deps: update ort to v49 (major)

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
org.ossreviewtoolkit.plugins.packagemanagers:nuget-package-manager (source)	48.0.0 -> 49.0.0
org.ossreviewtoolkit:model (source)	48.0.0 -> 49.0.0
org.ossreviewtoolkit:reporter (source)	48.0.0 -> 49.0.0
org.ossreviewtoolkit:notifier (source)	48.0.0 -> 49.0.0
org.ossreviewtoolkit:evaluator (source)	48.0.0 -> 49.0.0

---

Release Notes

oss-review-toolkit/ort (org.ossreviewtoolkit.plugins.packagemanagers:nuget-package-manager)

v49.0.0

Compare Source

What's Changed

🛠 Breaking Changes

• 397fecc chore(model)!: Remove the possibility to return qualified scope names

🐞 Bug Fixes

• 2d5e526 Git: Work around a bug with JGit vs MINA
• 5629cd5 black-duck: Properly parse vector and scoring system from CVSS2
• e7f7669 black-duck: Remove duplicate URIs in references

🎉 New Features

• 330ce58 Provenance: Add a RemoteProvenance sub-interface
• d8a4050 black-duck: Make the log output show how the origin is determined

✅ Tests

• a7a251c black-duck: Add a test which shows that links lack deduplication
• fab515f black-duck: Make the test cover the cocoapods purl type
• 235dd05 black-duck: Rename a variable for consistency
• 123ffbc black-duck: Test parsing a vulnerability with CVSS 2 only
• 3df50fa black-duck: Test vulnerability parsing from a CVSS 2

📖 Documentation

• b71d16f Composer: Improve the comment about filtering vendored dependencies
• be43390 black-duck: Add a dot to the end of a sentence
• 89e2bed black-duck: Fix-up a TODO comment
• fb07211 examples: Illustrate how to set the Black Duck origin-id
• b7410dc schema: Fix package manager configurations schema title
• 889577b schema: Fix the JSON schema for the repository configuration
• 7cf4e47 schema: Use reference to fixed analyzer configuration schema

🔧 Chores

• e3600d4 black-duck: Remove an unnecessary override

🚀 Dependency Updates

• 496bb8d docker: Update Swift to version 6.0.3
• c15996b Update the KSP plugin to v2.1.10-1.0.29
• c5b0b5b update actions/setup-java digest to 3a4f6e1
• 9fde78b update actions/setup-node digest to 1d0ff46
• 2113092 update com.autonomousapps:dependency-analysis-gradle-plugin to v2.8.0
• df546a3 update com.blackduck.integration:blackduck-common to v67.0.4
• f73d63d update com.charleskorn.kaml:kaml to v0.67.1
• 53792fb update com.google.code.gson:gson to v2.12.0
• d01921b update github/codeql-action digest to 17a820b
• 18396a0 update github/codeql-action digest to 6e54559
• 2e0a300 update github/codeql-action digest to dd74661
• 95db685 update org.jetbrains.gradle.plugin.idea-ext to v1.1.10
• 3112d9d update org.jruby:jruby to v9.4.11.0
• 87dd873 update org.metaeffekt.core:ae-security to v0.135.1

🚜 Refactorings

• 19770cc black-duck: Move two variables out of a block
• 71d4614 model: Remove the convenience qualifyScope() overload

💡 Other Changes

• 7381fe4 style(black-duck): Use a shorter name for cvssVector
• 20f1749 style: Prefer the infix version of shouldBe{Success,Failure}()
• 253dfba style: Trivially trim trailing spaces from log messages

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.