Skip to content

chore(deps): bump com.github.spotbugs:spotbugs-maven-plugin from 4.10.4.1 to 4.10.5.0 - #3652

Merged
csviri merged 1 commit into
mainfrom
dependabot/maven/com.github.spotbugs-spotbugs-maven-plugin-4.10.5.0
Oct 22, 2026
Merged

chore(deps): bump com.github.spotbugs:spotbugs-maven-plugin from 4.10.4.1 to 4.10.5.0#3652
csviri merged 1 commit into
mainfrom
dependabot/maven/com.github.spotbugs-spotbugs-maven-plugin-4.10.5.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 22, 2026 •
edited by coderabbitai Bot
Loading

Copy link
Copy Markdown
Contributor

Bumps com.github.spotbugs:spotbugs-maven-plugin from 4.10.4.1 to 4.10.5.0.

Release notes

Sourced from com.github.spotbugs:spotbugs-maven-plugin's releases.

Spotbugs Maven Plugin 4.10.5.0

What's Changed

Full Changelog: spotbugs/spotbugs-maven-plugin@spotbugs-maven-plugin-4.10.4.1...spotbugs-maven-plugin-4.10.5.0

Commits
  • 74f5dd6 [maven-release-plugin] prepare release spotbugs-maven-plugin-4.10.5.0
  • 37501b1 [pom] Exclude jcl over slf4j from maven core
  • fe7730c [pom] Adjust required to build maven to 3.9.16 as 3.10.0 needs more work
  • ee87607 [pom] Build internals off maven 3.10.0
  • 18a8404 [pom] Bump maven shared utils to 3.5.0
  • abd6753 [pom] Bump groovy to 5.1.3
  • 187fad4 [pom] Bump base parent to 62
  • 9e4846b [pom] Bump commons-lang to 3.21.0
  • 27cd67a [pom] Bump asm to 9.11
  • c556077 [pom] Bump to spotbugs 4.10.5
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Summary by CodeRabbit

  • Chores
    • Updated the project’s static analysis tooling. This is a maintenance change and does not add or alter any features or behavior visible in the application. No other user-facing changes are included in this release.

@dependabot
chore(deps): bump com.github.spotbugs:spotbugs-maven-plugin
cc63b65 
Bumps [com.github.spotbugs:spotbugs-maven-plugin](https://github.com/spotbugs/spotbugs-maven-plugin) from 4.10.4.1 to 4.10.5.0.
- [Release notes](https://github.com/spotbugs/spotbugs-maven-plugin/releases)
- [Commits](spotbugs/spotbugs-maven-plugin@spotbugs-maven-plugin-4.10.4.1...spotbugs-maven-plugin-4.10.5.0)

---
updated-dependencies:
- dependency-name: com.github.spotbugs:spotbugs-maven-plugin
  dependency-version: 4.10.5.0
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Copilot AI balanced review requested due to automatic review settings October 22, 2026 03:32
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Oct 22, 2026
@openshift-ci
openshift-ci Bot requested review from metacosm and xstefank October 22, 2026 03:32
@coderabbitai

coderabbitai Bot commented Oct 22, 2026 •
edited
Loading

Copy link
Copy Markdown

Review in Change Stack →

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration
  • Configuration used: defaults
  • Review profile: CHILL
  • Plan: Enterprise
  • Run ID: 718130bc-a4d1-4ae2-be71-1575f409cbfe
📥 Commits

Reviewing files that changed from the base of the PR and between c6e465f and cc63b65.

📒 Files selected for processing: 1
  • pom.xml

Included review availability: This review used your included allowance. Your plan provides up to 12 included reviews per hour; 10 remain after this review.

📝 Walkthrough

The root pom.xml updates the managed SpotBugs Maven plugin version from 4.10.4.1 to 4.10.5.0.

Changes: SpotBugs plugin version

Layer / File(s) Summary
Update managed plugin version
pom.xml		 The managed SpotBugs Maven plugin version changes from 4.10.4.1 to 4.10.5.0.

Priority: ⬇️ Low

Estimated code review effort: 1 (Trivial) | ~3 minutes

Change: Other

Suggested reviewers: csviri

Merge Risk: ⚪ Minimal · up to cc63b

No actionable merge-blocking risk is identified in this version-only dependency update.

Pre-merge checks: Passed 5
Check name Status Explanation
Description Check Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check Passed The title clearly and accurately identifies the dependency and the exact version update in the pull request.
Docstring Coverage Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check Passed Check skipped because no linked issues were found for this pull request.
Full details: Docstring Coverage

Explanation

No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0 files. (1 skipped: 1 unsupported.)

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Commit to this branch
  • Create a new PR
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Warning

Some tools did not complete. Review the errors below.

🔧 OSV Scanner (2.6.0)
pom.xml

OSV Scanner exited with code 128 without a usable report

Comment @coderabbitai help to get the list of available commands.

Copilot AI reviewed Oct 22, 2026
View reviewed changes

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟢 Approval recommended

No blocking issues were identified in the isolated version update; build verification was not run.

No open issues 🎉

What changed in this PR

Updates the SpotBugs Maven plugin used for static analysis in Java Operator SDK.

Changes:

  • Bumps spotbugs-maven-plugin.version from 4.10.4.1 to 4.10.5.0, leaving plugin configuration unchanged.
File Description
pom.xml Updates the shared SpotBugs Maven plugin version.

Review effort: Balanced

@csviri
csviri merged commit 349cd56 into main Oct 22, 2026
31 checks passed
@csviri
csviri deleted the dependabot/maven/com.github.spotbugs-spotbugs-maven-plugin-4.10.5.0 branch October 22, 2026 10:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

Copilot code review Copilot
Copilot review effort
Applies to this pull request for everyone.Learn more about Copilot code review.
Copilot left review comments
@csviri csviri csviri approved these changes
@metacosm metacosm Awaiting requested review from metacosm
@xstefank xstefank Awaiting requested review from xstefank

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@csviri