Update dependency com.github.spotbugs.snom:spotbugs-gradle-plugin to v6.0.7

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
com.github.spotbugs.snom:spotbugs-gradle-plugin	5.1.3 -> 6.0.7
com.github.spotbugs.snom:spotbugs-gradle-plugin	6.0.6 -> 6.0.7

---

Release Notes

spotbugs/spotbugs-gradle-plugin (com.github.spotbugs.snom:spotbugs-gradle-plugin)

v6.0.7

Compare Source

Bug Fixes

• deps: update dependency com.android.tools.build:gradle to v8.2.2 (#​1101) (31852e4)

v6.0.6

Compare Source

Bug Fixes

• SpotBugs report is not handled as task output (ee017c3) @​KengoTODA

v6.0.5

Compare Source

Bug Fixes

• deps: update dependency com.android.tools.build:gradle to v8.2.1 (#​1085) (6f74150)

v6.0.4

Compare Source

Bug Fixes

• Gradle plugin should require JVM 8 but require JVM 11 (#​1074) (7710423)

v6.0.3

Compare Source

Bug Fixes

• deps: update dependency com.github.spotbugs:spotbugs to v4.8.3 (ae878ee)

v6.0.2

Compare Source

Bug Fixes

• deps: update dependency com.tngtech.archunit:archunit to v1.2.1 (#​1056) (5500c71)

v6.0.1

Compare Source

Bug Fixes

• deps: update dependency com.android.tools.build:gradle to v8.2.0 (8ffba8e)

v6.0.0

Compare Source

BREAKING CHANGES

a. This plugin is now built to Java 11 class file format. It requires Gradle to run on Java 11 or later. (1c1955e)
b. Enable Java Tool Chain support by default (c94b886). To disable it, set useJavaToolchains = false in the spotbugs extension.
c. Drop support for Gradle 7.0 (4b0f800). The convention API provides replacement from 7.1 and later, so we use 7.1 as minimal required version.
d. Remove deprecated methods SpotBugsTask.getEnabledReports() and SpotBugsTask.getFirstEnabledReport (2ab3c45)
e. The effort and reportLevel properties of SpotBugsTask and SpotBugsExtension now accept enum values instead of String instances. Read the following notes for detail.

Note for Groovy buildscripts

Groovy buildscripts should use use valueOf(String) method explicitly for effort and reportLevel properties of SpotBugsTask and SpotBugsExtension. For example:

// before (v5)
spotbugs {
    effort = 'default'
    reportLevel = 'default'
}

// after (v6)
spotbugs {
    effort = Effort.valueOf('DEFAULT')
    reportLevel = Confidence.valueOf('DEFAULT')
}

This limitation is caused by a known issue of the Groovy language.

Note for Kotlin buildscripts

It is recommended to use Gradle 8.2 or later, then you can enjoy the simple property assignment feature by default.

// legacy (Gradle 8.1 and older)
import com.github.spotbugs.snom.Confidence
import com.github.spotbugs.snom.Effort

spotbugs {
    effort.set(Effort.DEFAULT)
    reportLevel.set(Confidence.DEFAULT)
}

// new (Gradle 8.2 and later)
import com.github.spotbugs.snom.Confidence
import com.github.spotbugs.snom.Effort

spotbugs {
    effort = Effort.DEFAULT
    reportLevel = Confidence.DEFAULT
}

It is also possible to use string values, however, it is not recommended due to lack of type-safety:

// new (Gradle 8.2 and later)
import com.github.spotbugs.snom.assign

spotbugs {
    effort = "DEFAULT"
    reportLevel = "DEFAULT"
}

Internal Changes

• Remove the deplicated SpotBugsRunnerForWorker API (aa75fbc)
• Replace the usage of duplicated project.buildDir API (5abbf2d)
• Rewrite the implementation into Kotlin (#​924) (bcf4706)

v5.2.5

Compare Source

Bug Fixes

• deps: update dependency com.github.spotbugs:spotbugs to v4.8.2 (b8e8c2c)

v5.2.4

Compare Source

Bug Fixes

• reported file paths should be split by comma and space (#​1034) (4711ccf) @​xzel23

v5.2.3

Compare Source

Bug Fixes

• deps: update dependency com.github.spotbugs:spotbugs to v4.8.1 (#​1022) (c4a06c4)

v5.2.2

Compare Source

Bug Fixes

• deps: update dependency com.tngtech.archunit:archunit to v1.2.0 (#​1020) (ec52702)

v5.2.1

Compare Source

Bug Fixes

• deps: update dependency com.google.errorprone:error_prone_core to v2.23.0 (#​1010) (cc7699c)

v5.2.0

Compare Source

Features

• create Configurations lazily (#​996) (4b567d9) @​beatbrot

v5.1.5

Compare Source

Bug Fixes

• update dependency com.github.spotbugs:spotbugs to v4.8.0 (#​990) (17eccf7)

v5.1.4

Compare Source

Bug Fixes

• migrate deprecated Gradle API usages (#​974) (b1ef0d0) @​Goooler

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[github-actions]

SpotBugs

Category	Base	New
Bad practice	7	33
Correctness	34	34
Dodgy code	26	26
Internationalization	6	6
Malicious code vulnerability	49	49
Multithreaded correctness	3	3
Performance	5	8
Total	130	159

SpotBugs increased!

[codecov]

Codecov Report

Merging #1324 (07e9c74) into master (eceea6a) will increase coverage by 0.02%.
The diff coverage is n/a.

Additional details and impacted files

@@             Coverage Diff              @@
##             master    #1324      +/-   ##
============================================
+ Coverage     50.97%   51.00%   +0.02%     
- Complexity      977      978       +1     
============================================
  Files           198      198              
  Lines          7298     7298              
  Branches        945      945              
============================================
+ Hits           3720     3722       +2     
+ Misses         3066     3065       -1     
+ Partials        512      511       -1     

see 1 file with indirect coverage changes