Fix FP in SE_PREVENT_EXT_OBJ_OVERWRITE when the if statement checking for null value, checking multiple variables or the method exiting in the if branch with an exception. (#2750)
Fix possible null value in taxonomies of SARIF output (#2744)
Fix executionSuccessful flag in SARIF report being set to false when bugs were found (#2116)
Move information contained in the SARIF property exitSignalName to exitCodeDescription (#2739)
Do not report SE_NO_SERIALVERSIONID or other serialization issues for records (#2793)
Upgraded the build to compile bug samples using Java 21 language features (#2813)
Add 'configurations.checkstyle resolution starategy' to control bug in gradle on exclusions not being excluded properly as seen in checkstyle usage. See checkstyle/checkstyle#14211 for more information. (#2798)
Allow our builds to work with jdk 11 with drop back on Eclipse to 4.24 and spring to 5.3.31. (#2604)
Fix FP in SE_PREVENT_EXT_OBJ_OVERWRITE when the if statement checking for null value, checking multiple variables or the method exiting in the if branch with an exception. (#2750)
Fix possible null value in taxonomies of SARIF output (#2744)
Fix executionSuccessful flag in SARIF report being set to false when bugs were found (#2116)
Move information contained in the SARIF property exitSignalName to exitCodeDescription (#2739)
Do not report SE_NO_SERIALVERSIONID or other serialization issues for records (#2793)
Upgraded the build to compile bug samples using Java 21 language features (#2813)
Add 'configurations.checkstyle resolution starategy' to control bug in gradle on exclusions not being excluded properly as seen in checkstyle usage. See checkstyle/checkstyle#14211 for more information. (#2798)
Allow our builds to work with jdk 11 with drop back on Eclipse to 4.24 and spring to 5.3.31. (#2604)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Bumps
version.spotbugs
from 4.8.3 to 4.8.4. Updatescom.github.spotbugs:spotbugs-annotations
from 4.8.3 to 4.8.4Changelog
Sourced from com.github.spotbugs:spotbugs-annotations's changelog.
Commits
a86cfd3
release v4.8.42240767
fix: Update the filter XSD namespace and location for the upcoming 4.8.4 (#2915)1bd7c25
chore(deps): update plugin io.github.gradle-nexus.publish-plugin to v2 (#2920)789d397
Keep track of constructed BugReporters for TextUiCommandLine (#2047) (#2894)3dff769
chore(deps): update plugin com.gradle.enterprise to v3.17 (#2917)3ca5182
fix(deps): update dependency jacoco to v0.8.12 (#2918)133a6f0
fix(deps): update dependency checkstyle to v10.15.0 (#2916)6d43261
Extend theFindOverridableMethodCall
detector to handle SER09-J (#2895)9c36fdc
Fix for false positive MC_OVERRIDABLE_METHOD_CALL_IN_CONSTRUCTOR when referen...0969918
chore(deps): update plugin org.sonarqube to v5 (#2914)Updates
com.github.spotbugs:spotbugs
from 4.8.3 to 4.8.4Changelog
Sourced from com.github.spotbugs:spotbugs's changelog.
Commits
a86cfd3
release v4.8.42240767
fix: Update the filter XSD namespace and location for the upcoming 4.8.4 (#2915)1bd7c25
chore(deps): update plugin io.github.gradle-nexus.publish-plugin to v2 (#2920)789d397
Keep track of constructed BugReporters for TextUiCommandLine (#2047) (#2894)3dff769
chore(deps): update plugin com.gradle.enterprise to v3.17 (#2917)3ca5182
fix(deps): update dependency jacoco to v0.8.12 (#2918)133a6f0
fix(deps): update dependency checkstyle to v10.15.0 (#2916)6d43261
Extend theFindOverridableMethodCall
detector to handle SER09-J (#2895)9c36fdc
Fix for false positive MC_OVERRIDABLE_METHOD_CALL_IN_CONSTRUCTOR when referen...0969918
chore(deps): update plugin org.sonarqube to v5 (#2914)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show