main
fix: use context for analyzers (#9538)
docs: catch some missed docs -> guide (#9850)
feat(dotnet): detect bundled runtime in self-contained deployments (#10786)
test(go): set `GOPATH` for tests (#9785)
feat(java): resolve JAR license URLs to SPDX IDs (Bundle-License, pom <url>) (#10948)
fix(nodejs): silently skip subdirectory package.json files with invalid names (#10609)
feat(php): add support for dev dependencies in Composer (#9910)
fix(python): normalize dependency names in PEP 621 pyproject.toml (#11050)
refactor(rust): use txtar format for cargo analyzer test data (#10104)
fix(java): set per-file digest for nested JARs (#10855)