build(deps-dev): bump com.github.spotbugs:spotbugs-maven-plugin from 4.10.4.0 to 4.10.4.1 in /java

[dependabot]

Bumps com.github.spotbugs:spotbugs-maven-plugin from 4.10.4.0 to 4.10.4.1.

Release notes

Sourced from com.github.spotbugs:spotbugs-maven-plugin's releases.

spotbugs-maven-plugin-4.10.4.1

BREAKING

In 2014, maven reporting added various settings that should have resulted in removal here but had gone unseen. These are now applied and therefore the state changed to immutable which will cause plugin to fail if users do not adjust configuration as noted here.

Users who previously configured outputEncoding directly on the SpotBugs Maven Plugin must configure project.reporting.outputEncoding instead and remove it to avoid errors. Users passing fork option should remove it to avoid warnings as support was gone in last release and it does nothing. Users who previously configured outputDirectory directly on the SpotBugs Maven Plugin must configure project.reporting.outputDirectory instead and remove it to avoid errors.

What's Changed

• Maven 4 rc 6 support, readme cleanup, use latest spotbugs in build, head tag, formatting by @​hazendaz in spotbugs/spotbugs-maven-plugin#1512
• Fixes 1511, removed shaded 'outputEncoding' that maven reporting added in 2014 by @​hazendaz in spotbugs/spotbugs-maven-plugin#1513
• Remove deprecated 'fork' option and update faq by @​hazendaz in spotbugs/spotbugs-maven-plugin#1514
• Minor cleanups by @​hazendaz in spotbugs/spotbugs-maven-plugin#1515
• Use super class outputDirectory removing all duplication by @​hazendaz in spotbugs/spotbugs-maven-plugin#1516
• Make ownership explicit on xdocs report writer by @​hazendaz in spotbugs/spotbugs-maven-plugin#1517
• Cleanup some of the groovy code by @​hazendaz in spotbugs/spotbugs-maven-plugin#1518
• various other library updates

Full Changelog: spotbugs/spotbugs-maven-plugin@spotbugs-maven-plugin-4.10.4.0...spotbugs-maven-plugin-4.10.4.1

Commits

• 59f4efc [maven-release-plugin] prepare release spotbugs-maven-plugin-4.10.4.1
• 1081359 Merge pull request #1519 from spotbugs/renovate/byte-buddy.version
• 23caeff Merge pull request #1520 from spotbugs/renovate/slf4j-monorepo
• 8a5d7f0 Update dependency org.slf4j:slf4j-bom to v2.0.19
• 8be188f Update byte-buddy.version to v1.18.13
• 742e10c Merge pull request #1518 from hazendaz/master
• d7f6a56 Cleanup groovy in the trait
• eda58b6 Cleanup groovy within report generator
• a518d7b Cleanup xdocs reporter groovy each usage
• 4c94029 Merge pull request #1517 from hazendaz/master
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[senzingdevops]

Automated: approving this pull request because it includes a patch update

[github-actions]

🤖 Claude Code Review

PR Code Review

Summary: This PR bumps spotbugs-maven-plugin from 4.10.4.0 to 4.10.4.1 in java/pom.xml (line 168). It's a routine dependency patch bump, likely automated (Dependabot-style, consistent with the recent commit history showing similar build(deps-dev) bumps).

Code Quality

• ✅ Follows standard Maven POM XML conventions — single-line version bump, properly indented, no formatting issues
• ✅ No commented-out code
• ✅ N/A — no variable naming involved
• ✅ N/A — no logic duplication introduced
• ✅ No defects identified — this is a patch-level version bump (4.10.4.0 → 4.10.4.1) with minimal risk of breaking changes under semver conventions
• ✅ .claude/CLAUDE.md reviewed — content is general-purpose environment/architecture documentation, not specific to any local developer's machine (uses placeholder paths like <project_path>, $SENZING_PATH); not affected by this PR

Testing

• ✅ N/A — dependency version bump only, no new functions or endpoints
• ✅ N/A — no new integration points
• ✅ N/A — no new edge cases introduced
• ⚠️ Not verifiable from diff alone — recommend confirming mvn -P spotbugs validate (java/pom.xml:167) still passes in CI with the new plugin version before merge

Documentation

• ✅ N/A — no README changes needed for a build-tool plugin bump
• ✅ N/A — no API surface changed
• ✅ N/A — no complex logic added
• ⚠️ CHANGELOG.md not updated — minor/optional for a dev-tooling dependency bump; flagging per checklist but not blocking
• ✅ N/A — no markdown files touched in this diff

Security

• ✅ No hardcoded credentials
• ✅ N/A — no input handling changed
• ✅ N/A — no error handling changed
• ✅ No sensitive data/logging touched
• ✅ No .lic files or AQAAAD-prefixed license strings present in this diff

Verdict

✅ Approve. Low-risk, single-line patch version bump to a build-time static-analysis plugin (SpotBugs). No functional code paths affected.

Automated code review analyzing defects and coding standards