fix(deps): bump com.guardsquare:proguard-core from 9.3.2 to 9.4.0

[dependabot]

Bumps com.guardsquare:proguard-core from 9.3.2 to 9.4.0.

Release notes

Sourced from com.guardsquare:proguard-core's releases.

9.4.0

Version 9.4.0

Java support

• Support Java 27.

Kotlin support

• Add support for inner classes and inner enums used as annotations argument in Kotlin metadata.
• Add support for processing Kotlin 2.4 metadata.

API improvements

• Add KotlinAliasReferenceFixer to update Kotlin type alias references (aliasName) after their declaration container is renamed. Run it after ClassReferenceFixer.
• MemberRemover will now throw an exception if you attempt to collect a member from a class for removal while you're still collecting members from another class. You must commit member removal for the current class before collecting members from another class.
• InitializerEditor.addStaticInitializerInstructions returns the created or modified static initializer.
• ClassUtil supports optionally quoting identifiers with spaces when converting names, types or descriptions from internal to external.
• Avoid changing invokespecial to invokeinterface in MethodInvocationFixer when a default super interface method is present.
• Add new InterfaceMethodReferenceFixer that patches MethodRefConstants to InterfaceMethodRefConstants in visited classes when the reference is an interface method.
• Add reset method to MemberRemover.
• Add processing flags helper methods to Processable.
• Add isLeader and isFallThrough methods to the BranchTargetFinder. These methods can be used to determine if an offset is the leader of a basic block or the fallthrough of a conditional branch respectively.
• Deprecate methods of CallGraphWalker using a default depth and width.

Improved

• Improve performance of generalization steps in partial evaluation.
• Improve CallGraph to store incoming and outgoing calls in a deterministic order.

Bugfixes

• Fix reference initialization for type aliases defined in file facades with a custom JvmPackageName.
• Fix PKCS7OutputStream incorrectly handling escaped quotes certificates.
• Fix ReferenceTracingInvocationUnit treating the current reference inside constructors as initialized prior to the invocation of the super or object initializer.
• Fix NullPointerException in ClassReferenceFixer for Kotlin coroutine suspend lambdas by resolving their referencedMethod to invokeSuspend.
• Fix reference initialization for Kotlin enum entries annotations.

Commits

• 8eac61c Add release note
• d0f927c Initialize annotations on Kotlin enum entries
• ce6af13 Resolve suspend lambda referencedMethod to invokeSuspend in ClassReferenceIni...
• 7d4a8ed Support java 27
• b830278 Add metrics for CallGraphWalker max seen depth and width
• c19009b Remove superfluous nexus.publish
• 5e2f17a Deprecate CallGraphWalker default depth and width
• fdad867 Add leader tracking to BranchTargetFinder
• 7ca140d Pin version of nexus-publish
• b9d0d21 Use a sorted set for incoming and outgoing edges when using a concurrent Call...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)