Update OpenRewrite

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
org.openrewrite.recipe:rewrite-third-party	0.38.1 → 0.40.1
org.openrewrite.recipe:rewrite-static-analysis	2.34.0 → 2.36.0
org.openrewrite.recipe:rewrite-migrate-java	3.34.0 → 3.36.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

openrewrite/rewrite-third-party (org.openrewrite.recipe:rewrite-third-party)

v0.40.1: 0.40.1

Compare Source

What's Changed

• Add rewrite-migrate-java to runtime classpath by @​timtebeek in #​74
• [Auto] Aggregational Quarkus migration recipes as of 2026-05-28T1023 by @​github-actions[bot] in #​75
• [Auto] Aggregational Quarkus migration recipes as of 2026-06-02T1449 by @​github-actions[bot] in #​77

Full Changelog: openrewrite/rewrite-third-party@v0.39.0...v0.40.1

v0.40.0: 0.40.0

Compare Source

What's Changed

• Add rewrite-migrate-java to runtime classpath by @​timtebeek in #​74
• [Auto] Aggregational Quarkus migration recipes as of 2026-05-28T1023 by @​github-actions[bot] in #​75
• [Auto] Aggregational Quarkus migration recipes as of 2026-06-02T1449 by @​github-actions[bot] in #​77

Full Changelog: openrewrite/rewrite-third-party@v0.39.0...v0.40.0

v0.39.0: 0.39.0

What's Changed

• Renew quarkus-update-recipes suppression to 2026-06-01 by @​Jenson3210 in #​70
• Add marketplace category descriptions for Picnic, Quarkus, and Apache by @​timtebeek in #​71
• Revert marketplace category descriptions by @​timtebeek in #​72
• Suppress CVE-2026-42582: false positive on core Netty modules by @​timtebeek in #​73

New Contributors

• @​Jenson3210 made their first contribution in #​70

Full Changelog: openrewrite/rewrite-third-party@v0.38.2...v0.39.0

v0.38.2

What's Changed

• OpenRewrite v8.81.6
• [Auto] Aggregational Quarkus migration recipes as of 2026-05-05T1158 by @​github-actions[bot] in #​69

Full Changelog: openrewrite/rewrite-third-party@v0.38.0...v0.38.2

openrewrite/rewrite-static-analysis (org.openrewrite.recipe:rewrite-static-analysis)

v2.36.0: 2.36.0

What's Changed

• Guard instanceof to Class::isInstance conversion on lambda arity by @​timtebeek in #​903
• Preserve cast on argument to overloaded method in RemoveRedundantTypeCast by @​timtebeek in #​904
• Preserve raw cast on parameterized expression in RemoveRedundantTypeCast by @​timtebeek in #​905
• Skip Python sources in CombineSemanticallyEqualCatchBlocks by @​timtebeek in #​908
• Use receiver type for unbound instance method reference in ReplaceLambdaWithMethodReference by @​timtebeek in #​909
• Regenerate recipes.csv by @​timtebeek in #​910
• Retain load-bearing type witness in select position in UnnecessaryExplicitTypeArguments by @​knutwannheden in #​911

Full Changelog: openrewrite/rewrite-static-analysis@v2.35.0...v2.36.0

v2.35.0: 2.35.0

What's Changed

• Document identity-semantics caveat on PrimitiveWrapperClassConstructorToValueOf by @​timtebeek in #​883
• Skip FinalClass when class has anonymous inner subclasses by @​timtebeek in #​886
• Skip ReplaceLambdaWithMethodReference for parameterized types with multiple constructors by @​timtebeek in #​887
• Preserve null cast at varargs position in RemoveRedundantTypeCast by @​timtebeek in #​888
• Retain explicit type arguments on no-arg static methods in UnnecessaryExplicitTypeArguments by @​timtebeek in #​889
• Detect overloads on parameterized receiver in hasMethodOverloading by @​timtebeek in #​890
• Preserve cast on generic method invocation in overloaded outer call by @​timtebeek in #​891
• Guard cast to JavaType.Annotation in ReorderAnnotations by @​timtebeek in #​894
• Strip diamond operator from cast in UseLambdaForFunctionalInterface by @​timtebeek in #​893
• Replace var with interface type in UseLambdaForFunctionalInterface by @​timtebeek in #​896

