BC: PackageUrl as string

[jkowalleck]

Description

• BREAKING changes
  • Changed dependencies
  • Changed properties packageUrl
• Changed
  • CycloneDX\Core\Models\Component::setPackageUrl() accepts ?string
    Downstream implementations may use package-url/packageurl-php for generation.
  • CycloneDX\Core\Models\Component::getPackageUrl() returns ?string
    Downstream implementations may use package-url/packageurl-php for parsing.
• Dependencies
  • No longer depend on package-url/packageurl-php

part of #571

AI Tool Disclosure

• My contribution does not include any AI-generated content
• My contribution includes AI-generated content, as disclosed below:
  • AI Tools: [e.g. GitHub CoPilot, ChatGPT, JetBrains Junie etc.]
  • LLMs and versions: [e.g. GPT-4.1, Claude Haiku 4.5, Gemini 2.5 Pro etc.]
  • Prompts: [Summarize the key prompts or instructions given to the AI tools]

Affirmation

• My code follows the CONTRIBUTING.md guidelines

[codacy-production]

Coverage summary from Codacy

See diff coverage on Codacy

Coverage variation	Diff coverage
✅ +0.00%	✅ 100.00% (target: 80.00%)

Coverage variation details

	Coverable lines	Covered lines	Coverage
Common ancestor commit (a32fd3e)	5535	5513	99.60%
Head commit (9c2e414)	5535 (+0)	5513 (+0)	99.60% (+0.00%)

Coverage variation is the difference between the coverage for the head and common ancestor commits of the pull request branch: <coverage of head commit> - <coverage of common ancestor commit>

Diff coverage details

	Coverable lines	Covered lines	Diff coverage
Pull request (#588)	2	2	100.00%

Diff coverage is the percentage of lines that are covered by tests out of the coverable lines that the pull request added or modified: <covered lines added or modified>/<coverable lines added or modified> * 100%

See your quality gate settings    Change summary preferences