This is an automated email from the ASF dual-hosted git repository.
dongjoon-hyun pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/spark-kubernetes-operator.git
The following commit(s) were added to refs/heads/main by this push:
new 8a6c756 [SPARK-58147] Upgrade SpotBugs to 4.10.3
8a6c756 is described below
commit 8a6c7569cd819e9cf7d780918fc52e65e844ac87
Author: Dongjoon Hyun <[email protected]>
AuthorDate: Wed Jul 15 10:02:20 2026 -0700
[SPARK-58147] Upgrade SpotBugs to 4.10.3
### What changes were proposed in this pull request?
This PR aims to upgrade `SpotBugs` to 4.10.3.
In addition, `gradle/verification-metadata.xml` is regenerated from scratch
by following the
`AGENTS.md` guide, which replaces the SpotBugs 4.10.2 checksums with 4.10.3
ones (including
its new transitive dependency `Saxon-HE` 12.10) and removes the stale
entries of
`log4j` 2.26.0 and `junit-bom` 6.1.0.
### Why are the changes needed?
To bring the latest bug fixes.
- https://github.com/spotbugs/spotbugs/releases/tag/4.10.3
### Does this PR introduce _any_ user-facing change?
No. This is a build-time analysis tool update.
### How was this patch tested?
Pass the CIs.
### Was this patch authored or co-authored using generative AI tooling?
Generated-by: Claude Fable 5
Closes #760 from dongjoon-hyun/SPARK-58147.
Authored-by: Dongjoon Hyun <[email protected]>
Signed-off-by: Dongjoon Hyun <[email protected]>
---
gradle/libs.versions.toml | 2 +-
gradle/verification-metadata.xml | 62 ++++++++++++----------------------------
2 files changed, 19 insertions(+), 45 deletions(-)
diff --git a/gradle/libs.versions.toml b/gradle/libs.versions.toml
index 278586d..c7bf1be 100644
--- a/gradle/libs.versions.toml
+++ b/gradle/libs.versions.toml
@@ -34,7 +34,7 @@ awaitility = "4.3.0"
# Build Analysis
checkstyle = "13.4.2"
pmd = "7.24.0"
-spotbugs-tool = "4.10.2"
+spotbugs-tool = "4.10.3"
spotbugs-plugin = "6.5.9"
spotless-plugin = "8.8.0"
diff --git a/gradle/verification-metadata.xml b/gradle/verification-metadata.xml
index 8a14b17..22f060f 100644
--- a/gradle/verification-metadata.xml
+++ b/gradle/verification-metadata.xml
@@ -414,20 +414,20 @@
<sha512
value="93edf68a28f44a24a3f705425c97f36d185f3d3437e8770871955ed5a703048559549e410592bb45e1719ca3a3414f2eaaab866792c0baf762f5c12ed16c9e5f"
origin="Generated by Gradle"/>
</artifact>
</component>
- <component group="com.github.spotbugs" name="spotbugs" version="4.10.2">
- <artifact name="spotbugs-4.10.2.jar">
- <sha512
value="e9b5b2934ca5ef9b14e5b997855620c60923b3d4c96896fd784f679bc3dcfe9cf19f3fc64da6300949277a71c14d559909305688cdc10967796b27a3ba1a173b"
origin="Generated by Gradle"/>
+ <component group="com.github.spotbugs" name="spotbugs" version="4.10.3">
+ <artifact name="spotbugs-4.10.3.jar">
+ <sha512
value="c91d81e16abc0802e052d96899b57e57c4a956cc992aa2f69e377b3e3e04d74489fee8c6036230cd7f5e9d693d3f937f922f81e7fb4c756debca223befcbe43e"
origin="Generated by Gradle"/>
</artifact>
- <artifact name="spotbugs-4.10.2.module">
- <sha512
value="ac5d92badbac4008c30a1f6e3069e711f787e9bb5e4b6a10d32312a81d9f71ba5b5bdf9e43113ad6158ffdb309f129c1b21b961db576941772273a71829283fb"
origin="Generated by Gradle"/>
+ <artifact name="spotbugs-4.10.3.module">
+ <sha512
value="4768800d0e99956e31567502f38937e42643dc13b516ade298949f4c6697cd470385978b4c487f9a7c70942e07ba699855acbf1646e86025fee24a43c2763f88"
origin="Generated by Gradle"/>
</artifact>
</component>
- <component group="com.github.spotbugs" name="spotbugs-annotations"
version="4.10.2">
- <artifact name="spotbugs-annotations-4.10.2.jar">
- <sha512
value="46fdb78b609c5d909677c1d99347ce093d3b842ff003d7d281a9dce251dbd5063a82f0090e04c0762d7fd6fb59d4bb50f5c7bf7a6f50d9e856c22392873f7272"
origin="Generated by Gradle"/>
+ <component group="com.github.spotbugs" name="spotbugs-annotations"
version="4.10.3">
+ <artifact name="spotbugs-annotations-4.10.3.jar">
+ <sha512
value="bd2505c3e3675a50b64572b9acca1ed08bbc3e457206f794a3213eb74bb7f8ac7b9475e8583c3e7b72cd0e021e5e77b8d6ae049ba6f783aef507eb56f239259f"
origin="Generated by Gradle"/>
</artifact>
- <artifact name="spotbugs-annotations-4.10.2.module">
- <sha512
value="35fbddbefc28daf534f0c4021b94ff2227c799ffc906f8c7e18485c602ccd96d518bac989a47dfc8ccb4d68b06565905403976c55dd84cfac61de56834181169"
origin="Generated by Gradle"/>
+ <artifact name="spotbugs-annotations-4.10.3.module">
+ <sha512
value="91096da585808ba3d8b1331d6893ed80cca652273998bee170c5e7ab6c82780c0ce8839393ce3be707be47b6f987ce71fcd00f33c64e60e88f14310b1453bf40"
origin="Generated by Gradle"/>
</artifact>
</component>
<component group="com.github.spotbugs.snom"
name="spotbugs-gradle-plugin" version="6.5.9">
@@ -1870,6 +1870,14 @@
<sha512
value="5aab84c459492deb3954dfb50f9c6ecf4bcb6939906c7f973327d255cd224840d64e03878ff05c5d0c0110601e147f05c27609b55d3b13609be2b365de88f7f7"
origin="Generated by Gradle"/>
</artifact>
</component>
+ <component group="net.sf.saxon" name="Saxon-HE" version="12.10">
+ <artifact name="Saxon-HE-12.10.jar">
+ <sha512
value="1758671b5e4f09bcb5d64ec3bad423adef26c096e75fa0eecea8e915769b6cb858f6742c14093e54ae2bb65da6c9d4afa8e9e95520ee3324eed7e4c0a89a455e"
origin="Generated by Gradle"/>
+ </artifact>
+ <artifact name="Saxon-HE-12.10.pom">
+ <sha512
value="6e60dfb1800a907b376fa17901e87c91a184278e7c94f60e0b552c757c209dd34a8e0dc072fa77c6a0f93d0da8e3e5672333c64d039f49983a7bcd067d81f05a"
origin="Generated by Gradle"/>
+ </artifact>
+ </component>
<component group="net.sf.saxon" name="Saxon-HE" version="12.9">
<artifact name="Saxon-HE-12.9.jar">
<sha512
value="91712b90b683ff0a7e027f9a9bf48902c427057c9cc1868accca77e39100b0dcb90a2415c5783df188a12f7aa425f93e7832e3cb97b404dc34c24c5fad93e469"
origin="Generated by Gradle"/>
@@ -2360,11 +2368,6 @@
<sha512
value="463edf83a6ed927a5612fc92c5e5f312a7c92f55c834a3a090514baef49e5dbcfdaca2ce43111f9900f12febaec5f6fd7c2c1589d3680ce5db1f4e0ce86cf203"
origin="Generated by Gradle"/>
</artifact>
</component>
- <component group="org.apache.logging.log4j" name="log4j"
version="2.26.0">
- <artifact name="log4j-2.26.0.pom">
- <sha512
value="9ace1bc3d24018ca7df7397d18c7cfd9b6a0fb3af4fe989c9af473568e98a427d27dbdebd78c2e66802beece04bd9e51e63002341f90e493bc51a7c5ca6bb98c"
origin="Generated by Gradle"/>
- </artifact>
- </component>
<component group="org.apache.logging.log4j" name="log4j"
version="2.26.1">
<artifact name="log4j-2.26.1.pom">
<sha512
value="9391d7528df8cca60361ae9db8fe1fd7abc8893b75da82f7b86e09cd8f765f3ee92e424ffeb7d8c9f02e1dd785877dd2120e69ebd9bbaa7d4bb38d44d32705e2"
origin="Generated by Gradle"/>
@@ -2378,14 +2381,6 @@
<sha512
value="99c9fca00147b10e9dfe429ec71e23d61d48af6f4f6c4bc9f4f742fa4ad98222b88603288588c790e170f5ca6418b9f16cc143bc269504da033b994f4d169b2c"
origin="Generated by Gradle"/>
</artifact>
</component>
- <component group="org.apache.logging.log4j" name="log4j-api"
version="2.26.0">
- <artifact name="log4j-api-2.26.0.jar">
- <sha512
value="86516750d5a43428b977da45d403718e903451bf0b9401ba306a35f001e812b8366c73978fbf6c628a93949d9386e3a21661f85672291111e5397e94ca1cc78f"
origin="Generated by Gradle"/>
- </artifact>
- <artifact name="log4j-api-2.26.0.module">
- <sha512
value="d4e7b45c34567fe946d8cf1b64d6ad46cae60d1b7f66f787fac8751d7d3169c44177b7832cdeedde29374c5940009a1cf41c27d0e98f10c6a0da23e459b52c58"
origin="Generated by Gradle"/>
- </artifact>
- </component>
<component group="org.apache.logging.log4j" name="log4j-api"
version="2.26.1">
<artifact name="log4j-api-2.26.1.jar">
<sha512
value="f29f7697ee8d8d824e5dad33abbd9d1bdea49e69c39484362a40779e8d120800ef37b3702c49589ad1fc5639b704faef2bfb592001b413e8a09e6d5947ebae1e"
origin="Generated by Gradle"/>
@@ -2399,11 +2394,6 @@
<sha512
value="c74685af635596d18404b30c23971b7c300e50d574542f260920495474f36423e752070a3623e58ede6e18e5dac6cf16b69c0d5bfd7da673bea785c55a1e4d19"
origin="Generated by Gradle"/>
</artifact>
</component>
- <component group="org.apache.logging.log4j" name="log4j-bom"
version="2.26.0">
- <artifact name="log4j-bom-2.26.0.pom">
- <sha512
value="abb4e55979d4603498762380c5a2ae3c8dfa4a15cf7ba129e53fad9fa03b21347098504f2e86c285cf94e64a85115cf1e4834ae5bec301a9ca6a14cfbae11e36"
origin="Generated by Gradle"/>
- </artifact>
- </component>
<component group="org.apache.logging.log4j" name="log4j-bom"
version="2.26.1">
<artifact name="log4j-bom-2.26.1.pom">
<sha512
value="28ef6408fb99130d0ec59c6ec98619e6221f00f4e178bfbbfa95ad37b427287c564eb449bbc14d012c8ae8a57e3b9eaca291b5899b4e9be5972ba4e74dbbc2ee"
origin="Generated by Gradle"/>
@@ -2417,14 +2407,6 @@
<sha512
value="8c27ad55e87bc8484e74f2c03fbddf1015ed7011e26e4c2e2a36c5f5241df1d099d48a7a9253f8185d5d55c990b8773eb25427d642e3d50edbc737cde4585299"
origin="Generated by Gradle"/>
</artifact>
</component>
- <component group="org.apache.logging.log4j" name="log4j-core"
version="2.26.0">
- <artifact name="log4j-core-2.26.0.jar">
- <sha512
value="9523b574308be31c741252d2f789fb81d01d9526eaa3e94f25136f1044149ac235fef379514b1cc43611ca68f5e2d8400256886b49f4ef2686582c96b8679792"
origin="Generated by Gradle"/>
- </artifact>
- <artifact name="log4j-core-2.26.0.module">
- <sha512
value="8826ba6e2b38a5c339984cf00d026c360f5d0bee78e857dcb8dbc978dd309a44e86c4e4a5cfee6bcdc38f32c411c1be18070babb76c09af3f9781374cf725f58"
origin="Generated by Gradle"/>
- </artifact>
- </component>
<component group="org.apache.logging.log4j" name="log4j-core"
version="2.26.1">
<artifact name="log4j-core-2.26.1.jar">
<sha512
value="647cfe7777781c3db1ff63c9c3a6dd8ae16098d34a47afd39f6232b3bef32525a3a9db5f36d545734be7cf1741ffc0d57ab9be168903d28415d3cec90b6fabb1"
origin="Generated by Gradle"/>
@@ -3523,14 +3505,6 @@
<sha512
value="be30e27bd59922d7d4b4275e0de06f3a67b796019e9fbbcc113b5b748749c4a55d6d14d4abecaf6bcd8b38a359dbbfcece2ce708d56c6fc13a06b9436b143f7f"
origin="Generated by Gradle"/>
</artifact>
</component>
- <component group="org.junit" name="junit-bom" version="6.1.0">
- <artifact name="junit-bom-6.1.0.module">
- <sha512
value="39b9acee296cedd00840020245cfcebe1d36c0bba32272f9903d8592ab97613056cd12be1fac1ae05ae207478043a41f56dc81fdc97b2446af1fc1d8b0b0ae7a"
origin="Generated by Gradle"/>
- </artifact>
- <artifact name="junit-bom-6.1.0.pom">
- <sha512
value="bcd5921fdc86f1123a211fb44e3192245c4896e3ed28510f7fd2e791f4dc3b25d8c95cdd3b0f50be4a0a9b22e9285a9c7dcd0d9b1f9e7556207638c37e08362d"
origin="Generated by Gradle"/>
- </artifact>
- </component>
<component group="org.junit" name="junit-bom" version="6.1.1">
<artifact name="junit-bom-6.1.1.module">
<sha512
value="3bee8973f87ee406526c4da0a79aaee04d2cbec453a9fde64f17f31e2663a70106b1c30cf516e86a7a2a8806940c49a4e4931c516cfab3d9f3274a57b6027b69"
origin="Generated by Gradle"/>
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
