dependabot[bot] opened a new pull request, #20188: URL: https://github.com/apache/druid/pull/20188
Bumps [com.github.spotbugs:spotbugs-maven-plugin](https://github.com/spotbugs/spotbugs-maven-plugin) from 4.10.2.0 to 4.10.4.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/spotbugs/spotbugs-maven-plugin/releases";>com.github.spotbugs:spotbugs-maven-plugin's releases</a>.</em></p> <blockquote> <h2>spotbugs-maven-plugin-4.10.4.0</h2> <h2>What's Changed</h2> <ul> <li>Fixes <a href="https://redirect.github.com/spotbugs/spotbugs-maven-plugin/issues/1474";>#1474</a> by <a href="https://github.com/gigabitzauber";><code>@gigabitzauber</code></a> in <a href="https://redirect.github.com/spotbugs/spotbugs-maven-plugin/pull/1487";>spotbugs/spotbugs-maven-plugin#1487</a></li> <li>Update build by <a href="https://github.com/hazendaz";><code>@hazendaz</code></a> in <a href="https://redirect.github.com/spotbugs/spotbugs-maven-plugin/pull/1494";>spotbugs/spotbugs-maven-plugin#1494</a></li> <li>Cleanup charset handling and remove never used sourceEncoding in spot… by <a href="https://github.com/hazendaz";><code>@hazendaz</code></a> in <a href="https://redirect.github.com/spotbugs/spotbugs-maven-plugin/pull/1495";>spotbugs/spotbugs-maven-plugin#1495</a></li> <li>Improve javaExecutable usage to prefer current process by <a href="https://github.com/hazendaz";><code>@hazendaz</code></a> in <a href="https://redirect.github.com/spotbugs/spotbugs-maven-plugin/pull/1496";>spotbugs/spotbugs-maven-plugin#1496</a></li> <li>Update deprecated artifact handling by <a href="https://github.com/hazendaz";><code>@hazendaz</code></a> in <a href="https://redirect.github.com/spotbugs/spotbugs-maven-plugin/pull/1497";>spotbugs/spotbugs-maven-plugin#1497</a></li> <li>Require maven 3.8.9 or better by <a href="https://github.com/hazendaz";><code>@hazendaz</code></a> in <a href="https://redirect.github.com/spotbugs/spotbugs-maven-plugin/pull/1499";>spotbugs/spotbugs-maven-plugin#1499</a></li> <li>Add missing javadocs by <a href="https://github.com/hazendaz";><code>@hazendaz</code></a> in <a href="https://redirect.github.com/spotbugs/spotbugs-maven-plugin/pull/1500";>spotbugs/spotbugs-maven-plugin#1500</a></li> <li>Otherwise build updates and library updates</li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/gigabitzauber";><code>@gigabitzauber</code></a> made their first contribution in <a href="https://redirect.github.com/spotbugs/spotbugs-maven-plugin/pull/1487";>spotbugs/spotbugs-maven-plugin#1487</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/spotbugs/spotbugs-maven-plugin/compare/spotbugs-maven-plugin-4.10.3.0...spotbugs-maven-plugin-4.10.4.0";>https://github.com/spotbugs/spotbugs-maven-plugin/compare/spotbugs-maven-plugin-4.10.3.0...spotbugs-maven-plugin-4.10.4.0</a></p> <h2>Spotbugs Maven Plugin 4.10.3.0</h2> <h2>Summary</h2> <p>This release delivers improvements to reliability, maintainability, and reproducibility. The SpotBugs execution path has been modernized by replacing the Ant-based launcher with <code>ProcessBuilder</code>, temporary auxiliary classpath handling has been improved, and toolchain detection has been made more robust. Build tooling has also been cleaned up with Maven modernization efforts, improved reproducible artifact generation, and updated documentation. Additional fixes include improved artifact handling, test coverage improvements, and dependency updates.</p> <h2>What's Changed</h2> <ul> <li>[fix] Skip non-JAR artifacts in buildBugTypeUrlMap by <a href="https://github.com/uweguenther";><code>@uweguenther</code></a> in <a href="https://redirect.github.com/spotbugs/spotbugs-maven-plugin/pull/1445";>spotbugs/spotbugs-maven-plugin#1445</a></li> <li>modify renovate config to not use bytebuddy -jdk5 postifx versions by <a href="https://github.com/JuditKnoll";><code>@JuditKnoll</code></a> in <a href="https://redirect.github.com/spotbugs/spotbugs-maven-plugin/pull/1451";>spotbugs/spotbugs-maven-plugin#1451</a></li> <li>Copilot/analyze test coverage by <a href="https://github.com/hazendaz";><code>@hazendaz</code></a> in <a href="https://redirect.github.com/spotbugs/spotbugs-maven-plugin/pull/1454";>spotbugs/spotbugs-maven-plugin#1454</a></li> <li>Use StandardCharsets.UTF_8 in groovy verify in IT tests by <a href="https://github.com/hazendaz";><code>@hazendaz</code></a> in <a href="https://redirect.github.com/spotbugs/spotbugs-maven-plugin/pull/1456";>spotbugs/spotbugs-maven-plugin#1456</a></li> <li>[license] Use spdx license header for apache 2.0 (no change to license) by <a href="https://github.com/hazendaz";><code>@hazendaz</code></a> in <a href="https://redirect.github.com/spotbugs/spotbugs-maven-plugin/pull/1457";>spotbugs/spotbugs-maven-plugin#1457</a></li> <li>Cleanup the build pom by <a href="https://github.com/hazendaz";><code>@hazendaz</code></a> in <a href="https://redirect.github.com/spotbugs/spotbugs-maven-plugin/pull/1458";>spotbugs/spotbugs-maven-plugin#1458</a></li> <li>[pom] Modernize how download / copy of spotbugs source works by <a href="https://github.com/hazendaz";><code>@hazendaz</code></a> in <a href="https://redirect.github.com/spotbugs/spotbugs-maven-plugin/pull/1459";>spotbugs/spotbugs-maven-plugin#1459</a></li> <li>Add reproducibility checks section to README by <a href="https://github.com/hazendaz";><code>@hazendaz</code></a> in <a href="https://redirect.github.com/spotbugs/spotbugs-maven-plugin/pull/1460";>spotbugs/spotbugs-maven-plugin#1460</a></li> <li>Avoid 'def' usage by <a href="https://github.com/hazendaz";><code>@hazendaz</code></a> in <a href="https://redirect.github.com/spotbugs/spotbugs-maven-plugin/pull/1462";>spotbugs/spotbugs-maven-plugin#1462</a></li> <li>[pom] Replace antrun to fix groovy docs with find-and-replace plugin … by <a href="https://github.com/hazendaz";><code>@hazendaz</code></a> in <a href="https://redirect.github.com/spotbugs/spotbugs-maven-plugin/pull/1463";>spotbugs/spotbugs-maven-plugin#1463</a></li> <li>Correct 2 integration tests by <a href="https://github.com/hazendaz";><code>@hazendaz</code></a> in <a href="https://redirect.github.com/spotbugs/spotbugs-maven-plugin/pull/1467";>spotbugs/spotbugs-maven-plugin#1467</a></li> <li>Make tool chain logic more robust by <a href="https://github.com/hazendaz";><code>@hazendaz</code></a> in <a href="https://redirect.github.com/spotbugs/spotbugs-maven-plugin/pull/1469";>spotbugs/spotbugs-maven-plugin#1469</a></li> <li>[pom] Use jar plugin to zip groovy docs so reproducibility works by <a href="https://github.com/hazendaz";><code>@hazendaz</code></a> in <a href="https://redirect.github.com/spotbugs/spotbugs-maven-plugin/pull/1470";>spotbugs/spotbugs-maven-plugin#1470</a></li> <li>Make 'spotbugsAuxClasspath' a temp file and minor coding cleanup by <a href="https://github.com/hazendaz";><code>@hazendaz</code></a> in <a href="https://redirect.github.com/spotbugs/spotbugs-maven-plugin/pull/1471";>spotbugs/spotbugs-maven-plugin#1471</a></li> <li>Replace 'ant' based SpotBugs execution with ProcessBuilder by <a href="https://github.com/hazendaz";><code>@hazendaz</code></a> in <a href="https://redirect.github.com/spotbugs/spotbugs-maven-plugin/pull/1472";>spotbugs/spotbugs-maven-plugin#1472</a></li> <li>Update dependency com.github.spotbugs:spotbugs to v4.10.3 by <a href="https://github.com/renovate";><code>@renovate</code></a>[bot] in <a href="https://redirect.github.com/spotbugs/spotbugs-maven-plugin/pull/1473";>spotbugs/spotbugs-maven-plugin#1473</a></li> <li>Other build/dependency updates</li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/uweguenther";><code>@uweguenther</code></a> made their first contribution in <a href="https://redirect.github.com/spotbugs/spotbugs-maven-plugin/pull/1445";>spotbugs/spotbugs-maven-plugin#1445</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/spotbugs/spotbugs-maven-plugin/compare/spotbugs-maven-plugin-4.10.2.0...spotbugs-maven-plugin-4.10.3.0";>https://github.com/spotbugs/spotbugs-maven-plugin/compare/spotbugs-maven-plugin-4.10.2.0...spotbugs-maven-plugin-4.10.3.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/spotbugs/spotbugs-maven-plugin/commit/698cfa78adae84f08be86c1876f0685773c38643";><code>698cfa7</code></a> [maven-release-plugin] prepare release spotbugs-maven-plugin-4.10.4.0</li> <li><a href="https://github.com/spotbugs/spotbugs-maven-plugin/commit/f12b09f07f1e16a6596af82424a8e3de4fa3903f";><code>f12b09f</code></a> [pom] Update spotbugs core to 4.10.4</li> <li><a href="https://github.com/spotbugs/spotbugs-maven-plugin/commit/2fc78c6c570a8d19bb29bc9f747d2a0d0b861798";><code>2fc78c6</code></a> Merge pull request <a href="https://redirect.github.com/spotbugs/spotbugs-maven-plugin/issues/1500";>#1500</a> from hazendaz/master</li> <li><a href="https://github.com/spotbugs/spotbugs-maven-plugin/commit/87e41d650086a467d38542e26b30a26d22d05516";><code>87e41d6</code></a> Add more missing javadocs throughout</li> <li><a href="https://github.com/spotbugs/spotbugs-maven-plugin/commit/b2149c3656485c1d21194bd2577773c30766ab9c";><code>b2149c3</code></a> [docs] Add missing javadocs to rest of integration tests</li> <li><a href="https://github.com/spotbugs/spotbugs-maven-plugin/commit/6cdda400e47a9e2a23fb8aeb91f9cb0cfba4ba2d";><code>6cdda40</code></a> Merge pull request <a href="https://redirect.github.com/spotbugs/spotbugs-maven-plugin/issues/1499";>#1499</a> from hazendaz/master</li> <li><a href="https://github.com/spotbugs/spotbugs-maven-plugin/commit/d9d54a655fea291dae9b8bd47972a524761dd29d";><code>d9d54a6</code></a> Merge pull request <a href="https://redirect.github.com/spotbugs/spotbugs-maven-plugin/issues/1498";>#1498</a> from spotbugs/renovate/byte-buddy.version</li> <li><a href="https://github.com/spotbugs/spotbugs-maven-plugin/commit/54738d75afb60670683b61e666b2a50f4cbfd04b";><code>54738d7</code></a> Require maven 3.8.9 or better</li> <li><a href="https://github.com/spotbugs/spotbugs-maven-plugin/commit/d3646ee37d1e5f5adfed2899fdee9e97051edcec";><code>d3646ee</code></a> Update byte-buddy.version to v1.18.12</li> <li><a href="https://github.com/spotbugs/spotbugs-maven-plugin/commit/011cbecff9467c31bc4639e806fcdf4fa2bf93ce";><code>011cbec</code></a> Merge pull request <a href="https://redirect.github.com/spotbugs/spotbugs-maven-plugin/issues/1497";>#1497</a> from hazendaz/master</li> <li>Additional commits viewable in <a href="https://github.com/spotbugs/spotbugs-maven-plugin/compare/spotbugs-maven-plugin-4.10.2.0...spotbugs-maven-plugin-4.10.4.0";>compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
