What's Changed

🛠 Breaking Changes

• 19c72625034689bb1ebfe2f9e8d72a39fd91cc12 feat(evaluated-model)!: Include entire package curations
• 8d924fb9e58f8240a125cbf377e4261d6040f597 refactor(evaluated-model)!: Use indexing and referencing for curations

🐞 Bug Fixes

• 8c7bc8ccb56b6853d65c1cdb3744790c33fe00f5 cli: Reduce the non-interactive terminal width for Mordant
• 0bacbb2a5d544317c796906bef14f01ea400305d fossid-webapp: Add missing license category
• 63b0dd2f8de587ffe9eb96185dd1fec722e0e7f1 git: Checkout with force to be on the safe side
• 84ed217f13c4b7cacb210c72061f091a6dcd5966 node: Make passing --use-system-ca conditional
• 428f4ef1bf802c68eea659d9da16d8fec1de50e6 ort-utils: Use the default ORT OkHttp client for Java bootstrapping

🎉 New Features

• 7953a2eace070901799d24249b05a27746eb6eef evaluated-model: Add package configs to each package
• f666a70a817f70411ab6744eefdc700de284cead gleam: Fail hard in case the lockfile is missing an entry
• 9c059a8180b489fc3a919dea95adda97123e5936 plugins: Simplify code generation for parsing plugin options
• 5857495d8bed073c0cb297deabdeb0f672ff4881 utils: Cache the result of the disco service
• 3719714c8cc9f89c5909b6c77df44a0e9f8246e2 yarn2: Also conditionally use system certificates

✅ Tests

• b1d6a9a0cf33f41b03a898684910647c7b7ce50b conan: Update expected results
• a3872685c8b73b38fee2a6183456f3851d18c9da evaluated-model: Add package configs to test input
• 4dc5bf31a109aff421a8b68ea567709f4f2ec710 ort-utils: Avoid polluting the main HTTP cache
• a1d3d91550b623c32d921e4529c9aa7d04d1a8f6 python: Update expected results

🐘 Build & ⚙️ CI

• 32b9aea28f356e8e799bed69e408c13a3f4ca33c subversion: Substitute the vulnerable lz4-java dependency

📖 Documentation

• 6925db2182b84f3daf9e2f9de5cdf58b8d41e5bf bundler: Use one-line KDoc syntax for compact property docs
• c59b261af4292f3a5f7b43d8ef6f939d6172aa83 tekton: Replace deprecated Tekton hub links

🔧 Chores

• 0857d71548911bef20d9dd6d7c6627541ddccb38 bundler: Explicitly convert Gem::Version to a string
• dc025507c734b092bb8dfd1472c9bf6f0fcb50f5 downloader: Prefer the in operator over contains()
• 0c789492c039814e646e4e5f87e83419e530be30 gleam: Make use of orEmpty()
• 6c19daf95fdddd44df8f4c8243a1169673e7e07b gleam: Remove the unnecessary wrapping via ManifestPackageInfo
• 05fca1e3fb6ed819d31a0a6d1d6e69566010c0cf gleam: Turn toIdentifier() into an expression
• cdac3fc520c8bfd0b65779b2bcd8566f32024c1b model: Make isVersionRange() public
• bd141b880125b887b094c28f480b771a505c7865 plugins: Make PluginOptionType know their type names

🚀 Dependency Updates

• f375d09190cc3ac0bcc57b118fe7701c9ff0e376 docker: Upgrade Pip to version 25.3.0
• e363b36a3c4d7094522d5d60fb6b64e01f0fe39a update actions/setup-node digest to 6044e13
• a7211c06495ff0b8c7694f56b02be79a2458bc3a update aws-java-sdk-v2 monorepo to v2.41.7
• d45399baceea4cf71dc2544bd303ed831465d706 update com.scanoss:scanoss to v0.12.1
• e41416ba5876899bcf79f21e90ff47343273d052 update github/codeql-action digest to cdefb33

🚜 Refactorings

• ffc37f78615174b2800fe33e17eb876d84e19dd7 node: Override run() that takes environment
• cbeb299ffbaa0a60aca64b559b92273652b3e486 utils: Slightly simplify an expression

💡 Other Changes

• 15bf783d03885aad0541fd9acebbea1d482007ac Revert "feat(utils): Cache the result of the disco service"