Skip to content

build(deps): bump build plugins and analysis tooling to current #205

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
bernardladenthin merged 1 commit into from
Sep 5, 2026
+28 −28
Merged

build(deps): bump build plugins and analysis tooling to current #205

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 4 additions & 4 deletions pom.xml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -122,7 +122,7 @@ SPDX-License-Identifier: Apache-2.0
<dependency>
<groupId>org.slf4j</groupId>
<artifactId>slf4j-api</artifactId>
<version>2.0.18</version>
<version>2.0.19</version>
</dependency>
<!--
The SLF4J binding shipped inside srcmorph-cli's fat jar. It is slf4j-simple, not
Expand All @@ -140,7 +140,7 @@ SPDX-License-Identifier: Apache-2.0
<dependency>
<groupId>org.slf4j</groupId>
<artifactId>slf4j-simple</artifactId>
<version>2.0.18</version>
<version>2.0.19</version>
</dependency>
<!--
Pin logback-classic for the TEST scope only: AiFieldGenerationSupportTest attaches a
Expand Down Expand Up @@ -198,7 +198,7 @@ SPDX-License-Identifier: Apache-2.0
org.checkerframework.framework.qual.DoesNotUnrefineReceiver". Processor and
qualifiers must share a major version.

Scope `provided` satisfies both constraints at once: 4.2.2 on the compile classpath
Scope `provided` satisfies both constraints at once: 4.2.3 on the compile classpath
where the checker needs it, and excluded from consumers' transitive graph AND from
the fat jar (jar-with-dependencies takes scope runtime), so no checker-qual class of
any version reaches a consumer's JVM. <optional>true</optional> alone would not have
Expand All @@ -212,7 +212,7 @@ SPDX-License-Identifier: Apache-2.0
<dependency>
<groupId>org.checkerframework</groupId>
<artifactId>checker-qual</artifactId>
<version>4.2.2</version>
<version>4.2.3</version>
<scope>provided</scope>
</dependency>
</dependencies>
Expand Down
16 changes: 8 additions & 8 deletions srcmorph-cli/pom.xml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -48,17 +48,17 @@ SPDX-License-Identifier: Apache-2.0
<junit.version>6.1.3</junit.version>
<hamcrest.version>3.0</hamcrest.version>
<errorprone.version>2.50.0</errorprone.version>
<nullaway.version>0.14.0</nullaway.version>
<nullaway.version>0.14.1</nullaway.version>
<!-- checker.version also drives the org.checkerframework:checker annotation-processor
artifact below; the checker-qual dependency version itself is managed by the
parent's <dependencyManagement> (see comment above <dependencies>). -->
<checker.version>4.2.2</checker.version>
<checker.version>4.2.3</checker.version>
<archunit.version>1.5.0</archunit.version>
<spotbugs.version>4.10.4.0</spotbugs.version>
<lombok.version>1.18.46</lombok.version>
<spotbugs.version>4.10.4.1</spotbugs.version>
<lombok.version>1.18.48</lombok.version>
<fb-contrib.version>7.7.4</fb-contrib.version>
<findsecbugs.version>1.14.0</findsecbugs.version>
<spotless.version>3.10.1</spotless.version>
<spotless.version>3.10.2</spotless.version>
<palantir-java-format.version>2.97.0</palantir-java-format.version>

<project.build.outputTimestamp>2026-09-01T07:56:35Z</project.build.outputTimestamp>
Expand Down Expand Up @@ -182,7 +182,7 @@ SPDX-License-Identifier: Apache-2.0
<plugin>
<groupId>io.github.git-commit-id</groupId>
<artifactId>git-commit-id-maven-plugin</artifactId>
<version>10.0.0</version>
<version>10.0.1</version>
</plugin>
<plugin>
<groupId>org.apache.maven.plugins</groupId>
Expand All @@ -192,7 +192,7 @@ SPDX-License-Identifier: Apache-2.0
<plugin>
<groupId>org.apache.maven.plugins</groupId>
<artifactId>maven-compiler-plugin</artifactId>
<version>3.15.0</version>
<version>3.16.0</version>
</plugin>
<plugin>
<groupId>org.apache.maven.plugins</groupId>
Expand Down Expand Up @@ -222,7 +222,7 @@ SPDX-License-Identifier: Apache-2.0
<plugin>
<groupId>org.apache.maven.plugins</groupId>
<artifactId>maven-surefire-plugin</artifactId>
<version>3.5.6</version>
<version>3.6.0</version>
<configuration>
<!--
argLine starts with @{argLine} so the JaCoCo agent (placed into the
Expand Down
16 changes: 8 additions & 8 deletions srcmorph-maven-plugin/pom.xml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -84,20 +84,20 @@ SPDX-License-Identifier: Apache-2.0
<jcstress.version>0.16</jcstress.version>
<vmlens.version>1.2.28</vmlens.version>
<errorprone.version>2.50.0</errorprone.version>
<nullaway.version>0.14.0</nullaway.version>
<nullaway.version>0.14.1</nullaway.version>
<!-- checker.version also drives the org.checkerframework:checker annotation-processor
artifact below; the checker-qual dependency version itself is managed by the
parent's <dependencyManagement> (see comment above <dependencies>). -->
<checker.version>4.2.2</checker.version>
<checker.version>4.2.3</checker.version>
<!-- jqwik / Lincheck are no longer dependencies of this module (both moved to srcmorph
with the config package's tests); see srcmorph/pom.xml for the jqwik "DO NOT UPGRADE
past 1.9.3" policy note (CLAUDE.md "jqwik prompt-injection in test output"). -->
<archunit.version>1.5.0</archunit.version>
<spotbugs.version>4.10.4.0</spotbugs.version>
<lombok.version>1.18.46</lombok.version>
<spotbugs.version>4.10.4.1</spotbugs.version>
<lombok.version>1.18.48</lombok.version>
<fb-contrib.version>7.7.4</fb-contrib.version>
<findsecbugs.version>1.14.0</findsecbugs.version>
<spotless.version>3.10.1</spotless.version>
<spotless.version>3.10.2</spotless.version>
<palantir-java-format.version>2.97.0</palantir-java-format.version>

<ai.index.output.directory>${project.basedir}/src/site/ai</ai.index.output.directory>
Expand Down Expand Up @@ -266,12 +266,12 @@ SPDX-License-Identifier: Apache-2.0
<plugin>
<groupId>io.github.git-commit-id</groupId>
<artifactId>git-commit-id-maven-plugin</artifactId>
<version>10.0.0</version>
<version>10.0.1</version>
</plugin>
<plugin>
<groupId>org.apache.maven.plugins</groupId>
<artifactId>maven-compiler-plugin</artifactId>
<version>3.15.0</version>
<version>3.16.0</version>
</plugin>
<plugin>
<groupId>org.apache.maven.plugins</groupId>
Expand Down Expand Up @@ -306,7 +306,7 @@ SPDX-License-Identifier: Apache-2.0
<plugin>
<groupId>org.apache.maven.plugins</groupId>
<artifactId>maven-surefire-plugin</artifactId>
<version>3.5.6</version>
<version>3.6.0</version>
<configuration>
<!--
argLine starts with @{argLine} so the JaCoCo agent (placed into the
Expand Down
16 changes: 8 additions & 8 deletions srcmorph/pom.xml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -72,11 +72,11 @@ SPDX-License-Identifier: Apache-2.0
<hamcrest.version>3.0</hamcrest.version>
<lincheck.version>3.7</lincheck.version>
<errorprone.version>2.50.0</errorprone.version>
<nullaway.version>0.14.0</nullaway.version>
<nullaway.version>0.14.1</nullaway.version>
<!-- checker.version also drives the org.checkerframework:checker annotation-processor
artifact below; the checker-qual dependency version itself is managed by the
parent's <dependencyManagement> (see comment above <dependencies>). -->
<checker.version>4.2.2</checker.version>
<checker.version>4.2.3</checker.version>
<!-- DO NOT UPGRADE jqwik past 1.9.3. jqwik 1.10.0 added a deliberate
anti-AI prompt-injection string to test stdout; the 1.10.1 user
guide states the library "is not meant to be used by any 'AI'
Expand All @@ -86,11 +86,11 @@ SPDX-License-Identifier: Apache-2.0
section "jqwik prompt-injection in test output" for full context. -->
<jqwik.version>1.9.3</jqwik.version>
<archunit.version>1.5.0</archunit.version>
<spotbugs.version>4.10.4.0</spotbugs.version>
<lombok.version>1.18.46</lombok.version>
<spotbugs.version>4.10.4.1</spotbugs.version>
<lombok.version>1.18.48</lombok.version>
<fb-contrib.version>7.7.4</fb-contrib.version>
<findsecbugs.version>1.14.0</findsecbugs.version>
<spotless.version>3.10.1</spotless.version>
<spotless.version>3.10.2</spotless.version>
<palantir-java-format.version>2.97.0</palantir-java-format.version>

<project.build.outputTimestamp>2026-09-01T07:56:35Z</project.build.outputTimestamp>
Expand Down Expand Up @@ -229,12 +229,12 @@ SPDX-License-Identifier: Apache-2.0
<plugin>
<groupId>io.github.git-commit-id</groupId>
<artifactId>git-commit-id-maven-plugin</artifactId>
<version>10.0.0</version>
<version>10.0.1</version>
</plugin>
<plugin>
<groupId>org.apache.maven.plugins</groupId>
<artifactId>maven-compiler-plugin</artifactId>
<version>3.15.0</version>
<version>3.16.0</version>
</plugin>
<plugin>
<groupId>org.apache.maven.plugins</groupId>
Expand Down Expand Up @@ -264,7 +264,7 @@ SPDX-License-Identifier: Apache-2.0
<plugin>
<groupId>org.apache.maven.plugins</groupId>
<artifactId>maven-surefire-plugin</artifactId>
<version>3.5.6</version>
<version>3.6.0</version>
<configuration>
<!--
argLine starts with @{argLine} so the JaCoCo agent (placed into the
Expand Down
Loading