fix(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Age	Confidence
gradle (source)		minor	9.5.0 → 9.6.1
org.junit.jupiter:junit-jupiter (source)	devDependencies	minor	6.0.3 → 6.1.2
org.openrewrite.recipe:rewrite-rewrite	devDependencies	minor	0.24.2 → 0.28.0
org.openrewrite.recipe:rewrite-migrate-java	devDependencies	minor	3.34.0 → 3.40.0
org.openrewrite.recipe:rewrite-static-analysis	devDependencies	minor	2.34.0 → 2.39.0
com.github.spotbugs:spotbugs (source)	devDependencies	minor	4.9.8 → 4.10.3
com.google.errorprone:error_prone_core (source)	devDependencies	minor	2.49.0 → 2.50.0
org.openrewrite:plugin	devDependencies	minor	7.32.1 → 7.37.0
com.tcoded:FoliaLib	dependencies	patch	0.5.1 → 0.5.2
com.github.spotbugs.snom:spotbugs-gradle-plugin	devDependencies	patch	6.5.4 → 6.5.9
com.gradleup.shadow:shadow-gradle-plugin	devDependencies	minor	9.4.1 → 9.6.0
com.gradleup.shadow	plugin	minor	9.4.1 → 9.6.0
com.diffplug.spotless:spotless-plugin-gradle	devDependencies	minor	8.4.0 → 8.8.0
net.lenni0451.mcstructs:text	dependencies	patch	3.3.0 → 3.3.1

---

Release Notes

gradle/gradle (gradle)

v9.6.1

Compare Source

v9.6.0

Compare Source

v9.5.1: 9.5.1

Compare Source

The Gradle team is excited to announce Gradle 9.5.1.

Here are the highlights of this release:

• Task provenance in reports and failure messages
• Type-safe accessors for precompiled Kotlin Settings plugins

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle:
atm1020,
mataha,
Adam,
Attila Kelemen,
Benedikt Ritter,
Björn Kautler,
Caro Silva Rode,
CHANHAN,
Dmitry Nezavitin,
Eng Zer Jun,
KugelLibelle,
Madalin Valceleanu,
Markus Gaisbauer,
Oliver Kopp,
Philip Wedemann,
ploober,
Roberto Perez Alcolea,
Rohit Anand,
Suvrat Acharya,
Ujwal Suresh Vanjare,
Victor Merkulov

Upgrade instructions

Switch your build to use Gradle 9.5.1 by updating your wrapper:

./gradlew wrapper --gradle-version=9.5.1 && ./gradlew wrapper

See the Gradle 9.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

junit-team/junit-framework (org.junit.jupiter:junit-jupiter)

v6.1.1

openrewrite/rewrite-rewrite (org.openrewrite.recipe:rewrite-rewrite)

v0.28.0: 0.28.0

What's Changed

• Fix UseRewriteTestDefaults corrupting output for classes with field initializers by @​timtebeek in #​80
• Avoid no-op change in SourceSpecTextBlockIndentation when margin is already minimal by @​timtebeek in #​81

Full Changelog: openrewrite/rewrite-rewrite@v0.27.0...v0.28.0

v0.27.0: 0.27.0

What's Changed

• Avoid renaming ExecutionContext parameter when it would shadow an outer scope by @​timtebeek in #​78

Full Changelog: openrewrite/rewrite-rewrite@v0.26.1...v0.27.0

v0.26.1: 0.26.1

What's Changed

• OpenRewrite v8.85.0: https://github.com/openrewrite/rewrite

Full Changelog: openrewrite/rewrite-rewrite@v0.26.0...v0.26.1

v0.26.0: 0.26.0

What's Changed

• Regenerate recipes.csv by @​timtebeek in #​77

Full Changelog: openrewrite/rewrite-rewrite@v0.25.0...v0.26.0

v0.25.0: 0.25.0

What's Changed

• Test collapsing lambda after AssertJ ReturnActual by @​timtebeek in #​76

Full Changelog: openrewrite/rewrite-rewrite@v0.24.3...v0.25.0

v0.24.3

What's Changed

• OpenRewrite v8.81.6
• Use JavaBestPractices in RecipeTestingBestPractices by @​timtebeek in #​67
• Expand OpenRewriteRecipeBestPractices with targeted static analysis and migration recipes by @​timtebeek in #​75

