BitNami Jenkins Stack full changelog

New features and improvements:
Augment version range resolution used repositories (#2574) @cstamas
Bug Fixes:
Deduplicate filtered dependency graph (#2489) @alzimmermsft
Move ensure in boundaries of project lock (#2470) @cstamas
Maintenance:
[MNGSITE-393] - remove references to Maven 2 (#2438) @elharo
Update CONTRIBUTING after GitHub issues enabled (#2449) @slawekjaranowski
Enable Github Issues (3.9.x) (#2414) @Bukama
[MNG-8763] - Remove name from site bannerLeft (#2419) @slawekjaranowski
Build:
Pin GitHub action versions by hash (#10898) @slawekjaranowski
Build the project by JDK 21 as default (#10896) @slawekjaranowski
Use Maven 3.9.10 for build on GitHub (#2452) @slawekjaranowski
Dependency updates:
Bump resolverVersion from 1.9.23 to 1.9.24 (#2540) @dependabot[bot]
Bump xmlunitVersion from 2.10.2 to 2.10.3 (#2500) @dependabot[bot]
Bump org.apache.maven:maven-parent from 44 to 45 (#2491) @dependabot[bot]
Bump org.codehaus.mojo:build-helper-maven-plugin from 3.6.0 to 3.6.1 (#2432) @dependabot[bot]

New features and improvements:
[MNG-8765] - Maven Upgrade Tool (#2407) @gnodet
Maven4 “legacy” mode and more (#2380) @cstamas
[MNG-8759] - Restore toString method in DefaultJavaToolchain (#2411) @slawekjaranowski
[MNG-8572] - Support DI beans in build extensions (#2274) @gnodet
[MNG-8717] - Remove maven-plugin-plugin:addPluginArtifactMetadata from default binding (#2294) @slawekjaranowski
Bug Fixes:
Deduplicate filtered dependency graph (#2493) @alzimmermsft
User properties are not interpolated for paths (#2480) @cstamas
Move project mutation inside project lock (#2474) @cstamas
[MNG-8736 - Fix concurrency issue in model building with profile activation (#2378) @gnodet
[MNG-8767] - Add suppressed exceptions to BatchRequestException in AbstractRequestCache (#2431) @gnodet
[MNG-8746] - Preserve property insertion order in WrapperProperties (#2404) @gnodet
[MNG-8764] - Sort injected lists by @Priority annotation (#2425) @gnodet
[MNG-8761] - Add Maven 3 MavenToolchainsXpp3Reader/Writer (#2412) @slawekjaranowski
[MNG-8729] - Use correct outputStream destination; request instead of path in DefaultPluginXmlFactory#write (#2312) @Pankraz76
[MNG-8720] - Fix for symlinked project directory (#2289) @cstamas
[MNG-8653] - Fix ‘all’ phase and add ‘each’ phase (#2191) @gnodet
[MNG-5668] - Execute after:* phases when build fails (#2195) @gnodet
[MNG-8629] - bugfix: If POM has parent and repository stanza, it is used un-interpolated (#2192) @cstamas
[MNG-8645] - Fix dependency management section of consumer POM (#2183) @gnodet
[MNG-8624] - Fix dependency not being set correctly for unsupported types (#2153) @gnodet
Fix ITs referencing rc-3-SNAPSHOT (#2164) @gnodet
[MNG-8620] - Fix links in SVG (#2152) @kwin
Documentation updates:
[MNG-8731] - Use https for xsi:schemaLocation in generated descriptors (#2341) @slawekjaranowski
Maintenance:
Fix integration tests to use correct Maven version instead of hardcoded 2.1-SNAPSHOT (#2476) @gnodet
Use local repository in tests (#24

Potentially Breaking Core Changes (if migrating from 3.8.x):
The Maven Resolver transport has changed from Wagon to “native HTTP”, see Resolver Transport guide.
Maven 2.x was auto-injecting an ancient version of plexus-utils dependency into the plugin classpath, and Maven 3.x continued doing this to preserve backward compatibility. Starting with Maven 3.9, it does not happen anymore. This change may lead to plugin breakage. The fix for affected plugin maintainers is to explicitly declare a dependency on plexus-utils. The workaround for affected plugin users is to add this dependency to plugin dependencies until issue is fixed by the affected plugin maintainer. See MNG-6965.
Mojos are prevented to bootstrap new instance of RepositorySystem (for example by using deprecated ServiceLocator), they should reuse RepositorySystem instance provided by Maven instead. See MNG-7471.
Each line in .mvn/maven.config is now interpreted as a single argument. That is, if the file contains multiple arguments, these must now be placed on separate lines, see MNG-7684.
System and user properties handling cleanup, see MNG-7556. As a consequence, this may introduce breakage in environments where the user properties were used to set system properties or other way around, for example see MNG-7887.
Plugins and extensions used by your build are checked against Maven supported APIs and conventions: this “plugin validation” may report WARNINGs at the end of your build. See plugin validation documentation to better understand what to do when your build suffers from such warnings.

* Updated Gradle to 6.0.1
* Updated OpenJDK to 1.8.0_232
* Updated Jenkins to 2.190.3
* Updated lego to 3.2.0

* Updated Gradle to 5.6.3
* Updated Jenkins to 2.190.2
* Updated lego to 3.1.0
* Updated SQLite to 3.30.1.
* Updated Tomcat to 8.5.47

* Updated Jenkins to 2.190.1
* Updated OpenSSL to 1.1.1d
* Updated Tomcat to 8.5.46

Security: Important security fixes.

* Removed Docker

Jenkins now requires Java 8 to run. (issue 27624, issue 42709, pull 2802, announcement blog post)
Non-Remoting-based CLI. (issue 41745, pull 2795)
Disable SSH server by default. (issue 33595)
Use case-insensitive search by default for new and anonymous users. (issue 42645)

Display an informative message, rather than a Groovy exception, when View#getItems fails. (issue 41825)
Don't try to set Agent Port when it is enforced, breaking form submission. (issue 41511)
Don't add all group names as HTTP headers on "access denied" pages, possibly breaking reverse proxies due to very large headers. (issue 39402)
Fix handling of the POST flag in ManagementLinks within the Manage Jenkins page. (issue 38175)