deps: update ort to v46 (major)

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
org.ossreviewtoolkit:reporter (source)	44.0.0 -> 46.0.0
org.ossreviewtoolkit.plugins:package-configuration-providers (source)	44.0.0 -> 46.0.0
org.ossreviewtoolkit:model (source)	44.0.0 -> 46.0.0
org.ossreviewtoolkit:detekt-rules (source)	44.0.0 -> 46.0.0

---

Release Notes

oss-review-toolkit/ort (org.ossreviewtoolkit:reporter)

v46.0.0

Compare Source

What's Changed

🛠 Breaking Changes

• 4363881 chore(common-utils)!: Remove zipWithCollection() for collections
• e37bf19 chore(common-utils)!: Remove zipWithDefault()
• 716e3b8 feat(fossid)!: Remove support for custom naming variables
• 87b4c04 refactor(commands)!: Migrate VCS plugins to new plugin API
• 5e0f716 refactor(common-utils)!: Rename zipWithCollection() for sets
• 3f2bf92 refactor(common-utils)!: Simplify the semantics of zip() for maps
• 3ea4ec5 refactor(fossid)!: Define URL mappings in a single option
• 43c6e36 refactor(fossid)!: Rename projectName to repositoryName
• e98c703 refactor(fossid)!: Replace namingProjectPattern with projectName
• fa6e2be refactor(vcs)!: Directly store the VCS type as a VcsType

🐞 Bug Fixes

• f57751d VersionControlSystem: Also take configs for forDirectory()
• 0030739 cargo: Add lockfile version 4 to allow-list
• 3498798 common-utils: Make zip work as expected for sorted maps
• f827885 model: Make withPackageManagerOption() case-insensitive
• fdc2be7 python: Use the correct projectType for Pipenv and Poetry
• 7900f0f Correctly mark VersionControlSystem plugins as not configurable yet
• 482ffc8 Remove VersionControlSystemConfiguration

🎉 New Features

• 7c84264 PluginManager: Allow to create plugins with default configuration
• bb301a1 cargo: Handle virtual workspaces
• a5abd0a fossid: Add projectName as a built-in variable
• 6243b60 model: Allow duplicate PackageManagerConfigurations and merge them
• e50fcce vcs: Add Git-specific configuration options for submodule handling

✅ Tests

• c212fc0 VersionControlSystemTest: Remove tests for isAvailable()
• 6bd50bc dfd0292 7241bd8 05ae5d4 8f8de6a 05d94a6 ba0e4ed osv: Update expected results

📖 Documentation

• 373f997 OrtPlugin: Be more specific about the plugin ID derivation logic
• 9d1a14d README: Update the installation from binaries section
• a7238a1 VersionControlSystemFactory: Rewrap comments for compactness
• b85af8b black-duck: Add a missing "the"
• 84e29b1 fossid: Fix issues in FossIdNamingProvider docs
• 7d79190 fossid: Improve docs of normalizeBranchName
• f032c13 fossid: Improve docs of the built-in branch naming variable
• bb610d0 npm: Document the ModuleInfo class
• e8c0b8b sbt: Move a comment before the correct line
• 35b668c website: Fix color for links in banner
• 749d6ff website: Use <Link> instead of <a>
• 1d9f415 Add a missing whitespace to all "BlackDuck" occurences
• c40a759 Extend the Copyright year to 2025 in Markdown files

🔧 Chores

• e9daee1 AnalyzerConfigurationTest: Improve test names
• 355b657 AnalyzerConfigurationTest: Start with the simpler test
• d3901da BlackDuck: Remove the default value of the plugin id
• e86c8be BlackDuck: The display name should spell "Back Duck" with space
• a032f27 EvaluatedModelReporter: Remove unused properties
• ccd0dac Git: Import JGit's Git as JGit for clarity
• d2e2732 NpmDependencyHandler: Make a non-null assumption explicit
• 5238f3e PnpmDependencyHandler: Make use of Dependency.workingDir
• ce80152 YarnDependencyHandler: Rename a variable for clarity
• 1b316ee fossid: Improve error message for too long scan code
• c9de4c6 gradle-inspector: Rename the handler's constructor parameter
• 6cb7dd8 model: Rename other merge parameters
• 842d3c9 node: Introduce a typealias for getting package details
• 402d2ee node: Make use of the definition file constant
• 9ea70d9 node: Remove the workingDir parameter for getting package info
• 95a192f node: Rename the typealias to get package details
• ab91b6a package-curation-providers: Align the display names
• 9aca6b0 version-control-systems: Omit null default arguments
• eb7b571 Do not silently map unparsable booleans to false
• 22a13c8 Do not silently map unparsable booleans to true
• 1858cb7 Prefer the char-version of split() for single chars
• 85defa3 Prefer the infix version of shouldBeInstanceOf where possible
• ec69780 Remove unneeded default java.lang imports

🚀 Dependency Updates

• a7078fe docker: Upgrade Rust to the latest version 1.84
• 5033ab1 update com.autonomousapps:dependency-analysis-gradle-plugin to v2.7.0
• 768060d update com.github.jmongard.git-semver-plugin to v0.14.0
• f7ecd6e update com.networknt:json-schema-validator to v1.5.5
• 5cd9a00 update docker/build-push-action digest to 67a2d40
• 75cf08a update docker/build-push-action digest to b32b51a
• e20304b update exposed to v0.58.0
• ab0161e update github/codeql-action digest to b6a472f
• 1b63f86 update org.jetbrains.kotlinx:kotlinx-html-jvm to v0.12.0
• f373751 update org.metaeffekt.core:ae-security to v0.134.0
• 2eaaaa1 update org.postgresql:postgresql to v42.7.5
• 10583c3 update wagoid/commitlint-github-action digest to b948419

🚜 Refactorings

• 5d8fb72 AnalyzerConfigurationTest: Inline expected result variables
• a967f9d NpmDependencyHandler: Inline the only use of readPackageJson
• 5c67bcd fossid: Add namingScanPattern to FossIdConfig
• 35095c4 fossid: Extract a regular expression to a constant
• 1a9be88 fossid: Extract logic to build default naming pattern
• c21cb64 fossid: Inline scan code generation functions
• 29ef411 fossid: Make convertGitUrlToProjectName internal
• a1b8c3a fossid: Remove #branch inside of normalizeBranchName
• 2931b4c fossid: Rename a function for clarity
• 9859afc gradle: Make handlers take the projectType explicitly
• 226d277 node: Only pass required information to dependency handlers
• 61a3a06 scancode: Always add all built-in variables
• fcced14 vcs: Decouple the base class from CommandLineTool
• debbc8d vcs: Make VCS plugins configurable

💡 Other Changes

• 0f6dad4 style(version-control-systems): Define factory classes at the top

v45.0.0

Compare Source

What's Changed

🛠 Breaking Changes

• f9c7220 refactor(model)!: Simplify the CuratedPackage and its creation

🐞 Bug Fixes

• 59702b2 evaluator: Add remaining configuration files to console output
• c57a94c model: Apply author to copyright mapping also for concluded licenses
• 958c08c scancode: Ensure to find license texts in the Docker image
• d03afe6 website: Move a link out of the tagline variable

🎉 New Features

• ef95789 ReporterCommand: Use console colors for the result summary
• 8c2d67a advisor: Add BlackDuck as security vulnerability provider
• f0dd53a cocoapods: Add custom error message
• 98ee1ee cocoapods: Add support for Podspecs from external sources
• de04788 cocoapods: Support tag and branch names in checkout options
• d3ee492 helper-cli: Extend the PackageList by labels
• 79f7805 model: Add the property Package.labels
• 9465fba model: Allow setting package labels via curations

✅ Tests

• a83e03e model: Make use of Package.EMPTY to make the code more compact
• 0e4eb80 model: Verify that authors are added to concluded license
• 6b4e302 7a49056 60edfdf osv: Update expected results
• 17fd3c3 18031e3 90cd058 bf65b8c osv: Update expected results
• bbbb900 17bb877 pub: Update expected results
• e70f36a python: Update expected results

🐘 Build & ⚙️ CI

• c7d899a notifier: Make the Jakarta REST API dependency a constraint

📖 Documentation

• ca43fab cocoapods: Document all Lockfile-related properties
• 31c718a examples: Add a curation which sets a package label
• ab0256c model: Illustrate how to configure the BlackDuck advisor
• 1ca8d2a model: Trivially end comment sentences with dots
• e1a32cc website: Add a curation which sets a package label
• e7b8a3a website: Add a section for the new BlackDuck advisor
• 85fc02f website: Further fix-up the configuration entries
• 547c295 website: Link to the server and make clear these are CLI tools
• 1d6fcf5 website: Re-align the advisor configuration examples
• 11fbb12 website: Sort the advisor sections alphabetically
• c07420d Clarify that repo config is specific to a "distribution"

🔧 Chores

• 666120a GradleDependencyHandler: Use a more specific variable name
• 79ef703 SpdxResolvedDocument: Use a more specific variable name
• ba1d093 bundler: Use StringFormat's decodeFromString
• 6c7b108 cargo: Be explicit about the defintion file to query metadata for
• 37ec0b1 cargo: Give a variable a more fitting name
• b74e81c cocoapods: Remove the workingDir parameter from getPodspec()
• 2663df0 cocoapods: Reorder Lockfile properties to match file order
• dbc5d4f cocoapods: Simplify error handling in getPodspec()
• 5aef26b gradle: Drop a trailing slash for consistency
• 35dde45 model: Rename package curation apply variables for clarity
• d5ccb50 model: Serialize OrtResult.labels in alphabetical order

🚀 Dependency Updates

• 8ebd8c0 docker: Upgrade Node.js to the latest LTS version 22.13.0
• 1ffe4df docker: Upgrade Yarn 1 to the latest version 1.22.22
• 4227d86 docker: Upgrade to the latest ScanCode patch version 32.3.1
• 8527570 web-app-template: Sync the Node / Yarn versions with Docker
• f0b825b update ch.qos.logback:logback-classic to v1.5.14
• 96139ed update ch.qos.logback:logback-classic to v1.5.15
• 2ad4db4 update ch.qos.logback:logback-classic to v1.5.16
• 8b3ff75 update com.charleskorn.kaml:kaml to v0.67.0
• af19524 update dependency gradle to v8.12
• fa99144 update docusaurus monorepo to v3.7.0
• 3523d00 update github/codeql-action digest to 48ab28a
• c3e6c58 update io.mockk:mockk to v1.13.14
• 9370d95 update jetbrains/qodana-action action to v2024.3.4
• f70acdc update ks3 to v1
• 227ca61 update org.cyclonedx:cyclonedx-core-java to v10.1.0
• 7c8d867 update org.freemarker:freemarker to v2.3.34
• f9c4d3e update org.jetbrains.kotlinx:kotlinx-coroutines-core to v1.10.0
• 4cf87b5 update org.jetbrains.kotlinx:kotlinx-coroutines-core to v1.10.1
• 77b0526 update org.jetbrains.kotlinx:kotlinx-serialization-core to v1.8.0
• 1558a59 update org.metaeffekt.core:ae-security to v0.133.0
• fedb94b update org.semver4j:semver4j to v5.5.0
• 2df03a1 update software.amazon.awssdk:s3 to v2.29.39
• d665978 update software.amazon.awssdk:s3 to v2.29.43
• 9b481ba update software.amazon.awssdk:s3 to v2.29.45

🚜 Refactorings

• 4a31d54 MavenDependencyHandler: Make support internal
• dab7a88 cocoapods: Correct the type of a Pod's direct dependencies
• 31153a7 cocoapods: Migrate to the dependency graph API
• 8174eb6 cocoapods: Simplify caching of Podspecs
• 40c9d15 maven: Inline an identifier() extension function
• 7d65f74 maven: Split the handler's managerName property into two
• cbeabfc maven: Use regular AnalyzerConfiguration to set sbtMode
• 4cae987 model: Turn `getDeclaredLicenseMapping()´ into an extension
• 14b2d68 reporter: Extract function for resolving copyrights

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.