Skip to content

Update spotbugs.version to v4.10.3 - #2625

Merged
commjoen merged 3 commits into
masterfrom
renovate/spotbugs.version
Aug 17, 2026
Merged

Update spotbugs.version to v4.10.3#2625
commjoen merged 3 commits into
masterfrom
renovate/spotbugs.version

Conversation

@renovate

@renovate renovate Bot commented Aug 15, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
com.github.spotbugs:spotbugs (source) 4.9.84.10.3 age confidence
com.github.spotbugs:spotbugs-annotations (source) 4.9.84.10.3 age confidence

Release Notes

spotbugs/spotbugs (com.github.spotbugs:spotbugs)

v4.10.3

Compare Source

Fixed
  • Fix LI_LAZY_INIT_STATIC false negative when the null guard is written in yoda-style (null == field) (#​4144)
  • Fix DC_DOUBLECHECK, NP_SYNC_AND_NULL_CHECK_FIELD and SP_SPIN_ON_FIELD false negatives when the null guard is written in yoda-style (null == field) (#​4144)
  • Fix message for UNS_UNSAFE_CALL bug pattern
  • Restore CLI plugin loading by fixing DetectorFactoryCollection bootstrap ordering (#​4191)
  • Fix UWF_NULL_FIELD false negative for fields initialized with cast null values (#​4034)
  • Fix UMAC_UNCALLABLE_METHOD_OF_ANONYMOUS_CLASS false positive for methods reached only through method references (#​4059)
Changed
  • Ant FindBugsViewerTask: use default look and feel by default. (#​4165)
Refactor
  • Ant FindBugsViewerTask: extend AbstractFindBugsTask to reduce duplicate code. (#​4165)

v4.10.2

Compare Source

Build
  • Add release protection to ensure version released matches the tag and that snapshot has been removed. (#​4156)
  • Drop binary incompatible Saxon-HE back to 12.9 to keep java 11 compatibility. (#​4159)
  • Add binary check to the gradle build to ensure compatibility remains. (#​4159)

v4.10.1

Compare Source

Build
  • 4.10.0 was not released due to a release process error (artifacts were built from a -SNAPSHOT version). 4.10.1 is the corrected release and contains the intended 4.10.0 contents.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • On day 1 and 15 of the month (* * 1,15 * *)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added dependencies Pull requests that update a dependency file renovate labels Aug 15, 2026
@renovate
renovate Bot requested review from bendehaan and commjoen as code owners August 15, 2026 20:54
@renovate
renovate Bot force-pushed the renovate/spotbugs.version branch 5 times, most recently from c4caf17 to 3574941 Compare August 17, 2026 07:35
@renovate
renovate Bot force-pushed the renovate/spotbugs.version branch from 3574941 to 10e62e6 Compare August 17, 2026 07:36
Spotbugs 4.10.3 improved detection of NP_NULL_ON_SOME_PATH_FROM_RETURN_VALUE,
which now correctly identifies a potential null pointer dereference in
Challenge62McpController.getServiceAccountAccessToken() at line 322.

Since this is an intentional vulnerability in the WrongSecrets educational
project, add a Spotbugs exclusion filter to suppress this finding rather
than fixing the code.

Generated by Mistral Vibe.
Co-Authored-By: Mistral Vibe <vibe@mistral.ai>
@renovate

renovate Bot commented Aug 17, 2026

Copy link
Copy Markdown
Contributor Author

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

@github-actions

Copy link
Copy Markdown

🌐 GitHub Pages Preview Ready!

Your static preview is now available at:
🔗 Preview PR #2625

📄 What's included:

For full functionality testing: Use the Docker preview instead.

🔄 Auto-updates: This preview will be updated automatically when you push new commits to this PR.


Static preview with Thymeleaf generation by GitHub Actions

@commjoen
commjoen merged commit ec27036 into master Aug 17, 2026
18 of 20 checks passed
@commjoen
commjoen deleted the renovate/spotbugs.version branch August 17, 2026 08:07
@github-actions

Copy link
Copy Markdown

🔨 Preview Build Complete!

Your changes have been built and pushed to GitHub Container Registry.

🐳 Docker Image: ghcr.io/owasp/wrongsecrets/wrongsecrets-pr:pr-2625-f0907ee

📦 Download & Test Locally:

  1. 📁 Download Docker Image Artifact (look for wrongsecrets-preview-pr-2625)
  2. Load and run the image:
# Download the artifact, extract it, then:
docker load < wrongsecrets-preview.tar
docker run -p 8080:8080 -p 8090:8090 wrongsecrets-preview

🚀 Alternative - Pull from Registry:

docker pull ghcr.io/owasp/wrongsecrets/wrongsecrets-pr:pr-2625-f0907ee
docker run -p 8080:8080 -p 8090:8090 ghcr.io/owasp/wrongsecrets/wrongsecrets-pr:pr-2625-f0907ee

Then visit: http://localhost:8080

📝 Changes in this PR:
- src/main/java/org/owasp/wrongsecrets/challenges/docker/Challenge62McpController.java

Visual diff screenshots will be available shortly...


Preview built by GitHub Actions

@github-actions

Copy link
Copy Markdown

📸 Visual Diff Ready!

Screenshots comparing your changes with the main branch are available:

📁 Download Visual Diff Artifacts

🖼️ Included screenshots:

  • pr-home.png vs main-home.png - Welcome page comparison
  • pr-about.png vs main-about.png - About page comparison
  • pr-challenge.png vs main-challenge.png - Challenge page comparison

🔍 How to review:

  1. Download the artifact zip file
  2. Extract and compare the pr-* and main-* images side by side
  3. Look for visual differences in layout, styling, and content

💡 Tip: Use an image comparison tool or open both images in separate browser tabs to spot differences easily.


Visual diff generated by GitHub Actions • PR #2625

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file renovate

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant