Sourced from gradle-wrapper's releases.

9.4.1

The Gradle team is excited to announce Gradle 9.4.1.

Here are the highlights of this release:

• Java 26 support
• Non-class-based JVM tests
• Enhanced console progress bar

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle: akankshaa-00, Attila Kelemen, Björn Kautler, dblood, Dennis Rieks, duvvuvenkataramana, John Burns, Julian, kevinstembridge, Niels Doucet, Philip Wedemann, ploober, Richard Hernandez, Roberto Perez Alcolea, Sebastian Lövdahl, stephan2405, Stephane Landelle, Ujwal Suresh Vanjare, Victor Merkulov, Vincent Potuček, Vladimir Sitnikov.

Upgrade instructions

Switch your build to use Gradle 9.4.1 by updating your wrapper:

./gradlew wrapper --gradle-version=9.4.1 && ./gradlew wrapper

See the Gradle 9.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines. If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

... (truncated)

• 2d63270 Ignore test (#37180)
• 4c15906 Ignore test
• 9759ac1 Make console/SIGINT test deterministic (#37178)
• aaf6ed4 Make console/SIGINT test deterministic
• 47cb783 Fix OSC 9;4 progress bar not cleared on SIGINT (#37038)
• ef03f1d Fix order-dependent assertion in CrossBuildScriptCachingIntegrationSpec
• fd26fd3 Fix OSC 9;4 taskbar progress bar not cleared on build end or SIGINT
• 0a84d67 Release notes for 9.4.1 (#37148)
• e569c31 cleanup
• 9f227de cleanup
• Additional commits viewable in compare view

Sourced from org.assertj:assertj-core's releases.

v3.27.7

🔒 Security

Core

• Fix XXE vulnerability in isXmlEqualTo assertion (CVE-2026-24400)
  • See GHSA-rqfh-9r24-8c9r for details; many thanks to @​wxt201 and @​Song-Li for responsibly reporting it!

🚫 Deprecated

Core

• Deprecate XmlStringPrettyFormatter with no replacement

🐛 Bug Fixes

Guava

• Navigation to assertj-core or guava types from assertj-guava Javadoc site has unnecessary header #3478

🔨 Dependency Upgrades

Core

• Upgrade to Byte Buddy 1.18.3
• Upgrade to JUnit BOM 5.14.1

Guava

• Upgrade to Guava 33.5.0-jre

• e840716 [maven-release-plugin] prepare release assertj-build-3.27.7
• 85ca7eb Deprecate XmlStringPrettyFormatter
• 77081dc Merge commit from fork
• b68fc24 Bump github/codeql-action from 4.31.9 to 4.31.10 in the github-actions group ...
• 0cf5bb6 Bump kotlin.version from 2.1.0 to 2.2.21
• d393ef1 Abort tests when symbolic links cannot be created (#3788)
• 2212433 Add IntelliJ custom inspection for test class names
• 5717d02 Update JetBrains icon
• a8ec20b Add icon for JetBrains products
• c05fb3d Bump Maven to 3.9.12 and Wrapper to 3.3.4
• Additional commits viewable in compare view

• See full diff in compare view

Sourced from org.junit:junit-bom's releases.

JUnit 6.0.3 = Platform 6.0.3 + Jupiter 6.0.3 + Vintage 6.0.3

See Release Notes.

Full Changelog: junit-team/junit-framework@r6.0.2...r6.0.3

• 36e3253 Release 6.0.3
• 295561f Finalize 6.0.3 release notes
• ea18076 Fix deadlock in NamespacedHierarchicalStore.computeIfAbsent() (#5348)
• 869e232 Add 5.14.3 release notes
• d4b34c4 Fix links to User Guide
• 5c8fb0f Reliably support JRE.OTHER with @⁠EnabledOnJre and @⁠DisabledOnJre
• febb13f Check out entire repo so switching to main branch works in last step
• 71fba90 Install poppler-utils for pdfinfo
• 740e9e0 Update API baseline
• 2ba535f Use release branch of examples repo
• Additional commits viewable in compare view

Sourced from com.uber.nullaway:nullaway's releases.

NullAway 0.13.1

• Improve verification of !null -> !null contracts (#1441)
• Substitute inferred @NonNull types for generic method inference (#1445)
• Better support for some contracts with boolean argument constraints (#1447)
• Maintenance
  • Add junit-framework as another integration test (#1446)

NullAway 0.13.0

NullAway now requires a minimum of JDK 17 and Error Prone 2.36.0 to run; we bump the version to 0.13.0 to reflect these updated requirements. There are also many improvements to JSpecify mode support, and several nice changes and improvements from first-time contributors.

• Support added for JUnit's @​TempDir by @​romainmoreau (#1387)
• Use OptimizedLibraryModels for method type variable upper bounds (#1388)
• Add @​InjectWireMock as known excluded field annotation (#1391)
• Require JDK 17 to run NullAway (#1394)
• Support adding nested nullability annotations in library models (#1407)
• Add library model for AtomicReferenceFieldUpdater (#1409)
• Correctly get parameter types for a lambda whose type was inferred (#1348)
• Add Mockito annotations to default excluded field annotations by @​murdos (#1418)
• Properly identify annotations directly on the array element type of a Symbol (#1419)
• Update to Checker Framework 3.53.0 (#1429)
• JSpecify: Apply annotations on type variables to lambdas in more cases (#1428)
• Migrate AutoValue to Records by @​rishikraj990 (#1415)
• Bump minimum Error Prone version to 2.36.0, and add detection of nullable dereference by switch expressions (#1427)
• JSpecify: Improve handling of method references (#1430)
• Allow suppressing nullaway on individual parameters by @​jackwickham (#1436)
• Update jdk-javac-plugin to contain nested annotations by @​haewiful (#1432)
• Maintenance
  • Delete code to generate library models from source (#1385)
  • Refactor: Migration to Version Catalog completed by @​vitinh0z (#1386)
  • Bump Gradle to 9.2.1 (#1392)
  • Update to Error Prone 2.45.0 (#1401)
  • Stop matching switch expression kind using strings (#1404)
  • Refactoring: clarify docs and naming for RestoreNullnessAnnotationsVisitor (#1406)
  • Refactoring: rename method and field (#1405)
  • Run NullAway on jdk-javac-plugin code (#1408)
  • Clarify comment in test (#1411)
  • Enable PatternMatchingInstanceOf check and fix all warnings (#1412)
  • Enable StatementSwitchToExpressionSwitch check and fix all warnings (#1413)
  • bump and remove some dependencies (#1414)
  • Update minimum supported Error Prone version to 2.25.0 (#1421)
  • Update CI to run builds on JDK 25 (#1422)
  • Various cleanups suggested by IntelliJ (#1423)
  • Convert test data in main NullAway tests to use text blocks (#1424)
  • Refactor CoreTests and UnannotatedTests to use addSourceLines and inline test data by @​cobayo (#1426)
  • Refactor ContractsTests to use Java text blocks by @​cobayo (#1435)
  • Update Error Prone and errorprone-plugin versions (#1434)

Sourced from com.uber.nullaway:nullaway's changelog.

Version 0.13.1

• Improve verification of !null -> !null contracts (#1441)
• Substitute inferred @NonNull types for generic method inference (#1445)
• Better support for some contracts with boolean argument constraints (#1447)
• Maintenance
  • Add junit-framework as another integration test (#1446)

Version 0.13.0

NullAway now requires a minimum of JDK 17 and Error Prone 2.36.0 to run; we bump the version to 0.13.0 to reflect these updated requirements. There are also many improvements to JSpecify mode support, and several nice changes and improvements from first-time contributors.

• Support added for JUnit's @​TempDir by @​romainmoreau (#1387)
• Use OptimizedLibraryModels for method type variable upper bounds (#1388)
• Add @​InjectWireMock as known excluded field annotation (#1391)
• Require JDK 17 to run NullAway (#1394)
• Support adding nested nullability annotations in library models (#1407)
• Add library model for AtomicReferenceFieldUpdater (#1409)
• Correctly get parameter types for a lambda whose type was inferred (#1348)
• Add Mockito annotations to default excluded field annotations by @​murdos (#1418)
• Properly identify annotations directly on the array element type of a Symbol (#1419)
• Update to Checker Framework 3.53.0 (#1429)
• JSpecify: Apply annotations on type variables to lambdas in more cases (#1428)
• Migrate AutoValue to Records by @​rishikraj990 (#1415)
• Bump minimum Error Prone version to 2.36.0, and add detection of nullable dereference by switch expressions (#1427)
• JSpecify: Improve handling of method references (#1430)
• Allow suppressing nullaway on individual parameters by @​jackwickham (#1436)
• Update jdk-javac-plugin to contain nested annotations by @​haewiful (#1432)
• Maintenance
  • Delete code to generate library models from source (#1385)
  • Refactor: Migration to Version Catalog completed by @​vitinh0z (#1386)
  • Bump Gradle to 9.2.1 (#1392)
  • Update to Error Prone 2.45.0 (#1401)
  • Stop matching switch expression kind using strings (#1404)
  • Refactoring: clarify docs and naming for RestoreNullnessAnnotationsVisitor (#1406)
  • Refactoring: rename method and field (#1405)
  • Run NullAway on jdk-javac-plugin code (#1408)
  • Clarify comment in test (#1411)
  • Enable PatternMatchingInstanceOf check and fix all warnings (#1412)
  • Enable StatementSwitchToExpressionSwitch check and fix all warnings (#1413)
  • bump and remove some dependencies (#1414)
  • Update minimum supported Error Prone version to 2.25.0 (#1421)
  • Update CI to run builds on JDK 25 (#1422)
  • Various cleanups suggested by IntelliJ (#1423)
  • Convert test data in main NullAway tests to use text blocks (#1424)
  • Refactor CoreTests and UnannotatedTests to use addSourceLines and inline test data by @​cobayo (#1426)

... (truncated)

• cc9dab8 Prepare for release 0.13.1.
• 99025e4 Changelog for release 0.13.1 (#1449)
• b27f13d Better support for some contracts with boolean argument constraints (#1447)
• 4c619e8 Add junit-framework as another integration test (#1446)
• c27f3f4 Substitute inferred @NonNull types for generic method inference (#1445)
• fc6d956 Improve verification of !null -> !null contracts (#1441)
• 7f8bbca Prepare next development version.
• 36403f3 Prepare for release 0.13.0.
• 12fe2a1 Changelog for release 0.13.0 (#1439)
• 32febbd Update jdk-javac-plugin to contain nested annotations (#1432)
• Additional commits viewable in compare view

Sourced from com.google.errorprone:error_prone_core's releases.

Error Prone 2.48.0

Changes:

• Added support for passing flags with command-line argument files (@-files) (google/error-prone@8e84edf)

New checks:

• AvoidValueSetter
• UnnecessarySemicolon

Closed issues: #5529, #5537, #5522, #5521

Full changelog: google/error-prone@v2.47.0...v2.48.0

Error Prone 2.47.0

New checks:

• InterruptedInCatchBlock: Detect accidental calls to Thread.interrupted() inside of catch(InterruptedException e) blocks.
• RefactorSwitch: Refactorings to simplify arrow switches
• UnnamedVariable: Rename unused variables to _

Closed issues: #1811, #4168, #5459, #5460

Full changelog: google/error-prone@v2.46.0...v2.47.0

• 7cec0a0 Release Error Prone 2.48.0
• 01c603a Extend MissingTestCall to check for member references.
• 3d817b0 Handle var in UnnecessaryBoxedVariable
• ad26f3e Add ConcurrentHashMap.keys() and ConcurrentHashMap.elements() to `JdkObso...
• 7926dbc Fix MustBeClosedChecker crash on flexible constructors.
• d08f003 Check for jakarta annotations in DI checks
• 171448c Add android internal GuardedBy to ACCEPTED_GUARDED_BY_ANNOTATIONS
• 5cb6075 Remove the MissingTestCall:MatchGraphVerify flag.
• ab81681 Improve crash messages for fixes that don't apply
• fe9bb21 Add a test to confirm that TimeUnitMismatch catches `seconds * 1000 + nanos /...
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions