From 7323d2503fdcc3632a69f6a77ad10f5dc2c8742c Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 24 Aug 2026 07:23:22 +0000
Subject: [PATCH 1/2] Bump com.github.spotbugs:spotbugs-maven-plugin from
 4.10.3.0 to 4.10.4.0

Bumps [com.github.spotbugs:spotbugs-maven-plugin](https://github.com/spotbugs/spotbugs-maven-plugin) from 4.10.3.0 to 4.10.4.0.
- [Release notes](https://github.com/spotbugs/spotbugs-maven-plugin/releases)
- [Commits](https://github.com/spotbugs/spotbugs-maven-plugin/compare/spotbugs-maven-plugin-4.10.3.0...spotbugs-maven-plugin-4.10.4.0)

---
updated-dependencies:
- dependency-name: com.github.spotbugs:spotbugs-maven-plugin
  dependency-version: 4.10.4.0
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 pom.xml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pom.xml b/pom.xml
index 89e52d9..4856d65 100644
--- a/pom.xml
+++ b/pom.xml
@@ -267,7 +267,7 @@
 			<plugin>
 				<groupId>com.github.spotbugs</groupId>
 				<artifactId>spotbugs-maven-plugin</artifactId>
-				<version>4.10.3.0</version>
+				<version>4.10.4.0</version>
 				<executions>
 					<execution>
 						<phase>verify</phase>
@@ -359,7 +359,7 @@
 			<plugin>
 				<groupId>com.github.spotbugs</groupId>
 				<artifactId>spotbugs-maven-plugin</artifactId>
-				<version>4.10.3.0</version>
+				<version>4.10.4.0</version>
 			</plugin>
 
 			<!-- pmd: same version as the build gate above, so the report shows what the gate checked -->

From 27863e700718aa3adbceb4c4a01ccfa9e9ad9bc5 Mon Sep 17 00:00:00 2001
From: Bertrand Martin <bertrand@sentrysoftware.com>
Date: Sat, 5 Sep 2026 20:18:02 +0200
Subject: [PATCH 2/2] Set project.reporting.outputEncoding to UTF-8 for
 spotbugs-maven-plugin 4.10.4.0

spotbugs-maven-plugin 4.10.4.0 no longer defaults its report encoding to
UTF-8 when project.reporting.outputEncoding is undefined, so `mvn verify site`
failed with "charsetName" (NullPointerException in
AbstractMavenReport.reportToSite) while rendering the SpotBugs report.
oss-parent only defines the source encoding, so declare the reporting
output encoding explicitly.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
---
 pom.xml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/pom.xml b/pom.xml
index 4856d65..98f2755 100644
--- a/pom.xml
+++ b/pom.xml
@@ -75,6 +75,11 @@
 		<!-- Java 11 -->
 		<maven.compiler.release>11</maven.compiler.release>
 
+		<!-- Encoding of the generated site reports. oss-parent only sets the source encoding;
+		     spotbugs-maven-plugin 4.10.4.0 stopped defaulting to UTF-8 when this is missing and
+		     fails with "charsetName" while rendering its report during `mvn verify site`. -->
+		<project.reporting.outputEncoding>UTF-8</project.reporting.outputEncoding>
+
 		<!-- Reproducible Build -->
 		<!-- See https://maven.apache.org/guides/mini/guide-reproducible-builds.html -->
 		<!-- Also drives the Maven site copyright year and "Documentation as of" date; bump at release. -->