chore(deps): Update dependency com.uber.nullaway:nullaway to v0.14.1

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
com.uber.nullaway:nullaway	0.13.4 → 0.14.1

---

Release Notes

uber/NullAway (com.uber.nullaway:nullaway)

v0.14.1

Several bug fixes in this release, particularly for JSpecifyExperimental.
Thanks to all who tested out this mode, reported bugs, and contributed! Please
continue to test and send feedback. See the 0.14.0 release notes below for
more information on JSpecifyExperimental.

• Fix restoring nullness annotations from an unbounded wildcard to a captured type (#​1717)
• JSpecify: support anonymous diamond classes by @​subhramit (#​1710)
• Fix attribute errors reported during dataflow (#​1736)
• Apply library models to an overridden method type when checking overrides (#​1722)
• Deduplicate generic inference failure warnings (#​1741)
• Preserve nested nullness annotations through inheritance (#​1742)
• Fix crash for generic qualifiers in method references (#​1744)
• Cache immutable stubx library models (#​1745)
• Allow nullable method references for void functions (#​1747)
• Preserve nested nullness in enhanced-for variable types (#​1748)
• Track nullable elements in enhanced-for dataflow (#​1749)
• Honor ignored methods in null-marked library models (#​1753)
• Avoid crashes on malformed @Contract arity (fixes #​1726) (#​1756)
• Inherit null-implies-null models across overrides (#​1758)
• Fix inference for annotated type variable uses (#​1759)
• Preserve contract unreachability across store joins (#​1761)
• Prevent recursion on self-referential wildcard bounds (#​1763)
• Work around pre-JDK-25 limitations in reading upper bounds from wildcard arguments in bytecode (#​1764)
• Improve diagnostics for non-null type variable bounds (#​1770)
• Fix override checks for method type variables bounded by a class type variable by @​pivovarit (#​1775)
• Maintenance
  • Migrate FrameworkTests to addSourceLines by @​abdeltaehass (#​1712)
  • Attribute errors reported during dataflow to the right file by @​vlsi (#​1734)
  • Disable CodeRabbit summaries (#​1755)
  • Add tests for overrides of Collection.toArray (#​1757)
  • Assert the full set of diagnostics for annotated type-variable uses by @​vlsi (#​1768)
  • Document that a nullImpliesNull model applies to overriding methods by @​vlsi (#​1771)
  • Add tests for the JSpecify nullness operator by @​vlsi (#​1767)

v0.14.0

This release has significant improvements to JSpecify support, including
improved support for wildcards and integration of the standard library
nullability annotations from https://github.com/jspecify/jdk. Much of this
new support is gated behind a new JSpecifyExperimental flag, which is off by
default. We disable the flag by default since this new support leads to many
new errors in existing projects (mostly from the new JDK models), and because we
need more real-world testing before enabling it by default. We encourage
projects to enable the JSpecifyExperimental flag (alongside JSpecify mode) and
to report any issues that arise. We expect to turn JSpecifyExperimental on
by default in a future release.

Aside from the above, you may observe some newly reported warnings in JSpecify
mode, due to other checking improvements.

This release also removes the LegacyAnnotationLocations flag. Type-use
annotations must now be placed correctly on qualified and array types, even
outside JSpecify mode, see details here:

https://github.com/uber/NullAway/wiki/JSpecify-Support#type-use-annotation-placement

Beyond the above, we had useful changes from a variety of new contributors;
thanks so much!

