Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Bump spotbugs.version from 4.9.1 to 4.9.2 #1355

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 3, 2025

Bumps spotbugs.version from 4.9.1 to 4.9.2.
Updates com.github.spotbugs:spotbugs-annotations from 4.9.1 to 4.9.2

Release notes

Sourced from com.github.spotbugs:spotbugs-annotations's releases.

SpotBugs 4.9.2

CHANGELOG

Added

  • Reporting useless @SuppressFBWarnings annotations (#641)

Fixed

  • Fixed html bug descriptions for AT_STALE_THREAD_WRITE_OF_PRIMITIVE and AT_NONATOMIC_64BIT_PRIMITIVE (#3303)
  • Fixed an HSM_HIDING_METHOD false positive when ECJ generates a synthetic method for an enum switch (#3305)
  • Fix AT_UNSAFE_RESOURCE_ACCESS_IN_THREAD false negatives, detector depending on method order.
  • Fix THROWS_METHOD_THROWS_CLAUSE_THROWABLE reported in a method calling MethodHandle.invokeExact due to its polymorphic signature (#3309)
  • Fix AT_STALE_THREAD_WRITE_OF_PRIMITIVE false positive in inner class (#3310).
  • Fix AT_STALE_THREAD_WRITE_OF_PRIMITIVE false positive for ECJ compiled enum switches (#3316)
  • Fix RC_REF_COMPARISON false positive with Lombok With annotation (#3319)
  • Avoid calling File.getCanonicalPath twice to improve performance (#3325)
  • Fix MC_OVERRIDABLE_METHOD_CALL_IN_CONSTRUCTOR and MC_OVERRIDABLE_METHOD_CALL_IN_CLONE false positive when the overridable method is outside the class (#3328).
  • Fix NullPointerException thrown from ThrowingExceptions detector (#3337).

Removed

  • Removed the TLW_TWO_LOCK_NOTIFY, LI_LAZY_INIT_INSTANCE, BRSA_BAD_RESULTSET_ACCESS, BC_NULL_INSTANCEOF, NP_FIELD_NOT_INITIALIZED_IN_CONSTRUCTOR and RCN_REDUNDANT_CHECKED_NULL_COMPARISON deprecated bug patterns.

CHECKSUM

file checksum (sha256)
spotbugs-4.9.2-javadoc.jar d34b4e08d87474b5970b9d1d9185a9944c2738a3b974332595dfc06355e5b2de
spotbugs-4.9.2-sources.jar e70ddb0feee2aa0a67ee64d1ed5ff9fb57eb25cd9a78bbdef2742b02f2cd2799
spotbugs-4.9.2.tgz ecee09196ce66ab686b6a874047107b01f51a6ee2fb9b8604ce64d88688a1400
spotbugs-4.9.2.zip 2ac6f163c266d2f7c11cc89d80d07ccad6755ac468cee20ca0b1e4217e567548
spotbugs-annotations-4.9.2-javadoc.jar fbc8d5ad201ecae48bc3debca7f22fc791173b58d774e59a9e344f963e9e42e0
spotbugs-annotations-4.9.2-sources.jar 990ad9f3500499a99466b7c1e01284f4f41d1499358e7dc38c8defc59dab114c
spotbugs-annotations.jar d5bef4678385fa052040bc7a5deeb8f2e06902189dea1a8dd818a5680ac0f015
spotbugs-ant-4.9.2-javadoc.jar 5451c7d63238ecfb3aacf540f348486a965574a6a8ae9486b0aa8c3240f1e413
spotbugs-ant-4.9.2-sources.jar 591073402e4110093a380169acd3f33b26c2f893c2eaed5a6460d9be0b26014e
spotbugs-ant.jar 3a6f453696294d5314e648d4891d35e34315e11cb63c758a1601021cc0d803d1
spotbugs.jar 7a75726e9da4c99d767813f5e9e65cf2a367a17e58f68befe009d05568ec8932
test-harness-4.9.2-javadoc.jar a98da04ba818e358845dd96162f3e7301d9f8fd6fb82b3c105f33fa2a2de65db
test-harness-4.9.2-sources.jar 22688f14ef808cde65cc46e86d41c617fc397fc4967516006a73ce8bad658b9f
test-harness-4.9.2.jar 9bf5bba9546e4f89032006261dd2921a79fc3044e473ee1fa73af870cb43da15
test-harness-core-4.9.2-javadoc.jar 2a40c65270651ac8783bdf63939616b366482949d56746dcca0acf53f30a0da3
test-harness-core-4.9.2-sources.jar 13825de35190089490c7e290b52bafe6a9b08ab431177c0191dae9cf2a88a55d
test-harness-core-4.9.2.jar 3c74cc6d2d6f999d403f00f97685587e617d2bf1bfc348bbd0597e785c83feec
test-harness-jupiter-4.9.2-javadoc.jar c50778636a54122dbf9f3c676ec2089d2938cbb6468364d0ee3a64022cae1881
test-harness-jupiter-4.9.2-sources.jar 0aefbc5c8bd406e5dc0b1d59bc3afc6889c02010d486b22242f4f19a1a935800
test-harness-jupiter-4.9.2.jar 0e9509de32f8fbc94cf088dbee80394fa93807a766532568e652cd622ce737c8
Changelog

Sourced from com.github.spotbugs:spotbugs-annotations's changelog.

4.9.2 - 2025-03-01

Added

  • Reporting useless @SuppressFBWarnings annotations (#641)

Fixed

  • Fixed html bug descriptions for AT_STALE_THREAD_WRITE_OF_PRIMITIVE and AT_NONATOMIC_64BIT_PRIMITIVE (#3303)
  • Fixed an HSM_HIDING_METHOD false positive when ECJ generates a synthetic method for an enum switch (#3305)
  • Fix AT_UNSAFE_RESOURCE_ACCESS_IN_THREAD false negatives, detector depending on method order.
  • Fix THROWS_METHOD_THROWS_CLAUSE_THROWABLE reported in a method calling MethodHandle.invokeExact due to its polymorphic signature (#3309)
  • Fix AT_STALE_THREAD_WRITE_OF_PRIMITIVE false positive in inner class (#3310).
  • Fix AT_STALE_THREAD_WRITE_OF_PRIMITIVE false positive for ECJ compiled enum switches (#3316)
  • Fix RC_REF_COMPARISON false positive with Lombok With annotation (#3319)
  • Avoid calling File.getCanonicalPath twice to improve performance (#3325)
  • Fix MC_OVERRIDABLE_METHOD_CALL_IN_CONSTRUCTOR and MC_OVERRIDABLE_METHOD_CALL_IN_CLONE false positive when the overridable method is outside the class (#3328).
  • Fix NullPointerException thrown from ThrowingExceptions detector (#3337).

Removed

  • Removed the TLW_TWO_LOCK_NOTIFY, LI_LAZY_INIT_INSTANCE, BRSA_BAD_RESULTSET_ACCESS, BC_NULL_INSTANCEOF, NP_FIELD_NOT_INITIALIZED_IN_CONSTRUCTOR and RCN_REDUNDANT_CHECKED_NULL_COMPARISON deprecated bug patterns.
Commits
  • dcce8fb release v4.9.2
  • e568f8e Report useless @SuppressFBWarnings annotations (#3307)
  • 3e4997d [cleanup] use collection.of() functions for initialization where possible (#3...
  • 1d2f530 fix(deps): update dependency org.apache.groovy:groovy-all to v4.0.26 (#3343)
  • f50575e fix NPE in ThrowingExceptions detector (#3337)
  • d7931b8 chore(deps): update dependency gradle to v8.13 (#3339)
  • 777ebcc fix(deps): update dependency org.slf4j:slf4j-api to v2.0.17 (#3341)
  • 3411be1 Fix #3328 and cleanup in FindOverridableMethodCall (#3330)
  • d3f0540 fix(deps): update dependency checkstyle to v10.21.3 (#3333)
  • 82e08e8 chore(deps): update sphinxdoc/sphinx docker tag to v8.2.1 (#3332)
  • Additional commits viewable in compare view

Updates com.github.spotbugs:spotbugs from 4.9.1 to 4.9.2

Release notes

Sourced from com.github.spotbugs:spotbugs's releases.

SpotBugs 4.9.2

CHANGELOG

Added

  • Reporting useless @SuppressFBWarnings annotations (#641)

Fixed

  • Fixed html bug descriptions for AT_STALE_THREAD_WRITE_OF_PRIMITIVE and AT_NONATOMIC_64BIT_PRIMITIVE (#3303)
  • Fixed an HSM_HIDING_METHOD false positive when ECJ generates a synthetic method for an enum switch (#3305)
  • Fix AT_UNSAFE_RESOURCE_ACCESS_IN_THREAD false negatives, detector depending on method order.
  • Fix THROWS_METHOD_THROWS_CLAUSE_THROWABLE reported in a method calling MethodHandle.invokeExact due to its polymorphic signature (#3309)
  • Fix AT_STALE_THREAD_WRITE_OF_PRIMITIVE false positive in inner class (#3310).
  • Fix AT_STALE_THREAD_WRITE_OF_PRIMITIVE false positive for ECJ compiled enum switches (#3316)
  • Fix RC_REF_COMPARISON false positive with Lombok With annotation (#3319)
  • Avoid calling File.getCanonicalPath twice to improve performance (#3325)
  • Fix MC_OVERRIDABLE_METHOD_CALL_IN_CONSTRUCTOR and MC_OVERRIDABLE_METHOD_CALL_IN_CLONE false positive when the overridable method is outside the class (#3328).
  • Fix NullPointerException thrown from ThrowingExceptions detector (#3337).

Removed

  • Removed the TLW_TWO_LOCK_NOTIFY, LI_LAZY_INIT_INSTANCE, BRSA_BAD_RESULTSET_ACCESS, BC_NULL_INSTANCEOF, NP_FIELD_NOT_INITIALIZED_IN_CONSTRUCTOR and RCN_REDUNDANT_CHECKED_NULL_COMPARISON deprecated bug patterns.

CHECKSUM

file checksum (sha256)
spotbugs-4.9.2-javadoc.jar d34b4e08d87474b5970b9d1d9185a9944c2738a3b974332595dfc06355e5b2de
spotbugs-4.9.2-sources.jar e70ddb0feee2aa0a67ee64d1ed5ff9fb57eb25cd9a78bbdef2742b02f2cd2799
spotbugs-4.9.2.tgz ecee09196ce66ab686b6a874047107b01f51a6ee2fb9b8604ce64d88688a1400
spotbugs-4.9.2.zip 2ac6f163c266d2f7c11cc89d80d07ccad6755ac468cee20ca0b1e4217e567548
spotbugs-annotations-4.9.2-javadoc.jar fbc8d5ad201ecae48bc3debca7f22fc791173b58d774e59a9e344f963e9e42e0
spotbugs-annotations-4.9.2-sources.jar 990ad9f3500499a99466b7c1e01284f4f41d1499358e7dc38c8defc59dab114c
spotbugs-annotations.jar d5bef4678385fa052040bc7a5deeb8f2e06902189dea1a8dd818a5680ac0f015
spotbugs-ant-4.9.2-javadoc.jar 5451c7d63238ecfb3aacf540f348486a965574a6a8ae9486b0aa8c3240f1e413
spotbugs-ant-4.9.2-sources.jar 591073402e4110093a380169acd3f33b26c2f893c2eaed5a6460d9be0b26014e
spotbugs-ant.jar 3a6f453696294d5314e648d4891d35e34315e11cb63c758a1601021cc0d803d1
spotbugs.jar 7a75726e9da4c99d767813f5e9e65cf2a367a17e58f68befe009d05568ec8932
test-harness-4.9.2-javadoc.jar a98da04ba818e358845dd96162f3e7301d9f8fd6fb82b3c105f33fa2a2de65db
test-harness-4.9.2-sources.jar 22688f14ef808cde65cc46e86d41c617fc397fc4967516006a73ce8bad658b9f
test-harness-4.9.2.jar 9bf5bba9546e4f89032006261dd2921a79fc3044e473ee1fa73af870cb43da15
test-harness-core-4.9.2-javadoc.jar 2a40c65270651ac8783bdf63939616b366482949d56746dcca0acf53f30a0da3
test-harness-core-4.9.2-sources.jar 13825de35190089490c7e290b52bafe6a9b08ab431177c0191dae9cf2a88a55d
test-harness-core-4.9.2.jar 3c74cc6d2d6f999d403f00f97685587e617d2bf1bfc348bbd0597e785c83feec
test-harness-jupiter-4.9.2-javadoc.jar c50778636a54122dbf9f3c676ec2089d2938cbb6468364d0ee3a64022cae1881
test-harness-jupiter-4.9.2-sources.jar 0aefbc5c8bd406e5dc0b1d59bc3afc6889c02010d486b22242f4f19a1a935800
test-harness-jupiter-4.9.2.jar 0e9509de32f8fbc94cf088dbee80394fa93807a766532568e652cd622ce737c8
Changelog

Sourced from com.github.spotbugs:spotbugs's changelog.

4.9.2 - 2025-03-01

Added

  • Reporting useless @SuppressFBWarnings annotations (#641)

Fixed

  • Fixed html bug descriptions for AT_STALE_THREAD_WRITE_OF_PRIMITIVE and AT_NONATOMIC_64BIT_PRIMITIVE (#3303)
  • Fixed an HSM_HIDING_METHOD false positive when ECJ generates a synthetic method for an enum switch (#3305)
  • Fix AT_UNSAFE_RESOURCE_ACCESS_IN_THREAD false negatives, detector depending on method order.
  • Fix THROWS_METHOD_THROWS_CLAUSE_THROWABLE reported in a method calling MethodHandle.invokeExact due to its polymorphic signature (#3309)
  • Fix AT_STALE_THREAD_WRITE_OF_PRIMITIVE false positive in inner class (#3310).
  • Fix AT_STALE_THREAD_WRITE_OF_PRIMITIVE false positive for ECJ compiled enum switches (#3316)
  • Fix RC_REF_COMPARISON false positive with Lombok With annotation (#3319)
  • Avoid calling File.getCanonicalPath twice to improve performance (#3325)
  • Fix MC_OVERRIDABLE_METHOD_CALL_IN_CONSTRUCTOR and MC_OVERRIDABLE_METHOD_CALL_IN_CLONE false positive when the overridable method is outside the class (#3328).
  • Fix NullPointerException thrown from ThrowingExceptions detector (#3337).

Removed

  • Removed the TLW_TWO_LOCK_NOTIFY, LI_LAZY_INIT_INSTANCE, BRSA_BAD_RESULTSET_ACCESS, BC_NULL_INSTANCEOF, NP_FIELD_NOT_INITIALIZED_IN_CONSTRUCTOR and RCN_REDUNDANT_CHECKED_NULL_COMPARISON deprecated bug patterns.
Commits
  • dcce8fb release v4.9.2
  • e568f8e Report useless @SuppressFBWarnings annotations (#3307)
  • 3e4997d [cleanup] use collection.of() functions for initialization where possible (#3...
  • 1d2f530 fix(deps): update dependency org.apache.groovy:groovy-all to v4.0.26 (#3343)
  • f50575e fix NPE in ThrowingExceptions detector (#3337)
  • d7931b8 chore(deps): update dependency gradle to v8.13 (#3339)
  • 777ebcc fix(deps): update dependency org.slf4j:slf4j-api to v2.0.17 (#3341)
  • 3411be1 Fix #3328 and cleanup in FindOverridableMethodCall (#3330)
  • d3f0540 fix(deps): update dependency checkstyle to v10.21.3 (#3333)
  • 82e08e8 chore(deps): update sphinxdoc/sphinx docker tag to v8.2.1 (#3332)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps `spotbugs.version` from 4.9.1 to 4.9.2.

Updates `com.github.spotbugs:spotbugs-annotations` from 4.9.1 to 4.9.2
- [Release notes](https://github.com/spotbugs/spotbugs/releases)
- [Changelog](https://github.com/spotbugs/spotbugs/blob/master/CHANGELOG.md)
- [Commits](spotbugs/spotbugs@4.9.1...4.9.2)

Updates `com.github.spotbugs:spotbugs` from 4.9.1 to 4.9.2
- [Release notes](https://github.com/spotbugs/spotbugs/releases)
- [Changelog](https://github.com/spotbugs/spotbugs/blob/master/CHANGELOG.md)
- [Commits](spotbugs/spotbugs@4.9.1...4.9.2)

---
updated-dependencies:
- dependency-name: com.github.spotbugs:spotbugs-annotations
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: com.github.spotbugs:spotbugs
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Update of dependencies java Pull requests that update Maven Java dependencies labels Mar 3, 2025
Copy link

github-actions bot commented Mar 3, 2025

☀️   Quality Monitor

Tests

   🚦   JUnit Tests: 98% successful (✔️ 103 passed, 🙈 2 skipped)

Code Coverage

   〰️   Line Coverage: 92% (61 missed lines)
   ➰   Branch Coverage: 91% (19 missed branches)

Mutation Coverage

   PIT   Mutation Coverage: 80% (80 survived mutations)
   💪   Test Strength: 85% (58 survived mutations in tested code)

Style

   CheckStyle   CheckStyle: No warnings
   PMD   PMD: No warnings

Bugs

   SpotBugs   SpotBugs: No bugs
   🐛   Error Prone: No bugs

API Problems

   🚫   Revapi: No warnings

Vulnerabilities

   OWASP Dependency Check   OWASP Dependency Check: No vulnerabilities

Software Metrics

   🌀   Cyclomatic Complexity: 376 (total)
   💭   Cognitive Complexity: 173 (total)
   ➿   N-Path Complexity: 455 (total)
   📏   Lines of Code: 4075 (total)
   📝   Non Commenting Source Statements: 1257 (total)
   🔗   Class cohesion: 71.43% (maximum)
   ⚖️   Weight of a class: 100.00% (maximum)


Created by Quality Monitor v2.0.0 (#319a5c2). More details are shown in the GitHub Checks Result.

# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
dependencies Update of dependencies java Pull requests that update Maven Java dependencies
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant