Skip to content

build(deps): bump the maven group across 1 directory with 3 updates - #172

Open
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/maven/dev/maven-f54a6a52ae
Open

dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/maven/dev/maven-f54a6a52ae

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 13, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the maven group with 3 updates in the / directory: com.puppycrawl.tools:checkstyle, com.diffplug.spotless:spotless-maven-plugin and org.apache.maven.plugins:maven-checkstyle-plugin.

Updates com.puppycrawl.tools:checkstyle from 9.3 to 14.4.0

Release notes

Sourced from com.puppycrawl.tools:checkstyle's releases.

checkstyle-14.4.0

Checkstyle 14.4.0 - https://checkstyle.org/releasenotes.html#Release_14.4.0

New:

#21890 - New property for JavadocUtilizingTrailingSpace validateOnlyJoinableLines to report a line only when the whole next line fits on it. #20970 - JavadocLeadingAsteriskAlign: Add indentation property. #12226 - LeftCurly: new option nl_or_singleline to allow single-line blocks in otherwise Allman-style code. #21813 - New property for JavadocUtilizingTrailingSpace ignoreTooShortPattern to allow skip utilization if line ends with punctuation symbol. #18437 - EmptyLineSeparatorCheck does not report violations when more than one empty line appears with enum constants. #20496 - New check: RedundantModifierCompactSource. #18571 - Google-style: New Check BlockCommentEndPositionCheck. #21359 - New Check: FinalPatternVariable for Enforcing Final Pattern Variables. #18971 - New Check NoCauseGetMessageInExceptionConstructor: to not use caught exception message in wrapper exception constructor. #20595 - new Check: ClassHeaderWrapOpenjdk. #20638 - new Check: OpenjdkMethodParameterAlignmentCheck. #21802 - New Check ExceptionThrowShouldUseContext: Exception wrapping should always use context variables. #7895 - new Check: RedundantThis. #5313 - New Check: EmptyLineWrappingInBlock. #16748 - New check JavadocUtilizingTrailingSpace: Javadoc comments check to enforce compact content to full usage of line length.

Bug fixes:

#21941 - escape line breaks in property keys echoed in violation messages. #20266 - RedundantModifierCheck: redundant public modifier on top-level method not flagged in compact source files (JEP 512). #21828 - UnnecessaryNullCheckWithInstanceOf: false positive when variable is dereferenced inside arithmetic or comparison sub-expression. #22058 - False Positive: AvoidNoArgumentSuperConstructorCall reports super() when statements precede it in constructor (Flexible Constructor Bodies). #22173 - MethodCountCheck does not clear counters on beginTree. #21816 - Add checks for Sun Style [8.2 - Blank Spaces]. #22153 - NoCauseGetMessageInExceptionConstructorCheck does not clear catchScopes state on beginTree. #22092 - VariableDeclarationUsageDistance: NullPointerException on method in enum, record or interface. #21761 - EmptyLineSeparator: false positive duplicate violation when multiple enum constants share a line. #22045 - DescendantToken: StackOverflowError on deeply nested string concatenation. #21694 - add OpenjdkMethodParameterAlignment check in openjdk_checks.xml. #21952 - CLI exits with code 0 when the number of errors is a multiple of 256. #21864 - malformed unicode escape in UniqueProperties. #21883 - UnnecessaryNullCheckWithInstanceOf: NullPointerException when Boolean variable is used as condition in logical AND expression. #21908 - fix NullPointerException and memory leak in RedundantThis. #15193 - Conflict in Indentation Check Between if Parentheses and Record Pattern Parentheses. #21600 - EmptyLineSeparator with allowMultipleEmptyLines as false does not report a violation if there is Javadoc then an annotation before a method. #18590 - False Negative in EmptyStatement Check. #21785 - Add checks for Sun Style [7.5 - for Statements]. #21755 - MissingJavadocMethod: false-positive on getters containing block comments when allowMissingPropertyJavadoc is enabled. #5353 - RequireThisCheck: false positive in anonymous class with same name as field in top level class. #21721 - SarifLogger: artifactLocation.uri is not properly encoded for file names containing '#', '?', or '%'. #21519 - RegexpSinglelineJava hangs on a suppressed zero-width match. #4225 - FinalLocalVariable: "throw" false negative. #21751 - RequireThis: false negative for a field shadowed by a resource in finally. #20811 - Update Coverage for Sun's Java Style.

... (truncated)

Commits
  • 7d9e948 [maven-release-plugin] prepare release checkstyle-14.4.0
  • 7304bca doc: release notes for 14.4.0
  • e1b949f infra: restore git cred to let release pass for 14.4.0; release notes push wa...
  • 9706aad Issue #20590: Add EqualsAvoidNullCheck compact source coverage
  • ac4900c Issue #20590: Add HideUtilityClassConstructorCheck compact source coverage
  • cecf68d Issue #20590: Add FinalClassCheck compact source coverage
  • 532ffa6 Issue #20590: Add DefaultComesLastCheck compact source coverage
  • a046994 Issue #20590: Add EmptyBlockCheck compact source coverage
  • ef9378a Pull #21941: escape line breaks in property keys echoed in violation messages
  • 0ffcc88 Issue #20590: Add AvoidEscapedUnicodeCharactersCheck compact source coverage
  • Additional commits viewable in compare view

Updates com.diffplug.spotless:spotless-maven-plugin from 2.30.0 to 3.11.0

Release notes

Sourced from com.diffplug.spotless:spotless-maven-plugin's releases.

Maven Plugin v3.11.0

Added

  • Add <cleanup>false</cleanup> to <googleJavaFormat> to disable google-java-format's non-whitespace cleanups. (#3157)
  • Add a <maxLineLength> parameter to <googleJavaFormat>. (#3151)
    Overrides the 100-column limit prescribed by the GOOGLE and AOSP styles; requires google-java-format 2.0.0 or later.

Changes

  • Bump default google-java-format version 1.36.1 -> 2.0.0. (#3157)
    This version applies some small non-whitespace cleanups by default (removing redundant semicolons, empty annotation parentheses, and parentheses around single lambda parameters), which can be disabled with <cleanup>false</cleanup>.

Maven Plugin v3.10.4

Changes

  • Bump default eclipse version from 4.40 to 4.41.
  • Bump default gherkin version 42.0.0 -> 42.0.1. (#3088)
  • Bump default jackson version 2.22.2 -> 2.22.3. (#3101)
  • Bump default palantir-java-format version 2.98.0 -> 2.102.0. (#3103, #3132)
  • Bump default mockito-core version 5.23.0 -> 5.24.0. (#3106)
  • Bump default greclipse version to latest 4.40 -> 4.41. (#3123)
  • Bump default ktfmt version 0.64 -> 0.65. (#3135)
    Which moved to the org.jetbrains.kotlinx:ktfmt coordinate and org.jetbrains.kotlinx.ktfmt package. Older versions are still supported.
  • Bump default palantir-java-format version 2.99.0 -> 2.102.0. (#3132)

Fixed

  • Migrate Plexus component injection to JSR-330 and Maven parameter. (#3122)
  • shortenFullyQualifiedTypes leaves a qualified name alone when the enclosing type extends or implements a type that is not in the same file, so an inherited member type cannot take the simple name. (#3117)
  • expandWildcardImports no longer drops the import of a type that is only used to qualify a static member (such as Collections.sort(list) or TimeUnit.SECONDS), or the static import of a field or enum constant (such as PI from import static java.lang.Math.*), which produced code that did not compile. (#2833)

Maven Plugin v3.10.3

Changes

  • Generate formatter defaults from version catalog. (#3045)
  • Bump default gson version 2.13.2 -> 2.14.0. (#3045)
  • Bump default zjsonpatch version 0.4.14 -> 0.4.16. (#3045)
  • Bump default jackson-dataformat-yaml version 2.14.1 -> 2.20.1. (#3045)
  • Bump default ktfmt version 0.63 -> 0.64. (2988)
  • Bump default cleanthat version 2.25 -> 2.26. (#2882)
  • Bump default jackson version 2.20.1 -> 2.22.2. (#2819)
  • Bump default javaparser version 3.27.1 -> 3.28.2. (#3065)
  • Bump default palantir-java-format version 2.80.0 -> 2.98.0. (#3068)
  • Bump default scalafmt version 3.8.1 -> 3.11.5. (#2173)
  • Bump default google-java-format version 1.30.0 -> 1.36.1. (#3075)
  • Bump default gherkin-utils version 10.0.0 -> 12.0.2. (#2979)

Fixed

  • Fix release signing by using Gradle's required eight-digit signing subkey ID. (#3105)
  • Fix race when creating the npm install cache directory. ((#3096)
  • GrEclipse no longer emits expected OSGi and nested-jar warnings during initialization. (#2445)
  • typescript prettier() no longer emits a warning when its parser is already set to typescript. (#3098)
  • <versionCatalog> preserves standalone comments at section boundaries and the end of the file. (#3048)
  • <versionCatalog> preserves entries when comments contain unmatched brackets, preserves commas inside quoted strings, and keeps significant line boundaries in multiline entries. (#3042)
  • <versionCatalog> now reports unfinished entries as lints at their starting line. These fail formatting by default, so upgrading may expose catalog errors that previously caused silent data loss. (#3042)
  • Eclipse JDT formatter step no longer fails with NoClassDefFoundError or NoSuchMethodError when lombok is active as a JVM agent (e.g. -javaagent:lombok.jar in Eclipse/VS Code/Cursor). (#2795)

... (truncated)

Changelog

Sourced from com.diffplug.spotless:spotless-maven-plugin's changelog.

spotless-lib and spotless-lib-extra releases

If you are a Spotless user (as opposed to developer), then you are probably looking for:

This document is intended for Spotless developers.

We adhere to the keepachangelog format (starting after version 1.27.0).

[Unreleased]

Added

  • Add a groupArtifact option to PalantirJavaFormatStep. (#3179)

Fixed

  • GrEclipse no longer leaves a file%3A... directory in the working directory. (#2019)
  • DBeaver SQL formatter no longer prints an IndexOutOfBoundsException when a file starts with a keyword like SET. (#1552)
  • ExpandWildcardImportsStep no longer fails with Symbol resolution not configured on records and other syntax newer than Java 11, and leaves files JavaParser cannot validate unchanged. (#2946)
  • removeSemicolons() no longer removes semicolons inside dollar-slashy strings ($/ ... /$), after escaped triple quotes in multiline strings, or in multi-line for (init; cond; update) headers. (#2780)
  • RemoveUnusedImportsStep and GoogleJavaFormatStep no longer remove imports that are only used by links in Markdown doc comments (///, JDK 23+). (#3161)
  • forbidWildcardImports no longer reports import statements inside Java text blocks or comments. (#2997)

[4.11.0] - 2026-11-02

Added

  • Add a cleanup option to GoogleJavaFormatStep to disable google-java-format's non-whitespace cleanups. (#3157)
  • Add a maxLineLength option to GoogleJavaFormatStep. (#3151)
    Overrides the 100-column limit prescribed by the GOOGLE and AOSP styles. Requires google-java-format 2.0.0 or later, the bug-fixing major release which stabilized the configurable JavaFormatterOptions.Style introduced experimentally in 1.37.0 (no 1.38.0 was ever published).

Changes

  • Bump default google-java-format version 1.36.1 -> 2.0.0. (#3157)

[4.10.4] - 2026-10-08

Changes

  • Bump default Eclipse JDT formatter version from 4.40 to 4.41.
  • GitPrePushHookInstaller takes optional parameter for pre push hook directory, instead of always writing to .git/hooks. (#3115
  • Bump default gherkin version 42.0.0 -> 42.0.1. (#3088)
  • Bump default jackson version 2.22.2 -> 2.22.3. (#3101)
  • Bump default mockito-core version 5.23.0 -> 5.24.0. (#3106)
  • Bump default greclipse version to latest 4.40 -> 4.41. (#3123)
  • Bump default ktfmt version 0.64 -> 0.65. (#3135)
    Which moved to the org.jetbrains.kotlinx:ktfmt coordinate and org.jetbrains.kotlinx.ktfmt package. Older versions are still supported.
  • Bump default palantir-java-format version 2.99.0 -> 2.102.0. (#3132)

Fixed

  • shortenFullyQualifiedTypes no longer corrupts a method reference on a field/variable (localVar.field::method), which JavaParser parses as a type-shaped scope; such scopes now go through the same known-package / minimum-depth heuristic as other expression scopes before being treated as fully-qualified types. (#3133)
  • shortenFullyQualifiedTypes leaves a qualified name alone when the enclosing type extends or implements a type that is not in the same file, so an inherited member type cannot take the simple name. (#3117)
  • expandWildcardImports no longer drops the import of a type that is only used to qualify a static member (such as Collections.sort(list) or TimeUnit.SECONDS), or the static import of a field or enum constant (such as PI from import static java.lang.Math.*), which produced code that did not compile. (#2833)

[4.10.3] - 2026-09-25

... (truncated)

Commits
  • 8b62f5a Published maven/3.11.0
  • 8d2edae Published gradle/8.11.0
  • 80977b4 Published lib/4.11.0
  • ed34276 Add maxLineLength option to googleJavaFormat step (requires gjf 2.0.0+) (#3152)
  • b2cd501 docs: split maxLineLength changelog entries into subject and desc style
  • d1c06e2 Update plugin-gradle/README.md
  • 7fd0a54 Update plugin-maven/README.md
  • abe4e9f Merge origin/main: combine cleanup option and gjf 2.0.0 bump with maxLineLength
  • 5ec09c0 Bump google-java-format to 2.0.0 and add a cleanup option (#3157)
  • e8f21cb Handle older google-java-format versions in GoogleJavaFormatStepTest
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-checkstyle-plugin from 3.3.1 to 3.6.0

Commits
  • dd1abd9 [maven-release-plugin] prepare release maven-checkstyle-plugin-3.6.0
  • 9ccb06e fix
  • 6ac89b8 [MCHECKSTYLE-452] Upgrade to Doxia 2.0.0 GA Stack
  • ff1a1b7 Bump org.apache.commons:commons-lang3 from 3.16.0 to 3.17.0
  • 13e16c5 Remove unecessary test dependency on plexus-container-default
  • a7c962a [maven-release-plugin] prepare for next development iteration
  • 868abc9 [maven-release-plugin] prepare release maven-checkstyle-plugin-3.5.0
  • 9043f8a [MCHECKSTYLE-446] Dynamically calculate xrefLocation/xrefTestLocation
  • 0e7bd00 [MCHECKSTYLE-445] Upgrade to Doxia 2.0.0 Milestone Stack
  • b92666d Bump org.apache.maven.plugins:maven-plugins from 42 to 43
  • Additional commits viewable in compare view

@codecov

codecov Bot commented Nov 13, 2026 •

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 100.00%. Comparing base (45e3a7f) to head (6309857).

Additional details and impacted files
@@            Coverage Diff            @@
##               dev      #172   +/-   ##
=========================================
  Coverage   100.00%   100.00%           
=========================================
  Files           51        51           
  Lines         2262      2262           
  Branches       254       254           
=========================================
  Hits          2262      2262           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@dependabot dependabot Bot changed the title build(deps): bump the maven group with 3 updates build(deps): bump the maven group across 1 directory with 3 updates Nov 14, 2026
@dependabot
dependabot Bot force-pushed the dependabot/maven/dev/maven-f54a6a52ae branch 3 times, most recently from 70ffeef to 9bb5aa1 Compare November 14, 2026 20:11
@uniqueg uniqueg added type: dependencies Related to managing upstream dependencies and removed dependencies labels Nov 14, 2026
Bumps the maven group with 3 updates in the / directory: [com.puppycrawl.tools:checkstyle](https://github.com/checkstyle/checkstyle), [com.diffplug.spotless:spotless-maven-plugin](https://github.com/diffplug/spotless) and [org.apache.maven.plugins:maven-checkstyle-plugin](https://github.com/apache/maven-checkstyle-plugin).


Updates `com.puppycrawl.tools:checkstyle` from 9.3 to 14.4.0
- [Release notes](https://github.com/checkstyle/checkstyle/releases)
- [Commits](checkstyle/checkstyle@checkstyle-9.3...checkstyle-14.4.0)

Updates `com.diffplug.spotless:spotless-maven-plugin` from 2.30.0 to 3.11.0
- [Release notes](https://github.com/diffplug/spotless/releases)
- [Changelog](https://github.com/diffplug/spotless/blob/main/CHANGES.md)
- [Commits](diffplug/spotless@lib/2.30.0...maven/3.11.0)

Updates `org.apache.maven.plugins:maven-checkstyle-plugin` from 3.3.1 to 3.6.0
- [Release notes](https://github.com/apache/maven-checkstyle-plugin/releases)
- [Commits](apache/maven-checkstyle-plugin@maven-checkstyle-plugin-3.3.1...maven-checkstyle-plugin-3.6.0)

---
updated-dependencies:
- dependency-name: com.diffplug.spotless:spotless-maven-plugin
  dependency-version: 3.11.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: maven
- dependency-name: com.puppycrawl.tools:checkstyle
  dependency-version: 14.4.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: maven
- dependency-name: org.apache.maven.plugins:maven-checkstyle-plugin
  dependency-version: 3.6.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: maven
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/maven/dev/maven-f54a6a52ae branch from 9bb5aa1 to 6309857 Compare November 14, 2026 22:18

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

type: dependencies Related to managing upstream dependencies

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant