Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Bump ortVersion from 26.0.0 to 27.0.0 #40

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Bump ortVersion from 26.0.0 to 27.0.0 #40

wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jul 18, 2024

Bumps ortVersion from 26.0.0 to 27.0.0.
Updates org.ossreviewtoolkit:analyzer from 26.0.0 to 27.0.0

Release notes

Sourced from org.ossreviewtoolkit:analyzer's releases.

27.0.0

What's Changed

Breaking Changes 🛠

  • 192736fe5bdf0c15fcef4f471a0f05e64b92de78 refactor(model)!: Inline AdvisorRecord with AdvisorRun

Bug Fixes 🐞

  • 89fe68d4b0680eb704146d814fa62dbec27ee509 SpdxDocumentFile: Add created issues to the PackageReference
  • c8eb52a298e773f25a18ce843250253a09438a5d SpdxDocumentFile: Ensure to collect issues from external doc refs
  • d686957d8241027748a938225b8aa3dab0eb2e52 cyclonedx: Avoid a NPE when clearing extensibleTypes
  • 023dfb6e955f3d814f277b07575947b47221870b cyclonedx: Only set licenses at all if they are not empty
  • b0b1f7c1378e4b4302a834ee9b981c3ec92d76e9 downloader: Support Git URLs with '.git' in domain
  • fb1f601604d878f70f1648790a13fa6527387cb7 gradle: Ignore dependencySources configurations during resolution
  • 90226f2d8af8047aac44dc454acaabfd4d404a81 sbt: Filter out garbage from sbt projects command

New Features 🎉

  • 2d3847e7894303c3f1807910a31332b2f7b9b9eb analyzer: Add option to skip setup.py analysis of PIP dependencies
  • 57911fefdf03ae420c7deaefb1ce2860c8598188 helper-cli: Add a command to show insights into scan issues
  • b37ac5e47f4dbb61fdae1919faeda93748697b90 helper-cli: Allow to omit the version when listing packages
  • ed44b6ad644780a66283d024ada1b6561a6e6bdf model: Add a constant for an empty AdvisorRun

Build 🐘 & CI ⚙️

  • b3ae3d0a36760885feef19cc4f8c82fb8b299571 gradle: Add a "detektAll" convenience task
  • 67c4807fe39f6459b78501a45bf5de28834d4df6 gradle: Prepare for eventually using atlassian.io artifacts
  • 82396bd01c320f304685e0c4fe3a69852f9f162c github: Move Scorecard analysis to a separate workflow
  • 113a44d79582bcf286112fe2b10da57a194e40e7 github: Run OpenSSF Scorecard analysis
  • d881059537792f07df20703c5d78ed2b522a8012 renovate: Automatically pin GitHub action digests

Chores 🔧

  • 3e2eb12e0de3e913c0349d1a24e21cc9f2c7a04b cocoapods: Add a bit fault tolerance for PODS / DEPENDENCIES
  • 28c53b94e07cc8b6f441833cef68e17d66a29201 cocoapods: Fix-up an unnecessary mapNotNull
  • dfb014da28221e2323aecee01c8c2f397a6e0664 cocoapods: Generalize mapping IDs to packages
  • f7ff51afbe11d0716ca2dca1c5d58229cafae3bf conan: Replace a get() with an indexing operator
  • 4aad014c729dcc6ce13fdf6fcbb88c8eb82e3d1a cyclonedx: Remove an unneeded cast to Any
  • 262d9668c00b5c70949569a08f1eee758fc13cbd cyclonedx: Say for which file extension creation failed
  • e93de8a971a4f15aee2e6fe0da7b8a059be77e99 pub: Improve function names

Dependency Updates 🚀

  • 824cc38468e116c521b61873cb1a16b5dd755e57 pin dependencies
  • 25f07dbce41183fed6d5645a2ac6f793602c25a4 update dependency com.github.ajalt.mordant:mordant to v2.7.1
  • 6229972e503cba055cb2c560224cfd6c213fc355 update dependency gradle to v8.9
  • 0e47316ab6a9a52106e0259c43f39b854076c73c update dependency io.mockk:mockk to v1.13.12
  • 639a454b2b0472541b09c10eeef57496a22777d3 update docker/build-push-action digest to 1ca370b
  • 88084c1a04a12c4a3cde3ac515ec0b17536f76ca update docker/build-push-action digest to a254f8c
  • 2651da9dac14d760a8d278f416b69e31aa490280 update github/codeql-action digest to 4fa2a79
  • 0139c25f9c19388dce7e508a4030389030326f10 update gradle/actions digest to d9c87d4
  • 0ac569e8995bdb23ea5c82dbd0d10f5fd29a8621 update graphqlplugin to v6.8.1
  • 3f69531829b9a76ccaeffb1585188afcb93b3b8f update graphqlplugin to v6.8.2
  • 144588eb61d8fba1a9fa3a1ac4f882fc15448713 update graphqlplugin to v6.8.4

... (truncated)

Commits
  • f7ff51a chore(conan): Replace a get() with an indexing operator
  • 802dfa8 refactor(conan): Port the remaining Jackson based code to KxS
  • 5dbe633 refactor(conan): Slightly simplify the code for obtaining the URL
  • af02a8c refactor(conan): Extract the variable hashValue
  • efed39f docs(pip): Refer to option constants instead of repeating their values
  • 22cd864 docs(pip): Correctly state the default Python version to analyze for
  • 86d6ff7 refactor(conan): Port parsing package info from Jackson to KxS
  • 3181191 refactor(conan): Inline a function
  • a942c7e refactor(conan): Remove a code redundancy
  • 5c6322a refactor(conan): Turn parseSourceArtifact() into an expression
  • Additional commits viewable in compare view

Updates org.ossreviewtoolkit:model from 26.0.0 to 27.0.0

Release notes

Sourced from org.ossreviewtoolkit:model's releases.

27.0.0

What's Changed

Breaking Changes 🛠

  • 192736fe5bdf0c15fcef4f471a0f05e64b92de78 refactor(model)!: Inline AdvisorRecord with AdvisorRun

Bug Fixes 🐞

  • 89fe68d4b0680eb704146d814fa62dbec27ee509 SpdxDocumentFile: Add created issues to the PackageReference
  • c8eb52a298e773f25a18ce843250253a09438a5d SpdxDocumentFile: Ensure to collect issues from external doc refs
  • d686957d8241027748a938225b8aa3dab0eb2e52 cyclonedx: Avoid a NPE when clearing extensibleTypes
  • 023dfb6e955f3d814f277b07575947b47221870b cyclonedx: Only set licenses at all if they are not empty
  • b0b1f7c1378e4b4302a834ee9b981c3ec92d76e9 downloader: Support Git URLs with '.git' in domain
  • fb1f601604d878f70f1648790a13fa6527387cb7 gradle: Ignore dependencySources configurations during resolution
  • 90226f2d8af8047aac44dc454acaabfd4d404a81 sbt: Filter out garbage from sbt projects command

New Features 🎉

  • 2d3847e7894303c3f1807910a31332b2f7b9b9eb analyzer: Add option to skip setup.py analysis of PIP dependencies
  • 57911fefdf03ae420c7deaefb1ce2860c8598188 helper-cli: Add a command to show insights into scan issues
  • b37ac5e47f4dbb61fdae1919faeda93748697b90 helper-cli: Allow to omit the version when listing packages
  • ed44b6ad644780a66283d024ada1b6561a6e6bdf model: Add a constant for an empty AdvisorRun

Build 🐘 & CI ⚙️

  • b3ae3d0a36760885feef19cc4f8c82fb8b299571 gradle: Add a "detektAll" convenience task
  • 67c4807fe39f6459b78501a45bf5de28834d4df6 gradle: Prepare for eventually using atlassian.io artifacts
  • 82396bd01c320f304685e0c4fe3a69852f9f162c github: Move Scorecard analysis to a separate workflow
  • 113a44d79582bcf286112fe2b10da57a194e40e7 github: Run OpenSSF Scorecard analysis
  • d881059537792f07df20703c5d78ed2b522a8012 renovate: Automatically pin GitHub action digests

