85.0.0

What's Changed

🛠 Breaking Changes

• b9398f8 refactor(oss-index)!: Do not require a username with a Sonatype Guide PAT

🐞 Bug Fixes

• 869b055 cyclonedx: Drop external references for project licenses
• 44bb5a2 vcs: Checkout .ort.env.yml when doing sparse checkouts

🎉 New Features

• 81e7deb evaluator: Allow getting the effective license in a package rule
• 5f6b8b4 spdx: Support Zstandard-compressed JSON files

✅ Tests

• eb6bd09 cyclonedx: Improve the wording related to the singleBom option
• 237bc63 cyclonedx: Re-format the JSON expected result files

🐘 Build & ⚙️ CI

• 0a0b548 qodana: Pin to the previous version

📖 Documentation

• 5fc855f cyclonedx: Make a KDoc more compact

🔧 Chores

• 36e25ba cyclonedx: Inline the projects variable
• e7e2971 cyclonedx: Move a function to the top level
• 66adb55 cyclonedx: Move variables a bit closer to their use
• ea4889a c14edfd cyclonedx: Setup the entire Bom inside of the apply block
• 6def433 cyclonedx: Turn getSingleBomMetadataComponent() into a member
• 833e070 oss-index: Update OSS Index links to Sonatype Guide

🚀 Dependency Updates

• 822ce35 Update dependency-analysis-gradle-plugin to v3.10.0
• 7410bd7 update aws-java-sdk-v2 monorepo to v2.43.0
• c60ef5a update aws-java-sdk-v2 monorepo to v2.43.1
• 595a194 update com.fasterxml.jackson:jackson-bom to v2.21.3
• 2dc4ab9 update gradle to v9.5.0
• d0fbb80 update jetbrains/qodana-action action to v2026
• 251d8fa update org.postgresql:postgresql to v42.7.11
• 6336f09 update react monorepo to v19.2.5

🚜 Refactorings

• 614d88a cyclonedx: Avoid accessing packages in else by inlining it
• 923acfe cyclonedx: Factor out CycloneDxModelMapper
• 1a8b894 cyclonedx: Factor out createBomMetadata()
• 55eb31f cyclonedx: Factor out createProjectBom()
• 2d5ba28 cyclonedx: Factor out createSingleBom()
• 45cce20 cyclonedx: Move model mapping to the dedicated file
• 71479a8 cyclonedx: Move remaining Bom extensions to the reporter