This is an automated email from the ASF dual-hosted git repository.
dongjoon pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/orc.git
The following commit(s) were added to refs/heads/main by this push:
new d85269dc6 ORC-1589: Bump `spotbugs-maven-plugin` to 4.8.3.0
d85269dc6 is described below
commit d85269dc61ef81cd631f7d906bacef7f16814ff9
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
AuthorDate: Tue Jan 16 08:34:54 2024 -0800
ORC-1589: Bump `spotbugs-maven-plugin` to 4.8.3.0
Bumps
[com.github.spotbugs:spotbugs-maven-plugin](https://github.com/spotbugs/spotbugs-maven-plugin)
from 4.8.1.0 to 4.8.3.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/spotbugs/spotbugs-maven-plugin/releases";>com.github.spotbugs:spotbugs-maven-plugin's
releases</a>.</em></p>
<blockquote>
<h2>Spotbugs Maven Plugin 4.8.3.0</h2>
<p>This release is much larger than most, all IT tests are good to go.
Given scope of changes, if any issues seen, please raise ticket so we can
quickly address. A lot was done here to fix-up lazy groovy usage.</p>
<h2>Consumer</h2>
<ul>
<li>Support for spotbugs 4.8.3</li>
<li>library updates</li>
<li>Add 'noClassOk' option (untested)</li>
<li>Stop overusing 'def' from groovy and use concrete types</li>
<li>Many plexus to standard java usage</li>
<li>Switch 'Boolean' to 'boolean' for parameters</li>
<li>Remove long deprecated and not actually used spotbugsXmlOutput</li>
<li>Switch to using buffered writer</li>
<li>Drop supporting 2005 version of jxr-maven-plugin</li>
<li>Add support for usage of classifier (untested)</li>
<li>Add better logging when plugin skipped</li>
<li>Cleanup property usage and remove unused properties</li>
</ul>
<h2>Build</h2>
<ul>
<li>For integration tests switch to jakarta namespace</li>
<li>Cleanup site</li>
<li>Add groovy doc annotations</li>
<li>Let groovy create javadocs</li>
<li>Remove obsolete groovy config from build</li>
<li>Update groovy docs headers, footers, doc title</li>
<li>Replace examples with modern site usage</li>
<li>Replace all it with modern site usage</li>
<li>Replace only bash IT test with groovy</li>
</ul>
<h2>Spotbugs Maven Plugin 4.8.2.0</h2>
<ul>
<li>Supports spotbugs 4.8.2</li>
<li>Fix loading of onlyAnalyze classes/packages from file on multi module
projects per <a
href="https://redirect.github.com/spotbugs/spotbugs-maven-plugin/issues/674";>#674</a></li>
<li>Force spotbugs log4j2 usage to pipe to slfj4 that we use</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/spotbugs/spotbugs-maven-plugin/commit/4ed93fcea1be737f0a2a00ab669f241147f1037b";><code>4ed93fc</code></a>
[maven-release-plugin] prepare release spotbugs-maven-plugin-4.8.3.0</li>
<li><a
href="https://github.com/spotbugs/spotbugs-maven-plugin/commit/ca6fdbf8ff656ca0fbc5bde05f2fd7f35c8af6bd";><code>ca6fdbf</code></a>
Merge pull request <a
href="https://redirect.github.com/spotbugs/spotbugs-maven-plugin/issues/753";>#753</a>
from spotbugs/renovate/bcel.version</li>
<li><a
href="https://github.com/spotbugs/spotbugs-maven-plugin/commit/266cac1b0932f93367ec6944d0f8d8e08441bf45";><code>266cac1</code></a>
Update dependency org.apache.bcel:bcel to v6.8.1</li>
<li><a
href="https://github.com/spotbugs/spotbugs-maven-plugin/commit/5276b34814fad1d344f26a466c381b32ee04fda1";><code>5276b34</code></a>
Merge pull request <a
href="https://redirect.github.com/spotbugs/spotbugs-maven-plugin/issues/754";>#754</a>
from spotbugs/renovate/jgit.version</li>
<li><a
href="https://github.com/spotbugs/spotbugs-maven-plugin/commit/12a7889f5f7322b4daef59814254bcf54379665f";><code>12a7889</code></a>
