Update all dependencies - autoclosed

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Age	Adoption	Passing	Confidence
softprops/action-gh-release	action	patch	v2.2.0 -> v2.2.1
org.scala-lang:scala3-library_3	dependencies	patch	3.6.2 -> 3.6.3
com.github.spotbugs:spotbugs-annotations (source)	dependencies	minor	4.8.6 -> 4.9.0
com.github.spotbugs	plugin	minor	6.0.27 -> 6.1.3
com.diffplug.spotless	plugin	major	6.25.0 -> 7.0.2

---

Release Notes

softprops/action-gh-release (softprops/action-gh-release)

v2.2.1

Compare Source

What's Changed

Bug fixes 🐛

• fix: big file uploads by @​xen0n in https://github.com/softprops/action-gh-release/pull/562

Other Changes 🔄

• chore(deps): bump @​types/node from 22.10.1 to 22.10.2 by @​dependabot in https://github.com/softprops/action-gh-release/pull/559
• chore(deps): bump @​types/node from 22.10.2 to 22.10.5 by @​dependabot in https://github.com/softprops/action-gh-release/pull/569
• chore: update error and warning messages for not matching files in files field by @​ytimocin in https://github.com/softprops/action-gh-release/pull/568

New Contributors

• @​ytimocin made their first contribution in https://github.com/softprops/action-gh-release/pull/568

Full Changelog: softprops/action-gh-release@v2.2.0...v2.2.1

scala/scala3 (org.scala-lang:scala3-library_3)

v3.6.3

Compare Source

Highlights of the release

• Scala 2 forwardport: -Yprofile-trace #​19897

Other changes and fixes

Annotations

• Fix Java parsing of annotations on qualified types #​21867
• Consider all arguments in Annotations.refersToParamOf #​22001

Backend

• Flag class file collision as error #​19332

Compiler Phases

• Fix #​21939: Update names and descriptions for cc and setup phases #​21942
• Limit exposure to ConcurrentModificationException when sys props are replaced or mutated #​22275

Experimental: Explicit Nulls

• Improve warning for wildcard matching only null under the explicit nulls flag (#​21577) #​21623
• Fix warning message for matching on redundant nulls #​21850

Experimental: Capture Checking

• Fix #​21868, #​21869, and #​21870: handle CapsOf in more places #​21875
• Consolidate CC #​21863
• Add path support for capture checking #​21445

Experimentals

• Replace symbol traversal with tree traversal when finding top level experimentals #​21827

Extension Methods

• Nowarn extension matching nonpublic member #​21825

Implicits

• Apply implicit conversion from derived Conversion instance defined as implicit rather than given #​21785

Imports

• Allow imports nested in packagings to shadow #​21539

Inline

• Avoid using the current denotation in NamedType.disambiguate #​21414
• Drop phase.isTyper use in isLegalPrefix/asf #​21954
• Fix for macro annotation that resolves macro-based implicit crashing the compiler #​20353
• Allow macro annotations to recover from suspension #​21969

Linting

• Disallow open modifier on objects #​21922
• Allow discarding "Discarded non-Unit" warnings with : Unit #​21927

Opaque Types

• Fix pkg obj prefix of opaque tp ext meth #​21527

Parser

• Fix: don't consider into as a soft-modifier #​21924

Pattern Matching

• Drop inaccessible subclasses from refineUsingParent #​21799
• (Re-)Drop inaccessible subclasses from refineUsingParent #​21930
• Fix use of class terms in match analysis #​21848
• Don't project nested wildcard patterns to nullable #​21934
• Fix provablyDisjoint handling enum constants with mixins #​21876
• Do not consider uninhabited constructors when performing exhaustive match checking #​21750

Presentation Compiler

• Update mtags to 1.4.1 and backport remaining changes #​21859
• Backport changes for the presentation compiler from Metals #​21756

Pickling

• Avoid orphan param from default arg #​21824
• Make sure definition tree has the defined symbol #​21851

REPL

• Allow top-level opaque type definitions in REPL #​21753
• JLine: follow recommendation to use JNI, not JNA; also JLine 3.27.1 (was 3.27.0) #​22271

