Skip to content

build(deps): bump the maven-minor-patch group across 1 directory with 21 updates - #454

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/maven/maven-minor-patch-6f70f65f68
Closed

build(deps): bump the maven-minor-patch group across 1 directory with 21 updates#454
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/maven/maven-minor-patch-6f70f65f68

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 21, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the maven-minor-patch group with 21 updates in the / directory:

Package From To
net.bytebuddy:byte-buddy 1.18.11 1.18.14
net.bytebuddy:byte-buddy-agent 1.18.11 1.18.14
net.bytebuddy:byte-buddy-agent 1.18.11 1.18.14
com.github.spotbugs:spotbugs 4.10.3 4.10.4
com.github.spotbugs:spotbugs-annotations 4.10.3 4.10.4
net.sourceforge.pmd:pmd-core 7.26.0 7.27.0
net.sourceforge.pmd:pmd-java 7.26.0 7.27.0
net.sourceforge.pmd:pmd-java 7.26.0 7.27.0
org.apache.maven.plugins:maven-compiler-plugin 3.15.0 3.16.0
org.apache.maven.plugins:maven-surefire-plugin 3.5.6 3.6.0
org.apache.maven.plugins:maven-failsafe-plugin 3.5.6 3.6.0
org.apache.maven.plugins:maven-jar-plugin 3.5.0 3.5.1
org.apache.maven.plugins:maven-install-plugin 3.1.4 3.2.0
org.apache.maven.plugins:maven-deploy-plugin 3.1.4 3.2.0
com.diffplug.spotless:spotless-maven-plugin 3.8.0 3.10.2
com.github.spotbugs:spotbugs-maven-plugin 4.10.3.0 4.10.4.1
org.pitest:pitest-maven 1.25.7 1.30.0
org.codehaus.mojo:exec-maven-plugin 3.6.3 3.6.4
org.codehaus.mojo:flatten-maven-plugin 1.7.3 1.8.0
com.github.spotbugs:spotbugs-annotations 4.10.3 4.10.4
com.fasterxml.jackson.core:jackson-databind 2.22.1 2.22.2
com.fasterxml.jackson.datatype:jackson-datatype-jsr310 2.22.1 2.22.2
org.apache.maven:apache-maven 3.9.0 3.9.16
org.apache.maven.wrapper:maven-wrapper 3.2.0 3.3.4

Updates net.bytebuddy:byte-buddy from 1.18.11 to 1.18.14

Release notes

Sourced from net.bytebuddy:byte-buddy's releases.

Byte Buddy 1.18.14

  • Avoid exposure of the agent argument on the command line of the process that is spawned for an external attachment.
  • Avoid the resolution of symbolic links when the Gradle plugin deletes a folder recursively.
  • Limit the nesting depth that is accepted when parsing a generic type signature to avoid an exhaustion of the stack for a malformed class file.
  • Sign all deployed files using sigstore, in addition to the existing GPG signature.
  • Validate entry names when the Android plugin retains a file to avoid the propagation of path traversals.

Byte Buddy 1.18.13

  • Actually include the SBOM within the published artifacts.
  • Avoid propagation of path traversals that are contained in jar files which are copied without transformation.
  • Avoid repeated traversal of previously visited type hierarchies to improve performance.
  • Correct Kotlin support of the Gradle plugin to redirect the classes directory of a source set while retaining support for legacy Gradle versions.
  • Create Gradle tasks using Gradle's task registration API if available.

Byte Buddy 1.18.12

  • Automatically support Kotlin in Gradle plugin.
  • Add support for native attach on Windows for ARM64.
  • Correct JNA injector which accidentally created on based on Unsafe.
Changelog

Sourced from net.bytebuddy:byte-buddy's changelog.

14. September 2026: version 1.18.14

  • Avoid exposure of the agent argument on the command line of the process that is spawned for an external attachment.
  • Avoid the resolution of symbolic links when the Gradle plugin deletes a folder recursively.
  • Limit the nesting depth that is accepted when parsing a generic type signature to avoid an exhaustion of the stack for a malformed class file.
  • Sign all deployed files using sigstore, in addition to the existing GPG signature.
  • Validate entry names when the Android plugin retains a file to avoid the propagation of path traversals.

2. September 2026: version 1.18.13

  • Actually include the SBOM within the published artifacts.
  • Avoid propagation of path traversals that are contained in jar files which are copied without transformation.
  • Avoid repeated traversal of previously visited type hierarchies to improve performance.
  • Correct Kotlin support of the Gradle plugin to redirect the classes directory of a source set while retaining support for legacy Gradle versions.
  • Create Gradle tasks using Gradle's task registration API if available.

17. July 2026: version 1.18.12

  • Automatically support Kotlin in Gradle plugin.
  • Correct JNA injector which accidentally created on based on Unsafe.
  • Support dynamic attach on Windows ARM64 by shipping a native attach_hotspot_windows library for win32-aarch64.
Commits
  • 92846cb [publish] Releasing Byte Buddy 1.18.14
  • a8a9f14 [release] Release new version
  • b0fe006 Skip the signature creation for artifacts that are not deployed.
  • c610783 Resolve the signed POM file by the path of the project file.
  • caab321 Sign the deployed POM file and allow for a sigstore dry run.
  • c68a9c1 Supply the agent argument to the attacher process as an environment variable.
  • 3ac9ded Avoid symbolic link resolution on recursive deletion and validate Android ent...
  • 8dbae60 Sign deployed files using sigstore.
  • 5d83cd4 Disable semantic versioning check for protected constructor in abstract class...
  • 172e0f4 Move to method to apply suppression.
  • Additional commits viewable in compare view

Updates net.bytebuddy:byte-buddy-agent from 1.18.11 to 1.18.14

Release notes

Sourced from net.bytebuddy:byte-buddy-agent's releases.

