chore(deps): bump the gradle-version-updates group across 1 directory with 15 updates #22

dependabot · 2025-08-19T04:32:16Z

Bumps the gradle-version-updates group with 14 updates in the / directory:

Package	From	To
com.fasterxml.jackson.core:jackson-databind	`2.18.2`	`2.19.2`
com.fasterxml.jackson.dataformat:jackson-dataformat-xml	`2.19.0`	`2.19.2`
com.puppycrawl.tools:checkstyle	`10.23.1`	`11.0.0`
com.uber.nullaway:nullaway	`0.12.2`	`0.12.9`
com.google.errorprone:error_prone_core	`2.36.0`	`2.41.0`
com.h3xstream.findsecbugs:findsecbugs-plugin	`1.13.0`	`1.14.0`
com.github.spotbugs:spotbugs	`4.8.6`	`4.9.4`
org.jacoco:org.jacoco.agent	`0.8.12`	`0.8.13`
org.junit.jupiter:junit-jupiter	`5.11.4`	`5.13.4`
com.gradle.plugin-publish	`1.2.1`	`1.3.1`
com.diffplug.spotless	`7.0.2`	`7.2.1`
net.ltgt.errorprone	`4.1.0`	`4.3.0`
net.ltgt.nullaway	`2.2.0`	`2.3.0`
com.github.spotbugs	`6.1.3`	`6.2.5`

Updates com.fasterxml.jackson.core:jackson-databind from 2.18.2 to 2.19.2

Commits

See full diff in compare view

Updates com.fasterxml.jackson.dataformat:jackson-dataformat-xml from 2.19.0 to 2.19.2

Commits

db02787 [maven-release-plugin] prepare release jackson-dataformat-xml-2.19.2
2707601 Prep for 2.19.2
391bbda Merge branch '2.18' into 2.19
ea3f4d6 Add JDK 24 in CI
967ee6c Back to snapshot dep
44ba915 [maven-release-plugin] prepare for next development iteration
86cc1b8 [maven-release-plugin] prepare release jackson-dataformat-xml-2.19.1
1d9728f Prep for 2.19.1
fe3601b Manual pom.xml merge
b2d026d Merge branch '2.18' into 2.19
Additional commits viewable in compare view

Updates com.puppycrawl.tools:checkstyle from 10.23.1 to 11.0.0

Release notes

Sourced from com.puppycrawl.tools:checkstyle's releases.

checkstyle-11.0.0

Checkstyle 11.0.0 - https://checkstyle.org/releasenotes.html#Release_11.0.0

Breaking backward compatibility:

#13209 - Migrate project to JDK 17 #17321 - Use jdk17 as minimial required

New:

#17366 - FinalParameters - missing several tokens to check

Bug fixes:

#17332 - False positive from JavadocType: Unused @param tag #8205 - fix all false-negatives about there is no single space between a type annotation and [] or .... for Google Style #17158 - InvalidJavadocPosition false-positive for record compact constructor with package-private accessibility #14291 - Escape sequences in TextBlock, IllegalTokenText module should violate them for Google style #17193 - Google-style: Improper enforcement of horizontal whitespace for double slash //

... (truncated)

Commits

a0745b1 [maven-release-plugin] prepare release checkstyle-11.0.0
7ea982e doc: release notes for 11.0.0
bf67bad Issue #17269: Changind Docker Script to latest groovy Image
1931995 Issue #14769: Implemented modifier package structure for IT Regression area
cb690d0 Issue #14769: Implemented metrics package structure for IT Regression area
4869fe5 Issue #14769: Implemented javadoc package structure for IT Regression area
77bf83e Issue #14769: Implemented indentation package structure for IT Regression area
0b012ba Issue #14769: Implemented imports package structure for IT Regression area
6b0f638 Revert "minor: trim whitespaces after regression report comment"
ed7df15 minor: trim whitespaces after regression report comment
Additional commits viewable in compare view

Updates com.uber.nullaway:nullaway from 0.12.2 to 0.12.9

Release notes

Sourced from com.uber.nullaway:nullaway's releases.

NullAway 0.12.9

Add a case in our inference for generic method calls (#1240)

Add library model for Apache Commons CollectionUtils.isNotEmpty, Amazon CollectionUtils.IsNullOrEmpty, and a couple Amazon StringUtils methods (#1242)

Maintenance

Fix maven central link in RELEASING.md (#1237)

Update to Error Prone 2.41.0 (#1239)

Add tests for gh-1246 (#1247)

Test reading JSpecify annotations from bytecodes on JDK 21 (#1245)

NullAway 0.12.8

Document interactions between Guava and JSpecify mode in README (#1208)

JSpecify: handle nullness annotations from extends / inherits clauses (#1211)

Allowing NewClassTree to be passed into getGenericParameterNullnessAtInvocation (#1210)

Support @NullMarked on modules (#1216)

Handle NewClassTree in compareGenericTypeParameterNullabilityForCall(#1212) (#1217)

More flexible handling of AssertJ isNotNull methods (#1221)

Support AssertJ hasSize() (#1229)

Inference of generic method type arguments based on returns and parameter passing (#1226)

Prototype implementation of javac plugin to serialize nullness annotations (#1225)

Add AdditionalSuppressionNames configuration option (#1231)

Updates to deploy releases to Central Portal (#1234)

Fix to handling of case null (#1235)

Maintenance

Update to Gradle 8.14 (#1213)

Update to Error Prone 2.39.0 (#1228)

Fix broken link to Eradicate in README.md (#1227)

NullAway 0.12.7

Update to Checker Framework 3.49.2 (#1183)

Don't check synchronized blocks within unannotated code (#1185)

Test on JDK 24 (#1187)

Fix multiple issues with NewClassTrees that have enclosing expressions (#1191)

Ensure classes null-marked by library model detected in all places (#1197)

JSpecify: handle varargs whose element type is a type variable (#1200)

Update to Error Prone 2.38.0 (#1203)

Optimization to annotation stripping in library model matching (#1204)

Make arg position nullness array contents nullable (#1207)

Properly handle method references to null-unmarked methods (#1205)

NullAway 0.12.6

JSpecify: view type as super in generic method inference (#1177)

Infer @Nullable type arguments for type variables from unmarked code (#1181)

Convert android-jar.py to Python 3 (#1175)

Suggest castToNonNull fix for unboxing error (#1182)

NullAway 0.12.5

Add missing override to RestoreNullnessAnnotationsVisitor (#1154)

Add more bailouts for raw types (#1153)

Do unboxing check for invocation parameters even when calling a @NullUnmarked method (#1163)

JSpecify: infer generic method type arguments for assignments (#1131)

... (truncated)

Changelog

Sourced from com.uber.nullaway:nullaway's changelog.

Version 0.12.9

Add a case in our inference for generic method calls (#1240)

Add library model for Apache Commons CollectionUtils.isNotEmpty, Amazon CollectionUtils.IsNullOrEmpty, and a couple Amazon StringUtils methods (#1242)

Maintenance

Fix maven central link in RELEASING.md (#1237)

Update to Error Prone 2.41.0 (#1239)

Add tests for gh-1246 (#1247)

Test reading JSpecify annotations from bytecodes on JDK 21 (#1245)

Version 0.12.8

Document interactions between Guava and JSpecify mode in README (#1208)

JSpecify: handle nullness annotations from extends / inherits clauses (#1211)

Allowing NewClassTree to be passed into getGenericParameterNullnessAtInvocation (#1210)

Support @NullMarked on modules (#1216)

Handle NewClassTree in compareGenericTypeParameterNullabilityForCall(#1212) (#1217)

More flexible handling of AssertJ isNotNull methods (#1221)

Support AssertJ hasSize() (#1229)

Inference of generic method type arguments based on returns and parameter passing (#1226)

Prototype implementation of javac plugin to serialize nullness annotations (#1225)

Add AdditionalSuppressionNames configuration option (#1231)

Updates to deploy releases to Central Portal (#1234)

Fix to handling of case null (#1235)

Maintenance

Update to Gradle 8.14 (#1213)

Update to Error Prone 2.39.0 (#1228)

Fix broken link to Eradicate in README.md (#1227)

Version 0.12.7

Update to Checker Framework 3.49.2 (#1183)

Don't check synchronized blocks within unannotated code (#1185)

Test on JDK 24 (#1187)

Fix multiple issues with NewClassTrees that have enclosing expressions (#1191)

Ensure classes null-marked by library model detected in all places (#1197)

JSpecify: handle varargs whose element type is a type variable (#1200)

Update to Error Prone 2.38.0 (#1203)

Optimization to annotation stripping in library model matching (#1204)

Make arg position nullness array contents nullable (#1207)

Properly handle method references to null-unmarked methods (#1205)

Version 0.12.6

JSpecify: view type as super in generic method inference (#1177)

Infer @Nullable type arguments for type variables from unmarked code (#1181)

Convert android-jar.py to Python 3 (#1175)

Suggest castToNonNull fix for unboxing error (#1182)

Version 0.12.5

... (truncated)

Commits

bc26940 Prepare for release 0.12.9.
bdca1c3 Test reading JSpecify annotations from bytecodes on JDK 21 (#1245)
f59d952 Add tests for gh-1246 (#1247)
ba4ff83 Add library model for Apache Commons CollectionUtils.isNotEmpty, Amazon Colle...
7b64688 Add a case in our inference for generic method calls (#1240)
92c9304 Update to Error Prone 2.41.0 (#1239)
dc07f65 Fix maven central link in RELEASING.md (#1237)
3f1599a Prepare next development version.
eed74de Prepare for release 0.12.8.
ee85996 Fix to handling of case null (#1235)
Additional commits viewable in compare view

Updates com.google.errorprone:error_prone_core from 2.36.0 to 2.41.0

Release notes

Sourced from com.google.errorprone:error_prone_core's releases.

Error Prone 2.41.0

New checks:

EffectivelyPrivate: Detect declarations that have public or protected modifiers, but are effectively private

Changes:

Skip BooleanLiteral findings if the target type is boxed (#5134)

Full changelog: google/error-prone@v2.40.0...v2.41.0

Error Prone 2.40.0

Changes:

Bug fixes and improvements

Releases (including snapshots) have migrated from OSSRH to the Central Publisher Portal

Full changelog: google/error-prone@v2.39.0...v2.40.0

Error Prone 2.39.0

Changes:

Temporarily downgrade to Guava 33.4.0 (#5108)

Checks:

BooleanLiteral: Prefer true to Boolean.TRUE

ExpensiveLenientFormatString: Renamed from PreconditionsExpensiveString, detects unnecessary calls to String.format in the arguments of lenient formatting methods.

UnnecessaryQualifier: Detects @Qualifier or @BindingAnnotation annotations that have no effect, and can be removed

Issues: #4996, #5045

Full changelog: google/error-prone@v2.38.0...v2.39.0

Error Prone 2.38.0

New checks:

AddNullMarkedToPackageInfo: adds @org.jspecify.annotations.NullMarked annotation to package-info files

IntLiteralCast: Suggests a literal of the desired type instead of casting an int literal to a long, float, or double

MisleadingEmptyVarargs: Discourages calling varargs methods that expect at least one argument with no arguments, like Mockito's thenThrow

PreconditionsExpensiveString: Discourages expensive string formatting in Guava Preconditions checks

SelfSet: Detects mistakes like proto.setFoo(proto.getFoo())

UnnecessaryCopy: detect unnecessary copies of proto Lists and Maps.

Closed issues: #4924, #4897, #4995

Full changelog: google/error-prone@v2.37.0...v2.38.0

Error Prone 2.37.0

Changes:

... (truncated)

Commits

d6539d6 Release Error Prone 2.41.0
6161d4e Skip BooleanLiteral findings if the target type is boxed
98d83bf Avoid touching parameters of @Subscribe methods.
13d46e7 Refactor to use WellKnownKeep
ef33eee Fix a println statement left over from https://github.com/google/error-prone/...
ce784a9 Detect non-private, non-override methods in anonymous classes
43759cd Recognise com.google.common.inject.components.OtherRequiredBindings as an i...
ef5073b UnnecessaryQualifier: don't fire on interfaces, in deference to Dagger.
3d7b585 TruthIncompatibleType support for MultisetSubject#hasCount.
b5c6175 Add a test confirming external #5151.
Additional commits viewable in compare view

Updates com.h3xstream.findsecbugs:findsecbugs-plugin from 1.13.0 to 1.14.0

Release notes

Sourced from com.h3xstream.findsecbugs:findsecbugs-plugin's releases.

Version 1.14.0

What's Changed

Upgrade SpotBugs to 4.8.3 by @gtoison in find-sec-bugs/find-sec-bugs#725

Release 1.13.0 by @h3xstream in find-sec-bugs/find-sec-bugs#726

Added missing BugCode for SECXXEVAL abbrev by @gtoison in find-sec-bugs/find-sec-bugs#728

Upgrade the build to run on JDK 11 by @gtoison in find-sec-bugs/find-sec-bugs#729

Add support for jakarta by @cheeghi in find-sec-bugs/find-sec-bugs#734

Update SpotBugs version by @JuditKnoll in find-sec-bugs/find-sec-bugs#739

Replace deprecated tasks with target in maven-antrun-plugin by @JuditKnoll in find-sec-bugs/find-sec-bugs#740

Fix typos in messages.xml by @JuditKnoll in find-sec-bugs/find-sec-bugs#741

Local build fails after #740 by @topolik in find-sec-bugs/find-sec-bugs#746

Use SoftRerefence to detect if the value was already taken by GC (#595) by @topolik in find-sec-bugs/find-sec-bugs#747

Remove array signature from classname by @kohlschuetter in find-sec-bugs/find-sec-bugs#752

add jakarta.activation.FileDataSource path-traversal-in.txt by @vsTianhao in find-sec-bugs/find-sec-bugs#743

Updated latest version in the website by @keerthivarumbudy in find-sec-bugs/find-sec-bugs#745

Misinterpreting invokedynamic causes "missing class" warning by @kohlschuetter in find-sec-bugs/find-sec-bugs#750

update gha actions/cache from v1 to v4 by @JuditKnoll in find-sec-bugs/find-sec-bugs#755

update SpotBugs and SpotBugs maven plugin versions by @JuditKnoll in find-sec-bugs/find-sec-bugs#756

Make cwe info consistent by @JuditKnoll in find-sec-bugs/find-sec-bugs#753

New Contributors

@cheeghi made their first contribution in find-sec-bugs/find-sec-bugs#734

@JuditKnoll made their first contribution in find-sec-bugs/find-sec-bugs#739

@kohlschuetter made their first contribution in find-sec-bugs/find-sec-bugs#752

@vsTianhao made their first contribution in find-sec-bugs/find-sec-bugs#743

@keerthivarumbudy made their first contribution in find-sec-bugs/find-sec-bugs#745

Full Changelog: find-sec-bugs/find-sec-bugs@version-1.13.0...version-1.14.0

Commits

ba1fa60 Version used for release 1.14.0
054e62b Merge pull request #753 from JuditKnoll/cwe
910d033 Merge pull request #756 from JuditKnoll/sb-update
cb1bd72 Merge pull request #755 from JuditKnoll/gha
1afddee update spotbugs and spotbugs maven plugin versions
cf17531 update gha actions/cache from v1 to v4
c679ba4 update MODIFICATION_AFTER_VALIDATION and NORMALIZATION_AFTER_VALIDATION cwe l...
87ac1f6 update messages_ja.xml
e56bf59 make cwe info consistent
233f2d8 Merge pull request #750 from kohlschuetter/ck/issue-332
Additional commits viewable in compare view

Updates com.github.spotbugs:spotbugs from 4.8.6 to 4.9.4

Release notes

Sourced from com.github.spotbugs:spotbugs's releases.

SpotBugs 4.9.4

CHANGELOG

Changed

AnnotationMatcher can now ignore bugs if annotation is also applied on methods or fields. Previously only annotations on classes were considered.

Add relevant CWE ids to bugs and refer the CWEs in the bug messages (#3354).

Replace LOCAL_VARIABLE_UNKNOWN with exact method name for NP_NULL_ON_SOME_PATH_FROM_RETURN_VALUE (#3485)

Fixed

Widen main method recognition according to JEP 445. (#3371)

Do not report US_USELESS_SUPPRESSION_ON_* on methods, fields, parameters, packages or classes with an *.Generated annotation with retention >= class (#3350)(#3409)

Rewrite some member in ResourceValueFrame.java to Enum (#2061)

Ignore non-interpreted text when looking for FS_BAD_DATE_FORMAT_FLAG_COMBO (#3387)

Fix IllegalArgumentException thrown from FindNoSideEffectMethods detector (#3320)

Do not report RV_RETURN_VALUE_IGNORED_NO_SIDE_EFFECT when part of a Mockito doAnswer(), doCallRealMethod(), doNothing(), doThrow() or doReturn() call (#3334)

Fix CT_CONSTRUCTOR_THROW false positive with public and private constructors in specific order of methods (#3417)

Fix AT_NONATOMIC_OPERATIONS_ON_SHARED_VARIABLE, AT_NONATOMIC_64BIT_PRIMITIVE and AT_STALE_THREAD_WRITE_OF_PRIMITIVE FP when the relevant code is in private method, which is only called with proper synchronization (#3428)

Do not report RV_RETURN_VALUE_IGNORED_NO_SIDE_EFFECT when part of a BDDMockito call (#3441)

Fix AT_NONATOMIC_OPERATIONS_ON_SHARED_VARIABLE when field of a local variable is set. (#3459)

Fix AT_NONATOMIC_OPERATIONS_ON_SHARED_VARIABLE FP when there was no compound operation (#3363)

Fix NM_FIELD_NAMING_CONVENTION crash in the TestASM detector (#3489)

Do not report UWF_FIELD_NOT_INITIALIZED_IN_CONSTRUCTOR for fields initialized in JUnit 3/4 setUp() method. (#3169)

Fix US_USELESS_SUPPRESSION_ON_FIELD/UUF_UNUSED_FIELD false positive (#3496)

Make the osgi manifest of the annotations jar Java 8 compatible (#3498) (#3500)

TextUICommandLine supports all options encoded in Eclipse preferences file (#3520)

Unnecessary suppressions fix for records headers (#3471)

Dead store fix when switch case contains loops (#3530) (#3449)

Consider PUTFIELD and PUTSTATIC when looking for assertions with side effects (#3463)

Detect cases when equals() unconditionally returns true or false (#3528)

Do not report that an Iterator does not throw NoSuchElementException when hasNext() returns true (#3501)

Detect random value cast to int when stored in temporary variable (#3461)

Look for interfaces default methods when searching uncalled private methods (#1988)

Fixed field self assignment false positive (#2258)

Fixed DMI_INVOKING_TOSTRING_ON_ARRAY on newer JDK (#1147)

Fix NP_NULL_ON_SOME_PATH_FROM_RETURN_VALUE false positive with Objects.requireNonNull (#2965) (#3573)

Track inner classes access methods to correctly report the bugs (#2029)

SF_SWITCH_NO_DEFAULT false positive fix (#1148) (#3572)

Added

Added the unnecessary annotation to the US_USELESS_SUPPRESSION_ON_* messages (#3395)

Multi-threaded code checks can be skipped with @NotThreadSafe (#3390)

New bug type CWO_CLOSED_WITHOUT_OPENED for locks that might be released without even being acquired. (See SEI CERT rule LCK08-J) (#2055)

Breaking change: changed values and new items in ResourceValueFrame.

Inline access method for method. (#3481)

Added DMI_MISLEADING_SUBSTRING for calling subString(0) on a StringBuffer/StringBuilder (#1928)

Signing

Signing for Eclipse plugin has been removed at the current time due to signing keys being expired. The expired key produced a warning during install, the same is true without signing.

CHECKSUM

| file | checksum (sha256) |

... (truncated)

Changelog

Sourced from com.github.spotbugs:spotbugs's changelog.

4.9.4 - 2025-08-07

Changed

AnnotationMatcher can now ignore bugs if annotation is also applied on methods or fields. Previously only annotations on classes were considered.

Add relevant CWE ids to bugs and refer the CWEs in the bug messages (#3354).

Replace LOCAL_VARIABLE_UNKNOWN with exact method name for NP_NULL_ON_SOME_PATH_FROM_RETURN_VALUE (#3485)

Fixed

Widen main method recognition according to JEP 445. (#3371)

Do not report US_USELESS_SUPPRESSION_ON_* on methods, fields, parameters, packages or classes with an *.Generated annotation with retention >= class (#3350)(#3409)

Rewrite some member in ResourceValueFrame.java to Enum (#2061)

Ignore non-interpreted text when looking for FS_BAD_DATE_FORMAT_FLAG_COMBO (#3387)

Fix IllegalArgumentException thrown from FindNoSideEffectMethods detector (#3320)

Do not report RV_RETURN_VALUE_IGNORED_NO_SIDE_EFFECT when part of a Mockito doAnswer(), doCallRealMethod(), doNothing(), doThrow() or doReturn() call (#3334)

Fix CT_CONSTRUCTOR_THROW false positive with public and private constructors in specific order of methods (#3417)

Fix AT_NONATOMIC_OPERATIONS_ON_SHARED_VARIABLE, AT_NONATOMIC_64BIT_PRIMITIVE and AT_STALE_THREAD_WRITE_OF_PRIMITIVE FP when the relevant code is in private method, which is only called with proper synchronization (#3428)

Do not report RV_RETURN_VALUE_IGNORED_NO_SIDE_EFFECT when part of a BDDMockito call (#3441)

Fix AT_NONATOMIC_OPERATIONS_ON_SHARED_VARIABLE when field of a local variable is set. (#3459)

Fix AT_NONATOMIC_OPERATIONS_ON_SHARED_VARIABLE FP when there was no compound operation (#3363)

Fix NM_FIELD_NAMING_CONVENTION crash in the TestASM detector (#3489)

Do not report UWF_FIELD_NOT_INITIALIZED_IN_CONSTRUCTOR for fields initialized in JUnit 3/4 setUp() method. (#3169)

Fix US_USELESS_SUPPRESSION_ON_FIELD/UUF_UNUSED_FIELD false positive (#3496)

Make the osgi manifest of the annotations jar Java 8 compatible (#3498) (#3500)

TextUICommandLine supports all options encoded in Eclipse preferences file (#3520)

Unnecessary suppressions fix for records headers (#3471)

Dead store fix when switch case contains loops (#3530) (#3449)

Consider PUTFIELD and PUTSTATIC when looking for assertions with side effects (#3463)

Detect cases when equals() unconditionally returns true or false (#3528)

Do not report that an Iterator does not throw NoSuchElementException when hasNext() returns true (#3501)

Detect random value cast to int when stored in temporary variable (#3461)

Look for interfaces default methods when searching uncalled private methods (#1988)

Fixed field self assignment false positive (#2258)

Fixed DMI_INVOKING_TOSTRING_ON_ARRAY on newer JDK (#1147)

Fix NP_NULL_ON_SOME_PATH_FROM_RETURN_VALUE false positive with Objects.requireNonNull (#2965) (#3573)

Track inner classes access methods to correctly report the bugs (#2029)

SF_SWITCH_NO_DEFAULT false positive fix (#1148) (#3572)

Added

Added the unnecessary annotation to the US_USELESS_SUPPRESSION_ON_* messages (#3395)

Multi-threaded code checks can be skipped with @NotThreadSafe (#3390)

New bug type CWO_CLOSED_WITHOUT_OPENED for locks that might be released without even being acquired. (See SEI CERT rule LCK08-J) (#2055)

Breaking change: changed values and new items in ResourceValueFrame.

Inline access method for method. (#3481)

Added DMI_MISLEADING_SUBSTRING for calling subString(0) on a StringBuffer/StringBuilder (#1928)

Signing

Signing for Eclipse plugin has been removed at the current time due to signing keys being expired. The expired key produced a warning during install, the same is true without signing.

4.9.3 - 2025-03-14

Added

Introduced UselessSuppressionDetector to report the useless annotations instead of NoteSuppressedWarnings (#3348)

... (truncated)

Commits

014b0ee release v4.9.4
0c0f125 build: Adjustments to the tag checking
788524b prepare for next release
44656f0 release v4.9.4
da2f64d build: Make sure check is against origin/master not master
0db0852 prepare for next release
7ecaa15 release v4.9.4
a2845af build: Remove space in curl
b433c57 build: Disable parallel builds for now
a4e906f build: Cleanup release action to correctly work
Additional commits viewable in compare view

Updates org.jacoco:org.jacoco.agent from 0.8.12 to 0.8.13

Release notes

Sourced from org.jacoco:org.jacoco.agent's releases.

0.8.13

New Features

JaCoCo now officially supports Java 23 and Java 24 (GitHub #1757, #1631, #1867).

Experimental support for Java 25 class files (GitHub #1807).

Calculation of line coverage for Kotlin inline functions (GitHub #1670).

Calculation of line coverage for Kotlin inline functions with reified type parameter (GitHub #1670, #1700).

Calculation of coverage for Kotlin JvmSynthetic functions (GitHub #1700).

Part of bytecode generated by the Kotlin Compose compiler plugin is filtered out during generation of report (GitHub #1616).

Part of bytecode generated by the Kotlin compiler for inline value classes is filtered out during generation of report (GitHub #1475).

Part of bytecode generated by the Kotlin compiler for suspending lambdas without suspension points is filtered out during generation of report (GitHub #1283).

Part of bytecode generated by the Kotlin compiler for when expressions and statements with nullable enum subject is filtered out during generation of report (GitHub #1774).

Part of bytecode generated by the Kotlin compiler for when expressions and statements with nullable String subject is filtered out during generation of report (GitHub #1769).

Part of bytecode generated by the Kotlin compiler for chains of safe call operators is filtered out during generation of report (GitHub #1810, #1818).

Method getEntries generated by the Kotlin compiler for enum classes is filtered out during generation of report (GitHub #1625).

Methods generated by the Kotlin compiler for constructors and functions with JvmOverloads annotation are filtered out (GitHub #1768).

Fixed bugs

Fixed interpretation of Kotlin SMAP (GitHub #1525).

File extensions are preserved in HTML report in case of clashes of normalized file names (GitHub #1660).

Non-functional Changes

JaCoCo build now uses Maven Wrapper and requires at least Maven 3.9.9 (GitHub #1708, #1707, #1681).

JaCoCo now depends on ASM 9.8 (GitHub #1862).

More context information when IllegalArgumentException occurs during reading of zip file (GitHub #1833).

Commits

78d5eff Prepare release 0.8.13
e579092 Happy birthday Java 24! (#1867)
17d31aa Upgrade ASM to 9.8 (#1863)
ee07ecb Upgrade Kotlin to 2.1.20 (#1860)
f0dcc6b Bump actions/upload-artifact from 4.6.1 to 4.6.2 (#1861)
99707c3 Upgrade spotless-maven-plugin to 2.44.3 (#1851)
21f6a99 Upgrade maven-deploy-plugin to 3.1.4 (#1854)
c7da68b Upgrade maven-install-plugin to 3.1.4 (#1853)
80ebc77 Upgrade maven-clean-plugin to 3.4.1 (#1850)
0bb8bd5 Bump actions/upload-artifact from 4.6.0 to 4.6.1 (#1852)
Additional commits viewable in compare view

Updates org.jacoco:org.jacoco.ant from 0.8.12 to 0.8.13

Release notes

Sourced from org.jacoco:org.jacoco.ant's releases.

0.8.13

New Features

JaCoCo now officially supports Java 23 and Java 24 (GitHub #1757, #1631, #1867).

Experimental support for Java 25 class files (GitHub #1807).

Calculation of line coverage for Kotlin inline functions (GitHub #1670).

Calculation of line coverage for Kotlin inline functions with reified type parameter (GitHub #1670, #1700).

Calculation of coverage for Kotlin JvmSynthetic functions (GitHub #1700).

Part of bytecode generated by the Kotlin Compose compiler plugin is filtered out during generation of report (GitHub #1616).

Part of bytecode generated by the Kotlin compiler for inline value classes is filtered out during generation of report (GitHub #1475).

Part of bytecode generated by the Kotlin compiler for suspending lambdas without suspension points is filtered out during generation of report (GitHub #1283).

Part of bytecode generated by the Kotlin compiler for when expressions and statements with nullable enum subject is filtered out during generation of report (GitHub #1774).

Part of bytecode generated by the Kotlin compiler for when expressions and statements with nullable String subject is filtered out during generation of report (GitHub #1769).

Part of bytecode generated by the Kotlin compiler for chains of safe call operators is filtered out during generation of report (GitHub #1810, #1818).

Method getEntries generated by the Kotlin compiler for enum classes is filtered out during generation of report (GitHub #1625).

Methods generated by the Kotlin compiler for constructors and functions with JvmOverloads annotation are filtered out (GitHub #1768).

Fixed bugs

Fixed interpretation of Kotlin SMAP (GitHub #1525).

File extensions are preserved in HTML report in case of clashes of normalized file names (GitHub

… with 15 updates Bumps the gradle-version-updates group with 14 updates in the / directory: | Package | From | To | | --- | --- | --- | | [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson) | `2.18.2` | `2.19.2` | | [com.fasterxml.jackson.dataformat:jackson-dataformat-xml](https://github.com/FasterXML/jackson-dataformat-xml) | `2.19.0` | `2.19.2` | | [com.puppycrawl.tools:checkstyle](https://github.com/checkstyle/checkstyle) | `10.23.1` | `11.0.0` | | [com.uber.nullaway:nullaway](https://github.com/uber/NullAway) | `0.12.2` | `0.12.9` | | [com.google.errorprone:error_prone_core](https://github.com/google/error-prone) | `2.36.0` | `2.41.0` | | [com.h3xstream.findsecbugs:findsecbugs-plugin](https://github.com/find-sec-bugs/find-sec-bugs) | `1.13.0` | `1.14.0` | | [com.github.spotbugs:spotbugs](https://github.com/spotbugs/spotbugs) | `4.8.6` | `4.9.4` | | [org.jacoco:org.jacoco.agent](https://github.com/jacoco/jacoco) | `0.8.12` | `0.8.13` | | [org.junit.jupiter:junit-jupiter](https://github.com/junit-team/junit-framework) | `5.11.4` | `5.13.4` | | com.gradle.plugin-publish | `1.2.1` | `1.3.1` | | com.diffplug.spotless | `7.0.2` | `7.2.1` | | net.ltgt.errorprone | `4.1.0` | `4.3.0` | | net.ltgt.nullaway | `2.2.0` | `2.3.0` | | com.github.spotbugs | `6.1.3` | `6.2.5` | Updates `com.fasterxml.jackson.core:jackson-databind` from 2.18.2 to 2.19.2 - [Commits](https://github.com/FasterXML/jackson/commits) Updates `com.fasterxml.jackson.dataformat:jackson-dataformat-xml` from 2.19.0 to 2.19.2 - [Commits](FasterXML/jackson-dataformat-xml@jackson-dataformat-xml-2.19.0...jackson-dataformat-xml-2.19.2) Updates `com.puppycrawl.tools:checkstyle` from 10.23.1 to 11.0.0 - [Release notes](https://github.com/checkstyle/checkstyle/releases) - [Commits](checkstyle/checkstyle@checkstyle-10.23.1...checkstyle-11.0.0) Updates `com.uber.nullaway:nullaway` from 0.12.2 to 0.12.9 - [Release notes](https://github.com/uber/NullAway/releases) - [Changelog](https://github.com/uber/NullAway/blob/master/CHANGELOG.md) - [Commits](uber/NullAway@v0.12.2...v0.12.9) Updates `com.google.errorprone:error_prone_core` from 2.36.0 to 2.41.0 - [Release notes](https://github.com/google/error-prone/releases) - [Commits](google/error-prone@v2.36.0...v2.41.0) Updates `com.h3xstream.findsecbugs:findsecbugs-plugin` from 1.13.0 to 1.14.0 - [Release notes](https://github.com/find-sec-bugs/find-sec-bugs/releases) - [Changelog](https://github.com/find-sec-bugs/find-sec-bugs/blob/master/CHANGELOG.md) - [Commits](find-sec-bugs/find-sec-bugs@version-1.13.0...version-1.14.0) Updates `com.github.spotbugs:spotbugs` from 4.8.6 to 4.9.4 - [Release notes](https://github.com/spotbugs/spotbugs/releases) - [Changelog](https://github.com/spotbugs/spotbugs/blob/master/CHANGELOG.md) - [Commits](spotbugs/spotbugs@4.8.6...4.9.4) Updates `org.jacoco:org.jacoco.agent` from 0.8.12 to 0.8.13 - [Release notes](https://github.com/jacoco/jacoco/releases) - [Commits](jacoco/jacoco@v0.8.12...v0.8.13) Updates `org.jacoco:org.jacoco.ant` from 0.8.12 to 0.8.13 - [Release notes](https://github.com/jacoco/jacoco/releases) - [Commits](jacoco/jacoco@v0.8.12...v0.8.13) Updates `org.junit.jupiter:junit-jupiter` from 5.11.4 to 5.13.4 - [Release notes](https://github.com/junit-team/junit-framework/releases) - [Commits](junit-team/junit-framework@r5.11.4...r5.13.4) Updates `com.gradle.plugin-publish` from 1.2.1 to 1.3.1 Updates `com.diffplug.spotless` from 7.0.2 to 7.2.1 Updates `net.ltgt.errorprone` from 4.1.0 to 4.3.0 Updates `net.ltgt.nullaway` from 2.2.0 to 2.3.0 Updates `com.github.spotbugs` from 6.1.3 to 6.2.5 --- updated-dependencies: - dependency-name: com.fasterxml.jackson.core:jackson-databind dependency-version: 2.19.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gradle-version-updates - dependency-name: com.fasterxml.jackson.dataformat:jackson-dataformat-xml dependency-version: 2.19.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gradle-version-updates - dependency-name: com.puppycrawl.tools:checkstyle dependency-version: 11.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: gradle-version-updates - dependency-name: com.uber.nullaway:nullaway dependency-version: 0.12.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gradle-version-updates - dependency-name: com.google.errorprone:error_prone_core dependency-version: 2.41.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gradle-version-updates - dependency-name: com.h3xstream.findsecbugs:findsecbugs-plugin dependency-version: 1.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gradle-version-updates - dependency-name: com.github.spotbugs:spotbugs dependency-version: 4.9.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gradle-version-updates - dependency-name: org.jacoco:org.jacoco.agent dependency-version: 0.8.13 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gradle-version-updates - dependency-name: org.jacoco:org.jacoco.ant dependency-version: 0.8.13 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gradle-version-updates - dependency-name: org.junit.jupiter:junit-jupiter dependency-version: 5.13.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gradle-version-updates - dependency-name: com.gradle.plugin-publish dependency-version: 1.3.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gradle-version-updates - dependency-name: com.diffplug.spotless dependency-version: 7.2.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gradle-version-updates - dependency-name: net.ltgt.errorprone dependency-version: 4.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gradle-version-updates - dependency-name: net.ltgt.nullaway dependency-version: 2.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gradle-version-updates - dependency-name: com.github.spotbugs dependency-version: 6.2.5 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gradle-version-updates ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2025-09-15T18:26:09Z

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.

dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Aug 19, 2025

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump the gradle-version-updates group across 1 directory with 15 updates #22

chore(deps): bump the gradle-version-updates group across 1 directory with 15 updates #22

Uh oh!

dependabot bot commented on behalf of github Aug 19, 2025 •

edited

Loading

Uh oh!

dependabot bot commented on behalf of github Sep 15, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

chore(deps): bump the gradle-version-updates group across 1 directory with 15 updates #22

Are you sure you want to change the base?

chore(deps): bump the gradle-version-updates group across 1 directory with 15 updates #22

Uh oh!

Conversation

dependabot bot commented on behalf of github Aug 19, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

checkstyle-11.0.0

NullAway 0.12.9

NullAway 0.12.8

NullAway 0.12.7

NullAway 0.12.6

NullAway 0.12.5

Version 0.12.9

Version 0.12.8

Version 0.12.7

Version 0.12.6

Error Prone 2.41.0

Error Prone 2.40.0

Error Prone 2.39.0

Error Prone 2.38.0

Error Prone 2.37.0

Version 1.14.0

What's Changed

New Contributors

SpotBugs 4.9.4

CHANGELOG

Changed

Fixed

Added

Signing

CHECKSUM

4.9.4 - 2025-08-07

Changed

Fixed

Added

Signing

4.9.3 - 2025-03-14

Added

0.8.13

New Features

Fixed bugs

Non-functional Changes

0.8.13

New Features

Fixed bugs

Uh oh!

dependabot bot commented on behalf of github Sep 15, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot bot commented on behalf of github Aug 19, 2025 •

edited

Loading