Merge pull request #40 from apache/dependabot/maven/com.github.spotbugs-spotbugs-4.2.2

Bump spotbugs from 4.0.6 to 4.2.2