main
fix(java): set per-file digest for nested JARs (#10855)
feat(java): resolve JAR license URLs to SPDX IDs (Bundle-License, pom <url>) (#10948)