Skip to content

chore(deps): update dependency com.github.spotbugs:spotbugs-annotations to v4.3.0 - #1782

Merged
ptuomola merged 1 commit into
apache:developfrom
renovate-bot:renovate/com.github.spotbugs-spotbugs-annotations-4.x
Jul 8, 2021
Merged

chore(deps): update dependency com.github.spotbugs:spotbugs-annotations to v4.3.0#1782
ptuomola merged 1 commit into
apache:developfrom
renovate-bot:renovate/com.github.spotbugs-spotbugs-annotations-4.x

Conversation

@renovate-bot

Copy link
Copy Markdown
Contributor

WhiteSource Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
com.github.spotbugs:spotbugs-annotations (source) 4.2.3 -> 4.3.0 age adoption passing confidence

Release Notes

spotbugs/spotbugs

v4.3.0

Compare Source

Fixed
  • MS_EXPOSE_REP and EI_EXPOSE_REP are now reported for code returning a reference to a mutable object indirectly (e.g. via a local variable)
Changed
  • Bump ObjectWeb ASM from 9.1 to 9.2 supporting JDK 18 (#​1591)
  • Bump Saxon-HE from 10.3 to 10.5 (#​1513)
  • Bump gson from 2.8.6 to 2.8.7 (#​1556)
  • Function mutableSignature() improved and factored out from the MutableStaticFields detector
Added
  • New bugs MS_EXPOSE_BUF, EI_EXPOSE_BUF, EI_EXPOSE_STATIC_BUF2 and EI_EXPOSE_BUF2 by the FindReturnRef detector to detect cases where buffers or their backing arrays are exposed (see SEI CERT rule FIO05-J)
  • MS_EXPOSE_REP, EI_EXPOSE_REP, EI_EXPOSE_STATIC_REP2 and EI_EXPOSE_REP2 now report for shallowly copied arrays (using clone()) of mutable objects

Configuration

📅 Schedule: At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box.

This PR has been generated by WhiteSource Renovate. View repository job log here.

@forking-renovate forking-renovate Bot added the renovate https://renovate.whitesourcesoftware.com [FINERACT-962] label Jul 1, 2021

@ptuomola ptuomola left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@ptuomola
ptuomola merged commit 17479a1 into apache:develop Jul 8, 2021
@renovate-bot
renovate-bot deleted the renovate/com.github.spotbugs-spotbugs-annotations-4.x branch July 8, 2021 04:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

renovate https://renovate.whitesourcesoftware.com [FINERACT-962]

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants