dependabot[bot] opened a new pull request, #76064: URL: https://github.com/apache/airflow/pull/76064
Bumps the java-sdk-dependency-updates group with 9 updates in the /java-sdk directory: | Package | From | To | | --- | --- | --- | | [com.google.testing.compile:compile-testing](https://github.com/google/compile-testing) | `0.23.0` | `0.24.0` | | [com.github.spotbugs:spotbugs-annotations](https://github.com/spotbugs/spotbugs) | `4.10.4` | `4.10.5` | | [com.fasterxml.jackson.core:jackson-core](https://github.com/FasterXML/jackson-core) | `2.22.2` | `2.22.3` | | [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson-databind) | `2.22.2` | `2.22.3` | | [com.fasterxml.jackson.dataformat:jackson-dataformat-yaml](https://github.com/FasterXML/jackson-dataformats-text) | `2.22.2` | `2.22.3` | | com.fasterxml.jackson.datatype:jackson-datatype-jsr310 | `2.22.2` | `2.22.3` | | [plugin.serialization](https://github.com/JetBrains/kotlin) | `2.4.20` | `2.4.21` | | [org.jetbrains.kotlin:kotlin-gradle-plugin](https://github.com/JetBrains/kotlin) | `2.4.20` | `2.4.21` | | [gradle-wrapper](https://github.com/gradle/gradle) | `8.14.5` | `8.14.6` | Updates `com.google.testing.compile:compile-testing` from 0.23.0 to 0.24.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/compile-testing/releases";>com.google.testing.compile:compile-testing's releases</a>.</em></p> <blockquote> <h2>v0.24.0</h2> <ul> <li>Fixed Java 8 build configuration to work for downstream users of Maven 3.10.0. (63b2b79)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/compile-testing/commit/52534e3c6a554e0496f95397303812592de42469";><code>52534e3</code></a> Set version number for compile-testing to 0.24.0.</li> <li><a href="https://github.com/google/compile-testing/commit/63b2b794f03bc6eb26c2f73ac7710c4aeace223f";><code>63b2b79</code></a> Fix issue for downstream users of Maven 3.10.0, and clean up obsolete profile.</li> <li><a href="https://github.com/google/compile-testing/commit/bd7fa05b0d6347abd4cf259b763c085e294ddf07";><code>bd7fa05</code></a> Bump actions/setup-java from 6.0.0 to 6.0.1 in the github-actions group</li> <li><a href="https://github.com/google/compile-testing/commit/e52ff3db09c97ca6f514591a1cc89846f27856c1";><code>e52ff3d</code></a> Bump Guava to 33.7.2.</li> <li><a href="https://github.com/google/compile-testing/commit/f16e0868f6e1524a6e981ab7537d050b94ce0556";><code>f16e086</code></a> Format some Markdown.</li> <li><a href="https://github.com/google/compile-testing/commit/fb0fe9c9bb848c5a6f5aad1697067e5b74ca9078";><code>fb0fe9c</code></a> Bump the dependencies group with 2 updates</li> <li><a href="https://github.com/google/compile-testing/commit/f4f9176363198344b6d25ada3df3d12f71a814f1";><code>f4f9176</code></a> Bump actions/setup-java from 5.6.0 to 6.0.0 in the github-actions group</li> <li><a href="https://github.com/google/compile-testing/commit/2e1523abae2b617ff49764f31a0b7651c4326eea";><code>2e1523a</code></a> Bump Guava to 33.7.1.</li> <li><a href="https://github.com/google/compile-testing/commit/05fb3dda38cd175039e2604c4f92726439e3c057";><code>05fb3dd</code></a> Bump Guava to 33.7.0.</li> <li><a href="https://github.com/google/compile-testing/commit/add841bee5341e9dc18f52a30fbd8d8c4bcdaa58";><code>add841b</code></a> Update links from the legacy search.maven.org to the new central.sonatype.com.</li> <li>Additional commits viewable in <a href="https://github.com/google/compile-testing/compare/v0.23.0...v0.24.0";>compare view</a></li> </ul> </details> <br /> Updates `com.github.spotbugs:spotbugs-annotations` from 4.10.4 to 4.10.5 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/spotbugs/spotbugs/releases";>com.github.spotbugs:spotbugs-annotations's releases</a>.</em></p> <blockquote> <h2>4.10.5</h2> <p>SpotBugs 4.10.5</p> <h3>CHANGELOG</h3> <h3>Added</h3> <ul> <li>Add <code>ReflectiveAccessTracker</code> to track fields accessed via reflection - such as VarHandle, MethodHandle or AtomicFieldUpdaters (<a href="https://redirect.github.com/spotbugs/spotbugs/pull/3954";>#3954</a>) to fix issue (<a href="https://redirect.github.com/spotbugs/spotbugs/issues/2749";>#2749</a>)</li> <li>Add automatic completion of class names in GUI class filter (<a href="https://redirect.github.com/spotbugs/spotbugs/issues/749";>#749</a>)</li> </ul> <h3>Changed</h3> <ul> <li><code>@SuppressFBWarnings</code> annotation on a method or a constructor now suppresses warnings reported in their lambdas too (<a href="https://redirect.github.com/spotbugs/spotbugs/issues/724";>#724</a>)</li> <li>Replace deprecated calls to 'SignatureParser' to 'GenericSignatureParser' where feasible (<a href="https://redirect.github.com/spotbugs/spotbugs/pull/4337";>#4336</a>)</li> <li>Declaring to the interface lists/maps (<a href="https://redirect.github.com/spotbugs/spotbugs/pull/4381";>#4381</a>)</li> </ul> <h3>Fixed</h3> <ul> <li>Fix <code>NP_NULL_ON_SOME_PATH</code> false positive when a field null check that throws uses <code>field == null</code> but not <code>null == field</code> (<a href="https://redirect.github.com/spotbugs/spotbugs/issues/4147";>#4147</a>)</li> <li>Fix <code>RV_RETURN_VALUE_IGNORED_NO_SIDE_EFFECT</code> false negative when the ignored result comes from <code>Arrays.copyOf</code>, <code>Arrays.copyOfRange</code> or any pure static method or constructor of a class using <code>assert</code> (<a href="https://redirect.github.com/spotbugs/spotbugs/issues/3900";>#3900</a>)</li> <li>Fix <code>AA_ASSERTION_OF_ARGUMENTS</code> false negative when a public method validates a parameter with <code>assert</code> and <code>instanceof</code> (<a href="https://redirect.github.com/spotbugs/spotbugs/issues/4305";>#4305</a>)</li> <li>Fix <code>PT_ABSOLUTE_PATH_TRAVERSAL</code> false negative for <code>new File(parent, child)</code>, where the attacker controlled segment is the second argument (<a href="https://redirect.github.com/spotbugs/spotbugs/pull/4340";>#4340</a>)</li> <li>Fix 'DM_USELESS_THREAD' false negative for Thread subclasses that do not override run() (<a href="https://redirect.github.com/spotbugs/spotbugs/issues/4306";>#4306</a>)</li> <li>Fix <code>UL_UNRELEASED_LOCK</code> false negative when a method acquires a lock and never calls <code>unlock</code> (<a href="https://redirect.github.com/spotbugs/spotbugs/issues/4310";>#4310</a>)</li> <li>Fix <code>TLW_TWO_LOCK_WAIT</code> false negatives when a class waits while holding two monitors but has no matching <code>notify()</code> call (<a href="https://redirect.github.com/spotbugs/spotbugs/issues/4323";>#4323</a>)</li> <li>Fix <code>NP_ALWAYS_NULL</code> false positives when a non-null value is known to satisfy an <code>instanceof</code> check (<a href="https://redirect.github.com/spotbugs/spotbugs/issues/4272";>#4272</a>)</li> <li>Fix <code>RANGE_ARRAY_INDEX</code> false positive when the array access is inside unreachable code caused by an impossible null condition (e.g. <code>if (x == null && x != null)</code>) (<a href="https://redirect.github.com/spotbugs/spotbugs/issues/4275";>#4275</a>)</li> <li>Fix <code>NP_NULL_ON_SOME_PATH</code> false positive when <code>instanceof</code> check is always true because the value was created with <code>new</code> and its exact type is a subtype of the checked type (e.g. <code>Base value = new Derived(); if (value instanceof Derived) result = new Object(); result.toString()</code>) (<a href="https://redirect.github.com/spotbugs/spotbugs/issues/4273";>#4273</a>)</li> <li>Fix <code>NN_NAKED_NOTIFY</code> false positive when guarded state is updated before the synchronized block that calls <code>notify</code>/<code>notifyAll</code> (<a href="https://redirect.github.com/spotbugs/spotbugs/issues/3786";>#3786</a>)</li> <li>Fix <code>SA_LOCAL_SELF_ASSIGNMENT</code> false positive in methods with <code>++</code>/<code>--</code> inside a switch nested in a try-catch block (<a href="https://redirect.github.com/spotbugs/spotbugs/issues/3929";>#3929</a>)</li> <li>Fix <code>AT_NONATOMIC_OPERATIONS_ON_SHARED_VARIABLE</code> false negative for non-atomic read-modify-write in inner classes accessing enclosing shared fields (<a href="https://redirect.github.com/spotbugs/spotbugs/pull/4236";>#4236</a>)</li> <li>Fix <code>OS_OPEN_STREAM</code> false positive when the result of <code>PrintWriter.append()</code> is reassigned before closing the writer (<a href="https://redirect.github.com/spotbugs/spotbugs/issues/4274";>#4274</a>)</li> <li>Fix <code>OS_OPEN_STREAM</code> false positive when a stream is wrapped (e.g. in a <code>PrintStream</code>, <code>BufferedOutputStream</code> or <code>PrintWriter</code>) and the wrapped stream is closed instead of the wrapper (<a href="https://redirect.github.com/spotbugs/spotbugs/issues/4304";>#4304</a>)</li> <li>Fix <code>SING_SINGLETON_GETTER_NOT_SYNCHRONIZED</code> false negative when lazy init uses a ternary assignment instead of an <code>if</code> statement (<a href="https://redirect.github.com/spotbugs/spotbugs/issues/4154";>#4154</a>)</li> <li>Fix <code>UR_UNINIT_READ</code> false negative for compound assignment to a field (e.g. <code>m_iType |= e</code>) (<a href="https://redirect.github.com/spotbugs/spotbugs/pull/4233";>#4233</a>)</li> <li>Fix <code>NP_BOOLEAN_RETURN_NULL</code> false negative when <code>null</code> is returned via a local variable (<a href="https://redirect.github.com/spotbugs/spotbugs/pull/4234";>#4234</a>)</li> <li>Fix <code>MS_EXPOSE_BUF</code> and <code>EI_EXPOSE_BUF</code> false negative when returning <code>Buffer.array()</code> (<a href="https://redirect.github.com/spotbugs/spotbugs/pull/4235";>#4235</a>)</li> <li>Fix <code>OBL_UNSATISFIED_OBLIGATION</code> false negatives for unclosed <code>CallableStatement</code>s returned by <code>Connection.prepareCall</code> (<a href="https://redirect.github.com/spotbugs/spotbugs/issues/4148";>#4148</a>)</li> <li>Fix <code>LI_LAZY_INIT_STATIC</code> false negative when field is lazily initialized using a method call (<a href="https://redirect.github.com/spotbugs/spotbugs/issues/4276";>#4276</a>)</li> <li>Fix <code>DMI_RANDOM_USED_ONLY_ONCE</code> FP when Random is used inside loop but created before (<a href="https://redirect.github.com/spotbugs/spotbugs/pull/3937";>#3937</a>)</li> <li>Fix SARIF output writing source-location URI syntax exceptions to stderr when source filenames are unknown (<a href="https://redirect.github.com/spotbugs/spotbugs/issues/1412";>#1412</a>)</li> <li>Fix IL_INFINITE_LOOP false positives for loops with conditions that are statically known to be true or false (<a href="https://redirect.github.com/spotbugs/spotbugs/issues/3904";>#3904</a>)</li> <li>Narrow the definition of singletons (<a href="https://redirect.github.com/spotbugs/spotbugs/issues/2985";>#2985</a>)</li> <li>Fix <code>NP_LOAD_OF_KNOWN_NULL_VALUE</code> false negative when null check uses <code>instanceof</code> (<a href="https://redirect.github.com/spotbugs/spotbugs/issues/3916";>#3916</a>)</li> <li>Fix <code>MC_OVERRIDABLE_METHOD_CALL_IN_CONSTRUCTOR</code> false negative when a constructor calls an overridable method that takes arguments, such as a setter (e.g. <code>setValue(value)</code>) (<a href="https://redirect.github.com/spotbugs/spotbugs/issues/4309";>#4309</a>)</li> <li>Fix CLI launcher scripts intercepting <code>-conserveSpace</code> with a JVM system property instead passing it to Java Application as equivalent to <code>-effort:min</code> (<a href="https://redirect.github.com/spotbugs/spotbugs/pull/4289";>#4268</a>)</li> <li>Fix <code>USO_UNSAFE_ACCESSIBLE_OBJECT_SYNCHRONIZATION</code> false positive when <code>clone()</code> assigns a newly created lock object to the copy (<a href="https://redirect.github.com/spotbugs/spotbugs/issues/4320";>#4320</a>)</li> <li>Fix <code>CT_CONSTRUCTOR_THROW</code> false positive with sealed classes (<a href="https://redirect.github.com/spotbugs/spotbugs/issues/4259";>#4259</a>)</li> <li>Fix <code>JrtfsCodeBase</code> resolving JDK classes from the module image of the running JVM instead of the JDK the given <code>jrt-fs.jar</code> belongs to, so that <code>-auxclasspath <other-jdk>/lib/jrt-fs.jar</code> is honoured (<a href="https://redirect.github.com/spotbugs/spotbugs/pull/4329";>#4329</a>)</li> <li>Fix <code>USO_UNSAFE_ACCESSIBLE_OBJECT_SYNCHRONIZATION</code> false positive when a lock is assigned to a newly allocated object (<a href="https://redirect.github.com/spotbugs/spotbugs/issues/4331";>#4331</a>)</li> <li>Do not flag <code>writeReplace()</code> and <code>writeExternal()</code> as mutators (<a href="https://redirect.github.com/spotbugs/spotbugs/pull/1719";>#1719</a>)</li> <li>Prevent XML external entity resolution in user-controlled data (<a href="https://redirect.github.com/spotbugs/spotbugs/pull/4365";>#4365</a>)</li> <li>Fix handling of JSpecify type-use annotations in <code>CheckRelaxingNullnessAnnotation</code> (<a href="https://redirect.github.com/spotbugs/spotbugs/pull/4389";>#4389</a>)</li> <li>Stop reporting missing java.applet at java 26 or higher (<a href="https://redirect.github.com/spotbugs/spotbugs/pull/4390";>#4390</a>)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/spotbugs/spotbugs/blob/master/CHANGELOG.md";>com.github.spotbugs:spotbugs-annotations's changelog</a>.</em></p> <blockquote> <h2>4.10.5 - 2026-10-11</h2> <h3>Added</h3> <ul> <li>Add <code>ReflectiveAccessTracker</code> to track fields accessed via reflection - such as VarHandle, MethodHandle or AtomicFieldUpdaters (<a href="https://redirect.github.com/spotbugs/spotbugs/pull/3954";>#3954</a>) to fix issue (<a href="https://redirect.github.com/spotbugs/spotbugs/issues/2749";>#2749</a>)</li> <li>Add automatic completion of class names in GUI class filter (<a href="https://redirect.github.com/spotbugs/spotbugs/issues/749";>#749</a>)</li> </ul> <h3>Changed</h3> <ul> <li><code>@SuppressFBWarnings</code> annotation on a method or a constructor now suppresses warnings reported in their lambdas too (<a href="https://redirect.github.com/spotbugs/spotbugs/issues/724";>#724</a>)</li> <li>Replace deprecated calls to 'SignatureParser' to 'GenericSignatureParser' where feasible (<a href="https://redirect.github.com/spotbugs/spotbugs/pull/4337";>#4336</a>)</li> <li>Declaring to the interface lists/maps (<a href="https://redirect.github.com/spotbugs/spotbugs/pull/4381";>#4381</a>)</li> </ul> <h3>Fixed</h3> <ul> <li>Fix <code>NP_NULL_ON_SOME_PATH</code> false positive when a field null check that throws uses <code>field == null</code> but not <code>null == field</code> (<a href="https://redirect.github.com/spotbugs/spotbugs/issues/4147";>#4147</a>)</li> <li>Fix <code>RV_RETURN_VALUE_IGNORED_NO_SIDE_EFFECT</code> false negative when the ignored result comes from <code>Arrays.copyOf</code>, <code>Arrays.copyOfRange</code> or any pure static method or constructor of a class using <code>assert</code> (<a href="https://redirect.github.com/spotbugs/spotbugs/issues/3900";>#3900</a>)</li> <li>Fix <code>AA_ASSERTION_OF_ARGUMENTS</code> false negative when a public method validates a parameter with <code>assert</code> and <code>instanceof</code> (<a href="https://redirect.github.com/spotbugs/spotbugs/issues/4305";>#4305</a>)</li> <li>Fix <code>PT_ABSOLUTE_PATH_TRAVERSAL</code> false negative for <code>new File(parent, child)</code>, where the attacker controlled segment is the second argument (<a href="https://redirect.github.com/spotbugs/spotbugs/pull/4340";>#4340</a>)</li> <li>Fix 'DM_USELESS_THREAD' false negative for Thread subclasses that do not override run() (<a href="https://redirect.github.com/spotbugs/spotbugs/issues/4306";>#4306</a>)</li> <li>Fix <code>UL_UNRELEASED_LOCK</code> false negative when a method acquires a lock and never calls <code>unlock</code> (<a href="https://redirect.github.com/spotbugs/spotbugs/issues/4310";>#4310</a>)</li> <li>Fix <code>TLW_TWO_LOCK_WAIT</code> false negatives when a class waits while holding two monitors but has no matching <code>notify()</code> call (<a href="https://redirect.github.com/spotbugs/spotbugs/issues/4323";>#4323</a>)</li> <li>Fix <code>NP_ALWAYS_NULL</code> false positives when a non-null value is known to satisfy an <code>instanceof</code> check (<a href="https://redirect.github.com/spotbugs/spotbugs/issues/4272";>#4272</a>)</li> <li>Fix <code>RANGE_ARRAY_INDEX</code> false positive when the array access is inside unreachable code caused by an impossible null condition (e.g. <code>if (x == null && x != null)</code>) (<a href="https://redirect.github.com/spotbugs/spotbugs/issues/4275";>#4275</a>)</li> <li>Fix <code>NP_NULL_ON_SOME_PATH</code> false positive when <code>instanceof</code> check is always true because the value was created with <code>new</code> and its exact type is a subtype of the checked type (e.g. <code>Base value = new Derived(); if (value instanceof Derived) result = new Object(); result.toString()</code>) (<a href="https://redirect.github.com/spotbugs/spotbugs/issues/4273";>#4273</a>)</li> <li>Fix <code>NN_NAKED_NOTIFY</code> false positive when guarded state is updated before the synchronized block that calls <code>notify</code>/<code>notifyAll</code> (<a href="https://redirect.github.com/spotbugs/spotbugs/issues/3786";>#3786</a>)</li> <li>Fix <code>SA_LOCAL_SELF_ASSIGNMENT</code> false positive in methods with <code>++</code>/<code>--</code> inside a switch nested in a try-catch block (<a href="https://redirect.github.com/spotbugs/spotbugs/issues/3929";>#3929</a>)</li> <li>Fix <code>AT_NONATOMIC_OPERATIONS_ON_SHARED_VARIABLE</code> false negative for non-atomic read-modify-write in inner classes accessing enclosing shared fields (<a href="https://redirect.github.com/spotbugs/spotbugs/pull/4236";>#4236</a>)</li> <li>Fix <code>OS_OPEN_STREAM</code> false positive when the result of <code>PrintWriter.append()</code> is reassigned before closing the writer (<a href="https://redirect.github.com/spotbugs/spotbugs/issues/4274";>#4274</a>)</li> <li>Fix <code>OS_OPEN_STREAM</code> false positive when a stream is wrapped (e.g. in a <code>PrintStream</code>, <code>BufferedOutputStream</code> or <code>PrintWriter</code>) and the wrapped stream is closed instead of the wrapper (<a href="https://redirect.github.com/spotbugs/spotbugs/issues/4304";>#4304</a>)</li> <li>Fix <code>SING_SINGLETON_GETTER_NOT_SYNCHRONIZED</code> false negative when lazy init uses a ternary assignment instead of an <code>if</code> statement (<a href="https://redirect.github.com/spotbugs/spotbugs/issues/4154";>#4154</a>)</li> <li>Fix <code>UR_UNINIT_READ</code> false negative for compound assignment to a field (e.g. <code>m_iType |= e</code>) (<a href="https://redirect.github.com/spotbugs/spotbugs/pull/4233";>#4233</a>)</li> <li>Fix <code>NP_BOOLEAN_RETURN_NULL</code> false negative when <code>null</code> is returned via a local variable (<a href="https://redirect.github.com/spotbugs/spotbugs/pull/4234";>#4234</a>)</li> <li>Fix <code>MS_EXPOSE_BUF</code> and <code>EI_EXPOSE_BUF</code> false negative when returning <code>Buffer.array()</code> (<a href="https://redirect.github.com/spotbugs/spotbugs/pull/4235";>#4235</a>)</li> <li>Fix <code>OBL_UNSATISFIED_OBLIGATION</code> false negatives for unclosed <code>CallableStatement</code>s returned by <code>Connection.prepareCall</code> (<a href="https://redirect.github.com/spotbugs/spotbugs/issues/4148";>#4148</a>)</li> <li>Fix <code>LI_LAZY_INIT_STATIC</code> false negative when field is lazily initialized using a method call (<a href="https://redirect.github.com/spotbugs/spotbugs/issues/4276";>#4276</a>)</li> <li>Fix <code>DMI_RANDOM_USED_ONLY_ONCE</code> FP when Random is used inside loop but created before (<a href="https://redirect.github.com/spotbugs/spotbugs/pull/3937";>#3937</a>)</li> <li>Fix SARIF output writing source-location URI syntax exceptions to stderr when source filenames are unknown (<a href="https://redirect.github.com/spotbugs/spotbugs/issues/1412";>#1412</a>)</li> <li>Fix IL_INFINITE_LOOP false positives for loops with conditions that are statically known to be true