fix(deps): update all#1219
Open
renovate[bot] wants to merge 1 commit into
Open
Conversation
03eb329 to
99952bc
Compare
b56a6c0 to
9451e46
Compare
620b976 to
fcff3d2
Compare
fc02e2f to
a5bbb3e
Compare
ca537aa to
caf5655
Compare
56a024b to
5997ad2
Compare
aece820 to
12348ee
Compare
7677a99 to
f2ca817
Compare
36678e3 to
99d86b7
Compare
01873a8 to
3bb2011
Compare
3bb2011 to
022e1c8
Compare
d3bb9da to
77f1796
Compare
90ec065 to
8d75b52
Compare
66dee73 to
37509b2
Compare
8914338 to
f60ffec
Compare
2b2f37d to
2d57fe2
Compare
d50a478 to
4b371c6
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
8.14.1→8.14.54.9.3→4.9.81.18.0→1.22.02.19.0→2.22.01.13.1→1.15.03.2.0→3.2.40.8.13→0.8.157.13.0→7.25.03.27.3→3.27.719.3.0→19.11.019.3.0→19.11.07.0.3→7.2.16.1.12→6.5.50.52.0→0.54.05.3.0→5.3.3Release Notes
gradle/gradle (gradle)
v8.14.5Compare Source
v8.14.4Compare Source
v8.14.3: 8.14.3Compare Source
The Gradle team is excited to announce Gradle 8.14.3.
This is a patch release for 8.14. We recommend using 8.14.3 instead of 8.14.
Here are the highlights of this release:
Read the Release Notes
We would like to thank the following community members for their contributions to this release of Gradle:
Aurimas,
Ben Bader,
Björn Kautler,
chandre92,
Daniel Hammer,
Danish Nawab,
Florian Dreier,
Ivy Chen,
Jendrik Johannes,
jimmy1995-gu,
Madalin Valceleanu,
Na Minhyeok.
Upgrade instructions
Switch your build to use Gradle 8.14.3 by updating your wrapper:
See the Gradle 8.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.
For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.
Reporting problems
If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.
We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.
v8.14.2: 8.14.2Compare Source
The Gradle team is excited to announce Gradle 8.14.2.
Here are the highlights of this release:
Read the Release Notes
We would like to thank the following community members for their contributions to this release of Gradle:
Aurimas,
Ben Bader,
Björn Kautler,
chandre92,
Daniel Hammer,
Danish Nawab,
Florian Dreier,
Ivy Chen,
Jendrik Johannes,
jimmy1995-gu,
Madalin Valceleanu,
Na Minhyeok.
Upgrade instructions
Switch your build to use Gradle 8.14.2 by updating your wrapper:
See the Gradle 8.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.
For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.
Reporting problems
If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.
We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.
spotbugs/spotbugs (com.github.spotbugs:spotbugs-annotations)
v4.9.8Compare Source
Fixed
v4.9.7Compare Source
Fixed
FindNakedNotifyto handle the case when the lock is loaded from a field (#3634)Changed
Deprecated
edu.umd.cs.findbugs.io.IO.close(InputStream)method. (#3756)Build
v4.9.6Compare Source
Fixed
jakarta.servlet.http.HttpServletRequestmethod calls (#3711)v4.9.5Compare Source
Fixed
@SuppressFBWarningsannotation (#3622)SF_SWITCH_FALLTHROUGHfalse positive when continuing a loop (#3617)CWO_CLOSED_WITHOUT_OPENEDfalse positive (#3616)SF_SWITCH_NO_DEFAULTfalse positive fix for switch-arrow (#3645)Duplicating value: ...(#3621)Added
Cleanup
v4.9.4Compare Source
Changed
AnnotationMatchercan now ignore bugs if annotation is also applied on methods or fields. Previously only annotations on classes were considered.LOCAL_VARIABLE_UNKNOWNwith exact method name forNP_NULL_ON_SOME_PATH_FROM_RETURN_VALUE(#3485)Fixed
