build(deps): bump org.apache.bcel:bcel from 6.12.0 to 6.13.0

[dependabot]

Bumps org.apache.bcel:bcel from 6.12.0 to 6.13.0.

Changelog

Sourced from org.apache.bcel:bcel's changelog.

Apache Commons BCEL Version 6.13.0 RELEASE NOTES

Introduction

The Apache Commons BCEL team is pleased to announce the release of Apache Commons BCEL 6.13.0.

The Commons Byte Code Engineering Library (BCEL) is designed to provide users with a convenient way to analyze, create, and manipulate compiled .class files.

This is a feature and maintenance release. Java 8 or later is required.

New Features

•       Add support for permitted subclasses [#493](https://github.com/apache/commons-bcel/issues/493). Thanks to nbauma109, Gary Gregory.
  

•       Add RecordComponentInfo.getAttribute(byte tag)[#494](https://github.com/apache/commons-bcel/issues/494). Thanks to nbauma109, Gary Gregory.
  

•       Add Const.MAJOR_27. Thanks to Gary Gregory.
  

•       Add Const.MINOR_27. Thanks to Gary Gregory.
  

•       Add and use ArrayType.isElementType(Type). Thanks to Gary Gregory.
  

•       Add Const.MAJOR_28. Thanks to Gary Gregory.
  

•       Add Const.MINOR_28. Thanks to Gary Gregory.
  

Fixed Bugs

•       Fix constant pool module access test on Java 26 and above [#492](https://github.com/apache/commons-bcel/issues/492). Thanks to nbauma109.
  

•       Deprecate org.apache.bcel.classfile.Utility.Utility(). Thanks to Gary Gregory.
  

•       Deprecate org.apache.bcel.verifier.exc.Utility.getStackTrace(Throwable). Thanks to Gary Gregory.
  

•       Fix all Javadoc warnings and enforce checks by default. Thanks to Gary Gregory.
  

•       Escape constant pool names in generated HTML ([#500](https://github.com/apache/commons-bcel/issues/500)). Thanks to Dexter.k.
  

•       Escape referenced names in BCELFactory Java output ([#501](https://github.com/apache/commons-bcel/issues/501)). Thanks to Dexter.k, Gary Gregory.
  

•       Make wide flag thread-local in Utility.codeToString ([#502](https://github.com/apache/commons-bcel/issues/502)). Thanks to Dexter.k, Gary Gregory.
  

•       Read multianewarray dimensions as unsigned byte ([#504](https://github.com/apache/commons-bcel/issues/504)). Thanks to Dexter.k, Gary Gregory.
  

•       Site docs: clarify security model ([#503](https://github.com/apache/commons-bcel/issues/503)). Thanks to Arnout Engelen.
  

•       Read ConstantDynamic indices as unsigned shorts ([#505](https://github.com/apache/commons-bcel/issues/505)). Thanks to Dexter.k, Gary Gregory.
  

•       Validate index upper bound in CPInstruction, IINC and RET setIndex ([#506](https://github.com/apache/commons-bcel/issues/506)). Thanks to Dexter.k, Gary Gregory.
  

•       Use correct attribute tag in NestHost and ModuleMainClass ([#507](https://github.com/apache/commons-bcel/issues/507)). Thanks to Dexter.k, Gary Gregory.
  

•       Propagate runtime-visible flag when parsing parameter annotations ([#509](https://github.com/apache/commons-bcel/issues/509)). Thanks to Dexter.k, Gary Gregory.
  

•       Use fixedLength for parsed LOOKUPSWITCH length ([#499](https://github.com/apache/commons-bcel/issues/499)). Thanks to Digiscrypt Technologies, Gary Gregory.
  

•       Fix ConstantPoolGen dedup key collisions for names with delimiters ([#510](https://github.com/apache/commons-bcel/issues/510)). Thanks to Dexter.k, Gary Gregory.
  

•       Read unsigned bytecode operands in CodeHTML disassembler ([#511](https://github.com/apache/commons-bcel/issues/511)). Thanks to Dexter.k, Gary Gregory.
  

•       Deep-copy bootstrap arguments array in BootstrapMethod.copy() ([#516](https://github.com/apache/commons-bcel/issues/516)). Thanks to Dexter.k, Gary Gregory.
  

•       Use exclusive live-range end in LocalVariableTable.getLocalVariable ([#517](https://github.com/apache/commons-bcel/issues/517)). Thanks to Dexter.k, Gary Gregory.
  

•       Build TABLESWITCH from sorted arrays in SWITCH ([#518](https://github.com/apache/commons-bcel/issues/518)). Thanks to Naveed Khan, Gary Gregory.
  

•       Use array element type not basic type for primitive array access ([#520](https://github.com/apache/commons-bcel/issues/520)). Thanks to Naveed Khan, Gary Gregory.
  

•       Set length in INVOKEDYNAMIC constructor ([#521](https://github.com/apache/commons-bcel/issues/521)). Thanks to Naveed Khan, Gary Gregory.
  

•       Reject CALOAD on non-char arrays in structural verification ([#522](https://github.com/apache/commons-bcel/issues/522)). Thanks to Naveed Khan, Gary Gregory.
  

•       Add negative verifier tests for remaining array load/store component type checks ([#524](https://github.com/apache/commons-bcel/issues/524)). Thanks to Naveed Khan, Gary Gregory.
  

•       Validate u1 count bound in INVOKEINTERFACE and MULTIANEWARRAY ([#523](https://github.com/apache/commons-bcel/issues/523)). Thanks to Naveed Khan, Gary Gregory.
  

•       Match wide local variable instruction length to dumped bytes ([#525](https://github.com/apache/commons-bcel/issues/525)). Thanks to Naveed Khan, Gary Gregory.
  

... (truncated)

Commits

• be4bc45 Prepare for the release candidate 6.13.0 RC1
• 13fe5d9 Prepare for the release candidate
• a6d4655 Javadoc
• 279ec23 Sort members
• bdaca41 Utility.JavaReader escape decoding: OOB table index, bad-hex crash,
• 972dfb6 Static WIDE ThreadLocal survives exceptions, corrupting the next class's
• 4a4b757 org.apache.bcel.verifier.VerifierFactory.DEFAULT_MAX_CACHE_SIZE doesn't
• 0d86e86 Verifier cache grows unboundedly with attacker-chosen class names
• b0c3e6a Verifier pass 3a delayed checks are quadratic in attribute and code size
• 7fe2940 BCELifier interpolates attacker class/package names into generated Java
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)