Idetect 5117 - feat(uv): Expand dependency group coverage in UV detector

[bd-spratikbharti]

Description

Overview

This PR extends the UV build detector to support broader and more flexible dependency scanning. It introduces complete coverage of dependency groups and extras, along with a new option to focus scans on specific groups when needed.

What's Changing

• Inclusive scanning by default
  All dependency groups and optional extras defined in pyproject.toml are now included automatically. This ensures Detect provides a comprehensive view of a project’s dependencies without requiring extra configuration.

• New property: detect.uv.dependency.groups.only
  A configuration property has been added to allow teams to narrow scans to only the groups they care about. For example, setting this property to dev,lint will restrict scanning to those groups, excluding others.

• Conflict handling
  If both detect.uv.dependency.groups.only and detect.uv.dependency.groups.excluded are set, exclusions take precedence. Detect will log a warning to highlight the overlap.

Why This Matters

These enhancements make the UV detector more adaptable to real‑world projects that use extras or non‑default groups (e.g. test, lint, docs). Teams gain both complete coverage by default and fine‑grained control when needed, improving accuracy and flexibility in dependency audits.

[Copilot]

Pull request overview

This PR expands Python/uv dependency detection to produce more complete results by default (including all dependency groups and extras) and adds a configuration option to restrict uv scans to specific dependency groups when desired. It also includes related robustness/documentation updates across Python and sbt dependency parsing plus release-note/doc updates.

Changes:

• UV CLI detector: default uv tree invocation now includes all extras and all dependency groups; new detect.uv.dependency.groups.only property supports scanning only selected dependency groups (with defined precedence vs exclusions).
• Python dependency parsing: pip inspector and setuptools setup.py parsing updated to better handle modern requirement formats (extras/markers/direct references).
• sbt DOT parsing: eviction handling reworked to correctly interpret “Evicted By” edges and avoid reporting evicted/stranded nodes as roots; docs/release notes refreshed.

Reviewed changes

Copilot reviewed 9 out of 9 changed files in this pull request and generated 3 comments.

Show a summary per file

File	Description
src/main/resources/pip-inspector.py	Improves requirement name normalization and metadata-based dependency resolution behavior/documentation.
src/main/java/com/blackduck/integration/detect/configuration/DetectPropertyFromVersion.java	Adds 12.0.0 property version marker.
src/main/java/com/blackduck/integration/detect/configuration/DetectProperties.java	Introduces detect.uv.dependency.groups.only property definition/help text.
src/main/java/com/blackduck/integration/detect/configuration/DetectableOptionFactory.java	Wires new uv “only groups” property into UVDetectorOptions.
detectable/src/main/java/com/blackduck/integration/detectable/detectables/uv/UVDetectorOptions.java	Adds “only dependency groups” option storage/accessors.
detectable/src/main/java/com/blackduck/integration/detectable/detectables/uv/buildexe/UVBuildExtractor.java	Builds uv tree args to include all extras/groups by default and support --only-group mode with conflict warning.
detectable/src/test/java/com/blackduck/integration/detectable/detectables/uv/unit/UVBuildExtractorTest.java	Updates tests to expect new default uv flags.
detectable/src/test/java/com/blackduck/integration/detectable/detectables/uv/functional/UVDetectableFunctionalTest.java	Updates functional uv command expectation to include new flags.
detectable/src/test/java/com/blackduck/integration/detectable/detectables/uv/functional/UVExcludeDevGroupsFunctionalTest.java	Updates functional excluded-groups command expectation to include new flags.
detectable/src/main/java/com/blackduck/integration/detectable/detectables/setuptools/parse/SetupToolsPyParser.java	Adjusts parsing logic/regex to better handle requirements content and list closing.
detectable/src/main/java/com/blackduck/integration/detectable/detectables/sbt/dot/SbtRootNodeFinder.java	Reworks root selection in presence of evictions/stranded nodes.
detectable/src/main/java/com/blackduck/integration/detectable/detectables/sbt/dot/SbtGraphParserTransformer.java	Reworks eviction replacement and ignores “Evicted By” edges as dependencies.
detectable/src/main/java/com/blackduck/integration/detectable/detectables/sbt/dot/SbtDotExtractor.java	Uses new root-finding and eviction parsing flow.
detectable/src/main/java/com/blackduck/integration/detectable/detectables/sbt/dot/SbtDotEvictionParser.java	New utility to parse eviction relationships from DOT edges.
detectable/src/test/java/com/blackduck/integration/detectable/detectables/sbt/unit/SbtRootNodeFinderTest.java	Updates/expands tests for new sbt root-finding behavior.
detectable/src/test/java/com/blackduck/integration/detectable/detectables/sbt/unit/SbtGraphParserTransformerTest.java	Replaces older eviction tests with more realistic DOT fixtures and additional scenarios.
detectable/src/test/java/com/blackduck/integration/detectable/detectables/sbt/unit/SbtEvictionNodeUtilTest.java	Removes obsolete eviction util tests (util deleted).
detectable/src/main/java/com/blackduck/integration/detectable/detectables/sbt/dot/SbtEvictionNodeUtil.java	Deletes obsolete eviction detection approach.
README.md	Updates documentation links.
documentation/src/main/markdown/scripts/overview.md	Updates env var description for upload chunk sizing.
documentation/src/main/markdown/runningdetect/quack-patch.md	Clarifies output directory reuse behavior.
documentation/src/main/markdown/runningdetect/includingexcluding/directories.md	Expands directory exclusion docs (and contains a small API name typo).
documentation/src/main/markdown/packagemgrs/python.md	Documents new uv behavior and detect.uv.dependency.groups.only.
documentation/src/main/markdown/packagemgrs/docker/releasenotes.md	Small wording substitution to use doc variable.
documentation/src/main/markdown/currentreleasenotes.md	Adds/adjusts release note items (contains typos + one duplicate bullet).
build.gradle	Updates project version string.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[cpottsbd]

Reminder to add a release note. ; )