Chores 🔧

  • 3e2eb12e0de3e913c0349d1a24e21cc9f2c7a04b cocoapods: Add a bit fault tolerance for PODS / DEPENDENCIES
  • 28c53b94e07cc8b6f441833cef68e17d66a29201 cocoapods: Fix-up an unnecessary mapNotNull
  • dfb014da28221e2323aecee01c8c2f397a6e0664 cocoapods: Generalize mapping IDs to packages
  • f7ff51afbe11d0716ca2dca1c5d58229cafae3bf conan: Replace a get() with an indexing operator
  • 4aad014c729dcc6ce13fdf6fcbb88c8eb82e3d1a cyclonedx: Remove an unneeded cast to Any
  • 262d9668c00b5c70949569a08f1eee758fc13cbd cyclonedx: Say for which file extension creation failed
  • e93de8a971a4f15aee2e6fe0da7b8a059be77e99 pub: Improve function names

Dependency Updates 🚀

  • 824cc38468e116c521b61873cb1a16b5dd755e57 pin dependencies
  • 25f07dbce41183fed6d5645a2ac6f793602c25a4 update dependency com.github.ajalt.mordant:mordant to v2.7.1
  • 6229972e503cba055cb2c560224cfd6c213fc355 update dependency gradle to v8.9
  • 0e47316ab6a9a52106e0259c43f39b854076c73c update dependency io.mockk:mockk to v1.13.12
  • 639a454b2b0472541b09c10eeef57496a22777d3 update docker/build-push-action digest to 1ca370b
  • 88084c1a04a12c4a3cde3ac515ec0b17536f76ca update docker/build-push-action digest to a254f8c
  • 2651da9dac14d760a8d278f416b69e31aa490280 update github/codeql-action digest to 4fa2a79
  • 0139c25f9c19388dce7e508a4030389030326f10 update gradle/actions digest to d9c87d4
  • 0ac569e8995bdb23ea5c82dbd0d10f5fd29a8621 update graphqlplugin to v6.8.1
  • 3f69531829b9a76ccaeffb1585188afcb93b3b8f update graphqlplugin to v6.8.2
  • 144588eb61d8fba1a9fa3a1ac4f882fc15448713 update graphqlplugin to v6.8.4

... (truncated)

Commits
  • f7ff51a chore(conan): Replace a get() with an indexing operator
  • 802dfa8 refactor(conan): Port the remaining Jackson based code to KxS
  • 5dbe633 refactor(conan): Slightly simplify the code for obtaining the URL
  • af02a8c refactor(conan): Extract the variable hashValue
  • efed39f docs(pip): Refer to option constants instead of repeating their values
  • 22cd864 docs(pip): Correctly state the default Python version to analyze for
  • 86d6ff7 refactor(conan): Port parsing package info from Jackson to KxS
  • 3181191 refactor(conan): Inline a function
  • a942c7e refactor(conan): Remove a code redundancy
  • 5c6322a refactor(conan): Turn parseSourceArtifact() into an expression
  • Additional commits viewable in compare view

Updates org.ossreviewtoolkit:reporter from 26.0.0 to 27.0.0

Release notes

Sourced from org.ossreviewtoolkit:reporter's releases.

27.0.0

What's Changed

Breaking Changes 🛠

  • 192736fe5bdf0c15fcef4f471a0f05e64b92de78 refactor(model)!: Inline AdvisorRecord with AdvisorRun

Bug Fixes 🐞

  • 89fe68d4b0680eb704146d814fa62dbec27ee509 SpdxDocumentFile: Add created issues to the PackageReference
  • c8eb52a298e773f25a18ce843250253a09438a5d SpdxDocumentFile: Ensure to collect issues from external doc refs
  • d686957d8241027748a938225b8aa3dab0eb2e52 cyclonedx: Avoid a NPE when clearing extensibleTypes
  • 023dfb6e955f3d814f277b07575947b47221870b cyclonedx: Only set licenses at all if they are not empty
  • b0b1f7c1378e4b4302a834ee9b981c3ec92d76e9 downloader: Support Git URLs with '.git' in domain
  • fb1f601604d878f70f1648790a13fa6527387cb7 gradle: Ignore dependencySources configurations during resolution
  • 90226f2d8af8047aac44dc454acaabfd4d404a81 sbt: Filter out garbage from sbt projects command

New Features 🎉

  • 2d3847e7894303c3f1807910a31332b2f7b9b9eb analyzer: Add option to skip setup.py analysis of PIP dependencies
  • 57911fefdf03ae420c7deaefb1ce2860c8598188 helper-cli: Add a command to show insights into scan issues
  • b37ac5e47f4dbb61fdae1919faeda93748697b90 helper-cli: Allow to omit the version when listing packages
  • ed44b6ad644780a66283d024ada1b6561a6e6bdf model: Add a constant for an empty AdvisorRun

Build 🐘 & CI ⚙️

  • b3ae3d0a36760885feef19cc4f8c82fb8b299571 gradle: Add a "detektAll" convenience task
  • 67c4807fe39f6459b78501a45bf5de28834d4df6 gradle: Prepare for eventually using atlassian.io artifacts
  • 82396bd01c320f304685e0c4fe3a69852f9f162c github: Move Scorecard analysis to a separate workflow
  • 113a44d79582bcf286112fe2b10da57a194e40e7 github: Run OpenSSF Scorecard analysis
  • d881059537792f07df20703c5d78ed2b522a8012 renovate: Automatically pin GitHub action digests

Chores 🔧

  • 3e2eb12e0de3e913c0349d1a24e21cc9f2c7a04b cocoapods: Add a bit fault tolerance for PODS / DEPENDENCIES
  • 28c53b94e07cc8b6f441833cef68e17d66a29201 cocoapods: Fix-up an unnecessary mapNotNull
  • dfb014da28221e2323aecee01c8c2f397a6e0664 cocoapods: Generalize mapping IDs to packages
  • f7ff51afbe11d0716ca2dca1c5d58229cafae3bf conan: Replace a get() with an indexing operator
  • 4aad014c729dcc6ce13fdf6fcbb88c8eb82e3d1a cyclonedx: Remove an unneeded cast to Any
  • 262d9668c00b5c70949569a08f1eee758fc13cbd cyclonedx: Say for which file extension creation failed
  • e93de8a971a4f15aee2e6fe0da7b8a059be77e99 pub: Improve function names

Dependency Updates 🚀

  • 824cc38468e116c521b61873cb1a16b5dd755e57 pin dependencies
  • 25f07dbce41183fed6d5645a2ac6f793602c25a4 update dependency com.github.ajalt.mordant:mordant to v2.7.1
  • 6229972e503cba055cb2c560224cfd6c213fc355 update dependency gradle to v8.9
  • 0e47316ab6a9a52106e0259c43f39b854076c73c update dependency io.mockk:mockk to v1.13.12
  • 639a454b2b0472541b09c10eeef57496a22777d3 update docker/build-push-action digest to 1ca370b
  • 88084c1a04a12c4a3cde3ac515ec0b17536f76ca update docker/build-push-action digest to a254f8c
  • 2651da9dac14d760a8d278f416b69e31aa490280 update github/codeql-action digest to 4fa2a79
  • 0139c25f9c19388dce7e508a4030389030326f10 update gradle/actions digest to d9c87d4
  • 0ac569e8995bdb23ea5c82dbd0d10f5fd29a8621 update graphqlplugin to v6.8.1
  • 3f69531829b9a76ccaeffb1585188afcb93b3b8f update graphqlplugin to v6.8.2
  • 144588eb61d8fba1a9fa3a1ac4f882fc15448713 update graphqlplugin to v6.8.4

... (truncated)

Commits
  • f7ff51a chore(conan): Replace a get() with an indexing operator
  • 802dfa8 refactor(conan): Port the remaining Jackson based code to KxS
  • 5dbe633 refactor(conan): Slightly simplify the code for obtaining the URL
  • af02a8c refactor(conan): Extract the variable hashValue
  • efed39f docs(pip): Refer to option constants instead of repeating their values
  • 22cd864 docs(pip): Correctly state the default Python version to analyze for
  • 86d6ff7 refactor(conan): Port parsing package info from Jackson to KxS
  • 3181191 refactor(conan): Inline a function
  • a942c7e refactor(conan): Remove a code redundancy
  • 5c6322a refactor(conan): Turn parseSourceArtifact() into an expression
  • Additional commits viewable in compare view

Updates org.ossreviewtoolkit.plugins.reporters:cyclonedx-reporter from 26.0.0 to 27.0.0

Release notes

Sourced from org.ossreviewtoolkit.plugins.reporters:cyclonedx-reporter's releases.

27.0.0

What's Changed

Breaking Changes 🛠

  • 192736fe5bdf0c15fcef4f471a0f05e64b92de78 refactor(model)!: Inline AdvisorRecord with AdvisorRun

Bug Fixes 🐞

  • 89fe68d4b0680eb704146d814fa62dbec27ee509 SpdxDocumentFile: Add created issues to the PackageReference
  • c8eb52a298e773f25a18ce843250253a09438a5d SpdxDocumentFile: Ensure to collect issues from external doc refs
  • d686957d8241027748a938225b8aa3dab0eb2e52 cyclonedx: Avoid a NPE when clearing extensibleTypes
  • 023dfb6e955f3d814f277b07575947b47221870b cyclonedx: Only set licenses at all if they are not empty
  • b0b1f7c1378e4b4302a834ee9b981c3ec92d76e9 downloader: Support Git URLs with '.git' in domain
  • fb1f601604d878f70f1648790a13fa6527387cb7 gradle: Ignore dependencySources configurations during resolution
  • 90226f2d8af8047aac44dc454acaabfd4d404a81 sbt: Filter out garbage from sbt projects command

New Features 🎉

  • 2d3847e7894303c3f1807910a31332b2f7b9b9eb analyzer: Add option to skip setup.py analysis of PIP dependencies
  • 57911fefdf03ae420c7deaefb1ce2860c8598188 helper-cli: Add a command to show insights into scan issues
  • b37ac5e47f4dbb61fdae1919faeda93748697b90 helper-cli: Allow to omit the version when listing packages
  • ed44b6ad644780a66283d024ada1b6561a6e6bdf model: Add a constant for an empty AdvisorRun

Build 🐘 & CI ⚙️

  • b3ae3d0a36760885feef19cc4f8c82fb8b299571 gradle: Add a "detektAll" convenience task
  • 67c4807fe39f6459b78501a45bf5de28834d4df6 gradle: Prepare for eventually using atlassian.io artifacts
  • 82396bd01c320f304685e0c4fe3a69852f9f162c github: Move Scorecard analysis to a separate workflow
  • 113a44d79582bcf286112fe2b10da57a194e40e7 github: Run OpenSSF Scorecard analysis
  • d881059537792f07df20703c5d78ed2b522a8012 renovate: Automatically pin GitHub action digests

Chores 🔧

  • 3e2eb12e0de3e913c0349d1a24e21cc9f2c7a04b cocoapods: Add a bit fault tolerance for PODS / DEPENDENCIES
  • 28c53b94e07cc8b6f441833cef68e17d66a29201 cocoapods: Fix-up an unnecessary mapNotNull
  • dfb014da28221e2323aecee01c8c2f397a6e0664 cocoapods: Generalize mapping IDs to packages
  • f7ff51afbe11d0716ca2dca1c5d58229cafae3bf conan: Replace a get() with an indexing operator
  • 4aad014c729dcc6ce13fdf6fcbb88c8eb82e3d1a cyclonedx: Remove an unneeded cast to Any
  • 262d9668c00b5c70949569a08f1eee758fc13cbd cyclonedx: Say for which file extension creation failed
  • e93de8a971a4f15aee2e6fe0da7b8a059be77e99 pub: Improve function names

Dependency Updates 🚀

  • 824cc38468e116c521b61873cb1a16b5dd755e57 pin dependencies
  • 25f07dbce41183fed6d5645a2ac6f793602c25a4 update dependency com.github.ajalt.mordant:mordant to v2.7.1
  • 6229972e503cba055cb2c560224cfd6c213fc355 update dependency gradle to v8.9
  • 0e47316ab6a9a52106e0259c43f39b854076c73c update dependency io.mockk:mockk to v1.13.12
  • 639a454b2b0472541b09c10eeef57496a22777d3 update docker/build-push-action digest to 1ca370b
  • 88084c1a04a12c4a3cde3ac515ec0b17536f76ca update docker/build-push-action digest to a254f8c
  • 2651da9dac14d760a8d278f416b69e31aa490280 update github/codeql-action digest to 4fa2a79
  • 0139c25f9c19388dce7e508a4030389030326f10 update gradle/actions digest to d9c87d4
  • 0ac569e8995bdb23ea5c82dbd0d10f5fd29a8621 update graphqlplugin to v6.8.1
  • 3f69531829b9a76ccaeffb1585188afcb93b3b8f update graphqlplugin to v6.8.2
  • 144588eb61d8fba1a9fa3a1ac4f882fc15448713 update graphqlplugin to v6.8.4

... (truncated)

Commits
  • f7ff51a chore(conan): Replace a get() with an indexing operator
  • 802dfa8 refactor(conan): Port the remaining Jackson based code to KxS
  • 5dbe633 refactor(conan): Slightly simplify the code for obtaining the URL
  • af02a8c refactor(conan): Extract the variable hashValue
  • efed39f docs(pip): Refer to option constants instead of repeating their values
  • 22cd864 docs(pip): Correctly state the default Python version to analyze for
  • 86d6ff7 refactor(conan): Port parsing package info from Jackson to KxS
  • 3181191 refactor(conan): Inline a function
  • a942c7e refactor(conan): Remove a code redundancy
  • 5c6322a refactor(conan): Turn parseSourceArtifact() into an expression
  • Additional commits viewable in compare view

Updates org.ossreviewtoolkit.plugins.packagecurationproviders:package-curation-provider-api from 26.0.0 to 27.0.0

Release notes

Sourced from org.ossreviewtoolkit.plugins.packagecurationproviders:package-curation-provider-api's releases.

27.0.0

What's Changed

Breaking Changes 🛠

  • 192736fe5bdf0c15fcef4f471a0f05e64b92de78 refactor(model)!: Inline AdvisorRecord with AdvisorRun

Bug Fixes 🐞

  • 89fe68d4b0680eb704146d814fa62dbec27ee509 SpdxDocumentFile: Add created issues to the PackageReference
  • c8eb52a298e773f25a18ce843250253a09438a5d SpdxDocumentFile: Ensure to collect issues from external doc refs
  • d686957d8241027748a938225b8aa3dab0eb2e52 cyclonedx: Avoid a NPE when clearing extensibleTypes
  • 023dfb6e955f3d814f277b07575947b47221870b cyclonedx: Only set licenses at all if they are not empty
  • b0b1f7c1378e4b4302a834ee9b981c3ec92d76e9 downloader: Support Git URLs with '.git' in domain
  • fb1f601604d878f70f1648790a13fa6527387cb7 gradle: Ignore dependencySources configurations during resolution
  • 90226f2d8af8047aac44dc454acaabfd4d404a81 sbt: Filter out garbage from sbt projects command

New Features 🎉

  • 2d3847e7894303c3f1807910a31332b2f7b9b9eb analyzer: Add option to skip setup.py analysis of PIP dependencies
  • 57911fefdf03ae420c7deaefb1ce2860c8598188 helper-cli: Add a command to show insights into scan issues
  • b37ac5e47f4dbb61fdae1919faeda93748697b90 helper-cli: Allow to omit the version when listing packages
  • ed44b6ad644780a66283d024ada1b6561a6e6bdf model: Add a constant for an empty AdvisorRun

Build 🐘 & CI ⚙️

  • b3ae3d0a36760885feef19cc4f8c82fb8b299571 gradle: Add a "detektAll" convenience task
  • 67c4807fe39f6459b78501a45bf5de28834d4df6 gradle: Prepare for eventually using atlassian.io artifacts
  • 82396bd01c320f304685e0c4fe3a69852f9f162c github: Move Scorecard analysis to a separate workflow
  • 113a44d79582bcf286112fe2b10da57a194e40e7 github: Run OpenSSF Scorecard analysis
  • d881059537792f07df20703c5d78ed2b522a8012 renovate: Automatically pin GitHub action digests

