Bump checker-qual from 3.6.0 to 3.9.0

[dependabot-preview]

Bumps checker-qual from 3.6.0 to 3.9.0.

Release notes

Sourced from checker-qual's releases.

Checker Framework 3.9.0

Version 3.9.0, January 4, 2021

New scripts checker/bin/wpi.sh and checker/bin/wpi-many.sh run whole-program inference, without modifying the source code of the target programs.

The -Ainfer command-line argument now infers

• method preconditions (@RequiresQualifiers, @RequiresNonNull)
• method postconditions (@EnsuresQualifiers, @EnsuresNonNull)
• @MonotonicNonNull

The Called Methods Checker supports the -AdisableReturnsReceiver command-line option.

The Format String Checker recognizes Error Prone's @FormatMethod annotation.

Use of @SuppressWarnings("fbc") to suppress initialization warnings is deprecated.

Implementation details:

Class renamings:

• StubParser => AnnotationFileParser
• Receiver => JavaExpression
  • also related class and method renamings
• In the Dataflow Framework:
  • ThisLiteralNode => ThisNode
  • ExplicitThisLiteralNode => ExplicitThisNode
  • ImplicitThisLiteralNode => ImplicitThisNode

Method deprecations:

• Deprecated AnnotatedTypeFactory.addAliasedAnnotation; use addAliasedTypeAnnotation

Closed issues: #765, #2452, #2953, #3377, #3496, #3499, #3826, #3956, #3971, #3974, #3994, #4004, #4005, #4018, #4032, #4068, #4070.

Checker Framework 3.8.0

Version 3.8.0, December 1, 2020

The Initialized Fields Checker warns when a field is not initialized by a constructor. This is more general than the Initialization Checker, which only checks that @NonNull fields are initialized.

The manual describes how to modify an sbt build file to run the Checker Framework.

The -AwarnUnneededSuppressions command-line option warns only about suppression strings that contain a checker name.

The -AwarnUnneededSuppressionsExceptions=REGEX command-line option partially disables -AwarnUnneededSuppressions. Most users don't need this.

Implementation details:

Added classes SubtypeIsSubsetQualifierHierarchy and SubtypeIsSupersetQualifierHierarchy.

Moved the contractsUtils field from the visitor to the type factory.

Changelog

Sourced from checker-qual's changelog.

Version 3.9.0, January 4, 2021

New scripts checker/bin/wpi.sh and checker/bin/wpi-many.sh run whole-program inference, without modifying the source code of the target programs.

The -Ainfer command-line argument now infers

• method preconditions (@RequiresQualifiers, @RequiresNonNull)
• method postconditions (@EnsuresQualifiers, @EnsuresNonNull)
• @MonotonicNonNull

The Called Methods Checker supports the -AdisableReturnsReceiver command-line option.

The Format String Checker recognizes Error Prone's @FormatMethod annotation.

Use of @SuppressWarnings("fbc") to suppress initialization warnings is deprecated.

Implementation details:

Class renamings:

• StubParser => AnnotationFileParser
• Receiver => JavaExpression
  • also related class and method renamings
• In the Dataflow Framework:
  • ThisLiteralNode => ThisNode
  • ExplicitThisLiteralNode => ExplicitThisNode
  • ImplicitThisLiteralNode => ImplicitThisNode

Method deprecations:

• Deprecated AnnotatedTypeFactory.addAliasedAnnotation; use addAliasedTypeAnnotation

Closed issues: #765, #2452, #2953, #3377, #3496, #3499, #3826, #3956, #3971, #3974, #3994, #4004, #4005, #4018, #4032, #4068, #4070.

---

Version 3.8.0, December 1, 2020

The Initialized Fields Checker warns when a field is not initialized by a constructor. This is more general than the Initialization Checker, which only checks that @NonNull fields are initialized.

The manual describes how to modify an sbt build file to run the Checker Framework.

The -AwarnUnneededSuppressions command-line option warns only about suppression strings that contain a checker name.

The -AwarnUnneededSuppressionsExceptions=REGEX command-line option partially disables -AwarnUnneededSuppressions. Most users don't need this.

Commits

• 50fc235 new release 3.9.0
• 9320b01 Fix broken link again.
• 44fdf39 Fix broken links.
• 82841ee Merge branch 'master' of github.com:typetools/checker-framework
• 3494660 Fix Javadoc.
• 8abb25b Make wpi.sh produce typecheck.out files (#4069)
• 52a1604 Only list issues closed since the last release.
• d182acb Tweak changelog
• e0cab11 Refactoring of JavaExpressionParseUtil
• eab769a Bump reflection-util from 1.0.2 to 1.0.3
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Pull request limits (per update run and/or open at any time)
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)

[dependabot-preview]

Superseded by #53.