fix(deps): update mvn-packages

[renovate-bot]

This PR contains the following updates:

Package	Change	Age	Confidence
org.apache.maven.plugins:maven-assembly-plugin (source)	3.7.1 → 3.8.0
com.google.errorprone:error_prone_core (source)	2.42.0 → 2.46.0
com.google.auto.value:auto-value (source)	1.11.0 → 1.11.1
com.google.auto.value:auto-value-annotations (source)	1.11.0 → 1.11.1
org.codehaus.mojo:exec-maven-plugin (source)	3.5.1 → 3.6.3
com.diffplug.spotless:spotless-maven-plugin	3.0.0 → 3.1.0
com.helger.maven:ph-javacc-maven-plugin	5.0.0 → 5.0.1
commons-cli:commons-cli (source)	1.10.0 → 1.11.0

---

Release Notes

google/error-prone (com.google.errorprone:error_prone_core)

v2.46.0: Error Prone 2.46.0

Changes:

• The javac flag -XDaddTypeAnnotationsToSymbol=true is now required for Error Prone invocations on JDK 21, to enable the javac fix for JDK-8225377: type annotations are not visible to javac plugins across compilation boundaries. See #​5426 for details.
• Remove deprecated value attribute from @IncompatibleModifiers and @RequiredModifiers (#​2122)
• Error Prone API changes to encapsulate references to internal javac APIs for end position handling (EndPosTable, DiagnosticPosition) (5440bb4, 06c2905, f3915ec)

New checks:

• DuplicateAssertion: detect duplicated assertion lines where the argument to assertThat is pure
• IfChainToSwitch: suggest converting chains of if-statements into arrow switches
• ScannerUseDelimiter: discourage Scanner.useDelimiter("\\A")
• AddNullMarkedToClass: refactoring to add @NullMarked annotation to top level classes

v2.45.0: Error Prone 2.45.0

Changes:

• Improved compatibility with latest JDK 26 EA builds.

New checks:

• AssertSameIncompatible: Detect calls to assertSame and similar assertions, where the calls are guaranteed to either succeed or fail.
• FormatStringShouldUsePlaceholders: Suggests using a format string instead of string concatenation operations on format methods

Closed issues: #​5335

Full changelog: google/error-prone@v2.44.0...v2.45.0

v2.44.0: Error Prone 2.44.0

Changes

• The default severity for LabelledBreakTarget is now an error
• Update dependency on Guava (#​5108)

Closed issues: #​5218, #​5278

Full changelog: google/error-prone@v2.43.0...v2.44.0

v2.43.0: Error Prone 2.43.0

The minimum supported JDK version to run Error Prone is now JDK 21 (#​4867).

Changes:

• -XepPatchChecks now skips disabled checks (#​4943)
• AndroidJdkLibsChecker has been removed, the recommended replacement for Android code is Android Lint's NewApi check

New checks:

• NullNeedsCastForVarargs: Detect calls that incorrectly passes a null array instead of a null element.
• RedundantNullCheck: detect checks on expressions that are non-null.

Closed issues: #​4943, #​5102, #​5107, #​5121, #​5158, #​5217, #​5239

Full changelog: google/error-prone@v2.42.0...v2.43.0

mojohaus/exec-maven-plugin (org.codehaus.mojo:exec-maven-plugin)

v3.6.3

Compare Source

📝 Documentation updates

• Document thread group isolation limitation in java goal (#​503) @​copilot-swe-agent[bot]

👻 Maintenance

• JUnit 5 best practices (#​505) @​slachiewicz
• Move ExecJavaMojoTest, ExecMojoTest to JUnit 5 (#​502) @​slawekjaranowski
• Add support for JEP 512 for for package-private static main method (#​499) @​anuragagarwal561994
• Move to JUnit 5 (#​501) @​slawekjaranowski

📦 Dependency updates

• Bump asm.version from 9.9 to 9.9.1 (#​509) @​dependabot[bot]
• Bump org.apache.commons:commons-exec from 1.5.0 to 1.6.0 (#​508) @​dependabot[bot]

v3.6.2

Compare Source

🚀 New features and improvements

• Add JPMS ServiceLoader Support with Multi-Release JAR (#​500) @​ascheman

📦 Dependency updates

• Bump asm.version from 9.8 to 9.9 (#​498) @​dependabot[bot]

v3.6.1

Compare Source

🐛 Bug Fixes

• Revert change from #​480 - plugin dependencies must be resolved from plugin repositories (#​496) @​slawekjaranowski

📦 Dependency updates

• Bump org.codehaus.mojo:mojo-parent from 93 to 94 (#​495) @​dependabot[bot]

v3.6.0

Compare Source

🚀 New features and improvements

• [ExecMojo]Add getShebang method to correctly set the command line executable name (#​487) @​uchenily
• JEP 512 Support (#​484) @​cayhorstmann

🐛 Bug Fixes

• fix inheritIo option (#​488) @​dernasherbrezon
• Fix for #​479 - Wrong repositories used to collect deps (#​480) @​cstamas

👻 Maintenance

• Use JSR-330 for component injection (#​493) @​slawekjaranowski
• Re-run failed tests (#​491) @​slawekjaranowski
• Restore default matrix build (#​486) @​slawekjaranowski

📦 Dependency updates

• Use Maven 3.9.11 in dependencies, still requires 3.6.3 as minimum (#​492) @​slawekjaranowski
• Bump org.codehaus.mojo:mojo-parent from 92 to 93 (#​483) @​dependabot[bot]
• Bump org.codehaus.mojo:mojo-parent from 91 to 92 (#​478) @​dependabot[bot]
• Bump org.codehaus.mojo:mojo-parent from 90 to 91 (#​477) @​dependabot[bot]
• Bump org.codehaus.mojo:mojo-parent from 89 to 90 (#​476) @​dependabot[bot]

diffplug/spotless (com.diffplug.spotless:spotless-maven-plugin)

v3.1.0

Added

• Support forclang-format on maven-plugin (#​2406)
• Allow overriding classLoader for all JarStates to enable spotless-cli (#​2427)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.