Bump the build-dependencies group with 4 updates

[dependabot]

Bumps the build-dependencies group with 4 updates: com.diffplug.spotless:spotless-maven-plugin, com.github.siom79.japicmp:japicmp-maven-plugin, org.owasp:dependency-check-maven and org.jboss.marshalling:jboss-marshalling.

Updates com.diffplug.spotless:spotless-maven-plugin from 2.44.0 to 2.44.1

Release notes

Sourced from com.diffplug.spotless:spotless-maven-plugin's releases.

Maven Plugin v2.44.1

Fixed

• Deployment was missing part of the CDT formatter, now fixed. (#2384)

Changelog

Sourced from com.diffplug.spotless:spotless-maven-plugin's changelog.

spotless-lib and spotless-lib-extra releases

If you are a Spotless user (as opposed to developer), then you are probably looking for:

• https://github.com/diffplug/spotless/blob/main/plugin-gradle/CHANGES.md
• https://github.com/diffplug/spotless/blob/main/plugin-maven/CHANGES.md

This document is intended for Spotless developers.

We adhere to the keepachangelog format (starting after version 1.27.0).

[Unreleased]

Fixed

• Node.JS-based tasks now work with the configuration cache (#2372)

[3.0.1] - 2025-01-07

Fixed

• Deployment was missing part of the CDT formatter, now fixed. (#2384)

[3.0.0] - 2025-01-06

Headline changes

• All steps now support roundtrip serialization (end of #987).
• Spotless now supports linting in addition to formatting.

Changed

• Allow setting Eclipse config from a string, not only from files (#2337)
• Bump default ktlint version to latest 1.3.0 -> 1.4.0. (#2314)
• Add Sort Members feature based on Eclipse JDT implementation. (#2312)
• Bump default jackson version to latest 2.18.0 -> 2.18.1. (#2319)
• Bump default ktfmt version to latest 0.52 -> 0.53. (#2320)
• Bump default ktlint version to latest 1.4.0 -> 1.5.0. (#2354)
• Bump minimum eclipse-cdt version to 11.0 (removed support for 10.7). (#2373)
• Bump default eclipse version to latest 4.32 -> 4.34. (#2381)

Fixed

• You can now use removeUnusedImports and googleJavaFormat at the same time again. (fixes #2159)
• The default list of type annotations used by formatAnnotations now includes Jakarta Validation's Valid and constraints validations (fixes #2334)

[3.0.0.BETA4] - 2024-10-24

Added

• APIs to support linting. (implemented in #2148, #2149, #2307)
  • Spotless is still primarily a formatter, not a linter. But when formatting fails, it's more flexible to model those failures as lints so that the formatting can continue and ideally we can also capture the line numbers causing the failure.
  • Lint models a single change. A FormatterStep can create a lint by:
    • throwing an exception during formatting, ideally throw Lint.atLine(127, "code", "Well what happened was...")
    • or by implementing the List<Lint> lint(String content, File file) method to create multiple of them
• Support for line ending policy PRESERVE which just takes the first line ending of every given file as setting (no matter if \n, \r\n or \r) (#2304)

Changed

• BREAKING Moved PaddedCell.DirtyState to its own top-level class with new methods. (#2148)
  • BREAKING Removed isClean, applyTo, and applyToAndReturnResultIfDirty from Formatter because users should instead use DirtyState.
• FenceStep now uses ConfigurationCacheHack. (#2378 fixes #2317)

... (truncated)

Commits

• c442e3a Published maven/2.44.1
• f0d72c3 Published gradle/7.0.1
• 3dad81e Published lib/3.0.1
• da5549b Run deployment on Java 17 (fixes #2384)
• f22eda9 Update plugin com.diffplug.spotless to v7.0.0 (#2383)
• 6aa512e Update plugin com.diffplug.spotless to v7.0.0
• cbbdee5 Versions can float again.
• da87a22 Published maven/2.44.0
• 23d98d2 Published gradle/7.0.0
• 1c2435b Published lib/3.0.0
• Additional commits viewable in compare view