Chores 🔧

  • 3e2eb12e0de3e913c0349d1a24e21cc9f2c7a04b cocoapods: Add a bit fault tolerance for PODS / DEPENDENCIES
  • 28c53b94e07cc8b6f441833cef68e17d66a29201 cocoapods: Fix-up an unnecessary mapNotNull
  • dfb014da28221e2323aecee01c8c2f397a6e0664 cocoapods: Generalize mapping IDs to packages
  • f7ff51afbe11d0716ca2dca1c5d58229cafae3bf conan: Replace a get() with an indexing operator
  • 4aad014c729dcc6ce13fdf6fcbb88c8eb82e3d1a cyclonedx: Remove an unneeded cast to Any
  • 262d9668c00b5c70949569a08f1eee758fc13cbd cyclonedx: Say for which file extension creation failed
  • e93de8a971a4f15aee2e6fe0da7b8a059be77e99 pub: Improve function names

Dependency Updates 🚀

  • 824cc38468e116c521b61873cb1a16b5dd755e57 pin dependencies
  • 25f07dbce41183fed6d5645a2ac6f793602c25a4 update dependency com.github.ajalt.mordant:mordant to v2.7.1
  • 6229972e503cba055cb2c560224cfd6c213fc355 update dependency gradle to v8.9
  • 0e47316ab6a9a52106e0259c43f39b854076c73c update dependency io.mockk:mockk to v1.13.12
  • 639a454b2b0472541b09c10eeef57496a22777d3 update docker/build-push-action digest to 1ca370b
  • 88084c1a04a12c4a3cde3ac515ec0b17536f76ca update docker/build-push-action digest to a254f8c
  • 2651da9dac14d760a8d278f416b69e31aa490280 update github/codeql-action digest to 4fa2a79
  • 0139c25f9c19388dce7e508a4030389030326f10 update gradle/actions digest to d9c87d4
  • 0ac569e8995bdb23ea5c82dbd0d10f5fd29a8621 update graphqlplugin to v6.8.1
  • 3f69531829b9a76ccaeffb1585188afcb93b3b8f update graphqlplugin to v6.8.2
  • 144588eb61d8fba1a9fa3a1ac4f882fc15448713 update graphqlplugin to v6.8.4

... (truncated)

Commits
  • f7ff51a chore(conan): Replace a get() with an indexing operator
  • 802dfa8 refactor(conan): Port the remaining Jackson based code to KxS
  • 5dbe633 refactor(conan): Slightly simplify the code for obtaining the URL
  • af02a8c refactor(conan): Extract the variable hashValue
  • efed39f docs(pip): Refer to option constants instead of repeating their values
  • 22cd864 docs(pip): Correctly state the default Python version to analyze for
  • 86d6ff7 refactor(conan): Port parsing package info from Jackson to KxS
  • 3181191 refactor(conan): Inline a function
  • a942c7e refactor(conan): Remove a code redundancy
  • 5c6322a refactor(conan): Turn parseSourceArtifact() into an expression
  • Additional commits viewable in compare view

Updates org.ossreviewtoolkit.plugins.packageconfigurationproviders:package-configuration-provider-api from 26.0.0 to 27.0.0

Release notes

Sourced from org.ossreviewtoolkit.plugins.packageconfigurationproviders:package-configuration-provider-api's releases.

27.0.0

What's Changed

Breaking Changes 🛠

  • 192736fe5bdf0c15fcef4f471a0f05e64b92de78 refactor(model)!: Inline AdvisorRecord with AdvisorRun

Bug Fixes 🐞

  • 89fe68d4b0680eb704146d814fa62dbec27ee509 SpdxDocumentFile: Add created issues to the PackageReference
  • c8eb52a298e773f25a18ce843250253a09438a5d SpdxDocumentFile: Ensure to collect issues from external doc refs
  • d686957d8241027748a938225b8aa3dab0eb2e52 cyclonedx: Avoid a NPE when clearing extensibleTypes
  • 023dfb6e955f3d814f277b07575947b47221870b cyclonedx: Only set licenses at all if they are not empty
  • b0b1f7c1378e4b4302a834ee9b981c3ec92d76e9 downloader: Support Git URLs with '.git' in domain
  • fb1f601604d878f70f1648790a13fa6527387cb7 gradle: Ignore dependencySources configurations during resolution
  • 90226f2d8af8047aac44dc454acaabfd4d404a81 sbt: Filter out garbage from sbt projects command

New Features 🎉

  • 2d3847e7894303c3f1807910a31332b2f7b9b9eb analyzer: Add option to skip setup.py analysis of PIP dependencies
  • 57911fefdf03ae420c7deaefb1ce2860c8598188 helper-cli: Add a command to show insights into scan issues
  • b37ac5e47f4dbb61fdae1919faeda93748697b90 helper-cli: Allow to omit the version when listing packages
  • ed44b6ad644780a66283d024ada1b6561a6e6bdf model: Add a constant for an empty AdvisorRun

Build 🐘 & CI ⚙️

  • b3ae3d0a36760885feef19cc4f8c82fb8b299571 gradle: Add a "detektAll" convenience task
  • 67c4807fe39f6459b78501a45bf5de28834d4df6 gradle: Prepare for eventually using atlassian.io artifacts
  • 82396bd01c320f304685e0c4fe3a69852f9f162c github: Move Scorecard analysis to a separate workflow
  • 113a44d79582bcf286112fe2b10da57a194e40e7 github: Run OpenSSF Scorecard analysis
  • d881059537792f07df20703c5d78ed2b522a8012 renovate: Automatically pin GitHub action digests

Chores 🔧

  • 3e2eb12e0de3e913c0349d1a24e21cc9f2c7a04b cocoapods: Add a bit fault tolerance for PODS / DEPENDENCIES
  • 28c53b94e07cc8b6f441833cef68e17d66a29201 cocoapods: Fix-up an unnecessary mapNotNull
  • dfb014da28221e2323aecee01c8c2f397a6e0664 cocoapods: Generalize mapping IDs to packages
  • f7ff51afbe11d0716ca2dca1c5d58229cafae3bf conan: Replace a get() with an indexing operator
  • 4aad014c729dcc6ce13fdf6fcbb88c8eb82e3d1a cyclonedx: Remove an unneeded cast to Any
  • 262d9668c00b5c70949569a08f1eee758fc13cbd cyclonedx: Say for which file extension creation failed
  • e93de8a971a4f15aee2e6fe0da7b8a059be77e99 pub: Improve function names

Dependency Updates 🚀

  • 824cc38468e116c521b61873cb1a16b5dd755e57 pin dependencies
  • 25f07dbce41183fed6d5645a2ac6f793602c25a4 update dependency com.github.ajalt.mordant:mordant to v2.7.1
  • 6229972e503cba055cb2c560224cfd6c213fc355 update dependency gradle to v8.9
  • 0e47316ab6a9a52106e0259c43f39b854076c73c update dependency io.mockk:mockk to v1.13.12
  • 639a454b2b0472541b09c10eeef57496a22777d3 update docker/build-push-action digest to 1ca370b
  • 88084c1a04a12c4a3cde3ac515ec0b17536f76ca update docker/build-push-action digest to a254f8c
  • 2651da9dac14d760a8d278f416b69e31aa490280 update github/codeql-action digest to 4fa2a79
  • 0139c25f9c19388dce7e508a4030389030326f10 update gradle/actions digest to d9c87d4
  • 0ac569e8995bdb23ea5c82dbd0d10f5fd29a8621 update graphqlplugin to v6.8.1
  • 3f69531829b9a76ccaeffb1585188afcb93b3b8f update graphqlplugin to v6.8.2
  • 144588eb61d8fba1a9fa3a1ac4f882fc15448713 update graphqlplugin to v6.8.4

... (truncated)

Commits
  • f7ff51a chore(conan): Replace a get() with an indexing operator
  • 802dfa8 refactor(conan): Port the remaining Jackson based code to KxS
  • 5dbe633 refactor(conan): Slightly simplify the code for obtaining the URL
  • af02a8c refactor(conan): Extract the variable hashValue
  • efed39f docs(pip): Refer to option constants instead of repeating their values
  • 22cd864 docs(pip): Correctly state the default Python version to analyze for
  • 86d6ff7 refactor(conan): Port parsing package info from Jackson to KxS
  • 3181191 refactor(conan): Inline a function
  • a942c7e refactor(conan): Remove a code redundancy
  • 5c6322a refactor(conan): Turn parseSourceArtifact() into an expression
  • Additional commits viewable in compare view

Updates org.ossreviewtoolkit.plugins.packageconfigurationproviders:ort-config-package-configuration-provider from 26.0.0 to 27.0.0

Release notes

Sourced from org.ossreviewtoolkit.plugins.packageconfigurationproviders:ort-config-package-configuration-provider's releases.

