Skip to content

build(deps): bump the maven group across 1 directory with 3 updates - #172

Open
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/maven/dev/maven-f54a6a52ae
Open

dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/maven/dev/maven-f54a6a52ae

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 13, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the maven group with 3 updates in the / directory: com.puppycrawl.tools:checkstyle, com.diffplug.spotless:spotless-maven-plugin and org.apache.maven.plugins:maven-checkstyle-plugin.

Updates com.puppycrawl.tools:checkstyle from 9.3 to 14.4.0

Release notes

Sourced from com.puppycrawl.tools:checkstyle's releases.

checkstyle-14.4.0

Checkstyle 14.4.0 - https://checkstyle.org/releasenotes.html#Release_14.4.0

New:

#21890 - New property for JavadocUtilizingTrailingSpace validateOnlyJoinableLines to report a line only when the whole next line fits on it. #20970 - JavadocLeadingAsteriskAlign: Add indentation property. #12226 - LeftCurly: new option nl_or_singleline to allow single-line blocks in otherwise Allman-style code. #21813 - New property for JavadocUtilizingTrailingSpace ignoreTooShortPattern to allow skip utilization if line ends with punctuation symbol. #18437 - EmptyLineSeparatorCheck does not report violations when more than one empty line appears with enum constants. #20496 - New check: RedundantModifierCompactSource. #18571 - Google-style: New Check BlockCommentEndPositionCheck. #21359 - New Check: FinalPatternVariable for Enforcing Final Pattern Variables. #18971 - New Check NoCauseGetMessageInExceptionConstructor: to not use caught exception message in wrapper exception constructor. #20595 - new Check: ClassHeaderWrapOpenjdk. #20638 - new Check: OpenjdkMethodParameterAlignmentCheck. #21802 - New Check ExceptionThrowShouldUseContext: Exception wrapping should always use context variables. #7895 - new Check: RedundantThis. #5313 - New Check: EmptyLineWrappingInBlock. #16748 - New check JavadocUtilizingTrailingSpace: Javadoc comments check to enforce compact content to full usage of line length.

Bug fixes:

#21941 - escape line breaks in property keys echoed in violation messages. #20266 - RedundantModifierCheck: redundant public modifier on top-level method not flagged in compact source files (JEP 512). #21828 - UnnecessaryNullCheckWithInstanceOf: false positive when variable is dereferenced inside arithmetic or comparison sub-expression. #22058 - False Positive: AvoidNoArgumentSuperConstructorCall reports super() when statements precede it in constructor (Flexible Constructor Bodies). #22173 - MethodCountCheck does not clear counters on beginTree. #21816 - Add checks for Sun Style [8.2 - Blank Spaces]. #22153 - NoCauseGetMessageInExceptionConstructorCheck does not clear catchScopes state on beginTree. #22092 - VariableDeclarationUsageDistance: NullPointerException on method in enum, record or interface. #21761 - EmptyLineSeparator: false positive duplicate violation when multiple enum constants share a line. #22045 - DescendantToken: StackOverflowError on deeply nested string concatenation. #21694 - add OpenjdkMethodParameterAlignment check in openjdk_checks.xml. #21952 - CLI exits with code 0 when the number of errors is a multiple of 256. #21864 - malformed unicode escape in UniqueProperties. #21883 - UnnecessaryNullCheckWithInstanceOf: NullPointerException when Boolean variable is used as condition in logical AND expression. #21908 - fix NullPointerException and memory leak in RedundantThis. #15193 - Conflict in Indentation Check Between if Parentheses and Record Pattern Parentheses. #21600 - EmptyLineSeparator with allowMultipleEmptyLines as false does not report a violation if there is Javadoc then an annotation before a method. #18590 - False Negative in EmptyStatement Check. #21785 - Add checks for Sun Style [7.5 - for Statements]. #21755 - MissingJavadocMethod: false-positive on getters containing block comments when allowMissingPropertyJavadoc is enabled. #5353 - RequireThisCheck: false positive in anonymous class with same name as field in top level class. #21721 - SarifLogger: artifactLocation.uri is not properly encoded for file names containing '#', '?', or '%'. #21519 - RegexpSinglelineJava hangs on a suppressed zero-width match. #4225 - FinalLocalVariable: "throw" false negative. #21751 - RequireThis: false negative for a field shadowed by a resource in finally. #20811 - Update Coverage for Sun's Java Style.

