Skip to content

Bump com.github.spotbugs:spotbugs-maven-plugin from 4.7.3.6 to 4.9.8.1 #646

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
dependabot wants to merge 1 commit into
base: master
Choose a base branch
from
Open

Bump com.github.spotbugs:spotbugs-maven-plugin from 4.7.3.6 to 4.9.8.1 #646

dependabot wants to merge 1 commit into from

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 20, 2025 •
edited
Loading

Bumps com.github.spotbugs:spotbugs-maven-plugin from 4.7.3.6 to 4.9.8.1.

Release notes

Sourced from com.github.spotbugs:spotbugs-maven-plugin's releases.

Spotbugs Maven Plugin 4.9.8.1

Bug fix with SpotbugsInfo.EOF error (was meant to be SpotbugsInfo.EOL).

Spotbugs Maven Plugin 4.9.8.0

Bug fix release supporting spotbugs 4.9.8.

Spotbugs Maven Plugin 4.9.7.0

Spotbugs Maven Plugin 4.9.6.0

  • Supports spotbugs 4.9.6
  • note: 4.9.5 had a defect with detection of jakarta in servlets that was unexpected and quickly patched for this release.

Spotbugs Maven Plugin 4.9.5.0

  • Support spotbugs 4.9.5

Spotbugs Maven Plugin 4.9.4.2

Consumer

  • Add support for 'chooseVisitors'
  • Minor code cleanup
  • Still supports spotbugs 4.9.4

Producer

  • Remove add opens from jvm.config as no longer needed

Spotbugs Maven Plugin 4.9.4.1

Consumer

  • Cleanup readme to better support plugin
  • Dropped direct usage of plexus utils and commons io
  • Groovy 5 now run engine
  • Correct issue since 4.9.2.0 resulting in most runs getting spotbugs.html file incorrectly. This has been refactored to restore doxia 1 overrides to produce xml report only when not running in site lifecycle
  • Correct defects with handling of various files on disk such as exclusion filters that were introduced into 4.9.4.0. Integration tests have been applied to prevent future regression.
  • Commons io fileutils replaced by files.walk with detailed output moved to debug collection only rather than all runs
  • Normalization of path to linux style
  • Any regex usage is now precompiled
  • Use re-entrant lock for source indexer
  • Correct locale usage to use default if not given
  • Block doctype and XXE when processing xml files
  • Cleanup some fields from resources and in code never used

Producer

  • Pin versions of github actions tools
  • Run maven 3.6.3 integration test on windows to get more broad support
  • Run maven integration test on mac to get more broad support
  • Maven 4 integration tests will continue on linux
  • Fix maven wrapper perceived path traversal issue
  • Corrections to invoker to re-establish integration test verification's
  • Fix bugs in integration tests

... (truncated)

Commits
  • 8eb6aa9 [maven-release-plugin] prepare release spotbugs-maven-plugin-4.9.8.1
  • 4ff769f Fix: Correct reported issue with 'EOF' where it should be 'EOL'
  • c210782 Merge pull request #1241 from spotbugs/renovate/execpluginversion
  • 662fa1e Update dependency org.codehaus.mojo:exec-maven-plugin to v3.6.2
  • 8cd9648 [maven-release-plugin] prepare for next development iteration
  • d8d4c69 [maven-release-plugin] prepare release spotbugs-maven-plugin-4.9.8.0
  • 52cdf26 [ci] Add note about pom entries to update for testing upstream master
  • 9b8e387 [pom] Prepare for 4.9.8 release
  • 0a8ac5a Merge pull request #1238 from spotbugs/renovate/github-codeql-action-digest
  • 4b02d8d Merge pull request #1240 from spotbugs/renovate/spotbugs.version
  • Additional commits viewable in compare view

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Oct 20, 2025
@dependabot dependabot bot mentioned this pull request Oct 20, 2025
Closed
@github-actions github-actions bot enabled auto-merge October 20, 2025 23:02
content-and-pr-write-for-jensborch[bot]
content-and-pr-write-for-jensborch bot approved these changes Oct 20, 2025
View reviewed changes
Copy link

@content-and-pr-write-for-jensborch content-and-pr-write-for-jensborch bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approving this pull request as it is a patch or minor update

@dependabot dependabot bot force-pushed the dependabot/maven/com.github.spotbugs-spotbugs-maven-plugin-4.9.8.1 branch from 2f8d457 to c503a02 Compare November 3, 2025 23:03
content-and-pr-write-for-jensborch[bot]
content-and-pr-write-for-jensborch bot approved these changes Nov 3, 2025
View reviewed changes
Copy link

@content-and-pr-write-for-jensborch content-and-pr-write-for-jensborch bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approving this pull request as it is a patch or minor update

@dependabot dependabot bot force-pushed the dependabot/maven/com.github.spotbugs-spotbugs-maven-plugin-4.9.8.1 branch from c503a02 to d9756d3 Compare November 10, 2025 23:02
content-and-pr-write-for-jensborch[bot]
content-and-pr-write-for-jensborch bot approved these changes Nov 10, 2025
View reviewed changes
Copy link

@content-and-pr-write-for-jensborch content-and-pr-write-for-jensborch bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approving this pull request as it is a patch or minor update

@dependabot
Bump com.github.spotbugs:spotbugs-maven-plugin from 4.7.3.6 to 4.9.8.1
a14c88c 
Bumps [com.github.spotbugs:spotbugs-maven-plugin](https://github.com/spotbugs/spotbugs-maven-plugin) from 4.7.3.6 to 4.9.8.1.
- [Release notes](https://github.com/spotbugs/spotbugs-maven-plugin/releases)
- [Commits](spotbugs/spotbugs-maven-plugin@spotbugs-maven-plugin-4.7.3.6...spotbugs-maven-plugin-4.9.8.1)

---
updated-dependencies:
- dependency-name: com.github.spotbugs:spotbugs-maven-plugin
  dependency-version: 4.9.8.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/maven/com.github.spotbugs-spotbugs-maven-plugin-4.9.8.1 branch from d9756d3 to a14c88c Compare November 17, 2025 23:17
content-and-pr-write-for-jensborch[bot]
content-and-pr-write-for-jensborch bot approved these changes Nov 17, 2025
View reviewed changes
Copy link

@content-and-pr-write-for-jensborch content-and-pr-write-for-jensborch bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approving this pull request as it is a patch or minor update

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@content-and-pr-write-for-jensborch content-and-pr-write-for-jensborch[bot] content-and-pr-write-for-jensborch[bot] approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant