[dependabot]

Bumps org.checkerframework:checker-qual from 4.3.1 to 4.4.0.

Release notes

Sourced from org.checkerframework:checker-qual's releases.

Checker Framework 4.4.0

Version 4.4.0 (2026-11-02)

User-visible changes

A method with a purity annotation may call the functional method of one of its functional-interface parameters, such as f.apply(x) for a parameter Function f; the call is treated as having the method's purity. In exchange, under -AcheckPurityAnnotations, each argument passed to such a parameter must have that purity, or the new error purity.functional.argument is issued. This affects calls to JDK methods such as Optional.map and Comparator.comparing that are passed lambdas with side effects, and calls to @Pure methods such as Objects.requireNonNull(T, Supplier) that are passed a lambda that is not deterministic, such as one that calls String.format. See the manual section "Lambdas, method references, and functional interfaces".

Changes for type system implementers

New class AbstractSetInclusionQualifierHierarchy is the superclass of SubtypeIsSubsetQualifierHierarchy and SubtypeIsSupersetQualifierHierarchy.

Removed TreeUtils.hasSyntheticArgument(), which always returned false.

A subclass of CFAbstractValue or CFValue that adds state must override equals() and hashCode() to account for that state.

New method BaseTypeVisitor.shouldSkipClass() lets a checker skip a class entirely, including dataflow analysis.

Removed classes ByteMath, ShortMath, IntegerMath, LongMath, FloatMath, and DoubleMath. Use NumberMath.getNumberMath() instead. NumberMath is now a final, non-generic class. NumberMath.getNumberMath() throws UnsupportedOperationException, rather than returning null, for an unsupported Number subclass, such as BigInteger.

PurityChecker.checkPurity() takes two new arguments: the method declaration that lexically encloses the statement being checked (or null, as for an arbitrary expression) and the processing environment.

Renamed ControlFlowGraph.convertedTreeLookup to implicitlyConvertedTreeLookup and CFGTranslationPhaseOne.addToConvertedLookupMap() to addToImplicitlyConvertedLookupMap().

Deprecated methods:

• DisallowedSideEffects.noArgumentMethod() => ElementUtils.resolveNoArgumentCall()

Closed issues

#6849, #6864, #6872, #8018, #8300, #8320, #8323, #8340, #8343.

Changelog

Sourced from org.checkerframework:checker-qual's changelog.

Version 4.4.0 (2026-11-02)

User-visible changes

A method with a purity annotation may call the functional method of one of its functional-interface parameters, such as f.apply(x) for a parameter Function f; the call is treated as having the method's purity. In exchange, under -AcheckPurityAnnotations, each argument passed to such a parameter must have that purity, or the new error purity.functional.argument is issued. This affects calls to JDK methods such as Optional.map and Comparator.comparing that are passed lambdas with side effects, and calls to @Pure methods such as Objects.requireNonNull(T, Supplier) that are passed a lambda that is not deterministic, such as one that calls String.format. See the manual section "Lambdas, method references, and functional interfaces".

Changes for type system implementers

New class AbstractSetInclusionQualifierHierarchy is the superclass of SubtypeIsSubsetQualifierHierarchy and SubtypeIsSupersetQualifierHierarchy.

Removed TreeUtils.hasSyntheticArgument(), which always returned false.

A subclass of CFAbstractValue or CFValue that adds state must override equals() and hashCode() to account for that state.

New method BaseTypeVisitor.shouldSkipClass() lets a checker skip a class entirely, including dataflow analysis.

Removed classes ByteMath, ShortMath, IntegerMath, LongMath, FloatMath, and DoubleMath. Use NumberMath.getNumberMath() instead. NumberMath is now a final, non-generic class. NumberMath.getNumberMath() throws UnsupportedOperationException, rather than returning null, for an unsupported Number subclass, such as BigInteger.

PurityChecker.checkPurity() takes two new arguments: the method declaration that lexically encloses the statement being checked (or null, as for an arbitrary expression) and the processing environment.

Renamed ControlFlowGraph.convertedTreeLookup to implicitlyConvertedTreeLookup and CFGTranslationPhaseOne.addToConvertedLookupMap() to addToImplicitlyConvertedLookupMap().

Deprecated methods:

• DisallowedSideEffects.noArgumentMethod() => ElementUtils.resolveNoArgumentCall()

Closed issues

#6849, #6864, #6872, #8018, #8300, #8320, #8323, #8340, #8343.

Commits

• 1603378 new release 4.4.0
• 5c673f3 Fix some links.
• e32e41c Update deprecation since versions to 4.4.0
• f50337d Prep for release.
• caed37c Update cimg/base Docker tag to v2026.11 (#8474)
• 6fb495a ToIndexFileConverter: load classes with the right class loader, and handle va...
• 127fcec Document the "Cannot attach type annotations" error on JDK 22+ (#8468)
• dbba49e Update plugin net-ltgt-errorprone to v5.2.0 (#8472)
• 11758b8 Fix typo "languages features" in test comments (#8463)
• 2a4f225 Update dependency org.apache.spark:spark-sql_2.13 to v4.3.0 (#8471)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)