Update dependency org.ossreviewtoolkit:analyzer to v91.2.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
org.ossreviewtoolkit:analyzer (source)	91.1.0 → 91.2.0

---

Release Notes

oss-review-toolkit/ort (org.ossreviewtoolkit:analyzer)

v91.2.0

Compare Source

What's Changed

🐞 Bug Fixes

• 63b4d40 Python: Prevent generation of duplicate identifiers
• ab88afd fossid: Fix scan link in pending identification issue message
• 494d66e python: Import PEP 639 license expressions

🎉 New Features

• 36da9cb Docker: Add setuptools_rust [1] to Python environment
• a1eeaf7 ProcessCapture: Add functions to get stdout / stderr as streams
• c0bdab6 analyzer: Add a package manager for GitHub Actions
• 1af8281 cli-helper: Add missing config resolution for package curations
• 280926c mise: Install the bombom tool to run Rebar3FunTest
• 6cbb204 mise: Install the mix_sbom tool to run MixFunTest
• f784665 osv: Extract firstFixedVersions from vulnerability results

✅ Tests

• e360414 mix: Update the expected result to contain a license expression
• 07d666b f3ff3f8 osv: Update expected results
• a41d7ad python: Update expected results

📖 Documentation

• 6c3ef9e mise: Explain why MISE_TOOL_INSTALL_PATH cannot be used
• 86219e7 model: Make the semantics of path excludes and includes clearer

🔧 Chores

• 1b3c268 .env.versions: Group versions by tool type
• ac2c3e3 bower: Move a private function out of class context
• 5473c1c cyclonedx: Iterate over references only once
• 55c1a65 detekt-rules: Make fewer exceptions to package naming rules
• d81b495 gradle-plugin: Add a script to dump the ORT model to the console
• 5b81969 model: Define default LicenseFilePatterns in "common" case
• b53f88b rebar3: Give the temporary BOM file a better name
• 5e51a3b rebar3: Rearrange bombom run arguments for readability
• 8342bec scripts: Export environment variables more safely
• 2714a81 scripts: Improve the ORT version message in docker_build.sh
• c6d182d scripts: Move docker_run.sh comments to CLI help
• ba20f5d Allow multiple matches for SimplePackageConfigurationProvider
• a2e1abe Initialize configurationsById directly at the declaration

🚀 Dependency Updates

• 76abaea docker: Upgrade to a stable version of Provenant
• b9025ff update actions/checkout action to v7.0.1
• 8a65c41 update actions/setup-java action to v5.6.0
• 800d5d8 update aws-java-sdk-v2 monorepo to v2.49.0
• 58c59fe update aws-java-sdk-v2 monorepo to v2.49.1
• bd647b8 update ch.qos.logback:logback-classic to v1.6.0
• e406f72 update com.github.jmongard.git-semver-plugin to v0.19.3
• 1cc2d84 update dependency prettier to v3.9.5
• 6fd42b5 update dev.aga.gradle.version-catalog-generator to v4.2.2
• fdab2e7 update docker/login-action action to v4.5.0
• 6936757 update docker/login-action action to v4.5.1
• a039b78 update github/codeql-action action to v4.37.1
• 8d01266 update github/codeql-action action to v4.37.2
• 56212c7 update github/codeql-action action to v4.37.3
• 4e7f3a6 update io.github.hfhbd.kfx to v0.2.11
• 049abda update jdx/mise-action action to v4.2.1
• 3339dea update jdx/mise-action action to v4.2.2
• 76c84ff update jdx/mise-action action to v4.2.3
• 4a6f514 update jgit to v7.7.1.202607240634-r
• fc09066 update kotest to v6.2.3
• 8e6054b update org.apache.tika:tika-core to v3.3.2
• e261596 update org.cyclonedx:cyclonedx-core-java to v13
• 3dc61c0 update org.graalvm.buildtools:native-gradle-plugin to v1.1.5
• 0b108e4 update org.graalvm.buildtools:native-gradle-plugin to v1.1.6
• 9297111 update org.metaeffekt.core:ae-security to v0.156.5
• dc0f3a8 update ossf/scorecard-action action to v2.4.4

🚜 Refactorings

• adc4e7c cli-helper: Factor out a repositoryConfiguration variable
• c367d25 cyclonedx: Simplify extractLicenseInfo()
• 9cafc5e cyclonedx: Take the BOM as a file
• 932f78e docker: Move mise to the base image
• 57fe5f8 Unify dependency relationship loops in SpdxDocumentModelMapper

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.