chore(deps): update com.uber.nullaway:nullaway to v0.13.4

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
com.uber.nullaway:nullaway	0.11.2 → 0.13.4

---

Release Notes

uber/NullAway (com.uber.nullaway:nullaway)

v0.13.4

Compare Source

Fixes a couple of crashes when running NullAway on JDK 27 ea builds. Also modularizes the annotations jar.

• Modularize the annotations JAR by @​anthonyvdotbe (#​1537)
• Test on JDK 27 EA (#​1540)
• Fix crash on JDK 27 (#​1541)
• Maintenance
  • Run regression tests on JDK 26 (#​1526)
  • Refactor ThriftTests and Java8Tests to use addSourceLines instead of deprecated addSourceFile by @​nanookclaw (#​1517)
  • Update to WALA 1.7.1 (#​1539)

v0.13.3

Compare Source

Quick follow-up release to 0.13.2 to fix a crash (#​1523).

• Add @​InjectSoftAssertions to default excluded field annotations by @​is-ivanov (#​1516)
• Fix check for enclosing NewClassTree (#​1524)
• Maintenance
  • Remove onOverrideMethodInvocationVarargsArrayNullability handler method (#​1518)
  • Update to Checker Framework 4.0.0 (#​1519)

v0.13.2

Compare Source

Various bug fixes in this release and better JSpecify support.

• Fix for explicitly-typed lambda parameters in JDK 24+ (#​1452)
• Improve handling of wildcard upper bounds in generic method inference by @​dhruv-agr (#​1454)
• Add default support for @​PostConstruct as an initializer annotation (#​1459)
• Include nested annotation information in astubx files when loading external library models by @​haewiful (#​1456)
• JSpecify: assume NONNULL in generic method inference for unconstrained type variables (#​1471)
• JSpecify: improve inference for generic methods based on method reference arguments (#​1438)
• Improve printing of annotated type variables in error messages (#​1478)
• Initial handling of constructor diamond operators (#​1464)
• Handle restrictive type-use @NonNull annotations on varargs array (#​1484)
• Test case for issue 1493 (#​1496)
• Fix library modeling for varargs arrays (#​1485)
• Re-introduce annotations elided by javac for certain cases (#​1473)
• JDK javac plugin: properly handle nested annotations on array parameter types and varargs (#​1497)
• Print only @Nullable type use annotations in error messages (#​1507)
• Better handling of method references passed to generic methods in JSpecify mode (#​1499)
• Support for Spring's @​Value annotation (#​1505)
• Fix crash with captured array types (#​1508)
• Maintenance
  • Update comments in NullabilityUtil#hasAnyAnnotationMatching (#​1457)
  • Update to Gradle 9.3.1 (#​1458)
  • Update to Error Prone 2.47.0 (#​1461)
  • Switch InvocationAndContext to be a record (#​1463)
  • Upgrade GitHub Actions for Node 24 compatibility by @​salmanmkc (#​1465)
  • Upgrade GitHub Actions to latest versions by @​salmanmkc (#​1466)
  • Bump various dependencies (#​1469)
  • Use text blocks in CustomLibraryModelsTests (#​1482)
  • Update Error Prone and EP plugin (#​1486)
  • Update to Gradle 9.4.0 (#​1491)
  • Minor cleanup, no behavior changes by @​armandino (#​1487)
  • Update to Error Prone 2.49.0 (#​1514)

v0.13.1

• Improve verification of !null -> !null contracts (#​1441)
• Substitute inferred @NonNull types for generic method inference (#​1445)
• Better support for some contracts with boolean argument constraints (#​1447)
• Maintenance
  • Add junit-framework as another integration test (#​1446)

v0.13.0

NullAway now requires a minimum of JDK 17 and Error Prone 2.36.0 to run; we bump the version to 0.13.0 to reflect these
updated requirements. There are also many improvements to JSpecify mode support, and several nice changes and
improvements from first-time contributors.

• Support added for JUnit's @​TempDir by @​romainmoreau (#​1387)
• Use OptimizedLibraryModels for method type variable upper bounds (#​1388)
• Add @​InjectWireMock as known excluded field annotation (#​1391)
• Require JDK 17 to run NullAway (#​1394)
• Support adding nested nullability annotations in library models (#​1407)
• Add library model for AtomicReferenceFieldUpdater (#​1409)
• Correctly get parameter types for a lambda whose type was inferred (#​1348)
• Add Mockito annotations to default excluded field annotations by @​murdos (#​1418)
• Properly identify annotations directly on the array element type of a Symbol (#​1419)
• Update to Checker Framework 3.53.0 (#​1429)
• JSpecify: Apply annotations on type variables to lambdas in more cases (#​1428)
• Migrate AutoValue to Records by @​rishikraj990 (#​1415)
• Bump minimum Error Prone version to 2.36.0, and add detection of nullable dereference by switch expressions (#​1427)
• JSpecify: Improve handling of method references (#​1430)
• Allow suppressing nullaway on individual parameters by @​jackwickham (#​1436)
• Update jdk-javac-plugin to contain nested annotations by @​haewiful (#​1432)
• Maintenance
  • Delete code to generate library models from source (#​1385)
  • Refactor: Migration to Version Catalog completed by @​vitinh0z (#​1386)
  • Bump Gradle to 9.2.1 (#​1392)
  • Update to Error Prone 2.45.0 (#​1401)
  • Stop matching switch expression kind using strings (#​1404)
  • Refactoring: clarify docs and naming for RestoreNullnessAnnotationsVisitor (#​1406)
  • Refactoring: rename method and field (#​1405)
  • Run NullAway on jdk-javac-plugin code (#​1408)
  • Clarify comment in test (#​1411)
  • Enable PatternMatchingInstanceOf check and fix all warnings (#​1412)
  • Enable StatementSwitchToExpressionSwitch check and fix all warnings (#​1413)
  • bump and remove some dependencies (#​1414)
  • Update minimum supported Error Prone version to 2.25.0 (#​1421)
  • Update CI to run builds on JDK 25 (#​1422)
  • Various cleanups suggested by IntelliJ (#​1423)
  • Convert test data in main NullAway tests to use text blocks (#​1424)
  • Refactor CoreTests and UnannotatedTests to use addSourceLines and inline test data by @​cobayo (#​1426)
  • Refactor ContractsTests to use Java text blocks by @​cobayo (#​1435)
  • Update Error Prone and errorprone-plugin versions (#​1434)

v0.12.15

NullAway now includes a BOM artifact com.uber.nullaway:nullaway-bom. Otherwise, this release contains a few bug
fixes and improvements to JSpecify support.

• Fix URL for RequireExplicitNullMarking checker (#​1369)
• Handle annotations on type variables in return and field types (#​1371)
• Change how recursive calls to dataflow are detected (#​1374)
• JSpecify: use type on identifier when its type is a type variable (#​1378)
• Include method type parameters in astubx files. by @​haewiful (#​1370)
• Create nullaway-bom project (#​1130) by @​lpireyn (#​1380)
• Run dataflow analysis on bodies of lambdas passed to generic methods (#​1375)
• Maintenance
  • Remove BaseNoOpHandler and replace with default methods in Handler (#​1376)

v0.12.14

This release fixes a bug where the new RequireExplicitNullMarking check was not fully disabled by default. It also includes a couple of performance optimizations to reduce NullAway overhead.

• Various optimizations (#​1358)
• Don't report matches from RequireExplicitNullMarking when run at SUGGESTION level (#​1365)
• Optimize methods that check for annotations on a Symbol (#​1362)
• Tune warning message for RequireExplicitNullMarking (#​1366)
• Maintenance
  • Fix arg concatenation bug in JMH (#​1357)
  • Move wildcard-related tests to a separate test class (#​1361)

v0.12.13

NullAway now includes a new Error Prone checker, RequireExplicitNullMarking,
that checks that every class is explicitly @NullMarked or @NullUnmarked (at the class or package level), so code
is not left @NullUnmarked unintentionally. The check is disabled by default. See the docs
for further details.

NullAway also includes support for a new @PureExceptLambda annotation, contributed by @​FxMorin, to tell NullAway
to preserve nullability information from the enclosing method when analyzing the body of certain lambdas.
See the docs for details.

• Use passed-in TreePath in one more place when available (#​1329)
• Checker to ensure explicit null marking of every class (#​1323)
• Bound size of alreadyRunAnalyses cache to be consistent (#​1334)
• Improve inference for generic methods with lambda argument containing return statements by @​dhruv-agr (#​1337)
• Add PureExceptLambda annotation by @​FxMorin (#​1325)
• Support marking method type variable upper bounds as @Nullable in library models (#​1345)
• Method name parsing in ExternalStubxLibraryModels class is missing a corner case by @​haewiful (#​1344)
• Better fix for dataflow analysis caching (#​1353)
• Maintenance
  • Add package-info files with @​NullMarked (#​1331)
  • Speed up buildWithNullAway task (#​1330)
  • Enable the VoidMissingNullable checker and autofix all extant warnings (#​1332)
  • Bump JDK version to 25 for integration tests (#​1336)
  • Switch Coderabbit to assertive mode (#​1338)
  • Enable EqualsMissingNullable check and fix all extant warnings (#​1339)
  • Bump to AutoValue 1.11.1 (#​1340)
  • Update Caffeine benchmark (#​1342)
  • Add a test for a useless @​Contract (#​1346)
  • Test case for wildcards in Generic Method with Lambda Arguments by @​dhruv-agr (#​1349)
  • Add initial AGENTS.md file (#​1352)

