Retain parent group and component across sub-projects. Fixes #474 again

[prabhu]

Fixes #474

We need to thoroughly test with multiple gradle projects including android

[cerrussell]

I'm getting errors again for invalid control characters. Most likely more carriage returns like before. Overall test gradle projects did ok except I'm seeing more invalid ref warnings than I want to see - probably related to the first issue.

[prabhu]

@cerrussell ready for retesting.

[prabhu]

@ajmalab @heubeck could you also test your internal repos with this branch?

[heubeck]

no issues for me: https://github.com/MediaMarktSaturn/technolinator/actions/runs/5942007543/job/16114050544

[malice00]

OK, so with this branch, my test-project works correctly when run from the root of the multi-project Gradle-project.

When run from the single module that represents my release artifact, the parentComponent gets reset and I get this validation warning:

===== WARNINGS =====
[
  'Invalid ref in dependencies pkg:maven/at.test.cdxgen/[email protected]?type=jar'
]

When I run this branch on fineract v1.8.4, I get this warning:

===== WARNINGS =====
[
  'Found parent component with name fineract in metadata.component.components'
]

And finally, when I run it on the develop branch in fineract, same thing... And it seems to run forever!?

I guess we could put this one out there -- in multi-project mode all dependencies are there, so vuln-scans will work. Same for scanning a single project. The only thing that doesn't work (which I am not sure has ever worked in any current release, although I admit I haven't checked all releases) is the dependency-tree for a single project from a multi-project.

[prabhu]

Thanks @malice00. Let's collaborate offline to troubleshoot the single module issue. This branch is about fineract which works fine for both develop and release version of that repo.