BitNami Jenkins Stack full changelog

Bug Fixes:
plexus-testing dependencies should be use in test scope (#11761) @slawekjaranowski
Dependency updates:
Bump actions/upload-artifact from 6.0.0 to 7.0.0 (#11747) @dependabot[bot]
Bump actions/download-artifact from 7.0.0 to 8.0.0 (#11748) @dependabot[bot]

Maven plugin prerequisites check now properly supports ranges when Java 8 (or 1.8) is specified.
Plexus Security Dispatcher was still enlisted as Plexus component in Maven components.xml, while it was migrated to JSR330. This caused warnings on Java 26+ as Plexus did field injection into final fields of it.
Plugin versions in default bindings are updated.

New features and improvements:
[3.9.x] Apply resolver changes and improvements (#11536) @cstamas
Update formatting of prerequisites-requirements error to improve readability (#11523) @slawekjaranowski
Allow a Maven plugin to require a Java version (#11479) @slawekjaranowski
Use MavenRepositorySystem in ProjectBuildingHelper instead of deprecated RepositorySystem (#11358) @slawekjaranowski
Make maven.config use UTF8 (#11264) @cstamas
Simplify prefix resolution (#11197) @slawekjaranowski
Bug Fixes:
Add default implementation for new method in MavenPluginManager (#11522) @slawekjaranowski
Repository layout should be used in MavenRepositorySystem (#11495) @slawekjaranowski
Fix plugin prefix resolution when metadata is not available from repository (#11290) @slawekjaranowski
Improve source root modification warning message (#11105) @gnodet
Bug: bad cache isolation between two sessions (#11082) @cstamas
Set Guice class loading to CHILD - avoid using terminally deprecated methods (#11003) @slawekjaranowski
Avoid parsing MAVEN_OPTS (3.9.x) (#10969) @BobVul
Documentation updates:
clarify repository vs deployment repository (#11492) @hboutemy
add maintained branches (#11448) @hboutemy
Maintenance:
Add IntelliJ icon (#11408) @Bukama
Build by JDK 25 (#11187) @slawekjaranowski
Deprecate org.apache.maven.repository.RepositorySystem in 3.9.x (#11096) @slawekjaranowski
Build:
Bump actions/download-artifact from 5.0.0 to 6.0.0 (#11335) @dependabot[bot]
Bump actions/upload-artifact from 4.6.2 to 5.0.0 (#11336) @dependabot[bot]
Dependency updates:
Bump actions/cache from 4.3.0 to 5.0.0 (#11542) @dependabot[bot]
Bump resolverVersion from 1.9.24 to 1.9.25 (#11533) @dependabot[bot]
Bump actions/checkout from 6.0.0 to 6.0.1 (#11512) @dependabot[bot]
Bump actions/setup-java from 5.0.0 to 5.1.0 (#11519) @dependabot[bot]
Bump actions/checkout from 5.0.1 to 6.0.0 (#11476) @dependabot[bot]
Bump actions/checkout from 5.0.0 to 5.0.1 (#11458) @dependabot[bot]
Bump commons-cli:commons-cli from 1.1

New features and improvements:
Augment version range resolution used repositories (#2574) @cstamas
Bug Fixes:
Deduplicate filtered dependency graph (#2489) @alzimmermsft
Move ensure in boundaries of project lock (#2470) @cstamas
Maintenance:
[MNGSITE-393] - remove references to Maven 2 (#2438) @elharo
Update CONTRIBUTING after GitHub issues enabled (#2449) @slawekjaranowski
Enable Github Issues (3.9.x) (#2414) @Bukama
[MNG-8763] - Remove name from site bannerLeft (#2419) @slawekjaranowski
Build:
Pin GitHub action versions by hash (#10898) @slawekjaranowski
Build the project by JDK 21 as default (#10896) @slawekjaranowski
Use Maven 3.9.10 for build on GitHub (#2452) @slawekjaranowski
Dependency updates:
Bump resolverVersion from 1.9.23 to 1.9.24 (#2540) @dependabot[bot]
Bump xmlunitVersion from 2.10.2 to 2.10.3 (#2500) @dependabot[bot]
Bump org.apache.maven:maven-parent from 44 to 45 (#2491) @dependabot[bot]
Bump org.codehaus.mojo:build-helper-maven-plugin from 3.6.0 to 3.6.1 (#2432) @dependabot[bot]

New features and improvements:
[MNG-8765] - Maven Upgrade Tool (#2407) @gnodet
Maven4 “legacy” mode and more (#2380) @cstamas
[MNG-8759] - Restore toString method in DefaultJavaToolchain (#2411) @slawekjaranowski
[MNG-8572] - Support DI beans in build extensions (#2274) @gnodet
[MNG-8717] - Remove maven-plugin-plugin:addPluginArtifactMetadata from default binding (#2294) @slawekjaranowski
Bug Fixes:
Deduplicate filtered dependency graph (#2493) @alzimmermsft
User properties are not interpolated for paths (#2480) @cstamas
Move project mutation inside project lock (#2474) @cstamas
[MNG-8736 - Fix concurrency issue in model building with profile activation (#2378) @gnodet
[MNG-8767] - Add suppressed exceptions to BatchRequestException in AbstractRequestCache (#2431) @gnodet
[MNG-8746] - Preserve property insertion order in WrapperProperties (#2404) @gnodet
[MNG-8764] - Sort injected lists by @Priority annotation (#2425) @gnodet
[MNG-8761] - Add Maven 3 MavenToolchainsXpp3Reader/Writer (#2412) @slawekjaranowski
[MNG-8729] - Use correct outputStream destination; request instead of path in DefaultPluginXmlFactory#write (#2312) @Pankraz76
[MNG-8720] - Fix for symlinked project directory (#2289) @cstamas
[MNG-8653] - Fix ‘all’ phase and add ‘each’ phase (#2191) @gnodet
[MNG-5668] - Execute after:* phases when build fails (#2195) @gnodet
[MNG-8629] - bugfix: If POM has parent and repository stanza, it is used un-interpolated (#2192) @cstamas
[MNG-8645] - Fix dependency management section of consumer POM (#2183) @gnodet
[MNG-8624] - Fix dependency not being set correctly for unsupported types (#2153) @gnodet
Fix ITs referencing rc-3-SNAPSHOT (#2164) @gnodet
[MNG-8620] - Fix links in SVG (#2152) @kwin
Documentation updates:
[MNG-8731] - Use https for xsi:schemaLocation in generated descriptors (#2341) @slawekjaranowski
Maintenance:
Fix integration tests to use correct Maven version instead of hardcoded 2.1-SNAPSHOT (#2476) @gnodet
Use local repository in tests (#24

Potentially Breaking Core Changes (if migrating from 3.8.x):
The Maven Resolver transport has changed from Wagon to “native HTTP”, see Resolver Transport guide.
Maven 2.x was auto-injecting an ancient version of plexus-utils dependency into the plugin classpath, and Maven 3.x continued doing this to preserve backward compatibility. Starting with Maven 3.9, it does not happen anymore. This change may lead to plugin breakage. The fix for affected plugin maintainers is to explicitly declare a dependency on plexus-utils. The workaround for affected plugin users is to add this dependency to plugin dependencies until issue is fixed by the affected plugin maintainer. See MNG-6965.
Mojos are prevented to bootstrap new instance of RepositorySystem (for example by using deprecated ServiceLocator), they should reuse RepositorySystem instance provided by Maven instead. See MNG-7471.
Each line in .mvn/maven.config is now interpreted as a single argument. That is, if the file contains multiple arguments, these must now be placed on separate lines, see MNG-7684.
System and user properties handling cleanup, see MNG-7556. As a consequence, this may introduce breakage in environments where the user properties were used to set system properties or other way around, for example see MNG-7887.
Plugins and extensions used by your build are checked against Maven supported APIs and conventions: this “plugin validation” may report WARNINGs at the end of your build. See plugin validation documentation to better understand what to do when your build suffers from such warnings.

* Updated Gradle to 6.0.1
* Updated OpenJDK to 1.8.0_232
* Updated Jenkins to 2.190.3
* Updated lego to 3.2.0

* Updated Gradle to 5.6.3
* Updated Jenkins to 2.190.2
* Updated lego to 3.1.0
* Updated SQLite to 3.30.1.
* Updated Tomcat to 8.5.47

* Updated Jenkins to 2.190.1
* Updated OpenSSL to 1.1.1d
* Updated Tomcat to 8.5.46

Security: Important security fixes.