[Security] Bump checkstyle from 8.16 to 8.19

[dependabot-preview]

Bumps checkstyle from 8.16 to 8.19. This update includes security fixes.

Vulnerabilities fixed

Sourced from The GitHub Security Advisory Database.

Moderate severity vulnerability that affects com.puppycrawl.tools:checkstyle
Checkstyle prior to 8.18 loads external DTDs by default, which can potentially lead to denial of service attacks or the leaking of confidential information.

Affected versions: < 8.18

Release notes

Sourced from checkstyle's releases.

checkstyle-8.19

https://checkstyle.org/releasenotes.html#Release_8.19

checkstyle-8.18

https://checkstyle.org/releasenotes.html#Release_8.18

checkstyle-8.17

https://checkstyle.org/releasenotes.html#Release_8.17

Commits

• f60b2f3 [maven-release-plugin] prepare release checkstyle-8.19
• 09f9e32 doc: releasenotes 8.19
• b0f5a3d Issue #6488: Fix documentation of InnerAssignment check
• 7def79a minor: remove unnecessary antlr classes from main code
• a1cd7a5 Issue #6356: Xpath: change implementation of the @​text attribute
• 77d1c44 minor: remove usage of antlr specific method in RequireThisCheck
• 7d2bf16 minor: make RequireThisCheck.{Catch,For}Frame private
• 88befee config: bump sevntu to 1.33.0
• 61889b2 config: ignore whitespace for pitest ignorelist
• a61f6b4 doc: added documentation for global tabWidth
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot ignore this [patch|minor|major] version will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Automerge options (never/patch/minor, and dev/runtime dependencies)
• Pull request limits (per update run and/or open at any time)
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)

Finally, you can contact us by mentioning @dependabot.

[codecov]

Codecov Report

Merging #252 into master will not change coverage.
The diff coverage is n/a.

@@            Coverage Diff            @@
##             master     #252   +/-   ##
=========================================
  Coverage     40.44%   40.44%           
  Complexity      189      189           
=========================================
  Files           179      179           
  Lines          1392     1392           
  Branches         40       40           
=========================================
  Hits            563      563           
  Misses          822      822           
  Partials          7        7

---

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 94b1b22...ac6933f. Read the comment docs.

[dependabot-preview]

Superseded by #280.