Bump netty-handler from 4.1.68.Final to 4.1.94.Final

Bumps [netty-handler](https://github.com/netty/netty) from 4.1.68.Final to 4.1.94.Final.
- [Commits](https://github.com/netty/netty/compare/netty-4.1.68.Final...netty-4.1.94.Final)

---
updated-dependencies:
- dependency-name: io.netty:netty-handler
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

2.2.10 release note

Signed-off-by: Olivier Lamy <olamy@apache.org>

indexer released version

Signed-off-by: Olivier Lamy <olamy@apache.org>

merge back release notes from branch

Signed-off-by: Olivier Lamy <olamy@apache.org>

fix upperbound

Signed-off-by: Olivier Lamy <olamy@apache.org>

Bump actions/setup-java from 3.3.0 to 3.4.1 (#121)

Bumps [actions/setup-java](https://github.com/actions/setup-java) from 3.3.0 to 3.4.1.
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](https://github.com/actions/setup-java/compare/v3.3.0...v3.4.1)

---
updated-dependencies:
- dependency-name: actions/setup-java
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

MRM-2051: Remove dom4j (#112)

* remove unused dom4j dependency

* remove dom4j

* Update Maven2RepositoryMetadataResolverTest.java

* Update Maven2RepositoryMetadataResolverTest.java

fix MRM-2051

no more dependabot for branch 2.x

bump spring 5.3.22

Signed-off-by: Olivier Lamy <olamy@apache.org>

[MRM-2031] Switch to jdk 11

Signed-off-by: Olivier Lamy <olamy@apache.org>

fix upperbound

Signed-off-by: Olivier Lamy <olamy@apache.org>

fix upper bound

Signed-off-by: Olivier Lamy <olamy@apache.org>

rat ignore .gitattributes

Signed-off-by: Olivier Lamy <olamy@apache.org>

spring 5.3.20

Signed-off-by: Olivier Lamy <olamy@apache.org>

not needed anymore

Signed-off-by: Olivier Lamy <olamy@apache.org>

debug this build failure

Signed-off-by: Olivier Lamy <olamy@apache.org>

fix upperbound and jdk 11 build

Signed-off-by: Olivier Lamy <olamy@apache.org>

cleanup old comments

Signed-off-by: Olivier Lamy <olamy@apache.org>

because ehcache use some range version...

Signed-off-by: Olivier Lamy <olamy@apache.org>

use maven_3.8.5

Signed-off-by: Olivier Lamy <olamy@apache.org>

xml bind version upgrade

Signed-off-by: Olivier Lamy <olamy@apache.org>

add upperbounds enforcer rule

Signed-off-by: Olivier Lamy <olamy@apache.org>

move version properties in child or it is complicated to sync and prevent dependabot working

Signed-off-by: Olivier Lamy <olamy@apache.org>

MRM-2051: upgrade dom4j due to cves (#106)

* upgrade dom4j due to cves

fix bad merge

Signed-off-by: Olivier Lamy <olamy@apache.org>

update release note for 2.2.8

Signed-off-by: Olivier Lamy <olamy@apache.org>

[MRM-2047] upgrade netty due to CVEs (#102)

Bump actions/setup-java from 3.1.1 to 3.3.0 (#87)

Bumps [actions/setup-java](https://github.com/actions/setup-java) from 3.1.1 to 3.3.0.
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](https://github.com/actions/setup-java/compare/v3.1.1...v3.3.0)

---
updated-dependencies:
- dependency-name: actions/setup-java
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

fix mailing list link on master branch (#89)

* fix mailing list on master branch

* Update archiva-modules/archiva-web/archiva-webapp/src/main/resources/org/apache/archiva/redback-security.properties

Co-authored-by: Olivier Lamy <olamy@apache.org>
* Update archiva-modules/archiva-web/archiva-web-common/src/main/resources/org/apache/archiva/security.properties

Co-authored-by: Olivier Lamy <olamy@apache.org>
Co-authored-by: Olivier Lamy <olamy@apache.org>

remove publish test report

Update DOAP for 2.2.7 (#88)

no need to backup so much artifacts

Signed-off-by: Olivier Lamy <olamy@apache.org>

add token for publish test report

Signed-off-by: Olivier Lamy <olamy@apache.org>

Fix test order dependency in class `BasicManagedRepositoryValidatorTest` (#82)

