Update Automated Checks

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
org.pitest:pitest (source)	1.14.2 -> 1.17.3
jacoco (source)	0.8.10 -> 0.8.12
org.owasp.dependencycheck	10.0.3 -> 10.0.4
info.solidsoft.pitest	1.9.11 -> 1.15.0

---

Release Notes

hcoles/pitest (org.pitest:pitest)

v1.17.3

Compare Source

• #​1369 Dry Run Support

Maven users can now gather coverage information and generate mutants, but skip the mutant analysis stage by running setting the 'pit.dryRun' flag to true.

v1.17.2

Compare Source

• #​1362 Exclude lambdas in methods excluded by annotation (thanks @​see-quick)

v1.17.1

Compare Source

• #​1353 Warn about future SCM goal removal
• #​1355 Upgrade ASM for java 24 support
• #​1359 Remove use of reflection based toString generator
• #​1361 Initial support for cross module tests in maven

v1.17.0

Compare Source

• #​1348 Extend transformation extension point
• #​1349 Improve powermock stability

v1.16.3

Compare Source

• #​1345 Improved delayed execution detection in static initialization code
• #​1347 Auto add standard kotlin source dirs for maven projects

v1.16.2

Compare Source

#​1340 Show covering tests for surviving mutants in html report (thanks @​vivganes)
#​1342 / #​1343 Fix misleading logging of history paths (thanks @​vivganes)
#​1344 Mutate delayed execution code in enums and singletons

v1.16.1

Compare Source

#​1329 Prevent version clashes with aggregate goal when plugins use jackson

v1.16.0

Compare Source

• #​1311 - Include unmodifiable collections stored directly to fields in the +funmodifiablecollection filter for defensive code
• #​1319 - Use environment variables from surefire config
• #​1322 - Automatically add -ea to enable assertions
• #​1321 - Expand BuildVerifier interface

Api change in #​1321 is backwards compatible, but plugins written against 1.16.0 may not work with earlier versions.

v1.15.8

Compare Source

#​1310 Filter mutations to Collections.unmodifiable*
#​1309 Replace fields in argLines imported from surefire config
#​1308 Bump maven vcs versions

The filtering for #​1310 is off by default. To activate it add the filter string +funmodifiablecollection.

#​1309 adds a new maven property parseSurefireArgLine. This is set to true by default, but surefire argline parsing can now be disabled by setting it to false.

v1.15.7

Compare Source

#​1305 Coverage not recorded for code in packages name com.sun*

A filter intended to pickup legacy JDK classes in the "com.sun.*" package was missing a ', resulting in no code coverage being registered if the code under test happened to be in a package starting with "sun".

v1.15.6

Compare Source

• #​1295 temporarily remove dynamic call tracking

Invoke dynamic call tracking for static initializer code will be reintroduced when additional logic to suppress mutation filtering for delayed execution code has been implemented.

v1.15.5

Compare Source

• #​1292 Args lines taken from surefire config do not have properties replaced

v1.15.4

Compare Source

• #​1288 - New extension point to allow custom coverage export formats
• #​1289 - Parse argline configuration from surefire configuration
• #​1274 Follow invoke dynamic calls when detecting static initializer only methods

Note, maven users who have previously needed to duplicate argline parameters between surefire and pitest's jvmArgs and argline parameters may need to adjust their configuration when upgrading. Entries supplied to surefire will now automatically be added to pitest.

v1.15.3

Compare Source

• #​1271 - Double check thread status before marking minion as dead

v1.15.2

Compare Source

• #​1268 - Filter Lombok NonNull checks
• #​1267 - Expand test api to allow reporting of errors during test scanning

#​1267 will ensure that previously hidden errors encountered by the JUnit5 plugin will now be reported. This is a backwards compatible api change. It will have no effect until the JUnit5 plugin is updated to use the expanded api. The updated plugin will not be compatible with earlier versions of pitest.