Byte Buddy 1.18.14

  • Avoid exposure of the agent argument on the command line of the process that is spawned for an external attachment.
  • Avoid the resolution of symbolic links when the Gradle plugin deletes a folder recursively.
  • Limit the nesting depth that is accepted when parsing a generic type signature to avoid an exhaustion of the stack for a malformed class file.
  • Sign all deployed files using sigstore, in addition to the existing GPG signature.
  • Validate entry names when the Android plugin retains a file to avoid the propagation of path traversals.

Byte Buddy 1.18.13

  • Actually include the SBOM within the published artifacts.
  • Avoid propagation of path traversals that are contained in jar files which are copied without transformation.
  • Avoid repeated traversal of previously visited type hierarchies to improve performance.
  • Correct Kotlin support of the Gradle plugin to redirect the classes directory of a source set while retaining support for legacy Gradle versions.
  • Create Gradle tasks using Gradle's task registration API if available.

Byte Buddy 1.18.12

  • Automatically support Kotlin in Gradle plugin.
  • Add support for native attach on Windows for ARM64.
  • Correct JNA injector which accidentally created on based on Unsafe.
Changelog

Sourced from net.bytebuddy:byte-buddy-agent's changelog.

14. September 2026: version 1.18.14

  • Avoid exposure of the agent argument on the command line of the process that is spawned for an external attachment.
  • Avoid the resolution of symbolic links when the Gradle plugin deletes a folder recursively.
  • Limit the nesting depth that is accepted when parsing a generic type signature to avoid an exhaustion of the stack for a malformed class file.
  • Sign all deployed files using sigstore, in addition to the existing GPG signature.
  • Validate entry names when the Android plugin retains a file to avoid the propagation of path traversals.

2. September 2026: version 1.18.13

  • Actually include the SBOM within the published artifacts.
  • Avoid propagation of path traversals that are contained in jar files which are copied without transformation.
  • Avoid repeated traversal of previously visited type hierarchies to improve performance.
  • Correct Kotlin support of the Gradle plugin to redirect the classes directory of a source set while retaining support for legacy Gradle versions.
  • Create Gradle tasks using Gradle's task registration API if available.

17. July 2026: version 1.18.12

  • Automatically support Kotlin in Gradle plugin.
  • Correct JNA injector which accidentally created on based on Unsafe.
  • Support dynamic attach on Windows ARM64 by shipping a native attach_hotspot_windows library for win32-aarch64.
Commits
  • 92846cb [publish] Releasing Byte Buddy 1.18.14
  • a8a9f14 [release] Release new version
  • b0fe006 Skip the signature creation for artifacts that are not deployed.
  • c610783 Resolve the signed POM file by the path of the project file.
  • caab321 Sign the deployed POM file and allow for a sigstore dry run.
  • c68a9c1 Supply the agent argument to the attacher process as an environment variable.
  • 3ac9ded Avoid symbolic link resolution on recursive deletion and validate Android ent...
  • 8dbae60 Sign deployed files using sigstore.
  • 5d83cd4 Disable semantic versioning check for protected constructor in abstract class...
  • 172e0f4 Move to method to apply suppression.
  • Additional commits viewable in compare view

Updates net.bytebuddy:byte-buddy-agent from 1.18.11 to 1.18.14

Release notes

Sourced from net.bytebuddy:byte-buddy-agent's releases.

Byte Buddy 1.18.14

  • Avoid exposure of the agent argument on the command line of the process that is spawned for an external attachment.
  • Avoid the resolution of symbolic links when the Gradle plugin deletes a folder recursively.
  • Limit the nesting depth that is accepted when parsing a generic type signature to avoid an exhaustion of the stack for a malformed class file.
  • Sign all deployed files using sigstore, in addition to the existing GPG signature.
  • Validate entry names when the Android plugin retains a file to avoid the propagation of path traversals.

Byte Buddy 1.18.13

  • Actually include the SBOM within the published artifacts.
  • Avoid propagation of path traversals that are contained in jar files which are copied without transformation.
  • Avoid repeated traversal of previously visited type hierarchies to improve performance.
  • Correct Kotlin support of the Gradle plugin to redirect the classes directory of a source set while retaining support for legacy Gradle versions.
  • Create Gradle tasks using Gradle's task registration API if available.

Byte Buddy 1.18.12

  • Automatically support Kotlin in Gradle plugin.
  • Add support for native attach on Windows for ARM64.
  • Correct JNA injector which accidentally created on based on Unsafe.
Changelog

Sourced from net.bytebuddy:byte-buddy-agent's changelog.

14. September 2026: version 1.18.14

  • Avoid exposure of the agent argument on the command line of the process that is spawned for an external attachment.
  • Avoid the resolution of symbolic links when the Gradle plugin deletes a folder recursively.
  • Limit the nesting depth that is accepted when parsing a generic type signature to avoid an exhaustion of the stack for a malformed class file.
  • Sign all deployed files using sigstore, in addition to the existing GPG signature.
  • Validate entry names when the Android plugin retains a file to avoid the propagation of path traversals.

2. September 2026: version 1.18.13

  • Actually include the SBOM within the published artifacts.
  • Avoid propagation of path traversals that are contained in jar files which are copied without transformation.
  • Avoid repeated traversal of previously visited type hierarchies to improve performance.
  • Correct Kotlin support of the Gradle plugin to redirect the classes directory of a source set while retaining support for legacy Gradle versions.
  • Create Gradle tasks using Gradle's task registration API if available.

