52.0.0

Actions Required

ScanCode command line options now need to be comma-separated, for example, replace

ScanCode:
  options:
    commandLine: '--copyright --license --info --strip-root --timeout 300'
    commandLineNonConfig: '--processes 4'

with

ScanCode:
  options:
    commandLine: '--copyright,--license,--info,--strip-root,--timeout,300'
    commandLineNonConfig: '--processes,4'

in your config.yml.

What's Changed

🛠 Breaking Changes

• 40fa386 feat(scanner)!: Migrate to new plugin API
• 212eb7b refactor(scanner)!: Extract command line tools

🐞 Bug Fixes

• 8b31459 docker: Pre-create "$HOME/.gradle" for proper permissions

🎉 New Features

• 4eedf22 cli: Add a command to list installed plugins
• 70c3dd0 spdx-utils: Add more mappings for deprecated licenses
• 6054e0b spdx-utils: Expose simple mapping of licenses to SpdxExpression

📖 Documentation

• 0f92a13 analyzer: Fix a typo in function docs

🔧 Chores

• 5d1803b DependencyGraphBuilder: Slightly improve dependency comparison
• f71062c commands: Remove obsolete code
• 19da2db model: Prefer entries over values() for enums
• 552147d scanner: Simplify Semver parsing with coerce()
• 4ee1030 spdx-utils: Add checkNotNull() calls to resource lookups
• 431abea spdx-utils: Say "simple mapping" instead of "custom mapping"
• 4a6ef3d Avoid import of some Companion object members
• fbd08eb Avoid the use of toRelativeString()

🚀 Dependency Updates

• b70d31a docker: Upgrade to the latest stable Go version 1.24.0
• a25942a update com.networknt:json-schema-validator to v1.5.6
• 4ccd149 update com.scanoss:scanoss to v0.10.0
• cbb60a8 update ksp monorepo to v2.1.10-1.0.30
• 1563b20 update mordant to v3.0.2
• 545475b update org.springframework:spring-core to v6.2.3
• 4d6800c update software.amazon.awssdk:s3 to v2.30.21

🚜 Refactorings

• cf145cf spdx-utils: Map deprecated and simple licenses separately