dependabot[bot] opened a new pull request, #3068: URL: https://github.com/apache/cxf/pull/3068
Bumps [net.sourceforge.pmd:pmd-core](https://github.com/pmd/pmd) from 7.23.0 to 7.24.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/pmd/pmd/releases";>net.sourceforge.pmd:pmd-core's releases</a>.</em></p> <blockquote> <h2>PMD 7.24.0 (24-April-2026)</h2> <h2>24-April-2026 - 7.24.0</h2> <p>The PMD team is pleased to announce PMD 7.24.0.</p> <p>This is a minor release.</p> <h3>Table Of Contents</h3> <ul> <li><a href="https://github.com/pmd/pmd/blob/HEAD/#new-rules";>🌟️ New Rules</a></li> <li><a href="https://github.com/pmd/pmd/blob/HEAD/#fixed-issues";>🐛️ Fixed Issues</a></li> <li><a href="https://github.com/pmd/pmd/blob/HEAD/#merged-pull-requests";>✨️ Merged pull requests</a></li> <li><a href="https://github.com/pmd/pmd/blob/HEAD/#dependency-updates";>📦️ Dependency updates</a></li> <li><a href="https://github.com/pmd/pmd/blob/HEAD/#stats";>📈️ Stats</a></li> </ul> <h3>🌟️ New Rules</h3> <ul> <li>The new Apex rule <a href="https://docs.pmd-code.org/pmd-doc-7.24.0/pmd_rules_apex_errorprone.html#avoidinterfaceasmapkey";><code>AvoidInterfaceAsMapKey</code></a> reports <code>Map</code> declarations (fields, variables, parameters) whose key type is an interface that has at least one abstract implementing class defining <code>equals</code> or <code>hashCode</code>. Using such maps results in potentially duplicated map entries or not being able to get entries by key.</li> <li>The new Java rule <a href="https://docs.pmd-code.org/pmd-doc-7.24.0/pmd_rules_java_multithreading.html#overridingthreadrun";><code>OverridingThreadRun</code></a> finds overridden <code>Thread::run</code> methods. This is not recommended. Instead, implement <code>Runnable</code> and pass an instance to the thread constructor.</li> </ul> <h3>🐛️ Fixed Issues</h3> <ul> <li>apex <ul> <li><a href="https://redirect.github.com/pmd/pmd/issues/5386";>#5386</a>: [apex] Apex files ending in "Test" are skipped with a number of rules</li> </ul> </li> <li>apex-errorprone <ul> <li><a href="https://redirect.github.com/pmd/pmd/issues/6492";>#6492</a>: [apex] New rule: Prevent use of interface -> abstract class with equals/hashCode as key in Map</li> </ul> </li> <li>apex-security <ul> <li><a href="https://redirect.github.com/pmd/pmd/issues/5385";>#5385</a>: [apex] ApexCRUDViolation not reported even if SOQL doesn't have permissions check on it</li> </ul> </li> <li>java-bestpractices <ul> <li><a href="https://redirect.github.com/pmd/pmd/issues/4272";>#4272</a>: [java] JUnitTestsShouldIncludeAssert: False positive with assert in lambda</li> </ul> </li> <li>java-multithreading <ul> <li><a href="https://redirect.github.com/pmd/pmd/issues/595";>#595</a>: [java] New rule: Implement Runnable instead of extending Thread</li> </ul> </li> <li>kotlin <ul> <li><a href="https://redirect.github.com/pmd/pmd/issues/6003";>#6003</a>: [kotlin] Support multidollar interpolation (Kotlin 2.2)</li> </ul> </li> </ul> <h3>✨️ Merged pull requests</h3> <!-- raw HTML omitted --> <ul> <li><a href="https://redirect.github.com/pmd/pmd/pull/6493";>#6493</a>: [apex] New Rule: AvoidInterfaceAsMapKeyRule - <a href="https://github.com/JonnyPower";>Jonny Alexander Power</a> (<a href="https://github.com/JonnyPower";><code>@JonnyPower</code></a>)</li> <li><a href="https://redirect.github.com/pmd/pmd/pull/6497";>#6497</a>: [kotlin] Fix kotlin grammar for parsing multidollar interpolation - <a href="https://github.com/stokpop";>Peter Paul Bakker</a> (<a href="https://github.com/stokpop";><code>@stokpop</code></a>)</li> <li><a href="https://redirect.github.com/pmd/pmd/pull/6555";>#6555</a>: [java] New rule: OverridingThreadRun to prefer using Runnable - <a href="https://github.com/zbynek";>Zbynek Konecny</a> (<a href="https://github.com/zbynek";><code>@zbynek</code></a>)</li> <li><a href="https://redirect.github.com/pmd/pmd/pull/6556";>#6556</a>: [java] Fix <a href="https://redirect.github.com/pmd/pmd/issues/4272";>#4272</a>: False positive in UnitTestShouldIncludeAssert when using assertion in lambda - <a href="https://github.com/lukasgraef";>Lukas Gräf</a> (<a href="https://github.com/lukasgraef";><code>@lukasgraef</code></a>)</li> <li><a href="https://redirect.github.com/pmd/pmd/pull/6563";>#6563</a>: [apex] Remove class name suffix "Test" as indicator of test classes - <a href="https://github.com/dschach";>David Schach</a> (<a href="https://github.com/dschach";><code>@dschach</code></a>)</li> <li><a href="https://redirect.github.com/pmd/pmd/pull/6576";>#6576</a>: [test] chore: Throw a TestAbortedException on disabled tests - <a href="https://github.com/UncleOwen";>UncleOwen</a> (<a href="https://github.com/UncleOwen";><code>@UncleOwen</code></a>)</li> <li><a href="https://redirect.github.com/pmd/pmd/pull/6577";>#6577</a>: [dist] chore: Improve error message for missing JAVA_HOME in AntIT.java - <a href="https://github.com/UncleOwen";>UncleOwen</a> (<a href="https://github.com/UncleOwen";><code>@UncleOwen</code></a>)</li> <li><a href="https://redirect.github.com/pmd/pmd/pull/6607";>#6607</a>: [doc] basic.xml has been gone for a long time - <a href="https://github.com/UncleOwen";>UncleOwen</a> (<a href="https://github.com/UncleOwen";><code>@UncleOwen</code></a>)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/pmd/pmd/commit/e9787d8e01a596a9995d04949bfb7f10c9ffc422";><code>e9787d8</code></a> [release] prepare release pmd_releases/7.24.0</li> <li><a href="https://github.com/pmd/pmd/commit/a10f02e2fb70133e79919a3938767243af64bf0f";><code>a10f02e</code></a> Prepare pmd release 7.24.0</li> <li><a href="https://github.com/pmd/pmd/commit/a67360e81011e591a1372553ea05d5ee90d3798f";><code>a67360e</code></a> Update contributors for 7.24.0</li> <li><a href="https://github.com/pmd/pmd/commit/af69d8bf00fa5855c7284f48583d5ad908636679";><code>af69d8b</code></a> chore: fix typos</li> <li><a href="https://github.com/pmd/pmd/commit/6fe30ee6dfbf3be532ade03b21bd4062f3c4d497";><code>6fe30ee</code></a> [java] Fix <a href="https://redirect.github.com/pmd/pmd/issues/4272";>#4272</a>: False positive in UnitTestShouldIncludeAssert when using as...</li> <li><a href="https://github.com/pmd/pmd/commit/dafc2d24d312ff725af6c1bc456632325f5501c1";><code>dafc2d2</code></a> [doc] Update release notes (<a href="https://redirect.github.com/pmd/pmd/issues/4272";>#4272</a>, <a href="https://redirect.github.com/pmd/pmd/issues/6556";>#6556</a>)</li> <li><a href="https://github.com/pmd/pmd/commit/abf3e90922ae81d49ece39b736e321f9709fb970";><code>abf3e90</code></a> Merge branch 'main' into pr-6556</li> <li><a href="https://github.com/pmd/pmd/commit/d1763b6edef44e0ddd6ba708d77e905f1383a9fc";><code>d1763b6</code></a> [java] New rule: OverridingThreadRun to prefer using Runnable (<a href="https://redirect.github.com/pmd/pmd/issues/6555";>#6555</a>)</li> <li><a href="https://github.com/pmd/pmd/commit/64f135bbcec7be7d6aeebb315bab0a7d69eed33d";><code>64f135b</code></a> [doc] Update release notes (<a href="https://redirect.github.com/pmd/pmd/issues/595";>#595</a>, <a href="https://redirect.github.com/pmd/pmd/issues/6555";>#6555</a>)</li> <li><a href="https://github.com/pmd/pmd/commit/fe7fdbd03284da15eb7161e7b18fb9112cee9d0e";><code>fe7fdbd</code></a> Merge branch 'main' into pr-6555</li> <li>Additional commits viewable in <a href="https://github.com/pmd/pmd/compare/pmd_releases/7.23.0...pmd_releases/7.24.0";>compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
