[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
org.ossreviewtoolkit:analyzer (source)	96.0.0 → 97.0.0

---

Release Notes

oss-review-toolkit/ort (org.ossreviewtoolkit:analyzer)

v97.0.0

Compare Source

What's Changed

• Environment variable overrides for configuration need to use _ instead of . or __ now. I.e. ort.scanner.storages.postgresStorage.connection.url becomes ort_scanner_storages_postgresStorage_connection_url (following Spring rules).
• Health metrics for CrOSSD and Scorecard.

🛠 Breaking Changes

• 8f5be8c deps!: update hoplite to v3

🐞 Bug Fixes

• facd05a analyzer: Merge distinct metadata values for same packages
• 2301c03 commitlint: Extend the list of note keywords
• 8a98168 crossd: Guard against JsonNull metrics
• 0823686 model: Do not load default Hoplite property sources
• acaf869 model: Extend NOTICE file patterns to be ignored by the scanner

🎉 New Features

• 9b1ff4b advisor: Extend advisor result to include health metrics
• 116be02 crossd: Implement CrOSSD project health metric provider
• 1558671 nuget: Add Visual Basic projects (targeting .NET)
• b0e622b scorecard: Implement a Scorecard project health metric provider

✅ Tests

• 4f531d3 bazel: Update expected results
• 8cec680 scanoss: Enable the test for a full file match
• 95f1824 scanoss: Prefer a SCANOSS_API_KEY over a OSSKB_API_KEY

🐘 Build & ⚙️ CI

• 6b13be3 github: Forward a SCANOSS_API_KEY secret to the environment

📖 Documentation

• 00d29f3 nuget: Add comments about definition file types

🔧 Chores

• 7ca2291 analyzer: Fixup some test names
• 556a2a8 bazel: Make use of getAnalyzerResult()
• dc51bff evaluator: Fix a ProjectSourceRule.description
• 02a884b evaluator: Use a unique description for ProjectSourceRule
• afeee2c package-*-providers: Make two functions private

🚀 Dependency Updates

• fe90b95 update actions/setup-java action to v6.1.0
• a3d8292 update aws-java-sdk-v2 monorepo to v2.56.0
• dff18db update com.gradleup.tapmoc:tapmoc-gradle-plugin to v0.5.0
• 232a3b7 update dependency getprovenant/provenant to v1.0.12
• deea82b update dependency getprovenant/provenant to v1.0.13
• 50884fa update dependency getprovenant/provenant to v1.0.14
• 60ac596 update dependency getprovenant/provenant to v1.0.15
• ecef55c update exposed to v1.5.1
• b04f662 update github/codeql-action action to v4.38.3
• 363fb8a update jdx/mise-action action to v5.1.2
• 84961dc update kotest to v6.2.6
• a3052b5 update kotlin monorepo to v2.4.21
• 3445ea3 update org.jetbrains.kotlin.jvm to v2.4.21
• c011cc1 update org.metaeffekt.core:ae-security to v0.159.0
• 97c5c1e update ossf/scorecard-action action to v2.5.0

🚜 Refactorings

• 15b96e6 downloader: Rename a function to downloadPackages()
• ef9f980 downloader: Use the number of packages for progress info

💡 Other Changes

• 368e913 style(downloader): Reindent a function

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.