v1.15.1

Compare Source

• #​1260 Upgrade to ASM 9.6 for Java 22 support
• #​1261 Do not error on pitest history files < 1.15.0

v1.15.0

Compare Source

• #​1253 suppress coverage stats when history test reduction enabled
• #​1252 add extrafeatures param for maven to allow features to be added on commandline without overwriting existing list
• #​1251 expand history interfaces (breaking change)
• #​1250 improve error message when failing to parse feature strings
• #​1248 performance tweak - delay test class identification
• #​1247 legacy code removal

#​1251 updates several existing interfaces. Plugins (eg the arcmutate kotlin plugin) using these interfaces must also be updated when upgrading.

v1.14.4

Compare Source

• #​1246 Priotitise previous killing test when using history files

v1.14.3

Compare Source

• #​1239 Support comma seperated excludedGroups (thanks @​johnathana)
• #​1243 Explictly order classpath in history file to ensure consitency between runs
• #​1245 Prevent confusing logging of dummy incremental analysis runs

jacoco/jacoco (jacoco)

v0.8.12: 0.8.12

New Features

• JaCoCo now officially supports Java 22 (GitHub #​1596).
• Experimental support for Java 23 class files (GitHub #​1553).

Fixed bugs

• Branches added by the Kotlin compiler for functions with default arguments and having more than 32 parameters are filtered out during generation of report (GitHub #​1556).
• Branch added by the Kotlin compiler version 1.5.0 and above for reading from lateinit property is filtered out during generation of report (GitHub #​1568).

Non-functional Changes

• JaCoCo now depends on ASM 9.7 (GitHub #​1600).

v0.8.11: 0.8.11

New Features

• JaCoCo now officially supports Java 21 (GitHub #​1520).
• Experimental support for Java 22 class files (GitHub #​1479).
• Part of bytecode generated by the Java compilers for exhaustive switch expressions is filtered out during generation of report (GitHub #​1472).
• Part of bytecode generated by the Java compilers for record patterns is filtered out during generation of report (GitHub #​1473).

Fixed bugs

• Instrumentation should not cause VerifyError when the last local variable of method parameters is overridden in the method body to store a value of type long or double (GitHub #​893).
• Restore exec file compatibility with versions from 0.7.5 to 0.8.8 in case of class files with zero line numbers (GitHub #​1492).

Non-functional Changes

• jacoco-maven-plugin now requires at least Java 8 (GitHub #​1466, #​1468).
• JaCoCo build now requires at least Maven 3.5.4 (GitHub #​1467).
• Maven 3.9.2 should not produce warnings for jacoco-maven-plugin (GitHub #​1468).
• JaCoCo build now requires JDK 17 (GitHub #​1482).
• JaCoCo now depends on ASM 9.6 (GitHub #​1518).

---

Configuration

📅 Schedule: Branch creation - "after 7am and before 11am every weekday" in timezone Europe/London, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

CCD diff report

No change

[github-actions]

Integration Tests results

   82 files  ±0     82 suites  ±0   9m 18s ⏱️ -1s
1 425 tests ±0  1 417 ✅ ±0  8 💤 ±0  0 ❌ ±0 
1 426 runs  ±0  1 418 ✅ ±0  8 💤 ±0  0 ❌ ±0 

Results for commit 7dc65a0. ± Comparison against base commit 4b84049.

This pull request removes 15 and adds 15 tests. Note that renamed tests count towards both.

uk.gov.hmcts.reform.sscs.tyanotifications.config.BundledNotificationsConfigTestIt ‑ given_bundledLetters_should_notHaveTemplate(DIRECTION_ISSUED) [0]
uk.gov.hmcts.reform.sscs.tyanotifications.config.BundledNotificationsConfigTestIt ‑ given_bundledLetters_should_notHaveTemplate(DIRECTION_ISSUED_WELSH) [2]
uk.gov.hmcts.reform.sscs.tyanotifications.config.BundledNotificationsConfigTestIt ‑ given_bundledLetters_should_notHaveTemplate(LIBERTY_TO_APPLY_REFUSED) [1]
uk.gov.hmcts.reform.sscs.tyanotifications.config.BundledNotificationsConfigTestIt ‑ given_bundledLetters_should_notHaveTemplate(PROCESS_AUDIO_VIDEO) [8]
uk.gov.hmcts.reform.sscs.tyanotifications.config.BundledNotificationsConfigTestIt ‑ given_bundledLetters_should_notHaveTemplate(PROCESS_AUDIO_VIDEO_WELSH) [7]
uk.gov.hmcts.reform.sscs.tyanotifications.config.BundledNotificationsConfigTestIt ‑ given_bundledLetters_should_notHaveTemplate(SET_ASIDE_GRANTED) [4]
uk.gov.hmcts.reform.sscs.tyanotifications.config.BundledNotificationsConfigTestIt ‑ given_bundledLetters_should_notHaveTemplate(SET_ASIDE_REFUSED) [3]
uk.gov.hmcts.reform.sscs.tyanotifications.config.BundledNotificationsConfigTestIt ‑ given_bundledLetters_should_notHaveTemplate(SOR_EXTEND_TIME) [9]
uk.gov.hmcts.reform.sscs.tyanotifications.config.BundledNotificationsConfigTestIt ‑ given_bundledLetters_should_notHaveTemplate(SOR_REFUSED) [6]
uk.gov.hmcts.reform.sscs.tyanotifications.tya.NotificationItForReviewConfidentialityRequestTest ‑ givenAppellantConfidentialityRequest_shouldSendConfidentialityLetter(DatedRequestOutcome[requestOutcome=granted, date=2025-01-03]) [0]
…

uk.gov.hmcts.reform.sscs.tyanotifications.config.BundledNotificationsConfigTestIt ‑ given_bundledLetters_should_notHaveTemplate(DIRECTION_ISSUED) [6]
uk.gov.hmcts.reform.sscs.tyanotifications.config.BundledNotificationsConfigTestIt ‑ given_bundledLetters_should_notHaveTemplate(DIRECTION_ISSUED_WELSH) [4]
uk.gov.hmcts.reform.sscs.tyanotifications.config.BundledNotificationsConfigTestIt ‑ given_bundledLetters_should_notHaveTemplate(LIBERTY_TO_APPLY_REFUSED) [2]
uk.gov.hmcts.reform.sscs.tyanotifications.config.BundledNotificationsConfigTestIt ‑ given_bundledLetters_should_notHaveTemplate(PROCESS_AUDIO_VIDEO) [0]
uk.gov.hmcts.reform.sscs.tyanotifications.config.BundledNotificationsConfigTestIt ‑ given_bundledLetters_should_notHaveTemplate(PROCESS_AUDIO_VIDEO_WELSH) [9]
uk.gov.hmcts.reform.sscs.tyanotifications.config.BundledNotificationsConfigTestIt ‑ given_bundledLetters_should_notHaveTemplate(SET_ASIDE_GRANTED) [8]
uk.gov.hmcts.reform.sscs.tyanotifications.config.BundledNotificationsConfigTestIt ‑ given_bundledLetters_should_notHaveTemplate(SET_ASIDE_REFUSED) [7]
uk.gov.hmcts.reform.sscs.tyanotifications.config.BundledNotificationsConfigTestIt ‑ given_bundledLetters_should_notHaveTemplate(SOR_EXTEND_TIME) [1]
uk.gov.hmcts.reform.sscs.tyanotifications.config.BundledNotificationsConfigTestIt ‑ given_bundledLetters_should_notHaveTemplate(SOR_REFUSED) [3]
uk.gov.hmcts.reform.sscs.tyanotifications.tya.NotificationItForReviewConfidentialityRequestTest ‑ givenAppellantConfidentialityRequest_shouldSendConfidentialityLetter(DatedRequestOutcome[requestOutcome=granted, date=2025-01-06]) [0]
…