Updates com.github.siom79.japicmp:japicmp-maven-plugin from 0.23.0 to 0.23.1

Commits

• 7075ad1 [maven-release-plugin] prepare release japicmp-base-0.23.1
• 73f84a8 upgraded version in *.md files to 0.23.1
• 66b8f99 Update ReleaseNotes.md
• 598ec00 Merge pull request #413 from siom79/fix-mdtable-npe
• 27b0c05 Fix NPE when a markdown table contains null cells
• bfd09f2 Merge pull request #408 from siom79/ghaction-summary
• 1aed38b use specific plugin version to generate report
• d36487e skip spotbugs for job summary
• 9b37160 skip spotbugs for JDK 8
• 39d143d only lts versions and 22
• Additional commits viewable in compare view

Updates org.owasp:dependency-check-maven from 11.1.1 to 12.0.0

Release notes

Sourced from org.owasp:dependency-check-maven's releases.

Version 12.0.0

Refer to the CHANGELOG.md for information about improvements and upgrade notes.

Changelog

Sourced from org.owasp:dependency-check-maven's changelog.

Version 12.0.0 (2025-01-11)

• feat: report on CVSS v4 (#7204)
• feat: show from which dependency the CVE comes in failure report (#7224)
• feat: Use Maven settings decryption API for decrypting secrets from settings.xml (#7284)
• feat: Extend authentication to support Bearer token for many resources (#7277)
• feat: Add a flag to fail when one or more suppression rules are not used (#7244)
• fix: add product evidence as vendor to reduce FN (#7295)
• fix: Make the HTTP-Client use pre-emptive authentication (#7255)
• fix: Add the missing proxy credentials for suppressionFileUser/Password authentication scenario
• fix: increase max retry count (#7252)
• fix: Make the HTTP-Client use pre-emptive authentication for configured server credentials and extend HTTPClient usage to Nexus search
• fix: Tranform into UTC the last modified date from database (#7222)

See the full listing of changes.

Commits

• 48d567d build: prepare release v12.0.0
• 69453c8 chore: prepare release
• 0fd289a chore: Remove code-paths for Java versions <=8 (#7297)
• b51921f fix: add product evidence as vendor to reduce FN (#7295)
• ae8c06a chore: fixup JQuery LICENSE.txt file which was a full github html page dump (...
• 5a47091 build(deps): Sanitize dependencies based on dependency:analyze-report results...
• 57db1ca build(deps): bump commons-beanutils:commons-beanutils from 1.9.4 to 1.10.0 (#...
• 361fe48 build(deps): bump commons-beanutils:commons-beanutils
• 09c4c71 build(deps): bump commons-codec:commons-codec from 1.17.1 to 1.17.2 (#7287)
• 505ddff feat: Use Maven settings decryption API for decrypting secrets from settings....
• Additional commits viewable in compare view

Updates org.jboss.marshalling:jboss-marshalling from 2.2.1.Final to 2.2.2.Final

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[hibernate-github-bot]

Thanks for your pull request!

This pull request appears to follow the contribution rules.

› This message was automatically generated.

[hibernate-github-bot]

Thanks for your pull request!

This pull request does not follow the contribution rules. Could you have a look?

❌ The pull request description must contain the license agreement text.
    ↳ The description of this pull request must contain the following license agreement text:

----------------------
By submitting this pull request, I confirm that my contribution is made under the terms of the [Apache 2.0 license](https://www.apache.org/licenses/LICENSE-2.0.txt)
and can be relicensed under the terms of the [LGPL v2.1 license](https://www.gnu.org/licenses/old-licenses/lgpl-2.1.txt) in the future at the maintainers' discretion.
For more information on licensing, please check [here](https://github.com/hibernate/hibernate-search/blob/main/CONTRIBUTING.md#legal).

----------------------

› This message was automatically generated.