Skip to content

fix(deps): update all#1219

Open
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/all
Open

fix(deps): update all#1219
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/all

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate Bot commented May 31, 2025

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change Age Confidence
gradle (source) patch 8.14.18.14.5 age confidence
com.github.spotbugs:spotbugs-annotations (source) dependencies patch 4.9.34.9.8 age confidence
commons-codec:commons-codec (source) dependencies minor 1.18.01.22.0 age confidence
commons-io:commons-io (source) dependencies minor 2.19.02.22.0 age confidence
org.apache.commons:commons-text (source) dependencies minor 1.13.11.15.0 age confidence
com.github.ben-manes.caffeine:caffeine dependencies patch 3.2.03.2.4 age confidence
jacoco (source) dependencies patch 0.8.130.8.15 age confidence
pmd (source) dependencies minor 7.13.07.25.0 age confidence
org.assertj:assertj-core (source) dependencies patch 3.27.33.27.7 age confidence
com.commercetools.sdk:commercetools-sdk-java-api (source) dependencies minor 19.3.019.11.0 age confidence
com.commercetools.sdk:commercetools-http-client (source) dependencies minor 19.3.019.11.0 age confidence
com.diffplug.spotless plugin minor 7.0.37.2.1 age confidence
com.github.spotbugs plugin minor 6.1.126.5.5 age confidence
com.github.ben-manes.versions plugin minor 0.52.00.54.0 age confidence
org.ajoberstar.grgit plugin patch 5.3.05.3.3 age confidence

Release Notes

gradle/gradle (gradle)

v8.14.5

Compare Source

v8.14.4

Compare Source

v8.14.3: 8.14.3

Compare Source

The Gradle team is excited to announce Gradle 8.14.3.

This is a patch release for 8.14. We recommend using 8.14.3 instead of 8.14.

Here are the highlights of this release:

  • Java 24 support
  • GraalVM Native Image toolchain selection
  • Enhancements to test reporting
  • Build Authoring improvements

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle:
Aurimas,
Ben Bader,
Björn Kautler,
chandre92,
Daniel Hammer,
Danish Nawab,
Florian Dreier,
Ivy Chen,
Jendrik Johannes,
jimmy1995-gu,
Madalin Valceleanu,
Na Minhyeok.

Upgrade instructions

Switch your build to use Gradle 8.14.3 by updating your wrapper:

./gradlew wrapper --gradle-version=8.14.3 && ./gradlew wrapper

See the Gradle 8.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

v8.14.2: 8.14.2

Compare Source

The Gradle team is excited to announce Gradle 8.14.2.

Here are the highlights of this release:

  • Java 24 support
  • GraalVM Native Image toolchain selection
  • Enhancements to test reporting
  • Build Authoring improvements

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle:
Aurimas,
Ben Bader,
Björn Kautler,
chandre92,
Daniel Hammer,
Danish Nawab,
Florian Dreier,
Ivy Chen,
Jendrik Johannes,
jimmy1995-gu,
Madalin Valceleanu,
Na Minhyeok.

Upgrade instructions

Switch your build to use Gradle 8.14.2 by updating your wrapper:

./gradlew wrapper --gradle-version=8.14.2 && ./gradlew wrapper

See the Gradle 8.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

spotbugs/spotbugs (com.github.spotbugs:spotbugs-annotations)

v4.9.8

Compare Source

Fixed
  • Maven plugin reporting issue if -adjustPriority is not set (#​3774)

v4.9.7

Compare Source

Fixed
  • Fix Eclipse not always using latest preferences file state (#​3740)
  • Fix exception throw when singleton implementing Cloneable has no clone() method (#​3727)
  • Fix for missing -adjustPriority parameter in Eclipse preferences (#​3687)
  • Documentation of -adjustPriority parameter
  • Functionality from DetectorFactory setEnabledButNonReporting(), getPriorityAdjustment() methods and BugInstance.adjustForDetector() is deprecated and moved to PriorityAdjuster (#​3753)
  • Improved FindNakedNotify to handle the case when the lock is loaded from a field (#​3634)
Changed
  • Support for fully qualified class names for detectors in -adjustPriority parameter
  • Support for numerical and absolute priority adjustments
  • Bump up Apache Commons BCEL to the version 6.11.0 (#​3569)
Deprecated
  • Add back and deprecate edu.umd.cs.findbugs.io.IO.close(InputStream) method. (#​3756)
Build
  • Allow our GA builds to work with JDK 25 (and drop support for JDK 24) (#​3564)

v4.9.6

Compare Source

Fixed
  • Fix exception throw when analyzing jakarta.servlet.http.HttpServletRequest method calls (#​3711)

v4.9.5

Compare Source

Fixed
  • Fix for an error when a record method has the @SuppressFBWarnings annotation (#​3622)
  • Fix SF_SWITCH_FALLTHROUGH false positive when continuing a loop (#​3617)
  • CWO_CLOSED_WITHOUT_OPENED false positive (#​3616)
  • SF_SWITCH_NO_DEFAULT false positive fix for switch-arrow (#​3645)
  • Fix the issue with BCEL logging Duplicating value: ... (#​3621)
  • Add missing jakarta support for servlets / pre/post destroy (#​3694)
Added
  • Add 'java.nio.file.Path.of' to known types for path traversal checks (#​3699)
Cleanup
  • S1481: Unused local variables should be removed (#​3654)
  • Moved test libraries to jakarta namespace including switching off jsr305 where possible for jakarta.annotation (#​3695)

v4.9.4

Compare Source

Changed
  • AnnotationMatcher can now ignore bugs if annotation is also applied on methods or fields. Previously only annotations on classes were considered.
  • Add relevant CWE ids to bugs and refer the CWEs in the bug messages (#​3354).
  • Replace LOCAL_VARIABLE_UNKNOWN with exact method name for NP_NULL_ON_SOME_PATH_FROM_RETURN_VALUE (#​3485)
Fixed
  • Widen main method recognition according to JEP 445. (#​3371)
  • Do not report US_USELESS_SUPPRESSION_ON_* on methods, fields, parameters, packages or classes with an *.Generated annotation with retention >= class (#​3350)(#​3409)
  • Rewrite some member in ResourceValueFrame.java to Enum (#​2061)
  • Ignore non-interpreted text when looking for FS_BAD_DATE_FORMAT_FLAG_COMBO (#​3387)
  • Fix IllegalArgumentException thrown from FindNoSideEffectMethods detector (#​3320)
  • Do not report RV_RETURN_VALUE_IGNORED_NO_SIDE_EFFECT when part of a Mockito doAnswer(), doCallRealMethod(), doNothing(), doThrow() or doReturn() call (#​3334)
  • Fix CT_CONSTRUCTOR_THROW false positive with public and private constructors in specific order of methods (#​3417)
  • Fix AT_NONATOMIC_OPERATIONS_ON_SHARED_VARIABLE, AT_NONATOMIC_64BIT_PRIMITIVE and AT_STALE_THREAD_WRITE_OF_PRIMITIVE FP when the relevant code is in private method, which is only called with proper synchronization (#​3428)
  • Do not report RV_RETURN_VALUE_IGNORED_NO_SIDE_EFFECT when part of a BDDMockito call (#​3441)
  • Fix AT_NONATOMIC_OPERATIONS_ON_SHARED_VARIABLE when field of a local variable is set. (#​3459)
  • Fix AT_NONATOMIC_OPERATIONS_ON_SHARED_VARIABLE FP when there was no compound operation (#​3363)
  • Fix NM_FIELD_NAMING_CONVENTION crash in the TestASM detector (#​3489)
  • Do not report UWF_FIELD_NOT_INITIALIZED_IN_CONSTRUCTOR for fields initialized in JUnit 3/4 setUp() method. (#​3169)
  • Fix US_USELESS_SUPPRESSION_ON_FIELD/UUF_UNUSED_FIELD false positive (#​3496)
  • Make the osgi manifest of the annotations jar Java 8 compatible (#​3498) (#​3500)
  • TextUICommandLine supports all options encoded in Eclipse preferences file (#​3520)
  • Unnecessary suppressions fix for records headers (#​3471)
  • Dead store fix when switch case contains loops (#​3530) (#​3449)
  • Consider PUTFIELD and PUTSTATIC when looking for assertions with side effects (#​3463)
  • Detect cases when equals() unconditionally returns true or false (#​3528)
  • Do not report that an Iterator does not throw NoSuchElementException when hasNext() returns true (#​3501)
  • Detect random value cast to int when stored in temporary variable (#​3461)
  • Look for interfaces default methods when searching uncalled private methods (#​1988)
  • Fixed field self assignment false positive (#​2258)
  • Fixed DMI_INVOKING_TOSTRING_ON_ARRAY on newer JDK (#​1147)
  • Fix NP_NULL_ON_SOME_PATH_FROM_RETURN_VALUE false positive with Objects.requireNonNull (#​2965) (#​3573)
  • Track inner classes access methods to correctly report the bugs (#​2029)
  • SF_SWITCH_NO_DEFAULT false positive fix (#​1148) (#​3572)
Added
  • Added the unnecessary annotation to the US_USELESS_SUPPRESSION_ON_* messages (#​3395)
  • Multi-threaded code checks can be skipped with @NotThreadSafe (#​3390)
  • New bug type CWO_CLOSED_WITHOUT_OPENED for locks that might be released without even being acquired. (See SEI CERT rule LCK08-J) (#​2055)
    • Breaking change: changed values and new items in ResourceValueFrame.
  • Inline access method for method. (#​3481)
  • Added DMI_MISLEADING_SUBSTRING for calling subString(0) on a StringBuffer/StringBuilder (#​1928)
Signing
  • Signing for Eclipse plugin has been removed at the current time due to signing keys being expired. The expired key produced a warning during install, the same is true without signing.
apache/commons-codec (commons-codec:commons-codec)

v1.22.0

The Apache Commons Codec team is pleased to announce the release of Apache Commons Codec 1.22.0.

The Apache Commons Codec component contains encoders and decoders for
formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these
widely used encoders and decoders, the codec package also maintains a
collection of phonetic encoding utilities.

This is a feature and maintenance release. Java 8 or later is required.

ben-manes/caffeine (com.github.ben-manes.caffeine:caffeine)

v3.2.4: 3.2.4

Compare Source

  • Improved access expiration's read performance by avoiding false sharing effects caused by the timestamp update
  • Fixed head-of-line blocking of expiration queues caused by in-flight async entries (#​1954)
  • Fixed various minor issues found using AI audits
  • Added ObjectInputFilter support to JCache

v3.2.3: 3.2.3

Compare Source

  • Fixed frequency tracking of weak keys to use the object's identity hash code (#​1902)
  • Added support for underscores in CaffeineSpec when using numeric literals (#​1890)
  • Improved the external api to no longer lock when querying for the maximum size or weighted size (#​1897)
  • Added detection and recovery when a custom CompletableFuture is in an inconsistent state (quarkus#50513)

v3.2.2: 3.2.2

  • Fixed characteristics returned by Spliterators (#​1883)

v3.2.1: 3.2.1

  • Fixed computeIfAbsent for an async cache's synchronous view to retry if incomplete
  • Improved CaffeineSpec when being reflectively constructed (#​1839)
  • Improved the handling of negative durations with variable expiration
  • Fixed intermittent null after replacing a weak/soft value (#​1820)
jacoco/jacoco (jacoco)

v0.8.15

v0.8.14: 0.8.14

New Features

  • JaCoCo now officially supports Java 25 (GitHub #​1950).
  • Experimental support for Java 26 class files (GitHub #​1870).
  • Branches added by the Kotlin compiler for default argument number 33 or higher are filtered out during generation of report (GitHub #​1655).
  • Part of bytecode generated by the Kotlin compiler for elvis operator that follows safe call operator is filtered out during generation of report (GitHub #​1814, #​1954).
  • Part of bytecode generated by the Kotlin compiler for more cases of chained safe call operators is filtered out during generation of report (GitHub #​1956).
  • Part of bytecode generated by the Kotlin compiler for invocations of suspendCoroutineUninterceptedOrReturn intrinsic is filtered out during generation of report (GitHub #​1929).
  • Part of bytecode generated by the Kotlin compiler for suspending lambdas with parameters is filtered out during generation of report (GitHub #​1945).
  • Part of bytecode generated by the Kotlin compiler for suspending functions and lambdas with suspension points that return inline value class is filtered out during generation of report (GitHub #​1871).
  • Part of bytecode generated by the Kotlin Compose compiler plugin for pausable composition is filtered out during generation of report (GitHub #​1911).
  • Methods generated by the Kotlin serialization compiler plugin are filtered out (GitHub #​1885, #​1970, #​1971).

Fixed bugs

  • Fixed handling of implicit else clause of when with String subject in Kotlin (GitHub #​1813, #​1940).
  • Fixed handling of implicit default clause of switch by String in Java when compiled by ECJ (GitHub #​1813, #​1940).
    Fixed handling of exceptions in chains of safe call operators in Kotlin (GitHub #​1819).

Non-functional Changes

  • JaCoCo now depends on ASM 9.9 (GitHub #​1965).
pmd/pmd (pmd)

v7.25.0: PMD 7.25.0 (29-May-2026)

29-May-2026 - 7.25.0

The PMD team is pleased to announce PMD 7.25.0.

This is a minor release.

Table Of Contents
🚀️ New and noteworthy
Updated ANTLR library to 4.13.2

We have updated the ANTLR library (parser generator) from 4.9.3 to the latest version 4.13.2,
in order to be able to use the latest version of Apex parser library.

This is an incompatible update: In case you use custom language modules based on ANTLR, you
need to make sure to regenerate all of your lexers and parsers with the new ANTLR version.

For the ANTLR based language modules, that PMD ships (kotlin and swift and various CPD modules),
this is already done.

🌟️ New and Changed Rules
New Rules
  • The new Java rule JUnitJupiterTestNoPrivateModifier find JUnit test classes and
    methods that are private. Test classes, test methods, and lifecycle methods are not required to be public,
    but they must not be private. Otherwise, they won’t be found by the test framework.
  • The new Java rule UnnecessaryBlock reports blocks that are unnecessary as
    they don't introduce a new scope. This rule helps simplify code structure by identifying and flagging
    redundant blocks that can make code harder to read and may be misleading.
  • The new Java rule VariableDeclarationUsageDistance flags local variables that are declared
    far from their usage, which can make code harder to read. The rule has a property maxDistance that allows to
    configure the maximum allowed distance between declaration and usage.
  • The new Java rule AssertStatementInTest detects usages of assert statement in tests.
    These should be replaced by framework assertion methods such as assertEquals.
    Such methods provide better error messages and make test behave correctly when running without -ea.
Changed Rules
Renamed rules and properties
  • One rule and one property have been renamed to reflect the fact that they work for both JUnit 5 and 6:

The old names still work but are deprecated.

🐛️ Fixed Issues
  • core
    • #​4972: [core] Update ANTLR to 4.13.2
    • #​6308: [core] CPD Markdown format: Add syntax highlighting
  • doc
    • #​6708: [doc] Update minimal Java version for building PMD in documentation
  • java
    • #​1102: [java] Improve consistency of utility class detection across rules
    • #​5721: [java] StackOverflowError in 7.17.0 with nested wildcard generics
    • #​5746: [java] Separate test sources and resources
    • #​6688: [java] LocalVariableCouldBeFinalRule API changed
    • #​6704: [java] Rename rules and properties with JUnit5 in the name
  • java-bestpractices
    • #​3212: [java] Enhance UseStandardCharsets to flag some constructors of IO-related classes
    • #​3777: [java] New rule: AssertStatementInTest
    • #​5477: [java] JUnit5TestShouldBePackagePrivate is not applied when @​Test method is only present in parent class
    • #​6606: [java] UnusedPrivateField: False positive on JUnit Jupiter @​FieldSource
    • #​6681: [java] UnitTestShouldIncludeAssert: False positive with JUnitSoftAssertions Rule (JUnit 4)
    • #​6710: [java] UseStandardCharsets: False negative when using lowercase standard charset names
    • #​6719: [java] UseStandardCharsets: False negative with Java 22+ and UTF-32 charsets
  • java-codestyle
    • #​2801: [java] OnlyOneReturn should have a property to allow early exits (guard clauses)
    • #​4350: [java] ClassNamingConventions: testClassPattern not applied to class that inherits all its @​Test methods
    • #​6427: [java] UnnecessaryCast: False positive for long cast before bit-shift operations on int/byte
    • #​6602: [java] LocalVariableCouldBeFinal: False negative when multiple variables are declared at once
    • #​6622: [java] New rule: UnnecessaryBlock
    • #​6640: [java] New rule: VariableDeclarationUsageDistance
  • java-design
    • #​559: [java] UseUtilityClass: False negative for constant only classes
  • java-errorprone
    • #​3288: [java] New Rule: JUnit5TestNoPrivateModifier
    • #​4288: [java] Document that CallSuperFirst/CallSuperLast are Android specific
    • #​6163: [java] ConstructorCallsOverridableMethod: False positive when method is from enclosing class
    • #​6517: [java] UselessPureMethodCall: False negative for methods on IntStream/LongStream/DoubleStream
    • #​6652: [java] AvoidInstanceofChecksInCatchClause: false negative when pattern-matching instanceof
    • #​6712: [java] UnnecessaryBooleanAssertion: Use InvocationMatcher to find assertions
  • java-multithreading
    • #​6520: [java] DoNotUseThreads: False positive on legitimate java.lang.Thread.onSpinWait() call
    • #​6636: [java] OverridingThreadRun: Fix false negatives with other methods and anonymous classes
  • kotlin
    • #​6608: [kotlin] Lexer or parse errors are reported to stderr only without file context
    • #​6648: [kotlin] Multi-dollar interpolation parse error in annotations
    • #​6659: [kotlin] Parser hangs on complex files due to unbounded ATN prediction loop
    • #​6669: [kotlin] Add AST improvements, KotlinAstUtil
🚨️ API Changes
Deprecations
Experimental API
✨️ Merged pull requests

Note

PR body was truncated to here.


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • "every weekend"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot force-pushed the renovate/all branch 5 times, most recently from 03eb329 to 99952bc Compare June 9, 2025 09:34
@renovate renovate Bot force-pushed the renovate/all branch 4 times, most recently from b56a6c0 to 9451e46 Compare June 20, 2025 12:34
@renovate renovate Bot force-pushed the renovate/all branch 3 times, most recently from 620b976 to fcff3d2 Compare June 27, 2025 12:39
@renovate renovate Bot force-pushed the renovate/all branch 3 times, most recently from fc02e2f to a5bbb3e Compare July 8, 2025 03:03
@renovate renovate Bot force-pushed the renovate/all branch 2 times, most recently from ca537aa to caf5655 Compare July 13, 2025 06:00
@renovate renovate Bot force-pushed the renovate/all branch 6 times, most recently from 56a024b to 5997ad2 Compare July 25, 2025 10:29
@renovate renovate Bot force-pushed the renovate/all branch 2 times, most recently from aece820 to 12348ee Compare August 7, 2025 16:43
@renovate renovate Bot force-pushed the renovate/all branch 5 times, most recently from 7677a99 to f2ca817 Compare August 16, 2025 09:58
@renovate renovate Bot force-pushed the renovate/all branch 3 times, most recently from 36678e3 to 99d86b7 Compare September 24, 2025 10:50
@renovate renovate Bot force-pushed the renovate/all branch 3 times, most recently from 01873a8 to 3bb2011 Compare October 18, 2025 17:40
@renovate renovate Bot force-pushed the renovate/all branch 2 times, most recently from d3bb9da to 77f1796 Compare October 31, 2025 11:57
@renovate renovate Bot force-pushed the renovate/all branch 4 times, most recently from 90ec065 to 8d75b52 Compare November 12, 2025 01:51
@renovate renovate Bot force-pushed the renovate/all branch 8 times, most recently from 66dee73 to 37509b2 Compare November 30, 2025 16:46
@renovate renovate Bot force-pushed the renovate/all branch 2 times, most recently from 8914338 to f60ffec Compare December 11, 2025 19:47
@renovate renovate Bot force-pushed the renovate/all branch 2 times, most recently from 2b2f37d to 2d57fe2 Compare January 6, 2026 16:59
@renovate renovate Bot force-pushed the renovate/all branch 4 times, most recently from d50a478 to 4b371c6 Compare January 8, 2026 20:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants