Bump com.uber.nullaway:nullaway from 0.12.7 to 0.12.8

[dependabot]

Bumps com.uber.nullaway:nullaway from 0.12.7 to 0.12.8.

Release notes

Sourced from com.uber.nullaway:nullaway's releases.

NullAway 0.12.8

• Document interactions between Guava and JSpecify mode in README (#1208)
• JSpecify: handle nullness annotations from extends / inherits clauses (#1211)
• Allowing NewClassTree to be passed into getGenericParameterNullnessAtInvocation (#1210)
• Support @​NullMarked on modules (#1216)
• Handle NewClassTree in compareGenericTypeParameterNullabilityForCall(#1212) (#1217)
• More flexible handling of AssertJ isNotNull methods (#1221)
• Support AssertJ hasSize() (#1229)
• Inference of generic method type arguments based on returns and parameter passing (#1226)
• Prototype implementation of javac plugin to serialize nullness annotations (#1225)
• Add AdditionalSuppressionNames configuration option (#1231)
• Updates to deploy releases to Central Portal (#1234)
• Fix to handling of case null (#1235)
• Maintenance
  • Update to Gradle 8.14 (#1213)
  • Update to Error Prone 2.39.0 (#1228)
  • Fix broken link to Eradicate in README.md (#1227)

Changelog

Sourced from com.uber.nullaway:nullaway's changelog.

Version 0.12.8

• Document interactions between Guava and JSpecify mode in README (#1208)
• JSpecify: handle nullness annotations from extends / inherits clauses (#1211)
• Allowing NewClassTree to be passed into getGenericParameterNullnessAtInvocation (#1210)
• Support @​NullMarked on modules (#1216)
• Handle NewClassTree in compareGenericTypeParameterNullabilityForCall(#1212) (#1217)
• More flexible handling of AssertJ isNotNull methods (#1221)
• Support AssertJ hasSize() (#1229)
• Inference of generic method type arguments based on returns and parameter passing (#1226)
• Prototype implementation of javac plugin to serialize nullness annotations (#1225)
• Add AdditionalSuppressionNames configuration option (#1231)
• Updates to deploy releases to Central Portal (#1234)
• Fix to handling of case null (#1235)
• Maintenance
  • Update to Gradle 8.14 (#1213)
  • Update to Error Prone 2.39.0 (#1228)
  • Fix broken link to Eradicate in README.md (#1227)

Commits

• eed74de Prepare for release 0.12.8.
• ee85996 Fix to handling of case null (#1235)
• d655f8f Updates to deploy releases to Central Portal (#1234)
• de6b680 Add AdditionalSuppressionNames configuration option (#1231)
• 10d4fee Prototype implementation of javac plugin to serialize nullness annotations (#...
• 20dd152 Inference of generic method type arguments based on returns and parameter pas...
• a6273b0 Support AssertJ hasSize() (#1229)
• e39856e Update to Error Prone 2.39.0 (#1228)
• 5b22fb4 Fix broken link to Eradicate in README.md (#1227)
• 5209429 More flexible handling of AssertJ isNotNull methods (#1221)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

☀️   Quality Monitor

Tests

     Unit Tests: 98% successful (86 passed, 2 skipped)
   ⛔   Architecture Tests: 100% successful (17 passed)

Code Coverage

   〰️   Line Coverage: 92% (61 missed lines)
   ➰   Branch Coverage: 91% (19 missed branches)

Mutation Coverage

     Mutation Coverage: 80% (80 survived mutations)
   💪   Test Strength: 85% (58 survived mutations in tested code)

Style

     CheckStyle: No warnings
     PMD: No warnings

Bugs

     SpotBugs: No bugs
   🐛   Error Prone: 4 bugs (normal: 4)

API Problems

   🚫   Revapi: No warnings

Vulnerabilities

   🛡️   OWASP Dependency Check: No vulnerabilities

Software Metrics

   🌀   Cyclomatic Complexity: 376 (total)
   💭   Cognitive Complexity: 173 (total)
   ➿   N-Path Complexity: 340 (total)
   📏   Lines of Code: 4270 (total)
   📝   Non Commenting Source Statements: 1257 (total)
   🔗   Class Cohesion: 71.43% (maximum)
   ⚖️   Weight of Class: 100.00% (maximum)

---

Created by Quality Monitor v3.1.0 (#1729b68). More details are shown in the GitHub Checks Result.