[dependabot]

Bumps the gradle group with 4 updates in the / directory: com.diffplug.spotless:spotless-plugin-gradle, io.swagger.core.v3:swagger-annotations, com.google.errorprone:error_prone_core and com.uber.nullaway:nullaway.

Updates com.diffplug.spotless:spotless-plugin-gradle from 8.10.4 to 8.11.0

Release notes

Sourced from com.diffplug.spotless:spotless-plugin-gradle's releases.

Gradle Plugin v8.11.0

Added

• Add cleanup(false) to googleJavaFormat() to disable google-java-format's non-whitespace cleanups. (#3157)
• Add maxLineLength(int) to googleJavaFormat(). (#3151)
  Overrides the 100-column limit prescribed by the GOOGLE and AOSP styles; requires google-java-format 2.0.0 or later.

Changes

• Bump default google-java-format version 1.36.1 -> 2.0.0. (#3157)
  This version applies some small non-whitespace cleanups by default (removing redundant semicolons, empty annotation parentheses, and parentheses around single lambda parameters), which can be disabled with cleanup(false).

Commits

• 8d2edae Published gradle/8.11.0
• 80977b4 Published lib/4.11.0
• ed34276 Add maxLineLength option to googleJavaFormat step (requires gjf 2.0.0+) (#3152)
• b2cd501 docs: split maxLineLength changelog entries into subject and desc style
• d1c06e2 Update plugin-gradle/README.md
• 7fd0a54 Update plugin-maven/README.md
• abe4e9f Merge origin/main: combine cleanup option and gjf 2.0.0 bump with maxLineLength
• 5ec09c0 Bump google-java-format to 2.0.0 and add a cleanup option (#3157)
• e8f21cb Handle older google-java-format versions in GoogleJavaFormatStepTest
• e6eab79 Apply batched suggestions from code review
• Additional commits viewable in compare view

Updates io.swagger.core.v3:swagger-annotations from 2.2.55 to 3.0.0

Updates com.google.errorprone:error_prone_core from 2.50.0 to 2.52.0

Release notes

Sourced from com.google.errorprone:error_prone_core's releases.

Error Prone 2.52.0

New checks:

• AlmostExhaustiveTestParameter: Prefer an exhaustive @TestParameter with an assumption to filter out specific enum values, so newly added enum values are automatically tested (disabled by default).
• SingleTestParameter: Suggest @TestParameter on the parameter instead of @TestParameters when there is only one test parameter, replacing PreferTestParameter (disabled by default).
• SingleValueTestParameter: Suggest replacing a @TestParameter that has only a single value with a local variable in the test method (disabled by default).
• ValueClassEquals: Require non-record concrete value classes to explicitly override equals and hashCode.

Other changes:

• LoopToTestParameter: Changed severity to SUGGESTION (disabled by default).
• DistinctVarargsChecker: Allow duplicate arguments to Iterables.concat (#6239) and Mockito argument matchers such as any() (#6240).
• UnusedVariable: Treat fields accessed via MethodHandles.Lookup (VarHandle/getter/setter lookups) or Atomic*FieldUpdater.newUpdater as used.
• StringBuilderInitWithChar / StringBuffer refactoring: Refactor StringBuffer to StringBuilder even when used with Matcher.appendReplacement and appendTail (when supported by the target JDK or Android minSdkVersion).
• CompileTimeConstant: Treat record and interface fields and field accesses on compile-time constants (compileTimeConstant.compileTimeConstantField) as compile-time constants.
• ValueClassIdentity / ReferenceEquality: Handle JEP 401 value classes.
• FieldCanBeFinal / ThreadSafety: Improve compile-time performance on large classes and deep type hierarchies, and update SafeRE to 1.1.0 (#6230).
• Added ClassName for caching resolved ClassSymbol, Type, and binary Name lookups across a compilation.

Closed issues: #5964, #6165, #6230, #6239, #6240, #6275

Full changelog: google/error-prone@v2.51.0...v2.52.0

Error Prone 2.51.0

New checks:

• HashCodeInObjectsHash: Detect redundant hashCode() or Objects.hash() calls inside Objects.hash(...), and simplify single-argument Objects.hash(x) calls to Objects.hashCode(x).
• LoopToTestParameter: Suggest migrating loops in unit tests to TestParameterInjector.
• MissingJavadoc: Flag public types that are missing Javadoc comments (disabled by default).
• PreferCharsetOverload: Prefer calling method and constructor overloads that accept a Charset over those that accept a String encoding name.
• PreferPreconditions: Suggest using Guava's Preconditions instead of explicit if-throw statements for parameter validation (disabled by default).
• RequireNonNullRefactoring: Refactor explicit if (x == null) { throw new NullPointerException(...); } checks to Objects.requireNonNull (disabled by default).
• SimplifyTestParameter: Remove redundant explicit value lists on @TestParameter annotations for boolean and Enum types when all values are specified (disabled by default).
• TraditionalJavadocToMarkdown: Convert traditional /** ... */ Javadoc comments into /// Markdown Javadoc comments (disabled by default).
• ValueClassIdentity: Flag reliance on identity semantics (such as synchronization, WeakReference, IdentityHashMap, or System.identityHashCode) of value-based classes (disabled by default).

Other changes:

• CompareToZero: Upgraded from warning to error, and expanded to flag non-relational operations, unary negation, and switch statements/expressions on compareTo and compare results without Integer.signum.
• IfChainToSwitch: Enabled by default as a warning.
• UndefinedEquals: Merged ArrayAsKeyOfSetOrMap and CollectionUndefinedEquality into UndefinedEquals (retaining their names as altNames), and generalized detection of types without well-defined equals or hashCode across direct equality, collection containment, and hash-based containers.
• EqualsIncompatibleType / TruthIncompatibleType: Flag equality comparisons between distinct record types (#6107).
• ReferenceEquality: Allow == comparisons on private classes whose type hierarchy does not override Object.equals (#5865), private static final sentinel fields, Thread (#5900), and com.sun.source.tree.Tree.
• PatternMatchingInstanceof: Support while and for loops, parenthesized expressions (#5843), and replacing additional redundant casts when the instanceof already introduces a pattern variable.
• DistinctVarargsChecker: Expanded to check Objects.hash, CompletableFuture.allOf/anyOf, EnumSet.of, Sets.union/intersection/difference, Stream.concat, Math.min/max, and additional JDK, Guava, Protobuf, Truth, and Mockito methods.
• MustBeClosedChecker: Require java.lang.foreign.Arena.ofConfined and Arena.ofShared to be closed.
• ImpossibleNullComparison: Flag null checks on the return value of Class.forName.
• RestrictedApi / RestrictedInheritance: Added an allowedPaths attribute to allow calls or inheritance from matching file paths without a regular expression.
• InlineMeInliner: Support substituting type arguments at call sites when inlining generic @InlineMe methods.
• WellKnownKeep: Recognize Apache Beam DoFn annotations and retain open-source library annotations (Gson, Mockito, Guice, Objectify, TestParameterInjector, AutoFactory).

... (truncated)

Commits

• 1e32314 Release Error Prone 2.52.0
• ea4c6df Avoid calling SuggestedFixes.compilesWithFix in FieldCanBeFinal
• 04640b8 Update SafeRE to 1.1.0
• 6034e09 Bump the dependencies group across 1 directory with 8 updates
• 3cc36d5 Bump actions/setup-java from 6.0.1 to 6.1.0 in the github-actions group (#6270)
• 0202185 Migrate class and annotation name constants in Error Prone to ClassName.
• cdf0d94 Add ASTHelpers.overridesObjectEquals and overridesObjectHashCode helpers.
• 208015e Update MemoizeConstantVisitorStateLookups to suggest ClassName.
• e1a8a3e Add ValueClassEquals to require non-record concrete value classes to over...
• 2c6baed Handle JEP 401 value classes in ValueClassIdentity and ReferenceEquality
• Additional commits viewable in compare view

Updates com.uber.nullaway:nullaway from 0.14.2 to 0.14.3

Release notes

Sourced from com.uber.nullaway:nullaway's releases.

NullAway 0.14.3

Many bug fixes in this release. Thanks especially to @​vlsi and @​subhramit for all the contributions! As they are now committers, their many contributions are not credited individually below.

Two bug fixes of note are #2005 and #2003, which may lead to new warnings even outside JSpecify mode.

We have also added initial support for @PolyNull in library models in #1813. We will continue to enhance this support, but it should be helpful in removing some false positives from JSpecifyExperimental mode.

• Allow configuring suppression-remover source encoding (#1894)
• Compute a call's executable type once per generic inference by @​ericschlarmann (#1896)
• Skip nested annotation restoration from raw source types (#1898)
• Refine argument nullness after Objects.equals calls by @​Beluomini (#1900)
• Keep nullable map values nullable after containsKey (#1902)
• Read nullable fields from JSpecify JDK models into astubx (#1901)
• Avoid initialization-check crashes in @NullMarked constructors by @​ZedingZhang (#1929)
• Store types of implicit lambda parameters during inference (#1930)
• Compute erasure before binary promotion (#1935)
• Preserve captured type variables during constraint generation (#1941)
• Cache conversion of MethodSymbols to MethodRefs (#1964)
• Restore nullness annotations from implicit wildcard bounds (#1967)
• Use call-specific generic inference variables (#1965)
• Account for nullable map values in getOrDefault (#1985)
• Fix crash in map callbacks after an unmarked or suppressed filter predicate (#1996)
• Strip reference casts when computing access paths (#1997)
• Handle negated null checks in multi-argument boolean contracts (#1998)
• Skip parentheses around a lambda or method reference passed to unmarked code (#1999)
• Fix crash on method references to annotated array types (#2000)
• Skip a lower-bounded wildcard when restoring annotations on a call type (#2001)
• Strip parentheses before handlers match stream callbacks and boolean literals (#2002)
• Check explicitly typed lambda parameters against unmarked interface methods (#2003)
• Add PolyNull library models and apply them to Optional.orElseGet and Map.computeIfAbsent (#1813)
• Report unboxing of a @​Nullable operand inside a primitive conditional expression (#2005)
• Report unboxing of a @​Nullable result inside a primitive switch expression (#2006)
• Fix crash on null-marked code nested in unmarked lambdas and local classes (#2007)
• Strip parentheses before the futures and gRPC handlers match an argument (#2010)
• Recognize boolean constants behind a cast in EnsuresNonNullIf and stream filters (#2011)
• Treat a parenthesized lambda or method reference like an unwrapped one in generics checks (#2012)
• Recognize a cast null check in a boolean contract argument (#2013)
• Keep the access path of a map key, call argument, or array index cast to its own type (#2014)
• Check nested nullness of explicitly typed lambda parameters (#2015)
• Keep distinct constant map keys and call arguments on distinct access paths (#2016)
• Apply conditional library return models to method references (#1968)
• Reject conflicting fixed parameter models regardless of PolyNull (#2025)
• Keep the boxing wrapper in the identity of a variable map key (#2017)
• Maintenance
  • Report diff coverage after each test run, quoting the changed lines the run did not execute and the branches it took one way, and writing the whole report to <module>/build/reports/diff-coverage/test.txt; a // diff-coverage: ignore comment moves a line out of that list without changing the counts (#1833)

... (truncated)

Changelog

Sourced from com.uber.nullaway:nullaway's changelog.

Version 0.14.3

Many bug fixes in this release. Thanks especially to @​vlsi and @​subhramit for all the contributions! As they are now committers, their many contributions are not credited individually below.

Two bug fixes of note are #2005 and #2003, which may lead to new warnings even outside JSpecify mode.

We have also added initial support for @PolyNull in library models in #1813. We will continue to enhance this support, but it should be helpful in removing some false positives from JSpecifyExperimental mode.

• Allow configuring suppression-remover source encoding (#1894)
• Compute a call's executable type once per generic inference by @​ericschlarmann (#1896)
• Skip nested annotation restoration from raw source types (#1898)
• Refine argument nullness after Objects.equals calls by @​Beluomini (#1900)
• Keep nullable map values nullable after containsKey (#1902)
• Read nullable fields from JSpecify JDK models into astubx (#1901)
• Avoid initialization-check crashes in @NullMarked constructors by @​ZedingZhang (#1929)
• Store types of implicit lambda parameters during inference (#1930)
• Compute erasure before binary promotion (#1935)
• Preserve captured type variables during constraint generation (#1941)
• Cache conversion of MethodSymbols to MethodRefs (#1964)
• Restore nullness annotations from implicit wildcard bounds (#1967)
• Use call-specific generic inference variables (#1965)
• Account for nullable map values in getOrDefault (#1985)
• Fix crash in map callbacks after an unmarked or suppressed filter predicate (#1996)
• Strip reference casts when computing access paths (#1997)
• Handle negated null checks in multi-argument boolean contracts (#1998)
• Skip parentheses around a lambda or method reference passed to unmarked code (#1999)
• Fix crash on method references to annotated array types (#2000)
• Skip a lower-bounded wildcard when restoring annotations on a call type (#2001)
• Strip parentheses before handlers match stream callbacks and boolean literals (#2002)
• Check explicitly typed lambda parameters against unmarked interface methods (#2003)
• Add PolyNull library models and apply them to Optional.orElseGet and Map.computeIfAbsent (#1813)
• Report unboxing of a @​Nullable operand inside a primitive conditional expression (#2005)
• Report unboxing of a @​Nullable result inside a primitive switch expression (#2006)
• Fix crash on null-marked code nested in unmarked lambdas and local classes (#2007)
• Strip parentheses before the futures and gRPC handlers match an argument (#2010)
• Recognize boolean constants behind a cast in EnsuresNonNullIf and stream filters (#2011)
• Treat a parenthesized lambda or method reference like an unwrapped one in generics checks (#2012)
• Recognize a cast null check in a boolean contract argument (#2013)
• Keep the access path of a map key, call argument, or array index cast to its own type (#2014)
• Check nested nullness of explicitly typed lambda parameters (#2015)
• Keep distinct constant map keys and call arguments on distinct access paths (#2016)
• Apply conditional library return models to method references (#1968)
• Reject conflicting fixed parameter models regardless of PolyNull (#2025)
• Keep the boxing wrapper in the identity of a variable map key (#2017)

... (truncated)

Commits

• 4b19c42 Prepare for release 0.14.3.
• e91ea4b Keep the boxing wrapper in the identity of a variable map key (#2017)
• d9cd573 Enable zizmor job for merge queue (#2039)
• 7f85800 Reject conflicting fixed parameter models regardless of PolyNull (#2025)
• ef0ddbd Build third-party projects at pinned commits with patches until upstream merg...
• 3035507 Apply conditional library return models to method references (#1968)
• 5023d67 Pin oracle-actions/setup-java to the v1.5.0 tag (#2021)
• 9555b20 Keep distinct constant map keys and call arguments on distinct access paths (...
• 29b740d Check nested nullness of explicitly typed lambda parameters (#2015)
• 10606a3 Keep the access path of a map key, call argument, or array index cast to its ...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions