Update dependency org.ossreviewtoolkit:analyzer to v87

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
org.ossreviewtoolkit:analyzer (source)	86.0.0 → 87.0.0

---

Release Notes

oss-review-toolkit/ort (org.ossreviewtoolkit:analyzer)

v87.0.0

Compare Source

What's Changed

🛠 Breaking Changes

• 83fcd73 chore(aosd)!: Remove support for format version 2.0

🐞 Bug Fixes

• 8c9b84d conan: Also stash the cache database for reproducible results
• 9cf165f conan: Based on documentation, default visible to true
• 7ef5264 conan: Include dependencies marked with visible=False
• 94b9c55 conan: Support overridden Conan homes
• 044707d docker: Align the Swift download with Ubuntu Noble LTS
• fb2abce spdx: Include subprojects when building the linkage type map

🎉 New Features

• c1c8280 cli-helper: Increase the fault tolerance for merging scanner runs
• d965a78 cyclonedx: Include the effective license as an SPDX expression
• 8082233 docker: Add the provenant scanner
• a3b36da scanoss: Expose and implement tuning parameters for snippet detection
• 822ee12 test-utils: Enhance matchJsonSchema() to load remote resources

✅ Tests

• fe6fa2b aosd: Update schema and example to latest versions
• 30e8bd0 asciidoc: Undo unwanted changes to expected results
• a79fc92 conan: Update expected results
• a446b04 cyclonedx: Factor out matchCycloneDxXmlSchema()
• 3cd636f cyclonedx: Factor out the redundant schema variable
• 1c64eb0 cyclonedx: Use matchJsonSchema() to validate JSON reports
• 66587b6 cyclonedx: Use a more speaking name for schema
• 75c13f5 node: Pin NPM versions for reproducible results
• aca1f5a npm: Update expected results
• 23bafe4 reporter: Inline a couple of variables
• a8f8742 reporters: Use named arguments for a vulnerability reference

📖 Documentation

• ed8f685 conan: Document existing package traits

🔧 Chores

• dbc23e2 cli-helper: Improve a variable name
• 83ec2e9 conan: Add remaining non-experimental boolean package traits
• 1a88814 conan: Be more clear what is stored in the storage path
• 617d4f1 conan: Inline the lazy conanStoragePath variable
• 12a61a1 conan: Let handlers get the package storage path directly
• 38ee990 conan: Use the stashFiles alias
• dd256af cyclonedx: Reduce the visibility of a variable
• 30a951a cyclonedx: Remove DEFAULT_SCHEMA_VERSION
• 8394714 cyclonedx: Remove two unneeded default parameter values
• 7bcf5ab cyclonedx: Rework / align test names a bit
• 086a358 docker: Name build targets consistently
• 24bc070 docker: Remove the intermediate FROM scratch targets
• 352da35 docker: Update the Askalono GitHub URL
• 4ba7e42 node: Rewrite lockfiles with NPM 11.6.2
• 4a2517e spdx: Move nullOrBlankToSpdxNone() to utils/spdx
• a104b6e Use the canonical URL to the ORT Slack workspace

🚀 Dependency Updates

• e77dcc5 docker: Update nuget-inspector to version 0.10.0
• de31f78 docker: Upgrade Rust to version 1.94.0
• cf4c244 docker: Upgrade Swift to version 6.3.1
• 5b3b35e docker: Upgrade the base image to Ubuntu Noble LTS
• 0e48fbd Update the dependency-analysis-gradle-plugin to version 3.11.0
• 9c8f5fe update aws-java-sdk-v2 monorepo to v2.44.5
• dd51454 update com.networknt:json-schema-validator to v3
• 5cc4c33 update dev.panuszewski.typesafe-conventions to v0.11.0
• a9b03d9 update flox/install-flox-action action to v2.4.1
• 6d73b88 update gradle to v9.5.1
• f12097f update io.github.hfhbd.kfx to v0.2.9
• ce059b5 update ksp monorepo to v2.3.8
• 6c41864 update react monorepo to v19.2.6

🚜 Refactorings

• 8093332 conan: More compact filtering of dependencies
• cf26e77 cyclonedx: Make JSON schema testing independent of CycloneDX

💡 Other Changes

• 250970c style(docker): Indent if / else branches for readability

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.