Skip to content

Comments

Bump com.github.spotbugs:spotbugs-maven-plugin from 4.8.3.1 to 4.9.8.1#448

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/maven/com.github.spotbugs-spotbugs-maven-plugin-4.9.8.1
Closed

Bump com.github.spotbugs:spotbugs-maven-plugin from 4.8.3.1 to 4.9.8.1#448
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/maven/com.github.spotbugs-spotbugs-maven-plugin-4.9.8.1

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 12, 2025 •
edited
Loading

Bumps com.github.spotbugs:spotbugs-maven-plugin from 4.8.3.1 to 4.9.8.1.

Release notes

Sourced from com.github.spotbugs:spotbugs-maven-plugin's releases.

Spotbugs Maven Plugin 4.9.8.1

Bug fix with SpotbugsInfo.EOF error (was meant to be SpotbugsInfo.EOL).

Spotbugs Maven Plugin 4.9.8.0

Bug fix release supporting spotbugs 4.9.8.

Spotbugs Maven Plugin 4.9.7.0

Spotbugs Maven Plugin 4.9.6.0

  • Supports spotbugs 4.9.6
  • note: 4.9.5 had a defect with detection of jakarta in servlets that was unexpected and quickly patched for this release.

Spotbugs Maven Plugin 4.9.5.0

  • Support spotbugs 4.9.5

Spotbugs Maven Plugin 4.9.4.2

Consumer

  • Add support for 'chooseVisitors'
  • Minor code cleanup
  • Still supports spotbugs 4.9.4

Producer

  • Remove add opens from jvm.config as no longer needed

Spotbugs Maven Plugin 4.9.4.1

Consumer

  • Cleanup readme to better support plugin
  • Dropped direct usage of plexus utils and commons io
  • Groovy 5 now run engine
  • Correct issue since 4.9.2.0 resulting in most runs getting spotbugs.html file incorrectly. This has been refactored to restore doxia 1 overrides to produce xml report only when not running in site lifecycle
  • Correct defects with handling of various files on disk such as exclusion filters that were introduced into 4.9.4.0. Integration tests have been applied to prevent future regression.
  • Commons io fileutils replaced by files.walk with detailed output moved to debug collection only rather than all runs
  • Normalization of path to linux style
  • Any regex usage is now precompiled
  • Use re-entrant lock for source indexer
  • Correct locale usage to use default if not given
  • Block doctype and XXE when processing xml files
  • Cleanup some fields from resources and in code never used

Producer

  • Pin versions of github actions tools
  • Run maven 3.6.3 integration test on windows to get more broad support
  • Run maven integration test on mac to get more broad support
  • Maven 4 integration tests will continue on linux
  • Fix maven wrapper perceived path traversal issue
  • Corrections to invoker to re-establish integration test verification's
  • Fix bugs in integration tests

... (truncated)

Commits
  • 8eb6aa9 [maven-release-plugin] prepare release spotbugs-maven-plugin-4.9.8.1
  • 4ff769f Fix: Correct reported issue with 'EOF' where it should be 'EOL'
  • c210782 Merge pull request #1241 from spotbugs/renovate/execpluginversion
  • 662fa1e Update dependency org.codehaus.mojo:exec-maven-plugin to v3.6.2
  • 8cd9648 [maven-release-plugin] prepare for next development iteration
  • d8d4c69 [maven-release-plugin] prepare release spotbugs-maven-plugin-4.9.8.0
  • 52cdf26 [ci] Add note about pom entries to update for testing upstream master
  • 9b8e387 [pom] Prepare for 4.9.8 release
  • 0a8ac5a Merge pull request #1238 from spotbugs/renovate/github-codeql-action-digest
  • 4b02d8d Merge pull request #1240 from spotbugs/renovate/spotbugs.version
  • Additional commits viewable in compare view

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Nov 12, 2025
@dependabot dependabot bot mentioned this pull request Nov 12, 2025
Closed
cx-pedro-lopes
cx-pedro-lopes previously approved these changes Nov 12, 2025
View reviewed changes
@cx-ben-alvo
Copy link
Collaborator

cx-ben-alvo commented Nov 12, 2025 •
edited
Loading

Logo
Checkmarx One – Scan Summary & Details – f310017d-19ae-451e-a29f-56c92ed2fb2a

Great job! No new security vulnerabilities introduced in this pull request

Use @Checkmarx to reach out to us for assistance.

Just send a PR comment with @Checkmarx followed by a natural language request.

Examples: @Checkmarx how are you able to help me? @Checkmarx rescan this PR

@dependabot dependabot bot force-pushed the dependabot/maven/com.github.spotbugs-spotbugs-maven-plugin-4.9.8.1 branch from f5d0345 to 042d25c Compare November 20, 2025 19:01
@dependabot
Bump com.github.spotbugs:spotbugs-maven-plugin from 4.8.3.1 to 4.9.8.1
3f0e8d4 
Bumps [com.github.spotbugs:spotbugs-maven-plugin](https://github.com/spotbugs/spotbugs-maven-plugin) from 4.8.3.1 to 4.9.8.1.
- [Release notes](https://github.com/spotbugs/spotbugs-maven-plugin/releases)
- [Commits](spotbugs/spotbugs-maven-plugin@spotbugs-maven-plugin-4.8.3.1...spotbugs-maven-plugin-4.9.8.1)

---
updated-dependencies:
- dependency-name: com.github.spotbugs:spotbugs-maven-plugin
  dependency-version: 4.9.8.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/maven/com.github.spotbugs-spotbugs-maven-plugin-4.9.8.1 branch from 042d25c to 3f0e8d4 Compare December 1, 2025 21:07
auto-merge was automatically disabled February 13, 2026 10:41

Pull request was closed

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Feb 13, 2026

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot dependabot bot deleted the dependabot/maven/com.github.spotbugs-spotbugs-maven-plugin-4.9.8.1 branch February 13, 2026 10:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@cx-pedro-lopes cx-pedro-lopes cx-pedro-lopes approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@cx-ben-alvo @cx-pedro-lopes @cx-anurag-dalke