or false (<a href="https://redirect.github.com/spotbugs/spotbugs/issues/3904";>#3904</a>)</li> <li>Narrow the definition of singletons (<a href="https://redirect.github.com/spotbugs/spotbugs/issues/2985";>#2985</a>)</li> <li>Fix <code>NP_LOAD_OF_KNOWN_NULL_VALUE</code> false negative when null check uses <code>instanceof</code> (<a href="https://redirect.github.com/spotbugs/spotbugs/issues/3916";>#3916</a>)</li> <li>Fix <code>MC_OVERRIDABLE_METHOD_CALL_IN_CONSTRUCTOR</code> false negative when a constructor calls an overridable method that takes arguments, such as a setter (e.g. <code>setValue(value)</code>) (<a href="https://redirect.github.com/spotbugs/spotbugs/issues/4309";>#4309</a>)</li> <li>Fix CLI launcher scripts intercepting <code>-conserveSpace</code> with a JVM system property instead passing it to Java Application as equivalent to <code>-effort:min</code> (<a href="https://redirect.github.com/spotbugs/spotbugs/pull/4289";>#4268</a>)</li> <li>Fix <code>USO_UNSAFE_ACCESSIBLE_OBJECT_SYNCHRONIZATION</code> false positive when <code>clone()</code> assigns a newly created lock object to the copy (<a href="https://redirect.github.com/spotbugs/spotbugs/issues/4320";>#4320</a>)</li> <li>Fix <code>CT_CONSTRUCTOR_THROW</code> false positive with sealed classes (<a href="https://redirect.github.com/spotbugs/spotbugs/issues/4259";>#4259</a>)</li> <li>Fix <code>JrtfsCodeBase</code> resolving JDK classes from the module image of the running JVM instead of the JDK the given <code>jrt-fs.jar</code> belongs to, so that <code>-auxclasspath <other-jdk>/lib/jrt-fs.jar</code> is honoured (<a href="https://redirect.github.com/spotbugs/spotbugs/pull/4329";>#4329</a>)</li> <li>Fix <code>USO_UNSAFE_ACCESSIBLE_OBJECT_SYNCHRONIZATION</code> false positive when a lock is assigned to a newly allocated object (<a href="https://redirect.github.com/spotbugs/spotbugs/issues/4331";>#4331</a>)</li> <li>Do not flag <code>writeReplace()</code> and <code>writeExternal()</code> as mutators (<a href="https://redirect.github.com/spotbugs/spotbugs/pull/1719";>#1719</a>)</li> <li>Prevent XML external entity resolution in user-controlled data (<a href="https://redirect.github.com/spotbugs/spotbugs/pull/4365";>#4365</a>)</li> <li>Fix handling of JSpecify type-use annotations in <code>CheckRelaxingNullnessAnnotation</code> (<a href="https://redirect.github.com/spotbugs/spotbugs/pull/4389";>#4389</a>)</li> <li>Stop reporting missing java.applet at java 26 or higher (<a href="https://redirect.github.com/spotbugs/spotbugs/pull/4390";>#4390</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/spotbugs/spotbugs/commit/6816eb256805aa6eed1dced23e6a4aea08cc6660";><code>6816eb2</code></a> release v4.10.5</li> <li><a href="https://github.com/spotbugs/spotbugs/commit/6d4cc6820a6dcb49f8b65ff44fe635345bfd20a9";><code>6d4cc68</code></a> chore(tests): Migrate further to jspecify for Nonnull/Nullable in tests (<a href="https://redirect.github.com/spotbugs/spotbugs/issues/4392";>#4392</a>)</li> <li><a href="https://github.com/spotbugs/spotbugs/commit/fd4200bb41a817f58a401db68fb663c8a592fc9d";><code>fd4200b</code></a> chore(tests): Migrate further to jspecify for Nonnull/Nullable in tests (<a href="https://redirect.github.com/spotbugs/spotbugs/issues/4391";>#4391</a>)</li> <li><a href="https://github.com/spotbugs/spotbugs/commit/c29dd08cf02092a44d9b818dcc3bdd66d5b007a0";><code>c29dd08</code></a> chore(fix): Stop reporting missing java.applet at java 26 or higher (<a href="https://redirect.github.com/spotbugs/spotbugs/issues/4390";>#4390</a>)</li> <li><a href="https://github.com/spotbugs/spotbugs/commit/7f809fcc8e86085d3fd948b717fb521ff8446316";><code>7f809fc</code></a> Fix handling of JSpecify type-use annotations in `CheckRelaxingNullnessAnnota...</li> <li><a href="https://github.com/spotbugs/spotbugs/commit/8a1f6f9cd0a0aab07591f8491b6bd12963599cc7";><code>8a1f6f9</code></a> fix(deps): update asm to v9.11 (<a href="https://redirect.github.com/spotbugs/spotbugs/issues/4388";>#4388</a>)</li> <li><a href="https://github.com/spotbugs/spotbugs/commit/d2de0a3ac5ae92f6cf308139e013459c0f4101b5";><code>d2de0a3</code></a> chore(deps): update dependency com.diffplug.spotless:spotless-plugin-gradle t...</li> <li><a href="https://github.com/spotbugs/spotbugs/commit/0b846571cecf8810ee372becee9ceb7b3b6c972d";><code>0b84657</code></a> chore(deps): update plugin com.diffplug.spotless to v8.10.4 (<a href="https://redirect.github.com/spotbugs/spotbugs/issues/4387";>#4387</a>)</li> <li><a href="https://github.com/spotbugs/spotbugs/commit/9442ed21de94472d56f4925d13ff18e141ed3f3f";><code>9442ed2</code></a> fix(deps): update dependency org.checkerframework:checker-qual to v4.3.1 (<a href="https://redirect.github.com/spotbugs/spotbugs/issues/4385";>#4385</a>)</li> <li><a href="https://github.com/spotbugs/spotbugs/commit/c359ba332a27d8e80fd3656e03b76a57be843bc9";><code>c359ba3</code></a> chore(cleanup): Minor cleanup (<a href="https://redirect.github.com/spotbugs/spotbugs/issues/4384";>#4384</a>)</li> <li>Additional commits viewable in <a href="https://github.com/spotbugs/spotbugs/compare/4.10.4...4.10.5";>compare view</a></li> </ul> </details> <br /> Updates `com.fasterxml.jackson.core:jackson-core` from 2.22.2 to 2.22.3 <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/FasterXML/jackson-core/commit/eee4b9e30d62dedf9c84beb6ae6e3c5ebf46920d";><code>eee4b9e</code></a> [maven-release-plugin] prepare release jackson-core-2.22.3</li> <li><a href="https://github.com/FasterXML/jackson-core/commit/31ee7ebd641d352e96484da4c37b234c8ce29070";><code>31ee7eb</code></a> Prep for 2.22.3 release</li> <li><a href="https://github.com/FasterXML/jackson-core/commit/9fef13fa0c31abd5ce15e2f25581c560261ade8b";><code>9fef13f</code></a> Merge branch '2.21' into 2.22</li> <li><a href="https://github.com/FasterXML/jackson-core/commit/9160f4068bb433afa91f51c4808b622b329f6e46";><code>9160f40</code></a> Post-release dep version bump</li> <li><a href="https://github.com/FasterXML/jackson-core/commit/1169cb6515603220eb50a60b473590eecdef476a";><code>1169cb6</code></a> [maven-release-plugin] prepare for next development iteration</li> <li><a href="https://github.com/FasterXML/jackson-core/commit/b33f4559759023567e808e732ebf9b4dfa3d9027";><code>b33f455</code></a> [maven-release-plugin] prepare release jackson-core-2.21.7</li> <li><a href="https://github.com/FasterXML/jackson-core/commit/ce8b7dc7ee207fb1481dd8fb535cfbbea6db3bc8";><code>ce8b7dc</code></a> Prep for 2.21.7 release</li> <li><a href="https://github.com/FasterXML/jackson-core/commit/b69555e65e4efcc4c728a70b793c3c232d43f1ea";><code>b69555e</code></a> Merge branch '2.21' into 2.22</li> <li><a href="https://github.com/FasterXML/jackson-core/commit/53df608d2eca49f7e3817c81fa0a8387835a5ba4";><code>53df608</code></a> Merge branch '2.20' into 2.21</li> <li><a href="https://github.com/FasterXML/jackson-core/commit/892f7577fe61c6381ba94bb7531f554241221e18";><code>892f757</code></a> Merge branch '2.19' into 2.20</li> <li>Additional commits viewable in <a href="https://github.com/FasterXML/jackson-core/compare/jackson-core-2.22.2...jackson-core-2.22.3";>compare view</a></li> </ul> </details> <br /> Updates `com.fasterxml.jackson.core:jackson-databind` from 2.22.2 to 2.22.3 <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/FasterXML/jackson-databind/commit/4385c5f7d51426f66fb24c3777308acc8ae7ea6c";><code>4385c5f</code></a> [maven-release-plugin] prepare release jackson-databind-2.22.3</li> <li><a href="https://github.com/FasterXML/jackson-databind/commit/ccb4fd0158cd20800f6014496dccf7332e5b18ce";><code>ccb4fd0</code></a> Prep for 2.22.3 release</li> <li><a href="https://github.com/FasterXML/jackson-databind/commit/2958412f1817a0ad95c34066b7eb85781dd2d4f1";><code>2958412</code></a> Merge branch '2.21' into 2.22</li> <li><a href="https://github.com/FasterXML/jackson-databind/commit/1215b94c2f7a8c4ce3863afbc38275a19c682a54";><code>1215b94</code></a> Post-release dep version bump</li> <li><a href="https://github.com/FasterXML/jackson-databind/commit/1f0df621449e5de7dd13a1538e0343f65f0e6bb3";><code>1f0df62</code></a> [maven-release-plugin] prepare for next development iteration</li> <li><a href="https://github.com/FasterXML/jackson-databind/commit/13a9ff4c4ef982cda23b99fea89d2a4e87af9019";><code>13a9ff4</code></a> [maven-release-plugin] prepare release jackson-databind-2.21.7</li> <li><a href="https://github.com/FasterXML/jackson-databind/commit/d168f9679ad575cdc2df8d53a8474ec481c7b5a7";><code>d168f96</code></a> Prep for 2.21.7 release</li> <li><a href="https://github.com/FasterXML/jackson-databind/commit/eaf5c76b8e0a538729a1bf922061abf73b13f89b";><code>eaf5c76</code></a> Merge branch '2.21' into 2.22</li> <li><a href="https://github.com/FasterXML/jackson-databind/commit/e05ef4cbb4d534a82948f8ba84350e55493bc72e";><code>e05ef4c</code></a> Merge branch '2.20' into 2.21</li> <li><a href="https://github.com/FasterXML/jackson-databind/commit/f6d4000c1eb6d34e2ae24685a9790b1e833d4bcb";><code>f6d4000</code></a> Merge branch '2.19' into 2.20</li> <li>Additional commits viewable in <a href="https://github.com/FasterXML/jackson-databind/compare/jackson-databind-2.22.2...jackson-databind-2.22.3";>compare view</a></li> </ul> </details> <br /> Updates `com.fasterxml.jackson.dataformat:jackson-dataformat-yaml` from 2.22.2 to 2.22.3 <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/FasterXML/jackson-dataformats-text/commit/e793b5fcca4a976d4179fb1b8a7d34ab0236556f";><code>e793b5f</code></a> [maven-release-plugin] prepare release jackson-dataformats-text-2.22.3</li> <li><a href="https://github.com/FasterXML/jackson-dataformats-text/commit/e8e9ece5e8bc28337aaa6206f43a54024a4a08d1";><code>e8e9ece</code></a> Prep for 2.22.3 release</li> <li><a href="https://github.com/FasterXML/jackson-dataformats-text/commit/2ea3d0c8e1c3e8540d0860c791b6de37ff55523a";><code>2ea3d0c</code></a> Merge branch '2.21' into 2.22</li> <li><a href="https://github.com/FasterXML/jackson-dataformats-text/commit/8e88b8564a51986d37f0f97bfbe18192b4525ea8";><code>8e88b85</code></a> Post-release dep version bump</li> <li><a href="https://github.com/FasterXML/jackson-dataformats-text/commit/806abc907d38104274bf1a18f5be9dfb5327a4c5";><code>806abc9</code></a> [maven-release-plugin] prepare for next development iteration</li> <li><a href="https://github.com/FasterXML/jackson-dataformats-text/commit/a11273cb00535298b79c2878d009f6c1b93ba502";><code>a11273c</code></a> [maven-release-plugin] prepare release jackson-dataformats-text-2.21.7</li> <li><a href="https://github.com/FasterXML/jackson-dataformats-text/commit/5d16624914c08ee4fa76dad6a1f496c6f67a989d";><code>5d16624</code></a> Prep for 2.21.7 release</li> <li><a href="https://github.com/FasterXML/jackson-dataformats-text/commit/f047dd5e84cbeb4aa42b956947d1282a838b09c5";><code>f047dd5</code></a> Merge branch '2.21' into 2.22</li> <li><a href="https://github.com/FasterXML/jackson-dataformats-text/commit/0f801646596d391f21f0a7e90a720b32c0db5676";><code>0f80164</code></a> Merge branch '2.20' into 2.21</li> <li><a href="https://github.com/FasterXML/jackson-dataformats-text/commit/4dcc3dab188c6e5af20cd7e45c98a1d5a1d7c136";><code>4dcc3da</code></a> Merge branch '2.19' into 2.20</li> <li>Additional commits viewable in <a href="https://github.com/FasterXML/jackson-dataformats-text/compare/jackson-dataformats-text-2.22.2...jackson-dataformats-text-2.22.3";>compare view</a></li> </ul> </details> <br /> Updates `com.fasterxml.jackson.datatype:jackson-datatype-jsr310` from 2.22.2 to 2.22.3 Updates `plugin.serialization` from 2.4.20 to 2.4.21 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/JetBrains/kotlin/releases";>plugin.serialization's releases</a>.</em></p> <blockquote> <h2>Kotlin 2.4.21</h2> <h2>Changelog</h2> <h3>Backend. Wasm</h3> <ul> <li><a href="https://youtrack.jetbrains.com/issue/KT-89267";><code>KT-89267</code></a> K/Wasm: calling a (T) -> R lambda with an argument that isn't a T traps instead of throwing ClassCastException</li> </ul> <h3>JVM. Reflection</h3> <ul> <li><a href="https://youtrack.jetbrains.com/issue/KT-89280";><code>KT-89280</code></a> NoSuchElementException in argumentsMakeSenseOnlyForMutableContainer for Java non-static inner class of generic outer class</li> <li><a href="https://youtrack.jetbrains.com/issue/KT-80710";><code>KT-80710</code></a> Reflection: change KCallable representation to avoid dependency on K1</li> </ul> <h3>JavaScript</h3> <ul> <li><a href="https://youtrack.jetbrains.com/issue/KT-89449";><code>KT-89449</code></a> Kotlin/JS: Member names no longer minified in production</li> <li><a href="https://youtrack.jetbrains.com/issue/KT-89363";><code>KT-89363</code></a> KJS. Regular class with companion can't extend external class</li> </ul> <h3>Tools. Compiler plugins. Serialization</h3> <ul> <li><a href="https://youtrack.jetbrains.com/issue/KT-89275";><code>KT-89275</code></a> Kotlin/Wasm: Invalid Wasm is emitted for a <code>@Serializable</code> generic class with a class upper bound</li> </ul> <h3>Tools. Gradle. Native</h3> <ul> <li><a href="https://youtrack.jetbrains.com/issue/KT-89285";><code>KT-89285</code></a> SwiftPM import results in flooded log</li> <li><a href="https://youtrack.jetbrains.com/issue/KT-86251";><code>KT-86251</code></a> K/N: Flaky linkDebugTestLinuxX64 failure with "truncated or malformed archive" on libstdlib-cache.a</li> </ul> <h3>Tools. Scripts</h3> <ul> <li><a href="https://youtrack.jetbrains.com/issue/KT-89247";><code>KT-89247</code></a> Kotlin Script: NoClassDefFoundError on 2nd execution with transitive dependency from imported script</li> <li><a href="https://youtrack.jetbrains.com/issue/KT-89220";><code>KT-89220</code></a> JSR-223: generic Java bindings break all subsequent <code>eval()</code> calls</li> <li><a href="https://youtrack.jetbrains.com/issue/KT-88458";><code>KT-88458</code></a> Audit closeable resource usage</li> <li><a href="https://youtrack.jetbrains.com/issue/KT-88453";><code>KT-88453</code></a> <code>VirtualFileScriptSource.text</code> leaks an unclosed file stream — script source file handle held until GC, blocks file deletion on Windows</li> </ul> <h2>Kotlin 2.4.21-RC</h2> <h2>Changelog</h2> <h3>Backend. Wasm</h3> <ul> <li><a href="https://youtrack.jetbrains.com/issue/KT-89267";><code>KT-89267</code></a> K/Wasm: calling a (T) -> R lambda with an argument that isn't a T traps instead of throwing ClassCastException</li> </ul> <h3>JVM. Reflection</h3> <ul> <li><a href="https://youtrack.jetbrains.com/issue/KT-89280";><code>KT-89280</code></a> NoSuchElementException in argumentsMakeSenseOnlyForMutableContainer for Java non-static inner class of generic outer class</li> <li><a href="https://youtrack.jetbrains.com/issue/KT-80710";><code>KT-80710</code></a> Reflection: change KCallable representation to avoid dependency on K1</li> </ul> <h3>JavaScript</h3> <ul> <li><a href="https://youtrack.jetbrains.com/issue/KT-89449";><code>KT-89449</code></a> Kotlin/JS: Member names no longer minified in production</li> <li><a href="https://youtrack.jetbrains.com/issue/KT-89363";><code>KT-89363</code></a> KJS. Regular class with companion can't extend external class</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md";>plugin.serialization's changelog</a>.</em></p> <blockquote> <h2>2.4.21</h2> <h3>Backend. Wasm</h3> <ul> <li><a href="https://youtrack.jetbrains.com/issue/KT-89267";><code>KT-89267</code></a> K/Wasm: calling a (T) -> R lambda with an argument that isn't a T traps instead of throwing ClassCastException</li> </ul> <h3>JVM. Reflection</h3> <ul> <li><a href="https://youtrack.jetbrains.com/issue/KT-89280";><code>KT-89280</code></a> NoSuchElementException in argumentsMakeSenseOnlyForMutableContainer for Java non-static inner class of generic outer class</li> <li><a href="https://youtrack.jetbrains.com/issue/KT-80710";><code>KT-80710</code></a> Reflection: change KCallable representation to avoid dependency on K1</li> </ul> <h3>JavaScript</h3> <ul> <li><a href="https://youtrack.jetbrains.com/issue/KT-89449";><code>KT-89449</code></a> Kotlin/JS: Member names no longer minified in production</li> <li><a href="https://youtrack.jetbrains.com/issue/KT-89363";><code>KT-89363</code></a> KJS. Regular class with companion can't extend external class</li> </ul> <h3>Tools. Compiler plugins. Serialization</h3> <ul> <li><a href="https://youtrack.jetbrains.com/issue/KT-89275";><code>KT-89275</code></a> Kotlin/Wasm: Invalid Wasm is emitted for a <code>@Serializable</code> generic class with a class upper bound</li> </ul> <h3>Tools. Gradle. Native</h3> <ul> <li><a href="https://youtrack.jetbrains.com/issue/KT-89285";><code>KT-89285</code></a> SwiftPM import results in flooded log</li> <li><a href="https://youtrack.jetbrains.com/issue/KT-86251";><code>KT-86251</code></a> K/N: Flaky linkDebugTestLinuxX64 failure with "truncated or malformed archive" on libstdlib-cache.a</li> </ul> <h3>Tools. Scripts</h3> <ul> <li><a href="https://youtrack.jetbrains.com/issue/KT-89247";><code>KT-89247</code></a> Kotlin Script: NoClassDefFoundError on 2nd execution with transitive dependency from imported script</li> <li><a href="https://youtrack.jetbrains.com/issue/KT-89220";><code>KT-89220</code></a> JSR-223: generic Java bindings break all subsequent <code>eval()</code> calls</li> <li><a href="https://youtrack.jetbrains.com/issue/KT-88458";><code>KT-88458</code></a> Audit closeable resource usage</li> <li><a href="https://youtrack.jetbrains.com/issue/KT-88453";><code>KT-88453</code></a> <code>VirtualFileScriptSource.text</code> leaks an unclosed file stream — script source file handle held until GC, blocks file deletion on Windows</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/JetBrains/kotlin/commit/9180ce6a7a7d3627f88b424717583f28ddca052d";><code>9180ce6</code></a> Add changelog for 2.4.21-RC</li> <li><a href="https://github.com/JetBrains/kotlin/commit/851077bb6eae00e74b209953ece77f42e1212097";><code>851077b</code></a> [Serialization] Copy type parameter bounds onto generated serializers (<a href="https://redirect.github.com/JetBrains/kotlin/issues/8421";>#8421</a>)</li> <li><a href="https://github.com/JetBrains/kotlin/commit/1b6b624fff071d33cfd5af06c6f541507f748560";><code>1b6b624</code></a> [Wasm]: Generate a Kotlin-level cast for bridged lambda functions. (<a href="https://redirect.github.com/JetBrains/kotlin/issues/8404";>#8404</a>)</li> <li><a href="https://github.com/JetBrains/kotlin/commit/3c223c27ab7b217286a752a601e5ba1c97383def";><code>3c223c2</code></a> Rrr/2.4.20/core docs (<a href="https://redirect.github.com/JetBrains/kotlin/issues/8322";>#8322</a>)</li> <li><a href="https://github.com/JetBrains/kotlin/commit/c681c2e5b0fb6558a692424d45fe054f7fb30dc4";><code>c681c2e</code></a> [2.4.20] [KT-89285] Stop the xcodebuild logs being output by default (<a href="https://redirect.github.com/JetBrains/kotlin/issues/8277";>#8277</a>)</li> <li><a href="https://github.com/JetBrains/kotlin/commit/f0645d1902ae16b1e62bc86a9908692c5ecdcb01";><code>f0645d1</code></a> [2.4.20] [JS] Reorder <code>CompilerConfiguration</code> properties initialization (<a href="https://redirect.github.com/JetBrains/kotlin/issues/8282";>#8282</a>)</li> <li><a href="https://github.com/JetBrains/kotlin/commit/f507ecde241e2fc56bc17758f4e11ee1ad4994d6";><code>f507ecd</code></a> [JS] Don't try to initialize an external class's companion object</li> <li><a href="https://github.com/JetBrains/kotlin/commit/c60d7d8622bfe184e1e6c648e3b7297432c9b369";><code>c60d7d8</code></a> Reflection: fix NoSuchElementException in ConvertFromJava.kt</li> <li><a href="https://github.com/JetBrains/kotlin/commit/05d1cdee72c398e1549bd3a9a2983a7da03b6bd0";><code>05d1cde</code></a> REPL: render correct reflected binding type</li> <li><a href="https://github.com/JetBrains/kotlin/commit/5acec47d93759687b8f3d5090ff29aab9ab1b643";><code>5acec47</code></a> Scripting: store collected dependencies recursively</li> <li>Additional commits viewable in <a href="https://github.com/JetBrains/kotlin/compare/v2.4.20...v2.4.21";>compare view</a></li> </ul> </details> <br /> Updates `org.jetbrains.kotlin:kotlin-gradle-plugin` from 2.4.20 to 2.4.21 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/JetBrains/kotlin/releases";>org.jetbrains.kotlin:kotlin-gradle-plugin's releases</a>.</em></p> <blockquote> <h2>Kotlin 2.4.21</h2> <h2>Changelog</h2> <h3>Backend. Wasm</h3> <ul> <li><a href="https://youtrack.jetbrains.com/issue/KT-89267";><code>KT-89267</code></a> K/Wasm: calling a (T) -> R lambda with an argument that isn't a T traps instead of throwing ClassCastException</li> </ul> <h3>JVM. Reflection</h3> <ul> <li><a href="https://youtrack.jetbrains.com/issue/KT-89280";><code>KT-89280</code></a> NoSuchElementException in argumentsMakeSenseOnlyForMutableContainer for Java non-static inner class of generic outer class</li> <li><a href="https://youtrack.jetbrains.com/issue/KT-80710";><code>KT-80710</code></a> Reflection: change KCallable representation to avoid dependency on K1</li> </ul> <h3>JavaScript</h3> <ul> <li><a href="https://youtrack.jetbrains.com/issue/KT-89449";><code>KT-89449</code></a> Kotlin/JS: Member names no longer minified in production</li> <li><a href="https://youtrack.jetbrains.com/issue/KT-89363";><code>KT-89363</code></a> KJS. Regular class with companion can't extend external class</li> </ul> <h3>Tools. Compiler plugins. Serialization</h3> <ul> <li><a href="https://youtrack.jetbrains.com/issue/KT-89275";><code>KT-89275</code></a> Kotlin/Wasm: Invalid Wasm is emitted for a <code>@Serializable</code> generic class with a class upper bound</li> </ul> <h3>Tools. Gradle. Native</h3> <ul> <li><a href="https://youtrack.jetbrains.com/issue/KT-89285";><code>KT-89285</code></a> SwiftPM import results in flooded log</li> <li><a href="https://youtrack.jetbrains.com/issue/KT-86251";><code>KT-86251</code></a> K/N: Flaky linkDebugTestLinuxX64 failure with "truncated or malformed archive" on libstdlib-cache.a</li> </ul> <h3>Tools. Scripts</h3> <ul> <li><a href="https://youtrack.jetbrains.com/issue/KT-89247";><code>KT-89247</code></a> Kotlin Script: NoClassDefFoundError on 2nd execution with transitive dependency from imported script</li> <li><a href="https://youtrack.jetbrains.com/issue/KT-89220";><code>KT-89220</code></a> JSR-223: generic Java bindings break all subsequent <code>eval()</code> calls</li> <li><a href="https://youtrack.jetbrains.com/issue/KT-88458";><code>KT-88458</code></a> Audit closeable resource usage</li> <li><a href="https://youtrack.jetbrains.com/issue/KT-88453";><code>KT-88453</code></a> <code>VirtualFileScriptSource.text</code> leaks an unclosed file stream — script source file handle held until GC, blocks file deletion on Windows</li> </ul> <h2>Kotlin 2.4.21-RC</h2> <h2>Changelog</h2> <h3>Backend. Wasm</h3> <ul> <li><a href="https://youtrack.jetbrains.com/issue/KT-89267";><code>KT-89267</code></a> K/Wasm: calling a (T) -> R lambda with an argument that isn't a T traps instead of throwing ClassCastException</li> </ul> <h3>JVM. Reflection</h3> <ul> <li><a href="https://youtrack.jetbrains.com/issue/KT-89280";><code>KT-89280</code></a> NoSuchElementException in argumentsMakeSenseOnlyForMutableContainer for Java non-static inner class of generic outer class</li> <li><a href="https://youtrack.jetbrains.com/issue/KT-80710";><code>KT-80710</code></a> Reflection: change KCallable representation to avoid dependency on K1</li> </ul> <h3>JavaScript</h3> <ul> <li><a href="https://youtrack.jetbrains.com/issue/KT-89449";><code>KT-89449</code></a> Kotlin/JS: Member names no longer minified in production</li> <li><a href="https://youtrack.jetbrains.com/issue/KT-89363";><code>KT-89363</code></a> KJS. Regular class with companion can't extend external class</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md";>org.jetbrains.kotlin:kotlin-gradle-plugin's changelog</a>.</em></p> <blockquote> <h2>2.4.21</h2> <h3>Backend. Wasm</h3> <ul> <li><a href="https://youtrack.jetbrains.com/issue/KT-89267";><code>KT-89267</code></a> K/Wasm: calling a (T) -> R lambda with an argument that isn't a T traps instead of throwing ClassCastException</li> </ul> <h3>JVM. Reflection</h3> <ul> <li><a href="https://youtrack.jetbrains.com/issue/KT-89280";><code>KT-89280</code></a> NoSuchElementException in argumentsMakeSenseOnlyForMutableContainer for Java non-static inner class of generic outer class</li> <li><a href="https://youtrack.jetbrains.com/issue/KT-80710";><code>KT-80710</code></a> Reflection: change KCallable representation to avoid dependency on K1</li> </ul> <h3>JavaScript</h3> <ul> <li><a href="https://youtrack.jetbrains.com/issue/KT-89449";><code>KT-89449</code></a> Kotlin/JS: Member names no longer minified in production</li> <li><a href="https://youtrack.jetbrains.com/issue/KT-89363";><code>KT-89363</code></a> KJS. Regular class with companion can't extend external class</li> </ul> <h3>Tools. Compiler plugins. Serialization</h3> <ul> <li><a href="https://youtrack.jetbrains.com/issue/KT-89275";><code>KT-89275</code></a> Kotlin/Wasm: Invalid Wasm is emitted for a <code>@Serializable</code> generic class with a class upper bound</li> </ul> <h3>Tools. Gradle. Native</h3> <ul> <li><a href="https://youtrack.jetbrains.com/issue/KT-89285";><code>KT-89285</code></a> SwiftPM import results in flooded log</li> <li><a href="https://youtrack.jetbrains.com/issue/KT-86251";><code>KT-86251</code></a> K/N: Flaky linkDebugTestLinuxX64 failure with "truncated or malformed archive" on libstdlib-cache.a</li> </ul> <h3>Tools. Scripts</h3> <ul> <li><a href="https://youtrack.jetbrains.com/issue/KT-89247";><code>KT-89247</code></a> Kotlin Script: NoClassDefFoundError on 2nd execution with transitive dependency from imported script</li> <li><a href="https://youtrack.jetbrains.com/issue/KT-89220";><code>KT-89220</code></a> JSR-223: generic Java bindings break all subsequent <code>eval()</code> calls</li> <li><a href="https://youtrack.jetbrains.com/issue/KT-88458";><code>KT-88458</code></a> Audit closeable resource usage</li> <li><a href="https://youtrack.jetbrains.com/issue/KT-88453";><code>KT-88453</code></a> <code>VirtualFileScriptSource.text</code> leaks an unclosed file stream — script source file handle held until GC, blocks file deletion on Windows</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/JetBrains/kotlin/commit/9180ce6a7a7d3627f88b424717583f28ddca052d";><code>9180ce6</code></a> Add changelog for 2.4.21-RC</li> <li><a href="https://github.com/JetBrains/kotlin/commit/851077bb6eae00e74b209953ece77f42e1212097";><code>851077b</code></a> [Serialization] Copy type parameter bounds onto generated serializers (<a href="https://redirect.github.com/JetBrains/kotlin/issues/8421";>#8421</a>)</li> <li><a href="https://github.com/JetBrains/kotlin/commit/1b6b624fff071d33cfd5af06c6f541507f748560";><code>1b6b624</code></a> [Wasm]: Generate a Kotlin-level cast for bridged lambda functions. (<a href="https://redirect.github.com/JetBrains/kotlin/issues/8404";>#8404</a>)</li> <li><a href="https://github.com/JetBrains/kotlin/commit/3c223c27ab7b217286a752a601e5ba1c97383def";><code>3c223c2</code></a> Rrr/2.4.20/core docs (<a href="https://redirect.github.com/JetBrains/kotlin/issues/8322";>#8322</a>)</li> <li><a href="https://github.com/JetBrains/kotlin/commit/c681c2e5b0fb6558a692424d45fe054f7fb30dc4";><code>c681c2e</code></a> [2.4.20] [KT-89285] Stop the xcodebuild logs being output by default (<a href="https://redirect.github.com/JetBrains/kotlin/issues/8277";>#8277</a>)</li> <li><a href="https://github.com/JetBrains/kotlin/commit/f0645d1902ae16b1e62bc86a9908692c5ecdcb01";><code>f0645d1</code></a> [2.4.20] [JS] Reorder <code>CompilerConfiguration</code> properties initialization (<a href="https://redirect.github.com/JetBrains/kotlin/issues/8282";>#8282</a>)</li> <li><a href="https://github.com/JetBrains/kotlin/commit/f507ecde241e2fc56bc17758f4e11ee1ad4994d6";><code>f507ecd</code></a> [JS] Don't try to initialize an external class's companion object</li> <li><a href="https://github.com/JetBrains/kotlin/commit/c60d7d8622bfe184e1e6c648e3b7297432c9b369";><code>c60d7d8</code></a> Reflection: fix NoSuchElementException in ConvertFromJava.kt</li> <li><a href="https://github.com/JetBrains/kotlin/commit/05d1cdee72c398e1549bd3a9a2983a7da03b6bd0";><code>05d1cde</code></a> REPL: render correct reflected binding type</li> <li><a href="https://github.com/JetBrains/kotlin/commit/5acec47d93759687b8f3d5090ff29aab9ab1b643";><code>5acec47</code></a> Scripting: store collected dependencies recursively</li> <li>Additional commits viewable in <a href="https://github.com/JetBrains/kotlin/compare/v2.4.20...v2.4.21";>compare view</a></li> </ul> </details> <br /> Updates `gradle-wrapper` from 8.14.5 to 8.14.6 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/gradle/gradle/releases";>gradle-wrapper's releases</a>.</em></p> <blockquote> <h2>8.14.6</h2> <p>The Gradle team is excited to announce Gradle 8.14.6.</p> <p>Here are the highlights of this release:</p> <ul> <li>Java 24 support</li> <li>GraalVM Native Image toolchain selection</li> <li>Enhancements to test reporting</li> <li>Build Authoring improvements</li> </ul> <p><a href="https://docs.gradle.org/8.14.6/release-notes.html";>Read the Release Notes</a></p> <p>We would like to thank the following community members for their contributions to this release of Gradle: <a href="https://github.com/liutikas";>Aurimas</a>, <a href="https://github.com/benjamin-bader";>Ben Bader</a>, <a href="https://github.com/Vampire";>Björn Kautler</a>, <a href="https://github.com/chandre92";>chandre92</a>, <a href="https://github.com/dlehammer";>Daniel Hammer</a>, <a href="https://github.com/danishnawab";>Danish Nawab</a>, <a href="https://github.com/DreierF";>Florian Dreier</a>, <a href="https://github.com/Mengmeiivy";>Ivy Chen</a>, <a href="https://github.com/jjohannes";>Jendrik Johannes</a>, <a href="https://github.com/jimmy1995-gu";>jimmy1995-gu</a>, <a href="https://github.com/vmadalin";>Madalin Valceleanu</a>, <a href="https://github.com/NaMinhyeok";>Na Minhyeok</a>.</p> <h2>Upgrade instructions</h2> <p>Switch your build to use Gradle 8.14.6 by updating your wrapper:</p> <pre><code>./gradlew :wrapper --gradle-version=8.14.6 && ./gradlew :wrapper </code></pre> <p>See the Gradle <a href="https://docs.gradle.org/8.14.6/userguide/upgrading_version_8.html";>8.x upgrade guide</a> to learn about deprecations, breaking changes and other considerations when upgrading.</p> <p>For Java, Groovy, Kotlin and Android compatibility, see the <a href="https://docs.gradle.org/8.14.6/userguide/compatibility.html";>full compatibility notes</a>.</p> <h2>Reporting problems</h2> <p>If you find a problem with this release, please file a bug on <a href="https://github.com/gradle/gradle/issues";>GitHub Issues</a> adhering to our issue guidelines. If you're not sure you're encountering a bug, please use the <a href="https://discuss.gradle.org/c/help-discuss";>forum</a>.</p> <p>We hope you will build happiness with Gradle, and we look forward to your feedback via <a href="https://twitter.com/gradle";>Twitter</a> or on <a href="https://github.com/gradle";>GitHub</a>.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/gradle/gradle/commit/88c80c1459b75a6d077d24eebe7905ffa3e1293f";><code>88c80c1</code></a> Release notes for 8.14.6 (<a href="https://redirect.github.com/gradle/gradle/issues/39421";>#39421</a>)</li> <li><a href="https://github.com/gradle/gradle/commit/1ee2186c50bd8e2850adb69b8562025e54d03474";><code>1ee2186</code></a> Release notes for 8.14.6</li> <li><a href="https://github.com/gradle/gradle/commit/af0275ec7161e01e3bd487eb6127f8aef2021af0";><code>af0275e</code></a> Prepare 8.14.6 (<a href="https://redirect.github.com/gradle/gradle/issues/39400";>#39400</a>)</li> <li><a href="https://github.com/gradle/gradle/commit/32c6a8703958085b6431e2ccc5d699089a37c47a";><code>32c6a87</code></a> Security backport for 8.x (<a href="https://redirect.github.com/gradle/gradle/issues/39415";>#39415</a>)</li> <li><a href="https://github.com/gradle/gradle/commit/b10d746f0bd634e376b423b1b79b9b839d59f087";><code>b10d746</code></a> Check worker token before any serialization similarly to daemon</li> <li><a href="https://github.com/gradle/gradle/commit/454497b5f1858121b1794a9e5f33e7821128ed49";><code>454497b</code></a> Check the daemon token before any serialization</li> <li><a href="https://github.com/gradle/gradle/commit/a700d7220818f82f11b300e6897bc5fb3823ca7f";><code>a700d72</code></a> Refuse connections from non-Gradle processes</li> <li><a href="https://github.com/gradle/gradle/commit/d4583ef0afc80de7f5fd547e3c767b5ea9b77152";><code>d4583ef</code></a> Wrap GCP & S3 resolution errors into HTTP to reuse repository disabling mecha...</li> <li><a href="https://github.com/gradle/gradle/commit/ed14ef8630e999ee24f6f9fb8fbfb1d950d86814";><code>ed14ef8</code></a> Harden repository disabling: disable them by default on failure unless there'...</li> <li><a href="https://github.com/gradle/gradle/commit/ee03c243e80b4faacf396ffc3a51daf25af3b3f1";><code>ee03c24</code></a> Replace credentials for distribution url with *** and avoid showing the plain...</li> <li>Additional commits viewable in <a href="https://github.com/gradle/gradle/compare/v8.14.5...v8.14.6";>compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
