19.0.0

What's Changed

Breaking Changes 🛠

• 85b6df4 refactor(scanner)!: Inline a constant
• 70b1b86 refactor(scanner)!: Merge read functions of package based storage reader
• 7168c9f refactor(scanner)!: Merge read functions of provenance based storage reader
• 9044c4c refactor(scanner)!: Move ScanResultsStorage to storage package
• f7dd719 refactor(scanner)!: Remove unused function from ScanResultsStorage
• 160312a refactor(scanner)!: Rename ScanResultsStorage
• 20df885 refactor(scanner)!: Rename the package based storages

Bug Fixes 🐞

• 0301583 fossid-webapp: Align license mapping for snippets
• e2c09b2 gradle: Add a dedicated work-around for a Gradle 8.5 bug
• 0905a90 gradle: Only register a ProgressListener in debug log mode
• a9a064c gradle-inspector: Use ORT's fixed-up user home directory
• 986c762 gradle-model: Ensure compatibility by lowering the Java target
• 568465f gradle-plugin: Add a work-around for a regression in Gradle 8.2
• 4bf2ada Make the logger implementation available to test-utils consumers

New Features 🎉

• 6279ba7 cli: Use the resolved resolutions in NotifierCommand
• 829dad7 downloader: Adhere to Package.sourceCodeOrigins
• 16ee7fd flutter: Upgrade flutter version to 3.19.3
• 118af8a fossid-webapp: Add license findings from snippet choice
• 18b456d fossid-webapp: Retain snippet choice state in FossID
• cadf56a model: Add the property Package.sourceCodeOrigins
• bf12184 model: Allow to set sourceCodeOrigins via package curations
• 87f5d32 scanner: Adhere to Package.sourceCodeOrigins
• 786d3a6 swiftpm: Support lockfile format version 3

Build 🐘 & CI ⚙️

• 494a324 GitHub: Do not set up a specific version of Java anymore
• 04e60c6 GitHub: Reactivate unified test result diffs
• d7af736 Gradle: Switch to the official KxS converter for Retrofit

Chores 🔧

• fe71099 fossid-webapp: Extract license mapping code to a separate function
• e569df9 fossid-webapp: Move createMarkAsIdentifiedFile to TestUtils
• 199cc9e scanner: Remove obsolete docs

Dependency Updates 🚀

• 409ddcc spdx-utils: Re-import the SPDX 3.23 list
• e16b6f9 Upgrade the ks3 library to version 0.6.0
• da8bd03 update dependency com.networknt:json-schema-validator to v1.4.0
• b84dcc4 update dependency org.asciidoctor:asciidoctorj-pdf to v2.3.15
• 487c30c update dependency org.jetbrains.gradle.plugin.idea-ext to v1.1.8
• fc5fd10 update dependency org.postgresql:postgresql to v42.7.3
• 8b00730 update dependency org.springframework:spring-core to v5.3.33
• dbbaac8 update retrofit to v2.10.0

Documentation 📖

• f1b3d58 common-utils: Update the link to AntPathMatcher
• 30849b5 examples: Add an example for setting sourceCodeOrigins
• 1229292 gradle: Fix a grammar mistake
• 2fefbc1 model: Mention constraints for sourceCodeOrigins property
• 97ca2ff model: Remove some double dot
• 38f9dde node: Add a missing quote
• ac9e019 scanner: Fix punctuation in ScannerMatcher docs
• f8b76d7 swiftpm: Add links to the data model of the lockfile
• 433778b website: Explain the new sourceCodeOrigins property

Performance Enhancements ⚡

• f3f5366 Disable Kotest's classpath scanning for faster test startup

Refactorings 🚜

• d2583ac gitlab-reporter: Use Ks3 serializers
• e68a7c1 go: Drop an unnecessary data mapping
• 5b0ede1 go: Drop an unnecessary log warning
• c74e1eb go: Factor out parseGoDepLockfile()
• e536dec model: Extract a function to check source code origins
• e89a499 package-managers: Align on Lockfile instead of LockFile
• 1ddb89b package-managers: Align on lowercase lockfile in var names
• 3c83d5f scanner: Rename sourceCodeOriginsPriority
• 6c6ddbf Align on wording "lockfile" as a single word

Tests ✅

• 3c74aa1 scanner: Rename the abstract storage test classes

Other Changes 💡

• 0ddcfe4 style(gradle-plugin): Reformat code fluently to reduce indentation