[dependabot]

Bumps com.diffplug.spotless:spotless-plugin-gradle from 8.9.0 to 8.10.3.

Release notes

Sourced from com.diffplug.spotless:spotless-plugin-gradle's releases.

Gradle Plugin v8.10.3

Changes

• Generate formatter defaults from version catalog. (#3045)
• Bump default gson version 2.13.2 -> 2.14.0. (#3045)
• Bump default zjsonpatch version 0.4.14 -> 0.4.16. (#3045)
• Bump default jackson-dataformat-yaml version 2.14.1 -> 2.20.1. (#3045)
• Bump default ktfmt version 0.63 -> 0.64. (2988)
• Bump default cleanthat version 2.25 -> 2.26. (#2882)
• Bump default jackson version 2.20.1 -> 2.22.2. (#2819)
• Bump default javaparser version 3.27.1 -> 3.28.2. (#3065)
• Bump default palantir-java-format version 2.80.0 -> 2.98.0. (#3068)
• Bump default scalafmt version 3.8.1 -> 3.11.5. (#2173)
• Bump default google-java-format version 1.30.0 -> 1.36.1. (#3075)
• Bump default gherkin-utils version 10.0.0 -> 12.0.2. (#2979)
• We no longer publish a plugin marker for the legacy com.diffplug.gradle.spotless id, which has been redirecting to com.diffplug.spotless since 4.0. Builds that still request it now fail with Plugin [id: 'com.diffplug.gradle.spotless'] was not found instead of the migration message. (#3086)

Fixed

• Fix release signing by using Gradle's required eight-digit signing subkey ID. (#3105)
• Fix race when creating the npm install cache directory. ((#3096)
• GrEclipse no longer emits expected OSGi and nested-jar warnings during initialization. (#2445)
• typescript prettier() no longer emits a warning when its parser is already set to typescript. (#3098)
• versionCatalog() preserves standalone comments at section boundaries and the end of the file. (#3048)
• versionCatalog() preserves entries when comments contain unmatched brackets, preserves commas inside quoted strings, and keeps significant line boundaries in multiline entries. (#3042)
• versionCatalog() now reports unfinished entries as lints at their starting line. These fail formatting by default, so upgrading may expose catalog errors that previously caused silent data loss. (#3042)
• Stop calling deprecated Configuration.setVisible from Gradle 9.0.0 (#3053)
• Eclipse JDT formatter step no longer fails with NoClassDefFoundError or NoSuchMethodError when lombok is active as a JVM agent (e.g. -javaagent:lombok.jar in Eclipse/VS Code/Cursor). (#2795)

Gradle Plugin v8.10.2

Fixed

• shortenFullyQualifiedTypes() now shortens fully-qualified types used in expression contexts (such as static method calls, static fields, and enum constants) while avoiding imports that would change how existing unqualified type references resolve. (#3039)
• Eclipse JDT formatter step no longer fails with NoClassDefFoundError when lombok is active as a JVM agent (e.g. -javaagent:lombok.jar in Eclipse/VS Code/Cursor). (#2795)

Gradle Plugin v8.10.1

Fixed

• prettier() and other npm-based steps no longer fail to start on npm 12 (EUNKNOWNCONFIG from --scripts-prepend-node-path). (#3024)
• spotlessInternalRegisterDependencies now writes its output under a build directory that is configured after the plugin is applied, instead of always under the default build/. (#2114)
• targetExclude now accepts a Gradle Directory, DirectoryProperty, or Provider<Directory> and excludes the files under it. Previously the directory was treated as a single file, so excluding one silently did nothing. (#2667)

Gradle Plugin v8.10.0

Added

• New shortenFullyQualifiedTypes() step for Java, which replaces fully-qualified type names with their simple names and adds the imports they need. Best combined with importOrder() and removeUnusedImports(). (#2945)
• Add embedded lockfiles to Eclipse JDT for every supported version (4.9 through 4.40), so eclipse() resolves from Maven Central instead of querying a P2 update site. Versions without an embedded lockfile still fall back to P2 provisioning. (#1996)

Fixed

• removeUnusedImports no longer fails on Java import module declarations. (#2890)
• expandWildcardImports() now builds its type-solver classpath from each Java source set's compile classpath instead of every resolvable configuration. Unrelated configurations (for example generated-code or custom resolvable configs that are not ready yet) are no longer resolved. (#2998)
• spotlessCheck violation message now suggests the correct composite/included-build task path (e.g. ./gradlew :my-utils:spotlessApply) instead of a bare spotlessApply / :spotlessApply that does not select included-build tasks. (#2421)
• Parallel multi-project builds no longer intermittently fail with "Cannot fingerprint input property 'stepsInternalEquality': ConfigurationCacheHackList cannot be serialized" / "Failed to provision P2 dependencies" when using eclipse() (or other P2-backed steps). Subprojects now share one deduping P2 provisioner and P2 queries are serialized process-wide. (#3004)

Changes

• Default google-java-format remains 1.28.0 on JVM 17; bumps to 1.30.0 on JVM 21+; require at least 1.30.0 on JVM 25+ for import module support.
• Bump default eclipse version to latest 4.39 -> 4.40. (#1996)

... (truncated)

Commits

• eae36d8 Published gradle/8.10.3
• 61e2016 Published maven/3.10.3
• 49e0b07 Published lib/4.10.3
• b7a7748 Fix release signing key ID format (#3105)
• be8005a Document release signing correction (#3105)
• 073fe61 Use short signing subkey ID for release publishing
• 8ac44c7 Fix race when creating the npm install cache directory (#3096)
• 3f2d955 Update dependency org.slf4j:slf4j-api to v2.0.20 (#3100)
• 0c70ca8 Merge branch 'main' into fix/npm-cache-directory-race
• bbf44a4 Fix GrEclipse initialization warnings (#3097)
• Additional commits viewable in compare view

Most Recent Ignore Conditions Applied to This Pull Request

Dependency Name	Ignore Conditions
com.diffplug.spotless:spotless-plugin-gradle	[< 6.8, > 6.7.1]
com.diffplug.spotless:spotless-plugin-gradle	[< 6.10, > 6.9.0]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

Test Results

   288 files     288 suites   6m 21s ⏱️
 2 648 tests  2 640 ✅  8 💤 0 ❌
14 736 runs  14 688 ✅ 48 💤 0 ❌

Results for commit 5e297c6.

[dependabot]

Superseded by #531.