Update spotbugs.version to v4.10.3 - #2625
Conversation
c4caf17 to
3574941
Compare
3574941 to
10e62e6
Compare
Spotbugs 4.10.3 improved detection of NP_NULL_ON_SOME_PATH_FROM_RETURN_VALUE, which now correctly identifies a potential null pointer dereference in Challenge62McpController.getServiceAccountAccessToken() at line 322. Since this is an intentional vulnerability in the WrongSecrets educational project, add a Spotbugs exclusion filter to suppress this finding rather than fixing the code. Generated by Mistral Vibe. Co-Authored-By: Mistral Vibe <vibe@mistral.ai>
Edited/Blocked NotificationRenovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR. You can manually request rebase by checking the rebase/retry box above. |
|
🌐 GitHub Pages Preview Ready! Your static preview is now available at: 📄 What's included:
For full functionality testing: Use the Docker preview instead. 🔄 Auto-updates: This preview will be updated automatically when you push new commits to this PR. Static preview with Thymeleaf generation by GitHub Actions |
|
🔨 Preview Build Complete! Your changes have been built and pushed to GitHub Container Registry. 🐳 Docker Image: 📦 Download & Test Locally:
# Download the artifact, extract it, then:
docker load < wrongsecrets-preview.tar
docker run -p 8080:8080 -p 8090:8090 wrongsecrets-preview🚀 Alternative - Pull from Registry: docker pull ghcr.io/owasp/wrongsecrets/wrongsecrets-pr:pr-2625-f0907ee
docker run -p 8080:8080 -p 8090:8090 ghcr.io/owasp/wrongsecrets/wrongsecrets-pr:pr-2625-f0907eeThen visit: http://localhost:8080 📝 Changes in this PR: Visual diff screenshots will be available shortly... Preview built by GitHub Actions |
|
📸 Visual Diff Ready! Screenshots comparing your changes with the main branch are available: 📁 Download Visual Diff Artifacts 🖼️ Included screenshots:
🔍 How to review:
💡 Tip: Use an image comparison tool or open both images in separate browser tabs to spot differences easily. Visual diff generated by GitHub Actions • PR #2625 |
This PR contains the following updates:
4.9.8→4.10.34.9.8→4.10.3Release Notes
spotbugs/spotbugs (com.github.spotbugs:spotbugs)
v4.10.3Compare Source
Fixed
LI_LAZY_INIT_STATICfalse negative when the null guard is written in yoda-style (null == field) (#4144)DC_DOUBLECHECK,NP_SYNC_AND_NULL_CHECK_FIELDandSP_SPIN_ON_FIELDfalse negatives when the null guard is written in yoda-style (null == field) (#4144)UNS_UNSAFE_CALLbug patternUWF_NULL_FIELDfalse negative for fields initialized with cast null values (#4034)UMAC_UNCALLABLE_METHOD_OF_ANONYMOUS_CLASSfalse positive for methods reached only through method references (#4059)Changed
FindBugsViewerTask: use default look and feel by default. (#4165)Refactor
FindBugsViewerTask: extendAbstractFindBugsTaskto reduce duplicate code. (#4165)v4.10.2Compare Source
Build
v4.10.1Compare Source
Build
Configuration
📅 Schedule: (UTC)
* * 1,15 * *)🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about these updates again.
This PR was generated by Mend Renovate. View the repository job log.