Skip to content

Bump the development group with 6 updates - #1165

Merged
vojtechhabarta merged 1 commit into
mainfrom
dependabot/maven/development-fc88a18a93
Oct 19, 2026
Merged

vojtechhabarta merged 1 commit into
mainfrom
dependabot/maven/development-fc88a18a93

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 19, 2026

Copy link
Copy Markdown
Contributor

Bumps the development group with 6 updates:

Package From To
com.diffplug.spotless:spotless-maven-plugin 3.10.3 3.10.4
org.sonatype.central:central-publishing-maven-plugin 0.11.0 0.12.0
org.immutables:value 2.12.2 2.12.3
org.checkerframework:checker-qual 4.2.3 4.3.1
com.google.guava:guava 33.7.1-jre 33.7.2-jre
joda-time:joda-time 2.14.4 2.15.0

Updates com.diffplug.spotless:spotless-maven-plugin from 3.10.3 to 3.10.4

Release notes

Sourced from com.diffplug.spotless:spotless-maven-plugin's releases.

Maven Plugin v3.10.4

Changes

  • Bump default eclipse version from 4.40 to 4.41.
  • Bump default gherkin version 42.0.0 -> 42.0.1. (#3088)
  • Bump default jackson version 2.22.2 -> 2.22.3. (#3101)
  • Bump default palantir-java-format version 2.98.0 -> 2.102.0. (#3103, #3132)
  • Bump default mockito-core version 5.23.0 -> 5.24.0. (#3106)
  • Bump default greclipse version to latest 4.40 -> 4.41. (#3123)
  • Bump default ktfmt version 0.64 -> 0.65. (#3135)
    Which moved to the org.jetbrains.kotlinx:ktfmt coordinate and org.jetbrains.kotlinx.ktfmt package. Older versions are still supported.
  • Bump default palantir-java-format version 2.99.0 -> 2.102.0. (#3132)

Fixed

  • Migrate Plexus component injection to JSR-330 and Maven parameter. (#3122)
  • shortenFullyQualifiedTypes leaves a qualified name alone when the enclosing type extends or implements a type that is not in the same file, so an inherited member type cannot take the simple name. (#3117)
  • expandWildcardImports no longer drops the import of a type that is only used to qualify a static member (such as Collections.sort(list) or TimeUnit.SECONDS), or the static import of a field or enum constant (such as PI from import static java.lang.Math.*), which produced code that did not compile. (#2833)
Commits
  • 62e727d Published maven/3.10.4
  • d9e7a41 Published gradle/8.10.4
  • c006d66 Published lib/4.10.4
  • 8adb835 Merge release publishing fixes into main (#3138)
  • 67b4dbf Remove internal publishing changes from release notes
  • b9c4830 Keep Rewrite plugin on publicly resolvable releases (#3036)
  • 1c93df4 Update dependency com.palantir.javaformat:palantir-java-format to v2.102.0 (#...
  • ab153a9 Keep Rewrite plugin on publicly resolvable releases
  • feb10d8 Update plugin rewrite to v7.41.0
  • 2083664 Update changelogs for default formatter version bump (#3132)
  • Additional commits viewable in compare view

Updates org.sonatype.central:central-publishing-maven-plugin from 0.11.0 to 0.12.0

Release notes

Sourced from org.sonatype.central:central-publishing-maven-plugin's releases.

release-0.12.0

What's Changed

Full Changelog: sonatype-nexus-community/central-publishing-maven-plugin@release-0.11.1...release-0.12.0

0.11.1

This is the same source as for release 0.11.0, but now open-sourced under Apache-2.0 license.

Full Changelog: https://github.com/sonatype-nexus-community/central-publishing-maven-plugin/commits/release-0.11.1

Commits

Updates org.immutables:value from 2.12.2 to 2.12.3

Release notes

Sourced from org.immutables:value's releases.

2.12.3

Maintenance release

What's Changed

New Contributors

Full Changelog: immutables/immutables@2.12.2...v2.12.3

Commits
  • 7dfc2d3 Release 2.12.3
  • 82417b5 unparented BOM pom now requires metadata for release
  • e1ebb4b new release pipeline, yet to be verified
  • c0b8389 Merge pull request #1683 from akashchamp/fix-encoded-attrs-staged-builder
  • 47820e1 fix test (jdk folder) coming from merged PR
  • c0aa1df Merge pull request #1677 from nezda/fix/1649-jackson3-meta-annotations
  • ecb99de Merge pull request #1675 from arimu1/fix/1667-type-use-wildcard-bounds
  • 451596b Merge pull request #1661 from kiddkaffeine/optional-of
  • 216e012 Fix #1647: declare encoded attribute setters on staged BuildFinal
  • b3ded00 Fix #1678: order absent values instead of dereferencing them (#1679)
  • Additional commits viewable in compare view

Updates org.checkerframework:checker-qual from 4.2.3 to 4.3.1

Release notes

Sourced from org.checkerframework:checker-qual's releases.

Checker Framework 4.3.1

Version 4.3.1 (2026-10-08)

Closed issues

#8325.

Checker Framework 4.3.0

Version 4.3.0 (2026-10-01)

User-visible changes

The new Modifiability Checker warns when a program might throw UnsupportedOperationException at run time because it calls a mutating method on a collection that does not support the method.

The new wpi2.sh script does whole-program inference, but requires buildfile edits.

Purity Checker:

  • Renamed message keys purity.not.deterministic.X, purity.not.sideeffectfree.X, and purity.not.deterministic.not.sideeffectfree.X to purity.X.
  • -AcheckPurityAnnotations issues warnings that it missed previously.

The Checker Framework runs under JDK 27 -- that is, it runs on a version 27 JVM.

The Checker Framework runs noticeably faster, due to performance tuning.

The HTML version of the manual has a new look. In addition to the single-page version, there is a multi-page version.

Changes for type system implementers

JavaParserUtil: moved DEFAULT_LANGUAGE_LEVEL, parseCompilationUnit(), parseStubUnit(), and parseExpression() into new class StaticJavaParserUtil.

Renamed AnnotatedTypes.innerMostType() to innermostComponentType().

Removed the unused method WholeProgramInferenceScenesStorage.updateAnnotationSetInScene().

Methods that used to return (or accept) an IPair now use a record with meaningful component names.

Closed issues

#294, #1170, #1184, #1256, #1440, #1444, #1669, #2090, #2172, #2429, #2448, #2561, #2637, #2704, #2722, #2770, #2896, #2995, #3015, #3025, #3027, #3146, #3281, #3624, #4690, #4708, #4754, #5064, #5201, #6038, #6716, #6741, #6748, #6756, #6768, #6832, #6881, #7023, #7049, #7064, #7311, #7683, #8053, #8054, #8055, #8167, #8168, #8169, #8238, #8261, #8284.

Changelog

Sourced from org.checkerframework:checker-qual's changelog.

Version 4.3.1 (2026-10-08)

Closed issues

#8325.

Version 4.3.0 (2026-10-01)

User-visible changes

The new Modifiability Checker warns when a program might throw UnsupportedOperationException at run time because it calls a mutating method on a collection that does not support the method.

The new wpi2.sh script does whole-program inference, but requires buildfile edits.

Purity Checker:

  • Renamed message keys purity.not.deterministic.X, purity.not.sideeffectfree.X, and purity.not.deterministic.not.sideeffectfree.X to purity.X.
  • -AcheckPurityAnnotations issues warnings that it missed previously.

The Checker Framework runs under JDK 27 -- that is, it runs on a version 27 JVM.

The Checker Framework runs noticeably faster, due to performance tuning.

The HTML version of the manual has a new look. In addition to the single-page version, there is a multi-page version.

Changes for type system implementers

JavaParserUtil: moved DEFAULT_LANGUAGE_LEVEL, parseCompilationUnit(), parseStubUnit(), and parseExpression() into new class StaticJavaParserUtil.

Renamed AnnotatedTypes.innerMostType() to innermostComponentType().

Removed the unused method WholeProgramInferenceScenesStorage.updateAnnotationSetInScene().

Methods that used to return (or accept) an IPair now use a record with meaningful component names.

Closed issues

#294, #1170, #1184, #1256, #1440, #1444, #1669, #2090, #2172, #2429, #2448, #2561, #2637, #2704, #2722, #2770, #2896, #2995, #3015, #3025, #3027, #3146, #3281, #3624, #4690, #4708, #4754, #5064, #5201, #6038, #6716, #6741, #6748, #6756, #6768, #6832, #6881, #7023, #7049, #7064, #7311, #7683, #8053, #8054,

... (truncated)

Commits
  • 8987859 new release 4.3.1
  • 8f6281c Prep for release.
  • cd777e5 Test case for issue #8325 (#8326)
  • 0091b16 Suppress JDK 27 "removal" warnings for SourcePositions methods (#8318)
  • 4b4b053 Update cimg/base Docker tag to v2026.10 (#8313)
  • 31c0700 Nullness: handle nullable results in typeinference8 (#8311)
  • c456c70 Nullness: fix initialization errors in typeinference8 (#8310)
  • 19e755b Nullness: access bound maps in typeinference8 through accessors (#8306)
  • 338df42 Nullness: fix KeyFor and method-reference errors in typeinference8 (#8309)
  • 6c07868 Nullness: annotate typeinference8 parameters and fields that may be null (#8307)
  • Additional commits viewable in compare view

Updates com.google.guava:guava from 33.7.1-jre to 33.7.2-jre

Release notes

Sourced from com.google.guava:guava's releases.

33.7.2

Maven

<dependency>
  <groupId>com.google.guava</groupId>
  <artifactId>guava</artifactId>
  <version>33.7.2-jre</version>
  <!-- or, for Android: -->
  <version>33.7.2-android</version>
</dependency>

Jar files

Guava requires one runtime dependency, which you can download here:

Javadoc

JDiff

Changelog

Commits

Updates joda-time:joda-time from 2.14.4 to 2.15.0

Release notes

Sourced from joda-time:joda-time's releases.

Release v2.15.0

See the change notes for more information.

What's Changed

Full Changelog: JodaOrg/joda-time@v2.14.4...v2.15.0

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the development group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [com.diffplug.spotless:spotless-maven-plugin](https://github.com/diffplug/spotless) | `3.10.3` | `3.10.4` |
| [org.sonatype.central:central-publishing-maven-plugin](https://github.com/sonatype-nexus-community/central-publishing-maven-plugin) | `0.11.0` | `0.12.0` |
| [org.immutables:value](https://github.com/immutables/immutables) | `2.12.2` | `2.12.3` |
| [org.checkerframework:checker-qual](https://github.com/typetools/checker-framework) | `4.2.3` | `4.3.1` |
| [com.google.guava:guava](https://github.com/google/guava) | `33.7.1-jre` | `33.7.2-jre` |
| [joda-time:joda-time](https://github.com/JodaOrg/joda-time) | `2.14.4` | `2.15.0` |


Updates `com.diffplug.spotless:spotless-maven-plugin` from 3.10.3 to 3.10.4
- [Release notes](https://github.com/diffplug/spotless/releases)
- [Changelog](https://github.com/diffplug/spotless/blob/main/CHANGES.md)
- [Commits](diffplug/spotless@maven/3.10.3...maven/3.10.4)

Updates `org.sonatype.central:central-publishing-maven-plugin` from 0.11.0 to 0.12.0
- [Release notes](https://github.com/sonatype-nexus-community/central-publishing-maven-plugin/releases)
- [Commits](https://github.com/sonatype-nexus-community/central-publishing-maven-plugin/commits/release-0.12.0)

Updates `org.immutables:value` from 2.12.2 to 2.12.3
- [Release notes](https://github.com/immutables/immutables/releases)
- [Commits](immutables/immutables@2.12.2...2.12.3)

Updates `org.checkerframework:checker-qual` from 4.2.3 to 4.3.1
- [Release notes](https://github.com/typetools/checker-framework/releases)
- [Changelog](https://github.com/typetools/checker-framework/blob/master/docs/CHANGELOG.md)
- [Commits](typetools/checker-framework@checker-framework-4.2.3...checker-framework-4.3.1)

Updates `com.google.guava:guava` from 33.7.1-jre to 33.7.2-jre
- [Release notes](https://github.com/google/guava/releases)
- [Commits](https://github.com/google/guava/commits)

Updates `joda-time:joda-time` from 2.14.4 to 2.15.0
- [Release notes](https://github.com/JodaOrg/joda-time/releases)
- [Changelog](https://github.com/JodaOrg/joda-time/blob/main/RELEASE-NOTES.txt)
- [Commits](JodaOrg/joda-time@v2.14.4...v2.15.0)

---
updated-dependencies:
- dependency-name: com.diffplug.spotless:spotless-maven-plugin
  dependency-version: 3.10.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development
- dependency-name: org.sonatype.central:central-publishing-maven-plugin
  dependency-version: 0.12.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development
- dependency-name: org.immutables:value
  dependency-version: 2.12.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development
- dependency-name: org.checkerframework:checker-qual
  dependency-version: 4.3.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development
- dependency-name: com.google.guava:guava
  dependency-version: 33.7.2-jre
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development
- dependency-name: joda-time:joda-time
  dependency-version: 2.15.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Oct 19, 2026
@vojtechhabarta
vojtechhabarta merged commit 957ede8 into main Oct 19, 2026
3 checks passed
@vojtechhabarta
vojtechhabarta deleted the dependabot/maven/development-fc88a18a93 branch October 19, 2026 18:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant