chore(deps): bump com.diffplug.spotless:spotless-maven-plugin from 3.8.0 to 3.10.4

[dependabot]

Bumps com.diffplug.spotless:spotless-maven-plugin from 3.8.0 to 3.10.4.

Release notes

Sourced from com.diffplug.spotless:spotless-maven-plugin's releases.

Maven Plugin v3.10.4

Changes

• Bump default eclipse version from 4.40 to 4.41.
• Bump default gherkin version 42.0.0 -> 42.0.1. (#3088)
• Bump default jackson version 2.22.2 -> 2.22.3. (#3101)
• Bump default palantir-java-format version 2.98.0 -> 2.102.0. (#3103, #3132)
• Bump default mockito-core version 5.23.0 -> 5.24.0. (#3106)
• Bump default greclipse version to latest 4.40 -> 4.41. (#3123)
• Bump default ktfmt version 0.64 -> 0.65. (#3135)
  Which moved to the org.jetbrains.kotlinx:ktfmt coordinate and org.jetbrains.kotlinx.ktfmt package. Older versions are still supported.
• Bump default palantir-java-format version 2.99.0 -> 2.102.0. (#3132)

Fixed

• Migrate Plexus component injection to JSR-330 and Maven parameter. (#3122)
• shortenFullyQualifiedTypes leaves a qualified name alone when the enclosing type extends or implements a type that is not in the same file, so an inherited member type cannot take the simple name. (#3117)
• expandWildcardImports no longer drops the import of a type that is only used to qualify a static member (such as Collections.sort(list) or TimeUnit.SECONDS), or the static import of a field or enum constant (such as PI from import static java.lang.Math.*), which produced code that did not compile. (#2833)

Maven Plugin v3.10.3

Changes

• Generate formatter defaults from version catalog. (#3045)
• Bump default gson version 2.13.2 -> 2.14.0. (#3045)
• Bump default zjsonpatch version 0.4.14 -> 0.4.16. (#3045)
• Bump default jackson-dataformat-yaml version 2.14.1 -> 2.20.1. (#3045)
• Bump default ktfmt version 0.63 -> 0.64. (2988)
• Bump default cleanthat version 2.25 -> 2.26. (#2882)
• Bump default jackson version 2.20.1 -> 2.22.2. (#2819)
• Bump default javaparser version 3.27.1 -> 3.28.2. (#3065)
• Bump default palantir-java-format version 2.80.0 -> 2.98.0. (#3068)
• Bump default scalafmt version 3.8.1 -> 3.11.5. (#2173)
• Bump default google-java-format version 1.30.0 -> 1.36.1. (#3075)
• Bump default gherkin-utils version 10.0.0 -> 12.0.2. (#2979)

Fixed

• Fix release signing by using Gradle's required eight-digit signing subkey ID. (#3105)
• Fix race when creating the npm install cache directory. ((#3096)
• GrEclipse no longer emits expected OSGi and nested-jar warnings during initialization. (#2445)
• typescript prettier() no longer emits a warning when its parser is already set to typescript. (#3098)
• <versionCatalog> preserves standalone comments at section boundaries and the end of the file. (#3048)
• <versionCatalog> preserves entries when comments contain unmatched brackets, preserves commas inside quoted strings, and keeps significant line boundaries in multiline entries. (#3042)
• <versionCatalog> now reports unfinished entries as lints at their starting line. These fail formatting by default, so upgrading may expose catalog errors that previously caused silent data loss. (#3042)
• Eclipse JDT formatter step no longer fails with NoClassDefFoundError or NoSuchMethodError when lombok is active as a JVM agent (e.g. -javaagent:lombok.jar in Eclipse/VS Code/Cursor). (#2795)

Maven Plugin v3.10.2

Fixed

• <shortenFullyQualifiedTypes> now shortens fully-qualified types used in expression contexts (such as static method calls, static fields, and enum constants) while avoiding imports that would change how existing unqualified type references resolve. (#3039)
• Eclipse JDT formatter step no longer fails with NoClassDefFoundError when lombok is active as a JVM agent (e.g. -javaagent:lombok.jar in Eclipse/VS Code/Cursor). (#2795)

Maven Plugin v3.10.1

Fixed

• <prettier> and other npm-based steps no longer fail to start on npm 12 (EUNKNOWNCONFIG from --scripts-prepend-node-path). (#3024)

... (truncated)

Commits

• 62e727d Published maven/3.10.4
• d9e7a41 Published gradle/8.10.4
• c006d66 Published lib/4.10.4
• 8adb835 Merge release publishing fixes into main (#3138)
• 67b4dbf Remove internal publishing changes from release notes
• b9c4830 Keep Rewrite plugin on publicly resolvable releases (#3036)
• 1c93df4 Update dependency com.palantir.javaformat:palantir-java-format to v2.102.0 (#...
• ab153a9 Keep Rewrite plugin on publicly resolvable releases
• feb10d8 Update plugin rewrite to v7.41.0
• 2083664 Update changelogs for default formatter version bump (#3132)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Summary by CodeRabbit

• Chores
  • Updated the project’s code-formatting tooling configuration to use version 3.10.4 across the root project and its bill of materials.
  • This is a maintenance update only; it does not change application features, workflows, or behavior available to end users. No other user-facing changes are included.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

• Configuration used: defaults
• Review profile: CHILL
• Plan: Enterprise
• Run ID: aff1fdf8-76c9-4ad9-83db-4d1d03ebd561

---

📥 Commits

Reviewing files that changed from the base of the PR and between b300073 and 5961a05.

---

📒 Files selected for processing (2)

• operator-framework-bom/pom.xml
• pom.xml

---

Included review availability: This review used your included allowance. Your plan provides up to 12 included reviews per hour; 11 remain after this review.

---

---

📝 Walkthrough

Walkthrough

The root POM and operator-framework BOM update their Spotless Maven plugin versions to 3.10.4.

Changes

Spotless Plugin Version Update

Layer / File(s)	Summary
Update managed Spotless versions pom.xml, operator-framework-bom/pom.xml	The root POM updates the managed Spotless version from 3.8.0 to 3.10.4. The operator-framework BOM updates its configured version from 3.9.0 to 3.10.4.

Priority: ⬇️ Low

Estimated code review effort: 1 (Trivial) | ~5 minutes

Change: Other

Suggested reviewers: csviri

---

Merge Risk: ⚪ Minimal · up to 5961a

This change aligns the Spotless plugin versions in the root POM and operator-framework BOM. No actionable merge-blocking risk is identified.

Pre-merge checks | 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check		Check skipped - CodeRabbit’s high-level summary is enabled.
Title check		The title clearly identifies the Spotless Maven plugin dependency update to version 3.10.4. It matches the main change and the stated pull request objective.
Docstring Coverage		No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check		Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check		Check skipped because no linked issues were found for this pull request.

---

✨ Finishing Touches 💡 1

🧪 Generate unit tests (beta)

• Commit to this branch
• Create a new PR

---

🛠️ Fix failing CI checks 💡

• Commit to this branch
• Create a new PR

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Warning

Some tools did not complete. Review the errors below.

🔧 OSV Scanner (2.6.0)

pom.xml

OSV Scanner exited with code 128 without a usable report

---

operator-framework-bom/pom.xml

OSV Scanner exited with code 128 without a usable report

---

---

_{Comment @coderabbitai help to get the list of available commands.}

[Copilot]

🟢 Approval recommended

The valid dependency upgrade is focused and consistently applied.

0 open findings

What changed in this PR

Updates Spotless Maven Plugin versions consistently across the project.

Changes:

• Upgrades Spotless to 3.10.4 in the root build and BOM.

File	Description
pom.xml	Updates the main Spotless plugin version.
operator-framework-bom/​pom.xml	Aligns the BOM’s Spotless plugin version.

🧠 Review effort: Balanced

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.