Skip to content

chore(deps): bump the all group with 4 updates - #2030

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/all-1545c86b11
Open

chore(deps): bump the all group with 4 updates#2030
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/all-1545c86b11

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the all group with 4 updates: com.google.code.gson:gson, org.apache.maven.plugins:maven-surefire-plugin, com.google.errorprone:error_prone_core and com.uber.nullaway:nullaway.

Updates com.google.code.gson:gson from 2.14.0 to 2.15.0

Release notes

Sourced from com.google.code.gson:gson's releases.

Gson 2.15.0

What's Changed

These are some of the more important changes

API addition:

Behaviour changes and bugfixes:

New Contributors

Full Changelog: google/gson@gson-parent-2.14.0...gson-parent-2.15.0

Commits
  • fcd4169 [maven-release-plugin] prepare release gson-parent-2.15.0
  • 828cbe0 Update protobuf-maven-plugin dependency. (#3153)
  • 66dd98a Disable Spotless plugin before Java 21. (#3152)
  • 094f500 Fix typo in comment (#3148)
  • 881d2b5 Consistently use "Gson" instead of "GSON" as project name (#3150)
  • e2292f9 Address a few static analysis findings. (#3141)
  • 67427c4 Bump the github-actions group across 1 directory with 5 updates (#3133)
  • 845664b Correct logic for BOM detection. (#3137)
  • 216c41b Bump com.fasterxml.jackson.core:jackson-databind (#3136)
  • 854c825 Simplify key removal in LegacyProtoTypeAdapterFactoryTest (#3124)
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-surefire-plugin from 3.6.0 to 3.6.1

Release notes

Sourced from org.apache.maven.plugins:maven-surefire-plugin's releases.

3.6.1

🚀 New features and improvements

🐛 Bug Fixes

📝 Documentation updates

  • Clean up deprecated parameters and fix TestNG parallel modes (#3452) (#3519) @​olamy
  • Merge the two timeout extension pages into one. The guide and the example page covered the same things twice. (#3520) @​olamy
  • Drop the Source Xref menu items (#3479) @​slachiewicz

👻 Maintenance

🔧 Build

... (truncated)

Commits
  • 5bf0dcf [maven-release-plugin] prepare release surefire-3.6.1
  • 7f73580 Bump doxiaVersion from 2.1.0 to 2.2.0 (#3542)
  • ab7ce2f Bump org.testng:testng (#3539)
  • ff3b768 Group module path heuristics in ModulePathJpmsArguments (#3541)
  • a343e4d Fix IllegalAccessError when the main module requires JUnit (#3532) (#3538)
  • 907a2e2 Fix groups and excludedGroups being ignored when TestNG is on the classpath (...
  • cc69b3c Use push for PR Automation
  • b119019 Install the JUnit Platform provider for the ITs (#3535)
  • 2cdec2e Don't let runOrder replace JUnit orderers set elsewhere (#3529) (#3530)
  • 1e4f6b9 Use workflow_run for PR check (#3531)
  • Additional commits viewable in compare view

Updates com.google.errorprone:error_prone_core from 2.50.0 to 2.51.0

Release notes

Sourced from com.google.errorprone:error_prone_core's releases.

Error Prone 2.51.0

New checks:

  • HashCodeInObjectsHash: Detect redundant hashCode() or Objects.hash() calls inside Objects.hash(...), and simplify single-argument Objects.hash(x) calls to Objects.hashCode(x).
  • LoopToTestParameter: Suggest migrating loops in unit tests to TestParameterInjector.
  • MissingJavadoc: Flag public types that are missing Javadoc comments (disabled by default).
  • PreferCharsetOverload: Prefer calling method and constructor overloads that accept a Charset over those that accept a String encoding name.
  • PreferPreconditions: Suggest using Guava's Preconditions instead of explicit if-throw statements for parameter validation (disabled by default).
  • RequireNonNullRefactoring: Refactor explicit if (x == null) { throw new NullPointerException(...); } checks to Objects.requireNonNull (disabled by default).
  • SimplifyTestParameter: Remove redundant explicit value lists on @TestParameter annotations for boolean and Enum types when all values are specified (disabled by default).
  • TraditionalJavadocToMarkdown: Convert traditional /** ... */ Javadoc comments into /// Markdown Javadoc comments (disabled by default).
  • ValueClassIdentity: Flag reliance on identity semantics (such as synchronization, WeakReference, IdentityHashMap, or System.identityHashCode) of value-based classes (disabled by default).

Other changes:

  • CompareToZero: Upgraded from warning to error, and expanded to flag non-relational operations, unary negation, and switch statements/expressions on compareTo and compare results without Integer.signum.
  • IfChainToSwitch: Enabled by default as a warning.
  • UndefinedEquals: Merged ArrayAsKeyOfSetOrMap and CollectionUndefinedEquality into UndefinedEquals (retaining their names as altNames), and generalized detection of types without well-defined equals or hashCode across direct equality, collection containment, and hash-based containers.
  • EqualsIncompatibleType / TruthIncompatibleType: Flag equality comparisons between distinct record types (#6107).
  • ReferenceEquality: Allow == comparisons on private classes whose type hierarchy does not override Object.equals (#5865), private static final sentinel fields, Thread (#5900), and com.sun.source.tree.Tree.
  • PatternMatchingInstanceof: Support while and for loops, parenthesized expressions (#5843), and replacing additional redundant casts when the instanceof already introduces a pattern variable.
  • DistinctVarargsChecker: Expanded to check Objects.hash, CompletableFuture.allOf/anyOf, EnumSet.of, Sets.union/intersection/difference, Stream.concat, Math.min/max, and additional JDK, Guava, Protobuf, Truth, and Mockito methods.
  • MustBeClosedChecker: Require java.lang.foreign.Arena.ofConfined and Arena.ofShared to be closed.
  • ImpossibleNullComparison: Flag null checks on the return value of Class.forName.
  • RestrictedApi / RestrictedInheritance: Added an allowedPaths attribute to allow calls or inheritance from matching file paths without a regular expression.
  • InlineMeInliner: Support substituting type arguments at call sites when inlining generic @InlineMe methods.
  • WellKnownKeep: Recognize Apache Beam DoFn annotations and retain open-source library annotations (Gson, Mockito, Guice, Objectify, TestParameterInjector, AutoFactory).
  • Per-check timing collection is now disabled by default, reducing Error Prone compile-time overhead by ~3–5%; pass -XepPrintTimings to print a timing report after compilation or -XepRecordTimings to record timings programmatically (#6079).
  • CompilationTestHelper now reports all lines with mismatched diagnostic expectations in a single test run rather than failing on the first mismatch (#6116).
  • Replaced the RE2/J dependency with SafeRE.

Closed issues: #4914, #5182, #5843, #5857, #5865, #5878, #5900, #6029, #6079, #6107, #6116, #6133

Commits
  • 3e9c316 Release Error Prone 2.51.0
  • 4f83ec3 Add Maven 3.9.16 setup to release workflow
  • 47eb5be Exempt Apache Beam DoFn method annotations in WellKnownKeep
  • 7e2efea [IfChainToSwitch] Lower the minimum if-chain length from 5 to 4
  • 0a97086 [IfChainToSwitch] address issue where deleting trailing code can cause compil...
  • f61d405 [Reachability] drop skipLabel from visitContinue
  • 854665b Collapse duplicated package prefixes in _javac source jar paths.
  • 3588433 Introduce -XepOpt:Nullness:LikelyPublicApiOnly=true for annotating only API...
  • b8a8390 Merge CollectionUndefinedEquality and ArrayAsKeyOfSetOrMap into UndefinedEquals.
  • 59f98c3 Allow == comparisons on Tree instances.
  • Additional commits viewable in compare view

Updates com.uber.nullaway:nullaway from 0.14.2 to 0.14.3

Release notes

Sourced from com.uber.nullaway:nullaway's releases.

NullAway 0.14.3

Many bug fixes in this release. Thanks especially to @​vlsi and @​subhramit for all the contributions! As they are now committers, their many contributions are not credited individually below.

Two bug fixes of note are #2005 and #2003, which may lead to new warnings even outside JSpecify mode.

We have also added initial support for @PolyNull in library models in #1813. We will continue to enhance this support, but it should be helpful in removing some false positives from JSpecifyExperimental mode.

  • Allow configuring suppression-remover source encoding (#1894)
  • Compute a call's executable type once per generic inference by @​ericschlarmann (#1896)
  • Skip nested annotation restoration from raw source types (#1898)
  • Refine argument nullness after Objects.equals calls by @​Beluomini (#1900)
  • Keep nullable map values nullable after containsKey (#1902)
  • Read nullable fields from JSpecify JDK models into astubx (#1901)
  • Avoid initialization-check crashes in @NullMarked constructors by @​ZedingZhang (#1929)
  • Store types of implicit lambda parameters during inference (#1930)
  • Compute erasure before binary promotion (#1935)
  • Preserve captured type variables during constraint generation (#1941)
  • Cache conversion of MethodSymbols to MethodRefs (#1964)
  • Restore nullness annotations from implicit wildcard bounds (#1967)
  • Use call-specific generic inference variables (#1965)
  • Account for nullable map values in getOrDefault (#1985)
  • Fix crash in map callbacks after an unmarked or suppressed filter predicate (#1996)
  • Strip reference casts when computing access paths (#1997)
  • Handle negated null checks in multi-argument boolean contracts (#1998)
  • Skip parentheses around a lambda or method reference passed to unmarked code (#1999)
  • Fix crash on method references to annotated array types (#2000)
  • Skip a lower-bounded wildcard when restoring annotations on a call type (#2001)
  • Strip parentheses before handlers match stream callbacks and boolean literals (#2002)
  • Check explicitly typed lambda parameters against unmarked interface methods (#2003)
  • Add PolyNull library models and apply them to Optional.orElseGet and Map.computeIfAbsent (#1813)
  • Report unboxing of a @​Nullable operand inside a primitive conditional expression (#2005)
  • Report unboxing of a @​Nullable result inside a primitive switch expression (#2006)
  • Fix crash on null-marked code nested in unmarked lambdas and local classes (#2007)
  • Strip parentheses before the futures and gRPC handlers match an argument (#2010)
  • Recognize boolean constants behind a cast in EnsuresNonNullIf and stream filters (#2011)
  • Treat a parenthesized lambda or method reference like an unwrapped one in generics checks (#2012)
  • Recognize a cast null check in a boolean contract argument (#2013)
  • Keep the access path of a map key, call argument, or array index cast to its own type (#2014)
  • Check nested nullness of explicitly typed lambda parameters (#2015)
  • Keep distinct constant map keys and call arguments on distinct access paths (#2016)
  • Apply conditional library return models to method references (#1968)
  • Reject conflicting fixed parameter models regardless of PolyNull (#2025)
  • Keep the boxing wrapper in the identity of a variable map key (#2017)
  • Maintenance
    • Report diff coverage after each test run, quoting the changed lines the run did not execute and the branches it took one way, and writing the whole report to <module>/build/reports/diff-coverage/test.txt; a // diff-coverage: ignore comment moves a line out of that list without changing the counts (#1833)

... (truncated)

Changelog

Sourced from com.uber.nullaway:nullaway's changelog.

Version 0.14.3

Many bug fixes in this release. Thanks especially to @​vlsi and @​subhramit for all the contributions! As they are now committers, their many contributions are not credited individually below.

Two bug fixes of note are #2005 and #2003, which may lead to new warnings even outside JSpecify mode.

We have also added initial support for @PolyNull in library models in #1813. We will continue to enhance this support, but it should be helpful in removing some false positives from JSpecifyExperimental mode.

  • Allow configuring suppression-remover source encoding (#1894)
  • Compute a call's executable type once per generic inference by @​ericschlarmann (#1896)
  • Skip nested annotation restoration from raw source types (#1898)
  • Refine argument nullness after Objects.equals calls by @​Beluomini (#1900)
  • Keep nullable map values nullable after containsKey (#1902)
  • Read nullable fields from JSpecify JDK models into astubx (#1901)
  • Avoid initialization-check crashes in @NullMarked constructors by @​ZedingZhang (#1929)
  • Store types of implicit lambda parameters during inference (#1930)
  • Compute erasure before binary promotion (#1935)
  • Preserve captured type variables during constraint generation (#1941)
  • Cache conversion of MethodSymbols to MethodRefs (#1964)
  • Restore nullness annotations from implicit wildcard bounds (#1967)
  • Use call-specific generic inference variables (#1965)
  • Account for nullable map values in getOrDefault (#1985)
  • Fix crash in map callbacks after an unmarked or suppressed filter predicate (#1996)
  • Strip reference casts when computing access paths (#1997)
  • Handle negated null checks in multi-argument boolean contracts (#1998)
  • Skip parentheses around a lambda or method reference passed to unmarked code (#1999)
  • Fix crash on method references to annotated array types (#2000)
  • Skip a lower-bounded wildcard when restoring annotations on a call type (#2001)
  • Strip parentheses before handlers match stream callbacks and boolean literals (#2002)
  • Check explicitly typed lambda parameters against unmarked interface methods (#2003)
  • Add PolyNull library models and apply them to Optional.orElseGet and Map.computeIfAbsent (#1813)
  • Report unboxing of a @​Nullable operand inside a primitive conditional expression (#2005)
  • Report unboxing of a @​Nullable result inside a primitive switch expression (#2006)
  • Fix crash on null-marked code nested in unmarked lambdas and local classes (#2007)
  • Strip parentheses before the futures and gRPC handlers match an argument (#2010)
  • Recognize boolean constants behind a cast in EnsuresNonNullIf and stream filters (#2011)
  • Treat a parenthesized lambda or method reference like an unwrapped one in generics checks (#2012)
  • Recognize a cast null check in a boolean contract argument (#2013)
  • Keep the access path of a map key, call argument, or array index cast to its own type (#2014)
  • Check nested nullness of explicitly typed lambda parameters (#2015)
  • Keep distinct constant map keys and call arguments on distinct access paths (#2016)
  • Apply conditional library return models to method references (#1968)
  • Reject conflicting fixed parameter models regardless of PolyNull (#2025)
  • Keep the boxing wrapper in the identity of a variable map key (#2017)

... (truncated)

Commits
  • 4b19c42 Prepare for release 0.14.3.
  • e91ea4b Keep the boxing wrapper in the identity of a variable map key (#2017)
  • d9cd573 Enable zizmor job for merge queue (#2039)
  • 7f85800 Reject conflicting fixed parameter models regardless of PolyNull (#2025)
  • ef0ddbd Build third-party projects at pinned commits with patches until upstream merg...
  • 3035507 Apply conditional library return models to method references (#1968)
  • 5023d67 Pin oracle-actions/setup-java to the v1.5.0 tag (#2021)
  • 9555b20 Keep distinct constant map keys and call arguments on distinct access paths (...
  • 29b740d Check nested nullness of explicitly typed lambda parameters (#2015)
  • 10606a3 Keep the access path of a map key, call argument, or array index cast to its ...
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the all group with 4 updates
6c03b5c 
Bumps the all group with 4 updates: [com.google.code.gson:gson](https://github.com/google/gson), [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire), [com.google.errorprone:error_prone_core](https://github.com/google/error-prone) and [com.uber.nullaway:nullaway](https://github.com/uber/NullAway).


Updates `com.google.code.gson:gson` from 2.14.0 to 2.15.0
- [Release notes](https://github.com/google/gson/releases)
- [Changelog](https://github.com/google/gson/blob/main/CHANGELOG.md)
- [Commits](google/gson@gson-parent-2.14.0...gson-parent-2.15.0)

Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.6.0 to 3.6.1
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.6.0...surefire-3.6.1)

Updates `com.google.errorprone:error_prone_core` from 2.50.0 to 2.51.0
- [Release notes](https://github.com/google/error-prone/releases)
- [Commits](google/error-prone@v2.50.0...v2.51.0)

Updates `com.uber.nullaway:nullaway` from 0.14.2 to 0.14.3
- [Release notes](https://github.com/uber/NullAway/releases)
- [Changelog](https://github.com/uber/NullAway/blob/master/CHANGELOG.md)
- [Commits](uber/NullAway@v0.14.2...v0.14.3)

---
updated-dependencies:
- dependency-name: com.google.code.gson:gson
  dependency-version: 2.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
  dependency-version: 3.6.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: com.google.errorprone:error_prone_core
  dependency-version: 2.51.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: com.uber.nullaway:nullaway
  dependency-version: 0.14.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Nov 1, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants