deps(deps): bump com.uber.nullaway:nullaway from 0.12.7 to 0.13.8

[dependabot]

Bumps com.uber.nullaway:nullaway from 0.12.7 to 0.13.8.

Release notes

Sourced from com.uber.nullaway:nullaway's releases.

NullAway 0.13.8

Mostly minor bug fixes. Note that NullAway now treats Map.remove as returning @Nullable (#1623), which may lead to newly-reported warnings.

• Quote syntax element references in error messages by @​AryamannSingh7 (#1620)
• Fix stream nullability propagation through sorted() (Fixes #1538) by @​dyrpsf (#1610)
• Add support for reactor by @​subhramit (#1599)
• Fix issue with passing poly expression to a function parameter with type from library model (#1614)
• Fix crash with library model @​Nullable being applied to wildcard (#1615)
• Add more modeling for Optional (#1613)
• Update lombok section at README.md by @​jevanlingen (#1624)
• Model Map.remove as nullable by @​codingkiddo (#1623)
• Better support for conditional expressions in JSpecify mode (#1608)
• Fix issue with reading annotations on record constructor parameters due to javac bug (#1636)
• Maintenance
  • Update to Gradle 9.6.1 and AGP 9.3.0 (#1634)

NullAway 0.13.7

This is a minor bug fix release addressing a couple of issues observed in 0.13.6.

• Add support for filtering null objects from streams in #1597
• Report init warnings for JPA constructors with arguments in #1604
• Maintenance
  • Update release instructions in #1593
  • Switch code coverage aggregation to use built-in jacoco plugin by @​subhramit in #1598
  • Bump Error Prone to 2.50.0 in #1601

NullAway 0.13.6

(NOTE: originally these notes appeared with the 0.13.5 release, but that release was pushed incorrectly due to an error in our release process.)

Includes various bug fixes, particularly in JSpecify mode. Also, the nullaway-annotations artifact now includes a @Contract annotation. NullAway also now has a built-in handler to reason about field initialization in classes managed by Jakarta Persistence.

Work has begun on support for wildcards in JSpecify mode. Currently, this support is off by default, guarded by the configuration flag HandleWildcardGenerics. The support still has multiple known bugs, and we do not yet recommend enabling it.

• Initial subtype checking for wildcards (#1520)
• Handle subtype checking for wildcard super bounds (#1547)
• Handle most remaining wildcard subtyping / containment cases (#1548)
• Test case for #1528 (#1556)
• Initial inference for wildcards (#1549)
• Fix wildcard inference bug with method references (#1553)
• Fix nullability for return and parameter wildcards (#1558)
• Test case for trick to assert chain of accesses is non-null (#1566)
• Improve inference failure error message (#1567)
• Adjust more TreePaths to have correct leaf before calling getTreeType (#1570)
• Add Contract annotation to nullaway-annotations by @​codingkiddo (#1569)

... (truncated)

Changelog

Sourced from com.uber.nullaway:nullaway's changelog.

Version 0.13.8

Mostly minor bug fixes. Note that NullAway now treats Map.remove as returning @Nullable (#1623), which may lead to newly-reported warnings.

• Quote syntax element references in error messages by @​AryamannSingh7 (#1620)
• Fix stream nullability propagation through sorted() (Fixes #1538) by @​dyrpsf (#1610)
• Add support for reactor by @​subhramit (#1599)
• Fix issue with passing poly expression to a function parameter with type from library model (#1614)
• Fix crash with library model @​Nullable being applied to wildcard (#1615)
• Add more modeling for Optional (#1613)
• Update lombok section at README.md by @​jevanlingen (#1624)
• Model Map.remove as nullable by @​codingkiddo (#1623)
• Better support for conditional expressions in JSpecify mode (#1608)
• Fix issue with reading annotations on record constructor parameters due to javac bug (#1636)
• Maintenance
  • Update to Gradle 9.6.1 and AGP 9.3.0 (#1634)

Version 0.13.7

This is a minor bug fix release addressing a couple of issues observed in 0.13.6.

• Add support for filtering null objects from streams in #1597
• Report init warnings for JPA constructors with arguments in #1604
• Maintenance
  • Update release instructions in #1593
  • Switch code coverage aggregation to use built-in jacoco plugin by @​subhramit in #1598
  • Bump Error Prone to 2.50.0 in #1601

Version 0.13.6

(NOTE: originally these notes appeared with the 0.13.5 release, but that release was pushed incorrectly due to an error in our release process.)

Includes various bug fixes, particularly in JSpecify mode. Also, the nullaway-annotations artifact now includes a @Contract annotation. NullAway also now has a built-in handler to reason about field initialization in classes managed by Jakarta Persistence.

Work has begun on support for wildcards in JSpecify mode. Currently, this support is off by default, guarded by the configuration flag HandleWildcardGenerics. The support still has multiple known bugs, and we do not yet recommend enabling it.

• Initial subtype checking for wildcards (#1520)
• Handle subtype checking for wildcard super bounds (#1547)
• Handle most remaining wildcard subtyping / containment cases (#1548)
• Test case for #1528 (#1556)

... (truncated)

Commits

• 23d726c Prepare for release 0.13.8.
• de0d37b Release notes for 0.13.8 (#1638)
• 78d9994 Fix issue with reading annotations on record constructor parameters due to ja...
• 43a78f3 Better support for conditional expressions in JSpecify mode (#1608)
• b2e8461 Update to Gradle 9.6.1 and AGP 9.3.0 (#1634)
• 77726c5 Model Map.remove as nullable (#1623)
• addfe41 Update lombok section at README.md (#1624)
• f40a9fa Add more modeling for Optional (#1613)
• 98096d7 Fix crash with library model @​Nullable being applied to wildcard (#1615)
• 1bd0612 Fix issue with passing poly expression to a function parameter with type from...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Labels

The following labels could not be found: dependencies, java. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[github-actions]

⚠️ Deprecation Warning: The deny-licenses option is deprecated for possible removal in the next major release. For more information, see issue 997.

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Scanned Files

None