Skip to content

Bump com.uber.nullaway:nullaway from 0.13.8 to 0.14.0 - #402

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/com.uber.nullaway-nullaway-0.14.0
Open

Bump com.uber.nullaway:nullaway from 0.13.8 to 0.14.0#402
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/com.uber.nullaway-nullaway-0.14.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 24, 2026

Copy link
Copy Markdown
Contributor

Bumps com.uber.nullaway:nullaway from 0.13.8 to 0.14.0.

Release notes

Sourced from com.uber.nullaway:nullaway's releases.

NullAway 0.14.0

This release has significant improvements to JSpecify support, including improved support for wildcards and integration of the standard library nullability annotations from https://github.com/jspecify/jdk. Much of this new support is gated behind a new JSpecifyExperimental flag, which is off by default. We disable the flag by default since this new support leads to many new errors in existing projects (mostly from the new JDK models), and because we need more real-world testing before enabling it by default. We encourage projects to enable the JSpecifyExperimental flag (alongside JSpecify mode) and to report any issues that arise. We expect to turn JSpecifyExperimental on by default in a future release.

Aside from the above, you may observe some newly reported warnings in JSpecify mode, due to other checking improvements.

This release also removes the LegacyAnnotationLocations flag. Type-use annotations must now be placed correctly on qualified and array types, even outside JSpecify mode, see details here:

https://github.com/uber/NullAway/wiki/JSpecify-Support#type-use-annotation-placement

Beyond the above, we had useful changes from a variety of new contributors; thanks so much!

  • Remove LegacyAnnotationLocations flag (#1640)
  • Handle signature-polymorphic calls in InvocationArguments (#1644)
  • Fix handling of reference to method with @Nullable parameter from library model (#1642)
  • Enable JSpecify JDK models (under a flag) (#1641)
  • Enable JSpecify JDK models for regression tests (#1646)
  • Fix bug with lambdas assigned to locals with a wildcard in their type (#1647)
  • Add JSpecifyExperimental configuration flag (#1648)
  • Improve wildcard mismatch diagnostics for identical-looking types (#1627)
  • Enable inference failure warnings in experimental mode, and fix related bug in library models (#1649)
  • Fix inference bug with generic instance methods (#1654)
  • Fixes related to captured types and inference (#1655)
  • Augment NullAway error / fix serialization for Annotator auto fix mode by @​nimakarimipour (#1322)
  • More consistent checks for captured types (#1662)
  • Update to JSpecify 1.0.1 (#1665)
  • Add test for issue 1671 (#1673)
  • Test case and fix for issue 1672 (#1674)
  • Fix subtype checking for nested captured types (#1663)
  • Handle interaction of captured types and library models (#1666)
  • Follow-on fix for restoring annotation on captured type wildcards (#1667)
  • Fix subtle issue with invalid TreePaths (#1681)
  • Honor @​Contract when a @​Nullable method is used as a method reference by @​Eljees (#1679)
  • Defensively thread path into NestedTypeVarSubstitutionRepairVisitor (#1683)
  • More TreePath hardening (#1684)
  • Harden TypeSubstitutionUtils type copies (#1669)
  • Handle unbound wildcards and interactions with captured types better (#1668)
  • Improve error messages involving capture variables (#1675)

... (truncated)

Changelog

Sourced from com.uber.nullaway:nullaway's changelog.

Version 0.14.0

This release has significant improvements to JSpecify support, including improved support for wildcards and integration of the standard library nullability annotations from https://github.com/jspecify/jdk. Much of this new support is gated behind a new JSpecifyExperimental flag, which is off by default. We disable the flag by default since this new support leads to many new errors in existing projects (mostly from the new JDK models), and because we need more real-world testing before enabling it by default. We encourage projects to enable the JSpecifyExperimental flag (alongside JSpecify mode) and to report any issues that arise. We expect to turn JSpecifyExperimental on by default in a future release.

Aside from the above, you may observe some newly reported warnings in JSpecify mode, due to other checking improvements.

This release also removes the LegacyAnnotationLocations flag. Type-use annotations must now be placed correctly on qualified and array types, even outside JSpecify mode, see details here:

https://github.com/uber/NullAway/wiki/JSpecify-Support#type-use-annotation-placement

Beyond the above, we had useful changes from a variety of new contributors; thanks so much!

  • Remove LegacyAnnotationLocations flag (#1640)
  • Handle signature-polymorphic calls in InvocationArguments (#1644)
  • Fix handling of reference to method with @Nullable parameter from library model (#1642)
  • Enable JSpecify JDK models (under a flag) (#1641)
  • Enable JSpecify JDK models for regression tests (#1646)
  • Fix bug with lambdas assigned to locals with a wildcard in their type (#1647)
  • Add JSpecifyExperimental configuration flag (#1648)
  • Improve wildcard mismatch diagnostics for identical-looking types (#1627)
  • Enable inference failure warnings in experimental mode, and fix related bug in library models (#1649)
  • Fix inference bug with generic instance methods (#1654)
  • Fixes related to captured types and inference (#1655)
  • Augment NullAway error / fix serialization for Annotator auto fix mode by @​nimakarimipour (#1322)
  • More consistent checks for captured types (#1662)
  • Update to JSpecify 1.0.1 (#1665)
  • Add test for issue 1671 (#1673)
  • Test case and fix for issue 1672 (#1674)
  • Fix subtype checking for nested captured types (#1663)
  • Handle interaction of captured types and library models (#1666)
  • Follow-on fix for restoring annotation on captured type wildcards (#1667)
  • Fix subtle issue with invalid TreePaths (#1681)
  • Honor @​Contract when a @​Nullable method is used as a method reference by @​Eljees (#1679)
  • Defensively thread path into NestedTypeVarSubstitutionRepairVisitor (#1683)
  • More TreePath hardening (#1684)
  • Harden TypeSubstitutionUtils type copies (#1669)

... (truncated)

Commits
  • 3af91d8 Prepare for release 0.14.0.
  • ba5aaa1 Release notes for version 0.14.0 (#1713)
  • d008a79 Rename getExecutableTypeForInference and improve Javadoc (#1709)
  • 5cbc09f Handle nested generic diamond call inference (#1544)
  • a77c5fc Basic nullability inference for diamond constructor type arguments (#1708)
  • 7bb2f8a Generalize generic-call inference internals to call expressions (#1707)
  • 0b9421a Rename MethodInferenceResult to CallInferenceResult (#1692)
  • d427643 Fix bug with library-modeled return types, method references, and streams (#1...
  • 6329102 Fix JSpecify false negative when override narrows method type variable bound ...
  • 6bba0e5 Add regression test for inner classes inheriting enclosing type arguments (#1...
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [com.uber.nullaway:nullaway](https://github.com/uber/NullAway) from 0.13.8 to 0.14.0.
- [Release notes](https://github.com/uber/NullAway/releases)
- [Changelog](https://github.com/uber/NullAway/blob/master/CHANGELOG.md)
- [Commits](uber/NullAway@v0.13.8...v0.14.0)

---
updated-dependencies:
- dependency-name: com.uber.nullaway:nullaway
  dependency-version: 0.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Aug 24, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants