Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump the dependencies group across 1 directory with 12 updates #267

Open
wants to merge 1 commit into
base: v2
Choose a base branch
from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 17, 2025

Bumps the dependencies group with 12 updates in the / directory:

Package From To
software.amazon.awssdk:secretsmanager 2.20.93 2.30.21
org.projectlombok:lombok 1.18.28 1.18.36
com.fasterxml.jackson.core:jackson-databind 2.15.2 2.18.2
com.github.spotbugs:spotbugs-annotations 4.7.3 4.9.1
org.apache.maven.plugins:maven-compiler-plugin 3.11.0 3.13.0
org.apache.maven.plugins:maven-source-plugin 3.3.0 3.3.1
org.apache.maven.plugins:maven-javadoc-plugin 3.5.0 3.11.2
org.apache.maven.plugins:maven-checkstyle-plugin 3.3.0 3.6.0
com.github.spotbugs:spotbugs-maven-plugin 4.7.3.5 4.9.1.0
org.jacoco:jacoco-maven-plugin 0.8.10 0.8.12
org.apache.maven.plugins:maven-gpg-plugin 3.1.0 3.2.7
org.sonatype.plugins:nexus-staging-maven-plugin 1.6.13 1.7.0

Updates software.amazon.awssdk:secretsmanager from 2.20.93 to 2.30.21

Updates org.projectlombok:lombok from 1.18.28 to 1.18.36

Changelog

Sourced from org.projectlombok:lombok's changelog.

v1.18.36 (November 15th, 2024)

  • PLATFORM: JDK23 support added.
  • BUGFIX: Eclipse projects using the com.pro-crafting.tools:jasperreports-maven-plugin will now compile.

v1.18.34 (June 28th, 2024)

  • PLATFORM: Added support for Eclipse 2024-06; you'd get some NoSuchMethodError traces in your logs if using @Builder or @Singular prior to this fix. [Issue #3638](projectlombok/lombok#3638).
  • IMPROBABLE BREAKING CHANGE: Lombok now adds @lombok.Generated by default to methods and types it generates. This may result in accidentally increasing your test coverage percentage. [Issue #3667](projectlombok/lombok#3667).
  • IMPROBABLE BREAKING CHANGE: When lombok.config contains lombok.onX.flagUsage = WARNING, from now on warnings will actually be generated if onX is used.[Issue #2848](projectlombok/lombok#2848)
  • BUGFIX: When @SuperBuilder was used on a type with an generic array type, it would error wrong number of type arguments. [Issue #3694](projectlombok/lombok#3694).
  • FEATURE: Lombok generates javadoc for you for most of the methods it adds; with this release, javadoc is also added to generated constructors. [Issue #933](projectlombok/lombok#933).

v1.18.32 (March 20th, 2024)

  • PLATFORM: Initial JDK22 support added.
  • PLAFTORM Added support for Eclipse 2024-03. [Issue #3620](projectlombok/lombok#3620).
  • PLATFORM: Added support for recent versions of eclipse (released Q4 2023 or later or so) which would cause failures in the eclipse logs such as java.lang.NoSuchMethodError: 'java.lang.StringBuffer org.eclipse.jdt…. [Issue #3564](projectlombok/lombok#3564).
  • FEATURE: @Locked has been introduced. Like @Synchronized but with java.util.concurrent.locks locks instead of the synchronized primitive. Thanks, Pim van der Loos for the PR! [Issue #3506](projectlombok/lombok#3506).
  • NECROMANCY: Inlining a generated getter in eclipse would result in eclipse incorrectly replacing calls with @Getter instead of the actual field's name. [Issue #562](projectlombok/lombok#562). This issue is almost old enough to drink. Points for dedication go to Rawi for fixing this one.
  • BUGFIX: When @SuperBuilder was used on a type with an annotated generic type, it would error wrong number of type arguments. [Issue #3592](projectlombok/lombok#3592).
  • BUGFIX: It was possible to create an infinite build loop using @ExtensionMethod. [Issue #3225](projectlombok/lombok#3225).
  • BUGFIX: Using @Getter(lazy=true) would fail if the expression contained a variable called value. [Issue #2917](projectlombok/lombok#2917).
  • BUGFIX: Many lombok features wouldn't work properly on records contained within an outer type unless you explicitly marked it static. [Issue #3497](projectlombok/lombok#3497) [Issue #3559](projectlombok/lombok#3559).
  • BUGFIX: Eclipse projects using the com.pro-crafting.tools:jasperreports-plugin will now compile.
  • BUGFIX: @FieldNameConstants now works when generated fields are involved. [Issue #3529](projectlombok/lombok#3529).
  • IMPROBABLE BREAKING CHANGE: For JSpecify, the package name changed from org.jspecify.nullness to org.jspecify.annotations, which might lead to a different null analysis. [Issue #3608](projectlombok/lombok#3608).

v1.18.30 (September 20th, 2023)

Commits
  • 91d79ff [release] pre-release version bump
  • e8db33a Merge pull request #3768 from tamila-krashtan/fix/with-html
  • 0338705 Revert "[fixes #3116] Add multi round support for mapstruct":
  • 9af596e Fix typo in With.html
  • 3394b6e eclipse downloader: When downloading sources, accept failure.
  • 03cd61a Merge branch 'eclipse-tests-fix'
  • 7a9f3a8 Fix resource management in the eclipse downloader:
  • 87bc91a Merge pull request #3764 from Rawi01/update-index
  • d21d551 Close ZipOutputStream in eclipse dependency downloader
  • 5caea32 [fixes #3761] Update annotation value index
  • Additional commits viewable in compare view

Updates com.fasterxml.jackson.core:jackson-databind from 2.15.2 to 2.18.2

Commits

Updates com.github.spotbugs:spotbugs-annotations from 4.7.3 to 4.9.1

Release notes

Sourced from com.github.spotbugs:spotbugs-annotations's releases.

SpotBugs 4.9.1

CHANGELOG

Added

  • New detector SharedVariableAtomicityDetector for new bug types AT_NONATOMIC_OPERATIONS_ON_SHARED_VARIABLE, AT_NONATOMIC_64BIT_PRIMITIVE and AT_STALE_THREAD_WRITE_OF_PRIMITIVE (See SEI CERT rules VNA00-J, VNA02-J and VNA05-J).
  • New detector FindHiddenMethod for bug type HSM_HIDING_METHOD. This bug is reported whenever a subclass method hides the static method of super class. (See SEI CERT MET07-J).

Fixed

  • Fixed the parsing of generics methods in ThrowingExceptions (#3267)
  • Accept the 1st parameter of java.util.concurrent.CompletableFuture's completeOnTimeout(), getNow() and obtrudeValue() functions as nullable (#1001).
  • Fixed the analysis error when FindReturnRef was checking instructions corresponding to a CFG branch that was optimized away (#3266)
  • Added execute file permission to files in the distribution archive (#3274)
  • Fixed a stack overflow in MultipleInstantiationsOfSingletons when a singleton initializer makes recursive calls (#3280)
  • Fixed NPE in FindReturnRef on inner class fields (#3283)
  • Fixed NP_NULL_ON_SOME_PATH_FROM_RETURN_VALUE false positive when add edu.umd.cs.findbugs.annotations.Nullable (#3243)

