chore(deps): update dependency dev.cel:cel to v0.12.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
dev.cel:cel	0.11.1 → 0.12.0

---

Release Notes

google/cel-java (dev.cel:cel)

v0.12.0

Compare Source

Features

• Introduced the Program Planner (Experimental) to eventually back the CEL runtime. The planner allows evaluation of parsed-only expressions (#​276), and is designed to improve evaluation speed when planned programs are cached.
• InliningOptimizer has been added to allow inlining variables within an AST. It replaces variable references with their corresponding expressions, automatically rewrites presence tests (e.g., has() macros), and supports recursive inlining based on variable dependency ordering.
• Added support for Protobuf json_name field options. When enableJsonFieldNames option is enabled, the compiler will exclusively accept the json_name and no longer recognize the original protobuf field name. To maintain backwards compatibility, the runtime continues to support both the original name and the json_name when resolving fields.
• Expanded the CEL Environment YAML import/export capabilities to include shared feature flags and common limits (#​970) (#​971).

Breaking Changes

• PR #​820 Enables evaluateCanonicalTypesToNativeValues by default. See previous release for details.
• PR #​943 removes StringConversion, StringConcatenation, and ListConcatenation from CelOptions in favor of standard library subsetting via CelStandardDeclarations and CelStandardFunctions.
• PR #​875 removes null assignability to function arguments for Protobuf messages.

Bug fixes

• Fixed a regression reported in #​890 for Protobuf timestamp/duration field values to reside outside RFC3339 range in #​893.
• Prevent non-foldable functions from being folded in comprehensions in #​937
• Fixed context propagation in AsyncProgramImpl to preserve resolved attributes in #​913.
• Fixed type-checker to search local scopes for identifiers before container resolution in #​910.
• Fixed type-checker and runtime to properly resolve global escaped identifiers in #​917.
• Fixed argument matching to validate all args for non-strict functions in #​855.
• Fixed source locations in error messages for maps, comprehensions, and missing attributes in #​921 and #​962.
• Fixed null assignment to fields in #​979.

What's Changed

Environment & Policy Compiler

• Add support for container aliases to CelEnvironment in #​900
• Add a shorthand for declaring policy variables in #​944

Optimizations & Internals

• Accumulate unknowns into a set to avoid intermediate duplication in #​864
• Support constant folding in chained SELECT expressions in #​886
• Optimize list.distinct() in #​902
• Use mutable expressions for AST rewrites during type-check in #​936
• Invert the nesting level sequencing when mangling comprehension identifiers in #​942
• Remove unnecessary synchronization on dispatcher by making it immutable in #​851
• Persist lazily bound variables in the correct scoped resolver in #​881

Miscellaneous

• Add conformance tests for planner in #​973
• Migrate to new GeneratorNames library for java codegen naming in #​882
• Properly establish cross dependencies across maven artifacts in #​954
• Add isolated artifact tests for dev.cel:compiler and dev.cel:runtime in #​959
• OSS Fix for Bazel 9 in #​924
• Upgrade GitHub Actions for Node 24 compatibility by @​salmanmkc in #​896

New Contributors

• @​salmanmkc made their first contribution in #​896

Full Changelog: cel-expr/cel-java@v0.11.1...v0.12.0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 93.22%. Comparing base (098a594) to head (f01d537).

Additional details and impacted files

@@             Coverage Diff              @@
##               main    #1872      +/-   ##
============================================
+ Coverage     92.70%   93.22%   +0.51%     
- Complexity      730      731       +1     
============================================
  Files            60       60              
  Lines          1741     1741              
  Branches        203      203              
============================================
+ Hits           1614     1623       +9     
+ Misses           77       69       -8     
+ Partials         50       49       -1     

Flag	Coverage Δ
unittests	93.22% <ø> (+0.51%)	⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: 7f71ffe6-4269-42c6-81f6-a02bd915d94a

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

_{Comment @coderabbitai help to get the list of available commands.}

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud