GoogleContainerTools / jib

🏗 Build container images for your Java applications.
Apache License 2.0
13.58k stars 1.43k forks source link

chore(deps): bump com.uber.nullaway:nullaway from 0.10.7 to 0.10.21 #4167

Closed dependabot[bot] closed 7 months ago

dependabot[bot] commented 7 months ago

Bumps com.uber.nullaway:nullaway from 0.10.7 to 0.10.21.

Release notes

Sourced from com.uber.nullaway:nullaway's releases.

NullAway 0.10.21

IMPORTANT: This release fixes a crash when running against <2.24.0 release of Error Prone (see #894) introduced in NullAway v0.10.20 and another crash related to Checker Framework (see #895) introduced in NullAway v0.10.19.

  • Fix backwards-incompatible calls to ASTHelpers.hasDirectAnnotationWithSimpleName (#894)
  • Downgrade to Checker Framework 3.40.0 (#895)

NullAway 0.10.20

  • Fix JSpecify support on JDK 21 (#869)
  • Build / CI tooling upgrades for NullAway itself:
    • Update to WALA 1.6.3 (#887)
    • Update to Error Prone 2.24.1 (#888)

NullAway 0.10.19

  • Update to Checker Framework 3.41.0 (#873)
  • Extend library models to mark fields as nullable (#878)
    • Main use case is NullAwayAnnotator
  • Fix jarinfer cli output determinism (#884)
  • Add support for AssertJ as() and describedAs() in AssertionHandler (#885)
  • Support for JSpecify's 0.3.0 annotation [experimental]
    • JSpecify: In generics code, get rid of checks for ClassType (#863)
  • Update some dependencies (#883)

NullAway 0.10.18

  • Fix assertion check for structure of enhanced-for loop over a Map keySet (#868)

NullAway 0.10.17

  • Fix bug with computing direct type use annotations on parameters (#864)
  • Model Apache Flink's RichFunction.open as an @Initializer method (#862)
  • Support for JSpecify's 0.3.0 annotation [experimental]
    • JSpecify: adding com.google.common to annotated packages in build.gradle (#857)
    • JSpecify: handling the return of a diamond operator anonymous object method caller (#858)
    • Create com.uber.nullaway.generics package (#855)
    • Clarifications and small fixes for checking JSpecify @Nullable annotation (#859)
    • Apply minor cleanups suggested by IntelliJ in generics code (#860)

NullAway 0.10.16

NOTE: Maven Central signing key rotated for this release following a revocation.

  • Minor cleanup in AccessPathElement (#851)
  • Support for JSpecify's 0.3.0 annotation [experimental]
    • JSpecify: handle return types of method references in Java Generics (#847)
    • JSpecify: handle Nullability for lambda expression parameters for Generic Types (#852)
    • JSpecify: Modify Array Type Use Annotation Syntax (#850)
    • JSpecify: handle Nullability for return types of lambda expressions for Generic Types (#854)
  • Build / CI tooling for NullAway itself:
    • Update to Gradle 8.4 and Error Prone 2.23.0 (#849)

NullAway 0.10.15

  • [IMPORTANT] Update minimum Error Prone version and Guava version (#843) NullAway now requires Error Prone 2.10.0 or later

... (truncated)

Changelog

Sourced from com.uber.nullaway:nullaway's changelog.

Version 0.10.21

IMPORTANT: This release fixes a crash when running against <2.24.0 release of Error Prone (see #894) introduced in NullAway v0.10.20 and another crash related to Checker Framework (see #895) introduced in NullAway v0.10.19.

  • Fix backwards-incompatible calls to ASTHelpers.hasDirectAnnotationWithSimpleName (#894)
  • Downgrade to Checker Framework 3.40.0 (#895)

Version 0.10.20

  • Fix JSpecify support on JDK 21 (#869)
  • Build / CI tooling upgrades for NullAway itself:
    • Update to WALA 1.6.3 (#887)
    • Update to Error Prone 2.24.1 (#888)

Version 0.10.19

  • Update to Checker Framework 3.41.0 (#873)
  • Extend library models to mark fields as nullable (#878)
    • Main use case is NullAwayAnnotator
  • Fix jarinfer cli output determinism (#884)
  • Add support for AssertJ as() and describedAs() in AssertionHandler (#885)
  • Support for JSpecify's 0.3.0 annotation [experimental]
    • JSpecify: In generics code, get rid of checks for ClassType (#863)
  • Update some dependencies (#883)

Version 0.10.18

  • Fix assertion check for structure of enhanced-for loop over a Map keySet (#868)

Version 0.10.17

  • Fix bug with computing direct type use annotations on parameters (#864)
  • Model Apache Flink's RichFunction.open as an @​Initializer method (#862)
  • Support for JSpecify's 0.3.0 annotation [experimental]
    • JSpecify: adding com.google.common to annotated packages in build.gradle (#857)
    • JSpecify: handling the return of a diamond operator anonymous object method caller (#858)
    • Create com.uber.nullaway.generics package (#855)
    • Clarifications and small fixes for checking JSpecify @​Nullable annotation (#859)
    • Apply minor cleanups suggested by IntelliJ in generics code (#860)

Version 0.10.16

NOTE: Maven Central signing key rotated for this release following a revocation.

  • Minor cleanup in AccessPathElement (#851)
  • Support for JSpecify's 0.3.0 annotation [experimental]
    • JSpecify: handle return types of method references in Java Generics (#847)
    • JSpecify: handle Nullability for lambda expression parameters for Generic Types (#852)

... (truncated)

Commits
  • 0293b0f Prepare for release 0.10.21.
  • c7007fd Downgrade to Checker Framework 3.40.0 (#895)
  • 9ff44a7 Fix backwards-incompatible calls to ASTHelpers.hasDirectAnnotationWithSimpleN...
  • abff73e Prepare next development version.
  • bb81c97 Prepare for release 0.10.20.
  • 97771dc Fix JSpecify support on JDK 21 (#869)
  • 257e4bb Update to Error Prone 2.24.1 (#888)
  • b5cd1f9 Update to WALA 1.6.3 (#887)
  • 6da0b8d Prepare next development version.
  • c6fcc92 Prepare for release 0.10.19.
  • Additional commits viewable in compare view


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
dependabot[bot] commented 7 months ago

Superseded by #4178.