Bump spotbugs-annotations from 4.0.2 to 4.2.3

[dependabot]

Bumps spotbugs-annotations from 4.0.2 to 4.2.3.

Release notes

Sourced from spotbugs-annotations's releases.

SpotBugs 4.2.3

CHANGELOG

• https://github.com/spotbugs/spotbugs/blob/4.2.3/CHANGELOG.md

CHECKSUM

file	checksum (sha256)
spotbugs-4.2.3-javadoc.jar	af6c914147a905ab3f005e3d4fc648dee8a43db257add100880fdf5a6df192d4
spotbugs-4.2.3-sources.jar	402c3719be17797cdac702d3fdfd54667242870270dd5593d1ea2b35c9719ebc
spotbugs-4.2.3.tgz	58aebdef157dea61a4a92dd872a54725d052f82e8cae057e9714403d5d403291
spotbugs-4.2.3.zip	86a63ca9aeaeb3ed013a48bdb879a052dff35f1f7049dc0607569292b8bf7fb3
spotbugs-annotations-4.2.3-javadoc.jar	2ae44e915d95c92adbda4c982ee97454472ea06e9422cb4f52bb8ab862a7e9c2
spotbugs-annotations-4.2.3-sources.jar	b338136e3e82d585348cde58a8fe3a678e16f51a35c31c1463e05fefef557aad
spotbugs-annotations.jar	2c84c2e379bfc173720c4e993b648f2b98339c47d17c46850f3c1c227fc17f78
spotbugs-ant-4.2.3-javadoc.jar	f1c1d4c5281944c90af104ea0333fee1473a709f7e2cc42eb12615c5bb2659b2
spotbugs-ant-4.2.3-sources.jar	c74dec42c0ed0dd1ae02a7410d8e0f0dbbee23e8e7da4a21910863677fcdbc8e
spotbugs-ant.jar	9233e48d37882ae4e7a42e9f42ef4c63d6f802cf8f3b03ba575bee26e5032367
spotbugs.jar	f13a9d0e8f64d7b0f1aa1252a01de0a1de70f74bfc6972549a8e6a04acde6360
test-harness-4.2.3-javadoc.jar	00fd4a2e5f7d1ecfb3a682477e3e102dca47738d8f8d73eb61be5dbe20471e8a
test-harness-4.2.3-sources.jar	2c1f5ef929453f3b682c7eb7c1e22db3082b5f74c5a5be439be5dc31dd7a31aa
test-harness-4.2.3.jar	55d3a590b81ffec48293a76c45c0695914b405bf9f02bfb930e3ab99b5867d4f
test-harness-core-4.2.3-javadoc.jar	090d963c3c9a130d465958d98d9f2945919d24419194c12a497fb83bc146f15a
test-harness-core-4.2.3-sources.jar	f320f5eb4069e9686b760b2a6a0760989753225f9e9ce1226e3258ec64795d8a
test-harness-core-4.2.3.jar	cbec03867e077079d011e85f9932fb230fae3d909f741cffaa4c8097e91fdf40
test-harness-jupiter-4.2.3-javadoc.jar	2473acd3ee25cfbebd4c5d68d022d1d4e8b91f1ba8eb4019d029f2c2a709d03f
test-harness-jupiter-4.2.3-sources.jar	210353a57016e26b1a654d936a15f039613fa1ac532d485c1b1d03902f6c6315
test-harness-jupiter-4.2.3.jar	17e8d78d1868f86e63f3e5e3d878e86f3d7fb1b8cf1a8d5f893333c982bfd3e2

SpotBugs 4.2.2

CHANGELOG

• https://github.com/spotbugs/spotbugs/blob/4.2.2/CHANGELOG.md

CHECKSUM

file	checksum (sha256)
spotbugs-4.2.2-javadoc.jar	eefe6f33309c4a92e3ebb8c18920b78d0e04dea4d93c45a8266f1341d61bf55b
spotbugs-4.2.2-sources.jar	046486ae3e1566df35f55d031f0972a35a192e9b7a6833dfd0199099357d4560
spotbugs-4.2.2.tgz	4967c72396e34b86b9458d0c34c5ed185770a009d357df8e63951ee2844f769f
spotbugs-4.2.2.zip	fbbfca013d11dfecd8b5fb6aa9f3d3f1b6a2689e5a1cd93afe4ffd99de7a8505
spotbugs-annotations-4.2.2-javadoc.jar	f8371fc3c7ce0504f4bc7922f27e5d2e1174165fe0ff7714e19e2eaf0a475187
spotbugs-annotations-4.2.2-sources.jar	b338136e3e82d585348cde58a8fe3a678e16f51a35c31c1463e05fefef557aad
spotbugs-annotations.jar	5657c480a31883cf3fc6d12e6ae522c9fcc9a6303b45939ee42ca2e0ccf4ed04
spotbugs-ant-4.2.2-javadoc.jar	4234f84ceb71fed02c5dfca7b8a8b33163c9f327b106f66e0bf8bf46e03ef0fc

SpotBugs 4.2.1

CHANGELOG

• https://github.com/spotbugs/spotbugs/blob/4.2.1/CHANGELOG.md

... (truncated)

Changelog

Sourced from spotbugs-annotations's changelog.

4.2.3 - 2021-04-12

Fixed

• Inconsistency in the description of DLS_DEAD_LOCAL_INCREMENT_IN_RETURN, VO_VOLATILE_INCREMENT and QF_QUESTIONABLE_FOR_LOOP (#1470)
• Should issue warning for SecureRandom object created and used only once (#1464)
• False positive OBL_UNSATIFIED_OBLIGATION with try with resources (#79)
• SA_LOCAL_SELF_COMPUTATION bug (#1472)
• False positive EQ_UNUSUAL with record classes (#1367)

4.2.2 - 2021-03-03

Fixed

• UWF_NULL_FIELD doesn't report line number (#1368)
• UnsupportedOperationException in BugRanker.trimToMaxRank (#1161)

Changed

• Bump ASM from 9.0 to 9.1 supporting JDK17
• Bump commons-lang from 3.11 to 3.12.0
• Replace org.json:json:20201115 with com.google.code.gson:gson:2.8.6

4.2.1 - 2021-02-04

Fixed

• Invalid HTML in the description of LI_LAZY_INIT_UPDATE_STATIC bug pattern (#1383)
• NP_NONNULL_PARAM_VIOLATION false-positive in CompletableFuture.completedStage(value) (#1397)

Changed

• Bump json from 20200518 to 20201115 (#1384)

4.2.0 - 2020-11-28

Fixed

• spotbugs reports VO_VOLATILE_REFERENCE_TO_ARRAY in synthetic code generated by Eclipse 4.17+ Java compiler (#1313)
• spotbugs reports DM_BOXED_PRIMITIVE_FOR_PARSING for Double and Float (previously only reported for Integer and Long) (#744)
• sarif report not showing correctly the physical and logical location (#1281)

Added

• The class search (in the GUI's class name filter) is now case-insensitive and forgives typos (part of (#749))

Changed

• Bump Saxon-HE from 10.2 to 10.3

4.1.4 - 2020-10-15

Fixed

• IllegalArgumentException during XML report generation (#1272)
• Error dialog on cancelling SpotBugs job in Eclipse (#1314)
• IllegalArgumentException in OpcodeStack.constantToInt (#893)
• Typos in description, documentation and so on
• spotbugs reports VR_UNRESOLVABLE_REFERENCE and UPM_UNCALLED_PRIVATE_METHOD when code is compiled with Java 11 (#1254)

Changed

... (truncated)

Commits

• de5da7e release v4.2.3
• 51e586b docs: add a changelog entry
• a96eba9 fix: make equals impl in Record classes as "usual"
• 0814217 style: apply spotless
• a939edf test: reproduce #1367 by unit tests
• 0a34d96 build(deps): bump mockito-core from 3.8.0 to 3.9.0
• 9801465 fix issue 1472 (#1478)
• ff6582e build(deps): bump checker-qual from 3.11.0 to 3.12.0
• 7baeb01 docs: fix broken internal link
• 5143d4c docs: fix broken links in the Sphinx docs
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[B0pol]

Is this library even used??

[triallax]

It is used here:

NewPipeExtractor/extractor/src/main/java/org/schabi/newpipe/extractor/services/bandcamp/extractors/BandcampSearchExtractor.java

Line 5 in 6db4bea

import edu.umd.cs.findbugs.annotations.NonNull;

However, I am not sure how it is different from the usual Nonnull annotation. Should I make a PR to change it and remove this dependency?

[B0pol]

import edu.umd.cs.findbugs.annotations.NonNull;

done #667

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

[B0pol]

@dependabot reopen