deps: update dependency com.google.errorprone:error_prone_annotations to v2.38.0

[renovate-bot]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
com.google.errorprone:error_prone_annotations (source)	2.36.0 -> 2.38.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

google/error-prone (com.google.errorprone:error_prone_annotations)

v2.38.0: Error Prone 2.38.0

New checks:

• AddNullMarkedToPackageInfo: adds @org.jspecify.annotations.NullMarked annotation to package-info files
• IntLiteralCast: Suggests a literal of the desired type instead of casting an int literal to a long, float, or double
• MisleadingEmptyVarargs: Discourages calling varargs methods that expect at least one argument with no arguments, like Mockito's thenThrow
• PreconditionsExpensiveString: Discourages expensive string formatting in Guava Preconditions checks
• SelfSet: Detects mistakes like proto.setFoo(proto.getFoo())
• UnnecessaryCopy: detect unnecessary copies of proto Lists and Maps.

Closed issues: #​4924, #​4897, #​4995

Full changelog: google/error-prone@v2.37.0...v2.38.0

v2.37.0: Error Prone 2.37.0

Compare Source

Changes:

• The annotations that were previously in error_prone_type_annotations have been been merged into error_prone_annotations. error_prone_type_annotations is now deprecated, and will be removed in a future release.

New checks:

• AssignmentExpression - The use of an assignment expression can be surprising and hard to read; consider factoring out the assignment to a separate statement.
• IntFloatConversion - Detect calls to scalb that should be using the double overload instead
• InvalidSnippet - Detects snippets which omit the : required for inline code.
• JUnit4EmptyMethods - Detects empty JUnit4 @Before, @After, @BeforeClass, and @AfterClass methods.
• MockIllegalThrows - Detects cases where Mockito is configured to throw checked exception types which are impossible.
• NegativeBoolean - Prefer positive boolean names.
• RuleNotRun - Detects TestRules not annotated with @Rule, that won't be run.
• StringConcatToTextBlock - Replaces concatenated multiline strings with text blocks.
• TimeInStaticInitializer - Detects accesses of the system time in static contexts.

Closed issues:

• Propagate check flags in patch mode (#​4699)
• Fixes a crash in ComputeIfAbsentAmbiguousReference (#​4736)
• Show the field name in HidingField diagnostics (#​4775)
• Add support for jakarta annotations to some checks (#​4782)
• FloatingPointAssertionWithinEpsilonTest depends on default locale (#​4815)
• @InlineMe patching of Strings.repeat produces broken code (#​4819)
• Fix a crash in IdentifierName on unnamed (_) variables (#​4847)
• Fix a crash in ArgumentParameterSwap (#​490)

Full changelog: google/error-prone@v2.36.0...v2.37.0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[lqiu96]

/gcbrun

[lqiu96]

Merging this one deps PR due to CI failures in the Auth-Library PR: #3772:

Error: Failed to execute goal org.apache.maven.plugins:maven-enforcer-plugin:3.5.0:enforce (enforce) on project gax: Error: Rule 2: org.apache.maven.enforcer.rules.dependency.RequireUpperBoundDeps failed with message: Error: Failed while enforcing RequireUpperBoundDeps. The error(s) are [ Error: Require upper bound dependencies error for com.google.errorprone:error_prone_annotations:2.36.0 paths to dependency are: Error: +-com.google.api:gax:2.64.2 Error: +-com.google.api:api-common:2.47.2 Error: +-com.google.errorprone:error_prone_annotations:2.36.0 Error: and Error: +-com.google.api:gax:2.64.2 Error: +-com.google.protobuf:protobuf-java-util:3.25.5 Error: +-com.google.errorprone:error_prone_annotations:2.18.0 Error: and Error: +-com.google.api:gax:2.64.2 Error: +-com.google.auth:google-auth-library-oauth2-http:1.34.0 Error: +-com.google.errorprone:error_prone_annotations:2.37.0 Error: and Error: +-com.google.api:gax:2.64.2 Error: +-com.google.protobuf:protobuf-java-util:3.25.5 Error: +-com.google.code.gson:gson:2.12.1 (managed) <-- com.google.code.gson:gson:2.8.9 Error: +-com.google.errorprone:error_prone_annotations:2.36.0 Error: and Error: +-com.google.api:gax:2.64.2 Error: +-com.google.auth:google-auth-library-oauth2-http:1.34.0 Error: +-com.google.http-client:google-http-client:1.46.3 (managed) <-- com.google.http-client:google-http-client:1.46.3 Error: +-com.google.errorprone:error_prone_annotations:2.36.0 Error: ] 

Bumping the Auth Library PR for the latest X.509 changes.