Update jgit.version to v5.13.3.202401111512-r</li>
<li><a
href="https://github.com/spotbugs/spotbugs-maven-plugin/commit/7aa519fa5103e9336147aab1e67df88bdd306d61";><code>7aa519f</code></a>
Merge pull request <a
href="https://redirect.github.com/spotbugs/spotbugs-maven-plugin/issues/752";>#752</a>
from spotbugs/renovate/pluginpluginversion</li>
<li><a
href="https://github.com/spotbugs/spotbugs-maven-plugin/commit/570b30a293229eb3ce101b81fb7458640e8ef5ed";><code>570b30a</code></a>
Update pluginPluginVersion to v3.11.0</li>
<li><a
href="https://github.com/spotbugs/spotbugs-maven-plugin/commit/85f0dcbb5af243a4b7f1b288dadfb544cd6b85eb";><code>85f0dcb</code></a>
Merge pull request <a
href="https://redirect.github.com/spotbugs/spotbugs-maven-plugin/issues/751";>#751</a>
from spotbugs/renovate/slf4jversion</li>
<li><a
href="https://github.com/spotbugs/spotbugs-maven-plugin/commit/dcddab7dbb5347ade92d457e833373f9cd96b07e";><code>dcddab7</code></a>
Update slf4jVersion to v2.0.11</li>
<li><a
href="https://github.com/spotbugs/spotbugs-maven-plugin/commit/27b11b4430141044e161fc77a3f594e542710643";><code>27b11b4</code></a>
Merge pull request <a
href="https://redirect.github.com/spotbugs/spotbugs-maven-plugin/issues/750";>#750</a>
from hazendaz/use-commons-io</li>
<li>Additional commits viewable in <a
href="https://github.com/spotbugs/spotbugs-maven-plugin/compare/spotbugs-maven-plugin-4.8.1.0...spotbugs-maven-plugin-4.8.3.0";>compare
view</a></li>
</ul>
</details>
<br />
<details>
<summary>Most Recent Ignore Conditions Applied to This Pull
Request</summary>
| Dependency Name | Ignore Conditions |
| --- | --- |
| com.github.spotbugs:spotbugs-maven-plugin | [< 4.8, > 4.7.3.4] |
</details>
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `dependabot rebase` will rebase this PR
- `dependabot recreate` will recreate this PR, overwriting any edits that
have been made to it
- `dependabot merge` will merge this PR after your CI passes on it
- `dependabot squash and merge` will squash and merge this PR after your CI
passes on it
- `dependabot cancel merge` will cancel a previously requested merge and
block automerging
- `dependabot reopen` will reopen this PR if it is closed
- `dependabot close` will close this PR and stop Dependabot recreating it.
You can achieve the same result by closing it manually
- `dependabot show <dependency name> ignore conditions` will show all of
the ignore conditions of the specified dependency
- `dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen the PR
or upgrade to it yourself)
- `dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen the PR
or upgrade to it yourself)
- `dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the PR or
upgrade to it yourself)
</details>
Closes #1750 from
dependabot[bot]/dependabot/maven/java/com.github.spotbugs-spotbugs-maven-plugin-4.8.3.0.
Authored-by: dependabot[bot]
<49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: Dongjoon Hyun <[email protected]>
---
java/pom.xml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/java/pom.xml b/java/pom.xml
index 1b801f223..eaf7e3375 100644
--- a/java/pom.xml
+++ b/java/pom.xml
@@ -376,7 +376,7 @@
<plugin>
<groupId>com.github.spotbugs</groupId>
<artifactId>spotbugs-maven-plugin</artifactId>
- <version>4.8.1.0</version>
+ <version>4.8.3.0</version>
<configuration>
<includeFilterFile>spotbugs-include.xml</includeFilterFile>
<excludeFilterFile>spotbugs-exclude.xml</excludeFilterFile>
