Bump nullaway.version to v0.13.6

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
com.uber.nullaway:nullaway	0.13.4 → 0.13.6

---

Release Notes

uber/NullAway (com.uber.nullaway:nullaway)

v0.13.6

(NOTE: originally these notes appeared with the 0.13.5 release, but that release was pushed
incorrectly due to an error in our release process.)

Includes various bug fixes, particularly in JSpecify mode. Also, the nullaway-annotations
artifact now includes a @Contract annotation. NullAway also now has a built-in handler
to reason about field initialization in classes managed by Jakarta Persistence.

Work has begun on support for wildcards in JSpecify mode. Currently, this support is off
by default, guarded by the configuration flag HandleWildcardGenerics. The support still
has multiple known bugs, and we do not yet recommend enabling it.

• Initial subtype checking for wildcards (#​1520)
• Handle subtype checking for wildcard super bounds (#​1547)
• Handle most remaining wildcard subtyping / containment cases (#​1548)
• Test case for #​1528 (#​1556)
• Initial inference for wildcards (#​1549)
• Fix wildcard inference bug with method references (#​1553)
• Fix nullability for return and parameter wildcards (#​1558)
• Test case for trick to assert chain of accesses is non-null (#​1566)
• Improve inference failure error message (#​1567)
• Adjust more TreePaths to have correct leaf before calling getTreeType (#​1570)
• Add Contract annotation to nullaway-annotations by @​codingkiddo (#​1569)
• Run inference for generic method calls nested inside receivers (#​1571)
• Refactor hasAnyAnnotationMatching method (#​1583)
• Improve handling of var-declared local variables (#​1573)
• Compensate for more annotations inserted by javac (#​1574)
• Enable test for issue 1500 and add comment (#​1560)
• Use ground target types when handling lambdas and method refs passed to generic methods (#​1575)
• Fix for unbounded wildcard passed to @NullUnmarked type variable (#​1577)
• Detect and warn on annotations directly on wildcard types (#​1579)
• Enable HandleWildcardGenerics flag when building NullAway (#​1586)
• Report error when @​Initializer is used on a constructor by @​Vinu2111 (#​1546)
• Add a handler for Jakarta Persistence to reason about field initialization (#​1584)
• Revert "Report error when @​Initializer is used on a constructor (#​1546)" (#​1588)
• Maintenance
  • Use Jacoco 0.8.15 snapshot (#​1550)
  • Update to Gradle 9.5.0 (#​1554)
  • Test with latest Error Prone snapshot on CI (#​1555)
  • Add Spring Boot as an integration test (#​1557)
  • Enable generic bytecode tests on JDK 17 (#​1561)
  • Update spotless and guava-latest deps, removed unused semver4j (#​1562)
  • Use text blocks in more tests (#​1563)
  • Use text blocks for addInputLines and addOutputLines calls (#​1564)
  • Use Temurin JDK 17 always in CI (#​1565)
  • Tell agents not to run multiple Gradle builds in parallel (#​1582)
  • Update Codecov action to v6 (#​1587)

v0.13.5

Compare Source

Includes various bug fixes, particularly in JSpecify mode. Also, the nullaway-annotations
artifact now includes a @Contract annotation. NullAway also now has a built-in handler
to reason about field initialization in classes managed by Jakarta Persistence.

Work has begun on support for wildcards in JSpecify mode. Currently, this support is off
by default, guarded by the configuration flag HandleWildcardGenerics. The support still
has multiple known bugs, and we do not yet recommend enabling it.

• Initial subtype checking for wildcards (#​1520)
• Handle subtype checking for wildcard super bounds (#​1547)
• Handle most remaining wildcard subtyping / containment cases (#​1548)
• Test case for #​1528 (#​1556)
• Initial inference for wildcards (#​1549)
• Fix wildcard inference bug with method references (#​1553)
• Fix nullability for return and parameter wildcards (#​1558)
• Test case for trick to assert chain of accesses is non-null (#​1566)
• Improve inference failure error message (#​1567)
• Adjust more TreePaths to have correct leaf before calling getTreeType (#​1570)
• Add Contract annotation to nullaway-annotations by @​codingkiddo (#​1569)
• Run inference for generic method calls nested inside receivers (#​1571)
• Refactor hasAnyAnnotationMatching method (#​1583)
• Improve handling of var-declared local variables (#​1573)
• Compensate for more annotations inserted by javac (#​1574)
• Enable test for issue 1500 and add comment (#​1560)
• Use ground target types when handling lambdas and method refs passed to generic methods (#​1575)
• Fix for unbounded wildcard passed to @NullUnmarked type variable (#​1577)
• Detect and warn on annotations directly on wildcard types (#​1579)
• Enable HandleWildcardGenerics flag when building NullAway (#​1586)
• Report error when @​Initializer is used on a constructor by @​Vinu2111 (#​1546)
• Add a handler for Jakarta Persistence to reason about field initialization (#​1584)
• Revert "Report error when @​Initializer is used on a constructor (#​1546)" (#​1588)
• Maintenance
  • Use Jacoco 0.8.15 snapshot (#​1550)
  • Update to Gradle 9.5.0 (#​1554)
  • Test with latest Error Prone snapshot on CI (#​1555)
  • Add Spring Boot as an integration test (#​1557)
  • Enable generic bytecode tests on JDK 17 (#​1561)
  • Update spotless and guava-latest deps, removed unused semver4j (#​1562)
  • Use text blocks in more tests (#​1563)
  • Use text blocks for addInputLines and addOutputLines calls (#​1564)
  • Use Temurin JDK 17 always in CI (#​1565)
  • Tell agents not to run multiple Gradle builds in parallel (#​1582)
  • Update Codecov action to v6 (#​1587)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

☀️   Quality Monitor

Tests

     Unit Tests: ✅ successful — 87 passed $\textsf{(±0)}$, 2 skipped $\textsf{(±0)}$
   ⛔   Architecture Tests: ✅ successful — 18 passed $\textsf{(±0)}$, 2 skipped $\textsf{(±0)}$

Coverage for New Code

   〰️   Line Coverage: 100.00% — perfect 🎉
   ➰   Branch Coverage: 100.00% — perfect 🎉
     Mutation Coverage: 100.00% — perfect 🎉
   💪   Test Strength: 100.00% — perfect 🎉

Coverage for Whole Project

   〰️   Line Coverage: 92.03% $\textsf{(±0)}$ — 64 missed lines
   ➰   Branch Coverage: 92.04% $\textsf{(±0)}$ — 18 missed branches
     Mutation Coverage: 91.16% $\textsf{(±0)}$ — 29 survived mutations
   💪   Test Strength: 93.15% $\textsf{(±0)}$ — 22 survived mutations in tested code

Style

     CheckStyle: No warnings $\textsf{(±0)}$
     PMD: No warnings $\textsf{(±0)}$
   ☕   Java Compiler: No warnings $\textsf{(±0)}$

Bugs

     SpotBugs: No bugs $\textsf{(±0)}$
   🐛   Error Prone: No bugs $\textsf{(±0)}$

API Problems

   🚫   Revapi: No warnings $\textsf{(±0)}$

Vulnerabilities

   🛡️   OWASP Dependency Check: No vulnerabilities $\textsf{(±0)}$

Software Metrics

   🌀   Cyclomatic Complexity: 397 (total)
   💭   Cognitive Complexity: 173 (total)
   ➿   N-Path Complexity: 361 (total)
   📏   Lines of Code: 4722 (total)
   📝   Non Commenting Source Statements: 1338 (total)
   🔗   Class Cohesion: 71.43% (maximum)
   ⚖️   Weight of Class: 100.00% (maximum)

📌 Reference Results

Delta reports computed against the reference results of 2785bf8 in workflow run 26958096976.

🚦 Quality Gates

Overall Status: ✅ SUCCESS

✅ Passed Gates

• ✅ Overall Tests Success Rate: 100.00 >= 100.00
• ✅ Line Coverage in New Code: 100.00 >= 90.00
• ✅ Branch Coverage in New Code: 100.00 >= 90.00
• ✅ Mutation Coverage in New Code: 100.00 >= 90.00
• ✅ Potential Bugs in Whole Project: 0.00 <= 0.00
• ✅ Style Violation in Whole Project: 0.00 <= 0.00

---

Created by Quality Monitor v4.15.0 (#82d77af). More details are shown in the GitHub Checks Result.