Update palantir-java-format to 2.100.0; note the OpenJML 21.0.28 follow-up

[bernardladenthin]

Summary

• palantir-java-format 2.100.0, matching the sibling repos.
• OpenJML stays at 21.0.27. The 21.0.28 release ships only source archives and no binaries, so setup-openjml cannot install it. TODO.md records what to re-check when it becomes installable: the z3 5.1.0 change and whether the two deleted bundled specs are still broken.

Test plan

• CI is green on this branch
• Docs updated (TODO.md)

Related issues / PRs

Part of the 2026-10-01 cross-repo dependency sweep (java-llama.cpp, BitcoinAddressFinder, srcmorph, BroomCabinet, workspace).

Checklist

• No security-sensitive changes

🤖 Generated with Claude Code

https://claude.ai/code/session_01AytmJF9faEiQEVt6eetQS2

---

Generated by Claude Code

[claude]

Review: ✅ Approved

Summary

This PR is a straightforward dependency maintenance update with clear documentation:

Changes Analysis

1. pom.xml: palantir-java-format 2.99.0 → 2.100.0

   • Minor version bump for a code formatter (non-critical dependency)
   • No security implications
   • Routine maintenance as part of cross-repo dependency sweep

2. TODO.md: Added clear follow-up documentation for OpenJML 21.0.28

   • Explains why 21.0.28 wasn't bumped yet (binaries not published)
   • Documents what needs verification when binaries appear (solver change to z3 5.1.0, deleted bundled specs)
   • Provides clear next-steps with concrete signals (rm without -f fails)
   • Well-structured and actionable

Observations

✅ No security-sensitive changes
✅ No code formatting drift (PR notes "No formatting change")
✅ Changes are minimal and focused
✅ Documentation is clear and maintainable
✅ Aligns with cross-repo coordination noted in PR description

The TODO.md addition is particularly well done—it documents technical debt with sufficient context for future maintainers to understand the blocker and know what to look for when unblocked.

Ready to merge once CI is green.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud