Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package spotbugs for openSUSE:Factory checked in at 2026-11-06 19:58:45 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/spotbugs (Old) and /work/SRC/openSUSE:Factory/.spotbugs.new.3759290 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "spotbugs" Fri Nov 6 19:58:45 2026 rev:2 rq:1395846 version:4.10.5 Changes: -------- --- /work/SRC/openSUSE:Factory/spotbugs/spotbugs.changes 2026-06-19 17:22:57.281333409 +0200 +++ /work/SRC/openSUSE:Factory/.spotbugs.new.3759290/spotbugs.changes 2026-11-06 20:06:54.371695869 +0100 @@ -1,0 +2,465 @@ +Fri Nov 6 12:46:19 UTC 2026 - Anton Shvetz <[email protected]> + +- Update to v4.10.5 + * Added + + Add ReflectiveAccessTracker to track fields accessed via + reflection - such as VarHandle, MethodHandle or + AtomicFieldUpdaters (#3954) to fix issue (#2749) + + Add automatic completion of class names in GUI class filter + (#749) + * Changed + + @SuppressFBWarnings annotation on a method or a constructor + now suppresses warnings reported in their lambdas too (#724) + + Replace deprecated calls to 'SignatureParser' to + 'GenericSignatureParser' where feasible (#4336) + + Declaring to the interface lists/maps (#4381) + * Fixed + + Fix NP_NULL_ON_SOME_PATH false positive when a field null + check that throws uses field == null but not null == field + (#4147) + + Fix RV_RETURN_VALUE_IGNORED_NO_SIDE_EFFECT false negative + when the ignored result comes from Arrays.copyOf, + Arrays.copyOfRange or any pure static method or constructor + of a class using assert (#3900) + + Fix AA_ASSERTION_OF_ARGUMENTS false negative when a public + method validates a parameter with assert and instanceof + (#4305) + + Fix PT_ABSOLUTE_PATH_TRAVERSAL false negative for new + File(parent, child), where the attacker controlled segment is + the second argument (#4340) + + Fix 'DM_USELESS_THREAD' false negative for Thread subclasses + that do not override run() (#4306) + + Fix UL_UNRELEASED_LOCK false negative when a method acquires + a lock and never calls unlock (#4310) + + Fix TLW_TWO_LOCK_WAIT false negatives when a class waits + while holding two monitors but has no matching notify() call + (#4323) + + Fix NP_ALWAYS_NULL false positives when a non-null value is + known to satisfy an instanceof check (#4272) + + Fix RANGE_ARRAY_INDEX false positive when the array access is + inside unreachable code caused by an impossible null + condition (e.g. if (x == null && x != null)) (#4275) + + Fix NP_NULL_ON_SOME_PATH false positive when instanceof check + is always true because the value was created with new and its + exact type is a subtype of the checked type (e.g. Base value + = new Derived(); if (value instanceof Derived) result = new + Object(); result.toString()) (#4273) + + Fix NN_NAKED_NOTIFY false positive when guarded state is + updated before the synchronized block that calls + notify/notifyAll (#3786) + + Fix SA_LOCAL_SELF_ASSIGNMENT false positive in methods with + ++/-- inside a switch nested in a try-catch block (#3929) + + Fix AT_NONATOMIC_OPERATIONS_ON_SHARED_VARIABLE false negative + for non-atomic read-modify-write in inner classes accessing + enclosing shared fields (#4236) + + Fix OS_OPEN_STREAM false positive when the result of + PrintWriter.append() is reassigned before closing the writer + (#4274) + + Fix OS_OPEN_STREAM false positive when a stream is wrapped + (e.g. in a PrintStream, BufferedOutputStream or PrintWriter) + and the wrapped stream is closed instead of the wrapper + (#4304) + + Fix SING_SINGLETON_GETTER_NOT_SYNCHRONIZED false negative + when lazy init uses a ternary assignment instead of an if + statement (#4154) + + Fix UR_UNINIT_READ false negative for compound assignment to + a field (e.g. m_iType |= e) (#4233) + + Fix NP_BOOLEAN_RETURN_NULL false negative when null is + returned via a local variable (#4234) + + Fix MS_EXPOSE_BUF and EI_EXPOSE_BUF false negative when + returning Buffer.array() (#4235) + + Fix OBL_UNSATISFIED_OBLIGATION false negatives for unclosed + CallableStatements returned by Connection.prepareCall (#4148) + + Fix LI_LAZY_INIT_STATIC false negative when field is lazily + initialized using a method call (#4276) + + Fix DMI_RANDOM_USED_ONLY_ONCE FP when Random is used inside + loop but created before (#3937) + + Fix SARIF output writing source-location URI syntax + exceptions to stderr when source filenames are unknown + (#1412) + + Fix IL_INFINITE_LOOP false positives for loops with + conditions that are statically known to be true or false + (#3904) + + Narrow the definition of singletons (#2985) + + Fix NP_LOAD_OF_KNOWN_NULL_VALUE false negative when null + check uses instanceof (#3916) + + Fix MC_OVERRIDABLE_METHOD_CALL_IN_CONSTRUCTOR false negative + when a constructor calls an overridable method that takes + arguments, such as a setter (e.g. setValue(value)) (#4309) + + Fix CLI launcher scripts intercepting -conserveSpace with a + JVM system property instead passing it to Java Application as + equivalent to -effort:min (#4268) + + Fix USO_UNSAFE_ACCESSIBLE_OBJECT_SYNCHRONIZATION false + positive when clone() assigns a newly created lock object to + the copy (#4320) + + Fix CT_CONSTRUCTOR_THROW false positive with sealed classes + (#4259) + + Fix JrtfsCodeBase resolving JDK classes from the module image + of the running JVM instead of the JDK the given jrt-fs.jar + belongs to, so that -auxclasspath <other-jdk>/lib/jrt-fs.jar + is honoured (#4329) + + Fix USO_UNSAFE_ACCESSIBLE_OBJECT_SYNCHRONIZATION false + positive when a lock is assigned to a newly allocated object + (#4331) + + Do not flag writeReplace() and writeExternal() as mutators + (#1719) + + Prevent XML external entity resolution in user-controlled + data (#4365) + + Fix handling of JSpecify type-use annotations in + CheckRelaxingNullnessAnnotation (#4389) + + Stop reporting missing java.applet at java 26 or higher + (#4390) + +------------------------------------------------------------------- +Fri Aug 21 04:34:11 UTC 2026 - Anton Shvetz <[email protected]> + +- Update to v4.10.4 + * Fixed + + Fix NN_NAKED_NOTIFY false negatives when a field read is + stored in a local variable before notify() or notifyAll() + (#3884) + + Fix ASE_ASSERTION_WITH_SIDE_EFFECT and + ASE_ASSERTION_WITH_SIDE_EFFECT_METHOD false positives in + every method analysed after a method that reads + $assertionsDisabled without throwing an AssertionError + (#3483) + + Fix INT_BAD_COMPARISON_WITH_SIGNED_BYTE false positive for + meaningful comparisons of a signed byte with 127 (b < 127, b + >= 127) (#4201) + + Fix EI_EXPOSE_REP false negative for public getters in + anonymous classes (#4237) + + Fix missing class report for + java.util.Collections$EmptyNavigableSet and + java.util.Collections$EmptyNavigableMap when the result of + Collections.emptySortedSet(), emptyNavigableSet(), + emptySortedMap() or emptyNavigableMap() is stored (#4244) + + Fix URF_UNREAD_FIELD false negative for unread instance + fields declared in enums (#4246) + + Stop publishing global dependency-management constraints to + consumer POMs. (#4223) + +------------------------------------------------------------------- +Mon Jul 13 11:32:42 UTC 2026 - Anton Shvetz <[email protected]> + +- Update to v4.10.3 + * Fixed + + Fix LI_LAZY_INIT_STATIC false negative when the null guard is + written in yoda-style (null == field) (#4144) + + Fix DC_DOUBLECHECK, NP_SYNC_AND_NULL_CHECK_FIELD and + SP_SPIN_ON_FIELD false negatives when the null guard is + written in yoda-style (null == field) (#4144) + + Fix message for UNS_UNSAFE_CALL bug pattern + + Restore CLI plugin loading by fixing + DetectorFactoryCollection bootstrap ordering (#4191) + + Fix UWF_NULL_FIELD false negative for fields initialized with + cast null values (#4034) + + Fix UMAC_UNCALLABLE_METHOD_OF_ANONYMOUS_CLASS false positive + for methods reached only through method references (#4059) + * Changed + + Ant FindBugsViewerTask: use default look and feel by default. + (#4165) + * Refactor + + Ant FindBugsViewerTask: extend AbstractFindBugsTask to reduce + duplicate code. (#4165) +- Update to v4.10.2 + * Build + + Add release protection to ensure version released matches the + tag and that snapshot has been removed. (#4156) + + Drop binary incompatible Saxon-HE back to 12.9 to keep java + 11 compatibility. (#4159) + + Add binary check to the gradle build to ensure compatibility + remains. (#4159) +- Update to v4.10.1 + * Build + + 4.10.0 was not released due to a release process error + (artifacts were built from a -SNAPSHOT version). 4.10.1 is + the corrected release and contains the intended 4.10.0 + contents. +- Update to v4.10.0 + * Refactor + + Move internal usage of 'javax.annotation.Nonnull' to + 'jakarta.annotation.NonNull'. (#3858) + + Move internal usage of 'javax.annotation.Nullable' to + 'jakarta.annotation.Nullable'. (#3861) + + Renamed methods from edu.umd.cs.findbugs.SwitchHandler to + reflect that they return a PC, not an offset (#3869) + + Make the progress bar more visually appealing by adding some + borders (#3896) + + Reuse DismantleBytecode.isIf introduced in (#3869) + * Added + + Add partial support for org.jspecify.annotations.Nullable, + org.jspecify.annotations.NonNull, + org.jspecify.annotations.NullUnmarked and + org.jspecify.annotations.NullMarked annotations. These are + aliased to the closest existing SpotBugs nullness + annotations. This is not a complete implementation of the + JSpecify spec; scope-level semantics of @NullMarked and + @NullUnmarked are not yet supported. (#3996) + + Recognize jakarta.annotation.Nonnull and + jakarta.annotation.Nullable (#3780) + + Detect use of sun.misc.Unsafe and jdk.internal.misc.Unsafe + (#3804) + + New bug type is introduced: NCR_NOT_PROPERLY_CHECKED_READ. + Improper validation of the return value from the read() + method in InputStream and Reader classes may result in an + array not being fully filled. (#3766) + + New detector FindImproperSynchronization and introduced new + bug types: + ~ USO_UNSAFE_METHOD_SYNCHRONIZATION is reported when using + synchronized methods with the class' accessible intrinsic + lock, + ~ USO_UNSAFE_STATIC_METHOD_SYNCHRONIZATION is reported when + using static synchronized methods with the class' exposed + intrinsic lock, + ~ USO_UNSAFE_OBJECT_SYNCHRONIZATION is reported when the lock + used for synchronization is visible from the outside, + ~ USO_UNSAFE_ACCESSIBLE_OBJECT_SYNCHRONIZATION is reported + when the lock used for synchronization is made accessible, + with methods that update or return the lock, to the + outside, + ~ USO_UNSAFE_INHERITABLE_OBJECT_SYNCHRONIZATION is reported + when the lock used for synchronization is can be altered by + subclasses, + ~ USO_UNSAFE_EXPOSED_OBJECT_SYNCHRONIZATION is reported when + the lock used for synchronization is later exposed in the + subclasses. + ~ USBC_UNSAFE_SYNCHRONIZATION_WITH_BACKING_COLLECTION is + reported when the backing collection of a lock is visible + from the outside, + ~ USBC_UNSAFE_SYNCHRONIZATION_WITH_ACCESSIBLE_BACKING_COLLECTION + is reported when the backing collection of a lock is made + accessible, with methods that update or return the lock, to + the outside, + ~ USBC_UNSAFE_SYNCHRONIZATION_WITH_INHERITABLE_BACKING_COLLECTION + is reported when the backing collection of a lock can be + altered by subclasses. + ~ (See SEI CERT rule LCK00-J and SEI CERT rule LCK04-J) + + New detector FindIncreasedAccessibilityOfMethods for new bug + type IAOM_DO_NOT_INCREASE_METHOD_ACCESSIBILITY. This detector + reports a bug if a class increases the accessibility of + overridden or hidden methods. (See SEI CERT rule MET04-J) + * Fixed + + Fix DM_STRING_TOSTRING false negative when toString() is + chained before a method call (e.g., + s.toString().toLowerCase()); multiple occurrences in the same + method are now all reported (#3966) + + Stop exposing JUnit BOM as a transitive dependency to + consumers (#3908) + + Fix incorrect bug counts and sizes when unioning reports + (#3721) + + Classes containing only methods throwing + UnsupportedOperationException with setter-like names are no + longer considered as mutable (#1601) + + Enhanced SARIF output with full description sections - adding + markdown is still an open issue (#2339) + + Added missing null check to + MultipleInstantiationsOfSingletons detector (#3823) + + Fix invalid syntax in findbugsfilter.xsd (#3832) + + Fix CT_CONSTRUCTOR_THROW FP with public and private + constructors (#3822) + + Fix tool name in usage info, (#3847) + + Fix the building of relative chains of ./././ in filenames in + fbp files (#3852) + + Fix IllegalArgumentException initializing spotbugs when + inside a fat jar on Java 25 (#3875) + + Do not report DM_DEFAULT_ENCODING for classes compiled with + target >= 18 (#3866) + + Fix FS_BAD_DATE_FORMAT_FLAG_COMBO not suppressed by + field-level annotation (#3838) + + Fix SF_SWITCH_FALLTHROUGH false positives (#3767) + + Recognize well-known exception-throwing utility methods when + looking for exceptions thrown from constructors (#3821) + + Fix RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE false negative + when non-null value is on the left side of null comparison + (#3920) + + Fix IM_BAD_CHECK_FOR_ODD false negative when using Yoda-style + comparison (1 == i % 2) (#3886) + + Fix PluginLoader.close() to continue closing all + URLClassLoaders when one close operation fails, suppressing + subsequent IOExceptions. (#3958) + + Fix broken bugDescriptions.html#TYPE links by restoring + legacy bug type anchors in generated docs (#2113) + + Fix EI_EXPOSE_REP false negative in package-private classes + that expose mutable state through methods overriding a public + super-type (#4027) + + Fix errors in the 4.40 Eclipse in SpotBugs plugin project + (#4052) + * Removed + + Removed old deprecated methods: + ~ assertPresentBugPattern(String, IMarker[]) protected method + from de.tobject.findbugs.test.AbstractQuickfixTest + deprecated since 2014, + ~ setFontSizeHelper(Component[], float) protected method from + edu.umd.cs.findbugs.gui2.FBFrame deprecated since 2010, + ~ matchedPrefixes(String[], String) method from + edu.umd.cs.findbugs.gui2.ViewFilter deprecated since 2010, + ~ lookupFromUniqueId(String) method from + edu.umd.cs.findbugs.BugCollection and ++++ 168 more lines (skipped) ++++ between /work/SRC/openSUSE:Factory/spotbugs/spotbugs.changes ++++ and /work/SRC/openSUSE:Factory/.spotbugs.new.3759290/spotbugs.changes Old: ---- spotbugs-4.9.8.pom spotbugs-4.9.8.tar.gz spotbugs-annotations-4.9.8.pom spotbugs-ant-4.9.8.pom New: ---- spotbugs-4.10.5.pom spotbugs-4.10.5.tar.gz spotbugs-annotations-4.10.5.pom spotbugs-ant-4.10.5.pom ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ spotbugs.spec ++++++ --- /var/tmp/diff_new_pack.hBWTR9/_old 2026-11-06 20:06:56.782796910 +0100 +++ /var/tmp/diff_new_pack.hBWTR9/_new 2026-11-06 20:06:56.785797036 +0100 @@ -19,7 +19,7 @@ %global desc SpotBugs is the spiritual successor of FindBugs, carrying on from the point\ where it left off with support of its community. Name: spotbugs -Version: 4.9.8 +Version: 4.10.5 Release: 0 Summary: A tool for static analysis to look for bugs in Java code License: LGPL-2.1-only @@ -40,6 +40,7 @@ BuildRequires: mvn(com.google.code.findbugs:jsr305) BuildRequires: mvn(com.google.code.gson:gson) BuildRequires: mvn(com.google.code.maven-replacer-plugin:replacer) +BuildRequires: mvn(jakarta.annotation:jakarta.annotation-api) BuildRequires: mvn(jaxen:jaxen) BuildRequires: mvn(net.jcip:jcip-annotations) BuildRequires: mvn(net.sf.saxon:Saxon-HE) < 11 @@ -111,7 +112,6 @@ sed -i -e 's#@SPOTBUGS_HOME@#%{_datadir}/%{name}#' %{name}/etc/script.properties -%pom_xpath_remove pom:packaging %{name} %pom_xpath_remove 'pom:scope[.="runtime"]' %{name}-ant %pom_change_dep com.github.stephenc.jcip:jcip-annotations net.jcip: %{name} @@ -122,6 +122,7 @@ %pom_add_dep org.apache.ant:ant %{name}-ant %pom_add_dep com.github.spotbugs:spotbugs:%{version} %{name}-ant +%pom_add_dep jakarta.annotation:jakarta.annotation-api %{name} cat >pom.xml <<__POM__ <project @@ -327,6 +328,7 @@ org.apache.commons:commons-{lang3,text} \ org.dom4j:dom4j \ com.google.code.gson:gson \ + jakarta.annotation:jakarta.annotation-api \ jaxen:jaxen \ org.ow2.asm:asm{,-{commons,util,analysis,tree}} \ net.jcip:jcip-annotations \ ++++++ _scmsync.obsinfo ++++++ --- /var/tmp/diff_new_pack.hBWTR9/_old 2026-11-06 20:06:56.873800724 +0100 +++ /var/tmp/diff_new_pack.hBWTR9/_new 2026-11-06 20:06:56.879800976 +0100 @@ -1,6 +1,6 @@ -mtime: 1776896763 -commit: f024b5e1f574469f4232685358a414c96ce4ce76d7c6457abaa598f5c47af155 +mtime: 1793969594 +commit: 888e55871ab9de18dde4a61438e4c8acfbf4141854ac7ef91ae082e40fb8f507 url: https://src.opensuse.org/java-packages/spotbugs -revision: f024b5e1f574469f4232685358a414c96ce4ce76d7c6457abaa598f5c47af155 +revision: 888e55871ab9de18dde4a61438e4c8acfbf4141854ac7ef91ae082e40fb8f507 projectscmsync: https://src.opensuse.org/java-packages/_ObsPrj ++++++ build.specials.obscpio ++++++ ++++++ build.specials.obscpio ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/.gitignore new/.gitignore --- old/.gitignore 1970-01-01 01:00:00.000000000 +0100 +++ new/.gitignore 2026-11-06 13:53:14.000000000 +0100 @@ -0,0 +1 @@ +.osc ++++++ spotbugs-4.9.8.pom -> spotbugs-4.10.5.pom ++++++ --- /work/SRC/openSUSE:Factory/spotbugs/spotbugs-4.9.8.pom 2026-06-19 17:22:57.089326791 +0200 +++ /work/SRC/openSUSE:Factory/.spotbugs.new.3759290/spotbugs-4.10.5.pom 2026-11-06 20:06:54.143686313 +0100 @@ -9,8 +9,7 @@ <modelVersion>4.0.0</modelVersion> <groupId>com.github.spotbugs</groupId> <artifactId>spotbugs</artifactId> - <version>4.9.8</version> - <packaging>pom</packaging> + <version>4.10.5</version> <name>SpotBugs</name> <description>SpotBugs: Because it is easy!</description> <url>https://spotbugs.github.io/</url> @@ -69,62 +68,41 @@ <developerConnection>scm:git:[email protected]:spotbugs/spotbugs.git</developerConnection> <url>https://github.com/spotbugs/spotbugs/</url> </scm> - <dependencyManagement> - <dependencies> - <dependency> - <groupId>org.apache.logging.log4j</groupId> - <artifactId>log4j-core</artifactId> - <version>[2.17.1, 3)</version> - </dependency> - <dependency> - <groupId>ch.qos.logback</groupId> - <artifactId>logback-core</artifactId> - <version>[1.2.9, 2)</version> - </dependency> - <dependency> - <groupId>org.junit</groupId> - <artifactId>junit-bom</artifactId> - <version>5.14.0</version> - <type>pom</type> - <scope>import</scope> - </dependency> - </dependencies> - </dependencyManagement> <dependencies> <dependency> <groupId>org.ow2.asm</groupId> <artifactId>asm</artifactId> - <version>9.9</version> + <version>9.11</version> <scope>compile</scope> </dependency> <dependency> <groupId>org.ow2.asm</groupId> <artifactId>asm-analysis</artifactId> - <version>9.9</version> + <version>9.11</version> <scope>compile</scope> </dependency> <dependency> <groupId>org.ow2.asm</groupId> <artifactId>asm-commons</artifactId> - <version>9.9</version> + <version>9.11</version> <scope>compile</scope> </dependency> <dependency> <groupId>org.ow2.asm</groupId> <artifactId>asm-tree</artifactId> - <version>9.9</version> + <version>9.11</version> <scope>compile</scope> </dependency> <dependency> <groupId>org.ow2.asm</groupId> <artifactId>asm-util</artifactId> - <version>9.9</version> + <version>9.11</version> <scope>compile</scope> </dependency> <dependency> <groupId>org.apache.bcel</groupId> <artifactId>bcel</artifactId> - <version>6.11.0</version> + <version>6.13.0</version> <scope>compile</scope> </dependency> <dependency> @@ -140,51 +118,57 @@ <scope>compile</scope> </dependency> <dependency> + <groupId>com.google.code.gson</groupId> + <artifactId>gson</artifactId> + <version>2.14.0</version> + <scope>compile</scope> + </dependency> + <dependency> <groupId>org.apache.commons</groupId> <artifactId>commons-lang3</artifactId> - <version>3.19.0</version> + <version>3.21.0</version> <scope>compile</scope> </dependency> <dependency> <groupId>org.apache.commons</groupId> <artifactId>commons-text</artifactId> - <version>1.14.0</version> + <version>1.15.0</version> + <scope>compile</scope> + </dependency> + <dependency> + <groupId>org.jspecify</groupId> + <artifactId>jspecify</artifactId> + <version>1.0.1</version> <scope>compile</scope> </dependency> <dependency> <groupId>org.slf4j</groupId> <artifactId>slf4j-api</artifactId> - <version>2.0.17</version> + <version>2.0.20</version> <scope>compile</scope> </dependency> <dependency> <groupId>com.github.spotbugs</groupId> <artifactId>spotbugs-annotations</artifactId> - <version>4.9.8</version> - <scope>compile</scope> - </dependency> - <dependency> - <groupId>com.google.code.gson</groupId> - <artifactId>gson</artifactId> - <version>2.13.2</version> + <version>4.10.5</version> <scope>compile</scope> </dependency> <dependency> <groupId>jaxen</groupId> <artifactId>jaxen</artifactId> - <version>2.0.0</version> + <version>2.0.6</version> <scope>runtime</scope> </dependency> <dependency> <groupId>net.sf.saxon</groupId> <artifactId>Saxon-HE</artifactId> - <version>12.9</version> + <version>12.10</version> <scope>runtime</scope> </dependency> <dependency> <groupId>org.apache.logging.log4j</groupId> <artifactId>log4j-core</artifactId> - <version>2.25.2</version> + <version>2.26.1</version> <scope>runtime</scope> </dependency> </dependencies> ++++++ spotbugs-4.9.8.tar.gz -> spotbugs-4.10.5.tar.gz ++++++ ++++ 51015 lines of diff (skipped) ++++++ spotbugs-annotations-4.9.8.pom -> spotbugs-annotations-4.10.5.pom ++++++ --- /work/SRC/openSUSE:Factory/spotbugs/spotbugs-annotations-4.9.8.pom 2026-06-19 17:22:57.253332443 +0200 +++ /work/SRC/openSUSE:Factory/.spotbugs.new.3759290/spotbugs-annotations-4.10.5.pom 2026-11-06 20:06:54.267691510 +0100 @@ -9,7 +9,7 @@ <modelVersion>4.0.0</modelVersion> <groupId>com.github.spotbugs</groupId> <artifactId>spotbugs-annotations</artifactId> - <version>4.9.8</version> + <version>4.10.5</version> <name>SpotBugs Annotations</name> <description>Annotations the SpotBugs tool supports</description> <url>https://spotbugs.github.io/</url> @@ -68,27 +68,6 @@ <developerConnection>scm:git:[email protected]:spotbugs/spotbugs.git</developerConnection> <url>https://github.com/spotbugs/spotbugs/</url> </scm> - <dependencyManagement> - <dependencies> - <dependency> - <groupId>org.apache.logging.log4j</groupId> - <artifactId>log4j-core</artifactId> - <version>[2.17.1, 3)</version> - </dependency> - <dependency> - <groupId>ch.qos.logback</groupId> - <artifactId>logback-core</artifactId> - <version>[1.2.9, 2)</version> - </dependency> - <dependency> - <groupId>org.junit</groupId> - <artifactId>junit-bom</artifactId> - <version>5.14.0</version> - <type>pom</type> - <scope>import</scope> - </dependency> - </dependencies> - </dependencyManagement> <dependencies> <dependency> <groupId>com.google.code.findbugs</groupId> ++++++ spotbugs-ant-4.9.8.pom -> spotbugs-ant-4.10.5.pom ++++++ --- /work/SRC/openSUSE:Factory/spotbugs/spotbugs-ant-4.9.8.pom 2026-06-19 17:22:57.265332857 +0200 +++ /work/SRC/openSUSE:Factory/.spotbugs.new.3759290/spotbugs-ant-4.10.5.pom 2026-11-06 20:06:54.318693647 +0100 @@ -9,7 +9,7 @@ <modelVersion>4.0.0</modelVersion> <groupId>com.github.spotbugs</groupId> <artifactId>spotbugs-ant</artifactId> - <version>4.9.8</version> + <version>4.10.5</version> <name>SpotBugs Ant Task</name> <description>Ant Task to run SpotBugs</description> <url>https://spotbugs.github.io/</url> @@ -68,32 +68,17 @@ <developerConnection>scm:git:[email protected]:spotbugs/spotbugs.git</developerConnection> <url>https://github.com/spotbugs/spotbugs/</url> </scm> - <dependencyManagement> - <dependencies> - <dependency> - <groupId>org.apache.logging.log4j</groupId> - <artifactId>log4j-core</artifactId> - <version>[2.17.1, 3)</version> - </dependency> - <dependency> - <groupId>ch.qos.logback</groupId> - <artifactId>logback-core</artifactId> - <version>[1.2.9, 2)</version> - </dependency> - <dependency> - <groupId>org.junit</groupId> - <artifactId>junit-bom</artifactId> - <version>5.14.0</version> - <type>pom</type> - <scope>import</scope> - </dependency> - </dependencies> - </dependencyManagement> <dependencies> <dependency> <groupId>com.github.spotbugs</groupId> <artifactId>spotbugs</artifactId> - <version>4.9.8</version> + <version>4.10.5</version> + <scope>runtime</scope> + </dependency> + <dependency> + <groupId>org.slf4j</groupId> + <artifactId>slf4j-simple</artifactId> + <version>2.0.20</version> <scope>runtime</scope> </dependency> </dependencies>
