main
chore: bump SPDX license IDs and exceptions to `v3.28.0` (#10233)
feat: Add support for license scanning (#2418)
feat(java): detect JAR licenses from packaged LICENSE files (#10856)
refactor: use defined types (#5225)
fix: use canonical SPDX license IDs from embeded licenses.json (#10053)
chore: bump golangci-lint to v2.10.0 (#10223)
fix(license): normalize licenses for PostAnalyzers (#9941)
fix(license): handle SPDX WITH exceptions as single license in category detection (#9380)