build(deps): bump org.checkerframework:checker-qual from 4.2.2 to 4.2.3

[dependabot]

Bumps org.checkerframework:checker-qual from 4.2.2 to 4.2.3.

Release notes

Sourced from org.checkerframework:checker-qual's releases.

Checker Framework 4.2.3

Version 4.2.3 (2026-09-01)

User-visible changes

The -AsuggestPureMethods command-line option and the purity.effectively.pure warning no longer require -AcheckPurityAnnotations to also be supplied.

Implementation details

Made the field Java8InferenceContext.pathToExpression private; use getPathToExpression() and setPathToExpression() instead.

Renamed TreeUtils.isLikeDiamondMemberReference() to isRawTypedMemberReference().

Closed issues

#2816, #7677, #7678, #7681, #7682, #7684, #7693, #7694, #7696, #7698, #7701, #7702, #7875, #8046, #8047, #8048, #8050, #8052.

Changelog

Sourced from org.checkerframework:checker-qual's changelog.

Version 4.2.3 (2026-09-01)

User-visible changes

The -AsuggestPureMethods command-line option and the purity.effectively.pure warning no longer require -AcheckPurityAnnotations to also be supplied.

Changes for type system implementers

Made the field Java8InferenceContext.pathToExpression private; use getPathToExpression() and setPathToExpression() instead.

Renamed TreeUtils.isLikeDiamondMemberReference() to isRawTypedMemberReference().

Closed issues

#2816, #7677, #7678, #7681, #7682, #7684, #7693, #7694, #7696, #7698, #7701, #7702, #7875, #8046, #8047, #8048, #8050, #8052.

Commits

• ddd330d new release 4.2.3
• d44c55a Increase the timeout.
• d07e6ce Fix links.
• 0af4fa2 Prep for release.
• 455d690 Infer the type arguments of ReferenceType::Identifier where ReferenceType...
• 81173f8 Add javac equivalent class for AnnotationEqualityVisitor (#7692)
• 81b9930 AFU Javadoc
• ac24b72 Add ci_info jobs, simplify misc jobs
• d27d6b4 Clear SubtypeVisitHistory after each outermost isSubtype call (#8064)
• 3180cc2 Update actions/setup-java action to v6
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[FrankChen021]

This review was performed by Codex GPT-5.6 Luna(max) model.

Backward compatibility: SAFE — checker-qual 4.2.2 to 4.2.3 is annotation-only for Druid; 386 existing classes are byte-identical and the only additive class member is unused SideEffectsOnly. Artifact checksums, dependency-free graph, license verification, compatibility checks, and full CI passed; Druid’s used annotations, runtime, configuration, wire, serialization, persistence, deployment, and extension-SPI contracts are unchanged.

Java-source changes: NO — the current head changes only pom.xml and licenses.yaml.