dependency updates

ben-manes · Feb 3, 2025 · 18c03d2 · 18c03d2
1 parent 7500552
commit 18c03d2
Show file tree

Hide file tree

Showing 30 changed files with 78 additions and 69 deletions.
diff --git a/.github/actions/run-gradle/action.yml b/.github/actions/run-gradle/action.yml
@@ -36,7 +36,7 @@ runs:
         toolchainVersion=$(grep -oP '(?<=^toolchainVersion=).*' gradle/gradle-daemon-jvm.properties)
         echo "version=${toolchainVersion}" >> $GITHUB_OUTPUT
     - name: Set up JDK ${{ steps.gradle_toolchain.outputs.version }}
-      uses: actions/setup-java@7a6d8a8234af8eb26422e24e3006232cccaa061b # v4.6.0
+      uses: actions/setup-java@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12 # v4.7.0
       with:
         java-version: ${{ steps.gradle_toolchain.outputs.version }}
         distribution: temurin
@@ -55,7 +55,7 @@ runs:
           echo "version=$INPUTS_JAVA" >> $GITHUB_OUTPUT
         fi
     - name: Set up JDK
-      uses: actions/setup-java@7a6d8a8234af8eb26422e24e3006232cccaa061b # v4.6.0
+      uses: actions/setup-java@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12 # v4.7.0
       with:
         java-version: ${{
           inputs.java == 'GraalVM' && inputs.graal ||
@@ -75,7 +75,7 @@ runs:
         echo "java_home=$JAVA_HOME" >> $GITHUB_OUTPUT
         echo "tool_options=-Dorg.gradle.workers.max=$((2 * $(nproc)))" >> $GITHUB_OUTPUT
     - name: Setup Gradle
-      uses: gradle/actions/setup-gradle@0bdd871935719febd78681f197cd39af5b6e16a6 # v4.2.2
+      uses: gradle/actions/setup-gradle@94baf225fe0a508e581a564467443d0e2379123b # v4.3.0
       with:
         add-job-summary: never
         cache-read-only: false

diff --git a/.github/workflows/actionlint.yml b/.github/workflows/actionlint.yml
@@ -21,7 +21,7 @@ jobs:
         with:
           persist-credentials: false
       - name: Run actionlint
-        uses: reviewdog/action-actionlint@abd537417cf4991e1ba8e21a67b1119f4f53b8e0 # v1.64.4
+        uses: reviewdog/action-actionlint@abd537417cf4991e1ba8e21a67b1119f4f53b8e0 # v1.64.1
         env:
           SHELLCHECK_OPTS: -e SC2001 -e SC2035 -e SC2046 -e SC2061 -e SC2086 -e SC2156
         with:
@@ -50,13 +50,13 @@ jobs:
         with:
           persist-credentials: false
       - name: Install uv
-        uses: astral-sh/setup-uv@b5f58b2abc5763ade55e4e9d0fe52cd1ff7979ca # v5.2.1
+        uses: astral-sh/setup-uv@4db96194c378173c656ce18a155ffc14a9fc4355 # v5.2.2
       - name: Run zizmor
-        run: uvx zizmor --pedantic --format sarif . > results.sarif
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: uvx zizmor --pedantic --format sarif . > results.sarif
       - name: Upload SARIF file for GitHub Advanced Security Dashboard
-        uses: github/codeql-action/upload-sarif@f6091c0113d1dcf9b98e269ee48e8a7e51b7bdd4 # v3.28.5
+        uses: github/codeql-action/upload-sarif@dd746615b3b9d728a6a37ca2045b68ca76d4841a # v3.28.8
         with:
           sarif_file: results.sarif
           category: zizmor
diff --git a/.github/workflows/codacy.yml b/.github/workflows/codacy.yml
@@ -49,7 +49,7 @@ jobs:
         if: steps.check_files.outputs.files_exists == 'true'
         run: jq -c '.runs |= unique_by({tool, invocations, results})' < results.sarif > codacy.sarif
       - name: Upload result to GitHub Code Scanning
-        uses: github/codeql-action/upload-sarif@f6091c0113d1dcf9b98e269ee48e8a7e51b7bdd4 # v3.28.5
+        uses: github/codeql-action/upload-sarif@dd746615b3b9d728a6a37ca2045b68ca76d4841a # v3.28.8
         if: steps.check_files.outputs.files_exists == 'true'
         continue-on-error: true
         with:

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
@@ -58,13 +58,13 @@ jobs:
           java: ${{ env.JAVA_VERSION }}
           cache-encryption-key: ${{ secrets.GRADLE_ENCRYPTION_KEY }}
       - name: Initialize CodeQL (Actions)
-        uses: github/codeql-action/init@f6091c0113d1dcf9b98e269ee48e8a7e51b7bdd4 # v3.28.5
+        uses: github/codeql-action/init@dd746615b3b9d728a6a37ca2045b68ca76d4841a # v3.28.8
         if: ${{ matrix.language == 'actions' }}
         with:
           languages: actions
           dependency-caching: true
       - name: Initialize CodeQL (Java)
-        uses: github/codeql-action/init@f6091c0113d1dcf9b98e269ee48e8a7e51b7bdd4 # v3.28.5
+        uses: github/codeql-action/init@dd746615b3b9d728a6a37ca2045b68ca76d4841a # v3.28.8
         if: ${{ matrix.language == 'java' }}
         with:
           queries: >
@@ -82,6 +82,6 @@ jobs:
           config: |
             threat-models: local
       - name: Autobuild
-        uses: github/codeql-action/autobuild@f6091c0113d1dcf9b98e269ee48e8a7e51b7bdd4 # v3.28.5
+        uses: github/codeql-action/autobuild@dd746615b3b9d728a6a37ca2045b68ca76d4841a # v3.28.8
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@f6091c0113d1dcf9b98e269ee48e8a7e51b7bdd4 # v3.28.5
+        uses: github/codeql-action/analyze@dd746615b3b9d728a6a37ca2045b68ca76d4841a # v3.28.8
diff --git a/.github/workflows/dependency-check.yml b/.github/workflows/dependency-check.yml
@@ -64,7 +64,7 @@ jobs:
         with:
           files: build/reports/dependency-check-report.sarif
       - name: Upload result to GitHub Code Scanning
-        uses: github/codeql-action/upload-sarif@f6091c0113d1dcf9b98e269ee48e8a7e51b7bdd4 # v3.28.5
+        uses: github/codeql-action/upload-sarif@dd746615b3b9d728a6a37ca2045b68ca76d4841a # v3.28.8
         if: steps.check_files.outputs.files_exists == 'true'
         with:
           sarif_file: build/reports/dependency-check-report.sarif
diff --git a/.github/workflows/dependency-submission-pr-retrieve.yml b/.github/workflows/dependency-submission-pr-retrieve.yml
@@ -35,6 +35,6 @@ jobs:
             repo1.maven.org:443
             services.gradle.org:443
       - name: Retrieve and submit dependency graph
-        uses: gradle/actions/dependency-submission@0bdd871935719febd78681f197cd39af5b6e16a6 # v4.2.2
+        uses: gradle/actions/dependency-submission@94baf225fe0a508e581a564467443d0e2379123b # v4.3.0
         with:
           dependency-graph: download-and-submit
diff --git a/.github/workflows/dependency-submission-pr-submit.yml b/.github/workflows/dependency-submission-pr-submit.yml
@@ -36,12 +36,12 @@ jobs:
         with:
           persist-credentials: false
       - name: Set up JDK ${{ env.JAVA_VERSION }}
-        uses: actions/setup-java@7a6d8a8234af8eb26422e24e3006232cccaa061b # v4.6.0
+        uses: actions/setup-java@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12 # v4.7.0
         with:
           java-version: ${{ env.JAVA_VERSION }}
           distribution: temurin
       - name: Submit Dependency Graph
-        uses: gradle/actions/dependency-submission@0bdd871935719febd78681f197cd39af5b6e16a6 # v4.2.2
+        uses: gradle/actions/dependency-submission@94baf225fe0a508e581a564467443d0e2379123b # v4.3.0
         with:
           cache-encryption-key: ${{ secrets.GRADLE_ENCRYPTION_KEY }}
           dependency-graph: generate-and-upload
diff --git a/.github/workflows/dependency-submission.yml b/.github/workflows/dependency-submission.yml
@@ -36,11 +36,11 @@ jobs:
         with:
           persist-credentials: false
       - name: Set up JDK ${{ env.JAVA_VERSION }}
-        uses: actions/setup-java@7a6d8a8234af8eb26422e24e3006232cccaa061b # v4.6.0
+        uses: actions/setup-java@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12 # v4.7.0
         with:
           java-version: ${{ env.JAVA_VERSION }}
           distribution: temurin
       - name: Submit Dependency Graph
-        uses: gradle/actions/dependency-submission@0bdd871935719febd78681f197cd39af5b6e16a6 # v4.2.2
+        uses: gradle/actions/dependency-submission@94baf225fe0a508e581a564467443d0e2379123b # v4.3.0
         with:
           cache-encryption-key: ${{ secrets.GRADLE_ENCRYPTION_KEY }}
diff --git a/.github/workflows/devskim.yml b/.github/workflows/devskim.yml
@@ -31,8 +31,8 @@ jobs:
         with:
           persist-credentials: false
       - name: Run DevSkim scanner
-        uses: microsoft/DevSkim-Action@914fa647b406c387000300b2f09bb28691be2b6d # v1.0.14
+        uses: microsoft/DevSkim-Action@a6b6966a33b497cd3ae2ebc406edf8f4cc2feec6 # v1.0.15
       - name: Upload DevSkim scan results to GitHub Security tab
-        uses: github/codeql-action/upload-sarif@f6091c0113d1dcf9b98e269ee48e8a7e51b7bdd4 # v3.28.5
+        uses: github/codeql-action/upload-sarif@dd746615b3b9d728a6a37ca2045b68ca76d4841a # v3.28.8
         with:
           sarif_file: devskim-results.sarif
diff --git a/.github/workflows/gradle-wrapper-validation.yml b/.github/workflows/gradle-wrapper-validation.yml
@@ -23,4 +23,4 @@ jobs:
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           persist-credentials: false
-      - uses: gradle/actions/wrapper-validation@0bdd871935719febd78681f197cd39af5b6e16a6 # v4.2.2
+      - uses: gradle/actions/wrapper-validation@94baf225fe0a508e581a564467443d0e2379123b # v4.3.0
diff --git a/.github/workflows/qodana.yml b/.github/workflows/qodana.yml
@@ -72,6 +72,6 @@ jobs:
           upload-result: true
           github-token: ${{ secrets.GITHUB_TOKEN }}
       - name: Upload SARIF file for GitHub Advanced Security Dashboard
-        uses: github/codeql-action/upload-sarif@f6091c0113d1dcf9b98e269ee48e8a7e51b7bdd4 # v3.28.5
+        uses: github/codeql-action/upload-sarif@dd746615b3b9d728a6a37ca2045b68ca76d4841a # v3.28.8
         with:
           sarif_file: ${{ runner.temp }}/qodana/results/qodana.sarif.json
diff --git a/.github/workflows/scorecards-analysis.yml b/.github/workflows/scorecards-analysis.yml
@@ -57,6 +57,6 @@ jobs:
           path: results.sarif
           retention-days: 5
       - name: Upload to code-scanning
-        uses: github/codeql-action/upload-sarif@f6091c0113d1dcf9b98e269ee48e8a7e51b7bdd4 # v3.28.5
+        uses: github/codeql-action/upload-sarif@dd746615b3b9d728a6a37ca2045b68ca76d4841a # v3.28.8
         with:
           sarif_file: results.sarif
diff --git a/.github/workflows/semgrep.yml b/.github/workflows/semgrep.yml
@@ -34,7 +34,7 @@ jobs:
         with:
           files: results.sarif
       - name: Upload SARIF file for GitHub Advanced Security Dashboard
-        uses: github/codeql-action/upload-sarif@f6091c0113d1dcf9b98e269ee48e8a7e51b7bdd4 # v3.28.5
+        uses: github/codeql-action/upload-sarif@dd746615b3b9d728a6a37ca2045b68ca76d4841a # v3.28.8
         if: steps.check_files.outputs.files_exists == 'true'
         continue-on-error: true
         with:

diff --git a/.github/workflows/snyk.yml b/.github/workflows/snyk.yml
@@ -44,7 +44,7 @@ jobs:
         with:
           files: snyk.sarif
       - name: Upload result to GitHub Code Scanning
-        uses: github/codeql-action/upload-sarif@f6091c0113d1dcf9b98e269ee48e8a7e51b7bdd4 # v3.28.5
+        uses: github/codeql-action/upload-sarif@dd746615b3b9d728a6a37ca2045b68ca76d4841a # v3.28.8
         if: steps.check_files.outputs.files_exists == 'true'
         with:
           sarif_file: snyk.sarif

diff --git a/.github/workflows/spelling.yml b/.github/workflows/spelling.yml
@@ -42,4 +42,4 @@ jobs:
         with:
           persist-credentials: false
       - name: Typos
-        uses: crate-ci/typos@685eb3d55be2f85191e8c84acb9f44d7756f84ab # v1.29.4
+        uses: crate-ci/typos@11ca4583f2f3f74c7e7785c0ecb20fe2c99a4308 # v1.29.5
diff --git a/.github/workflows/trivy.yml b/.github/workflows/trivy.yml
@@ -40,7 +40,7 @@ jobs:
         with:
           files: results.sarif
       - name: Upload result to GitHub Code Scanning
-        uses: github/codeql-action/upload-sarif@f6091c0113d1dcf9b98e269ee48e8a7e51b7bdd4 # v3.28.5
+        uses: github/codeql-action/upload-sarif@dd746615b3b9d728a6a37ca2045b68ca76d4841a # v3.28.8
         if: steps.check_files.outputs.files_exists == 'true'
         with:
             sarif_file: results.sarif
diff --git a/caffeine/build.gradle.kts b/caffeine/build.gradle.kts
@@ -36,13 +36,13 @@ dependencies {
   testImplementation(libs.ycsb) {
     isTransitive = false
   }
+  testImplementation(libs.jazzer)
   testImplementation(libs.jctools)
   testImplementation(libs.mockito)
   testImplementation(libs.picocli)
   testImplementation(libs.lincheck)
   testImplementation(libs.commons.lang3)
   testImplementation(libs.guava.testlib)
-  testImplementation(libs.bundles.jazzer)
   testImplementation(libs.bundles.awaitility)
   testImplementation(libs.bundles.slf4j.test)
   testImplementation(libs.commons.collections4)

diff --git a/caffeine/src/test/java/com/github/benmanes/caffeine/cache/AsyncAsMapTest.java b/caffeine/src/test/java/com/github/benmanes/caffeine/cache/AsyncAsMapTest.java
@@ -73,6 +73,7 @@
 import com.github.benmanes.caffeine.cache.testing.CheckNoStats;
 import com.github.benmanes.caffeine.testing.Int;
 import com.google.common.base.Splitter;
+import com.google.common.collect.ImmutableMap;
 import com.google.common.collect.Iterables;
 import com.google.common.collect.Maps;
 
@@ -1387,9 +1388,10 @@ public void equals_self(AsyncCache<Int, Int> cache, CacheContext context) {
 
   @CheckNoStats
   @Test(dataProvider = "caches")
+  @SuppressWarnings("unlikely-arg-type")
   @CacheSpec(removalListener = { Listener.DISABLED, Listener.REJECTING })
   public void equals(AsyncCache<Int, Int> cache, CacheContext context) {
-    var map = Map.copyOf(cache.asMap());
+    var map = ImmutableMap.copyOf(cache.asMap());
     assertThat(cache.asMap().equals(map)).isTrue();
     assertThat(map.equals(cache.asMap())).isTrue();
 
@@ -1408,7 +1410,7 @@ public void equals(AsyncCache<Int, Int> cache, CacheContext context) {
   @Test(dataProvider = "caches")
   @CacheSpec(removalListener = { Listener.DISABLED, Listener.REJECTING })
   public void hashCode(AsyncCache<Int, Int> cache, CacheContext context) {
-    assertThat(cache.asMap().hashCode()).isEqualTo(Map.copyOf(cache.asMap()).hashCode());
+    assertThat(cache.asMap().hashCode()).isEqualTo(ImmutableMap.copyOf(cache.asMap()).hashCode());
   }
 
   @CheckNoStats
@@ -1453,8 +1455,8 @@ public void equalsAndHashCodeFail_present(AsyncCache<Int, Int> cache, CacheConte
   @Test(dataProvider = "caches")
   @CacheSpec(removalListener = { Listener.DISABLED, Listener.REJECTING })
   public void toString(AsyncCache<Int, Int> cache, CacheContext context) {
-    assertThat(parseToString(cache.asMap()))
-        .containsExactlyEntriesIn(parseToString(Map.copyOf(cache.asMap())));
+    var copy = ImmutableMap.copyOf(cache.asMap());
+    assertThat(parseToString(cache.asMap())).containsExactlyEntriesIn(parseToString(copy));
   }
 
   private static Map<String, String> parseToString(Map<Int, CompletableFuture<Int>> map) {
@@ -2508,7 +2510,8 @@ public void entrySet_removeAll_partial(AsyncCache<Int, Int> cache, CacheContext
   @Test(dataProvider = "caches")
   @CacheSpec(population = Population.FULL)
   public void entrySet_removeAll_all(AsyncCache<Int, Int> cache, CacheContext context) {
-    assertThat(cache.asMap().entrySet().removeAll(Map.copyOf(cache.asMap()).entrySet())).isTrue();
+    assertThat(cache.asMap().entrySet().removeAll(
+        ImmutableMap.copyOf(cache.asMap()).entrySet())).isTrue();
     assertThat(cache).isEmpty();
     assertThat(context).removalNotifications().withCause(EXPLICIT)
         .contains(context.original()).exclusively();
@@ -2721,7 +2724,8 @@ public void entrySet_retainAll_partial(AsyncCache<Int, Int> cache, CacheContext
   @Test(dataProvider = "caches")
   @CacheSpec(population = Population.FULL)
   public void entrySet_retainAll_all(AsyncCache<Int, Int> cache, CacheContext context) {
-    assertThat(cache.asMap().entrySet().retainAll(Map.copyOf(cache.asMap()).entrySet())).isFalse();
+    assertThat(cache.asMap().entrySet().retainAll(
+        ImmutableMap.copyOf(cache.asMap()).entrySet())).isFalse();
     assertThat(cache.synchronous().asMap()).isEqualTo(context.original());
     assertThat(context).removalNotifications().isEmpty();
   }

diff --git a/caffeine/src/test/java/com/github/benmanes/caffeine/cache/BoundedLocalCacheTest.java b/caffeine/src/test/java/com/github/benmanes/caffeine/cache/BoundedLocalCacheTest.java
@@ -144,6 +144,7 @@
 import com.github.valfirst.slf4jtest.TestLogger;
 import com.github.valfirst.slf4jtest.TestLoggerFactory;
 import com.google.common.collect.FluentIterable;
+import com.google.common.collect.ImmutableMap;
 import com.google.common.collect.Iterables;
 import com.google.common.collect.Maps;
 import com.google.common.collect.Range;
@@ -2630,7 +2631,8 @@ public void brokenEquality_eviction(BoundedLocalCache<Object, Int> cache,
     key.increment();
 
     eviction.setMaximum(0);
-    assertThat(Map.copyOf(cache)).isEmpty();
+    var copy = ImmutableMap.copyOf(cache);
+    assertThat(copy).isEmpty();
     assertThat(context).notifications().isEmpty();
     assertThat(cache.estimatedSize()).isEqualTo(1);
 
@@ -2659,7 +2661,8 @@ public void brokenEquality_expiration(
     context.ticker().advance(Duration.ofDays(1));
     cache.cleanUp();
 
-    assertThat(Map.copyOf(cache)).isEmpty();
+    var copy = ImmutableMap.copyOf(cache);
+    assertThat(copy).isEmpty();
     assertThat(context).notifications().isEmpty();
     assertThat(cache.estimatedSize()).isEqualTo(1);
 
@@ -2681,7 +2684,8 @@ public void brokenEquality_clear(BoundedLocalCache<Object, Int> cache, CacheCont
     key.increment();
 
     cache.clear();
-    assertThat(Map.copyOf(cache)).isEmpty();
+    var copy = ImmutableMap.copyOf(cache);
+    assertThat(copy).isEmpty();
     assertThat(context).notifications().isEmpty();
     assertThat(cache.estimatedSize()).isEqualTo(1);
 

diff --git a/caffeine/src/test/java/com/github/benmanes/caffeine/cache/CacheTest.java b/caffeine/src/test/java/com/github/benmanes/caffeine/cache/CacheTest.java
@@ -824,9 +824,8 @@ public void invalidateAll_empty(Cache<Int, Int> cache, CacheContext context) {
   @Test(dataProvider = "caches")
   @CacheSpec(population = { Population.PARTIAL, Population.FULL })
   public void invalidateAll_partial(Cache<Int, Int> cache, CacheContext context) {
-    var removals = cache.asMap().entrySet().stream()
-        .filter(entry -> ((entry.getKey().intValue() % 2) == 0))
-        .collect(toImmutableMap(Map.Entry::getKey, Map.Entry::getValue));
+    var removals = ImmutableMap.copyOf(Maps.filterKeys(
+        cache.asMap(), key -> (key.intValue() % 2) == 0));
     cache.invalidateAll(removals.keySet());
     assertThat(cache).hasSize(context.initialSize() - removals.size());
     assertThat(context).removalNotifications().withCause(EXPLICIT)

diff --git a/caffeine/src/test/java/com/github/benmanes/caffeine/fuzz/CaffeineSpecFuzzer.java b/caffeine/src/test/java/com/github/benmanes/caffeine/fuzz/CaffeineSpecFuzzer.java
@@ -17,6 +17,7 @@
 
 import static com.google.common.truth.Truth.assertThat;
 
+import com.code_intelligence.jazzer.junit.DictionaryEntries;
 import com.code_intelligence.jazzer.junit.FuzzTest;
 import com.code_intelligence.jazzer.mutation.annotation.NotNull;
 import com.github.benmanes.caffeine.cache.CaffeineSpec;
@@ -29,6 +30,8 @@ public final class CaffeineSpecFuzzer {
   // These tests require the environment variable JAZZER_FUZZ=1 to try new input arguments
 
   @FuzzTest(maxDuration = "5m")
+  @DictionaryEntries({"expireAfterAccess", "expireAfterWrite", "initialCapacity", "maximumSize",
+      "maximumWeight", "recordStats", "refreshAfterWrite", "softValues", "weakKeys", "weakValues"})
   public void parse(@NotNull String specification) {
     try {
       assertThat(CaffeineSpec.parse(specification)).isNotNull();

diff --git a/caffeine/src/test/java/com/github/benmanes/caffeine/openjdk/collection/MOAT.java b/caffeine/src/test/java/com/github/benmanes/caffeine/openjdk/collection/MOAT.java
@@ -130,15 +130,15 @@
  * An engineer fixing a regression could add their regression test here and
  * simultaneously test all other implementations.
  */
-@SuppressWarnings({"ClassIsInstance", "FieldCanBeFinal", "InvalidParam", "JdkObsolete",
-    "MultiVariableDeclaration", "NonFinalStaticField", "rawtypes", "ReferenceEquality",
-    "AlmostJavadoc", "BadInstanceof", "BoxedPrimitiveEquality", "CollectionIsEmpty",
-    "CollectionToArray", "CollectorMutability", "EmptyCatch", "IdentifierName",
-    "IdentityConversion", "IdentityHashMapBoxing", "IterableIsEmpty", "JUnitClassModifiers",
-    "JUnitMethodDeclaration", "LexicographicalAnnotationAttributeListing",
-    "ModifyingCollectionWithItself", "NonAtomicVolatileUpdate", "NonStaticImport", "NullAway",
-    "ParameterMissingNullable", "resource", "ReturnValueIgnored", "SelfEquals", "SystemOut",
-    "unchecked", "UndefinedEquals", "UnnecessaryFinal", "unused", "UnusedMethod"})
+@SuppressWarnings({"AlmostJavadoc", "BadInstanceof", "BoxedPrimitiveEquality", "ClassIsInstance",
+    "CollectionIsEmpty", "CollectionToArray", "CollectorMutability", "EmptyCatch",
+    "EntryIterableToImmutableMap", "FieldCanBeFinal", "IdentifierName", "IdentityConversion",
+    "IdentityHashMapBoxing", "InvalidParam", "IterableIsEmpty", "JdkObsolete",
+    "JUnitClassModifiers", "JUnitMethodDeclaration", "ModifyingCollectionWithItself",
+    "MultiVariableDeclaration", "NonAtomicVolatileUpdate", "NonFinalStaticField", "NonStaticImport",
+    "NullAway", "ParameterMissingNullable", "rawtypes", "ReferenceEquality", "resource",
+    "ReturnValueIgnored", "SelfEquals", "SystemOut", "unchecked", "UndefinedEquals",
+    "UnnecessaryFinal", "unused", "UnusedMethod"})
 public class MOAT {
     // Collections under test must not be initialized to contain this value,
     // and maps under test must not contain this value as a key.
@@ -1666,7 +1666,7 @@ static void equalMaps(Map m1, Map m2) {
         check(Arrays.equals(m1.entrySet().toArray(), m2.entrySet().toArray()));
     }
 
-    @SuppressWarnings({"unchecked", "rawtypes"})
+    @SuppressWarnings({"rawtypes", "unchecked"})
     static void testNavigableMapRemovers(NavigableMap m)
     {
         final Map emptyMap = new HashMap();

diff --git a/examples/coalescing-bulkloader-reactor/gradle/libs.versions.toml b/examples/coalescing-bulkloader-reactor/gradle/libs.versions.toml
@@ -1,6 +1,6 @@
 [versions]
 caffeine = "3.2.0"
-junit = "5.11.4"
+junit = "5.12.0-M1"
 reactor = "3.7.2"
 truth = "1.4.4"
 versions = "0.52.0"

diff --git a/examples/graal-native/gradle/libs.versions.toml b/examples/graal-native/gradle/libs.versions.toml
@@ -1,7 +1,7 @@
 [versions]
 caffeine = "3.2.0"
 graal = "0.10.4"
-junit = "5.11.4"
+junit = "5.12.0-M1"
 truth = "1.4.4"
 versions = "0.52.0"