Kengo TODA

Replace System.err & System.out with proper logger API

3

Current implementation uses `System.out` and `System.err` to output debug information, but it should be avoided in production code. Because using stdout and/or stderr directly makes system maintenance difficult, it doesn't...

Reimplement `ResourceValueFrame` as enum

2

[ResourceValueFrame.java](https://github.com/spotbugs/spotbugs/blob/c6c41ae68b1b997bfb2559660f42479b3e8a3f26/spotbugs/src/main/java/edu/umd/cs/findbugs/ba/ResourceValueFrame.java) is better to rewrite as `Enum` then we can reduce several boilerplate codes by `EnumSet` etc.

docs: fix wrong commandline option description

1

The current user manual introduces command-line options wrongly, like `-xml:spotbugs.xml`, which should be `-xml=spotbugs.xml`. These command-line options were introduced by #1776. This PR will fix it in both reStructuredText and...

System::setSecurityManager is deprecated and will be removed in a future JDK release

9

We have several usage of `System::setSecurityManager` in SpotBugs implementation. https://github.com/spotbugs/spotbugs/search?q=setSecurityManager&type= ``` spotbugs/src/main/java/edu/umd/cs/findbugs/PluginLoader.java: System.setSecurityManager(null); spotbugs/src/main/java/edu/umd/cs/findbugs/ba/jsr305/TypeQualifierValue.java: System.setSecurityManager(ValidationSecurityManager.INSTANCE); spotbugs/src/main/java/edu/umd/cs/findbugs/ba/jsr305/TypeQualifierValue.java: System.setSecurityManager(ValidationSecurityManager.INSTANCE); ```

refs #710

Print path of report files instead of their URL, for better multi-platform support

1

Recently we introduced a defect that is caused only on the Windows platform (#614). We had a similar problem (#273) previously. To avoid reproducing these problems, run workflows in PR...

Replace Groovy with Kotlin or others

1

Recently Groovy is not so actively developed, and problems like #523 are not solved. But when we replace the existing Groovy code, the build fails due to https://github.com/gradle/gradle/issues/12321, https://github.com/gradle/gradle/issues/4030, or...

docs: introduce how to use SpotBugs in the Android project

3

#252 introduced android plugin support, then we can check the last checkbox in `README.md`. This PR also add a short description about the usage of this plugin for Android project....

Fix groovydoc

2

The [latest groovydoc](https://spotbugs-gradle-plugin.netlify.app/com/github/spotbugs/snom/package-summary.html) contains strange Enum named `Confidence.1`. It also lacking description of classes and fields.

Replace deprecated ConfigureUtil and ClosureBackedAction

1

Following two deprecated APIs have no official migration guideline for now: - [ ] `ConfigureUtil` with a [method with an Action as a single argument](https://docs.gradle.org/7.3/javadoc/org/gradle/util/ConfigureUtil.html) - [ ] `ClosureBackedAction` in...