Bump org.checkerframework:checker-qual from 3.40.0 to 3.42.0

[dependabot]

Bumps org.checkerframework:checker-qual from 3.40.0 to 3.42.0.

Release notes

Sourced from org.checkerframework:checker-qual's releases.

Checker Framework 3.42.0

Version 3.42.0 (December 15, 2023)

User-visible changes:

Method annotation @AssertMethod indicates that a method checks a value and possibly throws an assertion. Using it can make flow-sensitive type refinement more effective.

In org.checkerframework.common.util.debug, renamed EmptyProcessor to DoNothingProcessor. Removed org.checkerframework.common.util.report.DoNothingChecker. Moved ReportChecker from org.checkerframework.common.util.report to org.checkerframework.common.util.count.report.

Checker Framework 3.41.0

Version 3.41.0 (December 4, 2023)

User-visible changes:

New command-line options: -AassumePureGetters Unsoundly assume that every getter method is pure

Implementation details:

Added method isDeterministic() to the AnnotationProvider interface.

CFAbstractValue#leastUpperBound and CFAbstractValue#widenUpperBound are now final. Subclasses should override method CFAbstractValue#upperBound(V, TypeMirror, boolean) instead.

Closed issues:

#1497, #3345, #6037, #6204, #6276, #6282, #6290, #6296, #6319, #6327.

Changelog

Sourced from org.checkerframework:checker-qual's changelog.

Version 3.42.0 (December 15, 2023)

User-visible changes:

Method annotation @AssertMethod indicates that a method checks a value and possibly throws an assertion. Using it can make flow-sensitive type refinement more effective.

In org.checkerframework.common.util.debug, renamed EmptyProcessor to DoNothingProcessor. Removed org.checkerframework.common.util.report.DoNothingChecker. Moved ReportChecker from org.checkerframework.common.util.report to org.checkerframework.common.util.count.report.

Version 3.41.0 (December 4, 2023)

User-visible changes:

New command-line options: -AassumePureGetters Unsoundly assume that every getter method is pure

Implementation details:

Added method isDeterministic() to the AnnotationProvider interface.

CFAbstractValue#leastUpperBound and CFAbstractValue#widenUpperBound are now final. Subclasses should override method CFAbstractValue#upperBound(V, TypeMirror, boolean) instead.

Closed issues:

#1497, #3345, #6037, #6204, #6276, #6282, #6290, #6296, #6319, #6327.

Commits

• ed3a237 new release 3.42.0
• 9053af5 Prep for release.
• 886d0b3 Add support for opt.map(type::method) pattern. (#6370)
• 4b5e2c9 ReportChecker: Fix array access crash
• 3eb26a9 Fix guava-assertions.astub
• 7906a83 Add -y, a second command-line option for exclusion
• b38ed80 Fix Kotlin instructions
• ae8a6e1 Add support for OptionalDouble, OptionalInt, OptionalLong
• 17226ff Add Optional method annotations
• 964d027 Permit Stream.filter(Optional::isPresent).map(Optional::get)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[codecov]

Codecov Report

Merging #3857 (39570ae) into main (b996eb1) will decrease coverage by 0.02%.
The diff coverage is n/a.

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #3857      +/-   ##
==========================================
- Coverage   66.60%   66.58%   -0.02%     
==========================================
  Files         298      298              
  Lines       21188    21188              
  Branches     3453     3453              
==========================================
- Hits        14112    14109       -3     
- Misses       5361     5362       +1     
- Partials     1715     1717       +2     

see 4 files with indirect coverage changes

[opensearch-trigger-bot]

The backport to 2.x failed:

The process '/usr/bin/git' failed with exit code 128

To backport manually, run these commands in your terminal:

# Navigate to the root of your repository
cd $(git rev-parse --show-toplevel)
# Fetch latest updates from GitHub
git fetch
# Create a new working tree
git worktree add ../.worktrees/security/backport-2.x 2.x
# Navigate to the new working tree
pushd ../.worktrees/security/backport-2.x
# Create a new branch
git switch --create backport/backport-3857-to-2.x
# Cherry-pick the merged commit of this pull request and resolve the conflicts
git cherry-pick -x --mainline 1 604c25f1f91828608cdd1544f278ba4d17d30518
# Push it to GitHub
git push --set-upstream origin backport/backport-3857-to-2.x
# Go back to the original working tree
popd
# Delete the working tree
git worktree remove ../.worktrees/security/backport-2.x

Then, create a pull request where the base branch is 2.x and the compare/head branch is backport/backport-3857-to-2.x.