Chore(deps): Bump spotbugs.version from 4.8.6 to 4.10.5 by dependabot[bot] · Pull Request #2344 · hub4j/github-api

dependabot · 2026-11-01T02:11:50Z

Bumps spotbugs.version from 4.8.6 to 4.10.5.
Updates com.github.spotbugs:spotbugs-annotations from 4.8.6 to 4.10.5

Release notes

Sourced from com.github.spotbugs:spotbugs-annotations's releases.

4.10.5

SpotBugs 4.10.5

CHANGELOG

Added

Add ReflectiveAccessTracker to track fields accessed via reflection - such as VarHandle, MethodHandle or AtomicFieldUpdaters (#3954) to fix issue (#2749)

Add automatic completion of class names in GUI class filter (#749)

Changed

@SuppressFBWarnings annotation on a method or a constructor now suppresses warnings reported in their lambdas too (#724)

Replace deprecated calls to 'SignatureParser' to 'GenericSignatureParser' where feasible (#4336)

Declaring to the interface lists/maps (#4381)

Fixed

Fix NP_NULL_ON_SOME_PATH false positive when a field null check that throws uses field == null but not null == field (#4147)

Fix RV_RETURN_VALUE_IGNORED_NO_SIDE_EFFECT false negative when the ignored result comes from Arrays.copyOf, Arrays.copyOfRange or any pure static method or constructor of a class using assert (#3900)

Fix AA_ASSERTION_OF_ARGUMENTS false negative when a public method validates a parameter with assert and instanceof (#4305)

Fix PT_ABSOLUTE_PATH_TRAVERSAL false negative for new File(parent, child), where the attacker controlled segment is the second argument (#4340)

Fix 'DM_USELESS_THREAD' false negative for Thread subclasses that do not override run() (#4306)

Fix UL_UNRELEASED_LOCK false negative when a method acquires a lock and never calls unlock (#4310)

Fix TLW_TWO_LOCK_WAIT false negatives when a class waits while holding two monitors but has no matching notify() call (#4323)

Fix NP_ALWAYS_NULL false positives when a non-null value is known to satisfy an instanceof check (#4272)

Fix RANGE_ARRAY_INDEX false positive when the array access is inside unreachable code caused by an impossible null condition (e.g. if (x == null && x != null)) (#4275)

Fix NP_NULL_ON_SOME_PATH false positive when instanceof check is always true because the value was created with new and its exact type is a subtype of the checked type (e.g. Base value = new Derived(); if (value instanceof Derived) result = new Object(); result.toString()) (#4273)

Fix NN_NAKED_NOTIFY false positive when guarded state is updated before the synchronized block that calls notify/notifyAll (#3786)

Fix SA_LOCAL_SELF_ASSIGNMENT false positive in methods with ++/-- inside a switch nested in a try-catch block (#3929)

Fix AT_NONATOMIC_OPERATIONS_ON_SHARED_VARIABLE false negative for non-atomic read-modify-write in inner classes accessing enclosing shared fields (#4236)

Fix OS_OPEN_STREAM false positive when the result of PrintWriter.append() is reassigned before closing the writer (#4274)

Fix OS_OPEN_STREAM false positive when a stream is wrapped (e.g. in a PrintStream, BufferedOutputStream or PrintWriter) and the wrapped stream is closed instead of the wrapper (#4304)

Fix SING_SINGLETON_GETTER_NOT_SYNCHRONIZED false negative when lazy init uses a ternary assignment instead of an if statement (#4154)

Fix UR_UNINIT_READ false negative for compound assignment to a field (e.g. m_iType |= e) (#4233)

Fix NP_BOOLEAN_RETURN_NULL false negative when null is returned via a local variable (#4234)

Fix MS_EXPOSE_BUF and EI_EXPOSE_BUF false negative when returning Buffer.array() (#4235)

Fix OBL_UNSATISFIED_OBLIGATION false negatives for unclosed CallableStatements returned by Connection.prepareCall (#4148)

Fix LI_LAZY_INIT_STATIC false negative when field is lazily initialized using a method call (#4276)

Fix DMI_RANDOM_USED_ONLY_ONCE FP when Random is used inside loop but created before (#3937)

Fix SARIF output writing source-location URI syntax exceptions to stderr when source filenames are unknown (#1412)

Fix IL_INFINITE_LOOP false positives for loops with conditions that are statically known to be true or false (#3904)

Narrow the definition of singletons (#2985)

Fix NP_LOAD_OF_KNOWN_NULL_VALUE false negative when null check uses instanceof (#3916)

Fix MC_OVERRIDABLE_METHOD_CALL_IN_CONSTRUCTOR false negative when a constructor calls an overridable method that takes arguments, such as a setter (e.g. setValue(value)) (#4309)

Fix CLI launcher scripts intercepting -conserveSpace with a JVM system property instead passing it to Java Application as equivalent to -effort:min (#4268)

Fix USO_UNSAFE_ACCESSIBLE_OBJECT_SYNCHRONIZATION false positive when clone() assigns a newly created lock object to the copy (#4320)

Fix CT_CONSTRUCTOR_THROW false positive with sealed classes (#4259)

Fix JrtfsCodeBase resolving JDK classes from the module image of the running JVM instead of the JDK the given jrt-fs.jar belongs to, so that -auxclasspath <other-jdk>/lib/jrt-fs.jar is honoured (#4329)

Fix USO_UNSAFE_ACCESSIBLE_OBJECT_SYNCHRONIZATION false positive when a lock is assigned to a newly allocated object (#4331)

Do not flag writeReplace() and writeExternal() as mutators (#1719)

Prevent XML external entity resolution in user-controlled data (#4365)

Fix handling of JSpecify type-use annotations in CheckRelaxingNullnessAnnotation (#4389)

Stop reporting missing java.applet at java 26 or higher (#4390)

... (truncated)

Changelog

Sourced from com.github.spotbugs:spotbugs-annotations's changelog.

4.10.5 - 2026-10-11

Added

Add ReflectiveAccessTracker to track fields accessed via reflection - such as VarHandle, MethodHandle or AtomicFieldUpdaters (#3954) to fix issue (#2749)

Add automatic completion of class names in GUI class filter (#749)

Changed

@SuppressFBWarnings annotation on a method or a constructor now suppresses warnings reported in their lambdas too (#724)

Replace deprecated calls to 'SignatureParser' to 'GenericSignatureParser' where feasible (#4336)

Declaring to the interface lists/maps (#4381)

Fixed

Fix NP_NULL_ON_SOME_PATH false positive when a field null check that throws uses field == null but not null == field (#4147)

Fix RV_RETURN_VALUE_IGNORED_NO_SIDE_EFFECT false negative when the ignored result comes from Arrays.copyOf, Arrays.copyOfRange or any pure static method or constructor of a class using assert (#3900)

Fix AA_ASSERTION_OF_ARGUMENTS false negative when a public method validates a parameter with assert and instanceof (#4305)

Fix PT_ABSOLUTE_PATH_TRAVERSAL false negative for new File(parent, child), where the attacker controlled segment is the second argument (#4340)

Fix 'DM_USELESS_THREAD' false negative for Thread subclasses that do not override run() (#4306)

Fix UL_UNRELEASED_LOCK false negative when a method acquires a lock and never calls unlock (#4310)

Fix TLW_TWO_LOCK_WAIT false negatives when a class waits while holding two monitors but has no matching notify() call (#4323)

Fix NP_ALWAYS_NULL false positives when a non-null value is known to satisfy an instanceof check (#4272)

Fix RANGE_ARRAY_INDEX false positive when the array access is inside unreachable code caused by an impossible null condition (e.g. if (x == null && x != null)) (#4275)

Fix NP_NULL_ON_SOME_PATH false positive when instanceof check is always true because the value was created with new and its exact type is a subtype of the checked type (e.g. Base value = new Derived(); if (value instanceof Derived) result = new Object(); result.toString()) (#4273)

Fix NN_NAKED_NOTIFY false positive when guarded state is updated before the synchronized block that calls notify/notifyAll (#3786)

Fix SA_LOCAL_SELF_ASSIGNMENT false positive in methods with ++/-- inside a switch nested in a try-catch block (#3929)

Fix AT_NONATOMIC_OPERATIONS_ON_SHARED_VARIABLE false negative for non-atomic read-modify-write in inner classes accessing enclosing shared fields (#4236)

Fix OS_OPEN_STREAM false positive when the result of PrintWriter.append() is reassigned before closing the writer (#4274)

Fix OS_OPEN_STREAM false positive when a stream is wrapped (e.g. in a PrintStream, BufferedOutputStream or PrintWriter) and the wrapped stream is closed instead of the wrapper (#4304)

Fix SING_SINGLETON_GETTER_NOT_SYNCHRONIZED false negative when lazy init uses a ternary assignment instead of an if statement (#4154)

Fix UR_UNINIT_READ false negative for compound assignment to a field (e.g. m_iType |= e) (#4233)

Fix NP_BOOLEAN_RETURN_NULL false negative when null is returned via a local variable (#4234)

Fix MS_EXPOSE_BUF and EI_EXPOSE_BUF false negative when returning Buffer.array() (#4235)

Fix OBL_UNSATISFIED_OBLIGATION false negatives for unclosed CallableStatements returned by Connection.prepareCall (#4148)

Fix LI_LAZY_INIT_STATIC false negative when field is lazily initialized using a method call (#4276)

Fix DMI_RANDOM_USED_ONLY_ONCE FP when Random is used inside loop but created before (#3937)

Fix SARIF output writing source-location URI syntax exceptions to stderr when source filenames are unknown (#1412)

Fix IL_INFINITE_LOOP false positives for loops with conditions that are statically known to be true or false (#3904)

Narrow the definition of singletons (#2985)

Fix NP_LOAD_OF_KNOWN_NULL_VALUE false negative when null check uses instanceof (#3916)

Fix MC_OVERRIDABLE_METHOD_CALL_IN_CONSTRUCTOR false negative when a constructor calls an overridable method that takes arguments, such as a setter (e.g. setValue(value)) (#4309)

Fix CLI launcher scripts intercepting -conserveSpace with a JVM system property instead passing it to Java Application as equivalent to -effort:min (#4268)

Fix USO_UNSAFE_ACCESSIBLE_OBJECT_SYNCHRONIZATION false positive when clone() assigns a newly created lock object to the copy (#4320)

Fix CT_CONSTRUCTOR_THROW false positive with sealed classes (#4259)

Fix JrtfsCodeBase resolving JDK classes from the module image of the running JVM instead of the JDK the given jrt-fs.jar belongs to, so that -auxclasspath <other-jdk>/lib/jrt-fs.jar is honoured (#4329)

Fix USO_UNSAFE_ACCESSIBLE_OBJECT_SYNCHRONIZATION false positive when a lock is assigned to a newly allocated object (#4331)

Do not flag writeReplace() and writeExternal() as mutators (#1719)

Prevent XML external entity resolution in user-controlled data (#4365)

Fix handling of JSpecify type-use annotations in CheckRelaxingNullnessAnnotation (#4389)

Stop reporting missing java.applet at java 26 or higher (#4390)

4.10.4 - 2026-08-19

Fixed

... (truncated)

Commits

6816eb2 release v4.10.5
6d4cc68 chore(tests): Migrate further to jspecify for Nonnull/Nullable in tests (#4392)
fd4200b chore(tests): Migrate further to jspecify for Nonnull/Nullable in tests (#4391)
c29dd08 chore(fix): Stop reporting missing java.applet at java 26 or higher (#4390)
7f809fc Fix handling of JSpecify type-use annotations in `CheckRelaxingNullnessAnnota...
8a1f6f9 fix(deps): update asm to v9.11 (#4388)
d2de0a3 chore(deps): update dependency com.diffplug.spotless:spotless-plugin-gradle t...
0b84657 chore(deps): update plugin com.diffplug.spotless to v8.10.4 (#4387)
9442ed2 fix(deps): update dependency org.checkerframework:checker-qual to v4.3.1 (#4385)
c359ba3 chore(cleanup): Minor cleanup (#4384)
Additional commits viewable in compare view

Updates com.github.spotbugs:spotbugs from 4.8.6 to 4.10.5

Release notes

Sourced from com.github.spotbugs:spotbugs's releases.

4.10.5

SpotBugs 4.10.5

CHANGELOG

Added

Add ReflectiveAccessTracker to track fields accessed via reflection - such as VarHandle, MethodHandle or AtomicFieldUpdaters (#3954) to fix issue (#2749)

Add automatic completion of class names in GUI class filter (#749)

Changed

@SuppressFBWarnings annotation on a method or a constructor now suppresses warnings reported in their lambdas too (#724)

Replace deprecated calls to 'SignatureParser' to 'GenericSignatureParser' where feasible (#4336)

Declaring to the interface lists/maps (#4381)

Fixed

Fix NP_NULL_ON_SOME_PATH false positive when a field null check that throws uses field == null but not null == field (#4147)

Fix RV_RETURN_VALUE_IGNORED_NO_SIDE_EFFECT false negative when the ignored result comes from Arrays.copyOf, Arrays.copyOfRange or any pure static method or constructor of a class using assert (#3900)

Fix AA_ASSERTION_OF_ARGUMENTS false negative when a public method validates a parameter with assert and instanceof (#4305)

Fix PT_ABSOLUTE_PATH_TRAVERSAL false negative for new File(parent, child), where the attacker controlled segment is the second argument (#4340)

Fix 'DM_USELESS_THREAD' false negative for Thread subclasses that do not override run() (#4306)

Fix UL_UNRELEASED_LOCK false negative when a method acquires a lock and never calls unlock (#4310)

Fix TLW_TWO_LOCK_WAIT false negatives when a class waits while holding two monitors but has no matching notify() call (#4323)

Fix NP_ALWAYS_NULL false positives when a non-null value is known to satisfy an instanceof check (#4272)

Fix RANGE_ARRAY_INDEX false positive when the array access is inside unreachable code caused by an impossible null condition (e.g. if (x == null && x != null)) (#4275)

Fix NP_NULL_ON_SOME_PATH false positive when instanceof check is always true because the value was created with new and its exact type is a subtype of the checked type (e.g. Base value = new Derived(); if (value instanceof Derived) result = new Object(); result.toString()) (#4273)

Fix NN_NAKED_NOTIFY false positive when guarded state is updated before the synchronized block that calls notify/notifyAll (#3786)

Fix SA_LOCAL_SELF_ASSIGNMENT false positive in methods with ++/-- inside a switch nested in a try-catch block (#3929)

Fix AT_NONATOMIC_OPERATIONS_ON_SHARED_VARIABLE false negative for non-atomic read-modify-write in inner classes accessing enclosing shared fields (#4236)

Fix OS_OPEN_STREAM false positive when the result of PrintWriter.append() is reassigned before closing the writer (#4274)

Fix OS_OPEN_STREAM false positive when a stream is wrapped (e.g. in a PrintStream, BufferedOutputStream or PrintWriter) and the wrapped stream is closed instead of the wrapper (#4304)

Fix SING_SINGLETON_GETTER_NOT_SYNCHRONIZED false negative when lazy init uses a ternary assignment instead of an if statement (#4154)

Fix UR_UNINIT_READ false negative for compound assignment to a field (e.g. m_iType |= e) (#4233)

Fix NP_BOOLEAN_RETURN_NULL false negative when null is returned via a local variable (#4234)

Fix MS_EXPOSE_BUF and EI_EXPOSE_BUF false negative when returning Buffer.array() (#4235)

Fix OBL_UNSATISFIED_OBLIGATION false negatives for unclosed CallableStatements returned by Connection.prepareCall (#4148)

Fix LI_LAZY_INIT_STATIC false negative when field is lazily initialized using a method call (#4276)

Fix DMI_RANDOM_USED_ONLY_ONCE FP when Random is used inside loop but created before (#3937)

Fix SARIF output writing source-location URI syntax exceptions to stderr when source filenames are unknown (#1412)

Fix IL_INFINITE_LOOP false positives for loops with conditions that are statically known to be true or false (#3904)

Narrow the definition of singletons (#2985)

Fix NP_LOAD_OF_KNOWN_NULL_VALUE false negative when null check uses instanceof (#3916)

Fix MC_OVERRIDABLE_METHOD_CALL_IN_CONSTRUCTOR false negative when a constructor calls an overridable method that takes arguments, such as a setter (e.g. setValue(value)) (#4309)

Fix CLI launcher scripts intercepting -conserveSpace with a JVM system property instead passing it to Java Application as equivalent to -effort:min (#4268)

Fix USO_UNSAFE_ACCESSIBLE_OBJECT_SYNCHRONIZATION false positive when clone() assigns a newly created lock object to the copy (#4320)

Fix CT_CONSTRUCTOR_THROW false positive with sealed classes (#4259)

Fix JrtfsCodeBase resolving JDK classes from the module image of the running JVM instead of the JDK the given jrt-fs.jar belongs to, so that -auxclasspath <other-jdk>/lib/jrt-fs.jar is honoured (#4329)

Fix USO_UNSAFE_ACCESSIBLE_OBJECT_SYNCHRONIZATION false positive when a lock is assigned to a newly allocated object (#4331)

Do not flag writeReplace() and writeExternal() as mutators (#1719)

Prevent XML external entity resolution in user-controlled data (#4365)

Fix handling of JSpecify type-use annotations in CheckRelaxingNullnessAnnotation (#4389)

Stop reporting missing java.applet at java 26 or higher (#4390)

... (truncated)

Changelog

Sourced from com.github.spotbugs:spotbugs's changelog.

4.10.5 - 2026-10-11

Added

Add ReflectiveAccessTracker to track fields accessed via reflection - such as VarHandle, MethodHandle or AtomicFieldUpdaters (#3954) to fix issue (#2749)

Add automatic completion of class names in GUI class filter (#749)

Changed

@SuppressFBWarnings annotation on a method or a constructor now suppresses warnings reported in their lambdas too (#724)

Replace deprecated calls to 'SignatureParser' to 'GenericSignatureParser' where feasible (#4336)

Declaring to the interface lists/maps (#4381)

Fixed

Fix NP_NULL_ON_SOME_PATH false positive when a field null check that throws uses field == null but not null == field (#4147)

Fix RV_RETURN_VALUE_IGNORED_NO_SIDE_EFFECT false negative when the ignored result comes from Arrays.copyOf, Arrays.copyOfRange or any pure static method or constructor of a class using assert (#3900)

Fix AA_ASSERTION_OF_ARGUMENTS false negative when a public method validates a parameter with assert and instanceof (#4305)

Fix PT_ABSOLUTE_PATH_TRAVERSAL false negative for new File(parent, child), where the attacker controlled segment is the second argument (#4340)

Fix 'DM_USELESS_THREAD' false negative for Thread subclasses that do not override run() (#4306)

Fix UL_UNRELEASED_LOCK false negative when a method acquires a lock and never calls unlock (#4310)

Fix TLW_TWO_LOCK_WAIT false negatives when a class waits while holding two monitors but has no matching notify() call (#4323)

Fix NP_ALWAYS_NULL false positives when a non-null value is known to satisfy an instanceof check (#4272)

Fix RANGE_ARRAY_INDEX false positive when the array access is inside unreachable code caused by an impossible null condition (e.g. if (x == null && x != null)) (#4275)

Fix NP_NULL_ON_SOME_PATH false positive when instanceof check is always true because the value was created with new and its exact type is a subtype of the checked type (e.g. Base value = new Derived(); if (value instanceof Derived) result = new Object(); result.toString()) (#4273)

Fix NN_NAKED_NOTIFY false positive when guarded state is updated before the synchronized block that calls notify/notifyAll (#3786)

Fix SA_LOCAL_SELF_ASSIGNMENT false positive in methods with ++/-- inside a switch nested in a try-catch block (#3929)

Fix AT_NONATOMIC_OPERATIONS_ON_SHARED_VARIABLE false negative for non-atomic read-modify-write in inner classes accessing enclosing shared fields (#4236)

Fix OS_OPEN_STREAM false positive when the result of PrintWriter.append() is reassigned before closing the writer (#4274)

Fix OS_OPEN_STREAM false positive when a stream is wrapped (e.g. in a PrintStream, BufferedOutputStream or PrintWriter) and the wrapped stream is closed instead of the wrapper (#4304)

Fix SING_SINGLETON_GETTER_NOT_SYNCHRONIZED false negative when lazy init uses a ternary assignment instead of an if statement (#4154)

Fix UR_UNINIT_READ false negative for compound assignment to a field (e.g. m_iType |= e) (#4233)

Fix NP_BOOLEAN_RETURN_NULL false negative when null is returned via a local variable (#4234)

Fix MS_EXPOSE_BUF and EI_EXPOSE_BUF false negative when returning Buffer.array() (#4235)

Fix OBL_UNSATISFIED_OBLIGATION false negatives for unclosed CallableStatements returned by Connection.prepareCall (#4148)

Fix LI_LAZY_INIT_STATIC false negative when field is lazily initialized using a method call (#4276)

Fix DMI_RANDOM_USED_ONLY_ONCE FP when Random is used inside loop but created before (#3937)

Fix SARIF output writing source-location URI syntax exceptions to stderr when source filenames are unknown (#1412)

Fix IL_INFINITE_LOOP false positives for loops with conditions that are statically known to be true or false (#3904)

Narrow the definition of singletons (#2985)

Fix NP_LOAD_OF_KNOWN_NULL_VALUE false negative when null check uses instanceof (#3916)

Fix MC_OVERRIDABLE_METHOD_CALL_IN_CONSTRUCTOR false negative when a constructor calls an overridable method that takes arguments, such as a setter (e.g. setValue(value)) (#4309)

Fix CLI launcher scripts intercepting -conserveSpace with a JVM system property instead passing it to Java Application as equivalent to -effort:min (#4268)

Fix USO_UNSAFE_ACCESSIBLE_OBJECT_SYNCHRONIZATION false positive when clone() assigns a newly created lock object to the copy (#4320)

Fix CT_CONSTRUCTOR_THROW false positive with sealed classes (#4259)

Fix JrtfsCodeBase resolving JDK classes from the module image of the running JVM instead of the JDK the given jrt-fs.jar belongs to, so that -auxclasspath <other-jdk>/lib/jrt-fs.jar is honoured (#4329)

Fix USO_UNSAFE_ACCESSIBLE_OBJECT_SYNCHRONIZATION false positive when a lock is assigned to a newly allocated object (#4331)

Do not flag writeReplace() and writeExternal() as mutators (#1719)

Prevent XML external entity resolution in user-controlled data (#4365)

Fix handling of JSpecify type-use annotations in CheckRelaxingNullnessAnnotation (#4389)

Stop reporting missing java.applet at java 26 or higher (#4390)

4.10.4 - 2026-08-19

Fixed

... (truncated)

Commits

6816eb2 release v4.10.5
6d4cc68 chore(tests): Migrate further to jspecify for Nonnull/Nullable in tests (#4392)
fd4200b chore(tests): Migrate further to jspecify for Nonnull/Nullable in tests (#4391)
c29dd08 chore(fix): Stop reporting missing java.applet at java 26 or higher (#4390)
7f809fc Fix handling of JSpecify type-use annotations in `CheckRelaxingNullnessAnnota...
8a1f6f9 fix(deps): update asm to v9.11 (#4388)
d2de0a3 chore(deps): update dependency com.diffplug.spotless:spotless-plugin-gradle t...
0b84657 chore(deps): update plugin com.diffplug.spotless to v8.10.4 (#4387)
9442ed2 fix(deps): update dependency org.checkerframework:checker-qual to v4.3.1 (#4385)
c359ba3 chore(cleanup): Minor cleanup (#4384)
Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps `spotbugs.version` from 4.8.6 to 4.10.5. Updates `com.github.spotbugs:spotbugs-annotations` from 4.8.6 to 4.10.5 - [Release notes](https://github.com/spotbugs/spotbugs/releases) - [Changelog](https://github.com/spotbugs/spotbugs/blob/master/CHANGELOG.md) - [Commits](spotbugs/spotbugs@4.8.6...4.10.5) Updates `com.github.spotbugs:spotbugs` from 4.8.6 to 4.10.5 - [Release notes](https://github.com/spotbugs/spotbugs/releases) - [Changelog](https://github.com/spotbugs/spotbugs/blob/master/CHANGELOG.md) - [Commits](spotbugs/spotbugs@4.8.6...4.10.5) --- updated-dependencies: - dependency-name: com.github.spotbugs:spotbugs-annotations dependency-version: 4.10.5 dependency-type: direct:production update-type: version-update:semver-minor - dependency-name: com.github.spotbugs:spotbugs dependency-version: 4.10.5 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Nov 1, 2026

dependabot Bot mentioned this pull request Nov 1, 2026

Chore(deps): Bump spotbugs.version from 4.8.6 to 4.10.4 #2335

Closed

Navigation Menu

Repository navigation

Chore(deps): Bump spotbugs.version from 4.8.6 to 4.10.5 - #2344

Chore(deps): Bump spotbugs.version from 4.8.6 to 4.10.5#2344
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/main/spotbugs.version-4.10.5

dependabot Bot commented on behalf of github Nov 1, 2026

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Nov 1, 2026

4.10.5

CHANGELOG

Added

Changed

Fixed

4.10.5 - 2026-10-11

Added

Changed

Fixed

4.10.4 - 2026-08-19

Fixed

4.10.5

CHANGELOG

Added

Changed

Fixed

4.10.5 - 2026-10-11

Added

Changed

Fixed

4.10.4 - 2026-08-19

Fixed

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants