Liam Miller-Cushon

The SecurityManager API is deprecated for removal, see https://openjdk.org/jeps/486 It is being used in javassist for `getClassContext`: https://github.com/jboss-javassist/javassist/blob/bbe0e077ef36ef399c67e3683d7bc8c2a8ad0444/src/main/javassist/util/proxy/SecurityActions.java#L53-L54 That use-case could be migrated to `java.lang.StackWalker` API added in Java 9:...

Increasing minimum supported JDK to JDK 21 (and dropping support for JDK 17)

11

The minimum supported JDK to run Error Prone will eventually be updated from JDK 17 to JDK 21. This is tentatively planned for September 2025. This bug is intended to...

8341779: [REDO BACKPORT] type annotations are not visible to javac plugins across compilation boundaries (JDK-8225377)

13

[JDK-8341779](https://bugs.openjdk.org/browse/JDK-8341779) is a redo of the backport of [JDK-8323093](https://bugs.openjdk.org/browse/JDK-8323093), see also discussion in CSR [JDK-8346471](https://bugs.openjdk.org/browse/JDK-8346471). JDK-8341779 was backported to JDK 21u and released in 21.0.8, as discussed in the CSR...

8360406: [21u] Disable logic for attaching type annotations to class files until 8359336 is fixed

4

This is a backport of [JDK-8360406](https://bugs.openjdk.org/browse/JDK-8360406), which is a follow-up to [JDK-8341779](https://bugs.openjdk.org/browse/JDK-8341779). --------- ### Progress - [ ] [JDK-8360406](https://bugs.openjdk.org/browse/JDK-8360406) needs maintainer approval - [x] Change must not contain extraneous whitespace...

8354893: [REDO BACKPORT] javac crashes while adding type annotations to the return type of a constructor (JDK-8320001)

4

This is a backport of [JDK-8354893](https://bugs.openjdk.org/browse/JDK-8354893), which is a follow-up to [JDK-8341779](https://bugs.openjdk.org/browse/JDK-8341779). --------- ### Progress - [x] Change must not contain extraneous whitespace - [x] Commit message must refer to...

8337998: CompletionFailure in getEnclosingType attaching type annotations

5

This is a backport of [JDK-8337998](https://bugs.openjdk.org/browse/JDK-8337998), which is a follow-up to [JDK-8341779](https://bugs.openjdk.org/browse/JDK-8341779). --------- ### Progress - [ ] Change must be properly reviewed (1 review required, with at least 1...

8337795: Type annotation attached to incorrect type during class reading

7

This is a backport of [JDK-8337795](https://bugs.openjdk.org/browse/JDK-8337795), which is a follow-up to [JDK-8341779](https://bugs.openjdk.org/browse/JDK-8341779). --------- ### Progress - [ ] Change must be properly reviewed (1 review required, with at least 1...

In version 3.49.3, `Map.merge`, `Map.compute`, and `Map.computeIfAbsent` used `@PolyNull` in their signatures. This gave them a non-null return type when they were used with functions that operated on non-null types....

isVariableTreeDeclaredUsingVar assumes var types don't have start positions, is broken by changes in JDK-8329951

1

`isVariableTreeDeclaredUsingVar` assumes that the type of a `VariableTree` declared using `var` will not have a start position set: https://github.com/typetools/checker-framework/blob/988f6fc5204337da25d85dc0e7433eaf5d6068c5/javacutil/src/main/java/org/checkerframework/javacutil/TreeUtils.java#L2588-L2591 After an upcoming javac change in https://github.com/openjdk/jdk/commit/e2f736658fbd03d2dc2186dbd9ba9b13b1f1a8ac, start positions are set...

maven-jar-plugin can create invalid Multi-Release jars

2

### Affected version 3.4.2 ### Bug description When maven-jar-plugin is used to create a Multi-Release jar, it doesn't check that the jars are valid. The `jar` tool will validate that...