US_USELESS_SUPPRESSION_ON_*on methods, fields, parameters, packages or classes with an*.Generatedannotation with retention >= class (#3350)(#3409)ResourceValueFrame.javato Enum (#2061)FS_BAD_DATE_FORMAT_FLAG_COMBO(#3387)FindNoSideEffectMethodsdetector (#3320)RV_RETURN_VALUE_IGNORED_NO_SIDE_EFFECTwhen part of a MockitodoAnswer(),doCallRealMethod(),doNothing(),doThrow()ordoReturn()call (#3334)CT_CONSTRUCTOR_THROWfalse positive with public and private constructors in specific order of methods (#3417)AT_NONATOMIC_OPERATIONS_ON_SHARED_VARIABLE,AT_NONATOMIC_64BIT_PRIMITIVEandAT_STALE_THREAD_WRITE_OF_PRIMITIVEFP when the relevant code is in private method, which is only called with proper synchronization (#3428)RV_RETURN_VALUE_IGNORED_NO_SIDE_EFFECTwhen part of a BDDMockito call (#3441)AT_NONATOMIC_OPERATIONS_ON_SHARED_VARIABLEwhen field of a local variable is set. (#3459)AT_NONATOMIC_OPERATIONS_ON_SHARED_VARIABLEFP when there was no compound operation (#3363)NM_FIELD_NAMING_CONVENTIONcrash in the TestASM detector (#3489)UWF_FIELD_NOT_INITIALIZED_IN_CONSTRUCTORfor fields initialized in JUnit 3/4setUp()method. (#3169)US_USELESS_SUPPRESSION_ON_FIELD/UUF_UNUSED_FIELDfalse positive (#3496)TextUICommandLinesupports all options encoded in Eclipse preferences file (#3520)NoSuchElementExceptionwhenhasNext()returns true (#3501)DMI_INVOKING_TOSTRING_ON_ARRAYon newer JDK (#1147)NP_NULL_ON_SOME_PATH_FROM_RETURN_VALUEfalse positive withObjects.requireNonNull(#2965) (#3573)SF_SWITCH_NO_DEFAULTfalse positive fix (#1148) (#3572)Added
US_USELESS_SUPPRESSION_ON_*messages (#3395)@NotThreadSafe(#3390)CWO_CLOSED_WITHOUT_OPENEDfor locks that might be released without even being acquired. (See SEI CERT rule LCK08-J) (#2055)ResourceValueFrame.DMI_MISLEADING_SUBSTRINGfor callingsubString(0)on a StringBuffer/StringBuilder (#1928)Signing
apache/commons-codec (commons-codec:commons-codec)
v1.22.0The Apache Commons Codec team is pleased to announce the release of Apache Commons Codec 1.22.0.
The Apache Commons Codec component contains encoders and decoders for
formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these
widely used encoders and decoders, the codec package also maintains a
collection of phonetic encoding utilities.
This is a feature and maintenance release. Java 8 or later is required.
ben-manes/caffeine (com.github.ben-manes.caffeine:caffeine)
v3.2.4: 3.2.4Compare Source
v3.2.3: 3.2.3Compare Source
CaffeineSpecwhen using numeric literals (#1890)CompletableFutureis in an inconsistent state (quarkus#50513)v3.2.2: 3.2.2v3.2.1: 3.2.1computeIfAbsentfor an async cache's synchronous view to retry if incompleteCaffeineSpecwhen being reflectively constructed (#1839)jacoco/jacoco (jacoco)
v0.8.15v0.8.14: 0.8.14New Features
Fixed bugs
Fixed handling of exceptions in chains of safe call operators in Kotlin (GitHub #1819).
Non-functional Changes
pmd/pmd (pmd)
v7.25.0: PMD 7.25.0 (29-May-2026)29-May-2026 - 7.25.0
The PMD team is pleased to announce PMD 7.25.0.
This is a minor release.
Table Of Contents
🚀️ New and noteworthy
Updated ANTLR library to 4.13.2
We have updated the ANTLR library (parser generator) from 4.9.3 to the latest version 4.13.2,
in order to be able to use the latest version of Apex parser library.
This is an incompatible update: In case you use custom language modules based on ANTLR, you
need to make sure to regenerate all of your lexers and parsers with the new ANTLR version.
For the ANTLR based language modules, that PMD ships (kotlin and swift and various CPD modules),
this is already done.
🌟️ New and Changed Rules
New Rules
JUnitJupiterTestNoPrivateModifierfind JUnit test classes andmethods that are private. Test classes, test methods, and lifecycle methods are not required to be public,
but they must not be private. Otherwise, they won’t be found by the test framework.
UnnecessaryBlockreports blocks that are unnecessary asthey don't introduce a new scope. This rule helps simplify code structure by identifying and flagging
redundant blocks that can make code harder to read and may be misleading.
VariableDeclarationUsageDistanceflags local variables that are declaredfar from their usage, which can make code harder to read. The rule has a property
maxDistancethat allows toconfigure the maximum allowed distance between declaration and usage.
AssertStatementInTestdetects usages ofassertstatement in tests.These should be replaced by framework assertion methods such as
assertEquals.Such methods provide better error messages and make test behave correctly when running without
-ea.Changed Rules
OnlyOneReturnhas a new propertyallowGuardIfs. When this property istrue, then guard ifs at the beginning of a method are allowed their return statements don't count.
UseUtilityClassandClassNamingConventionsnow use thesame definition of what a utility class is. The most significant change is, that classes with
main()methods areno longer considered utility classes by
UseUtilityClass.The goal is to ensure that rules report issues on the correct line and highlight only the relevant lines.
For example, instead of flagging an entire class declaration (including its body), we now generally report only
the class name. For more details, see [java] Single Line Warnings #730
and [java] Review reported locations of rules #3769. While this effort
is still ongoing, the following Java rules have been updated in this release:
AbstractClassWithoutAbstractMethodAbstractClassWithoutAnyMethodAtLeastOneConstructorAvoidDollarSignsAvoidCatchingGenericExceptionAvoidSynchronizedStatement(now reports only on synchronized keyword and not the whole synchronized block)ClassNamingConventionsClassWithOnlyPrivateConstructorsShouldBeFinalCommentDefaultAccessModifierCommentRequiredCouplingBetweenObjects(now reports only on class identifier and not whole compilation unit anymore)CyclomaticComplexityDataClassExcessiveImports(now reports only on imports and not the whole compilation unit anymore)ExcessiveParameterListExcessivePublicCountExhaustiveSwitchHasDefault(now reports only on switch keyword and not the whole switch block)GodClassImplicitFunctionalInterfaceJUnit5TestShouldBePackagePrivateLocalHomeNamingConventionLocalInterfaceSessionNamingConventionMissingSerialVersionUIDMissingStaticMethodInNonInstantiatableClassNcssCountNonExhaustiveSwitch(now reports only on switch keyword and not the whole switch block)NoPackagePublicMemberInNonPublicTypeShortClassNameSingleMethodSingletonSwitchDensity(now reports only on switch keyword and not the whole switch block)TestClassWithoutTestCasesTooFewBranchesForSwitch(now reports only on switch keyword and not the whole switch block)TooManyFields(now reports only on class identifier and not the whole class body anymore)TooManyMethods(now reports only on class identifier and not the whole class body anymore)TooManyStaticImports(now reports only on the first static import and not the whole compilation unit anymore)UnnecessaryModifierUseUtilityClassRenamed rules and properties
JUnitJupiterTestShouldBePackagePrivate(Java Best Practices) was renamed fromJUnit5TestShouldBePackagePrivate.junitJupiterTestPatternof ruleMethodNamingConventions(Java Code Style) was renamed fromjunit5TestPattern.The old names still work but are deprecated.
🐛️ Fixed Issues
🚨️ API Changes
Deprecations
FieldDeclarationsShouldBeAtStartOfClassRule#visitis an implementation detail ofFieldDeclarationsShouldBeAtStartOfClassRule. It will be removed in a later release.CyclomaticComplexityRule#visitTypeDeclis an implementation detail ofCyclomaticComplexityRule. It will be removed in a later release.SwitchDensityRule#visitSwitchLikeis an implementation detail ofSwitchDensityRule. It will be removed in a later release.PmdKotlinParser#PmdKotlinParserhas been deprecated.Use
KotlinLanguageModule#getInstance,createProcessor,servicesandgetParserinsteadto retrieve a correctly configured parser instance.
KotlinHandler#KotlinHandlerhas been deprecated.Use
getInstance,createProcessorandservicesinstead to access the LanguageVersionHandlerfor Kotlin.
KotlinInnerNode#getImageandKotlinInnerNode#hasImageEqualTohave been deprecated.They have not been used yet in Kotlin and the long-term plan is to remove these methods on each node.
Concrete nodes (subclasses of KotlinInnerNode) should provide a more specific attribute like
"getName" or "getIdentifier" instead and not rely on "getImage".
The same deprecation has been done for
KotlinTerminalNode.See #4787 for more information.
Experimental API
KotlinLanguageProperties#PARSE_TIMEOUT_SECONDSKotlinLanguageProperties#getParseTimeoutSecondsAttributeViewKtClassDeclarationAttributesKtClassParameterAttributesKtCompanionObjectAttributesKtFunctionDeclarationAttributesKtImportAliasAttributesKtImportHeaderAttributesKtVariableDeclarationAttributesHasModifiersHasSimpleIdentifierKotlinInnerNode#attributes.The attributes are also automatically exposed for XPath rules.
✨️ Merged pull requests
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.