fix(deps): update dependency com.github.spotbugs:spotbugs-annotations to v4.9.4#2312
Merged
snazy merged 1 commit intoapache:mainfrom Aug 11, 2025
Conversation
renovate-bot
force-pushed
the
renovate/com.github.spotbugs-spotbugs-annotations-4.x
branch
from
7b1c763 to
f0b57bd
Compare
snazy
approved these changes
Aug 11, 2025
github-project-automation
bot
moved this from PRs In Progress
to Ready to merge
in Basic Kanban Board
github-project-automation
bot
moved this from Ready to merge
to Done
in Basic Kanban Board
renovate-bot
deleted the
renovate/com.github.spotbugs-spotbugs-annotations-4.x
branch
snazy
added a commit
to snazy/polaris
that referenced
this pull request
Nov 20, 2025
* Helm Chart: remove duplicate line in authenticationOptions template (apache#2297) * Move python client Makefile into the root level one (apache#2140) * Move python client Makefile into the root level one * Update workflow * add client-lint to pre-commit * Update README.md to include client * fix(deps): update dependency boto3 to v1.40.5 (apache#2300) * fix(deps): update dependency org.assertj:assertj-core to v3.27.4 (apache#2298) * Fix python CI client-integration-test (apache#2305) `CONTAINER_TOOL` got renamed to `DOCKER` in 6764a88 but then eda7074 added more `CONTAINER_TOOL` usage * fix(docs): update BasePolarisAuthenticator to DefaultAuthenticator (apache#2303) * Fix Hadoop federation to initialize the configuration prior to catalog initialization (apache#2282) This PR addresses the gap in Hadoop federation to ensure that we initialize the hadoop configuration prior to initializing the catalog object. The iceberg library expects the hadoop configuration to be initialized before creating a HadoopCatalog object. This change ensures that Polaris is compatible with the underlying iceberg library. Additionally, since the config initialization is based on the underlying (default) core-site.xml file, the change ensures that the federated catalog was created using `IMPLICIT` authentication mode. Testing: Due to current limitations in the current test setup, tested the change manually. [TODO] Add a regtest with hadoop federation once the change is baked into the apache/polaris docker image. * fix(deps): update dependency boto3 to v1.40.6 (apache#2308) * fix(deps): update dependency io.opentelemetry:opentelemetry-bom to v1.53.0 (apache#2309) * Perform force repair when polaris not found (apache#2313) * fix(deps): update dependency com.github.spotbugs:spotbugs-annotations to v4.9.4 (apache#2312) * chore(deps): update dependency pre-commit to v4.3.0 (apache#2311) * fix(deps): update dependency software.amazon.awssdk:bom to v2.32.19 (apache#2314) * fix(deps): update dependency com.gradleup.shadow:shadow-gradle-plugin to v9.0.1 (apache#2310) * Separate Cloud Integration Tests (apache#2283) Currently, cloud integration tests are part of the regular test suite but require cloud credentials to execute properly. This creates unnecessary overhead for developers who just want to run local builds or for CI jobs that don't have cloud access configured. * chore(deps): update actions/checkout action to v5 (apache#2319) * CatalogEntity: internal endpoint not considered (apache#2292) Setting an S3 internal endpoint doesn't work, because the property's not carried over from the OpenAPI model type into `AwsStorageConfigInfo`. * client/python: loosen boto3 dep (apache#2188) It's hard to depend on this package when the boto3 dependency is so strict. * fix(deps): update dependency io.micrometer:micrometer-bom to v1.15.3 (apache#2321) * NoSQL: test adjustment * Last merged commit 45e8e02 --------- Co-authored-by: Alexandre Dutra <[email protected]> Co-authored-by: Yong Zheng <[email protected]> Co-authored-by: Mend Renovate <[email protected]> Co-authored-by: Christopher Lambert <[email protected]> Co-authored-by: Yujiang Zhong <[email protected]> Co-authored-by: Pooja Nilangekar <[email protected]> Co-authored-by: Tamas Mate <[email protected]> Co-authored-by: Tyler Rockwood <[email protected]>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
4.9.3->4.9.4Release Notes
spotbugs/spotbugs (com.github.spotbugs:spotbugs-annotations)
v4.9.4Compare Source
Changed
AnnotationMatchercan now ignore bugs if annotation is also applied on methods or fields. Previously only annotations on classes were considered.LOCAL_VARIABLE_UNKNOWNwith exact method name forNP_NULL_ON_SOME_PATH_FROM_RETURN_VALUE(#3485)Fixed
US_USELESS_SUPPRESSION_ON_*on methods, fields, parameters, packages or classes with an*.Generatedannotation with retention >= class (#3350)(#3409)ResourceValueFrame.javato Enum (#2061)FS_BAD_DATE_FORMAT_FLAG_COMBO(#3387)FindNoSideEffectMethodsdetector (#3320)RV_RETURN_VALUE_IGNORED_NO_SIDE_EFFECTwhen part of a MockitodoAnswer(),doCallRealMethod(),doNothing(),doThrow()ordoReturn()call (#3334)CT_CONSTRUCTOR_THROWfalse positive with public and private constructors in specific order of methods (#3417)AT_NONATOMIC_OPERATIONS_ON_SHARED_VARIABLE,AT_NONATOMIC_64BIT_PRIMITIVEandAT_STALE_THREAD_WRITE_OF_PRIMITIVEFP when the relevant code is in private method, which is only called with proper synchronization (#3428)RV_RETURN_VALUE_IGNORED_NO_SIDE_EFFECTwhen part of a BDDMockito call (#3441)AT_NONATOMIC_OPERATIONS_ON_SHARED_VARIABLEwhen field of a local variable is set. (#3459)AT_NONATOMIC_OPERATIONS_ON_SHARED_VARIABLEFP when there was no compound operation (#3363)NM_FIELD_NAMING_CONVENTIONcrash in the TestASM detector (#3489)UWF_FIELD_NOT_INITIALIZED_IN_CONSTRUCTORfor fields initialized in JUnit 3/4setUp()method. (#3169)US_USELESS_SUPPRESSION_ON_FIELD/UUF_UNUSED_FIELDfalse positive (#3496)TextUICommandLinesupports all options encoded in Eclipse preferences file (#3520)NoSuchElementExceptionwhenhasNext()returns true (#3501)DMI_INVOKING_TOSTRING_ON_ARRAYon newer JDK (#1147)NP_NULL_ON_SOME_PATH_FROM_RETURN_VALUEfalse positive withObjects.requireNonNull(#2965) (#3573)SF_SWITCH_NO_DEFAULTfalse positive fix (#1148) (#3572)Added
US_USELESS_SUPPRESSION_ON_*messages (#3395)@NotThreadSafe(#3390)CWO_CLOSED_WITHOUT_OPENEDfor locks that might be released without even being acquired. (See SEI CERT rule LCK08-J) (#2055)ResourceValueFrame.DMI_MISLEADING_SUBSTRINGfor callingsubString(0)on a StringBuffer/StringBuilder (#1928)Signing
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.