[renovate-bot]

This PR contains the following updates:

Package	Change	Age	Confidence
com.google.errorprone:error_prone_core (source)	2.50.0 → 2.52.0
org.codehaus.mojo:build-helper-maven-plugin (source)	3.6.2 → 3.8.0
org.codehaus.mojo:exec-maven-plugin (source)	3.6.4 → 3.7.0
com.diffplug.spotless:spotless-maven-plugin	3.10.3 → 3.11.0
org.apache.maven.plugins:maven-failsafe-plugin (source)	3.6.0 → 3.6.1
org.apache.maven.plugins:maven-surefire-plugin (source)	3.6.0 → 3.6.1

---

Release Notes

google/error-prone (com.google.errorprone:error_prone_core)

v2.52.0: Error Prone 2.52.0

New checks:

• AlmostExhaustiveTestParameter: Prefer an exhaustive @TestParameter with an assumption to filter out specific enum values, so newly added enum values are automatically tested (disabled by default).
• SingleTestParameter: Suggest @TestParameter on the parameter instead of @TestParameters when there is only one test parameter, replacing PreferTestParameter (disabled by default).
• SingleValueTestParameter: Suggest replacing a @TestParameter that has only a single value with a local variable in the test method (disabled by default).
• ValueClassEquals: Require non-record concrete value classes to explicitly override equals and hashCode.

Other changes:

• LoopToTestParameter: Changed severity to SUGGESTION (disabled by default).
• DistinctVarargsChecker: Allow duplicate arguments to Iterables.concat (#​6239) and Mockito argument matchers such as any() (#​6240).
• UnusedVariable: Treat fields accessed via MethodHandles.Lookup (VarHandle/getter/setter lookups) or Atomic*FieldUpdater.newUpdater as used.
• StringBuilderInitWithChar / StringBuffer refactoring: Refactor StringBuffer to StringBuilder even when used with Matcher.appendReplacement and appendTail (when supported by the target JDK or Android minSdkVersion).
• CompileTimeConstant: Treat record and interface fields and field accesses on compile-time constants (compileTimeConstant.compileTimeConstantField) as compile-time constants.
• ValueClassIdentity / ReferenceEquality: Handle JEP 401 value classes.
• FieldCanBeFinal / ThreadSafety: Improve compile-time performance on large classes and deep type hierarchies, and update SafeRE to 1.1.0 (#​6230).
• Added ClassName for caching resolved ClassSymbol, Type, and binary Name lookups across a compilation.

Closed issues: #​5964, #​6165, #​6230, #​6239, #​6240, #​6275

Full changelog: google/error-prone@v2.51.0...v2.52.0

v2.51.0: Error Prone 2.51.0

New checks:

• HashCodeInObjectsHash: Detect redundant hashCode() or Objects.hash() calls inside Objects.hash(...), and simplify single-argument Objects.hash(x) calls to Objects.hashCode(x).
• LoopToTestParameter: Suggest migrating loops in unit tests to TestParameterInjector.
• MissingJavadoc: Flag public types that are missing Javadoc comments (disabled by default).
• PreferCharsetOverload: Prefer calling method and constructor overloads that accept a Charset over those that accept a String encoding name.
• PreferPreconditions: Suggest using Guava's Preconditions instead of explicit if-throw statements for parameter validation (disabled by default).
• RequireNonNullRefactoring: Refactor explicit if (x == null) { throw new NullPointerException(...); } checks to Objects.requireNonNull (disabled by default).
• SimplifyTestParameter: Remove redundant explicit value lists on @TestParameter annotations for boolean and Enum types when all values are specified (disabled by default).
• TraditionalJavadocToMarkdown: Convert traditional /** ... */ Javadoc comments into /// Markdown Javadoc comments (disabled by default).
• ValueClassIdentity: Flag reliance on identity semantics (such as synchronization, WeakReference, IdentityHashMap, or System.identityHashCode) of value-based classes (disabled by default).

