92.0.0

What's Changed

🛠 Breaking Changes

• 168f4bb fix(evaluator)!: Change licenseRule() to filter excluded licenses

🐞 Bug Fixes

• fe14f24 model: Stop ignoring package license choices
• a49f27e scanner: Consistently pass labels to scan()
• 355eed4 scanner: Drop snippet choices in clearPropertiesIfNeeded()
• 1e3a239 scanner: Stop passing unrelated .ort.yml entries to pkg scans
• a357a88 scanoss: Make isPathExcluded() work in case of Git submodules
• 1bab72b vulnerable-code: Include affected PURLs in missing advisory message

🎉 New Features

• fd4324d model: Add license choices to the resolved configuration
• 49db76c reporter: Add resolved configuration statistics
• 952f672 reporter: Count license choices in resolved configuration stats
• be92764 reporter: Count package configurations and curations
• ea36a01 Add support for global license choices

✅ Tests

• 6c317bd python: Update expected results
• 4c5227e scanner: Inline a couple of variables
• 456a5eb scanner: Make a test asset more consistent
• e951bb4 scanner: Slightly simplify the test setup
• 5d6cddc scanoss: Change a test setup to use PROJECT as package type

🐘 Build & ⚙️ CI

• 125f067 gradle: Increase memory settings for the buildHealth task

📖 Documentation

• 7c8e6e3 evaluator: Clarify KDoc of getNonApplicable*LicenseChoices functions
• f755bf0 model: Clarifiy meaning of SnippetChoices.provenance
• 39cd902 model: Clarify meaning of SnippetChoice.given.sourceLocation
• 5f49268 model: Fix a typo
• 0d7c4bb scanner: Add periods at the end of sentences
• b7d4734 scanner: Improve a code comment
• 56c4bae spdx-document-file: Fix a KDoc reference

🔧 Chores

• 367308f evaluator: Remove superfluous braces
• cd11566 fossid: Inline shouldDeleteFile()
• 919d622 git: Use XML factory functions instead of deprecated constructors
• 36d6725 gradle-plugin: Remove some superfluous null checks
• 52a189f scanner: Factor out clearPropertiesIfNeeded()
• 3a8aed8 scanner: Factor out a project variable
• aa07c8e scanner: Use a more generic name for filteredContext
• 0b418f7 scanner: Use named arguments when constructing scan context

🚀 Dependency Updates

• c98eced update aws-java-sdk-v2 monorepo to v2.49.6
• 74d9bb6 update ch.qos.logback:logback-classic to v1.6.1
• f8817b5 update com.autonomousapps.build-health to v3.18.0
• 5f48174 update com.github.jmongard.git-semver-plugin to v0.19.4
• a64a525 update com.github.jmongard.git-semver-plugin to v0.19.5
• 15c57fc update dependency prettier to v3.9.6
• 2627f07 update docker/login-action action to v4.5.2
• 44b2005 update docker/login-action action to v4.6.0
• 6ee6c17 update docusaurus monorepo to v3.10.2
• 430e5da update github/codeql-action action to v4.37.4
• 7635a47 update io.github.pdvrieze.xmlutil:serialization to v1
• d627df0 update io.github.pdvrieze.xmlutil:serialization to v1.0.1
• d07b1a0 update jetbrains/qodana-action action to v2026.2.0
• 6e9bbc6 update kotlin monorepo to v2.4.10
• 1767b81 update react monorepo to v19.2.8
• 6df7a0e update umbrelladocs/action-linkspector action to v1.5.5

🚜 Refactorings

• 493d290 scanoss: Factor out ScanContext.isPathExcluded()