Full Changelog: openrewrite/rewrite-static-analysis@v2.34.1...v2.35.0

v2.34.1

What's Changed

• OpenRewrite v8.81.6
• Preserve statement order in UseTryWithResources by @​timtebeek in #​866
• Skip meta-annotated @Configuration in FinalClass and HideUtilityClassConstructor by @​timtebeek in #​867
• OpenRewrite recipe best practices by @​timtebeek in #​869
• Revert to using rewrite-java-21 for test runtime by @​timtebeek in #​870
• Preserve casts pinning generic-method return type in lambdas by @​timtebeek in #​872
• Preserve (Object) bridge cast for unchecked generic casts by @​timtebeek in #​876
• Skip Objects::nonNull/isNull when lambda parameter does not match by @​timtebeek in #​875
• Regression tests for ReplaceStackWithDeque ControlFlow crashes by @​knutwannheden in #​879
• Skip SimplifyConsecutiveAssignments when initializer would self-reference by @​timtebeek in #​882

Full Changelog: openrewrite/rewrite-static-analysis@v2.34.0...v2.34.1

openrewrite/rewrite-migrate-java (org.openrewrite.recipe:rewrite-migrate-java)

v3.36.0: 3.36.0

What's Changed

• Move StringFormatted recipe from Java 17 upgrade to Java best practices by @​timtebeek in #​1106
• Skip IfElseIfConstructToSwitch when a trailing non-== null binary check is present by @​timtebeek in #​1109
• Skip UseTextBlocks when literal value matches its source by @​timtebeek in #​1111
• Skip UseMapOf for HashMap subclasses like LinkedHashMap and TreeMap by @​timtebeek in #​1113
• Skip RenameUnderscoreIdentifier on Kotlin and Groovy sources by @​MBoegers in #​1114
• Do not add java.io.IO import in ReplaceSystemOutWithIOPrint by @​timtebeek in #​1118
• fix: do not replace lambda params with underscore when used as assignment target by @​darrencilia in #​1117
• Route WSS4J message.token classes to their real 2.x packages by @​Jenson3210 in #​1122
• Migrate com.sun.xml.bind.marshaller.NamespacePrefixMapper to org.glassfish.jaxb.runtime.marshaller.NamespacePrefixMapper by @​Jenson3210 in #​1121
• Fix RefineSwitchCases generating invalid guard on enum constant labels by @​timtebeek in #​1124
• Skip unparseable Java versions in FindJavaVersion instead of reporting -1 by @​timtebeek in #​1125

New Contributors

• @​darrencilia made their first contribution in #​1117

Full Changelog: openrewrite/rewrite-migrate-java@v3.35.0...v3.36.0

v3.35.0: 3.35.0

What's Changed

• Add java.io.IO import in ReplaceSystemOutWithIOPrint by @​timtebeek in #​1093
• Skip UseMapOf when put() argument is a null literal by @​timtebeek in #​1094
• Migrate JAXB XJC binding files declaring version 2.0/2.1/2.2 by @​MBoegers in #​1098
• Preserve explicit type arguments in MigrateCollections* recipes by @​timtebeek in #​1099
• Route Maven through Moderne Artifactory cache to avoid HTTP 429 by @​Jenson3210 in #​1096
• Load sun.internal.new[Class].jar directly to fix CI test failures by @​timtebeek in #​1101
• Skip explicit type arguments containing wildcards in UseVarForGenericMethodInvocations by @​timtebeek in #​1102
• Skip var when target type inference widens a generic argument by @​timtebeek in #​1103
• Skip IfElseIfConstructToSwitch when instanceof types are missing by @​timtebeek in #​1095
• Revert inline Maven mirror (now in gh-automation#95) by @​Jenson3210 in #​1104
• Aggregate FindJavaVersion to one row per repository by @​timtebeek in #​1105

Full Changelog: openrewrite/rewrite-migrate-java@v3.34.1...v3.35.0

v3.34.1

What's Changed

• OpenRewrite v8.81.6
• Refresh UpdateSdkManTest fixtures after SDKMAN CSV update by @​steve-aom-elliott in #​1073
• Add more static analysis recipes to java-best-practices by @​timtebeek in #​1075
• OpenRewrite recipe best practices by @​timtebeek in #​1074
• Add jspecify hyperlink by @​sullis in #​1076
• Skip var when reassignment relies on declared supertype by @​timtebeek in #​1078
• Keep parentheses when renaming typed lambda parameter to underscore by @​timtebeek in #​1082
• Document null-probing semantic differences in singleton migrations by @​timtebeek in #​1081
• Skip main migration when referenced as static API by @​timtebeek in #​1084
• Skip Immutable*.copyOf rewrite when argument is not a Collection by @​timtebeek in #​1089
• Keep block body when refined switch arm contains an if statement by @​timtebeek in #​1088
• Use Map.ofEntries when migrating more than 10 entries by @​timtebeek in #​1090

Full Changelog: openrewrite/rewrite-migrate-java@v3.34.0...v3.34.1

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.