• Remove LegacyAnnotationLocations flag (#​1640)
• Handle signature-polymorphic calls in InvocationArguments (#​1644)
• Fix handling of reference to method with @Nullable parameter from library model (#​1642)
• Enable JSpecify JDK models (under a flag) (#​1641)
• Enable JSpecify JDK models for regression tests (#​1646)
• Fix bug with lambdas assigned to locals with a wildcard in their type (#​1647)
• Add JSpecifyExperimental configuration flag (#​1648)
• Improve wildcard mismatch diagnostics for identical-looking types (#​1627)
• Enable inference failure warnings in experimental mode, and fix related bug in library models (#​1649)
• Fix inference bug with generic instance methods (#​1654)
• Fixes related to captured types and inference (#​1655)
• Augment NullAway error / fix serialization for Annotator auto fix mode by @​nimakarimipour (#​1322)
• More consistent checks for captured types (#​1662)
• Update to JSpecify 1.0.1 (#​1665)
• Add test for issue 1671 (#​1673)
• Test case and fix for issue 1672 (#​1674)
• Fix subtype checking for nested captured types (#​1663)
• Handle interaction of captured types and library models (#​1666)
• Follow-on fix for restoring annotation on captured type wildcards (#​1667)
• Fix subtle issue with invalid TreePaths (#​1681)
• Honor @​Contract when a @​Nullable method is used as a method reference by @​Eljees (#​1679)
• Defensively thread path into NestedTypeVarSubstitutionRepairVisitor (#​1683)
• More TreePath hardening (#​1684)
• Harden TypeSubstitutionUtils type copies (#​1669)
• Handle unbound wildcards and interactions with captured types better (#​1668)
• Improve error messages involving capture variables (#​1675)
• Update JarInfer to skip synthetic methods (#​1686)
• Fix bug with storing library model type variable upper bounds (#​1687)
• Fixes for processing return array types and multi-dimensional array types in AstubxGenerator (#​1689)
• Pretty-print substituted types in bad-override error messages by @​dbwiddis (#​1697)
• Add test for issue 1693 (#​1698)
• JSpecify: support annotated type arguments from an enclosing class by @​dbwiddis (#​1699)
• Fix crash in @​Contract dataflow init for zero-argument methods by @​dbwiddis (#​1701)
• Support method-based conditional library model postconditions by @​Shankar-v27 (#​1677)
• Update JSpecify JDK astubx (#​1702)
• JSpecify: preserve array element nullability through requireNonNull by @​kamilkrzywanski (#​1645)
• Add positive test cases for annotations on generic method return types by @​dbwiddis (#​1704)
• Add regression test for inner classes inheriting enclosing type arguments by @​dbwiddis (#​1703)
• Fix JSpecify false negative when override narrows method type variable bound by @​arimu1 (#​1682)
• Fix bug with library-modeled return types, method references, and streams (#​1706)
• Rename MethodInferenceResult to CallInferenceResult (#​1692)
• Generalize generic-call inference internals to call expressions (#​1707)
• Basic nullability inference for diamond constructor type arguments (#​1708)
• Handle nested generic diamond call inference (#​1544)
• Rename getExecutableTypeForInference and improve Javadoc (#​1709)
• Maintenance
  • Add policy on AI-generated PRs (#​1635)
  • Enable CodeRabbit reviews for all base branches (#​1650)
  • Fix Javadoc errors and allow future Javadoc errors to fail the build (#​1652)
  • Test on JDK 28 early access (#​1653)
  • Update to latest Shadow plugin (#​1658)
  • Remove duplicate NestedAnnotationInfo source from NullAway module (#​1659)
  • Fix Javadoc warnings (#​1660)
  • Fixes to JarInfer test harness and test inputs (#​1670)
  • Address zizmor findings (#​1676)
  • Update to Checker Dataflow 4.2.2 (#​1678)
  • Convert various classes to records (#​1685)
  • Update script to use snapshot builds in integration tests (#​1691)
  • Replace deprecated addSourceFile calls with addSourceLines in FrameworkTests by @​dbwiddis (#​1695)
  • Migrate InitializationTests to addSourceLines by @​abdeltaehass (#​1694)
  • Migrate anonymous class test to addSourceLines by @​terminalchai (#​1696)

v0.13.8

Mostly minor bug fixes. Note that NullAway now treats Map.remove as returning @Nullable (#​1623), which may lead
to newly-reported warnings.

• Quote syntax element references in error messages by @​AryamannSingh7 (#​1620)
• Fix stream nullability propagation through sorted() (Fixes #​1538) by @​dyrpsf (#​1610)
• Add support for reactor by @​subhramit (#​1599)
• Fix issue with passing poly expression to a function parameter with type from library model (#​1614)
• Fix crash with library model @​Nullable being applied to wildcard (#​1615)
• Add more modeling for Optional (#​1613)
• Update lombok section at README.md by @​jevanlingen (#​1624)
• Model Map.remove as nullable by @​codingkiddo (#​1623)
• Better support for conditional expressions in JSpecify mode (#​1608)
• Fix issue with reading annotations on record constructor parameters due to javac bug (#​1636)
• Maintenance
  • Update to Gradle 9.6.1 and AGP 9.3.0 (#​1634)

v0.13.7

This is a minor bug fix release addressing a couple of issues observed in 0.13.6.

• Add support for filtering null objects from streams in #​1597
• Report init warnings for JPA constructors with arguments in #​1604
• Maintenance
  • Update release instructions in #​1593
  • Switch code coverage aggregation to use built-in jacoco plugin by @​subhramit in #​1598
  • Bump Error Prone to 2.50.0 in #​1601

v0.13.6

(NOTE: originally these notes appeared with the 0.13.5 release, but that release was pushed
incorrectly due to an error in our release process.)

Includes various bug fixes, particularly in JSpecify mode. Also, the nullaway-annotations
artifact now includes a @Contract annotation. NullAway also now has a built-in handler
to reason about field initialization in classes managed by Jakarta Persistence.

Work has begun on support for wildcards in JSpecify mode. Currently, this support is off
by default, guarded by the configuration flag HandleWildcardGenerics. The support still
has multiple known bugs, and we do not yet recommend enabling it.

• Initial subtype checking for wildcards (#​1520)
• Handle subtype checking for wildcard super bounds (#​1547)
• Handle most remaining wildcard subtyping / containment cases (#​1548)
• Test case for #​1528 (#​1556)
• Initial inference for wildcards (#​1549)
• Fix wildcard inference bug with method references (#​1553)
• Fix nullability for return and parameter wildcards (#​1558)
• Test case for trick to assert chain of accesses is non-null (#​1566)
• Improve inference failure error message (#​1567)
• Adjust more TreePaths to have correct leaf before calling getTreeType (#​1570)
• Add Contract annotation to nullaway-annotations by @​codingkiddo (#​1569)
• Run inference for generic method calls nested inside receivers (#​1571)
• Refactor hasAnyAnnotationMatching method (#​1583)
• Improve handling of var-declared local variables (#​1573)
• Compensate for more annotations inserted by javac (#​1574)
• Enable test for issue 1500 and add comment (#​1560)
• Use ground target types when handling lambdas and method refs passed to generic methods (#​1575)
• Fix for unbounded wildcard passed to @NullUnmarked type variable (#​1577)
• Detect and warn on annotations directly on wildcard types (#​1579)
• Enable HandleWildcardGenerics flag when building NullAway (#​1586)
• Report error when @​Initializer is used on a constructor by @​Vinu2111 (#​1546)
• Add a handler for Jakarta Persistence to reason about field initialization (#​1584)
• Revert "Report error when @​Initializer is used on a constructor (#​1546)" (#​1588)
• Maintenance
  • Use Jacoco 0.8.15 snapshot (#​1550)
  • Update to Gradle 9.5.0 (#​1554)
  • Test with latest Error Prone snapshot on CI (#​1555)
  • Add Spring Boot as an integration test (#​1557)
  • Enable generic bytecode tests on JDK 17 (#​1561)
  • Update spotless and guava-latest deps, removed unused semver4j (#​1562)
  • Use text blocks in more tests (#​1563)
  • Use text blocks for addInputLines and addOutputLines calls (#​1564)
  • Use Temurin JDK 17 always in CI (#​1565)
  • Tell agents not to run multiple Gradle builds in parallel (#​1582)
  • Update Codecov action to v6 (#​1587)

v0.13.5

DO NOT USE THIS RELEASE. It was pushed incorrectly due to an error in our release process.
Please use version 0.13.6 instead.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • On day 1 of the month (* * 1 * *)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.