🚀 New features and improvements

• Require Jenkins 2.479 or newer (#1172) @MarkEWaite

📝 Documentation updates

• Annotate deprecated methods (#1188) @MarkEWaite

👻 Maintenance

• Use scm.connection consistent with archetype (#1201) @MarkEWaite
• Use non-deprecated JGit methods to get references (#1191) @MarkEWaite
• Do not prefix a static import reference with its class (#1190) @MarkEWaite
• Replace deprecated getPassword() with getSecretPassword() (#1189) @MarkEWaite

📦 Dependency updates

• Bump org.jenkins-ci.plugins:plugin from 4.87 to 4.88 (#1193) @dependabot
• Bump io.jenkins.tools.bom:bom-2.462.x from 3358.vea_fa_1f41504d to 3435.v238d66a_043fb_ (#1192, #1195, #1197) @dependabot
• Bump org.testcontainers:testcontainers from 1.20.1 to 1.20.2 (#1196) @dependabot
• Bump nl.jqno.equalsverifier:equalsverifier from 3.16.2 to 3.17.1 (#1194, #1198) @dependabot

🚀 New features and improvements

• Use JGit 7.0.0, require Java 17 and Jenkins 2.463 or newer (#1170) @MarkEWaite

🐛 Bug fixes

• Declare API's that throw GitException (#1166) @jglick

👻 Maintenance

• Use Java 17 features in source code (#1186) @MarkEWaite
• Remove mramonleon as a plugin maintainer (#1185) @MarkEWaite
• Use jenkins.baseline property to avoid BOM update mistakes (#1161) @MarkEWaite
• Enable Jenkins Security Scan (#1152) @strangelookingnerd

🚦 Tests

• Revert added 3 second delay in test (#1151) @MarkEWaite
• Remove outdated tests (#1147) @MarkEWaite

📦 Dependency updates

• Bump awaitility from 4.2.1 to 4.2.2 (#1174) @dependabot
• Bump bom-2.440.x from 3120.v4d898e1e9fc4 to 3358.vea_fa_1f41504d (#1148, #1149, #1153, #1154, #1157, #1159, #1162, #1164, #1173, #1175, #1176, #1177, #1183, #1184) @dependabot
• Bump equalsverifier from 3.16.1 to 3.16.2 (#1178) @dependabot
• Bump plugin pom from 4.83 to 4.87 (#1155, #1156, #1163, #1179) @dependabot
• Bump testcontainers from 1.19.8 to 1.20.1 (#1160, #1165) @dependabot
• Bump testcontainers-gitserver from 0.8.0 to 0.9.0 (#1180) @dependabot

🚀 New features and improvements

• Use Apache Mina, remove trilead for ssh connectivity (#1127) @olamy

👷 Changes for plugin developers

• Bump jgit.version from 6.9.0.202403050737-r to 6.10.0.202406032230-r (#1142) @dependabot

📝 Documentation updates

• Fix javadoc warning (#1133) @MarkEWaite

👻 Maintenance

• Require Jenkins 2.440.3 or newer (#1144) @MarkEWaite
• Require 2.426.3 as minimum Jenkins version (#1129) @AniketNS

🚦 Tests

• Use Apache Mina, remove trilead for ssh connectivity (#1127) @olamy
• Remove last references to JUnit 3 (#1146) @MarkEWaite
• Remove local repo config changes at end of tests (#1138) @MarkEWaite
• Tolerate default commit signing with SSH in tests (#1124) @jtnord
• Add a 3 second delay to decrease failures in the threaded submodule test (#1122) @ckpattar

📦 Dependency updates

• Bump bom-2.440.x from 2884.vc36b_64ce114a_ to 3120.v4d898e1e9fc4 (#1143, #1140, #1139, #1137, #1136, #1132, #1128, #1125, #1121, #1120, #1116) @dependabot
• Bump equalsverifier from 3.15.8 to 3.16.1 (#1123, #1119) @dependabot
• Bump plugin pom from 4.79 to 4.83 (#1141, #1134, #1126, #1118) @dependabot
• Bump objenesis from 3.3 to 3.4 (#1135) @dependabot

🚀 New features and improvements

• Bump jgit.version from 6.8.0.202311291450-r to 6.9.0.202403050737-r (#1113) @dependabot
• Require Jenkins 2.414.3 or newer (#1078, #1112) @MarkEWaite

🐛 Bug fixes

• JENKINS-72819 - Fix null pointer exception when reading exception message (#1111) @ckullabosch