Full Changelog: openrewrite/rewrite-rewrite@v0.24.0...v0.24.3

openrewrite/rewrite-migrate-java (org.openrewrite.recipe:rewrite-migrate-java)

v3.40.0: 3.40.0

Compare Source

What's Changed

• Keep \t and \f escapes in UseTextBlocks to avoid incidental whitespace stripping by @​timtebeek in #​1160
• Skip UseEnumSetOf empty conversion for static fields to avoid circular class-init (#​1157) by @​timtebeek in #​1161
• Skip UseMapOf for LinkedHashMap/TreeMap in the prose put() form (#​1163) by @​timtebeek in #​1165
• Skip AddMockitoJavaAgentToMavenSurefirePlugin when agent already configured in build/plugins by @​timtebeek in #​1166
• Add RedundantUtf8Charset recipe to drop redundant UTF-8 from Files calls by @​timtebeek in #​1167
• Fix Jakarta EE 10 web.xml migration by @​sakshichitnis27 in #​1159

New Contributors

• @​sakshichitnis27 made their first contribution in #​1159

Full Changelog: openrewrite/rewrite-migrate-java@v3.39.0...v3.40.0

v3.39.0: 3.39.0

Compare Source

What's Changed

• Make ExtractExplicitConstructorInvocationArguments templates context-free by @​knutwannheden in #​1140
• Convert Javadoc <br> tags to Markdown line breaks by @​timtebeek in #​1142
• Preserve angle brackets when converting @param <T> to Markdown by @​timtebeek in #​1141
• Fix JavadocToMarkdown's handling of varargs and JDKs newer than the bytecode source/target compatibility by @​sambsnyd in #​1143
• Move ReplaceUnusedVariablesWithUnderscore to Java best practices by @​timtebeek in #​1144
• Extend Use{List,Set,Map}Of to recognise prose-statement chains by @​steve-aom-elliott in #​1145
• Skip UseMapOf when the anonymous HashMap is assigned to a concrete HashMap variable by @​timtebeek in #​1149
• Fix jakarta.enterprise.concurrent-api version for EE9 and EE10 by @​evie-lau in #​1152
• Add recipe to replace jakarta jws-api with ws-api in EE10 by @​evie-lau in #​1151
• Upgrade maven-ejb-plugin alongside jakarta.ejb-api by @​evie-lau in #​1155
• Upgrade maven-ear-plugin for ee9 and ee11 by @​evie-lau in #​1156

Full Changelog: openrewrite/rewrite-migrate-java@v3.38.0...v3.39.0

v3.38.0

What's Changed

• use . instead # for FQN link in Markdown javadoc by @​barbulescu in #​1134
• Bump maven-pmd-plugin to 3.28.x for Java 25 support by @​timtebeek in #​1136
• Explain why Kotlin modules are capped at Java 24 during Java 25 migration by @​timtebeek in #​1137
• Preserve @{argLine} in AddSurefireFailsafeArgLine for JaCoCo coverage by @​timtebeek in #​1138
• Add recipe to extract complex explicit constructor invocation arguments (JEP 513) by @​timtebeek in #​1135
• Bump Kotlin 2.0-2.2 to 2.3 so Kotlin modules can reach Java 25 by @​timtebeek in #​1139

Full Changelog: openrewrite/rewrite-migrate-java@v3.37.0...v3.38.0

v3.37.0: 3.37.0

What's Changed

• Align Kotlin jvmTarget with the Java version during UpgradeJavaVersion by @​MBoegers in #​1120
• Move instance main methods recipe to JavaBestPractices by @​timtebeek in #​1130
• javadoc code tag language is not converted to markdown by @​barbulescu in #​1129
• Contribute AddMockitoJavaAgentToMavenSurefirePlugin Recipe by @​ryan-hudson in #​1128
• Preserve significant trailing space in UseTextBlocks (#​1132) by @​timtebeek in #​1133

New Contributors

• @​barbulescu made their first contribution in #​1129
• @​ryan-hudson made their first contribution in #​1128

Full Changelog: openrewrite/rewrite-migrate-java@v3.36.0...v3.37.0

v3.36.0: 3.36.0

What's Changed

• Move StringFormatted recipe from Java 17 upgrade to Java best practices by @​timtebeek in #​1106
• Skip IfElseIfConstructToSwitch when a trailing non-== null binary check is present by @​timtebeek in #​1109
• Skip UseTextBlocks when literal value matches its source by @​timtebeek in #​1111
• Skip UseMapOf for HashMap subclasses like LinkedHashMap and TreeMap by @​timtebeek in #​1113
• Skip RenameUnderscoreIdentifier on Kotlin and Groovy sources by @​MBoegers in #​1114
• Do not add java.io.IO import in ReplaceSystemOutWithIOPrint by @​timtebeek in #​1118
• fix: do not replace lambda params with underscore when used as assignment target by @​darrencilia in #​1117
• Route WSS4J message.token classes to their real 2.x packages by @​Jenson3210 in #​1122
• Migrate com.sun.xml.bind.marshaller.NamespacePrefixMapper to org.glassfish.jaxb.runtime.marshaller.NamespacePrefixMapper by @​Jenson3210 in #​1121
• Fix RefineSwitchCases generating invalid guard on enum constant labels by @​timtebeek in #​1124
• Skip unparseable Java versions in FindJavaVersion instead of reporting -1 by @​timtebeek in #​1125

New Contributors

• @​darrencilia made their first contribution in #​1117

Full Changelog: openrewrite/rewrite-migrate-java@v3.35.0...v3.36.0

v3.35.0: 3.35.0

What's Changed

• Add java.io.IO import in ReplaceSystemOutWithIOPrint by @​timtebeek in #​1093
• Skip UseMapOf when put() argument is a null literal by @​timtebeek in #​1094
• Migrate JAXB XJC binding files declaring version 2.0/2.1/2.2 by @​MBoegers in #​1098
• Preserve explicit type arguments in MigrateCollections* recipes by @​timtebeek in #​1099
• Route Maven through Moderne Artifactory cache to avoid HTTP 429 by @​Jenson3210 in #​1096
• Load sun.internal.new[Class].jar directly to fix CI test failures by @​timtebeek in #​1101
• Skip explicit type arguments containing wildcards in UseVarForGenericMethodInvocations by @​timtebeek in #​1102
• Skip var when target type inference widens a generic argument by @​timtebeek in #​1103
• Skip IfElseIfConstructToSwitch when instanceof types are missing by @​timtebeek in #​1095
• Revert inline Maven mirror (now in gh-automation#95) by @​Jenson3210 in #​1104
• Aggregate FindJavaVersion to one row per repository by @​timtebeek in #​1105

Full Changelog: openrewrite/rewrite-migrate-java@v3.34.1...v3.35.0

v3.34.1

What's Changed

• OpenRewrite v8.81.6
• Refresh UpdateSdkManTest fixtures after SDKMAN CSV update by @​steve-aom-elliott in #​1073
• Add more static analysis recipes to java-best-practices by @​timtebeek in #​1075
• OpenRewrite recipe best practices by @​timtebeek in #​1074
• Add jspecify hyperlink by @​sullis in #​1076
• Skip var when reassignment relies on declared supertype by @​timtebeek in #​1078
• Keep parentheses when renaming typed lambda parameter to underscore by @​timtebeek in #​1082
• Document null-probing semantic differences in singleton migrations by @​timtebeek in #​1081
• Skip main migration when referenced as static API by @​timtebeek in #​1084
• Skip Immutable*.copyOf rewrite when argument is not a Collection by @​timtebeek in #​1089
• Keep block body when refined switch arm contains an if statement by @​timtebeek in #​1088
• Use Map.ofEntries when migrating more than 10 entries by @​timtebeek in #​1090

Full Changelog: openrewrite/rewrite-migrate-java@v3.34.0...v3.34.1

openrewrite/rewrite-static-analysis (org.openrewrite.recipe:rewrite-static-analysis)

v2.39.0: 2.39.0

Compare Source

What's Changed

• Fix UseStringCaseInsensitiveOrder lambda matching by @​timtebeek in #​933
• Keep (Object) cast on array argument at varargs position by @​timtebeek in #​935
• Python: add Python tests for selected 7 recipes by @​greg-at-moderne in #​929
• Consolidate UseStringCaseInsensitiveOrder into a single Refaster template by @​timtebeek in #​937

Full Changelog: openrewrite/rewrite-static-analysis@v2.38.0...v2.39.0

v2.38.0: 2.38.0

Compare Source

What's Changed

• Fix UseTryWithResources moving resource out of scope for catch block by @​timtebeek in #​921
• Fix MinimumSwitchCases crash on Java 21 sealed-interface pattern switch by @​timtebeek in #​922
• Fix RemoveUnusedPrivateMethods deleting methods called with raw collection arguments by @​habiibullahm in #​898
• Add UseStringCaseInsensitiveOrder by @​steve-aom-elliott in #​923
• Add 7 cross-language code quality recipes by @​jkschneider in #​853
• Fix RemoveRedundantTypeCast removing cast that gives a var lambda its target type by @​timtebeek in #​925
• Tests for Kotlin, Groovy, TS for cross-language code quality recipes by @​greg-at-moderne in #​928
• Add RemoveUnreachableMultiCatchAlternative by @​steve-aom-elliott in #​926
• Use unnamed variable for unused try-with-resources resource on Java 21+ by @​timtebeek in #​930

New Contributors

• @​habiibullahm made their first contribution in #​898

Full Changelog: openrewrite/rewrite-static-analysis@v2.37.0...v2.38.0

v2.37.0: 2.37.0

What's Changed

• Preserve raw supertype cast on parameterized argument in RemoveRedundantTypeCast by @​timtebeek in #​915
• Preserve space when InstanceOfPatternMatch replaces a cast after a keyword by @​timtebeek in #​913
• InstanceOfPatternMatch not to remove double primitive cast by @​greg-at-moderne in #​918
• Fix UseDiamondOperator throwing array index out of bounds when operating on a varargs method by @​sambsnyd in #​919
• Fix false positive in AnnotateNullableParameters when parameter der… by @​stefanodallapalma in #​868

Full Changelog: openrewrite/rewrite-static-analysis@v2.36.0...v2.37.0

v2.36.0: 2.36.0

What's Changed

• Guard instanceof to Class::isInstance conversion on lambda arity by @​timtebeek in #​903
• Preserve cast on argument to overloaded method in RemoveRedundantTypeCast by @​timtebeek in #​904
• Preserve raw cast on parameterized expression in RemoveRedundantTypeCast by @​timtebeek in #​905
• Skip Python sources in CombineSemanticallyEqualCatchBlocks by @​timtebeek in #​908
• Use receiver type for unbound instance method reference in ReplaceLambdaWithMethodReference by @​timtebeek in #​909
• Regenerate recipes.csv by @​timtebeek in #​910
• Retain load-bearing type witness in select position in UnnecessaryExplicitTypeArguments by @​knutwannheden in #​911

Full Changelog: openrewrite/rewrite-static-analysis@v2.35.0...v2.36.0

v2.35.0: 2.35.0

What's Changed

• Document identity-semantics caveat on PrimitiveWrapperClassConstructorToValueOf by @​timtebeek in #​883
• Skip FinalClass when class has anonymous inner subclasses by @​timtebeek in #​886
• Skip ReplaceLambdaWithMethodReference for parameterized types with multiple constructors by @​timtebeek in #​887
• Preserve null cast at varargs position in RemoveRedundantTypeCast by @​timtebeek in #​888
• Retain explicit type arguments on no-arg static methods in UnnecessaryExplicitTypeArguments by @​timtebeek in #​889
• Detect overloads on parameterized receiver in hasMethodOverloading by @​timtebeek in #​890
• Preserve cast on generic method invocation in overloaded outer call by @​timtebeek in #​891
• Guard cast to JavaType.Annotation in ReorderAnnotations by @​timtebeek in #​894
• Strip diamond operator from cast in UseLambdaForFunctionalInterface by @​timtebeek in #​893
• Replace var with interface type in UseLambdaForFunctionalInterface by @​timtebeek in #​896

Full Changelog: openrewrite/rewrite-static-analysis@v2.34.1...v2.35.0

v2.34.1

What's Changed

• OpenRewrite v8.81.6
• Preserve statement order in UseTryWithResources by @​timtebeek in #​866
• Skip meta-annotated @Configuration in FinalClass and HideUtilityClassConstructor by @​timtebeek in #​867
• OpenRewrite recipe best practices by @​timtebeek in #​869
• Revert to using rewrite-java-21 for test runtime by @​timtebeek in #​870
• Preserve casts pinning generic-method return type in lambdas by @​timtebeek in #​872
• Preserve (Object) bridge cast for unchecked generic casts by @​timtebeek in #​876
• Skip Objects::nonNull/isNull when lambda parameter does not match by @​timtebeek in #​875
• Regression tests for ReplaceStackWithDeque ControlFlow crashes by @​knutwannheden in #​879
• Skip SimplifyConsecutiveAssignments when initializer would self-reference by @​timtebeek in #​882

Full Changelog: openrewrite/rewrite-static-analysis@v2.34.0...v2.34.1

spotbugs/spotbugs (com.github.spotbugs:spotbugs)

v4.10.3

Compare Source

Fixed

• Fix LI_LAZY_INIT_STATIC false negative when the null guard is written in yoda-style (null == field) (#​4144)
• Fix DC_DOUBLECHECK, NP_SYNC_AND_NULL_CHECK_FIELD and SP_SPIN_ON_FIELD false negatives when the null guard is written in yoda-style (null == field) (#​4144)
• Fix message for UNS_UNSAFE_CALL bug pattern
• Restore CLI plugin loading by fixing DetectorFactoryCollection bootstrap ordering (#​4191)
• Fix UWF_NULL_FIELD false negative for fields initialized with cast null values (#​4034)
• Fix UMAC_UNCALLABLE_METHOD_OF_ANONYMOUS_CLASS false positive for methods reached only through method references (#​4059)

Changed

• Ant FindBugsViewerTask: use default look and feel by default. (#​4165)

Refactor

• Ant FindBugsViewerTask: extend AbstractFindBugsTask to reduce duplicate code. (#​4165)

v4.10.2

Compare Source

Build

• Add release protection to ensure version released matches the tag and that snapshot has been removed. (#​4156)
• Drop binary incompatible Saxon-HE back to 12.9 to keep java 11 compatibility. (#​4159)
• Add binary check to the gradle build to ensure compatibility remains. (#​4159)

v4.10.1

Compare Source

Build

• 4.10.0 was not released due to a release process error (artifacts were built from a -SNAPSHOT version). 4.10.1 is the corrected release and contains the intended 4.10.0 contents.

google/error-prone (com.google.errorprone:error_prone_core)

v2.50.0: Error Prone 2.50.0

New checks:

• BoxingComparator: Detect implicitly-boxing Comparator.comparing key extractors
• ExposedPrivateType: Discourage references to private member classes from non-private APIs
• JUnitMethodInvoked: Discourage directly invoking JUnit test methods
• ListRemoveAmbiguous: Detect ambiguous calls to List.remove(int|Integer)
• PreferTestParameter: suggests using @TestParameter instead of @TestParameters for exhaustive boolean and enum parameters on single-element parameterized tests
• RecordComponentAccessorAnnotationConflict: Detect conflicts between record components and explicit accessor methods
• RecordComponentOverride: Discourage @Override on record component declarations that don't override
  anything
• ThrowableEqualsHashCode: Discourage overriding Throwable.equals() and hashCode()

Closed issues: #​5553, #​5649, #​5778

Full changelog: google/error-prone@v2.49.0...v2.50.0

spotbugs/spotbugs-gradle-plugin (com.github.spotbugs.snom:spotbugs-gradle-plugin)

v6.5.9

Compare Source

Bug Fixes

• deps: update dependency com.github.spotbugs:spotbugs to v4.10.3 (#​1754) (b19e3cb)

v6.5.8

Compare Source

Bug Fixes

• deps: update dependency androidx.lint:lint-gradle to v1.0.0 (#​1723) (18ee52e)

v6.5.7

Compare Source

Bug Fixes

• fix sonarqube deprecations (#​1726) (b466015)

v6.5.6

Compare Source

Bug Fixes

• deps: update spotbugsversion to v4.10.1 (#​1710) (b0860cb)
• deps: update spotbugsversion to v4.10.2 (#​1711) (5362594)

v6.5.5

Compare Source

Bug Fixes

• deps: update dependency androidx.lint:lint-gradle to v1.0.0-rc01 (#​1689) (ae72aa0)

GradleUp/shadow (com.gradleup.shadow:shadow-gradle-plugin)

v9.6.0

Compare Source

Added

• Extract R8 rules from dependency JARs when using minimize { r8 { ... } }. (#​2089)

Changed

• Rename ShadowDslMarker to ShadowDsl. (#​2091)
• POTENTIALLY BREAKING: Apply @ShadowDsl to ShadowJar, ResourceTransformer, DependencyFilter, and Relocator. (#​2090)
  This restricts nested DSL configuration blocks from implicitly calling outer receiver APIs in Kotlin script files.

Fixed

• Validate ZIP entry names to prevent Zip Slip path traversal.
• Avoid resolving unused R8 dependency. (#​2101)

v9.5.1

Compare Source

Fixed

• Fix eager calls for toolchainSpec in Kotlin DSL. (#​2087)

v9.5.0

Compare Source

Added

• Check DuplicatesStrategy for merging transformers. (#​2026)
  This will log warnings when an incompatible DuplicatesStrategy (e.g., EXCLUDE) is applied in Gradle configuration for built-in ResourceTransformers.
• Add KotlinModuleMetadataTransformer. (#​2073)
• Add R8 as an opt-in minimize { r8 { ... } } tool for shrinking the final shadowed JAR. (#​2077)

Changed

• Bump min Gradle requirement to 9.2.0. (#​2057)
• Remove afterEvaluate when adding variants. (#​2056)
• Deprecate enableKotlinModuleRemapping for ShadowJar. (#​2073)
  Apply KotlinModuleMetadataTransformer explicitly to support relocating inside Kotlin module metadata files.
• Deprecate everything under ShadowCopyAction. (#​2083)

Fixed

• Fix the conflicts when using afterEvaluate with other plugins. (#​2055)

v9.4.3

Compare Source

Changed

• Update dependencies for resolving CVEs. (#​2069)

v9.4.2

Compare Source

Changed

• Update jdependency to support Java 27. (#​2033)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

Branch automerge failure

This PR was configured for branch automerge. However, this is not possible, so it has been raised as a PR instead.

---

• Branch has one or more failed status checks