91.1.0 (The Porsche 911 edition 😉)

What's Changed

🐞 Bug Fixes

• 9384472 cyclonedx: Map whitespace characters to always be valid
• 7eb33c8 yarn2: Avoid failing on ambiguously resolved locators

🎉 New Features

• c4403ba Tycho: Allow some configuration of the command line
• f503c9a model: Add firstFixedVersions field to Vulnerability
• 829f364 vulnerable-code: Populate firstFixedVersions for v1 API
• 9a99958 vulnerable-code: Populate firstFixedVersions for v3 API

✅ Tests

• ac7e276 osv: Temporarily disable a failing test due to an upstream issue
• 82bf51a osv: Update expected results

🐘 Build & ⚙️ CI

• 68d065f detekt: Correctly match all desired files
• 37312d5 gradle: Consistently apply XZ library specifics
• dda1a6c gradle: Make (plugin) implementation dependencies runtime-only
• 6912b51 gradle: Remove some unused dependencies
• 12b1adb gradle: Split up AsciidoctorJ API / implementation dependencies
• 5e3b178 spdx-expression: Fix up Jackson dependencies
• 6ec421b Avoid using a Project object as a dependency notation

🔧 Chores

• 6dc3a3d buildSrc: Address Detekt issues before enabling it
• 8214f59 buildSrc: Use property assignment via =
• afcad39 model: Correct the target type of a sorted set converter

🚀 Dependency Updates

• 2dba388 update actions/setup-node action to v7
• 4223495 update aws-java-sdk-v2 monorepo to v2.48.0
• cf44691 update aws-java-sdk-v2 monorepo to v2.48.1
• a316068 update ch.qos.logback:logback-classic to v1.5.38
• da50432 update com.autonomousapps.build-health to v3.16.1
• 11b76cd update com.autonomousapps.build-health to v3.17.0
• 30274e6 update com.icegreen:greenmail to v2.1.10
• 286899b update com.icegreen:greenmail to v2.1.11
• 42f3be2 update com.squareup:sort-dependencies-gradle-plugin to v0.20.0
• d710af6 update graalvm/setup-graalvm action to v1.6.3
• 980103e update ksp monorepo to v2.3.10
• 4672d8e update org.bouncycastle:bcprov-jdk18on to v1.85
• 24bb4eb update org.graalvm.buildtools:native-gradle-plugin to v1.1.4
• 65c0cfc update org.metaeffekt.core:ae-security to v0.156.4