From 6498905f5acd3be77a0db327b03b8a4353d000f0 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 9 Aug 2026 22:18:31 +0000
Subject: [PATCH 1/3] build(deps): bump com.google.errorprone:error_prone_core

Bumps [com.google.errorprone:error_prone_core](https://github.com/google/error-prone) from 2.36.0 to 2.50.0.
- [Release notes](https://github.com/google/error-prone/releases)
- [Commits](https://github.com/google/error-prone/compare/v2.36.0...v2.50.0)

---
updated-dependencies:
- dependency-name: com.google.errorprone:error_prone_core
  dependency-version: 2.50.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index 77cdf4e..2e35d23 100644
--- a/pom.xml
+++ b/pom.xml
@@ -62,7 +62,7 @@
 	<!-- Plugin / tooling versions -->
 	<spotless.version>2.44.3</spotless.version>
 	<google-java-format.version>1.25.2</google-java-format.version>
-	<errorprone.version>2.36.0</errorprone.version>
+	<errorprone.version>2.50.0</errorprone.version>
 	<nullaway.version>0.12.3</nullaway.version>
 	<spotbugs.version>4.10.3.0</spotbugs.version>
 	<dependency-check.version>13.0.0</dependency-check.version>

From 345e46adf91fb093f1c5e2f63b07d3f348515b90 Mon Sep 17 00:00:00 2001
From: Rahil <rahilrshk@gmail.com>
Date: Mon, 10 Aug 2026 16:38:32 +0300
Subject: [PATCH 2/3] fix: build

---
 pom.xml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index 2e35d23..72611b2 100644
--- a/pom.xml
+++ b/pom.xml
@@ -63,7 +63,7 @@
 	<spotless.version>2.44.3</spotless.version>
 	<google-java-format.version>1.25.2</google-java-format.version>
 	<errorprone.version>2.50.0</errorprone.version>
-	<nullaway.version>0.12.3</nullaway.version>
+	<nullaway.version>0.13.8</nullaway.version>
 	<spotbugs.version>4.10.3.0</spotbugs.version>
 	<dependency-check.version>13.0.0</dependency-check.version>
   </properties>
@@ -275,6 +275,7 @@
           </annotationProcessorPaths>
           <compilerArgs>
             <arg>-XDcompilePolicy=simple</arg>
+            <arg>-XDaddTypeAnnotationsToSymbol=true</arg>
             <arg>--should-stop=ifError=FLOW</arg>
             <arg>-Xplugin:ErrorProne -XepExcludedPaths:.*/scratch/.* -Xep:NullAway:WARN -XepOpt:NullAway:AnnotatedPackages=com.rsh.jtoolkit</arg>
             <arg>--add-opens</arg>

From 17dcb6f91de3376096eb9e867b2fe6e92abec353 Mon Sep 17 00:00:00 2001
From: Rahil <rahilrshk@gmail.com>
Date: Mon, 10 Aug 2026 16:48:15 +0300
Subject: [PATCH 3/3] ci: add stable ci-success status gate job
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

The branch ruleset required a status check named 'Java CI with Maven'
(the workflow name), but Actions reports checks per job as 'build (21)'.
That context was never produced, so PRs got stuck forever on
'Expected — Waiting for status to be reported'.

Add an aggregation job 'ci-success' that depends on 'build' and exposes
a single, matrix-independent required check. The ruleset now requires
'ci-success' instead.
---
 .github/workflows/maven.yml | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)

diff --git a/.github/workflows/maven.yml b/.github/workflows/maven.yml
index 48c4f59..41cd6ee 100644
--- a/.github/workflows/maven.yml
+++ b/.github/workflows/maven.yml
@@ -26,3 +26,21 @@ jobs:
           cache: maven
       - name: Build and verify
         run: mvn -B verify
+
+  # Aggregation gate: exposes a single, stable status check ("ci-success") that
+  # is independent of the build matrix. Set this as the required status check in
+  # branch protection instead of the matrix-dependent "build (21)" context.
+  ci-success:
+    name: ci-success
+    if: always()
+    needs: build
+    runs-on: ubuntu-latest
+    steps:
+      - name: Verify build job succeeded
+        run: |
+          if [ "${{ needs.build.result }}" != "success" ]; then
+            echo "build job did not succeed: ${{ needs.build.result }}"
+            exit 1
+          fi
+          echo "All required jobs succeeded."
+