renovate-bot opened a new pull request #1783: URL: https://github.com/apache/fineract/pull/1783
[](https://renovatebot.com) This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [com.github.spotbugs:spotbugs](https://spotbugs.github.io/) ([source](https://togithub.com/spotbugs/spotbugs)) | `4.2.2` -> `4.3.0` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | --- ### Release Notes <details> <summary>spotbugs/spotbugs</summary> ### [`v4.3.0`](https://togithub.com/spotbugs/spotbugs/blob/master/CHANGELOG.md#​430---2021-07-01) [Compare Source](https://togithub.com/spotbugs/spotbugs/compare/4.2.3...4.3.0) ##### Fixed - `MS_EXPOSE_REP` and `EI_EXPOSE_REP` are now reported for code returning a reference to a mutable object indirectly (e.g. via a local variable) ##### Changed - Bump ObjectWeb ASM from 9.1 to 9.2 supporting JDK 18 ([#​1591](https://togithub.com/spotbugs/spotbugs/pull/1591)) - Bump Saxon-HE from 10.3 to 10.5 ([#​1513](https://togithub.com/spotbugs/spotbugs/pull/1513)) - Bump gson from 2.8.6 to 2.8.7 ([#​1556](https://togithub.com/spotbugs/spotbugs/pull/1556)) - Function `mutableSignature()` improved and factored out from the `MutableStaticFields` detector ##### Added - New bugs `MS_EXPOSE_BUF`, `EI_EXPOSE_BUF`, `EI_EXPOSE_STATIC_BUF2` and `EI_EXPOSE_BUF2` by the `FindReturnRef` detector to detect cases where buffers or their backing arrays are exposed (see [SEI CERT rule FIO05-J](https://wiki.sei.cmu.edu/confluence/display/java/FIO05-J.+Do+not+expose+buffers+or+their+backing+arrays+methods+to+untrusted+code)) - `MS_EXPOSE_REP`, `EI_EXPOSE_REP`, `EI_EXPOSE_STATIC_REP2` and `EI_EXPOSE_REP2` now report for shallowly copied arrays (using clone()) of mutable objects ### [`v4.2.3`](https://togithub.com/spotbugs/spotbugs/blob/master/CHANGELOG.md#​423---2021-04-12) [Compare Source](https://togithub.com/spotbugs/spotbugs/compare/4.2.2...4.2.3) ##### Fixed - Inconsistency in the description of `DLS_DEAD_LOCAL_INCREMENT_IN_RETURN`, `VO_VOLATILE_INCREMENT` and `QF_QUESTIONABLE_FOR_LOOP` ([#​1470](https://togithub.com/spotbugs/spotbugs/issues/1470)) - Should issue warning for SecureRandom object created and used only once ([#​1464](https://togithub.com/spotbugs/spotbugs/issues/1464)) - False positive OBL_UNSATIFIED_OBLIGATION with try with resources ([#​79](https://togithub.com/spotbugs/spotbugs/issues/79)) - `SA_LOCAL_SELF_COMPUTATION` bug ([#​1472](https://togithub.com/spotbugs/spotbugs/issues/1472)) - False positive `EQ_UNUSUAL` with record classes ([#​1367](https://togithub.com/spotbugs/spotbugs/issues/1367)) </details> --- ### Configuration 📅 **Schedule**: At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. â™» **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box. --- This PR has been generated by [WhiteSource Renovate](https://renovate.whitesourcesoftware.com). View repository job log [here](https://app.renovatebot.com/dashboard#github/apache/fineract). -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