Scaladoc

• Fix scaladoc TastyInspector regressions #​21716
• Bring back the fix for scaladoc TastyInspector regressions #​21929
• Fix scaladoc graph highlight background color in dark mode #​21814

Standard Library

• Combine cases of Tuple.Zip disjoint from (h1 *: t1, h2 *: t2) #​21287

Quotes

• Fix #​20471: owners of top-level symbols in cached quoted code being incorrect #​21945

Reporting

• Do not warn about expected missing positions in quotes.reflect.Symbol #​21677
• Add missing error messages to asserts in QuotesImpl #​21852
• Don't point to the compiler backlog when a compiler plugin phase crashes #​21887
• Better error message for polytypes wrapping capturing types #​21843
• Pretty-print lambdas #​21846
• Nowarn extension matching nonpublic member #​22276
• Refactor: Improve Given search preference warning #​22273

Runner

• Fix: update scala-cli.jar path #​22274

Releases

• Fix layout of released SDK archives, restore intermiediete top-level directory #​22272

Scala.js

• Shade scalajs.ir under dotty.tools #​21765

SemanticDB

• Extract semanticDB for lifted definitions #​21856

Transform

• Fix enclosingClass from returning refinement classes #​21411
• Attempt to beta reduce only if parameters and arguments have same shape #​21970
• Drop copied parent refinements before generating bytecode #​21733

Tooling

• Ensure to escape characters before constructing JSON profile trace #​21872

Tuples

• Fix tupleTypeFromSeq for XXL tuples #​21782

Typer

• Do not crash when typing a closure with unknown type, since it can occur for erroneous input #​21178
• Revert SAM condition to what it was before #​21684
• Fix ctx implicits under case unapplySeq #​21748
• Avoid erasure/preErasure issues around Any in transformIsInstanceOf #​21647

Contributors

Thank you to all the contributors who made this release possible 🎉

According to git shortlog -sn --no-merges 3.6.2..3.6.3 these are:

    33  Wojciech Mazur
    30  Dale Wijnand
    30  Kacper Korban
    14  noti0na1
    11  Hamza Remmal
    10  Eugene Flesselle
    10  HarrisL2
     9  Martin Odersky
     8  Matt Bovel
     7  Jan Chyb
     6  Tomasz Godzik
     5  Seth Tisue
     4  Jamie Thompson
     2  Friendseeker
     2  João Ferreira
     2  Pascal Weisenburger
     2  Som Snytt
     2  Sébastien Doeraene
     1  Adrien Piquerez
     1  Alden Torres
     1  Alexander
     1  Eugene Yokota
     1  Fengyun Liu
     1  Georgi Krastev
     1  Jentsch
     1  Lunfu Zhong
     1  Michał Pałka
     1  Natsu Kagami
     1  Rui Chen
     1  dependabot[bot]
     1  friendseeker
     1  tgodzik

spotbugs/spotbugs (com.github.spotbugs:spotbugs-annotations)

v4.9.0

Compare Source

Added

• Updated the SuppressFBWarnings annotation to support finer grained bug suppressions (#​3102)
• SimpleDateFormat, DateTimeFormatter, FastDateFormat string check for bad combinations of flag formatting (#​637)
• New detector ResourceInMultipleThreadsDetector and introduced new bug type:
  • AT_UNSAFE_RESOURCE_ACCESS_IN_THREAD is reported in case of unsafe resource access in multiple threads.

