Merge branch 'master' into snyk-fix-d2d6a3da6e848f711116327387e8ed01

.github/CODEOWNERS

@@ -0,0 +1 @@
+* @jenkinsci/calendar-view-plugin-developers

.github/dependabot.yml

@@ -0,0 +1,16 @@
+# https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file
+---
+version: 2
+updates:
+  - package-ecosystem: "maven"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+  - package-ecosystem: "npm"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"

.github/release-drafter.yml

@@ -0,0 +1,6 @@
+# https://github.com/jenkinsci/.github/blob/master/.github/release-drafter.adoc
+---
+_extends: .github
+name-template: v$NEXT_PATCH_VERSION
+tag-template: v$NEXT_PATCH_VERSION
+version-template: v$MAJOR.$MINOR.$PATCH

.github/workflows/jenkins-security-scan.yml

@@ -0,0 +1,24 @@
+# Jenkins Security Scan
+# For more information, see: https://www.jenkins.io/doc/developer/security/scan/
+---
+name: Jenkins Security Scan
+
+on:
+  push:
+    branches:
+      - master
+  pull_request:
+    types: [opened, synchronize, reopened]
+  workflow_dispatch:
+
+permissions:
+  security-events: write
+  contents: read
+  actions: read
+
+jobs:
+  security-scan:
+    uses: jenkins-infra/jenkins-security-scan/.github/workflows/jenkins-security-scan.yaml@v2
+    with:
+      java-cache: 'maven' # Optionally enable use of a build dependency cache. Specify 'maven' or 'gradle' as appropriate.
+      # java-version: 21 # Optionally specify what version of Java to set up for the build, or remove to use a recent default.

.github/workflows/release-drafter.yml

@@ -0,0 +1,16 @@
+# Automates creation of Release Drafts using Release Drafter
+# More Info: https://github.com/jenkinsci/.github/blob/master/.github/release-drafter.adoc
+---
+on:
+  push:
+    branches:
+      - master
+
+jobs:
+  update_release_draft:
+    runs-on: ubuntu-latest
+    steps:
+      # Drafts your next Release notes as Pull Requests are merged into "master"
+      - uses: release-drafter/release-drafter@v6
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.mvn/extensions.xml

@@ -0,0 +1,7 @@
+<extensions xmlns="http://maven.apache.org/EXTENSIONS/1.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/EXTENSIONS/1.0.0 http://maven.apache.org/xsd/core-extensions-1.0.0.xsd">
+  <extension>
+    <groupId>io.jenkins.tools.incrementals</groupId>
+    <artifactId>git-changelist-maven-extension</artifactId>
+    <version>1.8</version>
+  </extension>
+</extensions>

.mvn/maven.config

@@ -0,0 +1,2 @@
+-Pconsume-incrementals
+-Pmight-produce-incrementals

.pmd.config.xml

@@ -11,6 +11,8 @@
 
     <rule ref="category/java/bestpractices.xml">
         <exclude name="AccessorMethodGeneration" />
+        <exclude name="AvoidReassigningLoopVariables" />
+        <exclude name="WhileLoopWithLiteralBoolean" />
     </rule>
     <rule ref="category/java/codestyle.xml">
         <!-- Operator precedence is hard and parentheses enhance readability -->
@@ -25,31 +27,19 @@
         <exclude name="AtLeastOneConstructor" />
         <!-- This complains about variable names like 'id' -->
         <exclude name="ShortVariable" />
-        <!-- This rule makes no sense -->
-        <exclude name="AvoidFinalLocalVariable" />
     </rule>
     <rule ref="category/java/design.xml">
+        <exclude name="CognitiveComplexity" />
         <!-- "Tell, don't ask" is a good design principle, 
              but this rule is way too strict about it -->
         <exclude name="LawOfDemeter" />
+        <exclude name="LoosePackageCoupling" />
     </rule>
-    <rule ref="category/java/design.xml/NcssCount">
-        <!-- Default values too low in PMD 6.4.0, fixed in PMD 6.5.0 -->
-        <properties>
-            <property name="methodReportLevel" value="60"/>
-            <property name="classReportLevel" value="1000"/>
-        </properties>
-    </rule>
-    <rule ref="category/java/errorprone.xml">
-        <!-- Produces lots of false positives and the Java
-             compiler catches most of these anyway -->
-        <exclude name="DataflowAnomalyAnalysis"/>
-        <!-- Produces lots of false positives because it
-             doesn't check if Serializable is implemented -->
-        <exclude name="BeanMembersShouldSerialize" />
-    </rule>
+    <rule ref="category/java/errorprone.xml"/>
     <rule ref="category/java/multithreading.xml"/>
-    <rule ref="category/java/performance.xml"/>
+    <rule ref="category/java/performance.xml">
+        <exclude name="AvoidCalendarDateCreation" />
+    </rule>
     <rule ref="category/java/security.xml"/>
 
 </ruleset>

Jenkinsfile

@@ -1 +1,4 @@
-buildPlugin(platforms: ['linux'])
+buildPlugin(useContainerAgent: true, configurations: [
+  [platform: 'linux', jdk: 21],
+  [platform: 'linux', jdk: 17],
+])

README.md

@@ -80,21 +80,21 @@ Clicking on a future build will lead to the job's detail page.
 Clone the repository then execute the following in the project's root directory:
 
 ```
-$ ./mvnw install
+$ mvn install
 ```
 
 This will install Java dependencies as well as a local node installation and npm dependencies.
 
 You can now run the plugin in a Jenkins instance by executing the following:
 
 ```
-$ ./mvnw hpi:run
+$ mvn hpi:run
 ```
 
 To watch JavaScript and CSS files using webpack:
 
 ```
-$ ./npmw run dev
+$ npm run dev
 ```
 
 ## Use Calendar View with Job DSL