91.2.0

What's Changed

🐞 Bug Fixes

• 63b4d40 Python: Prevent generation of duplicate identifiers
• ab88afd fossid: Fix scan link in pending identification issue message
• 494d66e python: Import PEP 639 license expressions

🎉 New Features

• 36da9cb Docker: Add setuptools_rust [1] to Python environment
• a1eeaf7 ProcessCapture: Add functions to get stdout / stderr as streams
• c0bdab6 analyzer: Add a package manager for GitHub Actions
• 1af8281 cli-helper: Add missing config resolution for package curations
• 280926c mise: Install the bombom tool to run Rebar3FunTest
• 6cbb204 mise: Install the mix_sbom tool to run MixFunTest
• f784665 osv: Extract firstFixedVersions from vulnerability results

✅ Tests

• e360414 mix: Update the expected result to contain a license expression
• 07d666b f3ff3f8 osv: Update expected results
• a41d7ad python: Update expected results

📖 Documentation

• 6c3ef9e mise: Explain why MISE_TOOL_INSTALL_PATH cannot be used
• 86219e7 model: Make the semantics of path excludes and includes clearer

🔧 Chores

• 1b3c268 .env.versions: Group versions by tool type
• ac2c3e3 bower: Move a private function out of class context
• 5473c1c cyclonedx: Iterate over references only once
• 55c1a65 detekt-rules: Make fewer exceptions to package naming rules
• d81b495 gradle-plugin: Add a script to dump the ORT model to the console
• 5b81969 model: Define default LicenseFilePatterns in "common" case
• b53f88b rebar3: Give the temporary BOM file a better name
• 5e51a3b rebar3: Rearrange bombom run arguments for readability
• 8342bec scripts: Export environment variables more safely
• 2714a81 scripts: Improve the ORT version message in docker_build.sh
• c6d182d scripts: Move docker_run.sh comments to CLI help
• ba20f5d Allow multiple matches for SimplePackageConfigurationProvider
• a2e1abe Initialize configurationsById directly at the declaration

🚀 Dependency Updates

• 76abaea docker: Upgrade to a stable version of Provenant
• b9025ff update actions/checkout action to v7.0.1
• 8a65c41 update actions/setup-java action to v5.6.0
• 800d5d8 update aws-java-sdk-v2 monorepo to v2.49.0
• 58c59fe update aws-java-sdk-v2 monorepo to v2.49.1
• bd647b8 update ch.qos.logback:logback-classic to v1.6.0
• e406f72 update com.github.jmongard.git-semver-plugin to v0.19.3
• 1cc2d84 update dependency prettier to v3.9.5
• 6fd42b5 update dev.aga.gradle.version-catalog-generator to v4.2.2
• fdab2e7 update docker/login-action action to v4.5.0
• 6936757 update docker/login-action action to v4.5.1
• a039b78 update github/codeql-action action to v4.37.1
• 8d01266 update github/codeql-action action to v4.37.2
• 56212c7 update github/codeql-action action to v4.37.3
• 4e7f3a6 update io.github.hfhbd.kfx to v0.2.11
• 049abda update jdx/mise-action action to v4.2.1
• 3339dea update jdx/mise-action action to v4.2.2
• 76c84ff update jdx/mise-action action to v4.2.3
• 4a6f514 update jgit to v7.7.1.202607240634-r
• fc09066 update kotest to v6.2.3
• 8e6054b update org.apache.tika:tika-core to v3.3.2
• e261596 update org.cyclonedx:cyclonedx-core-java to v13
• 3dc61c0 update org.graalvm.buildtools:native-gradle-plugin to v1.1.5
• 0b108e4 update org.graalvm.buildtools:native-gradle-plugin to v1.1.6
• 9297111 update org.metaeffekt.core:ae-security to v0.156.5
• dc0f3a8 update ossf/scorecard-action action to v2.4.4

🚜 Refactorings

• adc4e7c cli-helper: Factor out a repositoryConfiguration variable
• c367d25 cyclonedx: Simplify extractLicenseInfo()
• 9cafc5e cyclonedx: Take the BOM as a file
• 932f78e docker: Move mise to the base image
• 57fe5f8 Unify dependency relationship loops in SpdxDocumentModelMapper