... (truncated)

Commits
  • 7d9e948 [maven-release-plugin] prepare release checkstyle-14.4.0
  • 7304bca doc: release notes for 14.4.0
  • e1b949f infra: restore git cred to let release pass for 14.4.0; release notes push wa...
  • 9706aad Issue #20590: Add EqualsAvoidNullCheck compact source coverage
  • ac4900c Issue #20590: Add HideUtilityClassConstructorCheck compact source coverage
  • cecf68d Issue #20590: Add FinalClassCheck compact source coverage
  • 532ffa6 Issue #20590: Add DefaultComesLastCheck compact source coverage
  • a046994 Issue #20590: Add EmptyBlockCheck compact source coverage
  • ef9378a Pull #21941: escape line breaks in property keys echoed in violation messages
  • 0ffcc88 Issue #20590: Add AvoidEscapedUnicodeCharactersCheck compact source coverage
  • Additional commits viewable in compare view

Updates com.diffplug.spotless:spotless-maven-plugin from 2.30.0 to 3.11.0

Release notes

Sourced from com.diffplug.spotless:spotless-maven-plugin's releases.

Maven Plugin v3.11.0

Added

  • Add <cleanup>false</cleanup> to <googleJavaFormat> to disable google-java-format's non-whitespace cleanups. (#3157)
  • Add a <maxLineLength> parameter to <googleJavaFormat>. (#3151)
    Overrides the 100-column limit prescribed by the GOOGLE and AOSP styles; requires google-java-format 2.0.0 or later.

Changes

  • Bump default google-java-format version 1.36.1 -> 2.0.0. (#3157)
    This version applies some small non-whitespace cleanups by default (removing redundant semicolons, empty annotation parentheses, and parentheses around single lambda parameters), which can be disabled with <cleanup>false</cleanup>.

Maven Plugin v3.10.4

Changes

  • Bump default eclipse version from 4.40 to 4.41.
  • Bump default gherkin version 42.0.0 -> 42.0.1. (#3088)
  • Bump default jackson version 2.22.2 -> 2.22.3. (#3101)
  • Bump default palantir-java-format version 2.98.0 -> 2.102.0. (#3103, #3132)
  • Bump default mockito-core version 5.23.0 -> 5.24.0. (#3106)
  • Bump default greclipse version to latest 4.40 -> 4.41. (#3123)
  • Bump default ktfmt version 0.64 -> 0.65. (#3135)
    Which moved to the org.jetbrains.kotlinx:ktfmt coordinate and org.jetbrains.kotlinx.ktfmt package. Older versions are still supported.
  • Bump default palantir-java-format version 2.99.0 -> 2.102.0. (#3132)

Fixed

  • Migrate Plexus component injection to JSR-330 and Maven parameter. (#3122)
  • shortenFullyQualifiedTypes leaves a qualified name alone when the enclosing type extends or implements a type that is not in the same file, so an inherited member type cannot take the simple name. (#3117)
  • expandWildcardImports no longer drops the import of a type that is only used to qualify a static member (such as Collections.sort(list) or TimeUnit.SECONDS), or the static import of a field or enum constant (such as PI from import static java.lang.Math.*), which produced code that did not compile. (#2833)

Maven Plugin v3.10.3

Changes

  • Generate formatter defaults from version catalog. (#3045)
  • Bump default gson version 2.13.2 -> 2.14.0. (#3045)
  • Bump default zjsonpatch version 0.4.14 -> 0.4.16. (#3045)
  • Bump default jackson-dataformat-yaml version 2.14.1 -> 2.20.1. (#3045)
  • Bump default ktfmt version 0.63 -> 0.64. (2988)
  • Bump default cleanthat version 2.25 -> 2.26. (#2882)
  • Bump default jackson version 2.20.1 -> 2.22.2. (#2819)
  • Bump default javaparser version 3.27.1 -> 3.28.2. (#3065)
  • Bump default palantir-java-format version 2.80.0 -> 2.98.0. (#3068)
  • Bump default scalafmt version 3.8.1 -> 3.11.5. (#2173)
  • Bump default google-java-format version 1.30.0 -> 1.36.1. (#3075)
  • Bump default gherkin-utils version 10.0.0 -> 12.0.2. (#2979)