👷 Changes for plugin developers

• Implement config with gitclient and fix test issue with auto sign setup locally (#1107) @olamy

📝 Documentation updates

• Minor phrasing change in a JGit specific exception message (#1115) @MarkEWaite
• Operating systems with outdated OpenSSH are no longer supported (#1099) @MarkEWaite
• Fix Javadoc link to JGit user guide (#1091) @MarkEWaite
• Replace multiple images with a single image (#1088) @MarkEWaite
• Add automated formatting note to contributing guide (#1083) @MarkEWaite

👻 Maintenance

• Simplify Revision.clone() implementation (#1106) @AniketNS
• Remove redundant spotbugs details from pom (#1101) @MarkEWaite
• Only run actions from jenkinsci organization (#1100) @AniketNS
• Calculate hashCode with arguments that are consistent with equals (#1097) @AniketNS
• Omit spotbugs CT_CONSTRUCTOR_THROWS visitor (#1087) @MarkEWaite
• Use labeler v5 and a reasonable set of defaults (#1082) @MarkEWaite
• Use gson-api plugin instead of bundling gson-api jar (#1077) @jonesbusy

🚦 Tests

• Implement config with gitclient and fix test issue with auto sign setup locally (#1107) @olamy

📦 Dependency updates

• Bump bom-2.414.x from 2641.v88e707466454 to 2884.vc36b_64ce114a_ (#1079, #1080, #1084, #1086, #1090, #1092, #1094, #1102, #1114) @dependabot
• Bump equalsverifier from 3.15.4 to 3.15.8 (#1089, #1093, #1108, #1110) @dependabot
• Bump plugin parent pom from 4.75 to 4.78 (#1081, #1098, #1105) @dependabot

🚀 New features and improvements

• Bump jgit.version from 6.7.0.202309050840-r to 6.8.0.202311291450-r (#1074) @dependabot

📝 Documentation updates

• Move changelog to end of documentation (#1076) @MarkEWaite
• Use correct name for MinGit in documentation (#1063) @MarkEWaite

👻 Maintenance

• Use proxy.getSecretPassword(), not deprecated proxy.getPassword() (#1072) @MarkEWaite
• Use Jenkinsfile from plugin archetype (#1059) @MarkEWaite

🚦 Tests

• Bump equalsverifier from 3.15.1 to 3.15.4 (#1060, #1073, #1075) @dependabot
• Prefer non-wildcard imports even for tests (#1068) @MarkEWaite

📦 Dependency updates

• Bump bom-2.387.x from 2423.vce598171d115 to 2543.vfb_1a_5fb_9496d (#1058, #1061, #1062, #1065, #1067, #1069, #1070) @dependabot
• Bump plugin parent pom from 4.73 to 4.75 (#1064, #1071) @dependabot

📦 Dependency updates

• Bump jgit.version from 6.6.0.202305301015-r to 6.7.0.202309050840-r (#1055, #1056) @dependabot
• Bump equalsverifier from 3.14.2 to 3.15.1 (#1026, #1035, #1043) @dependabot
• Bump git-changelist-maven-extension from 1.6 to 1.7 (#1030) @dependabot
• Bump plugin from 4.66 to 4.73 (#1023, #1028, #1029, #1032, #1037, #1045, #1053) @dependabot

📝 Documentation updates

• Add Plugin Development Team to CODEOWNERS (#1050) @sghill-rewrite

🚦 Tests

• Test with Java 17 and 21 (#1048, #1051) @MarkEWaite

👻 Maintenance

• Run tests with multiple cores in CI (#1041) @MarkEWaite
• Increase spotbugs checks (#1034) @MarkEWaite
• Match dependabot definition to GitHub docs (#1033) @MarkEWaite
• Declare line termination (#1025) @MarkEWaite

🚀 New features and improvements

• Bump jgit.version from 6.5.0.202303070854-r to 6.6.0.202305301015-r (#1016) @dependabot
• Require Jenkins 2.387.3 or newer (#1014) @MarkEWaite

👻 Maintenance

• Use plugin bom 2143.ve4c3c9ec790a (#1018) @MarkEWaite

🚦 Tests

• Fix character set tests (#1020) @MarkEWaite
• Simplify loose objects test for CLI git 2.41 (#1019) @MarkEWaite

📦 Dependency updates

• Bump equalsverifier from 3.14.1 to 3.14.2 (#1017) @dependabot
• Use parent pom 4.66 (#1015) @MarkEWaite
• Bump plugin from 4.64 to 4.65 (#1013) @dependabot

🐛 Bug fixes

• JENKINS-65838 - Do not set proxy authentication if username and/or password are not null but empty strings (#713) @ababushk
• JENKINS-63728 - JGit won't authorize if URL is a redirect to .git (#612) @zbynek

👻 Maintenance

• Remove unnecessary argLine property from pom file (#1010) @MarkEWaite
• Add host key logging (#1009) @MarkEWaite
• Activate Spotless via Maven property rather than file (#1005) @basil
• Enable Spotless for code formatting (#1000) @basil

🚦 Tests

• Name JenkinsRule variable consistently (#1012) @MarkEWaite
• Forward compatibility with Guava 32.0.0 (#1011) @basil

📦 Dependency updates

• Bump bom-2.361.x from 2059.v69eec68eb_b_b_e to 2062.v154408a_24d20 (#1008) @dependabot
• Bump bom-2.361.x from 2025.v816d28f1e04f to 2059.v69eec68eb_b_b_e (#1007) @dependabot
• Bump plugin from 4.61 to 4.62 (#1006) @dependabot
• Bump spotless-maven-plugin from 2.35.0 to 2.36.0 (#1004) @dependabot
• Bump bom-2.361.x from 1968.vb_14a_29e76128 to 1981.v17df70e84a_a_1 (#1001) @dependabot
• Bump plugin from 4.58 to 4.59 (#1002) @dependabot
• Bump byte-buddy from 1.14.3 to 1.14.4 (#1003) @dependabot
• Bump byte-buddy from 1.14.2 to 1.14.3 (#998) @dependabot
• Bump bom-2.361.x from 1948.veb_1fd345d3a_e to 1968.vb_14a_29e76128 (#999) @dependabot
• Bump bom-2.361.x from 1945.v13a_1306588ff to 1948.veb_1fd345d3a_e (#997) @dependabot
• Bump bom-2.361.x from 1935.v530f4395930f to 1945.v13a_1306588ff (#996) @dependabot
• Bump bom-2.361.x from 1887.vda_d0ddb_c15c4 to 1935.v530f4395930f (#995) @dependabot
• Bump equalsverifier from 3.14 to 3.14.1 (#994) @dependabot
• Bump plugin from 4.55 to 4.56 (#993) @dependabot

🚀 New features and improvements

• Remove duplicated 'Git installations' title in Tools page (#985) @janfaracik
• Use JGit 6.5.0.202303070854-r (#987) @dependabot

👻 Maintenance

• Rely on artifact caching proxy default (#969) @MarkEWaite
• Remove unnecessary use of reflection (#965) @basil

🚦 Tests

• Miscellaneous low-risk code cleanup (#964) @basil

📦 Dependency updates

• Bump bom-2.361.x from 1792.v0295db_e7c548 to 1887.vda_d0ddb_c15c4 (#966, #975, #979, #981, #984, #988) @dependabot
• Bump byte-buddy from 1.13.0 to 1.14.2 (#980, #986, #991) @dependabot
• Bump equalsverifier from 3.12.3 to 3.14 (#967, #970, #972, #978, #982) @dependabot
• Bump git-changelist-maven-extension from 1.4 to 1.6 (#973, #976) @dependabot
• Bump plugin from 4.54 to 4.55 (#977) @dependabot
• Bump spotless-maven-plugin from to 2.31.0 () @dependabot
• Bump spotless-maven-plugin from 2.30.0 to 2.35.0 (#968, #971, #974, #983, #990) @dependabot

🚀 New features and improvements

• JENKINS-70271 - Support JGit shallow clone (#954) @MarkEWaite
• JENKINS-69159 - Replace jsch with Apache Mina ssh in JGit (#956) @MarkEWaite

📝 Documentation updates

• Update MinGit installer doc and images (#962) @MarkEWaite

👻 Maintenance

• Use JDK 11 for coverage reporting (#959) @MarkEWaite
• Bump plugin from 4.53 to 4.54 (#960) @dependabot
• Bump bom-2.361.x from 1757.vf3c66da_b_7492 to 1792.v0295db_e7c548 (#951, #955, #961) @dependabot
• Bump spotless-maven-plugin from 2.28.0 to 2.30.0 (#953, #958) @dependabot

🚦 Tests

• Increase test coverage (#963) @MarkEWaite