Bump com.google.errorprone:error_prone_core from 2.3.2 to 2.28.0

[dependabot[bot]]

Bumps com.google.errorprone:error_prone_core from 2.3.2 to 2.28.0.

Release notes

Sourced from com.google.errorprone:error_prone_core's releases.

Error Prone 2.28.0

Error Prone nows supports the latest JDK 23 EA builds (#4412, #4415).

Closed issues:

• Improved errors for invalid check severities (#4306).
• Fix a crash with nested instanceof patterns (#4349).
• Fix a crash in JUnitIncompatibleType (#4377).
• In ObjectEqualsForPrimitives, don't suggest replacing equal with == for floating-point values (#4392).

New checks:

• DeeplyNested discourages very deeply nested code that can cause StackOverflowErrors during compilation.
• GuiceNestedCombine discourages nesting of Modules.combine(), which is unnecessary.
• PatternMatchingInstanceof migrates code to use pattern matching for instanceof
• SunApi discourages use of internal proprietary JDK APIs which may be removed from future releases.

Full Changelog: https://github.com/google/error-prone/compare/v2.27.1...v2.28.0

Error Prone 2.27.1

This release contains all of the changes in 2.27.0, plus a bug fix to ClassInitializationDeadlock (google/error-prone#4378)

Full Changelog: https://github.com/google/error-prone/compare/v2.27.0...v2.27.1

Error Prone 2.27.0

New checks:

• ClassInitializationDeadlock detects class initializers that reference subtypes of the current class, which can result in deadlocks.
• MockitoDoSetup suggests using when/thenReturn over doReturn/when for additional type safety.
• VoidUsed suggests using a literal null instead of referring to a Void-typed variable.

Modified checks:

• TruthSelfEquals has been renamed and generalized as SelfAssertion
• RedundantSetterCall has been improved, and enabled as an error oby default

Closed issues: #4291. #4308, #4343, #4320

Full Changelog: https://github.com/google/error-prone/compare/v2.26.1...v2.27.0

Error Prone 2.26.1

This release contains all of the changes in 2.26.0, plus a bug fix to the module name of the annotations artifact com.google.errorprone.annotations (https://github.com/google/error-prone/commit/9d99ee76f2ca8568b69150f5df7fe845c8545d16)

Starting in 2.26.x, the 'annotations' artifact now includes a module-info.java for Java Platform Module System support, thanks to @​sgammon in #4311.

---

Compatibility note:

Now that the annotations artifact explicit declares a module instead of relying on Automatic-Module-Name, JDK 17 and newer perform stricter module encapsulation checks. Modularized libraries depending on Error Prone annotations 2.26.x and newer may see errors like:

... (truncated)

Commits

• c71fd4e Release Error Prone 2.28.0
• 32997f7 Bugfix assignment switch analysis in StatementSwitchToExpressionSwitch: if an...
• 2dde254 Update references to javadoc APIs after the introduction of Markdown doc comm...
• 5fef6e0 Yet another JUnitIncompatibleType crash fix.
• c2df1b6 Refactor comment handling in tokenization to use a new ErrorProneComment clas...
• 3fff610 Update hamcrest to v2.2
• 6f265dd Add a disabled regression test for an UnusedVariable bug
• 5eded87 Add an Error Prone check that reimplements javac sunapi warnings
• 9e0fbf7 Prepare for a change to the return type of JCCompilationUnit#getImports in ...
• 13be411 Handle null != CONST_CASE in YodaCondition
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)