From f9ab06d305bb6721df5e3c9abbb748b8ab971335 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 7 Nov 2024 17:02:59 -0500
Subject: [PATCH] Bump com.google.errorprone:error_prone_core from 2.32.0 to
 2.35.1 (#369)

Bumps
[com.google.errorprone:error_prone_core](https://github.com/google/error-prone)
from 2.32.0 to 2.35.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/google/error-prone/releases">com.google.errorprone:error_prone_core's
releases</a>.</em></p>
<blockquote>
<h2>Error Prone 2.35.1</h2>
<p>Error Prone's dependency on protobuf has been downgraded to 3.25.5
for this release.</p>
<p>Version 3.25.5 of protobuf still fixes CVE-2024-7254. This release is
provided for users who aren't ready to update to 4.x, see also <a
href="https://redirect.github.com/google/error-prone/issues/4584">#4584</a>
and <a
href="https://redirect.github.com/google/error-prone/issues/4634">#4634</a>.
Future versions of Error Prone will upgrade back to protobuf 4.x.</p>
<p>Full changelog: <a
href="https://github.com/google/error-prone/compare/v2.35.0...v2.35.1">https://github.com/google/error-prone/compare/v2.35.0...v2.35.1</a></p>
<h2>Error Prone  2.35.0</h2>
<p>Changes:</p>
<ul>
<li>Fix handling of <code>\s</code> before the trailing delimiter in <a
href="https://errorprone.info/bugpattern/MisleadingEscapedSpace"><code>MisleadingEscapedSpace</code></a></li>
<li><a
href="https://errorprone.info/bugpattern/TimeUnitMismatch"><code>TimeUnitMismatch</code></a>
improvements: handle binary trees, consider trees like <code>fooSeconds
* 1000</code> to have units of millis</li>
</ul>
<p>New checks:</p>
<ul>
<li><a
href="https://errorprone.info/bugpattern/JavaDurationGetSecondsToToSeconds"><code>JavaDurationGetSecondsToToSeconds</code></a>:
Prefer <code>duration.toSeconds()</code> over
<code>duration.getSeconds()</code></li>
</ul>
<p>Full changelog: <a
href="https://github.com/google/error-prone/compare/v2.34.0...v2.35.0">https://github.com/google/error-prone/compare/v2.34.0...v2.35.0</a></p>
<h2>Error Prone 2.34.0</h2>
<p>Changes:</p>
<ul>
<li>Passing the javac flag <code>--should-stop=ifError=FLOW</code> is
now required when running Error Prone (<a
href="https://redirect.github.com/google/error-prone/issues/4595">#4595</a>)</li>
<li>The <code>MemberName</code> check was renamed to <a
href="https://errorprone.info/bugpattern/IdentifierName"><code>IdentifierName</code></a></li>
</ul>
<p>New checks:</p>
<ul>
<li><a
href="https://errorprone.info/bugpattern/FutureTransformAsync"><code>FutureTransformAsync</code></a>:
The usage of transformAsync is not necessary when all the return values
of the transformation function are immediate futures.</li>
<li><a
href="https://errorprone.info/bugpattern/MisformattedTestData"><code>MisformattedTestData</code></a>:
Reformats Java source code inside Error Prone test cases.</li>
<li><a
href="https://errorprone.info/bugpattern/MisleadingEscapedSpace"><code>MisleadingEscapedSpace</code></a>:
Using <code>\s</code> anywhere except at the end of a line in a text
block is potentially misleading.</li>
<li><a
href="https://errorprone.info/bugpattern/ThrowIfUncheckedKnownUnchecked"><code>ThrowIfUncheckedKnownUnchecked</code></a>:
<code>throwIfUnchecked(knownUnchecked)</code> is equivalent to
<code>throw knownUnchecked</code>.</li>
</ul>
<p>Closed issues: <a
href="https://redirect.github.com/google/error-prone/issues/4595">#4595</a>,
<a
href="https://redirect.github.com/google/error-prone/issues/4598">#4598</a>,
<a
href="https://redirect.github.com/google/error-prone/issues/4620">#4620</a></p>
<p>Full changelog: <a
href="https://github.com/google/error-prone/compare/v2.33.0...v2.34.0">https://github.com/google/error-prone/compare/v2.33.0...v2.34.0</a></p>
<h2>Error Prone 2.33.0</h2>
<p>Similar to release <a
href="https://github.com/google/error-prone/releases/v2.32.0">2.32.0</a>,
the minimum supported JDK version to run Error Prone is JDK 17 (<a
href="https://redirect.github.com/google/error-prone/issues/3803">#3803</a>).
Using Error Prone to compile code that is deployed to earlier versions
is still fully supported, but will require using JDK 17 or newer for
compilation and setting <code>--release</code> or
<code>-source</code>/<code>-target</code>/<code>-bootclasspath</code>.</p>
<p>Changes:</p>
<ul>
<li>Update protobuf version for CVE-2024-7254</li>
</ul>
<p>New checks:</p>
<ul>
<li><a
href="https://errorprone.info/bugpattern/ArrayRecordComponent"><code>ArrayRecordComponent</code></a>:
Record components should not be arrays.</li>
</ul>
<p>Full changelog: <a
href="https://github.com/google/error-prone/compare/v2.32.0...v2.33.0">https://github.com/google/error-prone/compare/v2.32.0...v2.33.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/google/error-prone/commit/0e06cc234b45625ca136ce1e47d096280df3ddd1"><code>0e06cc2</code></a>
Release Error Prone 2.35.1</li>
<li><a
href="https://github.com/google/error-prone/commit/db6c890a54835e5ea618b73b79bbe362d6051d3f"><code>db6c890</code></a>
Downgrade protobuf version to 3.25.5</li>
<li><a
href="https://github.com/google/error-prone/commit/ed6b121f2b24f9706d0ae3db4a1e7eb60e1e6c4e"><code>ed6b121</code></a>
Add a repro test for broken behavior inlining the parameter value into
the fu...</li>
<li><a
href="https://github.com/google/error-prone/commit/a931fa36b0c2f48e2f149c4a4144dd11089161d0"><code>a931fa3</code></a>
Remove <code>DoNotUseRuleChain</code> from JavaCodeClarity.</li>
<li><a
href="https://github.com/google/error-prone/commit/ec2983b8b16bf3a4a2e8282c37f87db06eed8b3a"><code>ec2983b</code></a>
<code>compileUnsafe</code> -&gt; <code>compile</code> for
compile-time-constant expressions.</li>
<li><a
href="https://github.com/google/error-prone/commit/2ce963284ef612ee0a8ad734e94f022ef9738a72"><code>2ce9632</code></a>
Strip the quotation marks from the source code when reconstructing the
literal.</li>
<li><a
href="https://github.com/google/error-prone/commit/99a0d9d18ab5886e57c73c859dd15b26568ceb04"><code>99a0d9d</code></a>
TimeUnitMismatch: handle BinaryTrees.</li>
<li><a
href="https://github.com/google/error-prone/commit/60c5f763bd1889d1b84e4a0174518444b58c717d"><code>60c5f76</code></a>
TimeUnitMismatch: consider trees like <code>fooSeconds * 1000</code> to
have units of `m...</li>
<li><a
href="https://github.com/google/error-prone/commit/427b51da87b15e9fdd852e2e8e542cde172b6a2c"><code>427b51d</code></a>
GetSeconds to ToSeconds error prone</li>
<li><a
href="https://github.com/google/error-prone/commit/82a216870b043e841cad14eddb4568b8edcb9eff"><code>82a2168</code></a>
Recognize that <code>Runtime.halt</code> and <code>exit</code> never
return.</li>
<li>Additional commits viewable in <a
href="https://github.com/google/error-prone/compare/v2.32.0...v2.35.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=com.google.errorprone:error_prone_core&package-manager=gradle&previous-version=2.32.0&new-version=2.35.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 build.gradle | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/build.gradle b/build.gradle
index ae68343f..07955e00 100644
--- a/build.gradle
+++ b/build.gradle
@@ -33,7 +33,7 @@ dependencies {
     // Use JUnit test framework.
     testImplementation 'junit:junit:4.13.2'
 
-    errorprone("com.google.errorprone:error_prone_core:2.32.0")
+    errorprone("com.google.errorprone:error_prone_core:2.35.1")
 }
 
 // Use require-javadoc. From https://github.com/plume-lib/require-javadoc.