fix(deps): update all patch versions

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Age	Confidence
github/codeql-action	action	patch	v4.31.5 -> v4.31.6
com.uber.nullaway:nullaway	dependencies	patch	0.12.12 -> 0.12.13
net.bytebuddy:byte-buddy-gradle-plugin	dependencies	patch	1.18.1 -> 1.18.2
net.bytebuddy:byte-buddy	dependencies	patch	1.18.1 -> 1.18.2

---

Release Notes

github/codeql-action (github/codeql-action)

v4.31.6

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.6 - 01 Dec 2025

No user facing changes.

See the full CHANGELOG.md for more information.

uber/NullAway (com.uber.nullaway:nullaway)

v0.12.13

NullAway now includes a new Error Prone checker, RequireExplicitNullMarking,
that checks that every class is explicitly @NullMarked or @NullUnmarked (at the class or package level), so code
is not left @NullUnmarked unintentionally. The check is disabled by default. See the docs
for further details.

NullAway also includes support for a new @PureExceptLambda annotation, contributed by @​FxMorin, to tell NullAway
to preserve nullability information from the enclosing method when analyzing the body of certain lambdas.
See the docs for details.

• Use passed-in TreePath in one more place when available (#​1329)
• Checker to ensure explicit null marking of every class (#​1323)
• Bound size of alreadyRunAnalyses cache to be consistent (#​1334)
• Improve inference for generic methods with lambda argument containing return statements by @​dhruv-agr (#​1337)
• Add PureExceptLambda annotation by @​FxMorin (#​1325)
• Support marking method type variable upper bounds as @Nullable in library models (#​1345)
• Method name parsing in ExternalStubxLibraryModels class is missing a corner case by @​haewiful (#​1344)
• Better fix for dataflow analysis caching (#​1353)
• Maintenance
  • Add package-info files with @​NullMarked (#​1331)
  • Speed up buildWithNullAway task (#​1330)
  • Enable the VoidMissingNullable checker and autofix all extant warnings (#​1332)
  • Bump JDK version to 25 for integration tests (#​1336)
  • Switch Coderabbit to assertive mode (#​1338)
  • Enable EqualsMissingNullable check and fix all extant warnings (#​1339)
  • Bump to AutoValue 1.11.1 (#​1340)
  • Update Caffeine benchmark (#​1342)
  • Add a test for a useless @​Contract (#​1346)
  • Test case for wildcards in Generic Method with Lambda Arguments by @​dhruv-agr (#​1349)
  • Add initial AGENTS.md file (#​1352)

---

Configuration

📅 Schedule: Branch creation - "before 8am every weekday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 63.76%. Comparing base (fe31da7) to head (c71cbb3).
⚠️ Report is 1 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #1431   +/-   ##
=======================================
  Coverage   63.76%   63.76%           
=======================================
  Files         159      159           
  Lines        3146     3146           
  Branches      325      325           
=======================================
  Hits         2006     2006           
  Misses       1043     1043           
  Partials       97       97           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[fractalwrench]

LGTM