v0.12.12

This release fixes a severe performance regression introduced in NullAway 0.12.11 and we encourage all users of 0.12.11 to upgrade.

• Address severe performance regression in dataflow analysis (#​1328)
• Maintenance
  • Fix test args for SuggestedFixesTests (#​1324)
  • Stop passing -processorpath to CompilationTestHelper in NullAway tests (#​1326)

v0.12.11

In this release, NullAway checks the requirement that JSpecify mode is only run on a compatible javac version /
configuration, and fails if it detects an incompatibility.
See https://github.com/uber/NullAway/wiki/JSpecify-Support#supported-jdk-versions for details.

• Use inference for generic call passed as receiver to instance method (#​1293)
• Accept any annotation with simple name Contract, and change reporting of invalid contract annotations (#​1295)
• Properly model AtomicReference.get() in JSpecify mode (#​1298)
• Improve handling and error messages when using this inside an anonymous class (#​1305)
• Generate astubx from JSON output of jdk-javac-plugin by @​haewiful (#​1243)
• Improve inference for generic method with void-returning lambda argument by @​dhruv-agr (#​1312)
• Use refined types from dataflow analysis in generic method inference (#​1309)
• Fail if NullAway is run in JSpecify mode with an incompatible javac version / configuration (#​1317)
• Jdk javac plugin: don't serialize info for classes / methods without annotations by @​haewiful (#​1316)
• Maintenance
  • [Cleanup] Refactor away unnecessary Predicate by @​lazaroclapp (#​1297)
  • Update to Error Prone 2.42.0 (#​1299)
  • Update to Gradle 9.1.0 (#​1302)
  • Test on JDK 25 (#​1301)
  • Compile with JDK 25 (#​1303)
  • Add CodeRabbit config (#​1306)
  • Update Gradle command used for integration tests (#​1311)
  • Disable CodeRabbit review status comments (#​1313)
  • Gradle fixes for jar-infer-lib (#​1314)
  • Enable building NullAway on JDK 25 (#​1315)

v0.12.10

This release contains significant improvements to inference support for generic method calls in JSpecify mode (#​1075).
We expect that many more valid calls will pass NullAway, but that some new bugs may have been introduced. Please report
any issues that you see. There is also a new flag, -XepOpt:NullAway:WarnOnGenericInferenceFailure to make NullAway
report a warning when inference fails, to help identify any issues.

• Improved inference for generic method calls (#​1244)
• Suppress CastToNonNull warnings for @NullUnmarked method calls by @​raccoonback (#​1258)
• JSpecify: Fix crash when overriding with raw types (#​1265)
• Better handle calls to super constructors and superclass methods in JSpecify mode (#​1248)
• issue-1250 pattern matching for instanceof in switch case by @​dhruv-agr (#​1259)
• Account for annotations in extends / implements when computing view as supertype (#​1266)
• Bug fix with type substitutions after inference (#​1277)
• JSpecify: Improve error messages for type incompatibility at pseudo-assignments (#​1279)
• Support java.util.Objects.toString() by @​gulikoza (#​1283)
• Record when generic method inference fails (#​1280)
• issue 1275 - report unboxing warning for for-each loop by @​dhruv-agr (#​1281)
• Abstract iterating over invocation arguments (#​1284)
• Invoke generic method inference in more places (#​1286)
• Maintenance
  • Build Spring with snapshot build as a CI job (#​1251)
  • Add more instance fields to GenericsChecks (#​1256)
  • remove unneeded checkNotCall call (#​1257)
  • Fail build on JDK 21 versions before 21.0.8 (#​1261)
  • Clarify JDK version to use for best JSpecify support (#​1269)
  • Simplified set of CI jobs (#​1271)
  • Build: upgrade to Gradle 9 + AGP 8.7.2 (#​1270)
  • Compile with JDK 24 (#​1276)
  • Don't use deprecated buildDir by @​mernst (#​1278)

v0.12.9

• Add a case in our inference for generic method calls (#​1240)
• Add library model for Apache Commons CollectionUtils.isNotEmpty, Amazon CollectionUtils.IsNullOrEmpty, and a couple Amazon StringUtils methods (#​1242)
• Maintenance
  • Fix maven central link in RELEASING.md (#​1237)
  • Update to Error Prone 2.41.0 (#​1239)
  • Add tests for gh-1246 (#​1247)
  • Test reading JSpecify annotations from bytecodes on JDK 21 (#​1245)

v0.12.8

• Document interactions between Guava and JSpecify mode in README (#​1208)
• JSpecify: handle nullness annotations from extends / inherits clauses (#​1211)
• Allowing NewClassTree to be passed into getGenericParameterNullnessAtInvocation (#​1210)
• Support @​NullMarked on modules (#​1216)
• Handle NewClassTree in compareGenericTypeParameterNullabilityForCall(#​1212) (#​1217)
• More flexible handling of AssertJ isNotNull methods (#​1221)
• Support AssertJ hasSize() (#​1229)
• Inference of generic method type arguments based on returns and parameter passing (#​1226)
• Prototype implementation of javac plugin to serialize nullness annotations (#​1225)
• Add AdditionalSuppressionNames configuration option (#​1231)
• Updates to deploy releases to Central Portal (#​1234)
• Fix to handling of case null (#​1235)
• Maintenance
  • Update to Gradle 8.14 (#​1213)
  • Update to Error Prone 2.39.0 (#​1228)
  • Fix broken link to Eradicate in README.md (#​1227)

v0.12.7

• Update to Checker Framework 3.49.2 (#​1183)
• Don't check synchronized blocks within unannotated code (#​1185)
• Test on JDK 24 (#​1187)
• Fix multiple issues with NewClassTrees that have enclosing expressions (#​1191)
• Ensure classes null-marked by library model detected in all places (#​1197)
• JSpecify: handle varargs whose element type is a type variable (#​1200)
• Update to Error Prone 2.38.0 (#​1203)
• Optimization to annotation stripping in library model matching (#​1204)
• Make arg position nullness array contents nullable (#​1207)
• Properly handle method references to null-unmarked methods (#​1205)

v0.12.6

• JSpecify: view type as super in generic method inference (#​1177)
• Infer @​Nullable type arguments for type variables from unmarked code (#​1181)
• Convert android-jar.py to Python 3 (#​1175)
• Suggest castToNonNull fix for unboxing error (#​1182)

v0.12.5

• Add missing override to RestoreNullnessAnnotationsVisitor (#​1154)
• Add more bailouts for raw types (#​1153)
• Do unboxing check for invocation parameters even when calling a @​NullUnmarked method (#​1163)
• JSpecify: infer generic method type arguments for assignments (#​1131)
• JSpecify: properly handle lambdas in anonymous inner classes (#​1165)
• Support @​MonotonicNonNull on static fields (#​1166)
• Update to Error Prone 2.37.0 (#​1169)
• Use proper name for constructors in JarInfer (#​1167)
• Don't treat @​ParametricNullness as @​Nullable in JSpecify mode (#​1174)

v0.12.4

• Better @MonotonicNonNull support (#​1149)
• Add support for local variables for arrays. (#​1146)
• Ignore Spring Framework 6.2 @MockitoBean, @MockitoSpyBean fields (#​1147)
• JSpecify: preserve explicit nullability annotations on type variables when performing substitutions (#​1143)
• Always acknowledge restrictive annotations in JSpecify mode (#​1144)
• Fix printing of array types in JSpecify errors (#​1145)
• Remove need to use JSpecify's @​Nullable annotation (#​1142)
• Handle calls to generic constructors in JSpecify mode (#​1141)
• Properly handle conditional expression within parens as RHS of assignment (#​1140)
• Skip checks involving wildcard generic type arguments (#​1137)
• Update to Gradle 8.12.1 (#​1133)

v0.12.3

• Remove InferredJARModelsHandler (#​1079)
• Fix crash with annotation on enum (#​1097)
• Handle case null in switch statements (#​1100)
• Don't report errors for writes to @​NullUnmarked fields (#​1102)
• Support primitive static final fields as constant args in access paths (#​1105)
• Fix issue with annotations in module-info.java files (#​1109)
• Report error for @​nullable synchronized block expression (#​1106)
• Add support for parameter types with wildcards for JarInfer (#​1107)
• Properly handle nested generics and multiple wildcard type args in JarInfer (#​1114)
• Proper checking of vararg overrides with JSpecify annotations (#​1116)
• Add flag to indicate only @​NullMarked code should be checked (#​1117)
• Add support for static fields in contracts (#​1118)
• Maintenance
  • Fix comment positions (#​1098)
  • [refactoring] Wrap calls to Types.subst and Types.memberType (#​1115)
  • Build latest Caffeine on CI (#​1111)

v0.12.2

• Fix reading of JSpecify @​nullable annotations from varargs parameter in bytecode (#​1089)
• Fix JarInfer handling of generic types (#​1078)
• Fix another JSpecify mode crash involving raw types (#​1086)
• Fix bugs in handling of valueOf calls for map keys (#​1085)
• Suggest correct fix when array component of non-nullable array is made null. (#​1087)
• Substitute type arguments when checking type parameter nullability at call site (#​1070)
• Fix JarInfer parameter indexes for instance methods (#​1071)
• JSpecify mode: initial support for generic methods (with explicit type arguments at calls) (#​1053)
• Maintenance
  • Update to latest Error Prone and Error Prone Gradle plugin (#​1064)
  • Refactor serialization adapter retrieval by version (#​1066)
  • Remove fixes.tsv serialization from NullAway serialization service (#​1063)
  • Enable javac -parameters flag (#​1069)
  • Update to Gradle 8.11 (#​1073)
  • Add test for issue 1035 (#​1074)
  • remove use of deprecated Gradle API (#​1076)
  • Update to Error Prone 2.36.0 (#​1077)

v0.12.1

NullAway now includes a BOM artifact com.uber.nullaway:nullaway-bom. Otherwise, this release contains a few bug
fixes and improvements to JSpecify support.

• Fix URL for RequireExplicitNullMarking checker (#​1369)
• Handle annotations on type variables in return and field types (#​1371)
• Change how recursive calls to dataflow are detected (#​1374)
• JSpecify: use type on identifier when its type is a type variable (#​1378)
• Include method type parameters in astubx files. by @​haewiful (#​1370)
• Create nullaway-bom project (#​1130) by @​lpireyn (#​1380)
• Run dataflow analysis on bodies of lambdas passed to generic methods (#​1375)
• Maintenance
  • Remove BaseNoOpHandler and replace with default methods in Handler (#​1376)

v0.12.0

IMPORTANT:

• We now by default check/enforce that pure type-use annotations from JSpecify are written in the "right place" on array types, varargs types, and nested types. More
  details can be found in the wiki.
  We also expose -XepOpt:NullAway:LegacyAnnotationLocations flag to disable this new
  behavior for now to ease the migration. We expect to remove this flag in a future version
  of NullAway.
• We now support writing @​EnsuresNonNullIf on methods to capture cases where a method conditionally ensures that a field is @​NonNull. Thanks @​mauricioaniche for the contributions!

(The changelog below contains all changes from version 0.11.2, since version 0.11.3
contains only one cherry-picked PR from master).

• Enforce Strict Interpretation Of Type Use Annotation Locations Outside of JSpecify mode (#​1010)
• Update handling of annotations on varargs argument (#​1025)
• Create basic unit tests for library model generation (#​1031)
• Partial handling for restrictive annotations on varargs in unannotated code (#​1029)
• Add missing source files in android-jarinfer-models-sdk modules (#​1033)
• External Library Models: Adding support for @​nullable Method parameters (#​1006)
• JDK 23 support (#​1034)
• Support @​EnsuresNonNullIf (#​1044)
• Update some Android astubx models (#​1052)
• Remove unused or unneeded JarInfer flags (#​1050)
• Enforce correct type-use annotation locations for nested types (#​1045)
• Update Android SDK 31 astubx models (#​1054)
• Fix bugs in reading varargs annotations from bytecodes (#​1055)
• General maintenance:
  • Update to Gradle 8.10 (#​1023)
  • Update to Gradle 8.10.1 (#​1036)
  • Update to Error Prone 2.32.0 (#​1037)
  • Typo fix in README.md (#​1041)
  • Fix Gradle config instructions (#​1039)
  • Update to v4 of setup-gradle GitHub action (#​1043)
  • Add extra JVM args needed for JMH on recent JDK versions (#​1049)
  • Use HTTP instead of SSH for cloning repo for JMH Benchmarks (#​1056)
  • Various version updates (#​1051)
  • Update to Checker Framework 3.48.0 (#​1030)

v0.11.3

IMPORTANT: We have cherry-picked one PR in master since 0.11.2 for this release, it
does not contain all changes in master!

• Add missing source files in android-jarinfer-models-sdk modules (#​1033)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.