27.0.0

What's Changed

Breaking Changes 🛠

  • 192736fe5bdf0c15fcef4f471a0f05e64b92de78 refactor(model)!: Inline AdvisorRecord with AdvisorRun

Bug Fixes 🐞

  • 89fe68d4b0680eb704146d814fa62dbec27ee509 SpdxDocumentFile: Add created issues to the PackageReference
  • c8eb52a298e773f25a18ce843250253a09438a5d SpdxDocumentFile: Ensure to collect issues from external doc refs
  • d686957d8241027748a938225b8aa3dab0eb2e52 cyclonedx: Avoid a NPE when clearing extensibleTypes
  • 023dfb6e955f3d814f277b07575947b47221870b cyclonedx: Only set licenses at all if they are not empty
  • b0b1f7c1378e4b4302a834ee9b981c3ec92d76e9 downloader: Support Git URLs with '.git' in domain
  • fb1f601604d878f70f1648790a13fa6527387cb7 gradle: Ignore dependencySources configurations during resolution
  • 90226f2d8af8047aac44dc454acaabfd4d404a81 sbt: Filter out garbage from sbt projects command

New Features 🎉

  • 2d3847e7894303c3f1807910a31332b2f7b9b9eb analyzer: Add option to skip setup.py analysis of PIP dependencies
  • 57911fefdf03ae420c7deaefb1ce2860c8598188 helper-cli: Add a command to show insights into scan issues
  • b37ac5e47f4dbb61fdae1919faeda93748697b90 helper-cli: Allow to omit the version when listing packages
  • ed44b6ad644780a66283d024ada1b6561a6e6bdf model: Add a constant for an empty AdvisorRun

Build 🐘 & CI ⚙️

  • b3ae3d0a36760885feef19cc4f8c82fb8b299571 gradle: Add a "detektAll" convenience task
  • 67c4807fe39f6459b78501a45bf5de28834d4df6 gradle: Prepare for eventually using atlassian.io artifacts
  • 82396bd01c320f304685e0c4fe3a69852f9f162c github: Move Scorecard analysis to a separate workflow
  • 113a44d79582bcf286112fe2b10da57a194e40e7 github: Run OpenSSF Scorecard analysis
  • d881059537792f07df20703c5d78ed2b522a8012 renovate: Automatically pin GitHub action digests

Chores 🔧

  • 3e2eb12e0de3e913c0349d1a24e21cc9f2c7a04b cocoapods: Add a bit fault tolerance for PODS / DEPENDENCIES
  • 28c53b94e07cc8b6f441833cef68e17d66a29201 cocoapods: Fix-up an unnecessary mapNotNull
  • dfb014da28221e2323aecee01c8c2f397a6e0664 cocoapods: Generalize mapping IDs to packages
  • f7ff51afbe11d0716ca2dca1c5d58229cafae3bf conan: Replace a get() with an indexing operator
  • 4aad014c729dcc6ce13fdf6fcbb88c8eb82e3d1a cyclonedx: Remove an unneeded cast to Any
  • 262d9668c00b5c70949569a08f1eee758fc13cbd cyclonedx: Say for which file extension creation failed
  • e93de8a971a4f15aee2e6fe0da7b8a059be77e99 pub: Improve function names

Dependency Updates 🚀

  • 824cc38468e116c521b61873cb1a16b5dd755e57 pin dependencies
  • 25f07dbce41183fed6d5645a2ac6f793602c25a4 update dependency com.github.ajalt.mordant:mordant to v2.7.1
  • 6229972e503cba055cb2c560224cfd6c213fc355 update dependency gradle to v8.9
  • 0e47316ab6a9a52106e0259c43f39b854076c73c update dependency io.mockk:mockk to v1.13.12
  • 639a454b2b0472541b09c10eeef57496a22777d3 update docker/build-push-action digest to 1ca370b
  • 88084c1a04a12c4a3cde3ac515ec0b17536f76ca update docker/build-push-action digest to a254f8c
  • 2651da9dac14d760a8d278f416b69e31aa490280 update github/codeql-action digest to 4fa2a79
  • 0139c25f9c19388dce7e508a4030389030326f10 update gradle/actions digest to d9c87d4
  • 0ac569e8995bdb23ea5c82dbd0d10f5fd29a8621 update graphqlplugin to v6.8.1
  • 3f69531829b9a76ccaeffb1585188afcb93b3b8f update graphqlplugin to v6.8.2
  • 144588eb61d8fba1a9fa3a1ac4f882fc15448713 update graphqlplugin to v6.8.4

... (truncated)

Commits
  • f7ff51a chore(conan): Replace a get() with an indexing operator
  • 802dfa8 refactor(conan): Port the remaining Jackson based code to KxS
  • 5dbe633 refactor(conan): Slightly simplify the code for obtaining the URL
  • af02a8c refactor(conan): Extract the variable hashValue
  • efed39f docs(pip): Refer to option constants instead of repeating their values
  • 22cd864 docs(pip): Correctly state the default Python version to analyze for
  • 86d6ff7 refactor(conan): Port parsing package info from Jackson to KxS
  • 3181191 refactor(conan): Inline a function
  • a942c7e refactor(conan): Remove a code redundancy
  • 5c6322a refactor(conan): Turn parseSourceArtifact() into an expression
  • Additional commits viewable in compare view

Updates org.ossreviewtoolkit.plugins.packagemanagers:maven-package-manager from 26.0.0 to 27.0.0

Release notes

Sourced from org.ossreviewtoolkit.plugins.packagemanagers:maven-package-manager's releases.

27.0.0

What's Changed

Breaking Changes 🛠

  • 192736fe5bdf0c15fcef4f471a0f05e64b92de78 refactor(model)!: Inline AdvisorRecord with AdvisorRun

Bug Fixes 🐞

  • 89fe68d4b0680eb704146d814fa62dbec27ee509 SpdxDocumentFile: Add created issues to the PackageReference
  • c8eb52a298e773f25a18ce843250253a09438a5d SpdxDocumentFile: Ensure to collect issues from external doc refs
  • d686957d8241027748a938225b8aa3dab0eb2e52 cyclonedx: Avoid a NPE when clearing extensibleTypes
  • 023dfb6e955f3d814f277b07575947b47221870b cyclonedx: Only set licenses at all if they are not empty
  • b0b1f7c1378e4b4302a834ee9b981c3ec92d76e9 downloader: Support Git URLs with '.git' in domain
  • fb1f601604d878f70f1648790a13fa6527387cb7 gradle: Ignore dependencySources configurations during resolution
  • 90226f2d8af8047aac44dc454acaabfd4d404a81 sbt: Filter out garbage from sbt projects command

New Features 🎉

  • 2d3847e7894303c3f1807910a31332b2f7b9b9eb analyzer: Add option to skip setup.py analysis of PIP dependencies
  • 57911fefdf03ae420c7deaefb1ce2860c8598188 helper-cli: Add a command to show insights into scan issues
  • b37ac5e47f4dbb61fdae1919faeda93748697b90 helper-cli: Allow to omit the version when listing packages
  • ed44b6ad644780a66283d024ada1b6561a6e6bdf model: Add a constant for an empty AdvisorRun

Build 🐘 & CI ⚙️

  • b3ae3d0a36760885feef19cc4f8c82fb8b299571 gradle: Add a "detektAll" convenience task
  • 67c4807fe39f6459b78501a45bf5de28834d4df6 gradle: Prepare for eventually using atlassian.io artifacts
  • 82396bd01c320f304685e0c4fe3a69852f9f162c github: Move Scorecard analysis to a separate workflow
  • 113a44d79582bcf286112fe2b10da57a194e40e7 github: Run OpenSSF Scorecard analysis
  • d881059537792f07df20703c5d78ed2b522a8012 renovate: Automatically pin GitHub action digests

Chores 🔧

  • 3e2eb12e0de3e913c0349d1a24e21cc9f2c7a04b cocoapods: Add a bit fault tolerance for PODS / DEPENDENCIES
  • 28c53b94e07cc8b6f441833cef68e17d66a29201 cocoapods: Fix-up an unnecessary mapNotNull
  • dfb014da28221e2323aecee01c8c2f397a6e0664 cocoapods: Generalize mapping IDs to packages
  • f7ff51afbe11d0716ca2dca1c5d58229cafae3bf conan: Replace a get() with an indexing operator
  • 4aad014c729dcc6ce13fdf6fcbb88c8eb82e3d1a cyclonedx: Remove an unneeded cast to Any
  • 262d9668c00b5c70949569a08f1eee758fc13cbd cyclonedx: Say for which file extension creation failed
  • e93de8a971a4f15aee2e6fe0da7b8a059be77e99 pub: Improve function names

Dependency Updates 🚀

  • 824cc38468e116c521b61873cb1a16b5dd755e57 pin dependencies
  • 25f07dbce41183fed6d5645a2ac6f793602c25a4 update dependency com.github.ajalt.mordant:mordant to v2.7.1
  • 6229972e503cba055cb2c560224cfd6c213fc355 update dependency gradle to v8.9
  • 0e47316ab6a9a52106e0259c43f39b854076c73c update dependency io.mockk:mockk to v1.13.12
  • 639a454b2b0472541b09c10eeef57496a22777d3 update docker/build-push-action digest to 1ca370b
  • 88084c1a04a12c4a3cde3ac515ec0b17536f76ca update docker/build-push-action digest to a254f8c
  • 2651da9dac14d760a8d278f416b69e31aa490280 update github/codeql-action digest to 4fa2a79
  • 0139c25f9c19388dce7e508a4030389030326f10 update gradle/actions digest to d9c87d4
  • 0ac569e8995bdb23ea5c82dbd0d10f5fd29a8621 update graphqlplugin to v6.8.1
  • 3f69531829b9a76ccaeffb1585188afcb93b3b8f update graphqlplugin to v6.8.2
  • 144588eb61d8fba1a9fa3a1ac4f882fc15448713 update graphqlplugin to v6.8.4

... (truncated)

Commits
  • f7ff51a chore(conan): Replace a get() with an indexing operator
  • 802dfa8 refactor(conan): Port the remaining Jackson based code to KxS
  • 5dbe633 refactor(conan): Slightly simplify the code for obtaining the URL
  • af02a8c refactor(conan): Extract the variable hashValue
  • efed39f docs(pip): Refer to option constants instead of repeating their values
  • 22cd864 docs(pip): Correctly state the default Python version to analyze for
  • 86d6ff7 refactor(conan): Port parsing package info from Jackson to KxS
  • 3181191 refactor(conan): Inline a function
  • a942c7e refactor(conan): Remove a code redundancy
  • 5c6322a refactor(conan): Turn parseSourceArtifact() into an expression
  • Additional commits viewable in compare view

Updates org.ossreviewtoolkit.plugins.packagemanagers:gradle-package-manager from 26.0.0 to 27.0.0

Release notes

Sourced from org.ossreviewtoolkit.plugins.packagemanagers:gradle-package-manager's releases.

27.0.0

What's Changed

Breaking Changes 🛠

  • 192736fe5bdf0c15fcef4f471a0f05e64b92de78 refactor(model)!: Inline AdvisorRecord with AdvisorRun

Bug Fixes 🐞

  • 89fe68d4b0680eb704146d814fa62dbec27ee509 SpdxDocumentFile: Add created issues to the PackageReference
  • c8eb52a298e773f25a18ce843250253a09438a5d SpdxDocumentFile: Ensure to collect issues from external doc refs
  • d686957d8241027748a938225b8aa3dab0eb2e52 cyclonedx: Avoid a NPE when clearing extensibleTypes
  • 023dfb6e955f3d814f277b07575947b47221870b cyclonedx: Only set licenses at all if they are not empty
  • b0b1f7c1378e4b4302a834ee9b981c3ec92d76e9 downloader: Support Git URLs with '.git' in domain
  • fb1f601604d878f70f1648790a13fa6527387cb7 gradle: Ignore dependencySources configurations during resolution
  • 90226f2d8af8047aac44dc454acaabfd4d404a81 sbt: Filter out garbage from sbt projects command

New Features 🎉

  • 2d3847e7894303c3f1807910a31332b2f7b9b9eb analyzer: Add option to skip setup.py analysis of PIP dependencies
  • 57911fefdf03ae420c7deaefb1ce2860c8598188 helper-cli: Add a command to show insights into scan issues
  • b37ac5e47f4dbb61fdae1919faeda93748697b90 helper-cli: Allow to omit the version when listing packages
  • ed44b6ad644780a66283d024ada1b6561a6e6bdf model: Add a constant for an empty AdvisorRun

Build 🐘 & CI ⚙️

  • b3ae3d0a36760885feef19cc4f8c82fb8b299571 gradle: Add a "detektAll" convenience task
  • 67c4807fe39f6459b78501a45bf5de28834d4df6 gradle: Prepare for eventually using atlassian.io artifacts
  • 82396bd01c320f304685e0c4fe3a69852f9f162c github: Move Scorecard analysis to a separate workflow
  • 113a44d79582bcf286112fe2b10da57a194e40e7 github: Run OpenSSF Scorecard analysis
  • d881059537792f07df20703c5d78ed2b522a8012 renovate: Automatically pin GitHub action digests

Chores 🔧

  • 3e2eb12e0de3e913c0349d1a24e21cc9f2c7a04b cocoapods: Add a bit fault tolerance for PODS / DEPENDENCIES
  • 28c53b94e07cc8b6f441833cef68e17d66a29201 cocoapods: Fix-up an unnecessary mapNotNull
  • dfb014da28221e2323aecee01c8c2f397a6e0664 cocoapods: Generalize mapping IDs to packages
  • f7ff51afbe11d0716ca2dca1c5d58229cafae3bf conan: Replace a get() with an indexing operator
  • 4aad014c729dcc6ce13fdf6fcbb88c8eb82e3d1a cyclonedx: Remove an unneeded cast to Any
  • 262d9668c00b5c70949569a08f1eee758fc13cbd cyclonedx: Say for which file extension creation failed
  • e93de8a971a4f15aee2e6fe0da7b8a059be77e99 pub: Improve function names

Dependency Updates 🚀

  • 824cc38468e116c521b61873cb1a16b5dd755e57 pin dependencies
  • 25f07dbce41183fed6d5645a2ac6f793602c25a4 update dependency com.github.ajalt.mordant:mordant to v2.7.1
  • 6229972e503cba055cb2c560224cfd6c213fc355 update dependency gradle to v8.9
  • 0e47316ab6a9a52106e0259c43f39b854076c73c update dependency io.mockk:mockk to v1.13.12
  • 639a454b2b0472541b09c10eeef57496a22777d3 update docker/build-push-action digest to 1ca370b
  • 88084c1a04a12c4a3cde3ac515ec0b17536f76ca update docker/build-push-action digest to a254f8c
  • 2651da9dac14d760a8d278f416b69e31aa490280 update github/codeql-action digest to 4fa2a79
  • 0139c25f9c19388dce7e508a4030389030326f10 update gradle/actions digest to d9c87d4
  • 0ac569e8995bdb23ea5c82dbd0d10f5fd29a8621 update graphqlplugin to v6.8.1
  • 3f69531829b9a76ccaeffb1585188afcb93b3b8f update graphqlplugin to v6.8.2
  • 144588eb61d8fba1a9fa3a1ac4f882fc15448713 update graphqlplugin to v6.8.4

... (truncated)

Commits
  • f7ff51a chore(conan): Replace a get() with an indexing operator
  • 802dfa8 refactor(conan): Port the remaining Jackson based code to KxS
  • 5dbe633 refactor(conan): Slightly simplify the code for obtaining the URL
  • af02a8c refactor(conan): Extract the variable hashValue
  • efed39f docs(pip): Refer to option constants instead of repeating their values
  • 22cd864 docs(pip): Correctly state the default Python version to analyze for
  • 86d6ff7 refactor(conan): Port parsing package info from Jackson to KxS
  • 3181191 refactor(conan): Inline a function
  • a942c7e refactor(conan): Remove a code redundancy
  • 5c6322a refactor(conan): Turn parseSourceArtifact() into an expression
  • Additional commits viewable in compare view

Updates org.ossreviewtoolkit.plugins.packagemanagers:gradle-inspector from 26.0.0 to 27.0.0

Release notes

Sourced from org.ossreviewtoolkit.plugins.packagemanagers:gradle-inspector's releases.

27.0.0

What's Changed

Breaking Changes 🛠

  • 192736fe5bdf0c15fcef4f471a0f05e64b92de78 refactor(model)!: Inline AdvisorRecord with AdvisorRun

Bug Fixes 🐞

  • 89fe68d4b0680eb704146d814fa62dbec27ee509 SpdxDocumentFile: Add created issues to the PackageReference
  • c8eb52a298e773f25a18ce843250253a09438a5d SpdxDocumentFile: Ensure to collect issues from external doc refs
  • d686957d8241027748a938225b8aa3dab0eb2e52 cyclonedx: Avoid a NPE when clearing extensibleTypes
  • 023dfb6e955f3d814f277b07575947b47221870b cyclonedx: Only set licenses at all if they are not empty
  • b0b1f7c1378e4b4302a834ee9b981c3ec92d76e9 downloader: Support Git URLs with '.git' in domain
  • fb1f601604d878f70f1648790a13fa6527387cb7 gradle: Ignore dependencySources configurations during resolution
  • 90226f2d8af8047aac44dc454acaabfd4d404a81 sbt: Filter out garbage from sbt projects command

New Features 🎉

  • 2d3847e7894303c3f1807910a31332b2f7b9b9eb analyzer: Add option to skip setup.py analysis of PIP dependencies
  • 57911fefdf03ae420c7deaefb1ce2860c8598188 helper-cli: Add a command to show insights into scan issues
  • b37ac5e47f4dbb61fdae1919faeda93748697b90 helper-cli: Allow to omit the version when listing packages
  • ed44b6ad644780a66283d024ada1b6561a6e6bdf model: Add a constant for an empty AdvisorRun

Build 🐘 & CI ⚙️

  • b3ae3d0a36760885feef19cc4f8c82fb8b299571 gradle: Add a "detektAll" convenience task
  • 67c4807fe39f6459b78501a45bf5de28834d4df6 gradle: Prepare for eventually using atlassian.io artifacts
  • 82396bd01c320f304685e0c4fe3a69852f9f162c github: Move Scorecard analysis to a separate workflow
  • 113a44d79582bcf286112fe2b10da57a194e40e7 github: Run OpenSSF Scorecard analysis
  • d881059537792f07df20703c5d78ed2b522a8012 renovate: Automatically pin GitHub action digests

Chores 🔧

  • 3e2eb12e0de3e913c0349d1a24e21cc9f2c7a04b cocoapods: Add a bit fault tolerance for PODS / DEPENDENCIES
  • 28c53b94e07cc8b6f441833cef68e17d66a29201 cocoapods: Fix-up an unnecessary mapNotNull
  • dfb014da28221e2323aecee01c8c2f397a6e0664 cocoapods: Generalize mapping IDs to packages
  • f7ff51afbe11d0716ca2dca1c5d58229cafae3bf conan: Replace a get() with an indexing operator
  • 4aad014c729dcc6ce13fdf6fcbb88c8eb82e3d1a cyclonedx: Remove an unneeded cast to Any
  • 262d9668c00b5c70949569a08f1eee758fc13cbd cyclonedx: Say for which file extension creation failed
  • e93de8a971a4f15aee2e6fe0da7b8a059be77e99 pub: Improve function names

Dependency Updates 🚀

  • 824cc38468e116c521b61873cb1a16b5dd755e57 pin dependencies
  • 25f07dbce41183fed6d5645a2ac6f793602c25a4 update dependency com.github.ajalt.mordant:mordant to v2.7.1
  • 6229972e503cba055cb2c560224cfd6c213fc355 update dependency gradle to v8.9
  • 0e47316ab6a9a52106e0259c43f39b854076c73c update dependency io.mockk:mockk to v1.13.12
  • 639a454b2b0472541b09c10eeef57496a22777d3 update docker/build-push-action digest to 1ca370b
  • 88084c1a04a12c4a3cde3ac515ec0b17536f76ca update docker/build-push-action digest to a254f8c
  • 2651da9dac14d760a8d278f416b69e31aa490280 update github/codeql-action digest to 4fa2a79
  • 0139c25f9c19388dce7e508a4030389030326f10 update gradle/actions digest to d9c87d4
  • 0ac569e8995bdb23ea5c82dbd0d10f5fd29a8621 update graphqlplugin to v6.8.1
  • 3f69531829b9a76ccaeffb1585188afcb93b3b8f update graphqlplugin to v6.8.2
  • 144588eb61d8fba1a9fa3a1ac4f882fc15448713 update graphqlplugin to v6.8.4

... (truncated)

Commits
  • f7ff51a chore(conan): Replace a get() with an indexing operator
  • 802dfa8 refactor(conan): Port the remaining Jackson based code to KxS
  • 5dbe633 refactor(conan): Slightly simplify the code for obtaining the URL
  • af02a8c refactor(conan): Extract the variable hashValue
  • efed39f docs(pip): Refer to option constants instead of repeating their values
  • 22cd864 docs(pip): Correctly state the default Python version to analyze for
  • 86d6ff7 refactor(conan): Port parsing package info from Jackson to KxS
  • 3181191 refactor(conan): Inline a function
  • a942c7e refactor(conan): Remove a code redundancy
  • 5c6322a refactor(conan): Turn parseSourceArtifact() into an expression
  • Additional commits viewable in compare view

Updates org.ossreviewtoolkit.plugins.packagemanagers:nuget-package-manager from 26.0.0 to 27.0.0

Release notes

Sourced from org.ossreviewtoolkit.plugins.packagemanagers:nuget-package-manager's releases.

27.0.0

What's Changed

Breaking Changes 🛠

  • 192736fe5bdf0c15fcef4f471a0f05e64b92de78 refactor(model)!: Inline AdvisorRecord with AdvisorRun

Bug Fixes 🐞

  • 89fe68d4b0680eb704146d814fa62dbec27ee509 SpdxDocumentFile: Add created issues to the PackageReference
  • c8eb52a298e773f25a18ce843250253a09438a5d SpdxDocumentFile: Ensure to collect issues from external doc refs
  • d686957d8241027748a938225b8aa3dab0eb2e52 cyclonedx: Avoid a NPE when clearing extensibleTypes
  • 023dfb6e955f3d814f277b07575947b47221870b cyclonedx: Only set licenses at all if they are not empty
  • b0b1f7c1378e4b4302a834ee9b981c3ec92d76e9 downloader: Support Git URLs with '.git' in domain
  • fb1f601604d878f70f1648790a13fa6527387cb7 gradle: Ignore dependencySources configurations during resolution
  • 90226f2d8af8047aac44dc454acaabfd4d404a81 sbt: Filter out garbage from sbt projects command

New Features 🎉

  • 2d3847e7894303c3f1807910a31332b2f7b9b9eb analyzer: Add option to skip setup.py analysis of PIP dependencies
  • 57911fefdf03ae420c7deae...

    Description has been truncated

@dependabot
Bump ortVersion from 26.0.0 to 27.0.0
ce14596 
Bumps `ortVersion` from 26.0.0 to 27.0.0.

Updates `org.ossreviewtoolkit:analyzer` from 26.0.0 to 27.0.0
- [Release notes](https://github.com/oss-review-toolkit/ort/releases)
- [Commits](oss-review-toolkit/ort@26.0.0...27.0.0)

Updates `org.ossreviewtoolkit:model` from 26.0.0 to 27.0.0
- [Release notes](https://github.com/oss-review-toolkit/ort/releases)
- [Commits](oss-review-toolkit/ort@26.0.0...27.0.0)

Updates `org.ossreviewtoolkit:reporter` from 26.0.0 to 27.0.0
- [Release notes](https://github.com/oss-review-toolkit/ort/releases)
- [Commits](oss-review-toolkit/ort@26.0.0...27.0.0)

Updates `org.ossreviewtoolkit.plugins.reporters:cyclonedx-reporter` from 26.0.0 to 27.0.0
- [Release notes](https://github.com/oss-review-toolkit/ort/releases)
- [Commits](oss-review-toolkit/ort@26.0.0...27.0.0)

Updates `org.ossreviewtoolkit.plugins.packagecurationproviders:package-curation-provider-api` from 26.0.0 to 27.0.0
- [Release notes](https://github.com/oss-review-toolkit/ort/releases)
- [Commits](oss-review-toolkit/ort@26.0.0...27.0.0)

Updates `org.ossreviewtoolkit.plugins.packageconfigurationproviders:package-configuration-provider-api` from 26.0.0 to 27.0.0
- [Release notes](https://github.com/oss-review-toolkit/ort/releases)
- [Commits](oss-review-toolkit/ort@26.0.0...27.0.0)

Updates `org.ossreviewtoolkit.plugins.packageconfigurationproviders:ort-config-package-configuration-provider` from 26.0.0 to 27.0.0
- [Release notes](https://github.com/oss-review-toolkit/ort/releases)
- [Commits](oss-review-toolkit/ort@26.0.0...27.0.0)

Updates `org.ossreviewtoolkit.plugins.packagemanagers:maven-package-manager` from 26.0.0 to 27.0.0
- [Release notes](https://github.com/oss-review-toolkit/ort/releases)
- [Commits](oss-review-toolkit/ort@26.0.0...27.0.0)

Updates `org.ossreviewtoolkit.plugins.packagemanagers:gradle-package-manager` from 26.0.0 to 27.0.0
- [Release notes](https://github.com/oss-review-toolkit/ort/releases)
- [Commits](oss-review-toolkit/ort@26.0.0...27.0.0)

Updates `org.ossreviewtoolkit.plugins.packagemanagers:gradle-inspector` from 26.0.0 to 27.0.0
- [Release notes](https://github.com/oss-review-toolkit/ort/releases)
- [Commits](oss-review-toolkit/ort@26.0.0...27.0.0)

Updates `org.ossreviewtoolkit.plugins.packagemanagers:nuget-package-manager` from 26.0.0 to 27.0.0
- [Release notes](https://github.com/oss-review-toolkit/ort/releases)
- [Commits](oss-review-toolkit/ort@26.0.0...27.0.0)

Updates `org.ossreviewtoolkit.plugins.packagemanagers:cargo-package-manager` from 26.0.0 to 27.0.0
- [Release notes](https://github.com/oss-review-toolkit/ort/releases)
- [Commits](oss-review-toolkit/ort@26.0.0...27.0.0)

Updates `org.ossreviewtoolkit.plugins.packagemanagers:node-package-manager` from 26.0.0 to 27.0.0
- [Release notes](https://github.com/oss-review-toolkit/ort/releases)
- [Commits](oss-review-toolkit/ort@26.0.0...27.0.0)

Updates `org.ossreviewtoolkit.plugins.packagemanagers:go-package-manager` from 26.0.0 to 27.0.0
- [Release notes](https://github.com/oss-review-toolkit/ort/releases)
- [Commits](oss-review-toolkit/ort@26.0.0...27.0.0)

Updates `org.ossreviewtoolkit.plugins.packagecurationproviders:ort-config-package-curation-provider` from 26.0.0 to 27.0.0
- [Release notes](https://github.com/oss-review-toolkit/ort/releases)
- [Commits](oss-review-toolkit/ort@26.0.0...27.0.0)

Updates `org.ossreviewtoolkit.plugins.packagecurationproviders:clearly-defined-package-curation-provider` from 26.0.0 to 27.0.0
- [Release notes](https://github.com/oss-review-toolkit/ort/releases)
- [Commits](oss-review-toolkit/ort@26.0.0...27.0.0)

Updates `org.ossreviewtoolkit.plugins.packagemanagers:python-package-manager` from 26.0.0 to 27.0.0
- [Release notes](https://github.com/oss-review-toolkit/ort/releases)
- [Commits](oss-review-toolkit/ort@26.0.0...27.0.0)

Updates `org.ossreviewtoolkit.plugins.versioncontrolsystems:git-version-control-system` from 26.0.0 to 27.0.0
- [Release notes](https://github.com/oss-review-toolkit/ort/releases)
- [Commits](oss-review-toolkit/ort@26.0.0...27.0.0)

Updates `org.ossreviewtoolkit.plugins.packagecurationproviders:file-package-curation-provider` from 26.0.0 to 27.0.0
- [Release notes](https://github.com/oss-review-toolkit/ort/releases)
- [Commits](oss-review-toolkit/ort@26.0.0...27.0.0)

Updates `org.ossreviewtoolkit.utils:common-utils` from 26.0.0 to 27.0.0
- [Release notes](https://github.com/oss-review-toolkit/ort/releases)
- [Commits](oss-review-toolkit/ort@26.0.0...27.0.0)

Updates `org.ossreviewtoolkit.utils:ort-utils` from 26.0.0 to 27.0.0
- [Release notes](https://github.com/oss-review-toolkit/ort/releases)
- [Commits](oss-review-toolkit/ort@26.0.0...27.0.0)

Updates `org.ossreviewtoolkit.plugins.packagemanagers:gradle-model` from 26.0.0 to 27.0.0
- [Release notes](https://github.com/oss-review-toolkit/ort/releases)
- [Commits](oss-review-toolkit/ort@26.0.0...27.0.0)

Updates `org.ossreviewtoolkit.plugins.packageconfigurationproviders:dir-package-configuration-provider` from 26.0.0 to 27.0.0
- [Release notes](https://github.com/oss-review-toolkit/ort/releases)
- [Commits](oss-review-toolkit/ort@26.0.0...27.0.0)

---
updated-dependencies:
- dependency-name: org.ossreviewtoolkit:analyzer
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: org.ossreviewtoolkit:model
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: org.ossreviewtoolkit:reporter
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: org.ossreviewtoolkit.plugins.reporters:cyclonedx-reporter
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: org.ossreviewtoolkit.plugins.packagecurationproviders:package-curation-provider-api
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: org.ossreviewtoolkit.plugins.packageconfigurationproviders:package-configuration-provider-api
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: org.ossreviewtoolkit.plugins.packageconfigurationproviders:ort-config-package-configuration-provider
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: org.ossreviewtoolkit.plugins.packagemanagers:maven-package-manager
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: org.ossreviewtoolkit.plugins.packagemanagers:gradle-package-manager
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: org.ossreviewtoolkit.plugins.packagemanagers:gradle-inspector
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: org.ossreviewtoolkit.plugins.packagemanagers:nuget-package-manager
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: org.ossreviewtoolkit.plugins.packagemanagers:cargo-package-manager
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: org.ossreviewtoolkit.plugins.packagemanagers:node-package-manager
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: org.ossreviewtoolkit.plugins.packagemanagers:go-package-manager
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: org.ossreviewtoolkit.plugins.packagecurationproviders:ort-config-package-curation-provider
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: org.ossreviewtoolkit.plugins.packagecurationproviders:clearly-defined-package-curation-provider
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: org.ossreviewtoolkit.plugins.packagemanagers:python-package-manager
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: org.ossreviewtoolkit.plugins.versioncontrolsystems:git-version-control-system
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: org.ossreviewtoolkit.plugins.packagecurationproviders:file-package-curation-provider
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: org.ossreviewtoolkit.utils:common-utils
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: org.ossreviewtoolkit.utils:ort-utils
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: org.ossreviewtoolkit.plugins.packagemanagers:gradle-model
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: org.ossreviewtoolkit.plugins.packageconfigurationproviders:dir-package-configuration-provider
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Jul 18, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
dependencies Pull requests that update a dependency file java Pull requests that update Java code
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
0 participants