable matching purls with type="github"
• e06ee35 osv: Ensure the purl is valid before using it
• 9fe6942 Add mise configuration files

⚡ Performance Enhancements

• 76bec40 model: Introduce a lookup cache in DependencyGraphBuilder

✅ Tests

• a3216e3 bazel: Update expected results
• 9ff0122 python: Update expected results
• 8bac4b8 scanner: Assert copyrights for ScanCode and Provenant
• a3029bd scanner: Remove passing-on of the test tag
• 9a935af scanner: Support asserting copyright findings
• be7a441 vulnerable-code: Enable a test again that works now

🐘 Build & ⚙️ CI

• 0d578cd flox: Add environments for all VCS tools

📖 Documentation

• 7f83577 flox: Add a README to explain the idea of using Flox
• f517511 git: Explain why the repo launcher's version is used
• edda885 model: Add a note about threading constraints
• 20c37f1 scanner: Use passive voice in a code comment

🔧 Chores

• 5e9b718 commands: Remove the unused OPTION_GROUP_RULE
• 4443bf9 docker: Simplify Ruby installation
• 6501425 gradle-inspector: Associate two extensions with different type
• fd6f33e gradle-inspector: Move two functions into the class
• 618aa15 model: Rename a map property in DependencyGraphBuilder
• ce9007f scanoss: Align mapping functions for findings to return a Set
• 04ebd1b scanoss: Improve the name of createSnippetFindings()
• d17d6b1 vulnerable-code: Set the user agent already in the client
• b71cb23 Introduce constants for status codes

🚀 Dependency Updates

• 0b3a3dc docker: Upgrade Provenant to version 0.1.14
• c7e4d2b docker: Upgrade licensee to version 10.0.0
• e810a17 update actions/checkout action to v7
• ff3771d update aesecurity to v0.156.2
• 4a03063 update flox/install-flox-action action to v2.5.2
• 0082bc2 update flox/install-flox-action action to v2.5.3
• 6f8be5d update gradle to v9.6.0
• d77f530 update jsonschemavalidator to v3.0.5
• c3e6e56 update kotest to v6.2.1
• b594d78 update logback monorepo
• 1bb032f update mavenpublishplugin to v0.37.0
• 8336094 update sortdependenciesplugin to v0.19.0

🚜 Refactorings

• a17fb02 commands: Move option group constants to a companion object
• 1800943 osv: Factor out createRequest()
• 331c89a osv: Factor out createRequestForPurl()