v3.1.0

⚙️ Changes

• Add interface pin, split IConfiguration to be non-breaking by @DaveTryon (#919)
• Update metadata contract to be backcompatible with SPDX 2.2 parser by @pragnya17 (#918)
• Remove unnecessary parser errors which disallow syft SBOMs by @sfoslund (#917)
• Disable CodeQL until they fix the osx-arm64 problem by @DaveTryon (#916)
• build(deps): bump github/codeql-action from 3.28.3 to 3.28.8 by @dependabot[bot] (#914)
• Specify correct image for running on osx-arm64 by @DaveTryon (#913)
• Update MSTest to metapackage and MTP by @Youssef1313 (#881)
• build(deps): bump actions/setup-dotnet from 4.2.0 to 4.3.0 by @dependabot[bot] (#911)
• Target E2E tests with net472 only on Windows by @DaveTryon (#910)
• Bump GitHub Actions versions in sample code by @rufer7 (#908)
• build(deps): bump MSTest.TestAdapter from 3.7.2 to 3.7.3 by @dependabot[bot] (#905)
• build(deps): bump MSTest.TestFramework from 3.7.2 to 3.7.3 by @dependabot[bot] (#906)
• Enable MSTest analyzers by @Youssef1313 (#898)
• Address a targeted set of analyzer warnings by @DaveTryon (#901)
• Revert extra dependency that we added in #758 by @DaveTryon (#902)
• Update CLI arg help text by @sfoslund (#899)
• Bump component-detection from 5.1.6 to 5.2.1 by @DaveTryon (#894)
• Remove FluentAssertions from tests by @DaveTryon (#896)
• build(deps): bump release-drafter/release-drafter from 6.0.0 to 6.1.0 by @dependabot[bot] (#883)
• build(deps): bump Scrutor from 5.1.0 to 6.0.1 by @dependabot[bot] (#872)
• build(deps): bump github/codeql-action from 3.28.0 to 3.28.3 by @dependabot[bot] (#892)
• build(deps): bump coverlet.collector from 6.0.3 to 6.0.4 by @dependabot[bot] (#882)
• build(deps): bump stefanzweifel/git-auto-commit-action from 5.0.1 to 5.1.0 by @dependabot[bot] (#861)
• build(deps): bump System.Threading.Channels from 9.0.0 to 9.0.1 by @dependabot[bot] (#871)
• Bump MSTest.Test* from 3.7.0 to 3.7.2 by @DaveTryon (#891)
• Add a workflow to comment on API changes by @DaveTryon (#885)
• Switch DataTestMethod to DataTestMethod (part 2) by @DaveTryon (#880)
• Switch DataTestMethod to TestMethod by @Youssef1313 (#849)
• Add skipBuildTagsForGitHubPullRequests setting to PR pipeline by @sfoslund (#879)
• Reenable SBOM targets e2e test by @sfoslund (#876)
• Remove GH action PR build by @sfoslund (#875)
• Add ADO PR build by @sfoslund (#874)
• Spdx 3.0 Parser for SBOM files by @pragnya17 (#860)
• Revert bump to Microsoft.Extensions.DependencyModel (Revert part of #847) by @DaveTryon (#851)
• Pin ubuntu runner to 22.04 by @DaveTryon (#856)
• build(deps): bump Microsoft.Extensions.DependencyModel from 8.0.2 to 9.0.0 by @dependabot[bot] (#847)
• Decouple test packages from release bits by @DaveTryon (#850)
• build(deps): bump coverlet.collector from 6.0.2 to 6.0.3 by @dependabot[bot] (#846)
• Revert "build(deps): bump Microsoft.Extensions.DependencyModel" by @DaveTryon (#845)
• build(deps): bump FluentAssertions from 6.12.2 to 7.0.0 by @dependabot[bot] (#818)
• build(deps): bump Microsoft.Extensions.DependencyModel from 8.0.2 to 9.0.0 by @dependabot[bot] (#784)
• build(deps): bump github/codeql-action from 3.27.9 to 3.28.0 by @dependabot[bot] (#840)
• build(deps): bump Scrutor from 5.0.2 to 5.1.0 by @dependabot[bot] (#842)
• build(deps): bump actions/setup-dotnet from 4.1.0 to 4.2.0 by @dependabot[bot] (#843)
• build(deps): bump github/codeql-action from 3.27.6 to 3.27.9 by @dependabot[bot] (#832)
• build(deps): bump codecov/codecov-action from 5.0.7 to 5.1.2 by @dependabot[bot] (#838)
• Defining and generating spdx 3.0 json elements by @pragnya17 (#830)
• Add running unit tests to CI pipeline by @sfoslund (#835)
• Made the Timeout in LicenseInformationService configurable via CLI argument (#584) by @kidcline1 (#773)
• build(deps): bump github/codeql-action from 3.27.5 to 3.27.6 by @dependabot[bot] (#825)
• build(deps): bump NuGet.Configuration from 6.11.1 to 6.12.1 by @dependabot[bot] (#817)
• build(deps): bump MSTest.TestAdapter from 3.6.3 to 3.6.4 by @dependabot[bot] (#823)
• build(deps): bump MSTest.TestFramework from 3.6.3 to 3.6.4 by @dependabot[bot] (#824)
• Use the fully qualified name for the Zip and Unzip tasks by @bstadick (#803)
• Add missing linefeed from API sample by @DaveTryon (#819)
• build(deps): bump System.Threading.Channels from 6.0.0 to 8.0.0 by @dependabot[bot] (#635)
• build(deps): bump codecov/codecov-action from 5.0.2 to 5.0.7 by @dependabot[bot] (#810)
• build(deps): bump github/codeql-action from 3.27.4 to 3.27.5 by @dependabot[bot] (#809)
• build(deps): bump Scrutor from 5.0.1 to 5.0.2 by @dependabot[bot] (#779)
• build(deps): bump NuGet.Frameworks from 6.11.1 to 6.12.1 by @dependabot[bot] (#785)
• build(deps): bump Microsoft.VisualStudio.Threading.Analyzers from 17.11.20 to 17.12.19 by @dependabot[bot] (#790)
• Unbreak build pipeline after most recent drop of Analyzers by @DaveTryon (#813)
• build(deps): bump Microsoft.NET.Test.Sdk and Newtonsoft.Json by @dependabot[bot] (#808)
• build(deps): bump System.Threading.Tasks.Extensions from 4.5.4 to 4.6.0 by @dependabot[bot] (#792)
• build(deps): bump MSTest.TestFramework from 3.6.2 to 3.6.3 by @dependabot[bot] (#793)
• build(deps): bump FluentAssertions from 6.12.1 to 6.12.2 by @dependabot[bot] (#781)
• build(deps): bump MSTest.TestAdapter from 3.6.2 to 3.6.3 by @dependabot[bot] (#794)
• Bump System.Net.Http version by @sfoslund (#806)
• build(deps): bump github/codeql-action from 3.27.0 to 3.27.4 by @dependabot[bot] (#799)
• build(deps): bump Microsoft.IO.Redist from 6.0.1 to 6.1.0 by @dependabot[bot] (#787)
• build(deps): bump codecov/codecov-action from 4.6.0 to 5.0.2 by @dependabot[bot] (#805)
• Address CG issue in Microsoft.IO.Redist by @DaveTryon (#757)
• build(deps): bump Serilog.Sinks.Async from 2.0.0 to 2.1.0 by @dependabot[bot] (#777)
• Scrub dotnet 6 references by @DaveTryon (#775)
• Expand osx coverage in PR builds by @DaveTryon (#774)
• build(deps): bump MSTest.TestFramework from 3.6.1 to 3.6.2 by @dependabot[bot] (#772)
• build(deps): bump MSTest.TestAdapter from 3.6.1 to 3.6.2 by @dependabot[bot] (#771)
• build(deps): bump Microsoft.Build from 17.10.4 to 17.11.4 by @dependabot[bot] (#764)
• typo: ThrowArguement -> ThrowArgument; fix SPDX URL anchor by @bact (#769)
• Add language tag to code blocks and correct indented code block by @bact (#770)
• Update EsrpCodeSigning task to version 5 by @jlperkins (#761)
• Update SPDX spec links to current by @bact (#765)
• Fix several typos in Markdown files and in a comment by @bact (#766)
• build(deps): bump System.Reactive from 5.0.0 to 6.0.1 by @dependabot[bot] (#588)
• build(deps): bump dotnet/runtime-deps from 6.0.8-bullseye-slim-amd64 to 7.0.20-bullseye-slim-amd64 by @dependabot[bot] (#589)
• build(deps): bump actions/setup-dotnet from 4.0.1 to 4.1.0 by @dependabot[bot] (#763)
• build(deps): bump System.Threading.Tasks.Dataflow from 4.11.1 to 8.0.1 by @dependabot[bot] (#611)
• build(deps): bump Serilog.Extensions.Hosting from 7.0.0 to 8.0.0 by @dependabot[bot] (#657)
• build(deps): bump Scrutor from 4.2.2 to 5.0.1 by @dependabot[bot] (#727)
• build(deps): bump actions/checkout from 4.2.1 to 4.2.2 by @dependabot[bot] (#760)
• build(deps): bump github/codeql-action from 3.26.13 to 3.27.0 by @dependabot[bot] (#759)
• Bump Microsoft.Extensions.Caching.Memory for CVE by @DaveTryon (#758)