Update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Age	Adoption	Passing	Confidence
actions/cache	action	patch	v3.3.1 -> v3.3.3
actions/setup-java	action	minor	v3.10.0 -> v3.13.0
gradle (source)		minor	8.0.2 -> 8.11.1
gradle/wrapper-validation-action	action	minor	v1.0.6 -> v1.1.0
org.projectlombok:lombok (source)	dependencies	patch	1.18.26 -> 1.18.36
org.ow2.asm:asm-tree (source)	dependencies	minor	9.4 -> 9.7.1
org.ow2.asm:asm-util (source)	dependencies	minor	9.4 -> 9.7.1
org.ow2.asm:asm (source)	dependencies	minor	9.4 -> 9.7.1
org.jetbrains:annotations	dependencies	minor	24.0.1 -> 24.1.0
com.github.javaparser:javaparser-core (source)	dependencies	minor	3.25.1 -> 3.26.2
org.shipkit.shipkit-github-release	plugin	patch	1.2.0 -> 1.2.3
org.shipkit.shipkit-changelog	plugin	patch	1.2.0 -> 1.2.3
dev.minco.gradle.defaults-plugin	plugin	patch	0.2.62 -> 0.2.80

---

Release Notes

actions/cache (actions/cache)

v3.3.3

Compare Source

What's Changed

• Cache v3.3.3 by @​robherley in https://github.com/actions/cache/pull/1302

New Contributors

• @​robherley made their first contribution in https://github.com/actions/cache/pull/1302

Full Changelog: actions/cache@v3...v3.3.3

v3.3.2

Compare Source

What's Changed

• Fixed readme with new segment timeout values by @​kotewar in https://github.com/actions/cache/pull/1133
• Readme fixes by @​kotewar in https://github.com/actions/cache/pull/1134
• Updated description of the lookup-only input for main action by @​kotewar in https://github.com/actions/cache/pull/1130
• Change two new actions mention as quoted text by @​bishal-pdMSFT in https://github.com/actions/cache/pull/1131
• Update Cross-OS Caching tips by @​pdotl in https://github.com/actions/cache/pull/1122
• Bazel example (Take #​2️⃣) by @​vorburger in https://github.com/actions/cache/pull/1132
• Remove actions to add new PRs and issues to a project board by @​jorendorff in https://github.com/actions/cache/pull/1187
• Consume latest toolkit and fix dangling promise bug by @​chkimes in https://github.com/actions/cache/pull/1217
• Bump action version to 3.3.2 by @​bethanyj28 in https://github.com/actions/cache/pull/1236

New Contributors

• @​vorburger made their first contribution in https://github.com/actions/cache/pull/1132
• @​jorendorff made their first contribution in https://github.com/actions/cache/pull/1187
• @​chkimes made their first contribution in https://github.com/actions/cache/pull/1217
• @​bethanyj28 made their first contribution in https://github.com/actions/cache/pull/1236

Full Changelog: actions/cache@v3...v3.3.2

actions/setup-java (actions/setup-java)

v3.13.0

Compare Source

What's changed

In the scope of this release, support for Dragonwell JDK was added by @​Accelerator1996 in https://github.com/actions/setup-java/pull/532

steps:
 - name: Checkout
   uses: actions/checkout@v3
 - name: Setup-java
   uses: actions/setup-java@v3
   with:
     distribution: 'dragonwell'
     java-version: '17'

Several inaccuracies were also fixed:

• Fix XML namespaces wrongly using https by @​gnodet in https://github.com/actions/setup-java/pull/503
• Fix typo and remove unintentional(?) word by @​CyberFlameGO in https://github.com/actions/setup-java/pull/518
• Fix usage link within the README.md file by @​dassiorleando in https://github.com/actions/setup-java/pull/525

New Contributors

• @​CyberFlameGO made their first contribution in https://github.com/actions/setup-java/pull/518
• @​dassiorleando made their first contribution in https://github.com/actions/setup-java/pull/525
• @​gnodet made their first contribution in https://github.com/actions/setup-java/pull/503
• @​Accelerator1996 made their first contribution in https://github.com/actions/setup-java/pull/532

Full Changelog: actions/setup-java@v3...v3.13.0

v3.12.0

Compare Source

In scope of this release the following changes were made:

Bug fixes:

• Always check postfix "Contents/Home" on macOS by @​erwin1 in https://github.com/actions/setup-java/pull/397
• Fix sbt/scala cache key by @​Dogacel in https://github.com/actions/setup-java/pull/478
• Corretto toolcache folder name fix by @​IvanZosimov in https://github.com/actions/setup-java/pull/480
• Update versions of Oracle JDK and Microsoft Build of OpenJDK by @​anishi1222 in https://github.com/actions/setup-java/pull/489
• Update Oracle JDK download URL calculation by @​nikolai-laevskii in https://github.com/actions/setup-java/pull/507

Feature implementations:

• Add versions properties to cache by @​Endi327 in https://github.com/actions/setup-java/pull/280

Resolving dependencies issues:

• Remove implicit dependencies by @​nikolai-laevskii in https://github.com/actions/setup-java/pull/494
• Update xml2js by @​dmitry-shibanov in https://github.com/actions/setup-java/pull/484
• Update dependencies by @​IvanZosimov in https://github.com/actions/setup-java/pull/511

Infrastructure updates:

• Fix glob bug in package.json scripts section by @​IvanZosimov in https://github.com/actions/setup-java/pull/475
• Update mocks by @​nikolai-laevskii in https://github.com/actions/setup-java/pull/498

Documentation changes:

• Instruction to download custom distribution JDK and install by @​ragsmpl in https://github.com/actions/setup-java/pull/500

New Contributors

• @​erwin1 made their first contribution in https://github.com/actions/setup-java/pull/397
• @​Dogacel made their first contribution in https://github.com/actions/setup-java/pull/478
• @​anishi1222 made their first contribution in https://github.com/actions/setup-java/pull/489
• @​nikolai-laevskii made their first contribution in https://github.com/actions/setup-java/pull/498
• @​ragsmpl made their first contribution in https://github.com/actions/setup-java/pull/500
• @​Endi327 made their first contribution in https://github.com/actions/setup-java/pull/280

Full Changelog: actions/setup-java@v3...v3.12.0

v3.11.0

Compare Source

In scope of this release we added support for IBM Semeru (OpenJ9) JDK (https://github.com/actions/setup-java/pull/289).

steps:
 - name: Checkout
   uses: actions/checkout@v3
 - name: Setup-java
   uses: actions/setup-java@v3
   with:
     distribution: semeru
     java-version: 17

Supported distributions

Currently, the following distributions are supported:

Keyword	Distribution	Official site	License
temurin	Eclipse Temurin	Link	Link
zulu	Azul Zulu OpenJDK	Link	Link
adopt or adopt-hotspot	AdoptOpenJDK Hotspot	Link	Link
adopt-openj9	AdoptOpenJDK OpenJ9	Link	Link
liberica	Liberica JDK	Link	Link
microsoft	Microsoft Build of OpenJDK	Link	Link
corretto	Amazon Corretto Build of OpenJDK	Link	Link
semeru	IBM Semeru Runtime Open Edition	Link	Link
oracle	Oracle JDK	Link	Link

gradle/gradle (gradle)

v8.11.1

Compare Source

v8.11: 8.11

Compare Source

The Gradle team is excited to announce Gradle 8.11.

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle:
Adam,
alyssoncs,
Bilel MEDIMEGH,
Björn Kautler,
Chuck Thomas,
Daniel Lacasse,
Finn Petersen,
JK,
Jérémie Bresson,
luozexuan,
Mahdi Hosseinzadeh,
Markus Gaisbauer,
Matthew Haughton,
Matthew Von-Maszewski,
ploober,
Siarhei,
Titus James,
vrp0211

Upgrade instructions

Switch your build to use Gradle 8.11 by updating your wrapper:

./gradlew wrapper --gradle-version=8.11

See the Gradle 8.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

v8.10.2

Compare Source

v8.10.1

Compare Source

v8.10

Compare Source

v8.9

Compare Source

v8.8: 8.8

Compare Source

The Gradle team is excited to announce Gradle 8.8.

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle:
Björn Kautler,
Denes Daniel,
Fabian Windheuser,
Hélio Fernandes Sebastião,
Jay Wei,
jhrom,
jwp345,
Jörgen Andersson,
Kirill Gavrilov,
MajesticMagikarpKing,
Maksim Lazeba,
Philip Wedemann,
Robert Elliot,
Róbert Papp,
Stefan M.,
Tibor Vyletel,
Tony Robalik,
Valentin Kulesh,
Yanming Zhou,
김용후

Upgrade instructions

Switch your build to use Gradle 8.8 by updating your wrapper:

./gradlew wrapper --gradle-version=8.8

See the Gradle 8.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

v8.7: 8.7

Compare Source

The Gradle team is excited to announce Gradle 8.7.

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle:
Aleksandr Postnov,
Björn Kautler,
Brice Dutheil,
Denis Buzmakov,
Federico La Penna,
Gregor Dschung,
Hal Deadman,
Hélio Fernandes Sebastião,
Ivan Gavrilovic,
Jendrik Johannes,
Jörgen Andersson,
Marie,
pandaninjas,
Philip Wedemann,
Ryan Schmitt,
Steffen Yount,
Tyler Kinkade,
Zed Spencer-Milnes

Upgrade instructions

Switch your build to use Gradle 8.7 by updating your wrapper:

./gradlew wrapper --gradle-version=8.7

See the Gradle 8.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

v8.6: 8.6

Compare Source

The Gradle team is excited to announce Gradle 8.6.

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle:
Baptiste Decroix,
Björn Kautler,
Daniel Lacasse,
Danny Thomas,
Hyeonmin Park,
jeffalder,
Jendrik Johannes,
John Jiang,
Kaiyao Ke,
Kevin Mark,
king-tyler,
Marcin Dąbrowski,
Marcin Laskowski,
Markus Gaisbauer,
Mel Arthurs,
Ryan Schmitt,
Surya K N,
Vladislav Golubtsov,
Yanshun Li,
Andrzej Ressel

Upgrade instructions

Switch your build to use Gradle 8.6 by updating your wrapper:

./gradlew wrapper --gradle-version=8.6

See the Gradle 8.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

v8.5: 8.5

Compare Source

The Gradle team is excited to announce Gradle 8.5.

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle:
Ahmed Ehab,
Alex Landau,
Aurimas,
Björn Kautler,
bodhili,
Daniel Le Berre,
davidburstrom,
Franz Wimmer,
Jongwoo Han,
Ken,
Leonardo Silveira,
Martin Bonnin,
Matthew Von-Maszewski,
Nik Clayton,
noeppi_noeppi,
Philip Wedemann,
Philipp Schneider,
Tomas Bjerre

Upgrade instructions

Switch your build to use Gradle 8.5 by updating your wrapper:

./gradlew wrapper --gradle-version=8.5

See the Gradle 8.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

v8.4: 8.4

Compare Source

The Gradle team is excited to announce Gradle 8.4.

Amongst other improvements, this release addresses two security vulnerabilities:

• Incorrect permission assignment for symlinked files used in copy or archiving operations
• Possible local text file exfiltration by XML External entity injection

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle:
Ahmed Ehab,
Andrei Rybak,
Baptiste Decroix,
Björn Kautler,
Cesar de la Vega,
Ganavi Jayaram,
Gaurav Padam,
hwanseok,
J.T. McQuigg,
Jakub Chrzanowski,
Jendrik Johannes,
kackey0-1,
Konstantin Gribov,
Pratik Haldankar,
Qinglin,
Sebastian Schuberth,
Thad House,
valery1707,
Vladimir Sitnikov,
wuyangnju,
Yanming Zhou,
Yanshun Li,
Yusuke Uehara,
zeners

Upgrade instructions

Switch your build to use Gradle 8.4 by updating your wrapper:

./gradlew wrapper --gradle-version=8.4

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

v8.3: 8.3

Compare Source

The Gradle team is excited to announce Gradle 8.3.

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle:
Adam,
Ahmed Ehab,
Aurimas,
Baptiste Decroix,
Björn Kautler,
Borewit,
Korov,
Mohammed Thavaf,
Patrick Brückner,
Philip Wedemann,
Róbert Papp,
Shi Chen,
Tony Robalik

Upgrade instructions

Switch your build to use Gradle 8.3 by updating your wrapper:

./gradlew wrapper --gradle-version=8.3

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

v8.2.1

Compare Source

v8.2: 8.2

Compare Source

The Gradle team is excited to announce Gradle 8.2.

Amongst other improvements, this release addresses two security vulnerabilities:

• Dependency cache path traversal
• Path traversal vulnerabilities in handling of Tar archives

Read the Release Notes

We would like to thank the following community contributors for their contributions to this release of Gradle:

Bruno Didot,
Eric Vantillard,
esfomeado,
Jendrik Johannes,
Jonathan Leitschuh,
Lee Euije,
Stefan Oehme,
Todor Dinev,
Yanshun Li

Upgrade instructions

Switch your build to use Gradle 8.2 by updating your wrapper:

./gradlew wrapper --gradle-version=8.2

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

v8.1.1: 8.1.1

Compare Source

This is a patch release for Gradle 8.1. We recommend using 8.1.1 instead of 8.1.

It fixes the following issues:

• #​24748 MethodTooLargeException when instrumenting a class with thousand of lambdas for configuration cache
• #​24754 Kotlin DSL precompiled script plugins built with Gradle 8.1 cannot be used with other versions of Gradle
• #​24788 Gradle 8.1 configure freeCompilerArgs for Kotlin in buildSrc breaks build with unhelpful errors

Read the Release Notes

Upgrade Instructions

Switch your build to use Gradle 8.1.1 by updating your wrapper:

./gradlew wrapper --gradle-version=8.1.1

See the Gradle 8.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading to Gradle 8.1.1.

Reporting Problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

v8.1: 8.1

Compare Source

The Gradle team is excited to announce Gradle 8.1.

Read the Release Notes

We would like to thank the following community contributors for their contributions to this release of Gradle:

André Sousa,
Attila Király,
Aurimas,
Björn Kautler,
Christoph Dreis,
David Morris,
DJtheRedstoner,
Gabriel Feo,
J.T. McQuigg,
JavierSegoviaCordoba,
JayaKrishnan Nair K,
Jeff Widman,
kackey0-1,
Martin Bonnin,
Martin Kealey,
modmuss50,
pan93412,
Sebastian Schuberth,
Simon Marquis,
TheDadda,
Thrillpool,
valery1707,
Xin Wang,
Yanshun Li

Upgrade instructions

Switch your build to use Gradle 8.1 by updating your wrapper:

./gradlew wrapper --gradle-version=8.1

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

gradle/wrapper-validation-action (gradle/wrapper-validation-action)

v1.1.0

Compare Source

The action now adds the path of the failed wrapper Jar as a failed-wrapper Step output parameter.
This makes the value available for reporting in later Steps/Jobs.

projectlombok/lombok (org.projectlombok:lombok)

v1.18.36

Compare Source

v1.18.34

v1.18.32

v1.18.30

v1.18.28

JetBrains/java-annotations (org.jetbrains:annotations)

v24.1.0

Compare Source

• @CheckReturnValue is not experimental anymore.

javaparser/javaparser (com.github.javaparser:javaparser-core)

v3.26.2

issues resolved

Changed

• Move formatting workflows into separate file (PR #​4480 by @​johannescoetzee)
• Exclude unavailable macos <-> java version combinations from github tests (PR #​4479 by @​johannescoetzee)

Fixed

• Fixes #​4526. Fix Node.PostOrderIterator for roots without children (PR #​4538 by @​ktul)
• Add missing copyright notice to RecordPatternExpr.java (PR #​4527 by @​johannescoetzee)
• Add missing type erasure in ClassOrInterfaceType.toDescriptor (PR #​4522 by @​johanneskloos)
• Allow primitive types for patterns (PR #​4506 by @​johannescoetzee)
• Fix project formatting (PR #​4499 by @​johannescoetzee)
• Fix: issue 4492 resolve LambdaExpr has NullPointException (PR #​4497 by @​jlerbsc)
• Fix: issue 2738 UnsolvedSymbolException while trying to ResolvedMethodDeclaration from MethodCallExpr (PR #​4482 by @​jlerbsc)

Developer Changes

• fix(deps): update byte-buddy.version to v1.15.1 (PR #​4547 by @​renovate[bot])
• fix(deps): update byte-buddy.version to v1.15.0 (PR #​4543 by @​renovate[bot])
• fix(deps): update dependency com.google.guava:guava to v33.3.0-jre (PR #​4532 by @​renovate[bot])
• fix(deps): update dependency net.bytebuddy:byte-buddy-agent to v1.14.19 (PR #​4531 by @​renovate[bot])
• chore(deps): update junit5 monorepo to v5.11.0 (PR #​4528 by @​renovate[bot])
• fix(deps): update byte-buddy.version to v1.14.18 (PR #​4493 by @​renovate[bot])
• chore(deps): update actions/checkout action to v4.1.7 (PR #​4486 by @​renovate[bot])
• chore(deps): update actions/checkout action to v4.0.0 (PR #​4485 by @​renovate[bot])
• chore(deps): update junit5 monorepo to v5.10.3 (PR #​4483 by @​renovate[bot])

Uncategorised

• Add better instructions for re-formatting the project (PR #​4540 by @​johannescoetzee)

❤️ Contributors

Thank You to all contributors who worked on this release!

• @​johanneskloos
• @​ktul
• @​johannescoetzee
• @​kamilkrzywanski
• @​jlerbsc

v3.26.1

issues resolved

Added

• Fix record declarations nested in annotation declarations (PR #​4460 by @​johannescoetzee)

Changed

• Format code with spotless (PR #​4465 by @​johannescoetzee)
• Simplifying the search for types in compilation unit (PR #​4459 by @​jlerbsc)
• Add spotless plugin configuration (PR #​4409 by @​johannescoetzee)

Fixed

• Disable spotless ratcheting and fix formatting (PR #​4478 by @​johannescoetzee)
• Fix: issue 4450 Endless recursion (-> StackOverflow) with cyclic static references (PR #​4477 by @​jlerbsc)
• Fix: issue 4399 MethodCallExpr inside lambda in assignment expression cannot be resolved (PR #​4462 by @​jlerbsc)
• Fix crash on SwitchExpr entries if tokens are not stored (PR #​4461 by @​johannescoetzee)
• Fix lookahead for pattern expression in switch entries [Issue 4455] (PR #​4458 by @​johannescoetzee)

Developer Changes

• Automatically format code after codegen and validate with a github action (PR #​4468 by @​johannescoetzee)
• Add git-blame-ignore-revs file to ignore the reformatting commit in git blame (PR #​4466 by @​johannescoetzee)

Uncategorised

• Add link to the guide to adding nodes in CONTRIBUTING.md (PR #​4453 by @​johannescoetzee)

❤️ Contributors

Thank You to all contributors who worked on this release!

• @​johannescoetzee
• @​jlerbsc

v3.26.0

issues resolved

Added

• [JEP 440] Add support for record patterns (PR #​4432 by @​johannescoetzee)
• PatternExpr -> TypePatternExpr refactor in preparation for record pattern implementation (PR #​4387 by @​johannescoetzee)
• [JEP441] Add support for switch pattern matching (PR #​4375 by @​johannescoetzee)
• Add support for case null, default in switch and fix concrete syntax model for new switch syntax (PR #​4364 by @​johannescoetzee)

Changed

• Fixes SYSTEM_EOL warnings (PR #​4412 by @​matthieu-vergne)
• Refact: Adds a find node by range method in Node class (PR #​4377 by @​jlerbsc)

Fixed

• Fix: issue 3277 StackOverflow issue while parse MethodCallExpr/FieldAccessExpr, their ancestor/child node is ObjectCreation expression which contain .new (PR #​4447 by @​jlerbsc)
• Fix expressions in the body of switch expression entries (Issue 4440) (PR #​4446 by @​johannescoetzee)
• Fix: issue 4442 LexicalPreservingPrinter does not support unexpected token (PR #​4444 by @​jlerbsc)
• Fix: issue 3100 JavaSymbolSolver unable to resolve an inner class defined in a base class (PR #​4441 by @​jlerbsc)
• Fix: 4330 Method 'forEach' cannot be resolved in certain context (PR #​4436 by @​jlerbsc)
• Fix: 'permits' and 'sealed' Contextual keyworlds usage (PR #​4434 by @​jlerbsc)
• Fixes an error in jbehave tests when they are run in a Windows os (PR #​4433 by @​jlerbsc)
• Make resolution of implements and extends types start with the parent… (P

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.