Bump com.github.spotbugs:spotbugs-maven-plugin from 4.8.6.6 to 4.9.3.0

[dependabot]

Bumps com.github.spotbugs:spotbugs-maven-plugin from 4.8.6.6 to 4.9.3.0.

Release notes

Sourced from com.github.spotbugs:spotbugs-maven-plugin's releases.

Spotbugs Maven Plugin 4.9.3.0

Users

• Support spotbugs 4.9.3 release

Build

• Bump junit to 5.12.1
• Bump fluido to 2.1.0

Spotbugs Maven Plugin 4.9.2.0

User Changes

• Supports spotbugs 4.9.2
• Keep jsr 330 compatibility at javax namespace so maven 4 works well since it would cause issues
• Fix ability to use spotbugs plugin with an classifier as it would have previously failed
• Fix possible issue when no output directory supplied and path was used, make it a file
• Move project to use doxia 2 now
• Add some additional debug logging throughout

Build Changes

• Sonar now works
• Fix report plugin name
• Remove coverity and sonar gha actions (sonar was already project level covered)
• Remove coveralls action as it was not used
• Correct sonar issues
• Use more NIO where possible
• Remove all unused items from the base of check/verify mojos as those work against scanned code and play no direct part in the scanning
• Replaced maven artifact transfer with resolver
• Run dependency analyze to fix up build as much as possible
• Stop using 'def' throughout in favor of actual objects
• Move the build to use doxia 2

Spotbugs Maven Plugin 4.9.1.0

• Supports spotbugs 4.9.1

build

• Move plugin configuration from reporting section to plugin management

Spotbugs Maven Plugin 4.9.0.0

Project

• Requires java 11 now
• Support spotbugs 4.9.0
• Update plugins / dependencies
• cleanup some output logging that occurs during usage
• Use more concrete object definitions instead of 'def'
• Use Path.of instead of Paths.get
• Update javadoc that default character encoding is utf-8 not the system default. This has not been true in a very long time.

Build 33

• Add information on how to override with newer spotbugs as its rare that the maven plugin has any specific changes related to the spotbugs core updates.

... (truncated)

Commits

• 39dd855 [maven-release-plugin] prepare release spotbugs-maven-plugin-4.9.3.0
• 4571831 Merge pull request #1034 from hazendaz/master
• 797d850 [pom] Bump junit to 5.12.1
• 2f98468 [pom] Bump spotbugs to 4.9.3
• 046a25f [site] Move to fluido 2.1.0
• e012789 [maven-release-plugin] prepare for next development iteration
• 0af6475 [maven-release-plugin] prepare release spotbugs-maven-plugin-4.9.2.0
• e91a539 Merge pull request #1032 from hazendaz/master
• bc1df47 Remove unnecessary semi colons
• 8d7de81 Merge pull request #1031 from hazendaz/master
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)