deps: update ort to v40 (major)

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
org.ossreviewtoolkit:reporter (source)	39.0.0 -> 40.0.0
org.ossreviewtoolkit.plugins:package-configuration-providers (source)	39.0.0 -> 40.0.0
org.ossreviewtoolkit:model (source)	39.0.0 -> 40.0.0

---

Release Notes

oss-review-toolkit/ort (org.ossreviewtoolkit:reporter)

v40.0.0

Compare Source

What's Changed

Breaking Changes 🛠

• bd82abb refactor(asciidoc)!: Make AsciiDocTemplateReporter abstract
• 88aa4a0 refactor(asciidoc)!: Use a plugin config class
• 61e9dd0 refactor(cyclonedx)!: Use a plugin config class
• 2f1032a refactor(evaluatedmodel)!: Use a plugin config class
• 80b28c7 refactor(fossid)!: Use a plugin config class
• 27f0dae refactor(freemarker)!: Use a plugin config class
• 6fd7098 refactor(freemarker)!: Use dedicated arguments instead of options
• 553f50e refactor(gitlab)!: Use a plugin config class
• 94ebf3d refactor(maven)!: Make previously public parsing functions internal
• 15fdd7b refactor(maven)!: Move stand-alone parsing functions
• 03560a5 refactor(node)!: Make Npm separate from Yarn
• fd736f3 refactor(opossum)!: Use a plugin config class
• 5d5ea5c refactor(package-managers)!: Make explicit which project type gets managed
• fac5bf3 refactor(reporter)!: Migrate to new plugin API
• 4596888 refactor(reporter)!: Remove the unused config argument
• ff6ca62 refactor(spdx)!: Use a plugin config class
• 740436f refactor(web-app)!: Use a plugin config class

Bug Fixes 🐞

• 4a41869 clearly-defined: Consistently use ORT's OkHttp client for requests
• 2e70da8 conan: Correct the error handling when listing remotes
• affb9fe plugins-api: Fix handling of default values for string list options
• a00353f vulnerable-code: Still get vulnerabilities for which a fix exists

New Features 🎉

• 4cda010 analyzer: Support email and homepage in parseAuthorString()
• d6c8fad analyzer: Support multiple authors per author string
• 41b46fc node: Parse author email and URL from string primitives
• f236cba plugins-api: Add a way to configure plugin option aliases
• 95ea9a5 plugins-api: Make OrtPluginOption.defaultValue optional

Build 🐘 & CI ⚙️

• 254dbf9 Gradle: Enable parallel configuration cache access
• bf63013 Gradle: Remove an unneeded libs definition
• d61e927 github: Disable the build cache for CodeQL analysis

Chores 🔧

• c13dda6 analyzer: Use permalinks in the error for duplicate projects
• 0d455cd clearly-defined: Simplify a test asserting facets
• 08939a3 detekt: Remove unneeded @Suppress annotations
• 660d54d freemarker: Remove unused constants
• d2e6ae6 maven: Avoid unsafe non-null assertions via destructions
• 1850024 node: Remove an unneeded else case
• ec23aec node: Rename a field to plural as it is a set
• 15dcd7b npm: Remove an unneeded Suppress annotation
• 0f14d8d tests: Simplify shouldNotBeNull calls
• 92fdfa2 yarn2: Map directly to a set

Dependency Updates 🚀

• e841910 update dependency com.charleskorn.kaml:kaml to v0.63.0
• 2b7f063 update dependency com.charleskorn.kaml:kaml to v0.65.0
• 978a71f update dependency gradle to v8.11
• 2ff9f5f update docusaurus monorepo to v3.6.1
• 29183a4 update github/codeql-action digest to 396bb3e
• a5adf08 update github/codeql-action digest to 4f3212b
• a07baac update github/codeql-action digest to 9278e42
• 2bf483c update gradle/actions digest to 473878a
• 04772cd update ksp to v2.0.21-1.0.27

Documentation 📖

• 283689b asciidoc: Slightly improve docs of PdfTemplateReporter
• aee88f2 clearly-defined: Add (links to) rate limit documentation
• 41622d0 model: Trivially improve wording of a TODO statement
• 6fa4cb2 node: Remove a comment which does not provide much info
• 5a063c4 node: Remove a couple of comments

Refactorings 🚜

• 2487cfc AnalyzerResultBuilder: Introduce an addProject() function
• e13d2d6 conan: Split the function to configure remote authentication
• d192310 maven: Make a workspace reader's delegate property private
• 2034b29 maven: Move Maven support classes to separate files
• e5d0526 maven: Move non-public static functions to the top level
• dcc97a0 model: Introduce a function to add dependencies to the graph
• 617ccd9 node: Extract extractNpmIssues()
• 9a2cbc4 node: Extract code to wrap a primitive into an object
• 982580f node: Inline a function again
• 716420b node: Move NpmModuleInfo into a separate file
• 151858e node: Reduce the number of map conversions
• b86e0ae spdx: Inline the MANAGER_NAME constant
• b80ec20 swiftpm: Inline the PROJECT_TYPE constant

Tests ✅

• 156b371 node: Add missing toYaml() calls for textual result comparison
• 0d06faa node: Parse a Yarn instead of a Npm instance
• d562e97 package-managers: Remove all Windows-specific expected results
• 893f7f0 python: Update expected results
• 8d70428 stack: Update the .cabal file

Other Changes 💡

• 959b3af style(maven): Slightly reformat code to match similar code

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.