CHECKSUM

file checksum (sha256)
spotbugs-4.9.1-javadoc.jar 23ac58ad28f3d0914f0f151ab98b1bc2572b0ea80f14e653086cc82dedb96269
spotbugs-4.9.1-sources.jar 8fe4015f36346bef7ba66b038faad9563f133ad64615e45c7132ef721da5d48f
spotbugs-4.9.1.tgz 4f992d7d204c1b23c031b4282c2e8638bafe91c50fc58324d9dbf71f556687b3
spotbugs-4.9.1.zip f7ee284368d64d33f97e142f33e8251cddeacf366df20853fefa342be281f31a
spotbugs-annotations-4.9.1-javadoc.jar 6dcf2bd7634c56975d851a4edc5c273854b09857efc0ba5c52731fe0deb5b113
spotbugs-annotations-4.9.1-sources.jar 990ad9f3500499a99466b7c1e01284f4f41d1499358e7dc38c8defc59dab114c
spotbugs-annotations.jar 7ff76e691441580bc26589eaf1c3be18a8c01a593e32bcce257c44491c2a61cc
spotbugs-ant-4.9.1-javadoc.jar f661c6055e7bc5667bbbfa596efca02f390ef3fe3744a46219da588125513eda
spotbugs-ant-4.9.1-sources.jar 591073402e4110093a380169acd3f33b26c2f893c2eaed5a6460d9be0b26014e
spotbugs-ant.jar 3a6f453696294d5314e648d4891d35e34315e11cb63c758a1601021cc0d803d1
spotbugs.jar f983f79cdee9d567f05886006cd42ce7489d990fb7175bcc5792541a00057549
test-harness-4.9.1-javadoc.jar d5ac152ea55383267dbe14460d41f36acd6dca7c76d0430b4a422c52f2f8ad2a
test-harness-4.9.1-sources.jar 22688f14ef808cde65cc46e86d41c617fc397fc4967516006a73ce8bad658b9f
test-harness-4.9.1.jar 9bf5bba9546e4f89032006261dd2921a79fc3044e473ee1fa73af870cb43da15
test-harness-core-4.9.1-javadoc.jar 09c0156df759dd15ad98527cdc5dd9faf0e920007a0c9841ad83224fe9f77b51
test-harness-core-4.9.1-sources.jar 13825de35190089490c7e290b52bafe6a9b08ab431177c0191dae9cf2a88a55d
test-harness-core-4.9.1.jar 3c74cc6d2d6f999d403f00f97685587e617d2bf1bfc348bbd0597e785c83feec
test-harness-jupiter-4.9.1-javadoc.jar d62f86e4b2a2162a0c06b545bf52df2350a95a3917c692fb4ea6970aeaf5eb96
test-harness-jupiter-4.9.1-sources.jar 0aefbc5c8bd406e5dc0b1d59bc3afc6889c02010d486b22242f4f19a1a935800
test-harness-jupiter-4.9.1.jar 0e9509de32f8fbc94cf088dbee80394fa93807a766532568e652cd622ce737c8

SpotBugs 4.9.0

CHANGELOG

Added

  • Updated the SuppressFBWarnings annotation to support finer grained bug suppressions (#3102)
  • SimpleDateFormat, DateTimeFormatter, FastDateFormat string check for bad combinations of flag formatting (#637)
  • New detector ResourceInMultipleThreadsDetector and introduced new bug type:
    • AT_UNSAFE_RESOURCE_ACCESS_IN_THREAD is reported in case of unsafe resource access in multiple threads.

Fixed

  • Do not consider Records as Singletons (#2981)

... (truncated)

Changelog

Sourced from com.github.spotbugs:spotbugs-annotations's changelog.

4.9.1 - 2025-02-02

Added

  • New detector SharedVariableAtomicityDetector for new bug types AT_NONATOMIC_OPERATIONS_ON_SHARED_VARIABLE, AT_NONATOMIC_64BIT_PRIMITIVE and AT_STALE_THREAD_WRITE_OF_PRIMITIVE (See SEI CERT rules VNA00-J, VNA02-J and VNA05-J).
  • New detector FindHiddenMethod for bug type HSM_HIDING_METHOD. This bug is reported whenever a subclass method hides the static method of super class. (See SEI CERT MET07-J).

Fixed

  • Fixed the parsing of generics methods in ThrowingExceptions (#3267)
  • Accept the 1st parameter of java.util.concurrent.CompletableFuture's completeOnTimeout(), getNow() and obtrudeValue() functions as nullable (#1001).
  • Fixed the analysis error when FindReturnRef was checking instructions corresponding to a CFG branch that was optimized away (#3266)
  • Added execute file permission to files in the distribution archive (#3274)
  • Fixed a stack overflow in MultipleInstantiationsOfSingletons when a singleton initializer makes recursive calls (#3280)
  • Fixed NPE in FindReturnRef on inner class fields (#3283)
  • Fixed NP_NULL_ON_SOME_PATH_FROM_RETURN_VALUE false positive when add edu.umd.cs.findbugs.annotations.Nullable (#3243)

4.9.0 - 2025-01-15

Added

  • Updated the SuppressFBWarnings annotation to support finer grained bug suppressions (#3102)
  • SimpleDateFormat, DateTimeFormatter, FastDateFormat string check for bad combinations of flag formatting (#637)
  • New detector ResourceInMultipleThreadsDetector and introduced new bug type:
    • AT_UNSAFE_RESOURCE_ACCESS_IN_THREAD is reported in case of unsafe resource access in multiple threads.

Fixed

  • Do not consider Records as Singletons (#2981)
  • Keep a maximum of 10000 cached analysis entries for plugin's analysis engines (#3025)
  • Only report MC_OVERRIDABLE_METHOD_CALL_IN_READ_OBJECT when calling own methods (#2957)
  • Check the actual caught exceptions (instead of their common type) when analyzing multi-catch blocks (#2968)
  • System property findbugs.refcomp.reportAll is now being used. For some new conditions, it will emit an experimental warning (#2988)
  • -version flag prints the version to the standard output (#2797)
  • Revert the changes from (#2894) to get HTML stylesheets to work again (#2969)
  • Fix FP SING_SINGLETON_GETTER_NOT_SYNCHRONIZED report when the synchronization is in a called method (#3045)
  • Let BetterCFGBuilder2.isPEI handle dup2 bytecode used by Spring AOT (#3059)
  • Detect failure to close RocksDB's ReadOptions (#3069)
  • Fix FP EI_EXPOSE_REP when there are multiple immutable assignments (#3023)
  • Fixed false positive NP_NONNULL_FIELD_NOT_INITIALIZED_IN_CONSTRUCTOR for Kotlin, handle Kotlin's Intrinsics.checkNotNullParameter() (#3094)
  • Fixed some CWE mappings (#3124)
  • Recognize some classes as immutable, fixing EI_EXPOSE and MS_EXPOSE FPs (#3137)
  • Do not report UWF_FIELD_NOT_INITIALIZED_IN_CONSTRUCTOR for fields initialized in method annotated with TestNG's @​BeforeClass. (#3152)
  • Fixed detector FindReturnRef not finding references exposed from nested and inner classes (#2042)
  • Fix call graph, include non-parametric void methods (#3160)
  • Fix multiple reporting of identical bugs messing up statistics (#3185)
  • Added missing comma between line number and confidence when describing matching and mismatching bugs for tests (#3187)
  • Fixed method matchers with array types (#3203)
  • Fix SARIF report's message property in Exception to meet the standard (#3197)
  • Fixed FI_FINALIZER_NULLS_FIELDS FPs for functions called finalize() but not with the correct signature. (#3207)
  • Fixed an error in the detection of bridge methods causing analysis crashes (#3208)
  • Fixed detector ThrowingExceptions by removing false positive reports, such as synthetic methods (lambdas), methods which inherited their exception specifications and methods which call throwing methods (#2040)
  • Do not report DP_DO_INSIDE_DO_PRIVILEGED, DP_CREATE_CLASSLOADER_INSIDE_DO_PRIVILEGED and USC_POTENTIAL_SECURITY_CHECK_BASED_ON_UNTRUSTED_SOURCE in code targeting Java 17 and above, since it advises the usage of deprecated method (#1515).
  • Fixed a RV_RETURN_VALUE_IGNORED_NO_SIDE_EFFECT false positive for a builder delegating to another builder (#3235)

Cleanup

... (truncated)

Commits
  • b1bd255 release v4.9.1
  • 7587254 Fix bad end of file markers / ignore equo gradle plugin migration for eclipse...
  • c1094dd Update .gitignore adding .vscode
  • b813eb4 Correct changelog for 4.9.1 release
  • b686b86 Add new detector for atomicity related issues (#3224)
  • a959257 Move spotbugs annotations to java 11 - it was already as it ignored the setti...
  • a9f0806 New detector for MET07-J (#2467)
  • 7cdc988 Fix deprecate space based equals in gradle files (#3293)
  • 3321564 Fixed NP_NULL_ON_SOME_PATH_FROM_RETURN_VALUE false positive when add edu.umd....
  • 823e400 change gha macos-latest to macos-13 (#3214)
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-compiler-plugin from 3.11.0 to 3.13.0

Release notes

Sourced from org.apache.maven.plugins:maven-compiler-plugin's releases.

3.13.0

🚀 New features and improvements

📦 Dependency updates

📝 Documentation updates

👻 Maintenance

3.12.1

🐛 Bug Fixes

📦 Dependency updates

3.12.0

🚀 New features and improvements

... (truncated)

Commits
  • a1415aa [maven-release-plugin] prepare release maven-compiler-plugin-3.13.0
  • b2b9196 [MCOMPILER-574] Propagate cause of exception in AbstractCompilerMojo
  • 6d2ce5a [MCOMPILER-584] Refresh page - Using Non-Javac Compilers
  • eebad60 [MCOMPILER-585] Refresh plugins versions in ITs
  • ceacf68 [MCOMPILER-582] Automatic detection of release option for JDK < 9
  • 110293f [MCOMPILER-583] Require Maven 3.6.3
  • 90131df [MCOMPILER-575] Bump plexusCompilerVersion from 2.14.2 to 2.15.0 (#227)
  • 74cfc72 [MCOMPILER-548] JDK 21 throws annotations processing warning that can not be ...
  • f85aa27 Bump apache/maven-gh-actions-shared from 3 to 4
  • d59ef49 extract Maven 3.3.1 specific method call
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-source-plugin from 3.3.0 to 3.3.1

Commits
  • f80596e [maven-release-plugin] prepare release maven-source-plugin-3.3.1
  • 7626998 Bump apache/maven-gh-actions-shared from 3 to 4
  • 83c963c Bump org.apache.maven.plugins:maven-plugins from 39 to 41 (#18)
  • 40ae495 Bump org.codehaus.plexus:plexus-archiver from 4.8.0 to 4.9.1 (#20)
  • 073462b Bump org.apache.maven:maven-archiver from 3.6.0 to 3.6.1 (#21)
  • 0b1c823 Fix typos in AbstractSourceJarMojo exception
  • 099c65a [MSOURCES-142] Bump org.codehaus.plexus:plexus-archiver from 4.7.1 to 4.8.0 (...
  • 1edeea4 [MSOURCES-139] Fix typo in AbstractSourceJarMojo exception
  • 436966e [maven-release-plugin] prepare for next development iteration
  • See full diff in compare view

Updates org.apache.maven.plugins:maven-javadoc-plugin from 3.5.0 to 3.11.2

Release notes

Sourced from org.apache.maven.plugins:maven-javadoc-plugin's releases.

3.11.2

🚀 New features and improvements

📦 Dependency updates

👻 Maintenance

maven-javadoc-plugin-3.11.1

What's Changed

Full Changelog: apache/maven-javadoc-plugin@maven-javadoc-plugin-3.11.0...maven-javadoc-plugin-3.11.1

maven-javadoc-plugin-3.10.1

What's Changed

Full Changelog: apache/maven-javadoc-plugin@maven-javadoc-plugin-3.10.0...maven-javadoc-plugin-3.10.1

maven-javadoc-plugin-3.10.0

❗ NOTICE

Due to Doxia 2.x stack maven-site-plugin 3.20+ is requred.

What's Changed

... (truncated)

Commits
  • 44cbab7 [maven-release-plugin] prepare release maven-javadoc-plugin-3.11.2
  • 3de45d8 use github for scm
  • 45ccf06 Bump com.thoughtworks.qdox:qdox from 2.1.0 to 2.2.0
  • 530fa01 [MJAVADOC-823] legacyMode keeps using module-info.java (-sourcedirectory stil...
  • 3a16d92 Bump commons-io:commons-io from 2.17.0 to 2.18.0
  • 69c1ba7 Migrate from Plexus to Sisu Guice (#341)
  • 39857ea Remove usages of deprecated ReaderFactory class (#339)
  • 314203a [MJAVADOC-814] handle parameters such packages with multi lines (#337)
  • 3bb982d refactor: Replace Plexus AbstractLogEnabled with SLF4J (#338)
  • 76826c8 [MJAVADOC-822] skippedModules should be more scalable and support regex (#336)
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-checkstyle-plugin from 3.3.0 to 3.6.0

Commits
  • dd1abd9 [maven-release-plugin] prepare release maven-checkstyle-plugin-3.6.0
  • 9ccb06e fix
  • 6ac89b8 [MCHECKSTYLE-452] Upgrade to Doxia 2.0.0 GA Stack
  • ff1a1b7 Bump org.apache.commons:commons-lang3 from 3.16.0 to 3.17.0
  • 13e16c5 Remove unecessary test dependency on plexus-container-default
  • a7c962a [maven-release-plugin] prepare for next development iteration
  • 868abc9 [maven-release-plugin] prepare release maven-checkstyle-plugin-3.5.0
  • 9043f8a [MCHECKSTYLE-446] Dynamically calculate xrefLocation/xrefTestLocation
  • 0e7bd00 [MCHECKSTYLE-445] Upgrade to Doxia 2.0.0 Milestone Stack
  • b92666d Bump org.apache.maven.plugins:maven-plugins from 42 to 43
  • Additional commits viewable in compare view

Updates com.github.spotbugs:spotbugs-maven-plugin from 4.7.3.5 to 4.9.1.0

Release notes

Sourced from com.github.spotbugs:spotbugs-maven-plugin's releases.

Spotbugs Maven Plugin 4.9.1.0

  • Supports spotbugs 4.9.1

build

  • Move plugin configuration from reporting section to plugin management

Spotbugs Maven Plugin 4.9.0.0

Project

  • Requires java 11 now
  • Support spotbugs 4.9.0
  • Update plugins / dependencies
  • cleanup some output logging that occurs during usage
  • Use more concrete object definitions instead of 'def'
  • Use Path.of instead of Paths.get
  • Update javadoc that default character encoding is utf-8 not the system default. This has not been true in a very long time.

Build 33

  • Add information on how to override with newer spotbugs as its rare that the maven plugin has any specific changes related to the spotbugs core updates.
  • github action updates
  • restructure entire pom to make use of dependency management to make it more clear we ware overriding libraries rather than using then and check dependency analyzer to see its decreasing invalid setup. This is intended to help when moving to doxia 2 which is still in progress.
  • Use more dependency management setup
  • reduce spotbugs variables so that renovate updates in fact update fully
  • override any plugins from parent that now require doxia 2 back to their doxia 1 counterparts
  • avoid transfer progress output throughout
  • cleanup many warnings inside integration tests

note: Before this release, we had been forked off the original findbugs-maven-plugin. As that plugin points back here and give so many commits ahead, github was used to break the fork and retain all information otherwise which also updated all forks.

Spotbugs Maven Plugin 4.8.6.6

  • Cleanup groovy code
  • Cleanup character encoding
  • Update deprecated maven calls
  • Groovy moved to 4.0.24

Compatibility remains with 4.8.6 of spotbugs

Spotbugs Maven Plugin 4.8.6.5

  • Moved most 'read' only maven injections to read data from maven session instead to overcome many deprecated usage. This puts it on their api and thus if things are internally deprecated, its then maven's issue rather than this plugin to figure out.
  • remove obsolete script source roots as no longer support in maven 4 and technically I've never seen them used. Please let me know if this negatively affects you as there are other manually coded items like kotlin / groovy that are in the code there so scripts could be manually added back.
  • Remove some of the read only attributes for maven injection that were not actually used.
  • More def to object type
  • Various lib / plugin updates
  • Enable partial formatting (mostly removing trailing whitespace)

Compatibility remains with 4.8.6 of spotbugs

Spotbugs Maven Plugin 4.8.6.4

  • Groovy set to 4.0.23
  • Drop maven site plugin 3.6 and before support.

... (truncated)

Commits
  • a94d831 [maven-release-plugin] prepare release spotbugs-maven-plugin-4.9.1.0
  • fa361ca [pom] Formatting
  • 5f9e363 [pom] Bump project to spotbugs 4.9.1.0-SNAPSHOT
  • 557df81 Merge pull request #986 from spotbugs/renovate/spotbugs.version
  • 334187e Update spotbugs.version to v4.9.1
  • 0711f0b Merge pull request #997 from spotbugs/release/4.9.0
  • 60cfbe0 [pom] Move reporting configuration to plugin management
  • 95a8eea [maven-release-plugin] prepare for next development iteration
  • bda340a [maven-release-plugin] prepare release spotbugs-maven-plugin-4.9.0.0
  • c1dd4d9 Merge pull request #995 from spotbugs/renovate/beanutils.version
  • Additional commits viewable in compare view

Updates org.jacoco:jacoco-maven-plugin from 0.8.10 to 0.8.12

Release notes

Sourced from org.jacoco:jacoco-maven-plugin's releases.

0.8.12

New Features

  • JaCoCo now officially supports Java 22 (GitHub #1596).
  • Experimental support for Java 23 class files (GitHub #1553).

Fixed bugs

  • Branches added by the Kotlin compiler for functions with default arguments and having more than 32 parameters are filtered out during generation of report (GitHub #1556).
  • Branch added by the Kotlin compiler version 1.5.0 and above for reading from lateinit property is filtered out during generation of report (GitHub #1568).

Non-functional Changes

  • JaCoCo now depends on ASM 9.7 (GitHub #1600).

0.8.11

New Features

  • JaCoCo now officially supports Java 21 (GitHub #1520).
  • Experimental support for Java 22 class files (GitHub #1479).
  • Part of bytecode generated by the Java compilers for exhaustive switch expressions is filtered out during generation of report (GitHub #1472).
  • Part of bytecode generated by the Java compilers for record patterns is filtered out during generation of report (GitHub #1473).

Fixed bugs

  • Instrumentation should not cause VerifyError when the last local variable of method parameters is overridden in the method body to store a value of type long or double (GitHub #893).
  • Restore exec file compatibility with versions from 0.7.5 to 0.8.8 in case of class files with zero line numbers (GitHub #1492).

Non-functional Changes

  • jacoco-maven-plugin now requires at least Java 8 (GitHub #1466, #1468).
  • JaCoCo build now requires at least Maven 3.5.4 (GitHub #1467).
  • Maven 3.9.2 should not produce warnings for jacoco-maven-plugin (GitHub #1468).
  • JaCoCo build now requires JDK 17 (GitHub #1482).
  • JaCoCo now depends on ASM 9.6 (GitHub #1518).
Commits

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
Bumps the dependencies group with 12 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| software.amazon.awssdk:secretsmanager | `2.20.93` | `2.30.21` |
| [org.projectlombok:lombok](https://github.com/projectlombok/lombok) | `1.18.28` | `1.18.36` |
| [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson) | `2.15.2` | `2.18.2` |
| [com.github.spotbugs:spotbugs-annotations](https://github.com/spotbugs/spotbugs) | `4.7.3` | `4.9.1` |
| [org.apache.maven.plugins:maven-compiler-plugin](https://github.com/apache/maven-compiler-plugin) | `3.11.0` | `3.13.0` |
| [org.apache.maven.plugins:maven-source-plugin](https://github.com/apache/maven-source-plugin) | `3.3.0` | `3.3.1` |
| [org.apache.maven.plugins:maven-javadoc-plugin](https://github.com/apache/maven-javadoc-plugin) | `3.5.0` | `3.11.2` |
| [org.apache.maven.plugins:maven-checkstyle-plugin](https://github.com/apache/maven-checkstyle-plugin) | `3.3.0` | `3.6.0` |
| [com.github.spotbugs:spotbugs-maven-plugin](https://github.com/spotbugs/spotbugs-maven-plugin) | `4.7.3.5` | `4.9.1.0` |
| [org.jacoco:jacoco-maven-plugin](https://github.com/jacoco/jacoco) | `0.8.10` | `0.8.12` |
| [org.apache.maven.plugins:maven-gpg-plugin](https://github.com/apache/maven-gpg-plugin) | `3.1.0` | `3.2.7` |
| org.sonatype.plugins:nexus-staging-maven-plugin | `1.6.13` | `1.7.0` |



Updates `software.amazon.awssdk:secretsmanager` from 2.20.93 to 2.30.21

Updates `org.projectlombok:lombok` from 1.18.28 to 1.18.36
- [Changelog](https://github.com/projectlombok/lombok/blob/master/doc/changelog.markdown)
- [Commits](projectlombok/lombok@v1.18.28...v1.18.36)

Updates `com.fasterxml.jackson.core:jackson-databind` from 2.15.2 to 2.18.2
- [Commits](https://github.com/FasterXML/jackson/commits)

Updates `com.github.spotbugs:spotbugs-annotations` from 4.7.3 to 4.9.1
- [Release notes](https://github.com/spotbugs/spotbugs/releases)
- [Changelog](https://github.com/spotbugs/spotbugs/blob/master/CHANGELOG.md)
- [Commits](spotbugs/spotbugs@4.7.3...4.9.1)

Updates `org.apache.maven.plugins:maven-compiler-plugin` from 3.11.0 to 3.13.0
- [Release notes](https://github.com/apache/maven-compiler-plugin/releases)
- [Commits](apache/maven-compiler-plugin@maven-compiler-plugin-3.11.0...maven-compiler-plugin-3.13.0)

Updates `org.apache.maven.plugins:maven-source-plugin` from 3.3.0 to 3.3.1
- [Release notes](https://github.com/apache/maven-source-plugin/releases)
- [Commits](apache/maven-source-plugin@maven-source-plugin-3.3.0...maven-source-plugin-3.3.1)

Updates `org.apache.maven.plugins:maven-javadoc-plugin` from 3.5.0 to 3.11.2
- [Release notes](https://github.com/apache/maven-javadoc-plugin/releases)
- [Commits](apache/maven-javadoc-plugin@maven-javadoc-plugin-3.5.0...maven-javadoc-plugin-3.11.2)

Updates `org.apache.maven.plugins:maven-checkstyle-plugin` from 3.3.0 to 3.6.0
- [Commits](apache/maven-checkstyle-plugin@maven-checkstyle-plugin-3.3.0...maven-checkstyle-plugin-3.6.0)

Updates `com.github.spotbugs:spotbugs-maven-plugin` from 4.7.3.5 to 4.9.1.0
- [Release notes](https://github.com/spotbugs/spotbugs-maven-plugin/releases)
- [Commits](spotbugs/spotbugs-maven-plugin@spotbugs-maven-plugin-4.7.3.5...spotbugs-maven-plugin-4.9.1.0)

Updates `org.jacoco:jacoco-maven-plugin` from 0.8.10 to 0.8.12
- [Release notes](https://github.com/jacoco/jacoco/releases)
- [Commits](jacoco/jacoco@v0.8.10...v0.8.12)

Updates `org.apache.maven.plugins:maven-gpg-plugin` from 3.1.0 to 3.2.7
- [Release notes](https://github.com/apache/maven-gpg-plugin/releases)
- [Commits](apache/maven-gpg-plugin@maven-gpg-plugin-3.1.0...maven-gpg-plugin-3.2.7)

Updates `org.sonatype.plugins:nexus-staging-maven-plugin` from 1.6.13 to 1.7.0

---
updated-dependencies:
- dependency-name: software.amazon.awssdk:secretsmanager
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.projectlombok:lombok
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: com.fasterxml.jackson.core:jackson-databind
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: com.github.spotbugs:spotbugs-annotations
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.apache.maven.plugins:maven-compiler-plugin
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.apache.maven.plugins:maven-source-plugin
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.apache.maven.plugins:maven-javadoc-plugin
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.apache.maven.plugins:maven-checkstyle-plugin
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: com.github.spotbugs:spotbugs-maven-plugin
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.jacoco:jacoco-maven-plugin
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.apache.maven.plugins:maven-gpg-plugin
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.sonatype.plugins:nexus-staging-maven-plugin
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot requested a review from a team as a code owner February 17, 2025 21:35
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Feb 17, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file java Pull requests that update Java code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

0 participants