* fix order dependency
* change import order

Fix github actions (#83)

* more memory for rest-services tests

Signed-off-by: Olivier Lamy <olamy@apache.org>

use jetty bom to manage Jetty dependencies (#81)

* use jetty bom to manage Jetty dependencies
* simplify code and do write in a log file in /tmp when running tests

Signed-off-by: Olivier Lamy <olamy@apache.org>

use testcontainers to run cassandra tests (#79)

* use testcontainers for cassandra test

Signed-off-by: Olivier Lamy <olamy@apache.org>

fix naming

Signed-off-by: Olivier Lamy <olamy@apache.org>

Changing cassandra version

indent

Signed-off-by: Olivier Lamy <olamy@apache.org>

use only maven central for dependabot

Signed-off-by: Olivier Lamy <olamy@apache.org>

use only maven central for maven dependabot update

Signed-off-by: Olivier Lamy <olamy@apache.org>

Bump actions/setup-java from 3.1.0 to 3.1.1 (#75)

Bumps [actions/setup-java](https://github.com/actions/setup-java) from 3.1.0 to 3.1.1.
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](https://github.com/actions/setup-java/compare/v3.1.0...v3.1.1)

---
updated-dependencies:
- dependency-name: actions/setup-java
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bump actions/checkout from 2 to 3 (#67)

Bumps [actions/checkout](https://github.com/actions/checkout) from 2 to 3.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v2...v3)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bump actions/setup-java from 2.3.1 to 3.1.0 (#66)

Bumps [actions/setup-java](https://github.com/actions/setup-java) from 2.3.1 to 3.1.0.
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](https://github.com/actions/setup-java/compare/v2.3.1...v3.1.0)

---
updated-dependencies:
- dependency-name: actions/setup-java
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

not forked compilation

Signed-off-by: Olivier Lamy <olamy@apache.org>

fix running ITs

Signed-off-by: Olivier Lamy <olamy@apache.org>

fix syntax (#74)

Signed-off-by: Olivier Lamy <olamy@apache.org>

add gh action, dependabot and release-drafter and get rid of travis (#65)

* add gh action, dependabot and release-drafter and get rid of travis
* move owasp check in a separate profile

Signed-off-by: Olivier Lamy <olamy@apache.org>

add a Delete action to delete logs older than 30D (#64)

* delete old logs files
* do not fork compilation

Signed-off-by: Olivier Lamy <olamy@apache.org>

use configuration from archiva parent

test

test

dependabot for branch archiva-2.x as well

Create dependabot.yml

Adding rest events

Improving event API

Updating mapper for managed repo

Refactoring of repository feature interface

Changing mapper interface

Splitting configuration module. Adding mapper interface.

Enabling github wiki

Adding github metadata to .asf.yaml

[MRM-2028] Fixing NPE on artifact removal

Fixing RAT excludes

Adding .asf.yaml file

Updating assertj version

Removing joda-time dependency

Switching to new ehcache version

Changes for new spring version

Moving test classes for consistent package usage

Unifying mocks to mockito

Switching to generics for cache implementation

Fixing error with bad repository path

Package refactoring

Refactoring packages for mock classes

Refactoring of package name for archiva-proxy

Cleanup of package names

Refactoring packages for maven scheduler module

Refactoring packages for maven repository module

Refactoring package names for maven proxy module

Refactoring package names for maven metadata module

Package refactoring

code cleanup

Adding additional operations for access control

Updating permissions for v2 rest service

Refactoring - consolidating package names

Removing lucene packages as they are shadowed in dependent modules

Switching from tasks to target for antrun plugin

Adding components as upstream trigger

Increasing cron-utils version. Security fix.

Migration to remote repository handler

Dependency changes and vulnerability check

Trying to tune cassandra tests

Trying to speed up table truncate

Changing timeout parameter for cassandra driver

Fixing timeout value and adding thread output to maven build

Trying to increase the driver timeout for cassandra

Adding fix for jdk11

Changing cassandra version and using datastax driver