feat(ruby): emit dependency relationships from Gemfile.lock

Parse each gem's dependency list from Gemfile.lock into a new
RubyGemfileLockEntry metadata type and use the shared dependency.Processor
to resolve dependency-of relationships between locked gems, matching the
pattern used by the other lockfile catalogers (elixir, python, rust, ...).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Signed-off-by: Chris Greeno <cgreeno@gmail.com>

Author: cgreeno

internal/constants.go

@@ -3,7 +3,7 @@ package internal
 const (
 	// JSONSchemaVersion is the current schema version output by the JSON encoder
 	// This is roughly following the "SchemaVer" guidelines for versioning the JSON schema. Please see schema/json/README.md for details on how to increment.
-	JSONSchemaVersion = "16.1.8"
+	JSONSchemaVersion = "16.1.9"
 
 	// Changelog
 	// 16.1.0 - reformulated the python pdm fields (added "URL" and removed the unused "path" field).
@@ -15,4 +15,5 @@ const (
 	// 16.1.6 - add Dependencies to ElixirMixLockEntry metadata
 	// 16.1.7 - add AppleAppBundleEntry metadata type for the apple app bundle cataloger
 	// 16.1.8 - add VcpkgManifest metadata type for vcpkg manifest support
+	// 16.1.9 - add RubyGemfileLockEntry metadata type for Gemfile.lock dependency relationships
 )

internal/packagemetadata/generated.go

@@ -65,6 +65,7 @@ func AllTypes() []any {
 		pkg.RDescription{},
 		pkg.RpmArchive{},
 		pkg.RpmDBEntry{},
+		pkg.RubyGemfileLockEntry{},
 		pkg.RubyGemspec{},
 		pkg.RustBinaryAuditEntry{},
 		pkg.RustCargoLockEntry{},

internal/packagemetadata/names.go

@@ -80,6 +80,7 @@ var jsonTypes = makeJSONTypes(
 	jsonNames(pkg.DpkgArchiveEntry{}, "dpkg-archive-entry"),
 	jsonNames(pkg.DpkgDBEntry{}, "dpkg-db-entry", "DpkgMetadata"),
 	jsonNames(pkg.ELFBinaryPackageNoteJSONPayload{}, "elf-binary-package-note-json-payload"),
+	jsonNames(pkg.RubyGemfileLockEntry{}, "ruby-gemfile-lock-entry"),
 	jsonNames(pkg.RubyGemspec{}, "ruby-gemspec", "GemMetadata"),
 	jsonNames(pkg.GitHubActionsUseStatement{}, "github-actions-use-statement"),
 	jsonNames(pkg.GolangBinaryBuildinfoEntry{}, "go-module-buildinfo-entry", "GolangBinMetadata", "GolangMetadata"),