Fixed

  • Fix release signing by using Gradle's required eight-digit signing subkey ID. (#3105)
  • Fix race when creating the npm install cache directory. ((#3096)
  • GrEclipse no longer emits expected OSGi and nested-jar warnings during initialization. (#2445)
  • typescript prettier() no longer emits a warning when its parser is already set to typescript. (#3098)
  • <versionCatalog> preserves standalone comments at section boundaries and the end of the file. (#3048)
  • <versionCatalog> preserves entries when comments contain unmatched brackets, preserves commas inside quoted strings, and keeps significant line boundaries in multiline entries. (#3042)
  • <versionCatalog> now reports unfinished entries as lints at their starting line. These fail formatting by default, so upgrading may expose catalog errors that previously caused silent data loss. (#3042)
  • Eclipse JDT formatter step no longer fails with NoClassDefFoundError or NoSuchMethodError when lombok is active as a JVM agent (e.g. -javaagent:lombok.jar in Eclipse/VS Code/Cursor). (#2795)

... (truncated)

Changelog

Sourced from com.diffplug.spotless:spotless-maven-plugin's changelog.

spotless-lib and spotless-lib-extra releases

If you are a Spotless user (as opposed to developer), then you are probably looking for:

This document is intended for Spotless developers.

We adhere to the keepachangelog format (starting after version 1.27.0).

[Unreleased]

Added

  • Add a groupArtifact option to PalantirJavaFormatStep. (#3179)

Fixed

  • GrEclipse no longer leaves a file%3A... directory in the working directory. (#2019)
  • DBeaver SQL formatter no longer prints an IndexOutOfBoundsException when a file starts with a keyword like SET. (#1552)
  • ExpandWildcardImportsStep no longer fails with Symbol resolution not configured on records and other syntax newer than Java 11, and leaves files JavaParser cannot validate unchanged. (#2946)
  • removeSemicolons() no longer removes semicolons inside dollar-slashy strings ($/ ... /$), after escaped triple quotes in multiline strings, or in multi-line for (init; cond; update) headers. (#2780)
  • RemoveUnusedImportsStep and GoogleJavaFormatStep no longer remove imports that are only used by links in Markdown doc comments (///, JDK 23+). (#3161)
  • forbidWildcardImports no longer reports import statements inside Java text blocks or comments. (#2997)

[4.11.0] - 2026-11-02

Added

  • Add a cleanup option to GoogleJavaFormatStep to disable google-java-format's non-whitespace cleanups. (#3157)
  • Add a maxLineLength option to GoogleJavaFormatStep. (#3151)
    Overrides the 100-column limit prescribed by the GOOGLE and AOSP styles. Requires google-java-format 2.0.0 or later, the bug-fixing major release which stabilized the configurable JavaFormatterOptions.Style introduced experimentally in 1.37.0 (no 1.38.0 was ever published).

Changes

  • Bump default google-java-format version 1.36.1 -> 2.0.0. (#3157)

[4.10.4] - 2026-10-08

Changes

  • Bump default Eclipse JDT formatter version from 4.40 to 4.41.
  • GitPrePushHookInstaller takes optional parameter for pre push hook directory, instead of always writing to .git/hooks. (#3115
  • Bump default gherkin version 42.0.0 -> 42.0.1. (#3088)
  • Bump default jackson version 2.22.2 -> 2.22.3. (#3101)
  • Bump default mockito-core version 5.23.0 -> 5.24.0. (#3106)
  • Bump default greclipse version to latest 4.40 -> 4.41. (#3123)
  • Bump default ktfmt version 0.64 -> 0.65. (#3135)
    Which moved to the org.jetbrains.kotlinx:ktfmt coordinate and org.jetbrains.kotlinx.ktfmt package. Older versions are still supported.
  • Bump default palantir-java-format version 2.99.0 -> 2.102.0. (#3132)

Fixed

  • shortenFullyQualifiedTypes no longer corrupts a method reference on a field/variable (localVar.field::method), which JavaParser parses as a type-shaped scope; such scopes now go through the same known-package / minimum-depth heuristic as other expression scopes before being treated as fully-qualified types. (#3133)
  • shortenFullyQualifiedTypes leaves a qualified name alone when the enclosing type extends or implements a type that is not in the same file, so an inherited member type cannot take the simple name. (#3117)
  • expandWildcardImports no longer drops the import of a type that is only used to qualify a static member (such as Collections.sort(list) or TimeUnit.SECONDS), or the static import of a field or enum constant (such as PI from import static java.lang.Math.*), which produced code that did not compile. (#2833)

[4.10.3] - 2026-09-25

... (truncated)

Commits
  • 8b62f5a Published maven/3.11.0
  • 8d2edae Published gradle/8.11.0
  • 80977b4 Published lib/4.11.0
  • ed34276 Add maxLineLength option to googleJavaFormat step (requires gjf 2.0.0+) (#3152)
  • b2cd501 docs: split maxLineLength changelog entries into subject and desc style
  • d1c06e2 Update plugin-gradle/README.md
  • 7fd0a54 Update plugin-maven/README.md
  • abe4e9f Merge origin/main: combine cleanup option and gjf 2.0.0 bump with maxLineLength
  • 5ec09c0 Bump google-java-format to 2.0.0 and add a cleanup option (#3157)
  • e8f21cb Handle older google-java-format versions in GoogleJavaFormatStepTest
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-checkstyle-plugin from 3.3.1 to 3.6.0

Commits
  • dd1abd9 [maven-release-plugin] prepare release maven-checkstyle-plugin-3.6.0
  • 9ccb06e fix
  • 6ac89b8 [MCHECKSTYLE-452] Upgrade to Doxia 2.0.0 GA Stack
  • ff1a1b7 Bump org.apache.commons:commons-lang3 from 3.16.0 to 3.17.0
  • 13e16c5 Remove unecessary test dependency on plexus-container-default
  • a7c962a [maven-release-plugin] prepare for next development iteration
  • 868abc9 [maven-release-plugin] prepare release maven-checkstyle-plugin-3.5.0
  • 9043f8a [MCHECKSTYLE-446] Dynamically calculate xrefLocation/xrefTestLocation
  • 0e7bd00 [MCHECKSTYLE-445] Upgrade to Doxia 2.0.0 Milestone Stack
  • b92666d Bump org.apache.maven.plugins:maven-plugins from 42 to 43
  • Additional commits viewable in compare view

@dependabot
dependabot Bot requested a review from uniqueg as a code owner November 13, 2026 22:35
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Nov 13, 2026
@codecov

codecov Bot commented Nov 13, 2026 •

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 77.60%. Comparing base (645acf7) to head (70ffeef).

Additional details and impacted files
@@           Coverage Diff           @@
##              dev     #172   +/-   ##
=======================================
  Coverage   77.60%   77.60%           
=======================================
  Files          74       74           
  Lines        3487     3487           
  Branches      416      416           
=======================================
  Hits         2706     2706           
  Misses        621      621           
  Partials      160      160           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@dependabot dependabot Bot changed the title build(deps): bump the maven group with 3 updates build(deps): bump the maven group across 1 directory with 3 updates Nov 14, 2026
@dependabot
dependabot Bot force-pushed the dependabot/maven/dev/maven-f54a6a52ae branch from 9edf09f to 16396fb Compare November 14, 2026 16:16
Bumps the maven group with 3 updates in the / directory: [com.puppycrawl.tools:checkstyle](https://github.com/checkstyle/checkstyle), [com.diffplug.spotless:spotless-maven-plugin](https://github.com/diffplug/spotless) and [org.apache.maven.plugins:maven-checkstyle-plugin](https://github.com/apache/maven-checkstyle-plugin).


Updates `com.puppycrawl.tools:checkstyle` from 9.3 to 14.4.0
- [Release notes](https://github.com/checkstyle/checkstyle/releases)
- [Commits](checkstyle/checkstyle@checkstyle-9.3...checkstyle-14.4.0)

Updates `com.diffplug.spotless:spotless-maven-plugin` from 2.30.0 to 3.11.0
- [Release notes](https://github.com/diffplug/spotless/releases)
- [Changelog](https://github.com/diffplug/spotless/blob/main/CHANGES.md)
- [Commits](diffplug/spotless@lib/2.30.0...maven/3.11.0)

Updates `org.apache.maven.plugins:maven-checkstyle-plugin` from 3.3.1 to 3.6.0
- [Release notes](https://github.com/apache/maven-checkstyle-plugin/releases)
- [Commits](apache/maven-checkstyle-plugin@maven-checkstyle-plugin-3.3.1...maven-checkstyle-plugin-3.6.0)

---
updated-dependencies:
- dependency-name: com.diffplug.spotless:spotless-maven-plugin
  dependency-version: 3.11.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: maven
- dependency-name: com.puppycrawl.tools:checkstyle
  dependency-version: 14.4.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: maven
- dependency-name: org.apache.maven.plugins:maven-checkstyle-plugin
  dependency-version: 3.6.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: maven
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/maven/dev/maven-f54a6a52ae branch from 16396fb to 70ffeef Compare November 14, 2026 17:20

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants