dependabot[bot] opened a new pull request, #11376: URL: https://github.com/apache/maven/pull/11376
Bumps [net.sourceforge.pmd:pmd-core](https://github.com/pmd/pmd) from 7.17.0 to 7.18.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/pmd/pmd/releases";>net.sourceforge.pmd:pmd-core's releases</a>.</em></p> <blockquote> <h2>PMD 7.18.0 (31-October-2025)</h2> <h2>31-October-2025 - 7.18.0</h2> <p>The PMD team is pleased to announce PMD 7.18.0.</p> <p>This is a minor release.</p> <h3>Table Of Contents</h3> <ul> <li><a href="https://github.com/pmd/pmd/blob/HEAD/#new-and-noteworthy";>🚀️ New and noteworthy</a> <ul> <li><a href="https://github.com/pmd/pmd/blob/HEAD/#build-requirement-is-java-17";>Build Requirement is Java 17</a></li> </ul> </li> <li><a href="https://github.com/pmd/pmd/blob/HEAD/#new-and-changed-rules";>🌟️ New and Changed Rules</a> <ul> <li><a href="https://github.com/pmd/pmd/blob/HEAD/#new-rules";>New Rules</a></li> <li><a href="https://github.com/pmd/pmd/blob/HEAD/#changed-rules";>Changed Rules</a></li> <li><a href="https://github.com/pmd/pmd/blob/HEAD/#deprecated-rules";>Deprecated Rules</a></li> </ul> </li> <li><a href="https://github.com/pmd/pmd/blob/HEAD/#fixed-issues";>🐛️ Fixed Issues</a></li> <li><a href="https://github.com/pmd/pmd/blob/HEAD/#api-changes";>🚨️ API Changes</a> <ul> <li><a href="https://github.com/pmd/pmd/blob/HEAD/#deprecations";>Deprecations</a></li> </ul> </li> <li><a href="https://github.com/pmd/pmd/blob/HEAD/#merged-pull-requests";>✨️ Merged pull requests</a></li> <li><a href="https://github.com/pmd/pmd/blob/HEAD/#dependency-updates";>📦️ Dependency updates</a></li> <li><a href="https://github.com/pmd/pmd/blob/HEAD/#stats";>📈️ Stats</a></li> </ul> <h3>🚀️ New and noteworthy</h3> <h4>Build Requirement is Java 17</h4> <p>From now on, Java 17 or newer is required to build PMD. PMD itself still remains compatible with Java 8, so that it still can be used in a pure Java 8 environment. This allows us to use the latest checkstyle version during the build.</p> <h3>🌟️ New and Changed Rules</h3> <h4>New Rules</h4> <ul> <li>The new Java rule <a href="https://docs.pmd-code.org/pmd-doc-7.18.0/pmd_rules_java_errorprone.html#identicalconditionalbranches";><code>IdenticalConditionalBranches</code></a> finds conditional statements that do the same thing when the condition is true and false. This is either incorrect or redundant.</li> <li>The new Java rule <a href="https://docs.pmd-code.org/pmd-doc-7.18.0/pmd_rules_java_bestpractices.html#labeledstatement";><code>LabeledStatement</code></a> finds labeled statements in code. Labels make control flow difficult to understand and should be avoided. By default, the rule allows labeled loops (do, while, for). But it has a property to flag also those labeled loops.</li> <li>The new Java rule <a href="https://docs.pmd-code.org/pmd-doc-7.18.0/pmd_rules_java_bestpractices.html#unusedlabel";><code>UnusedLabel</code></a> finds unused labels which are unnecessary and only make the code hard to read. This new rule will be part of the quickstart ruleset.</li> </ul> <h4>Changed Rules</h4> <ul> <li><a href="https://docs.pmd-code.org/pmd-doc-7.18.0/pmd_rules_java_codestyle.html#confusingternary";><code>ConfusingTernary</code></a> has a new property <code>nullCheckBranch</code> to control, whether null-checks should be allowed (the default case) or should lead to a violation.</li> <li><a href="https://docs.pmd-code.org/pmd-doc-7.18.0/pmd_rules_java_errorprone.html#avoidcatchinggenericexception";><code>AvoidCatchingGenericException</code></a> is now configurable with the new property <code>typesThatShouldNotBeCaught</code>.<br /> ⚠️ The rule has also been moved from category "Design" to category "Error Prone". If you are currently bulk-adding all the rules from the "Design" category into your custom ruleset, then you need to add the rule explicitly again (otherwise it won't be included anymore):</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/pmd/pmd/commit/c37a323e288202e21f69449a95d3d4c024455ec8";><code>c37a323</code></a> [release] prepare release pmd_releases/7.18.0</li> <li><a href="https://github.com/pmd/pmd/commit/825f6797829681ed0bea67bd8057beb3dc1d55d9";><code>825f679</code></a> Prepare pmd release 7.18.0</li> <li><a href="https://github.com/pmd/pmd/commit/f59b4d545b92189141ba366bb01ee50a783e4e93";><code>f59b4d5</code></a> Update SPONSORS.md</li> <li><a href="https://github.com/pmd/pmd/commit/aed481242341162e74dd16efcbec31f4052e9cfe";><code>aed4812</code></a> chore(deps): bump io.github.apex-dev-tools:apex-ls_2.13 from 5.10.0 to 6.0.1 ...</li> <li><a href="https://github.com/pmd/pmd/commit/7fdf46607c426702279f6c398f7844e40204c081";><code>7fdf466</code></a> Update contributors</li> <li><a href="https://github.com/pmd/pmd/commit/46f8b5fd20dea6a803c4b90c070fa672fb930bc3";><code>46f8b5f</code></a> [doc] Update release notes</li> <li><a href="https://github.com/pmd/pmd/commit/db8d30584da35d60962c1a72dd560809ea2d4513";><code>db8d305</code></a> [java] Fix <a href="https://redirect.github.com/pmd/pmd/issues/6131";>#6131</a>: Correct enum values for ModifierOrder (<a href="https://redirect.github.com/pmd/pmd/issues/6185";>#6185</a>)</li> <li><a href="https://github.com/pmd/pmd/commit/e4f94a681052127b15b6be30a33ff8bdfc1e44f1";><code>e4f94a6</code></a> [java] Fix <a href="https://redirect.github.com/pmd/pmd/issues/6131";>#6131</a>: Correct enum values for ModifierOrder</li> <li><a href="https://github.com/pmd/pmd/commit/d679f5d51ab770f5ee218f5ae70c5a95835c624d";><code>d679f5d</code></a> [java] InefficientEmptyStringCheck should include String#strip (<a href="https://redirect.github.com/pmd/pmd/issues/6172";>#6172</a>)</li> <li><a href="https://github.com/pmd/pmd/commit/c04e4284ace4917969549af4767443699692a025";><code>c04e428</code></a> [doc] Update release notes (<a href="https://redirect.github.com/pmd/pmd/issues/6172";>#6172</a>)</li> <li>Additional commits viewable in <a href="https://github.com/pmd/pmd/compare/pmd_releases/7.17.0...pmd_releases/7.18.0";>compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