17. July 2026: version 1.18.12

  • Automatically support Kotlin in Gradle plugin.
  • Correct JNA injector which accidentally created on based on Unsafe.
  • Support dynamic attach on Windows ARM64 by shipping a native attach_hotspot_windows library for win32-aarch64.
Commits
  • 92846cb [publish] Releasing Byte Buddy 1.18.14
  • a8a9f14 [release] Release new version
  • b0fe006 Skip the signature creation for artifacts that are not deployed.
  • c610783 Resolve the signed POM file by the path of the project file.
  • caab321 Sign the deployed POM file and allow for a sigstore dry run.
  • c68a9c1 Supply the agent argument to the attacher process as an environment variable.
  • 3ac9ded Avoid symbolic link resolution on recursive deletion and validate Android ent...
  • 8dbae60 Sign deployed files using sigstore.
  • 5d83cd4 Disable semantic versioning check for protected constructor in abstract class...
  • 172e0f4 Move to method to apply suppression.
  • Additional commits viewable in compare view

Updates com.github.spotbugs:spotbugs from 4.10.3 to 4.10.4

Release notes

Sourced from com.github.spotbugs:spotbugs's releases.

4.10.4

SpotBugs 4.10.4

CHANGELOG

Fixed

  • Fix NN_NAKED_NOTIFY false negatives when a field read is stored in a local variable before notify() or notifyAll() (#3884)
  • Fix ASE_ASSERTION_WITH_SIDE_EFFECT and ASE_ASSERTION_WITH_SIDE_EFFECT_METHOD false positives in every method analysed after a method that reads $assertionsDisabled without throwing an AssertionError (#3483)
  • Fix INT_BAD_COMPARISON_WITH_SIGNED_BYTE false positive for meaningful comparisons of a signed byte with 127 (b < 127, b >= 127) (#4201)
  • Fix EI_EXPOSE_REP false negative for public getters in anonymous classes (#4237)
  • Fix missing class report for java.util.Collections$EmptyNavigableSet and java.util.Collections$EmptyNavigableMap when the result of Collections.emptySortedSet(), emptyNavigableSet(), emptySortedMap() or emptyNavigableMap() is stored (#4244)
  • Fix URF_UNREAD_FIELD false negative for unread instance fields declared in enums (#4246)
  • Stop publishing global dependency-management constraints to consumer POMs. (#4223)

CHECKSUM

file checksum (sha256)
spotbugs-4.10.4-javadoc.jar 06bfc9ccdcfb9b594b5053817199b9489dff6312dc35c8864faa9b9357cf5be4
spotbugs-4.10.4-sources.jar d087c11e3b0714e8445b29f2bef9bb4c62b4ee13ad67caf7a4b64d61e82ea400
spotbugs-4.10.4.tgz 72bc0d4edd686e462c0f71f42a049b27bf4da6708797ff7b2b56dd202714b4e5
spotbugs-4.10.4.zip 771c8702beb2b4b6aa20df87ea85f22fda7280c7ce36fce4077b7b3c076d1e14
spotbugs-annotations-4.10.4-javadoc.jar 0fc9d3c529c6ee93aeddf9cfbd4b1438708e37fd53b5157aa47070446fbc7303
spotbugs-annotations-4.10.4-sources.jar 87974d23caffbc8c6e66c567747627267b5ed06573cee966d7af6d236b8d65bd
spotbugs-annotations.jar 28fa4befaddce5d7b79b07c68e7c12fa27c5d9282c4229528717971606661ea3
spotbugs-ant-4.10.4-javadoc.jar eaa1ee0a4e004b7b12e2dfc65290c6324effff6ffc0e7b7ee94c98875997e51c
spotbugs-ant-4.10.4-sources.jar af1c78c8e194c2f82ea3e0517ab38a5eb6ba608c8d0e776c9097605d6b7efca6
spotbugs-ant.jar 9ec240477b7c87270be7dfe3196180cd3763f04c369e5691feeb12e66110a065
spotbugs.jar a88cad2e0ea9bb74b908ce82ae89416c61fa8f8ea5cfcc9368b1baac2da878d2
test-harness-4.10.4-javadoc.jar c1ff7bcd0c4f61f4356ae9734be34567df680175651a3104fdee241e324d6df7
test-harness-4.10.4-sources.jar 805d2d124b0d4ea513ee9262d4ad6027c3471d45defd80fd7d20e23425d17df7
test-harness-4.10.4.jar bd10d1f11a1b93e4ca4db4d27772f611bd3407f9452dbbd2d1ba62584ddc171f
test-harness-core-4.10.4-javadoc.jar ac735a1508609001d122a91e43f6dfb10c4c691cf555d5ba386f216df904ac9b
test-harness-core-4.10.4-sources.jar 043a55d99a517c0d9cf702b0c183b4afd3f03af9eff4a86d59bb37df1b35b532
test-harness-core-4.10.4.jar 1f9a0ee8f150dd71f960ca4f59dcf7912a45d0e9e6aefc4585fd44b975454bc0
test-harness-jupiter-4.10.4-javadoc.jar c9554b4a6509d0d24c6436b6e01171eb8e71fca96df6edf8f80c7b51ab5bda16
test-harness-jupiter-4.10.4-sources.jar 17144f315686bfd01c02fa4ae7c916060c41de8eed58d5b8470416fa08f46ced
test-harness-jupiter-4.10.4.jar a91146da3e993479cfefd2690781cbd102c6360ecc63a96d88995be3bd60fcbb
Changelog

Sourced from com.github.spotbugs:spotbugs's changelog.

