dependabot[bot] opened a new pull request, #250: URL: https://github.com/apache/bval/pull/250
Bumps [com.github.spotbugs:spotbugs-maven-plugin](https://github.com/spotbugs/spotbugs-maven-plugin) from 4.10.2.0 to 4.10.3.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/spotbugs/spotbugs-maven-plugin/releases";>com.github.spotbugs:spotbugs-maven-plugin's releases</a>.</em></p> <blockquote> <h2>Spotbugs Maven Plugin 4.10.3.0</h2> <h2>Summary</h2> <p>This release delivers improvements to reliability, maintainability, and reproducibility. The SpotBugs execution path has been modernized by replacing the Ant-based launcher with <code>ProcessBuilder</code>, temporary auxiliary classpath handling has been improved, and toolchain detection has been made more robust. Build tooling has also been cleaned up with Maven modernization efforts, improved reproducible artifact generation, and updated documentation. Additional fixes include improved artifact handling, test coverage improvements, and dependency updates.</p> <h2>What's Changed</h2> <ul> <li>[fix] Skip non-JAR artifacts in buildBugTypeUrlMap by <a href="https://github.com/uweguenther";><code>@uweguenther</code></a> in <a href="https://redirect.github.com/spotbugs/spotbugs-maven-plugin/pull/1445";>spotbugs/spotbugs-maven-plugin#1445</a></li> <li>modify renovate config to not use bytebuddy -jdk5 postifx versions by <a href="https://github.com/JuditKnoll";><code>@JuditKnoll</code></a> in <a href="https://redirect.github.com/spotbugs/spotbugs-maven-plugin/pull/1451";>spotbugs/spotbugs-maven-plugin#1451</a></li> <li>Copilot/analyze test coverage by <a href="https://github.com/hazendaz";><code>@hazendaz</code></a> in <a href="https://redirect.github.com/spotbugs/spotbugs-maven-plugin/pull/1454";>spotbugs/spotbugs-maven-plugin#1454</a></li> <li>Use StandardCharsets.UTF_8 in groovy verify in IT tests by <a href="https://github.com/hazendaz";><code>@hazendaz</code></a> in <a href="https://redirect.github.com/spotbugs/spotbugs-maven-plugin/pull/1456";>spotbugs/spotbugs-maven-plugin#1456</a></li> <li>[license] Use spdx license header for apache 2.0 (no change to license) by <a href="https://github.com/hazendaz";><code>@hazendaz</code></a> in <a href="https://redirect.github.com/spotbugs/spotbugs-maven-plugin/pull/1457";>spotbugs/spotbugs-maven-plugin#1457</a></li> <li>Cleanup the build pom by <a href="https://github.com/hazendaz";><code>@hazendaz</code></a> in <a href="https://redirect.github.com/spotbugs/spotbugs-maven-plugin/pull/1458";>spotbugs/spotbugs-maven-plugin#1458</a></li> <li>[pom] Modernize how download / copy of spotbugs source works by <a href="https://github.com/hazendaz";><code>@hazendaz</code></a> in <a href="https://redirect.github.com/spotbugs/spotbugs-maven-plugin/pull/1459";>spotbugs/spotbugs-maven-plugin#1459</a></li> <li>Add reproducibility checks section to README by <a href="https://github.com/hazendaz";><code>@hazendaz</code></a> in <a href="https://redirect.github.com/spotbugs/spotbugs-maven-plugin/pull/1460";>spotbugs/spotbugs-maven-plugin#1460</a></li> <li>Avoid 'def' usage by <a href="https://github.com/hazendaz";><code>@hazendaz</code></a> in <a href="https://redirect.github.com/spotbugs/spotbugs-maven-plugin/pull/1462";>spotbugs/spotbugs-maven-plugin#1462</a></li> <li>[pom] Replace antrun to fix groovy docs with find-and-replace plugin … by <a href="https://github.com/hazendaz";><code>@hazendaz</code></a> in <a href="https://redirect.github.com/spotbugs/spotbugs-maven-plugin/pull/1463";>spotbugs/spotbugs-maven-plugin#1463</a></li> <li>Correct 2 integration tests by <a href="https://github.com/hazendaz";><code>@hazendaz</code></a> in <a href="https://redirect.github.com/spotbugs/spotbugs-maven-plugin/pull/1467";>spotbugs/spotbugs-maven-plugin#1467</a></li> <li>Make tool chain logic more robust by <a href="https://github.com/hazendaz";><code>@hazendaz</code></a> in <a href="https://redirect.github.com/spotbugs/spotbugs-maven-plugin/pull/1469";>spotbugs/spotbugs-maven-plugin#1469</a></li> <li>[pom] Use jar plugin to zip groovy docs so reproducibility works by <a href="https://github.com/hazendaz";><code>@hazendaz</code></a> in <a href="https://redirect.github.com/spotbugs/spotbugs-maven-plugin/pull/1470";>spotbugs/spotbugs-maven-plugin#1470</a></li> <li>Make 'spotbugsAuxClasspath' a temp file and minor coding cleanup by <a href="https://github.com/hazendaz";><code>@hazendaz</code></a> in <a href="https://redirect.github.com/spotbugs/spotbugs-maven-plugin/pull/1471";>spotbugs/spotbugs-maven-plugin#1471</a></li> <li>Replace 'ant' based SpotBugs execution with ProcessBuilder by <a href="https://github.com/hazendaz";><code>@hazendaz</code></a> in <a href="https://redirect.github.com/spotbugs/spotbugs-maven-plugin/pull/1472";>spotbugs/spotbugs-maven-plugin#1472</a></li> <li>Update dependency com.github.spotbugs:spotbugs to v4.10.3 by <a href="https://github.com/renovate";><code>@renovate</code></a>[bot] in <a href="https://redirect.github.com/spotbugs/spotbugs-maven-plugin/pull/1473";>spotbugs/spotbugs-maven-plugin#1473</a></li> <li>Other build/dependency updates</li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/uweguenther";><code>@uweguenther</code></a> made their first contribution in <a href="https://redirect.github.com/spotbugs/spotbugs-maven-plugin/pull/1445";>spotbugs/spotbugs-maven-plugin#1445</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/spotbugs/spotbugs-maven-plugin/compare/spotbugs-maven-plugin-4.10.2.0...spotbugs-maven-plugin-4.10.3.0";>https://github.com/spotbugs/spotbugs-maven-plugin/compare/spotbugs-maven-plugin-4.10.2.0...spotbugs-maven-plugin-4.10.3.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/spotbugs/spotbugs-maven-plugin/commit/f0e6f45e7f622206d1e9ba11df8093970a415ac8";><code>f0e6f45</code></a> [maven-release-plugin] prepare release spotbugs-maven-plugin-4.10.3.0</li> <li><a href="https://github.com/spotbugs/spotbugs-maven-plugin/commit/86af8d57652da0e92720bcb4b654baf837fd2dd9";><code>86af8d5</code></a> Merge pull request <a href="https://redirect.github.com/spotbugs/spotbugs-maven-plugin/issues/1473";>#1473</a> from spotbugs/renovate/spotbugs.version</li> <li><a href="https://github.com/spotbugs/spotbugs-maven-plugin/commit/2fc12322a23ccbd62c7a11c7b60027b0f7b137e6";><code>2fc1232</code></a> Update dependency com.github.spotbugs:spotbugs to v4.10.3</li> <li><a href="https://github.com/spotbugs/spotbugs-maven-plugin/commit/89383701a5a58dbf73de232156607955a9fe4485";><code>8938370</code></a> Merge pull request <a href="https://redirect.github.com/spotbugs/spotbugs-maven-plugin/issues/1472";>#1472</a> from hazendaz/antwork</li> <li><a href="https://github.com/spotbugs/spotbugs-maven-plugin/commit/68ee04d365934a35b23a7ce9849056843e0ee563";><code>68ee04d</code></a> Replace 'ant' usage with process builder</li> <li><a href="https://github.com/spotbugs/spotbugs-maven-plugin/commit/4fcdf58ec74c3a78e2ab14186aad0d0ab289f517";><code>4fcdf58</code></a> Merge pull request <a href="https://redirect.github.com/spotbugs/spotbugs-maven-plugin/issues/1471";>#1471</a> from hazendaz/master</li> <li><a href="https://github.com/spotbugs/spotbugs-maven-plugin/commit/c97f85e59cd17cc03046f2d8d307bfcb58145931";><code>c97f85e</code></a> [ci] Minor cleanup after toolchain adjustments</li> <li><a href="https://github.com/spotbugs/spotbugs-maven-plugin/commit/f7dde3a6c4ff3f4673bf5e0d672572b0d9bea014";><code>f7dde3a</code></a> [nio] Change 'spotbugsAuxClasspath' file to a temp file and remove larger try...</li> <li><a href="https://github.com/spotbugs/spotbugs-maven-plugin/commit/ce2addb51656e3d279a1ebea70cea64877bd94b4";><code>ce2addb</code></a> Merge pull request <a href="https://redirect.github.com/spotbugs/spotbugs-maven-plugin/issues/1470";>#1470</a> from hazendaz/restructure</li> <li><a href="https://github.com/spotbugs/spotbugs-maven-plugin/commit/bc53d3748a62a77644d788e97033f5cb711dc3d1";><code>bc53d37</code></a> [ci] readme update to reproducible builesd info</li> <li>Additional commits viewable in <a href="https://github.com/spotbugs/spotbugs-maven-plugin/compare/spotbugs-maven-plugin-4.10.2.0...spotbugs-maven-plugin-4.10.3.0";>compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
