Changes

Update repository URLs in CONTRIBUTING.md

after the move to eclipse.gerrithub.io.

Change-Id: I75c4d8a3ee1f46abf61accafdb60aeb2462e15f8

EGit v6.8.0.202311212206-rc1

Change-Id: I5649f7ac16157b7dbeff7c205be03cf77e75b22c
Signed-off-by: Matthias Sohn <matthias.sohn@sap.com>

Prepare 6.8.0-SNAPSHOT builds

Change-Id: I988e56fa45929e22e267c4d099177b1c309625ee

Generate SBOMs using cyclonedx maven plugin

See https://gitlab.eclipse.org/eclipsefdn/emo-team/sbom/-/blob/main/docs/sbom.adoc#sbom-maven

Change-Id: Ibd4b502ef2a4754c13dc804cab2f7bf07089c7c7

Update orbit to orbit-aggregation/2023-12

and fix target platform to run egit on debug ide 4.30

add
- com.ibm.icu 74.1.0
- org.apache.batik.constants 1.17.0.v20231009-1000
- org.apache.batik.css 1.17.0.v20231009-1000
- org.apache.batik.i18n 1.17.0.v20231009-1000
- org.apache.batik.util 1.17.0.v20231009-1000

update
- jakarta.annotation-api to 2.1.1
- jakarta.inject.jakarta.inject-api to 2.0.1

remove from p2 repo
- log4j

remove not needed target files

Change-Id: I0235dc95e343ff8c6ec615b7ee60f12bcac65cf4

Update documentation for 6.8.0

Change-Id: I3dd35ef2638cb461e93eb242ceda49e8ac8bf460

EGit v6.8.0.202311291450-r

Change-Id: Ifede79adf01c405ce1b8b0d77b77e99b9db5c0b9
Signed-off-by: Matthias Sohn <matthias.sohn@sap.com>

Prepare 6.8.1-SNAPSHOT builds

Change-Id: I789d9282d024aa57e8f4bd0110fc7f0d0ae1c564

Prepare 6.9.0-SNAPSHOT builds

Change-Id: I1b45fd169a25ad600485a36730c81e5d9aa75555

[oomph] Update and cycle API baselines

Include 6.8.0, remove 6.5.0 API baseline. Include the 4.30 target
platform.

Change-Id: If4944e228a7e870d1687487e9d36083b7da03278

Configure Github issue reporting

Add two forms for bug reports and feature requests.

Change-Id: I3fd9b1d19e64d7642fb66f34ffcc2c1e44392378

README: update links to wiki

Make the links point to the Github wiki, not the EF wiki.

Change-Id: Ibdffc99ea899fe8c245a0ead49f624cdd05ac11b

Revert "EGitCredentialsProvider: support asking for a password only"

This reverts commit e23d0a648a9e7daca4ddff5538aca686c743ca8d. It
bypassed the Eclipse secure storage, which is highly inconvenient
in the case of SSH password authentication.

The change originally was done to support a fallback option in the
PKCS11 provider asking for a PIN to avoid that it asked for a user name
(which isn't needed, and ignored), too. But the PKCS11 code normally
will use the KeyPasswordProvider, which works fine and is also
integrated with the Eclipse secure storage.

SSH password authentication also will ask only for a password, but the
URIish will contain the user name, which EGit will use to pre-fill the
user-name dialog field (and make it read-only).

So in short: the change was misguided and not needed and broke secure
storage integration for SSH password authentication. Reverting it
restores this functionality, and PIN prompts from the PKCS11 provider
also still work.

Change-Id: I47238047490ca26c30c9cc03cf3979a5ae8849bc

Upgrade all Maven plugins

Also increase minimum Maven version, because Tycho 4.0 requires Maven
3.9.0.

Change-Id: I8e08c865e3e9a5c7a9d3e6cd2651c52389397e06

Automatically add labels to new issues

Change-Id: Ia98d00c651b5afee94ec87d9262976b2569f5c73

Have a PR template to point to GerritHub

Bug: egit-9
Change-Id: I3ec3a2880bdbd44e7de70eff6a4ad2f7096381b5

Remove outdated information from README

Also add a link to JGit.

Change-Id: I334df64b6497a24700de056d324ebffc34b36dda

Add 4.31 target platform and update to orbit 4.31

Update
- com.ibm.icu to 74.2.0
- org.apache.batik.constants to 1.17.0.v20231215-1130
- org.apache.batik.css to 1.17.0.v20231215-1130
- org.apache.batik.i18n to 1.17.0.v20231215-1130
- org.apache.batik.util to 1.17.0.v20231215-1130
- org.eclipse.orbit.maven.lucene.feature.group to 4.31.0.v20231217-0900
- org.mortbay.jasper.apache-jsp to 9.0.83

Change-Id: Ic5ec1961a1b854d355408271c4c3e72c0572add5

Update bytebuddy to 1.14.10

Change-Id: I1b6103bd6a59dcc21d5e3408393925351409adb4

Update mockito to 5.8.0

Change-Id: I1b2a823ff200e1bc959181143c4de5fb9752d77d

Replace (partly unused) dependency to org.eclipse.osgi.services

The bundle 'o.e.osgi.services' is deprecated for removal as part of
https://github.com/eclipse-equinox/equinox/issues/18
and already has been replaced to only re-export the 'official' OSGi
artifacts published to Maven-Central.

It should be replaced by imports of the desired org.osgi.service.*
packages so that the runtime can choose a suitable provider
independently of the bundle name.

Change-Id: I7cd641671a3298fcb7b0d9dbdd3d0c2ef970a6c3

Remove Maven module of target platform

In earlier versions of Tycho the target platform was referenced as Maven
artifact. That's not the case anymore, therefore we can remove the Maven
build of the target platform module.

Change-Id: Ibfdcffaff73064a3e9cfe62a0b1ffbbf2a89d57c

[releng] Use GerritHub/Github URLs for Oomph setup

Change the Oomph setup to no longer reference git.eclipse.org.

Use raw Github URLs for the branding image and for the master location
of the Egit.setup file. Change the clone URI setup to use GerritHub
URLs.

Fix the TPD feature name; it changed from "targetplatform-feature" to
"targetplatform.feature".

Verified by performing a fresh install with fresh clones using this
modified setup.

Bug: egit-7
Change-Id: I4f609ed946eb9ef1bbabc656c5c5b97030a83caf
Signed-off-by: Thomas Wolf <twolf@apache.org>

GPG signing: improve error reporting

If the signature returned by an external GPG cannot be verified,
include a message from the signature verifier, if any, in the exception
message.

This should tell us at least "No public key found" if the problem is
that the public key could not be found.

Bug: egit-12
Change-Id: I8c1ee7ce220c631f3d18bee009705b8be4b6fcb5
Signed-off-by: Thomas Wolf <twolf@apache.org>

Target platform: align with JGit

* JNA 5.13.0 -> 5.14.0
* Apache MINA sshd 2.11.0 -> 2.12.0

Change-Id: I1b81d89235e5ecd849656ab94fca8983f8b6dc3a
Signed-off-by: Thomas Wolf <twolf@apache.org>

[Orbit] Update lucene feature to 4.31.0.v20240130-0800

Change-Id: I3e8ba4a4d3853e172cea2aca717f1a68c9f83208

External GPG signature verification

If an external GPG is used for signing also use the external GPG for
signature verification.

In the signer use Bouncy Castle only to verify that the result we get
from the external program is indeed a correctly formatted signature, but
don't verify the signature. Previously we tried to fully verify the
signature, but for some GPG setups, the JGit implementation cannot find
the public key. For instance when GPG uses the keyboxd daemon (as
Gpg4Win does since version 4.2.0), it stores public keys in an sqlite
database.

Bug: egit-12
JGit-Dependency: I9cf093caa9fdebede801d665f2591cd9b275e1fd
Change-Id: I371b47b4d909635485f2a34e3bae8b104d831399

Update byte-buddy to 1.14.12

Change-Id: I44feba5a28988e3d5bb3edc30ef0d4779aafd7eb

Update org.apache.commons:commons-compress to 1.26.0

The new version now requires commons-io for the tests.
Hence adding dependency to commons-io:commons-io:2.15.1.

Change-Id: I049fdc935b5fca1b9260c4f4efe127ab8a70076e

Update org.mockito:mockito-core to 5.10.0

Change-Id: I4262dddc05b7537344f46ae383e62bb06cc92fbc

Update org.assertj:assertj-core to 3.25.3

Change-Id: I881f1a3853c0a9572084a6495607547959017b20

Update tycho to 4.0.6

Change-Id: Ifa2b64201b01fa239998c25df58891abaf679f5a

Update jetty to 10.0.20

Change-Id: I80871b4ef591e5a6f031503d36d513b350de7647

Update org.apache.commons.commons-logging to 1.3.0

Change-Id: I1eef9e608ae3f74cc3de18ee161a3234373bbd7b

EGit v6.9.0.202402211805-m3

Change-Id: Idd4c56155f766c4dd0d04fce17917dbd6f2e8aed
Signed-off-by: Matthias Sohn <matthias.sohn@sap.com>

EGit v6.9.0.202402212127-m3

Update lucene feature to 4.31.0.v20240221-0830 which changed today
in the Orbit 4.31 aggregator.

Change-Id: I257c6c47c981f9fb420a263829f716edd41a5d17
Signed-off-by: Matthias Sohn <matthias.sohn@sap.com>

Prepare 6.9.0-SNAPSHOT builds

Change-Id: I7052510015b895d15fbeaa9c411625519560ab6d

Update SECURITY.md

Use the text of the general Eclipse Vulnerability Reporting page at
https://www.eclipse.org/security.

Change-Id: I3ce89dbb89e2f507bd556e046b968943b8969253

Update lucene feature to 4.31.0.v20240221-0830

Change-Id: I98fece1f7785ac3db08da78fe0e042ade4244617

Revert "Update org.apache.commons.commons-logging to 1.3.0"

This reverts commit a309b1eb850aa843d53f11741ba71a3e22f987fb.

This is necessary to satisfy httpclient's requirements:

org.apache.httpcomponents.httpclient 4.5.14 has an "Import-Package:
org.apache.commons.logging; version="[1.1.0,1.3.0)".

Change-Id: I7c4b88d3f455c78f7bd041c141976c523abb7d17

EGit v6.9.0.202402281855-rc1

Change-Id: I40ca6f13c9cd865b3f37f0bd50660254e8f47ddb
Signed-off-by: Matthias Sohn <matthias.sohn@sap.com>

EGit v6.9.0.202402282109-rc1

Change-Id: Ib7b3e61d9ac6edc030302dab7a339879f3948128
Signed-off-by: Matthias Sohn <matthias.sohn@sap.com>

Prepare 6.9.0-SNAPSHOT builds

Change-Id: Ifb262290f1d5e1b1ceaa2f47f0666e472b4ca879

Re-add service components to manifests

we lost them unintentionally when creating 6.9.0 M3

Change-Id: I26d053e7424e74aad3077811dea8cd1831b14b7c

EGit v6.9.0.202403050737-r

Change-Id: Ideeaa96830fddf2dd1d5ec68b3920b81d4905609
Signed-off-by: Matthias Sohn <matthias.sohn@sap.com>

Prepare 6.9.1-SNAPSHOT

Change-Id: I1a0dc8b02a17a6fae19f1cd549a19f0fe071f015

Prepare 6.10.0-SNAPSHOT builds

Change-Id: I7ac50563895c48c9b3a7134b9307352281d23806