v0.0.19

What's Changed

• fix(package-detection): verify Docker compare targets by @mstykow in #692
• fix(parsers): reuse scan license engine during finalization by @mstykow in #693
• feat(progress): add verbose-mode step logging for post-scan and finalize phases by @abraemer in #694
• perf(scan-result-shaping): replace O(D×N) directory scans with O(N) bottom-up tree traversal by @abraemer in #696
• refactor: replace lazy_static and once_cell with std::sync::LazyLock by @abraemer in #698
• fix(parsers): apply ADR 0004 security hardening across 10 parsers by @abraemer in #695
• fix(assembly): keep sibling CocoaPods podspecs separate by @mstykow in #699
• fix(copyright): stop directive absorption and support single-file compare targets by @mstykow in #700
• feat(license-detection): make Rule/License rkyv-compatible, drop rmp_serde from cache by @abraemer in #697
• refactor(license-detection): replace rmp_serde with postcard for embedded artifact by @abraemer in #702
• fix(output): preserve hoisted SPDX license data by @mstykow in #701

Full Changelog: v0.0.18...v0.0.19