build(deps): bump the maven-dependencies group across 1 directory with 4 updates

[dependabot]

Bumps the maven-dependencies group with 4 updates in the / directory: com.fasterxml.jackson:jackson-bom, org.junit:junit-bom, com.uber.nullaway:nullaway and com.diffplug.spotless:spotless-maven-plugin.

Updates com.fasterxml.jackson:jackson-bom from 2.22.1 to 2.22.2

Commits

• 062d76d [maven-release-plugin] prepare release jackson-bom-2.22.2
• dcf18f7 Prep for 2.22.2 release
• 9688c7b Merge branch '2.21' into 2.22
• 7796a7d Merge branch '2.20' into 2.21
• d3cd7fc Merge branch '2.19' into 2.20
• 7a28068 Merge branch '2.18' into 2.19
• 51eb465 Post-release dep version bump
• 34ff5e8 [maven-release-plugin] prepare for next development iteration
• 0b44a45 [maven-release-plugin] prepare release jackson-bom-2.18.10
• 691ec93 Prep for 2.18.10 release
• Additional commits viewable in compare view

Updates org.junit:junit-bom from 6.1.2 to 6.1.3

Release notes

Sourced from org.junit:junit-bom's releases.

JUnit 6.1.3 = Platform 6.1.3 + Jupiter 6.1.3 + Vintage 6.1.3

See Release Notes.

Full Changelog: junit-team/junit-framework@r6.1.2...r6.1.3

Commits

• f59f60d Release 6.1.3
• cd8ec92 Finalize 6.1.3 release notes
• c8729f2 Restore compatibility with GraalVM 25 (#5901)
• ddc9e74 Update graalvm/setup-graalvm action to v1.6.4 (#5959)
• fe2c52a Update plugin org.graalvm.buildtools.native to v1.1.7 (#5923)
• 62afc02 Delay GraalVM plugin updates for 3 days
• 0cc2902 Skip graalVmTest task if GraalVM env vars are not set
• f6bbfc5 Move GraalVM tests to separate test task (#5903)
• e87e052 Update plugin org.graalvm.buildtools.native to v1.1.6 (#5899)
• 1cd56df Update plugin org.graalvm.buildtools.native to v1.1.5 (#5880)
• Additional commits viewable in compare view

Updates com.uber.nullaway:nullaway from 0.13.8 to 0.14.0

Release notes

Sourced from com.uber.nullaway:nullaway's releases.

NullAway 0.14.0

This release has significant improvements to JSpecify support, including improved support for wildcards and integration of the standard library nullability annotations from https://github.com/jspecify/jdk. Much of this new support is gated behind a new JSpecifyExperimental flag, which is off by default. We disable the flag by default since this new support leads to many new errors in existing projects (mostly from the new JDK models), and because we need more real-world testing before enabling it by default. We encourage projects to enable the JSpecifyExperimental flag (alongside JSpecify mode) and to report any issues that arise. We expect to turn JSpecifyExperimental on by default in a future release.

Aside from the above, you may observe some newly reported warnings in JSpecify mode, due to other checking improvements.

This release also removes the LegacyAnnotationLocations flag. Type-use annotations must now be placed correctly on qualified and array types, even outside JSpecify mode, see details here:

https://github.com/uber/NullAway/wiki/JSpecify-Support#type-use-annotation-placement

Beyond the above, we had useful changes from a variety of new contributors; thanks so much!

• Remove LegacyAnnotationLocations flag (#1640)
• Handle signature-polymorphic calls in InvocationArguments (#1644)
• Fix handling of reference to method with @Nullable parameter from library model (#1642)
• Enable JSpecify JDK models (under a flag) (#1641)
• Enable JSpecify JDK models for regression tests (#1646)
• Fix bug with lambdas assigned to locals with a wildcard in their type (#1647)
• Add JSpecifyExperimental configuration flag (#1648)
• Improve wildcard mismatch diagnostics for identical-looking types (#1627)
• Enable inference failure warnings in experimental mode, and fix related bug in library models (#1649)
• Fix inference bug with generic instance methods (#1654)
• Fixes related to captured types and inference (#1655)
• Augment NullAway error / fix serialization for Annotator auto fix mode by @​nimakarimipour (#1322)
• More consistent checks for captured types (#1662)
• Update to JSpecify 1.0.1 (#1665)
• Add test for issue 1671 (#1673)
• Test case and fix for issue 1672 (#1674)
• Fix subtype checking for nested captured types (#1663)
• Handle interaction of captured types and library models (#1666)
• Follow-on fix for restoring annotation on captured type wildcards (#1667)
• Fix subtle issue with invalid TreePaths (#1681)
• Honor @​Contract when a @​Nullable method is used as a method reference by @​Eljees (#1679)
• Defensively thread path into NestedTypeVarSubstitutionRepairVisitor (#1683)
• More TreePath hardening (#1684)
• Harden TypeSubstitutionUtils type copies (#1669)
• Handle unbound wildcards and interactions with captured types better (#1668)
• Improve error messages involving capture variables (#1675)

... (truncated)

Changelog

Sourced from com.uber.nullaway:nullaway's changelog.

Version 0.14.0

This release has significant improvements to JSpecify support, including improved support for wildcards and integration of the standard library nullability annotations from https://github.com/jspecify/jdk. Much of this new support is gated behind a new JSpecifyExperimental flag, which is off by default. We disable the flag by default since this new support leads to many new errors in existing projects (mostly from the new JDK models), and because we need more real-world testing before enabling it by default. We encourage projects to enable the JSpecifyExperimental flag (alongside JSpecify mode) and to report any issues that arise. We expect to turn JSpecifyExperimental on by default in a future release.

Aside from the above, you may observe some newly reported warnings in JSpecify mode, due to other checking improvements.

This release also removes the LegacyAnnotationLocations flag. Type-use annotations must now be placed correctly on qualified and array types, even outside JSpecify mode, see details here:

https://github.com/uber/NullAway/wiki/JSpecify-Support#type-use-annotation-placement

Beyond the above, we had useful changes from a variety of new contributors; thanks so much!

• Remove LegacyAnnotationLocations flag (#1640)
• Handle signature-polymorphic calls in InvocationArguments (#1644)
• Fix handling of reference to method with @Nullable parameter from library model (#1642)
• Enable JSpecify JDK models (under a flag) (#1641)
• Enable JSpecify JDK models for regression tests (#1646)
• Fix bug with lambdas assigned to locals with a wildcard in their type (#1647)
• Add JSpecifyExperimental configuration flag (#1648)
• Improve wildcard mismatch diagnostics for identical-looking types (#1627)
• Enable inference failure warnings in experimental mode, and fix related bug in library models (#1649)
• Fix inference bug with generic instance methods (#1654)
• Fixes related to captured types and inference (#1655)
• Augment NullAway error / fix serialization for Annotator auto fix mode by @​nimakarimipour (#1322)
• More consistent checks for captured types (#1662)
• Update to JSpecify 1.0.1 (#1665)
• Add test for issue 1671 (#1673)
• Test case and fix for issue 1672 (#1674)
• Fix subtype checking for nested captured types (#1663)
• Handle interaction of captured types and library models (#1666)
• Follow-on fix for restoring annotation on captured type wildcards (#1667)
• Fix subtle issue with invalid TreePaths (#1681)
• Honor @​Contract when a @​Nullable method is used as a method reference by @​Eljees (#1679)
• Defensively thread path into NestedTypeVarSubstitutionRepairVisitor (#1683)
• More TreePath hardening (#1684)
• Harden TypeSubstitutionUtils type copies (#1669)

... (truncated)

Commits

• 3af91d8 Prepare for release 0.14.0.
• ba5aaa1 Release notes for version 0.14.0 (#1713)
• d008a79 Rename getExecutableTypeForInference and improve Javadoc (#1709)
• 5cbc09f Handle nested generic diamond call inference (#1544)
• a77c5fc Basic nullability inference for diamond constructor type arguments (#1708)
• 7bb2f8a Generalize generic-call inference internals to call expressions (#1707)
• 0b9421a Rename MethodInferenceResult to CallInferenceResult (#1692)
• d427643 Fix bug with library-modeled return types, method references, and streams (#1...
• 6329102 Fix JSpecify false negative when override narrows method type variable bound ...
• 6bba0e5 Add regression test for inner classes inheriting enclosing type arguments (#1...
• Additional commits viewable in compare view

Updates com.diffplug.spotless:spotless-maven-plugin from 3.9.0 to 3.10.0

Release notes

Sourced from com.diffplug.spotless:spotless-maven-plugin's releases.

Maven Plugin v3.10.0

Added

• New <shortenFullyQualifiedTypes> step for Java, which replaces fully-qualified type names with their simple names and adds the imports they need. Best combined with <importOrder> and <removeUnusedImports>. (#2945)
• Add embedded lockfiles to Eclipse JDT for every supported version (4.9 through 4.40), so eclipse() resolves from Maven Central instead of querying a P2 update site. Versions without an embedded lockfile still fall back to P2 provisioning. (#1996)
• Add support to apply alternate license header within same format (#872)
• Add support to skip license header application based on source file content pattern (#650).

Fixed

• removeUnusedImports no longer fails on Java import module declarations. (#2890)
• Concurrent P2 provisioning no longer races Solstice's on-disk cache (affects Eclipse-based formatters under parallel builds). (#3004)

Changes

• Default google-java-format remains 1.28.0 on JVM 17; bumps to 1.30.0 on JVM 21+; require at least 1.30.0 on JVM 25+ for import module support.
• Bump default eclipse version to latest 4.39 -> 4.40. (#1996)
• Document Maven skip properties spotless.skip, spotless.check.skip, and spotless.apply.skip. Goal-specific skips now live on their own mojos so they no longer leak across goals. (#3009)
• Bump default adocfmt version 0.2.0 -> 0.3.1, which adds table formatting support (<formatTables>, <tableLayout>, <tableMaxLineWidth>, <tableBlankLines>).

Commits

• 426b21d Published maven/3.10.0
• 2fd42ea Published gradle/8.10.0
• d71ed1a Published lib/4.10.0
• 8b57c01 Add shortenFullyQualifiedTypes step (fixes #2945) (#3005 closes #2945)
• 6b42c5e fix: make the FQN-collecting visitor a named static class
• 4430823 Better organization on the changelogs.
• 45bea6d Better place to put the shortenFullyQualifiedTypes docs
• 0c49e65 chore: spotlessApply
• 1c5bc0a docs: list the Java import steps in the plugin README tables of contents
• cd57b58 docs: document shortenFullyQualifiedTypes in the plugin READMEs
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.