Update dependency org.ossreviewtoolkit:analyzer to v87.2.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
org.ossreviewtoolkit:analyzer (source)	87.1.0 → 87.2.0

---

Release Notes

oss-review-toolkit/ort (org.ossreviewtoolkit:analyzer)

v87.2.0

Compare Source

[!NOTE]

• This release is missing attestations due to a publishing error.
• It is recommended to review your ORT configuration, e.g. $HOME/.ort/config/config.yml, against documentation updates of 8d26884.
• As of b8ca7f9 additional files are included into file archives. For this to take effect, all existing file archives must be deleted (recommended) from the configured file archive storage.

What's Changed

🐞 Bug Fixes

• 2305784 bazel: Use the correct syntax for the fallback version
• a0d6807 model: Stop using notice files as resolved license files
• 098ed19 spdx: Track visited nodes per project type

🎉 New Features

• 17e9c6e bazel: Allow to configure the Bazel version directly
• 43bbdd9 evaluator: Add getNonApplicablePackageLicenseChoices()
• caa0da8 evaluator: Add getNonApplicableRepositoryLicenseChoices()
• 77c47ef model: Add effectiveLicenseAndAppliedChoices()
• b8ca7f9 model: Broaden the condition for including files in file archives
• b52339b spdx: Add applyAndGetChoices()

✅ Tests

• 9e21070 evaluator: Factor out OrtResult.setLicenseChoices()
• 05c7db4 mix: Update expected results
• d6a8479 model: Ensure default patterns do not include arbitrary files
• fac6b74 model: Factor out DEFAULT_PATTERNS
• 4c75ddf model: Trivially simplify some assertions
• 5e94b25 python: Update expected results

🐘 Build & ⚙️ CI

• a009a16 detekt-rules: Remove an obsolete work-around
• b9b5176 gradle: Work around the TAPI strictly depending on slf4j-api 2.0.17

📖 Documentation

• 4a4fd89 bazel: Move a code comment to the correct line
• 4eccaca model: Document that filename patterns get prepended with "**/"

🔧 Chores

• ca1d5fc model: Introduce a helper function to delete files on exit
• f845b89 model: Move getSubdirectoryForProvenance() nearby its only use
• ad73569 model: Remove Maven-specific logic from file archive creation
• 8ce7a98 spdx: Add a default value for SpdxLicenseChoice.given
• 1b0d51a spdx: Remove a default argument to address an IDE hint

🚀 Dependency Updates

• 6e18129 bazel: Use a newer fallback version
• 0ae2264 Update the dependency-analysis-gradle-plugin to version 3.13.0
• f1a5a62 Update the dependency-analysis-gradle-plugin to version 3.14.0
• b2501ca update aws-java-sdk-v2 monorepo to v2.44.14
• b9a94a2 update ch.qos.logback:logback-classic to v1.5.33
• 70bfb2f update com.networknt:json-schema-validator to v3.0.3
• 981a7f3 update dev.panuszewski.typesafe-conventions to v0.11.1
• 4c27bb7 update docker/build-push-action action to v7.2.0
• d36c1e2 update docker/login-action action to v4.2.0
• d938a03 update docker/metadata-action action to v6.1.0
• b5f49ae update docker/setup-buildx-action action to v4.1.0
• 23663c3 update github/codeql-action action to v4.36.0
• 5311aad update io.ktor:ktor-version-catalog to v3.5.0
• 1de3472 update ksp monorepo to v2.3.9
• b2e0293 update org.apache.tika:tika-core to v3.3.1
• 7f749ec update org.graalvm.buildtools:native-gradle-plugin to v1.1.1
• 7f31a8b update org.slf4j:slf4j-api to v2.0.18

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.