Fixed

• Do not consider Records as Singletons (#​2981)
• Keep a maximum of 10000 cached analysis entries for plugin's analysis engines (#​3025)
• Only report MC_OVERRIDABLE_METHOD_CALL_IN_READ_OBJECT when calling own methods (#​2957)
• Check the actual caught exceptions (instead of their common type) when analyzing multi-catch blocks (#​2968)
• System property findbugs.refcomp.reportAll is now being used. For some new conditions, it will emit an experimental warning (#​2988)
• -version flag prints the version to the standard output (#​2797)
• Revert the changes from (#​2894) to get HTML stylesheets to work again (#​2969)
• Fix FP SING_SINGLETON_GETTER_NOT_SYNCHRONIZED report when the synchronization is in a called method (#​3045)
• Let BetterCFGBuilder2.isPEI handle dup2 bytecode used by Spring AOT (#​3059)
• Detect failure to close RocksDB's ReadOptions (#​3069)
• Fix FP EI_EXPOSE_REP when there are multiple immutable assignments (#​3023)
• Fixed false positive NP_NONNULL_FIELD_NOT_INITIALIZED_IN_CONSTRUCTOR for Kotlin, handle Kotlin's Intrinsics.checkNotNullParameter() (#​3094)
• Fixed some CWE mappings (#​3124)
• Recognize some classes as immutable, fixing EI_EXPOSE and MS_EXPOSE FPs (#​3137)
• Do not report UWF_FIELD_NOT_INITIALIZED_IN_CONSTRUCTOR for fields initialized in method annotated with TestNG's @​BeforeClass. (#​3152)
• Fixed detector FindReturnRef not finding references exposed from nested and inner classes (#​2042)
• Fix call graph, include non-parametric void methods (#​3160)
• Fix multiple reporting of identical bugs messing up statistics (#​3185)
• Added missing comma between line number and confidence when describing matching and mismatching bugs for tests (#​3187)
• Fixed method matchers with array types (#​3203)
• Fix SARIF report's message property in Exception to meet the standard (#​3197)
• Fixed FI_FINALIZER_NULLS_FIELDS FPs for functions called finalize() but not with the correct signature. (#​3207)
• Fixed an error in the detection of bridge methods causing analysis crashes (#​3208)
• Fixed detector ThrowingExceptions by removing false positive reports, such as synthetic methods (lambdas), methods which inherited their exception specifications and methods which call throwing methods (#​2040)
• Do not report DP_DO_INSIDE_DO_PRIVILEGED, DP_CREATE_CLASSLOADER_INSIDE_DO_PRIVILEGED and USC_POTENTIAL_SECURITY_CHECK_BASED_ON_UNTRUSTED_SOURCE in code targeting Java 17 and above, since it advises the usage of deprecated method (#​1515).
• Fixed a RV_RETURN_VALUE_IGNORED_NO_SIDE_EFFECT false positive for a builder delegating to another builder (#​3235)

Cleanup

• Cleanup thread issue and regex issue in test-harness (#​3130)
• Remove extra blank lines and remove public from interface objects as inherently already public (#​3131)
• Fix order of modifiers on properties/methods and ensure correct location in file (#​3132, #​3177)
• Return objects directly instead of creating more garbage collection by defining them (#​3133, #​3175)
• Restrict the constructor of abstract classes visibility to protected (#​3178)
• Cleanup double initialization and fix comments referring to findbugs instead of spotbugs(#​3134)
• Use diamond operator in constructor calls of Collections (#​3176)
• Use Collection.isEmpty() or String.isEmpty() to test for emptiness (#​3180, #​3219)
• Use method references instead of lambdas where possible (#​3179)
• Move default clauses to the end of switches (#​3222)
• Remove unnecessary throws declarations (#​3220)
• Use Boolean.parseBoolean() for string-to-boolean conversion. (#​3217)
• Rename shadowing fields (#​3221)
• Combine catch blocks with the same body (#​3223)
• Merge conditions of nested ifs (#​3231)
• Use non deprecated 'getDottedClassName' instead of 'toDottedClassName'(#​3251)
• Use try with resources where possible (#​3253)

Changed

• Bump up Java version to 11

---

Configuration

📅 Schedule: Branch creation - "* 0-3 1 * *" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 100.00%. Comparing base (80281fb) to head (cf72b29).
Report is 1 commits behind head on main.

Additional details and impacted files

@@              Coverage Diff               @@
##               main      #247       +/-   ##
==============================================
+ Coverage     85.71%   100.00%   +14.28%     
+ Complexity        4         3        -1     
==============================================
  Files             3         1        -2     
  Lines             7         4        -3     
==============================================
- Hits              6         4        -2     
+ Misses            1         0        -1     

Flag	Coverage Δ
integration-tests-macos-latest	100.00% <ø> (ø)
integration-tests-ubuntu-latest	100.00% <ø> (ø)
integration-tests-windows-latest	100.00% <ø> (ø)
unit-tests-macos-latest	?
unit-tests-ubuntu-latest	?
unit-tests-windows-latest	?

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

build