4.10.4 - 2026-08-19

Fixed

  • Fix NN_NAKED_NOTIFY false negatives when a field read is stored in a local variable before notify() or notifyAll() (#3884)
  • Fix ASE_ASSERTION_WITH_SIDE_EFFECT and ASE_ASSERTION_WITH_SIDE_EFFECT_METHOD false positives in every method analysed after a method that reads $assertionsDisabled without throwing an AssertionError (#3483)
  • Fix INT_BAD_COMPARISON_WITH_SIGNED_BYTE false positive for meaningful comparisons of a signed byte with 127 (b < 127, b >= 127) (#4201)
  • Fix EI_EXPOSE_REP false negative for public getters in anonymous classes (#4237)
  • Fix missing class report for java.util.Collections$EmptyNavigableSet and java.util.Collections$EmptyNavigableMap when the result of Collections.emptySortedSet(), emptyNavigableSet(), emptySortedMap() or emptyNavigableMap() is stored (#4244)
  • Fix URF_UNREAD_FIELD false negative for unread instance fields declared in enums (#4246)
  • Stop publishing global dependency-management constraints to consumer POMs. (#4223)
Commits
  • 1a58a48 release v4.10.4
  • 160d4a6 Gradle build cleanup (#4255)
  • 2354168 Fix EI_EXPOSE_REP not reported for anonymous-class getters (#4237)
  • 4895bce Fix naked notify detection after local stores (#4245)
  • 28348e5 Fixes #3955 : Fix URF_UNREAD_FIELD false negative for unread fields i… (#4246)
  • 3ec259e chore(build): Add changelog regarding dependency management constraints remov...
  • 33075ce Remove eclipse table latest as noted version 3.1 that is long retired and dis...
  • 1bf27d8 Update Gradle to v9.7.1 (#4252)
  • ee61d5b Update dependency com.google.guava:guava to v33.7.1-jre (#4250)
  • f352226 Update plugin com.diffplug.spotless to v8.10.0 (#4249)
  • Additional commits viewable in compare view

Updates com.github.spotbugs:spotbugs-annotations from 4.10.3 to 4.10.4

Release notes

Sourced from com.github.spotbugs:spotbugs-annotations's releases.

4.10.4

SpotBugs 4.10.4

CHANGELOG

Fixed

  • Fix NN_NAKED_NOTIFY false negatives when a field read is stored in a local variable before notify() or notifyAll() (#3884)
  • Fix ASE_ASSERTION_WITH_SIDE_EFFECT and ASE_ASSERTION_WITH_SIDE_EFFECT_METHOD false positives in every method analysed after a method that reads $assertionsDisabled without throwing an AssertionError (#3483)
  • Fix INT_BAD_COMPARISON_WITH_SIGNED_BYTE false positive for meaningful comparisons of a signed byte with 127 (b < 127, b >= 127) (#4201)
  • Fix EI_EXPOSE_REP false negative for public getters in anonymous classes (#4237)
  • Fix missing class report for java.util.Collections$EmptyNavigableSet and java.util.Collections$EmptyNavigableMap when the result of Collections.emptySortedSet(), emptyNavigableSet(), emptySortedMap() or emptyNavigableMap() is stored (#4244)
  • Fix URF_UNREAD_FIELD false negative for unread instance fields declared in enums (#4246)
  • Stop publishing global dependency-management constraints to consumer POMs. (#4223)

CHECKSUM

file checksum (sha256)
spotbugs-4.10.4-javadoc.jar 06bfc9ccdcfb9b594b5053817199b9489dff6312dc35c8864faa9b9357cf5be4
spotbugs-4.10.4-sources.jar d087c11e3b0714e8445b29f2bef9bb4c62b4ee13ad67caf7a4b64d61e82ea400
spotbugs-4.10.4.tgz 72bc0d4edd686e462c0f71f42a049b27bf4da6708797ff7b2b56dd202714b4e5
spotbugs-4.10.4.zip 771c8702beb2b4b6aa20df87ea85f22fda7280c7ce36fce4077b7b3c076d1e14
spotbugs-annotations-4.10.4-javadoc.jar 0fc9d3c529c6ee93aeddf9cfbd4b1438708e37fd53b5157aa47070446fbc7303
spotbugs-annotations-4.10.4-sources.jar 87974d23caffbc8c6e66c567747627267b5ed06573cee966d7af6d236b8d65bd
spotbugs-annotations.jar 28fa4befaddce5d7b79b07c68e7c12fa27c5d9282c4229528717971606661ea3
spotbugs-ant-4.10.4-javadoc.jar eaa1ee0a4e004b7b12e2dfc65290c6324effff6ffc0e7b7ee94c98875997e51c
spotbugs-ant-4.10.4-sources.jar af1c78c8e194c2f82ea3e0517ab38a5eb6ba608c8d0e776c9097605d6b7efca6
spotbugs-ant.jar 9ec240477b7c87270be7dfe3196180cd3763f04c369e5691feeb12e66110a065
spotbugs.jar a88cad2e0ea9bb74b908ce82ae89416c61fa8f8ea5cfcc9368b1baac2da878d2
test-harness-4.10.4-javadoc.jar c1ff7bcd0c4f61f4356ae9734be34567df680175651a3104fdee241e324d6df7
test-harness-4.10.4-sources.jar 805d2d124b0d4ea513ee9262d4ad6027c3471d45defd80fd7d20e23425d17df7
test-harness-4.10.4.jar bd10d1f11a1b93e4ca4db4d27772f611bd3407f9452dbbd2d1ba62584ddc171f
test-harness-core-4.10.4-javadoc.jar ac735a1508609001d122a91e43f6dfb10c4c691cf555d5ba386f216df904ac9b
test-harness-core-4.10.4-sources.jar 043a55d99a517c0d9cf702b0c183b4afd3f03af9eff4a86d59bb37df1b35b532
test-harness-core-4.10.4.jar 1f9a0ee8f150dd71f960ca4f59dcf7912a45d0e9e6aefc4585fd44b975454bc0
test-harness-jupiter-4.10.4-javadoc.jar c9554b4a6509d0d24c6436b6e01171eb8e71fca96df6edf8f80c7b51ab5bda16
test-harness-jupiter-4.10.4-sources.jar 17144f315686bfd01c02fa4ae7c916060c41de8eed58d5b8470416fa08f46ced
test-harness-jupiter-4.10.4.jar a91146da3e993479cfefd2690781cbd102c6360ecc63a96d88995be3bd60fcbb
Changelog

Sourced from com.github.spotbugs:spotbugs-annotations's changelog.

4.10.4 - 2026-08-19

Fixed

  • Fix NN_NAKED_NOTIFY false negatives when a field read is stored in a local variable before notify() or notifyAll() (#3884)
  • Fix ASE_ASSERTION_WITH_SIDE_EFFECT and ASE_ASSERTION_WITH_SIDE_EFFECT_METHOD false positives in every method analysed after a method that reads $assertionsDisabled without throwing an AssertionError (#3483)
  • Fix INT_BAD_COMPARISON_WITH_SIGNED_BYTE false positive for meaningful comparisons of a signed byte with 127 (b < 127, b >= 127) (#4201)
  • Fix EI_EXPOSE_REP false negative for public getters in anonymous classes (#4237)
  • Fix missing class report for java.util.Collections$EmptyNavigableSet and java.util.Collections$EmptyNavigableMap when the result of Collections.emptySortedSet(), emptyNavigableSet(), emptySortedMap() or emptyNavigableMap() is stored (#4244)
  • Fix URF_UNREAD_FIELD false negative for unread instance fields declared in enums (#4246)
  • Stop publishing global dependency-management constraints to consumer POMs. (#4223)
Commits
  • 1a58a48 release v4.10.4
  • 160d4a6 Gradle build cleanup (#4255)
  • 2354168 Fix EI_EXPOSE_REP not reported for anonymous-class getters (#4237)
  • 4895bce Fix naked notify detection after local stores (#4245)
  • 28348e5 Fixes #3955 : Fix URF_UNREAD_FIELD false negative for unread fields i… (#4246)
  • 3ec259e chore(build): Add changelog regarding dependency management constraints remov...
  • 33075ce Remove eclipse table latest as noted version 3.1 that is long retired and dis...
  • 1bf27d8 Update Gradle to v9.7.1 (#4252)
  • ee61d5b Update dependency com.google.guava:guava to v33.7.1-jre (#4250)
  • f352226 Update plugin com.diffplug.spotless to v8.10.0 (#4249)
  • Additional commits viewable in compare view

Updates net.sourceforge.pmd:pmd-core from 7.26.0 to 7.27.0

Release notes

Sourced from net.sourceforge.pmd:pmd-core's releases.

PMD 7.27.0 (28-August-2026)

28-August-2026 - 7.27.0

The PMD team is pleased to announce PMD 7.27.0.

This is a minor release.

Table Of Contents

🚀️ New and noteworthy

Java 27 Support

This release of PMD brings support for Java 27.

There are no new standard language features.

There is one preview language feature:

In order to analyze a project with PMD that uses these preview language features, you'll need to select the new language version 27-preview:

pmd check --use-version java-27-preview ...

Note: Support for Java 25 preview language features have been removed. The version "25-preview" is no longer available.

Updated Apex Support

The Apex language support has been bumped to version 67.0 (Summer '26). It supports the new Multiline String literals.

... (truncated)

Commits
  • 360072e [release] prepare release pmd_releases/7.27.0
  • 28eb3da Prepare pmd release 7.27.0
  • 9fadcc2 Update contributors for 7.27.0
  • 6dbb11d chore(deps): bump io.github.apex-dev-tools:apex-parser from 5.1.0 to 5.2.0 (#...
  • 9a721bd chore(deps): bump com.puppycrawl.tools:checkstyle from 13.10.0 to 14.0.0 (#6999)
  • f017e5d chore(deps-dev): bump byte.buddy.version from 1.18.11 to 1.18.12 (#6998)
  • 85ac0c4 chore(deps): bump com.google.protobuf:protobuf-java from 4.35.1 to 4.36.0 (#6...
  • cd096e9 [java] Fix #6943: UnnecessaryCast: false positives related to generics (#6982)
  • 578f653 [java] Move ProtectedMemberInFinalClass to design category (#6990)
  • 89b473e [java] Fix #6537: StaticEJBFieldShouldBeFinal detects @Stateless/@Stateful/@​S...
  • Additional commits viewable in compare view

Updates net.sourceforge.pmd:pmd-java from 7.26.0 to 7.27.0

Release notes

Sourced from net.sourceforge.pmd:pmd-java's releases.

PMD 7.27.0 (28-August-2026)

28-August-2026 - 7.27.0

The PMD team is pleased to announce PMD 7.27.0.

This is a minor release.

Table Of Contents

🚀️ New and noteworthy

Java 27 Support

This release of PMD brings support for Java 27.

There are no new standard language features.

There is one preview language feature:

In order to analyze a project with PMD that uses these preview language features, you'll need to select the new language version 27-preview:

pmd check --use-version java-27-preview ...

Note: Support for Java 25 preview language features have been removed. The version "25-preview" is no longer available.

Updated Apex Support

The Apex language support has been bumped to version 67.0 (Summer '26). It supports the new Multiline String literals.

... (truncated)

Commits
  • 360072e [release] prepare release pmd_releases/7.27.0
  • 28eb3da Prepare pmd release 7.27.0
  • 9fadcc2 Update contributors for 7.27.0
  • 6dbb11d chore(deps): bump io.github.apex-dev-tools:apex-parser from 5.1.0 to 5.2.0 (#...
  • 9a721bd chore(deps): bump com.puppycrawl.tools:checkstyle from 13.10.0 to 14.0.0 (#6999)
  • f017e5d chore(deps-dev): bump byte.buddy.version from 1.18.11 to 1.18.12 (#6998)
  • 85ac0c4 chore(deps): bump com.google.protobuf:protobuf-java from 4.35.1 to 4.36.0 (#6...
  • cd096e9 [java] Fix #6943: UnnecessaryCast: false positives related to generics (#6982)
  • 578f653 [java] Move ProtectedMemberInFinalClass to design category (#6990)
  • 89b473e [java] Fix #6537: StaticEJBFieldShouldBeFinal detects @Stateless/@Stateful/@​S...
  • Additional commits viewable in compare view

Updates net.sourceforge.pmd:pmd-java from 7.26.0 to 7.27.0

Release notes

Sourced from net.sourceforge.pmd:pmd-java's releases.

PMD 7.27.0 (28-August-2026)

28-August-2026 - 7.27.0

The PMD team is pleased to announce PMD 7.27.0.

This is a minor release.

Table Of Contents

🚀️ New and noteworthy

Java 27 Support

This release of PMD brings support for Java 27.

There are no new standard language features.

There is one preview language feature:

In order to analyze a project with PMD that uses these preview language features, you'll need to select the new language version 27-preview:

pmd check --use-version java-27-preview ...

Note: Support for Java 25 preview language features have been removed. The version "25-preview" is no longer available.

Updated Apex Support

The Apex language support has been bumped to version 67.0 (Summer '26). It supports the new Multiline String literals.

... (truncated)

Commits
  • 360072e [release] prepare release pmd_releases/7.27.0
  • 28eb3da Prepare pmd release 7.27.0
  • 9fadcc2 Update contributors for 7.27.0
  • 6dbb11d chore(deps): bump io.github.apex-dev-tools:apex-parser from 5.1.0 to 5.2.0 (#...
  • 9a721bd chore(deps): bump com.puppycrawl.tools:checkstyle from 13.10.0 to 14.0.0 (#6999)
  • f017e5d chore(deps-dev): bump byte.buddy.version from 1.18.11 to 1.18.12 (#6998)
  • 85ac0c4 chore(deps): bump com.google.protobuf:protobuf-java from 4.35.1 to 4.36.0 (#6...
  • cd096e9 [java] Fix #6943: UnnecessaryCast: false positives related to generics (#6982)
  • 578f653 [java] Move ProtectedMemberInFinalClass to design category (#6990)
  • 89b473e [java] Fix #6537: StaticEJBFieldShouldBeFinal detects @Stateless/@Stateful/@​S...
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-compiler-plugin from 3.15.0 to 3.16.0

Release notes

Sourced from org.apache.maven.plugins:maven-compiler-plugin's releases.

3.16.0

🚀 New features and improvements

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

📦 Dependency updates

Commits
  • e7bba6e [maven-release-plugin] prepare release maven-compiler-plugin-3.16.0
  • c906809 Avoid using deprecated method CompilerConfiguration.setCompilerVersion
  • ad74fee Replace adopt-openj9 by semeru JDK distribution on GH
  • beb0eda Recompile when dependencies change (#1102)
  • a0b689e [MCOMPILER-578] Track outputs across compiler executions (#1091)
  • 2e81228 Fix incremental detection of empty sources, 3.x (#1075)
  • 2132f5b configure ATR project
  • 5992b77 Build fails when annotation processor list is empty (but present) (#1077)
  • acccef7 Bump plexusCompilerVersion from 2.16.2 to 2.17.0
  • 72bc445 Bump org.codehaus.plexus:plexus-java from 1.5.2 to 1.6.0
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-surefire-plugin from 3.5.6 to 3.6.0

Release notes

Sourced from org.apache.maven.plugins:maven-surefire-plugin's releases.

3.6.0

Please refer to the m...

Description has been truncated

@dependabot
build(deps): bump the maven-minor-patch group across 1 directory with…
8c1d8d4 
… 21 updates

Bumps the maven-minor-patch group with 21 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [net.bytebuddy:byte-buddy](https://github.com/raphw/byte-buddy) | `1.18.11` | `1.18.14` |
| [net.bytebuddy:byte-buddy-agent](https://github.com/raphw/byte-buddy) | `1.18.11` | `1.18.14` |
| [net.bytebuddy:byte-buddy-agent](https://github.com/raphw/byte-buddy) | `1.18.11` | `1.18.14` |
| [com.github.spotbugs:spotbugs](https://github.com/spotbugs/spotbugs) | `4.10.3` | `4.10.4` |
| [com.github.spotbugs:spotbugs-annotations](https://github.com/spotbugs/spotbugs) | `4.10.3` | `4.10.4` |
| [net.sourceforge.pmd:pmd-core](https://github.com/pmd/pmd) | `7.26.0` | `7.27.0` |
| [net.sourceforge.pmd:pmd-java](https://github.com/pmd/pmd) | `7.26.0` | `7.27.0` |
| [net.sourceforge.pmd:pmd-java](https://github.com/pmd/pmd) | `7.26.0` | `7.27.0` |
| [org.apache.maven.plugins:maven-compiler-plugin](https://github.com/apache/maven-compiler-plugin) | `3.15.0` | `3.16.0` |
| [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) | `3.5.6` | `3.6.0` |
| [org.apache.maven.plugins:maven-failsafe-plugin](https://github.com/apache/maven-surefire) | `3.5.6` | `3.6.0` |
| [org.apache.maven.plugins:maven-jar-plugin](https://github.com/apache/maven-jar-plugin) | `3.5.0` | `3.5.1` |
| [org.apache.maven.plugins:maven-install-plugin](https://github.com/apache/maven-install-plugin) | `3.1.4` | `3.2.0` |
| [org.apache.maven.plugins:maven-deploy-plugin](https://github.com/apache/maven-deploy-plugin) | `3.1.4` | `3.2.0` |
| [com.diffplug.spotless:spotless-maven-plugin](https://github.com/diffplug/spotless) | `3.8.0` | `3.10.2` |
| [com.github.spotbugs:spotbugs-maven-plugin](https://github.com/spotbugs/spotbugs-maven-plugin) | `4.10.3.0` | `4.10.4.1` |
| [org.pitest:pitest-maven](https://github.com/hcoles/pitest) | `1.25.7` | `1.30.0` |
| [org.codehaus.mojo:exec-maven-plugin](https://github.com/mojohaus/exec-maven-plugin) | `3.6.3` | `3.6.4` |
| [org.codehaus.mojo:flatten-maven-plugin](https://github.com/mojohaus/flatten-maven-plugin) | `1.7.3` | `1.8.0` |
| [com.github.spotbugs:spotbugs-annotations](https://github.com/spotbugs/spotbugs) | `4.10.3` | `4.10.4` |
| [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson-databind) | `2.22.1` | `2.22.2` |
| com.fasterxml.jackson.datatype:jackson-datatype-jsr310 | `2.22.1` | `2.22.2` |
| org.apache.maven:apache-maven | `3.9.0` | `3.9.16` |
| [org.apache.maven.wrapper:maven-wrapper](https://github.com/apache/maven-wrapper) | `3.2.0` | `3.3.4` |



Updates `net.bytebuddy:byte-buddy` from 1.18.11 to 1.18.14
- [Release notes](https://github.com/raphw/byte-buddy/releases)
- [Changelog](https://github.com/raphw/byte-buddy/blob/master/release-notes.md)
- [Commits](raphw/byte-buddy@byte-buddy-1.18.11...byte-buddy-1.18.14)

Updates `net.bytebuddy:byte-buddy-agent` from 1.18.11 to 1.18.14
- [Release notes](https://github.com/raphw/byte-buddy/releases)
- [Changelog](https://github.com/raphw/byte-buddy/blob/master/release-notes.md)
- [Commits](raphw/byte-buddy@byte-buddy-1.18.11...byte-buddy-1.18.14)

Updates `net.bytebuddy:byte-buddy-agent` from 1.18.11 to 1.18.14
- [Release notes](https://github.com/raphw/byte-buddy/releases)
- [Changelog](https://github.com/raphw/byte-buddy/blob/master/release-notes.md)
- [Commits](raphw/byte-buddy@byte-buddy-1.18.11...byte-buddy-1.18.14)

Updates `com.github.spotbugs:spotbugs` from 4.10.3 to 4.10.4
- [Release notes](https://github.com/spotbugs/spotbugs/releases)
- [Changelog](https://github.com/spotbugs/spotbugs/blob/master/CHANGELOG.md)
- [Commits](spotbugs/spotbugs@4.10.3...4.10.4)

Updates `com.github.spotbugs:spotbugs-annotations` from 4.10.3 to 4.10.4
- [Release notes](https://github.com/spotbugs/spotbugs/releases)
- [Changelog](https://github.com/spotbugs/spotbugs/blob/master/CHANGELOG.md)
- [Commits](spotbugs/spotbugs@4.10.3...4.10.4)

Updates `net.sourceforge.pmd:pmd-core` from 7.26.0 to 7.27.0
- [Release notes](https://github.com/pmd/pmd/releases)
- [Commits](pmd/pmd@pmd_releases/7.26.0...pmd_releases/7.27.0)

Updates `net.sourceforge.pmd:pmd-java` from 7.26.0 to 7.27.0
- [Release notes](https://github.com/pmd/pmd/releases)
- [Commits](pmd/pmd@pmd_releases/7.26.0...pmd_releases/7.27.0)

Updates `net.sourceforge.pmd:pmd-java` from 7.26.0 to 7.27.0
- [Release notes](https://github.com/pmd/pmd/releases)
- [Commits](pmd/pmd@pmd_releases/7.26.0...pmd_releases/7.27.0)

Updates `org.apache.maven.plugins:maven-compiler-plugin` from 3.15.0 to 3.16.0
- [Release notes](https://github.com/apache/maven-compiler-plugin/releases)
- [Commits](apache/maven-compiler-plugin@maven-compiler-plugin-3.15.0...maven-compiler-plugin-3.16.0)

Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.5.6 to 3.6.0
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.5.6...surefire-3.6.0)

Updates `org.apache.maven.plugins:maven-failsafe-plugin` from 3.5.6 to 3.6.0
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.5.6...surefire-3.6.0)

Updates `org.apache.maven.plugins:maven-jar-plugin` from 3.5.0 to 3.5.1
- [Release notes](https://github.com/apache/maven-jar-plugin/releases)
- [Commits](apache/maven-jar-plugin@maven-jar-plugin-3.5.0...maven-jar-plugin-3.5.1)

Updates `org.apache.maven.plugins:maven-install-plugin` from 3.1.4 to 3.2.0
- [Release notes](https://github.com/apache/maven-install-plugin/releases)
- [Commits](apache/maven-install-plugin@maven-install-plugin-3.1.4...maven-install-plugin-3.2.0)

Updates `org.apache.maven.plugins:maven-deploy-plugin` from 3.1.4 to 3.2.0
- [Release notes](https://github.com/apache/maven-deploy-plugin/releases)
- [Commits](apache/maven-deploy-plugin@maven-deploy-plugin-3.1.4...maven-deploy-plugin-3.2.0)

Updates `com.diffplug.spotless:spotless-maven-plugin` from 3.8.0 to 3.10.2
- [Release notes](https://github.com/diffplug/spotless/releases)
- [Changelog](https://github.com/diffplug/spotless/blob/main/CHANGES.md)
- [Commits](diffplug/spotless@maven/3.8.0...maven/3.10.2)

Updates `com.github.spotbugs:spotbugs-maven-plugin` from 4.10.3.0 to 4.10.4.1
- [Release notes](https://github.com/spotbugs/spotbugs-maven-plugin/releases)
- [Commits](spotbugs/spotbugs-maven-plugin@spotbugs-maven-plugin-4.10.3.0...spotbugs-maven-plugin-4.10.4.1)

Updates `org.pitest:pitest-maven` from 1.25.7 to 1.30.0
- [Release notes](https://github.com/hcoles/pitest/releases)
- [Commits](hcoles/pitest@1.25.7...1.30.0)

Updates `org.codehaus.mojo:exec-maven-plugin` from 3.6.3 to 3.6.4
- [Release notes](https://github.com/mojohaus/exec-maven-plugin/releases)
- [Commits](mojohaus/exec-maven-plugin@3.6.3...3.6.4)

Updates `org.codehaus.mojo:flatten-maven-plugin` from 1.7.3 to 1.8.0
- [Release notes](https://github.com/mojohaus/flatten-maven-plugin/releases)
- [Commits](mojohaus/flatten-maven-plugin@1.7.3...1.8.0)

Updates `com.github.spotbugs:spotbugs-annotations` from 4.10.3 to 4.10.4
- [Release notes](https://github.com/spotbugs/spotbugs/releases)
- [Changelog](https://github.com/spotbugs/spotbugs/blob/master/CHANGELOG.md)
- [Commits](spotbugs/spotbugs@4.10.3...4.10.4)

Updates `com.fasterxml.jackson.core:jackson-databind` from 2.22.1 to 2.22.2
- [Commits](FasterXML/jackson-databind@jackson-databind-2.22.1...jackson-databind-2.22.2)

Updates `com.fasterxml.jackson.datatype:jackson-datatype-jsr310` from 2.22.1 to 2.22.2

Updates `org.apache.maven:apache-maven` from 3.9.0 to 3.9.16

Updates `org.apache.maven.wrapper:maven-wrapper` from 3.2.0 to 3.3.4
- [Release notes](https://github.com/apache/maven-wrapper/releases)
- [Commits](apache/maven-wrapper@maven-wrapper-3.2.0...maven-wrapper-3.3.4)

---
updated-dependencies:
- dependency-name: net.bytebuddy:byte-buddy
  dependency-version: 1.18.14
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: maven-minor-patch
- dependency-name: net.bytebuddy:byte-buddy-agent
  dependency-version: 1.18.14
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: maven-minor-patch
- dependency-name: net.bytebuddy:byte-buddy-agent
  dependency-version: 1.18.14
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: maven-minor-patch
- dependency-name: com.github.spotbugs:spotbugs
  dependency-version: 4.10.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-minor-patch
- dependency-name: com.github.spotbugs:spotbugs-annotations
  dependency-version: 4.10.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-minor-patch
- dependency-name: net.sourceforge.pmd:pmd-core
  dependency-version: 7.27.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-minor-patch
- dependency-name: net.sourceforge.pmd:pmd-java
  dependency-version: 7.27.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-minor-patch
- dependency-name: net.sourceforge.pmd:pmd-java
  dependency-version: 7.27.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-minor-patch
- dependency-name: org.apache.maven.plugins:maven-compiler-plugin
  dependency-version: 3.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-minor-patch
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
  dependency-version: 3.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-minor-patch
- dependency-name: org.apache.maven.plugins:maven-failsafe-plugin
  dependency-version: 3.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-minor-patch
- dependency-name: org.apache.maven.plugins:maven-jar-plugin
  dependency-version: 3.5.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-minor-patch
- dependency-name: org.apache.maven.plugins:maven-install-plugin
  dependency-version: 3.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-minor-patch
- dependency-name: org.apache.maven.plugins:maven-deploy-plugin
  dependency-version: 3.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-minor-patch
- dependency-name: com.diffplug.spotless:spotless-maven-plugin
  dependency-version: 3.10.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-minor-patch
- dependency-name: com.github.spotbugs:spotbugs-maven-plugin
  dependency-version: 4.10.4.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-minor-patch
- dependency-name: org.pitest:pitest-maven
  dependency-version: 1.30.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-minor-patch
- dependency-name: org.codehaus.mojo:exec-maven-plugin
  dependency-version: 3.6.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-minor-patch
- dependency-name: org.codehaus.mojo:flatten-maven-plugin
  dependency-version: 1.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-minor-patch
- dependency-name: com.github.spotbugs:spotbugs-annotations
  dependency-version: 4.10.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-minor-patch
- dependency-name: com.fasterxml.jackson.core:jackson-databind
  dependency-version: 2.22.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-minor-patch
- dependency-name: com.fasterxml.jackson.datatype:jackson-datatype-jsr310
  dependency-version: 2.22.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-minor-patch
- dependency-name: org.apache.maven:apache-maven
  dependency-version: 3.9.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-minor-patch
- dependency-name: org.apache.maven.wrapper:maven-wrapper
  dependency-version: 3.3.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Sep 21, 2026
@dependabot @github

dependabot Bot commented on behalf of github Sep 28, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Sep 28, 2026
@dependabot
dependabot Bot deleted the dependabot/maven/maven-minor-patch-6f70f65f68 branch September 28, 2026 10:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants