fix(CLL): Bump CLL to 2.4.4 (11.5.1 hot fix)

build.gradle

@@ -22,7 +22,7 @@ buildscript {
 
 group = 'com.blackduck.integration'
 
-version = '12.0.0-SIGQA14-SNAPSHOT'
+version = '11.5.1-SNAPSHOT'
 
 apply plugin: 'com.blackduck.integration.solution'
 apply plugin: 'org.springframework.boot'
@@ -185,7 +185,7 @@ dependencies {
     implementation "com.blackduck.integration:blackduck-common:${blackDuckCommonVersion}"
     implementation 'com.blackduck.integration:blackduck-upload-common:4.1.6'
     implementation 'com.blackducksoftware:method-analyzer-core:1.0.7'
-    implementation "${locatorGroup}:${locatorModule}:2.4.2"
+    implementation "${locatorGroup}:${locatorModule}:2.4.4"
 
     implementation 'org.apache.maven.shared:maven-invoker:3.3.0'
 

documentation/src/main/markdown/currentreleasenotes.md

@@ -18,6 +18,14 @@
 
 * **Deprecation of Java 8 support** - In alignment with EU Cyber Resilience Act (CRA) requirements and compliance timelines, Java 8 support will be deprecated in the anticipated 2026 Q3 Detect 12.0.0 release.
 
+## Version 11.5.1
+
+### Resolved issues
+* (IDETECT-5207) Fixed an IndexOutOfBoundsException in component location analysis that was due to space characters within a version string.
+
+### Dependency Updates
+* Updated Component Locator Library to version 2.4.4
+
 ## Version 11.5.0
 
 ### Changed features
@@ -26,6 +34,7 @@
 * CentOS support in Detect Docker Inspector has been deprecated and will be removed in 12.0.0. For more details, please see [Docker Inspector Release Notes](packagemgrs/docker/releasenotes.md).
     * imageinspector.service.port.centos has been deprecated and will be removed in 12.0.0.
 * Clarified documentation for `--detect.uv.dependency.groups.excluded`. Optional is not a dependency group in uv but a section defining extras, therefor supplying `optional` as a value has no effect and exclusions must reference the extra name directly (e.g., postgres, redis).
+
 ### Resolved issues
 * (IDETECT-5125) Fixed failure during Python scans when the `requirements.txt` file contains Python extras syntax using square brackets, e.g.: `kopf[dev]>=1.3`
 * (IDETECT-5090) Fixed PIP Native Inspector failure to parse `requirements.txt` lines that contain [PEP 508 environment markers](https://peps.python.org/pep-0508/).
@@ -45,5 +54,4 @@
 * (IDETECT-5071) Fixed an issue with Simple Build Tool (sbt) evictions being included in the BOM. Dependencies that requested an evicted version are now reported with the version that replaced it.
 
 ### Dependency Updates
-
 * Updated Project Inspector to version 2026.6.0 ensuring continued security compliance.