Spotbugs Maven Plugin 4.10.3.0

Summary

This release delivers improvements to reliability, maintainability, and reproducibility. The SpotBugs execution path has been modernized by replacing the Ant-based launcher with ProcessBuilder, temporary auxiliary classpath handling has been improved, and toolchain detection has been made more robust. Build tooling has also been cleaned up with Maven modernization efforts, improved reproducible artifact generation, and updated documentation. Additional fixes include improved artifact handling, test coverage improvements, and dependency updates.

What's Changed

• [fix] Skip non-JAR artifacts in buildBugTypeUrlMap by @uweguenther in #1445
• modify renovate config to not use bytebuddy -jdk5 postifx versions by @JuditKnoll in #1451
• Copilot/analyze test coverage by @hazendaz in #1454
• Use StandardCharsets.UTF_8 in groovy verify in IT tests by @hazendaz in #1456
• [license] Use spdx license header for apache 2.0 (no change to license) by @hazendaz in #1457
• Cleanup the build pom by @hazendaz in #1458
• [pom] Modernize how download / copy of spotbugs source works by @hazendaz in #1459
• Add reproducibility checks section to README by @hazendaz in #1460
• Avoid 'def' usage by @hazendaz in #1462
• [pom] Replace antrun to fix groovy docs with find-and-replace plugin … by @hazendaz in #1463
• Correct 2 integration tests by @hazendaz in #1467
• Make tool chain logic more robust by @hazendaz in #1469
• [pom] Use jar plugin to zip groovy docs so reproducibility works by @hazendaz in #1470
• Make 'spotbugsAuxClasspath' a temp file and minor coding cleanup by @hazendaz in #1471
• Replace 'ant' based SpotBugs execution with ProcessBuilder by @hazendaz in #1472
• Update dependency com.github.spotbugs:spotbugs to v4.10.3 by @renovate[bot] in #1473
• Other build/dependency updates

New Contributors

• @uweguenther made their first contribution in #1445

Full Changelog: spotbugs-maven-plugin-4.10.2.0...spotbugs-maven-plugin-4.10.3.0