Other changes:

• CompareToZero: Upgraded from warning to error, and expanded to flag non-relational operations, unary negation, and switch statements/expressions on compareTo and compare results without Integer.signum.
• IfChainToSwitch: Enabled by default as a warning.
• UndefinedEquals: Merged ArrayAsKeyOfSetOrMap and CollectionUndefinedEquality into UndefinedEquals (retaining their names as altNames), and generalized detection of types without well-defined equals or hashCode across direct equality, collection containment, and hash-based containers.
• EqualsIncompatibleType / TruthIncompatibleType: Flag equality comparisons between distinct record types (#​6107).
• ReferenceEquality: Allow == comparisons on private classes whose type hierarchy does not override Object.equals (#​5865), private static final sentinel fields, Thread (#​5900), and com.sun.source.tree.Tree.
• PatternMatchingInstanceof: Support while and for loops, parenthesized expressions (#​5843), and replacing additional redundant casts when the instanceof already introduces a pattern variable.
• DistinctVarargsChecker: Expanded to check Objects.hash, CompletableFuture.allOf/anyOf, EnumSet.of, Sets.union/intersection/difference, Stream.concat, Math.min/max, and additional JDK, Guava, Protobuf, Truth, and Mockito methods.
• MustBeClosedChecker: Require java.lang.foreign.Arena.ofConfined and Arena.ofShared to be closed.
• ImpossibleNullComparison: Flag null checks on the return value of Class.forName.
• RestrictedApi / RestrictedInheritance: Added an allowedPaths attribute to allow calls or inheritance from matching file paths without a regular expression.
• InlineMeInliner: Support substituting type arguments at call sites when inlining generic @InlineMe methods.
• WellKnownKeep: Recognize Apache Beam DoFn annotations and retain open-source library annotations (Gson, Mockito, Guice, Objectify, TestParameterInjector, AutoFactory).
• Per-check timing collection is now disabled by default, reducing Error Prone compile-time overhead by ~3–5%; pass -XepPrintTimings to print a timing report after compilation or -XepRecordTimings to record timings programmatically (#​6079).
• CompilationTestHelper now reports all lines with mismatched diagnostic expectations in a single test run rather than failing on the first mismatch (#​6116).
• Replaced the RE2/J dependency with SafeRE.

Closed issues: #​4914, #​5182, #​5843, #​5857, #​5865, #​5878, #​5900, #​6029, #​6079, #​6107, #​6116, #​6133

Full changelog: google/error-prone@v2.50.0...v2.51.0

mojohaus/build-helper-maven-plugin (org.codehaus.mojo:build-helper-maven-plugin)

v3.8.0

Compare Source

Build Helper Maven Plugin 3.8.0 lets regex-property and regex-properties apply several regex replacements in order, and quiets the log when a non-match is allowed. The requirements are unchanged: Maven 3.9.0 or later, Java 8.

✨ Highlights

• Ordered regex replacements. The new replacements list of regex/replacement pairs works in regex-property and in each regexPropertySetting of regex-properties. Each pair applies to the result of the previous one, so a single property can go through several rewrites. It cannot be combined with regex/replacement, which work as before (#​277, #​77 by @​JonathanLennox; also covers #​236 by @​donatelloOo).
• Quieter non-matches. With failIfNoMatch set to false, a non-match is expected, so it is now logged at debug level instead of info (#​278, #​152 by @​garretwilson).
• Documentation moved from APT to Markdown (#​271).

🚀 New features and improvements

• Log a tolerated regex non-match at debug level (#​278) @​slachiewicz
• Add ordered regex replacements to regex-property (#​277) @​slachiewicz

📝 Documentation updates

• Convert the site documents from APT to Markdown (#​271) @​slachiewicz

👻 Maintenance

• Configure the mojo unit tests through the plugin testing harness (#​276) @​slachiewicz
• Test the regex goals' outcomes in unit tests (#​275) @​slachiewicz
• Test the uptodate goals' mappers in unit tests (#​274) @​slachiewicz
• Test the add goals' skip parameters in unit tests (#​273) @​slachiewicz

🔧 Build

• Reuse the cached prefix file in the integration tests (#​272) @​slachiewicz

Thanks to @​slachiewicz.

Full changelog

v3.7.0

Compare Source

Build Helper Maven Plugin 3.7.0 adds system time zone support to timestamp-property, literal replacement support to regex-property and regex-properties, and updates the remove-project-artifact deprecation guidance. It requires Maven 3.9.0 or later and Java 8 or later.

✨ Highlights

• System time zone in timestamp-property: Setting <timeZone>system</timeZone> (case-insensitive) formats the timestamp using the JVM's default time zone instead of GMT, working with both current and build time sources (#​250).
• Literal replacement mode in regex-property and regex-properties: Setting <replacementLiteral>true</replacementLiteral> treats backslashes (\) and dollar signs ($) in <replacement> as literal characters rather than regex group references or escapes — particularly useful when substituting Windows file paths such as ${project.build.directory} (#​249).
• Updated remove-project-artifact deprecation guidance: The documentation for the deprecated remove-project-artifact goal now points users to Maven Resolver's split local repository feature (-Daether.enhancedLocalRepository.split) as the modern alternative (#​268, #​270).

🚨 Removed

• Require Maven 3.9.0 (#​257) @​slachiewicz

🚀 New features and improvements

• Support the system time zone in timestamp-property (#​250) @​wilx
• Add literal replacement support to regex property goals (#​249) @​wilx

📝 Documentation updates

• Point the remove-project-artifact deprecation at split local repositories (#​268, #​270) @​slachiewicz
• Add AGENTS.md (#​263) @​slachiewicz

👻 Maintenance

• Run the surefire IT fixture on JUnit 5 (#​269) @​slachiewicz
• Replace deprecated @​Component with JSR 330 injection (#​267) @​slachiewicz
• Check the reserved ports' guarantees, not exact numbers (#​265) @​slachiewicz
• Apply the JUnit 5 best practices to the tests (#​261) @​slachiewicz
• Keep Dependabot on Maven 3.9.x (#​259) @​slachiewicz
• Write the regex and timestamp verify scripts as assertions (#​258) @​slachiewicz
• Port the IT scripts from BeanShell to Groovy (#​251) @​slachiewicz

🔧 Build

• Preload the lifecycle plugins of the Central-backed ITs (#​264) @​slachiewicz
• Use the runners' cached Temurin JDKs in CI (#​262) @​slachiewicz
• Run CI on Maven 4 (#​260) @​slachiewicz
• Assign merged pull requests to the release milestone (#​255) @​slachiewicz
• Point the released-version ITs at the URL the build uses for central (#​256) @​slachiewicz
• Run one integration test per CPU core (#​254) @​slachiewicz
• Check dependencies monthly and group the updates (#​253) @​slachiewicz
• Run fewer JDKs on macOS and Windows and the ITs in parallel (#​252) @​slachiewicz

Thanks to @​slachiewicz and @​wilx.

Full changelog

mojohaus/exec-maven-plugin (org.codehaus.mojo:exec-maven-plugin)

v3.7.0

Compare Source

Exec Maven Plugin 3.7.0 raises the minimum Maven version to 3.9.0, adds three long-requested exec:java options, and fixes a batch of old bugs in how commands and Java programs are started. Java 8 is still enough to run it. Builds on Maven 3.6.3 to 3.8.x must stay on 3.6.4.

✨ Highlights

• Maven 3.9.0 or later is required (#​548). Older Maven versions fail at startup with a prerequisite error.
• classpathDependencyExcludes removes chosen dependencies from the class path of exec:java and exec:exec (#​562, requested in #​68 by @​pramodanarase).
• mainClass from the manifest. When executableDependency is set and mainClass is not, the Main-Class attribute of that dependency's manifest is used (#​563, #​89 by @​sewe).
• keepClassLoaderOpen leaves the exec:java class loader open after the program returns, so shutdown hooks and background threads can still load classes (#​561, #​513 by @​tzaeschke).
• exec:java threading. The main class runs in a non-daemon bootstrap thread that the plugin waits for, so IDE builds such as m2e no longer interrupt it (#​572, #​526 by @​sbj42). A program's own UncaughtExceptionHandler now receives its uncaught exceptions (#​569, #​141 by @​dedeibel).
• exec:exec fixes. async together with outputFile keeps the output file open until the process ends (#​565, #​63 by @​tarioch). A relative executable resolves against workingDirectory again (#​567, #​92 by @​deepakab03). Unquoted line breaks and tabs in commandlineArgs count as spaces instead of creating empty arguments (#​571, #​466 by @​cebaa). A failed command logs its message at error level and keeps the stack trace for -X (#​568).
• Module path. Resource directories stay off the module path (#​560, #​534 by @​inaldt), and the %modulepath token is handled (#​532 by @​pzygielo).
• Documentation moved from APT to Markdown, and the module path argument file is now documented (#​557, #​566).

🚨 Removed

• Require Maven 3.9.0 (#​548) @​slachiewicz

🚀 New features and improvements

• Add keepClassLoaderOpen to exec:java (#​561) @​slachiewicz
• Add classpathDependencyExcludes (#​562) @​slachiewicz
• Read mainClass from the executableDependency manifest (#​563) @​slachiewicz

🐛 Bug Fixes

• Log only the message of a failed command at error level (#​568) @​slachiewicz
• Pass uncaught exceptions to the handlers of the program (#​569) @​slachiewicz
• Resolve a relative executable against the working directory (#​567) @​slachiewicz
• Treat unquoted line breaks and tabs in the arguments as spaces (#​571) @​slachiewicz
• Run the main class in a non-daemon bootstrap thread (#​572) @​slachiewicz
• Keep the output file open for asynchronous executions (#​565) @​slachiewicz
• Keep resource directories off the module path (#​560) @​slachiewicz
• Handle %modulepath token (#​532) @​pzygielo

📝 Documentation updates

• Document the module path argument file (#​566) @​slachiewicz
• Convert the site documents from APT to Markdown (#​557) @​slachiewicz
• Add AGENTS.md (#​552) @​slachiewicz

👻 Maintenance

• Ignore JVM option notices in the mexec-86 output check (#​564) @​slachiewicz
• Declare the Maven artifacts the code uses (#​553) @​slachiewicz
• Remove redundant mojo.java.target property (#​554) @​slachiewicz
• Keep Dependabot on Maven 3.9.x (#​550) @​slachiewicz
• Keep plexus-xml on 3.x in Dependabot (#​541) @​slachiewicz

🔧 Build

• Resolve the heaviest plugins of setup-parent in the main build (#​559) @​slachiewicz
• Reuse the cached prefix file in the integration tests (#​558) @​slachiewicz
• Use the runners' cached Temurin JDKs in CI (#​551) @​slachiewicz
• Serve the plexus-utils fixture dependency from a mock repository (#​549) @​slachiewicz
• Assign merged pull requests to the release milestone (#​547) @​slachiewicz
• Check dependencies monthly and group the updates (#​546) @​slachiewicz
• Run fewer JDKs on macOS and Windows and the ITs in parallel (#​545) @​slachiewicz
• Keep Dependabot off Mockito 5 (#​543) @​slachiewicz

📦 Dependency updates

• Bump the maven group with 4 updates (#​555) @​dependabot[bot]
• Bump asm.version from 9.10.1 to 9.11 (#​544) @​dependabot[bot]
• Bump org.codehaus.plexus:plexus-xml from 3.0.1 to 3.1.0 (#​542) @​dependabot[bot]
• Bump org.codehaus.plexus:plexus-utils from 3.0.24 to 3.6.1 in /src/it/projects/modulepath-from-cli (#​539) @​dependabot[bot]
• Keep plexus-xml on 3.x in Dependabot (#​541) @​slachiewicz

Thanks to @​pzygielo and @​slachiewicz.

Full changelog

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.