From 0ec6a335f6992cafc30d348c9415a71456ac08db Mon Sep 17 00:00:00 2001
From: XDEV Renovate Bot <renovate@xdev-software.de>
Date: Fri, 8 Aug 2025 04:26:21 +0000
Subject: [PATCH 01/39] Update lycheeverse/lychee-action digest to 5c4ee84

---
 .github/workflows/broken-links.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/broken-links.yml b/.github/workflows/broken-links.yml
index 1d9d96b2..d29a4da9 100644
--- a/.github/workflows/broken-links.yml
+++ b/.github/workflows/broken-links.yml
@@ -18,7 +18,7 @@ jobs:
 
       - name: Link Checker
         id: lychee
-        uses: lycheeverse/lychee-action@82202e5e9c2f4ef1a55a3d02563e1cb6041e5332 # v2
+        uses: lycheeverse/lychee-action@5c4ee84814c983aa7164eaee476f014e53ff3963 # v2
         with:
           fail: false # Don't fail on broken links, create an issue instead
 

From 68e185227be4174fc347caf05ae03bca5a92e733 Mon Sep 17 00:00:00 2001
From: "Alex \"Blex\" B" <45384811+AB-xdev@users.noreply.github.com>
Date: Fri, 8 Aug 2025 09:48:58 +0200
Subject: [PATCH 02/39] Update demo application.yml

---
 .../src/main/resources/application.yml            | 15 ++++++++-------
 1 file changed, 8 insertions(+), 7 deletions(-)

diff --git a/demo/webapp-rest/src/main/resources/application.yml b/demo/webapp-rest/src/main/resources/application.yml
index 01074d35..ada5d52a 100644
--- a/demo/webapp-rest/src/main/resources/application.yml
+++ b/demo/webapp-rest/src/main/resources/application.yml
@@ -20,20 +20,21 @@ sse:
     remember-login-provider-redirect:
       enabled: false
 
+# READ https://docs.spring.io/spring-boot/reference/actuator/endpoints.html BEFORE CHANGING ANYTHING HERE!
+# Pledge of allegiance you sign when commiting this: I know that I'm responsible for security problems when I did not
+# read the docs and I will be sentenced to debug Voyager 1 memory problems (YcUycQoz0zg) or similar complex things
 management:
   endpoints:
     web:
       exposure:
         include: "*"
-        # Env is potentially security sensitive so better hide it
-        exclude: "env"
   endpoint:
+    env:
+      access: none
     health:
-      show-details: "when-authorized"
-  health:
-    # Kubernetes probes
-    probes:
-      enabled: true
+      show-details: when-authorized
+    heapdump:
+      access: unrestricted
 
 server:
   # https://stackoverflow.com/questions/69403837/how-to-use-tomcat-remoteipfilter-in-spring-boot

From df23f84b8e58db57c57d0a3652ab3c4c31ea9595 Mon Sep 17 00:00:00 2001
From: XDEV Renovate Bot <renovate@xdev-software.de>
Date: Tue, 12 Aug 2025 04:15:58 +0000
Subject: [PATCH 03/39] Update actions/checkout action to v5

---
 .github/workflows/broken-links.yml         | 2 +-
 .github/workflows/sync-labels.yml          | 2 +-
 .github/workflows/update-from-template.yml | 4 ++--
 3 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/broken-links.yml b/.github/workflows/broken-links.yml
index 1d9d96b2..a9e2882f 100644
--- a/.github/workflows/broken-links.yml
+++ b/.github/workflows/broken-links.yml
@@ -12,7 +12,7 @@ jobs:
   link-checker:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
 
       - run: mv .github/.lycheeignore .lycheeignore
 
diff --git a/.github/workflows/sync-labels.yml b/.github/workflows/sync-labels.yml
index 0e2beb51..3faaf1e3 100644
--- a/.github/workflows/sync-labels.yml
+++ b/.github/workflows/sync-labels.yml
@@ -15,7 +15,7 @@ jobs:
   labels:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           sparse-checkout: .github/labels.yml
 
diff --git a/.github/workflows/update-from-template.yml b/.github/workflows/update-from-template.yml
index 24af3f35..3a7dc919 100644
--- a/.github/workflows/update-from-template.yml
+++ b/.github/workflows/update-from-template.yml
@@ -35,7 +35,7 @@ jobs:
       update_branch_merged_commit: ${{ steps.manage-branches.outputs.update_branch_merged_commit }}
       create_update_branch_merged_pr: ${{ steps.manage-branches.outputs.create_update_branch_merged_pr }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           # Required because otherwise there are always changes detected when executing diff/rev-list
           fetch-depth: 0
@@ -181,7 +181,7 @@ jobs:
     if: needs.update.outputs.create_update_branch_merged_pr == 1
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           # Required because otherwise there are always changes detected when executing diff/rev-list
           fetch-depth: 0

From 613e5d01c18b6bf9687473275b8ea5111224203d Mon Sep 17 00:00:00 2001
From: XDEV Renovate Bot <renovate@xdev-software.de>
Date: Tue, 12 Aug 2025 04:19:19 +0000
Subject: [PATCH 04/39] Update actions/checkout action to v5

---
 .github/workflows/broken-links.yml         |  2 +-
 .github/workflows/check-build.yml          |  6 +++---
 .github/workflows/release.yml              | 10 +++++-----
 .github/workflows/sync-labels.yml          |  2 +-
 .github/workflows/test-deploy.yml          |  2 +-
 .github/workflows/update-from-template.yml |  4 ++--
 6 files changed, 13 insertions(+), 13 deletions(-)

diff --git a/.github/workflows/broken-links.yml b/.github/workflows/broken-links.yml
index d5095397..a37abe70 100644
--- a/.github/workflows/broken-links.yml
+++ b/.github/workflows/broken-links.yml
@@ -13,7 +13,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 15
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
 
       - run: mv .github/.lycheeignore .lycheeignore
 
diff --git a/.github/workflows/check-build.yml b/.github/workflows/check-build.yml
index 65e1e41a..fdeead25 100644
--- a/.github/workflows/check-build.yml
+++ b/.github/workflows/check-build.yml
@@ -33,7 +33,7 @@ jobs:
         distribution: [temurin]
 
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v5
       
     - name: Set up JDK
       uses: actions/setup-java@v4
@@ -81,7 +81,7 @@ jobs:
         distribution: [temurin]
 
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v5
       
     - name: Set up JDK
       uses: actions/setup-java@v4
@@ -104,7 +104,7 @@ jobs:
         distribution: [temurin]
 
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v5
 
     - name: Set up JDK
       uses: actions/setup-java@v4
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 5f8fb83e..e415f670 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -16,7 +16,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 30
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v5
       
     - name: Set up JDK
       uses: actions/setup-java@v4
@@ -53,7 +53,7 @@ jobs:
     outputs:
       upload_url: ${{ steps.create-release.outputs.upload_url }}
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v5
       
     - name: Configure Git
       run: |
@@ -105,7 +105,7 @@ jobs:
     needs: [prepare-release]
     timeout-minutes: 60
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v5
     
     - name: Init Git and pull
       run: |
@@ -153,7 +153,7 @@ jobs:
     needs: [prepare-release]
     timeout-minutes: 15
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v5
       
     - name: Init Git and pull
       run: |
@@ -184,7 +184,7 @@ jobs:
     needs: [publish-maven]
     timeout-minutes: 10
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v5
       
     - name: Init Git and pull
       run: |
diff --git a/.github/workflows/sync-labels.yml b/.github/workflows/sync-labels.yml
index dc672877..f6c50a17 100644
--- a/.github/workflows/sync-labels.yml
+++ b/.github/workflows/sync-labels.yml
@@ -16,7 +16,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 10
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           sparse-checkout: .github/labels.yml
 
diff --git a/.github/workflows/test-deploy.yml b/.github/workflows/test-deploy.yml
index 046be633..795bd6e8 100644
--- a/.github/workflows/test-deploy.yml
+++ b/.github/workflows/test-deploy.yml
@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 60
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v5
 
     - name: Set up JDK
       uses: actions/setup-java@v4
diff --git a/.github/workflows/update-from-template.yml b/.github/workflows/update-from-template.yml
index 65f56b0d..e689fe9f 100644
--- a/.github/workflows/update-from-template.yml
+++ b/.github/workflows/update-from-template.yml
@@ -36,7 +36,7 @@ jobs:
       update_branch_merged_commit: ${{ steps.manage-branches.outputs.update_branch_merged_commit }}
       create_update_branch_merged_pr: ${{ steps.manage-branches.outputs.create_update_branch_merged_pr }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           # Required because otherwise there are always changes detected when executing diff/rev-list
           fetch-depth: 0
@@ -183,7 +183,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 60
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           # Required because otherwise there are always changes detected when executing diff/rev-list
           fetch-depth: 0

From 019ff584fedbc7f8e0bff18c9ac9db333db7aa3d Mon Sep 17 00:00:00 2001
From: AB <a.bierler@xdev-software.de>
Date: Wed, 13 Aug 2025 13:48:55 +0200
Subject: [PATCH 05/39] Add configuration for Intellij PMD plugin

---
 .gitignore          | 46 +++++++++++++++++++++++++++++++++++++++++++++
 .idea/PMDPlugin.xml | 16 ++++++++++++++++
 2 files changed, 62 insertions(+)
 create mode 100644 .gitignore
 create mode 100644 .idea/PMDPlugin.xml

diff --git a/.gitignore b/.gitignore
new file mode 100644
index 00000000..ea952953
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1,46 @@
+# Compiled class file
+*.class
+
+# Log file
+*.log
+
+# Package/Binary Files don't belong into a git repo
+*.jar
+*.war
+*.ear
+*.zip
+*.tar.gz
+*.dll
+*.exe
+*.bin
+
+# virtual machine crash logs, see http://www.java.com/en/download/help/error_hotspot.xml
+hs_err_pid*
+
+# Eclipse
+.metadata
+.settings
+.classpath
+.project
+
+# == IntelliJ ==
+*.iml
+*.ipr
+
+# Some files are user/installation independent and are used for configuring the IDE
+# See also https://stackoverflow.com/a/35279076
+
+.idea/*
+!.idea/saveactions_settings.xml
+!.idea/checkstyle-idea.xml
+!.idea/externalDependencies.xml
+!.idea/PMDPlugin.xml
+
+!.idea/inspectionProfiles/
+.idea/inspectionProfiles/*
+!.idea/inspectionProfiles/Project_Default.xml
+
+!.idea/codeStyles/
+.idea/codeStyles/*
+!.idea/codeStyles/codeStyleConfig.xml
+!.idea/codeStyles/Project.xml
diff --git a/.idea/PMDPlugin.xml b/.idea/PMDPlugin.xml
new file mode 100644
index 00000000..0936e518
--- /dev/null
+++ b/.idea/PMDPlugin.xml
@@ -0,0 +1,16 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<project version="4">
+  <component name="PMDPlugin">
+    <option name="customRuleSets">
+      <list>
+        <option value="$PROJECT_DIR$\.config\pmd\java\ruleset.xml" />
+      </list>
+    </option>
+    <option name="inEditorAnnotationRules">
+      <list>
+        <option value="$PROJECT_DIR$\.config\pmd\java\ruleset.xml" />
+      </list>
+    </option>
+    <option name="skipTestSources" value="false" />
+  </component>
+</project>
\ No newline at end of file

From 29aa603936a4926a2fb47cafb1fd4a1ab8115208 Mon Sep 17 00:00:00 2001
From: AB <a.bierler@xdev-software.de>
Date: Wed, 13 Aug 2025 16:38:20 +0200
Subject: [PATCH 06/39] Enable async processing by default

---
 .idea/saveactions_settings.xml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.idea/saveactions_settings.xml b/.idea/saveactions_settings.xml
index 848c311a..12a4f040 100644
--- a/.idea/saveactions_settings.xml
+++ b/.idea/saveactions_settings.xml
@@ -5,6 +5,7 @@
       <set>
         <option value="activate" />
         <option value="activateOnBatch" />
+        <option value="processAsync" />
         <option value="organizeImports" />
         <option value="reformatChangedCode" />
         <option value="fieldCanBeFinal" />

From 8d535316a4211b4bedd99c99b86a623c3864da53 Mon Sep 17 00:00:00 2001
From: AB <a.bierler@xdev-software.de>
Date: Thu, 14 Aug 2025 14:28:25 +0200
Subject: [PATCH 07/39] Enhance default PMD ruleset

---
 .config/pmd/java/ruleset.xml | 48 ++++++++++++++++++++++++++++++++++++
 1 file changed, 48 insertions(+)

diff --git a/.config/pmd/java/ruleset.xml b/.config/pmd/java/ruleset.xml
index 88a7b5ae..5f5884b0 100644
--- a/.config/pmd/java/ruleset.xml
+++ b/.config/pmd/java/ruleset.xml
@@ -194,4 +194,52 @@
 	</rule>
 
 	<rule ref="category/java/security.xml"/>
+
+	<rule name="AvoidSystemSetterCall"
+		  language="java"
+		  message="Setters of java.lang.System should not be called unless really needed"
+		  class="net.sourceforge.pmd.lang.rule.xpath.XPathRule">
+		<description>
+			Calling setters of java.lang.System usually indicates bad design and likely causes unexpected behavior.
+			For example, it may break when multiple Threads are setting the value.
+			It may also overwrite user defined options or properties.
+
+			Try to pass the value only to the place where it's really needed and use it there accordingly.
+		</description>
+		<priority>3</priority>
+		<properties>
+			<property name="xpath">
+				<value>
+					<![CDATA[
+//MethodCall[starts-with(@MethodName,'set')]/TypeExpression[pmd-java:typeIsExactly('java.lang.System')]
+]]>
+				</value>
+			</property>
+		</properties>
+	</rule>
+
+	<rule name="JavaObjectSerializationIsUnsafe"
+		  language="java"
+		  message="Using Java Object (De-)Serialization is unsafe and has led to too many security vulnerabilities"
+		  class="net.sourceforge.pmd.lang.rule.xpath.XPathRule">
+		<description>
+			Nearly every known usage of (Java) Object Deserialization has resulted in [a security vulnerability](https://cloud.google.com/blog/topics/threat-intelligence/hunting-deserialization-exploits?hl=en).
+			Vulnerabilities are so common that there are [dedicated projects for exploit payload generation](https://github.com/frohoff/ysoserial).
+
+			Java Object Serialization may also fail to deserialize when the underlying classes are changed.
+
+			Use proven data interchange formats like JSON instead.
+		</description>
+		<priority>2</priority>
+		<properties>
+			<property name="xpath">
+				<value>
+					<![CDATA[
+//ClassDeclaration[@Interface = false()]/ClassBody/FieldDeclaration/VariableDeclarator/VariableId[@Name='serialVersionUID'] |
+//ConstructorCall/ClassType[pmd-java:typeIsExactly('java.io.ObjectInputStream') or pmd-java:typeIsExactly('java.io.ObjectOutputStream')]
+]]>
+				</value>
+			</property>
+		</properties>
+	</rule>
 </ruleset>

From 50a54b7c72ac1785af7e9b861adf2da1256dba60 Mon Sep 17 00:00:00 2001
From: XDEV Renovate Bot <renovate@xdev-software.de>
Date: Sun, 17 Aug 2025 04:21:06 +0000
Subject: [PATCH 08/39] Update dependency
 org.apache.maven.plugins:maven-javadoc-plugin to v3.11.3

---
 template-placeholder/pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/template-placeholder/pom.xml b/template-placeholder/pom.xml
index cc32fe86..15dacb08 100644
--- a/template-placeholder/pom.xml
+++ b/template-placeholder/pom.xml
@@ -108,7 +108,7 @@
 			<plugin>
 				<groupId>org.apache.maven.plugins</groupId>
 				<artifactId>maven-javadoc-plugin</artifactId>
-				<version>3.11.2</version>
+				<version>3.11.3</version>
 				<executions>
 					<execution>
 						<id>attach-javadocs</id>

From 2924da1aeef63b378dc17d58c80e50e146fafbde Mon Sep 17 00:00:00 2001
From: XDEV Renovate Bot <renovate@xdev-software.de>
Date: Fri, 22 Aug 2025 04:14:57 +0000
Subject: [PATCH 09/39] Update actions/setup-java action to v5

---
 .github/workflows/check-build.yml | 6 +++---
 .github/workflows/release.yml     | 8 ++++----
 .github/workflows/test-deploy.yml | 4 ++--
 3 files changed, 9 insertions(+), 9 deletions(-)

diff --git a/.github/workflows/check-build.yml b/.github/workflows/check-build.yml
index fdeead25..09b35480 100644
--- a/.github/workflows/check-build.yml
+++ b/.github/workflows/check-build.yml
@@ -36,7 +36,7 @@ jobs:
     - uses: actions/checkout@v5
       
     - name: Set up JDK
-      uses: actions/setup-java@v4
+      uses: actions/setup-java@v5
       with:
         distribution: ${{ matrix.distribution }}
         java-version: ${{ matrix.java }}
@@ -84,7 +84,7 @@ jobs:
     - uses: actions/checkout@v5
       
     - name: Set up JDK
-      uses: actions/setup-java@v4
+      uses: actions/setup-java@v5
       with:
         distribution: ${{ matrix.distribution }}
         java-version: ${{ matrix.java }}
@@ -107,7 +107,7 @@ jobs:
     - uses: actions/checkout@v5
 
     - name: Set up JDK
-      uses: actions/setup-java@v4
+      uses: actions/setup-java@v5
       with:
         distribution: ${{ matrix.distribution }}
         java-version: ${{ matrix.java }}
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index e415f670..ea4ad2fe 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -19,7 +19,7 @@ jobs:
     - uses: actions/checkout@v5
       
     - name: Set up JDK
-      uses: actions/setup-java@v4
+      uses: actions/setup-java@v5
       with:
         java-version: '17'
         distribution: 'temurin'
@@ -114,7 +114,7 @@ jobs:
         git pull
 
     - name: Set up JDK
-      uses: actions/setup-java@v4
+      uses: actions/setup-java@v5
       with: # running setup-java overwrites the settings.xml
         distribution: 'temurin'
         java-version: '17'
@@ -131,7 +131,7 @@ jobs:
         MAVEN_GPG_PASSPHRASE: ${{ secrets.MAVEN_GPG_PASSPHRASE }}
 
     - name: Set up JDK
-      uses: actions/setup-java@v4
+      uses: actions/setup-java@v5
       with: # running setup-java again overwrites the settings.xml
         distribution: 'temurin'
         java-version: '17'
@@ -162,7 +162,7 @@ jobs:
         git pull
 
     - name: Setup - Java
-      uses: actions/setup-java@v4
+      uses: actions/setup-java@v5
       with:
         java-version: '17'
         distribution: 'temurin'
diff --git a/.github/workflows/test-deploy.yml b/.github/workflows/test-deploy.yml
index 795bd6e8..cfd79b49 100644
--- a/.github/workflows/test-deploy.yml
+++ b/.github/workflows/test-deploy.yml
@@ -14,7 +14,7 @@ jobs:
     - uses: actions/checkout@v5
 
     - name: Set up JDK
-      uses: actions/setup-java@v4
+      uses: actions/setup-java@v5
       with: # running setup-java overwrites the settings.xml
         distribution: 'temurin'
         java-version: '17'
@@ -31,7 +31,7 @@ jobs:
         MAVEN_GPG_PASSPHRASE: ${{ secrets.MAVEN_GPG_PASSPHRASE }}
     
     - name: Set up JDK
-      uses: actions/setup-java@v4
+      uses: actions/setup-java@v5
       with: # running setup-java again overwrites the settings.xml
         distribution: 'temurin'
         java-version: '17'

From 739ed7eeff798dd0e1b5ce83bc299d9f5638e06c Mon Sep 17 00:00:00 2001
From: XDEV Renovate Bot <renovate@xdev-software.de>
Date: Sat, 23 Aug 2025 04:10:18 +0000
Subject: [PATCH 10/39] Update lycheeverse/lychee-action digest to 01a5c94

---
 .github/workflows/broken-links.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/broken-links.yml b/.github/workflows/broken-links.yml
index 3acb9c97..fdcf4362 100644
--- a/.github/workflows/broken-links.yml
+++ b/.github/workflows/broken-links.yml
@@ -18,7 +18,7 @@ jobs:
 
       - name: Link Checker
         id: lychee
-        uses: lycheeverse/lychee-action@5c4ee84814c983aa7164eaee476f014e53ff3963 # v2
+        uses: lycheeverse/lychee-action@01a5c94d8e012550040658854b90a7a7301e75ca # v2
         with:
           fail: false # Don't fail on broken links, create an issue instead
 

From ebc61877abfaf00860f4c7cf4c1b5205bf6aaf36 Mon Sep 17 00:00:00 2001
From: XDEV Renovate Bot <renovate@xdev-software.de>
Date: Tue, 26 Aug 2025 04:11:33 +0000
Subject: [PATCH 11/39] Update lycheeverse/lychee-action digest to 885c65f

---
 .github/workflows/broken-links.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/broken-links.yml b/.github/workflows/broken-links.yml
index fdcf4362..4d8ac3ca 100644
--- a/.github/workflows/broken-links.yml
+++ b/.github/workflows/broken-links.yml
@@ -18,7 +18,7 @@ jobs:
 
       - name: Link Checker
         id: lychee
-        uses: lycheeverse/lychee-action@01a5c94d8e012550040658854b90a7a7301e75ca # v2
+        uses: lycheeverse/lychee-action@885c65f3dc543b57c898c8099f4e08c8afd178a2 # v2
         with:
           fail: false # Don't fail on broken links, create an issue instead
 

From 8c154ddfdc0430d85fd2135569611946a6deb341 Mon Sep 17 00:00:00 2001
From: AB <a.bierler@xdev-software.de>
Date: Tue, 26 Aug 2025 09:20:53 +0200
Subject: [PATCH 12/39] Update to latest checkstyle version

---
 .idea/checkstyle-idea.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.idea/checkstyle-idea.xml b/.idea/checkstyle-idea.xml
index d43641c1..ec555b58 100644
--- a/.idea/checkstyle-idea.xml
+++ b/.idea/checkstyle-idea.xml
@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <project version="4">
   <component name="CheckStyle-IDEA" serialisationVersion="2">
-    <checkstyleVersion>10.26.1</checkstyleVersion>
+    <checkstyleVersion>11.0.0</checkstyleVersion>
     <scanScope>JavaOnlyWithTests</scanScope>
     <suppressErrors>true</suppressErrors>
     <copyLibs>true</copyLibs>

From 3c3c27c4fa8a51145fbbff1c33158378e38d5305 Mon Sep 17 00:00:00 2001
From: AB <a.bierler@xdev-software.de>
Date: Thu, 28 Aug 2025 10:23:52 +0200
Subject: [PATCH 13/39] Remove whitespaces

---
 .config/pmd/java/ruleset.xml | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/.config/pmd/java/ruleset.xml b/.config/pmd/java/ruleset.xml
index 5f5884b0..02a037fb 100644
--- a/.config/pmd/java/ruleset.xml
+++ b/.config/pmd/java/ruleset.xml
@@ -196,9 +196,9 @@
 	<rule ref="category/java/security.xml"/>
 
 	<rule name="AvoidSystemSetterCall"
-		  language="java"
-		  message="Setters of java.lang.System should not be called unless really needed"
-		  class="net.sourceforge.pmd.lang.rule.xpath.XPathRule">
+		language="java"
+		message="Setters of java.lang.System should not be called unless really needed"
+		class="net.sourceforge.pmd.lang.rule.xpath.XPathRule">
 		<description>
 			Calling setters of java.lang.System usually indicates bad design and likely causes unexpected behavior.
 			For example, it may break when multiple Threads are setting the value.
@@ -219,9 +219,9 @@
 	</rule>
 
 	<rule name="JavaObjectSerializationIsUnsafe"
-		  language="java"
-		  message="Using Java Object (De-)Serialization is unsafe and has led to too many security vulnerabilities"
-		  class="net.sourceforge.pmd.lang.rule.xpath.XPathRule">
+		language="java"
+		message="Using Java Object (De-)Serialization is unsafe and has led to too many security vulnerabilities"
+		class="net.sourceforge.pmd.lang.rule.xpath.XPathRule">
 		<description>
 			Nearly every known usage of (Java) Object Deserialization has resulted in [a security vulnerability](https://cloud.google.com/blog/topics/threat-intelligence/hunting-deserialization-exploits?hl=en).
 			Vulnerabilities are so common that there are [dedicated projects for exploit payload generation](https://github.com/frohoff/ysoserial).

From 251594ab78d0182e5240ef7b8880db7572bc2cea Mon Sep 17 00:00:00 2001
From: AB <a.bierler@xdev-software.de>
Date: Thu, 28 Aug 2025 11:59:14 +0200
Subject: [PATCH 14/39] Improve caching and remove excessive whitespaces

* Add dedicated caching for pmd and checkstyle
* Isolate caching between different goals
* Do read-only caching in release workflow on NON-CRITICAL steps
---
 .github/workflows/check-build.yml | 57 ++++++++++++++++++++++++-------
 .github/workflows/release.yml     | 46 +++++++++++++++++--------
 .github/workflows/test-deploy.yml |  4 +--
 3 files changed, 78 insertions(+), 29 deletions(-)

diff --git a/.github/workflows/check-build.yml b/.github/workflows/check-build.yml
index 09b35480..01f08402 100644
--- a/.github/workflows/check-build.yml
+++ b/.github/workflows/check-build.yml
@@ -26,25 +26,30 @@ jobs:
   build:
     runs-on: ubuntu-latest
     timeout-minutes: 30
-
     strategy:
       matrix:
         java: [17, 21]
         distribution: [temurin]
-
     steps:
     - uses: actions/checkout@v5
-      
+
     - name: Set up JDK
       uses: actions/setup-java@v5
       with:
         distribution: ${{ matrix.distribution }}
         java-version: ${{ matrix.java }}
-        cache: 'maven'
-      
+
+    - name: Cache Maven
+      uses: actions/cache@v4
+      with:
+        path: ~/.m2/repository
+        key: ${{ runner.os }}-mvn-build-${{ hashFiles('**/pom.xml') }}
+        restore-keys: |
+          ${{ runner.os }}-mvn-build-
+
     - name: Build with Maven
       run: ./mvnw -B clean package
-      
+
     - name: Check for uncommited changes
       run: |
         if [[ "$(git status --porcelain)" != "" ]]; then
@@ -74,21 +79,34 @@ jobs:
     runs-on: ubuntu-latest
     if: ${{ github.event_name != 'pull_request' || !startsWith(github.head_ref, 'renovate/') }}
     timeout-minutes: 15
-
     strategy:
       matrix:
         java: [17]
         distribution: [temurin]
-
     steps:
     - uses: actions/checkout@v5
-      
+
     - name: Set up JDK
       uses: actions/setup-java@v5
       with:
         distribution: ${{ matrix.distribution }}
         java-version: ${{ matrix.java }}
-        cache: 'maven'
+
+    - name: Cache Maven
+      uses: actions/cache@v4
+      with:
+        path: ~/.m2/repository
+        key: ${{ runner.os }}-mvn-checkstyle-${{ hashFiles('**/pom.xml') }}
+        restore-keys: |
+          ${{ runner.os }}-mvn-checkstyle-
+
+    - name: CheckStyle Cache
+      uses: actions/cache@v4
+      with:
+        path: '**/target/checkstyle-cachefile'
+        key: ${{ runner.os }}-checkstyle-${{ hashFiles('**/pom.xml') }}
+        restore-keys: |
+          ${{ runner.os }}-checkstyle-
 
     - name: Run Checkstyle
       run: ./mvnw -B checkstyle:check -P checkstyle -T2C
@@ -97,12 +115,10 @@ jobs:
     runs-on: ubuntu-latest
     if: ${{ github.event_name != 'pull_request' || !startsWith(github.head_ref, 'renovate/') }}
     timeout-minutes: 15
-
     strategy:
       matrix:
         java: [17]
         distribution: [temurin]
-
     steps:
     - uses: actions/checkout@v5
 
@@ -111,7 +127,22 @@ jobs:
       with:
         distribution: ${{ matrix.distribution }}
         java-version: ${{ matrix.java }}
-        cache: 'maven'
+
+    - name: Cache Maven
+      uses: actions/cache@v4
+      with:
+        path: ~/.m2/repository
+        key: ${{ runner.os }}-mvn-pmd-${{ hashFiles('**/pom.xml') }}
+        restore-keys: |
+          ${{ runner.os }}-mvn-pmd-
+
+    - name: PMD Cache
+      uses: actions/cache@v4
+      with:
+        path: '**/target/pmd/pmd.cache'
+        key: ${{ runner.os }}-pmd-${{ hashFiles('**/pom.xml') }}
+        restore-keys: |
+          ${{ runner.os }}-pmd-
 
     - name: Run PMD
       run: ./mvnw -B test pmd:aggregate-pmd-no-fork pmd:check -P pmd -DskipTests -T2C
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index ea4ad2fe..0639fc65 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -11,20 +11,30 @@ permissions:
   contents: write
   pull-requests: write
 
+# DO NOT RESTORE CACHE for critical release steps to prevent a (extremely unlikely) scenario 
+# where a supply chain attack could be achieved due to poisoned cache
 jobs:
   check-code:
     runs-on: ubuntu-latest
     timeout-minutes: 30
     steps:
     - uses: actions/checkout@v5
-      
+
     - name: Set up JDK
       uses: actions/setup-java@v5
       with:
         java-version: '17'
         distribution: 'temurin'
-        cache: 'maven'
-      
+
+    # Try to reuse existing cache from check-build
+    - name: Try restore Maven Cache
+      uses: actions/cache/restore@v4
+      with:
+        path: ~/.m2/repository
+        key: ${{ runner.os }}-mvn-build-${{ hashFiles('**/pom.xml') }}
+        restore-keys: |
+          ${{ runner.os }}-mvn-build-
+
     - name: Build with Maven
       run: ./mvnw -B clean package -T2C
       
@@ -54,15 +64,15 @@ jobs:
       upload_url: ${{ steps.create-release.outputs.upload_url }}
     steps:
     - uses: actions/checkout@v5
-      
+
     - name: Configure Git
       run: |
         git config --global user.email "actions@github.com"
         git config --global user.name "GitHub Actions"
-  
+
     - name: Un-SNAP 
       run: ./mvnw -B versions:set -DremoveSnapshot -DprocessAllModules -DgenerateBackupPoms=false
-  
+
     - name: Get version
       id: version
       run: |
@@ -70,7 +80,7 @@ jobs:
         echo "release=$version" >> $GITHUB_OUTPUT
         echo "releasenumber=${version//[!0-9]/}" >> $GITHUB_OUTPUT
       working-directory: ${{ env.PRIMARY_MAVEN_MODULE }}
-  
+
     - name: Commit and Push
       run: |
         git add -A
@@ -78,7 +88,7 @@ jobs:
         git push origin
         git tag v${{ steps.version.outputs.release }}
         git push origin --tags
-    
+
     - name: Create Release
       id: create-release
       uses: shogo82148/actions-create-release@4661dc54f7b4b564074e9fbf73884d960de569a3 # v1
@@ -106,7 +116,7 @@ jobs:
     timeout-minutes: 60
     steps:
     - uses: actions/checkout@v5
-    
+
     - name: Init Git and pull
       run: |
         git config --global user.email "actions@github.com"
@@ -122,7 +132,7 @@ jobs:
         server-password: PACKAGES_CENTRAL_TOKEN
         gpg-passphrase: MAVEN_GPG_PASSPHRASE
         gpg-private-key: ${{ secrets.MAVEN_GPG_PRIVATE_KEY }} # Only import once
-    
+
     - name: Publish to GitHub Packages Central
       run: ../mvnw -B deploy -P publish -DskipTests -DaltDeploymentRepository=github-central::https://maven.pkg.github.com/xdev-software/central
       working-directory: ${{ env.PRIMARY_MAVEN_MODULE }}
@@ -154,7 +164,7 @@ jobs:
     timeout-minutes: 15
     steps:
     - uses: actions/checkout@v5
-      
+
     - name: Init Git and pull
       run: |
         git config --global user.email "actions@github.com"
@@ -166,7 +176,15 @@ jobs:
       with:
         java-version: '17'
         distribution: 'temurin'
-        cache: 'maven'
+
+    # Try to reuse existing cache from check-build
+    - name: Try restore Maven Cache
+      uses: actions/cache/restore@v4
+      with:
+        path: ~/.m2/repository
+        key: ${{ runner.os }}-mvn-build-${{ hashFiles('**/pom.xml') }}
+        restore-keys: |
+          ${{ runner.os }}-mvn-build-
 
     - name: Build site
       run: ../mvnw -B compile site -DskipTests -T2C
@@ -185,7 +203,7 @@ jobs:
     timeout-minutes: 10
     steps:
     - uses: actions/checkout@v5
-      
+
     - name: Init Git and pull
       run: |
         git config --global user.email "actions@github.com"
@@ -200,7 +218,7 @@ jobs:
         git add -A
         git commit -m "Preparing for next development iteration"
         git push origin
-    
+
     - name: pull-request
       env:
         GH_TOKEN: ${{ github.token }}
diff --git a/.github/workflows/test-deploy.yml b/.github/workflows/test-deploy.yml
index cfd79b49..b75a246e 100644
--- a/.github/workflows/test-deploy.yml
+++ b/.github/workflows/test-deploy.yml
@@ -22,14 +22,14 @@ jobs:
         server-password: PACKAGES_CENTRAL_TOKEN
         gpg-passphrase: MAVEN_GPG_PASSPHRASE
         gpg-private-key: ${{ secrets.MAVEN_GPG_PRIVATE_KEY }} # Only import once
-    
+
     - name: Publish to GitHub Packages Central
       run: ../mvnw -B deploy -P publish -DskipTests -DaltDeploymentRepository=github-central::https://maven.pkg.github.com/xdev-software/central
       working-directory: ${{ env.PRIMARY_MAVEN_MODULE }}
       env:
         PACKAGES_CENTRAL_TOKEN: ${{ secrets.PACKAGES_CENTRAL_TOKEN }}
         MAVEN_GPG_PASSPHRASE: ${{ secrets.MAVEN_GPG_PASSPHRASE }}
-    
+
     - name: Set up JDK
       uses: actions/setup-java@v5
       with: # running setup-java again overwrites the settings.xml

From 3dfbb547ec4934674a4ec4360ce5cf47107ea4fe Mon Sep 17 00:00:00 2001
From: AB <a.bierler@xdev-software.de>
Date: Thu, 28 Aug 2025 12:00:50 +0200
Subject: [PATCH 15/39] Remove excessive white-spaces

---
 .github/workflows/broken-links.yml         | 2 +-
 .github/workflows/update-from-template.yml | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/broken-links.yml b/.github/workflows/broken-links.yml
index 4d8ac3ca..9493fb8a 100644
--- a/.github/workflows/broken-links.yml
+++ b/.github/workflows/broken-links.yml
@@ -28,7 +28,7 @@ jobs:
           echo "number=$(gh issue list -l 'bug' -l 'automated' -L 1 -S 'in:title \"Link Checker Report\"' -s 'open' --json 'number' --jq '.[].number')" >> $GITHUB_OUTPUT
         env:
           GH_TOKEN: ${{ github.token }}
-          
+
       - name: Close issue if everything is fine
         if: steps.lychee.outputs.exit_code == 0 && steps.find-issue.outputs.number != ''
         run: gh issue close -r 'not planned' ${{ steps.find-issue.outputs.number }}
diff --git a/.github/workflows/update-from-template.yml b/.github/workflows/update-from-template.yml
index 3a7dc919..ebd8220e 100644
--- a/.github/workflows/update-from-template.yml
+++ b/.github/workflows/update-from-template.yml
@@ -42,7 +42,7 @@ jobs:
           # If no PAT is used the following error occurs on a push:
           # refusing to allow a GitHub App to create or update workflow `.github/workflows/xxx.yml` without `workflows` permission
           token: ${{ secrets.UPDATE_FROM_TEMPLATE_PAT }}
-      
+
       - name: Init Git
         run: |
           git config --global user.email "111048771+xdev-gh-bot@users.noreply.github.com"
@@ -188,7 +188,7 @@ jobs:
           # If no PAT is used the following error occurs on a push:
           # refusing to allow a GitHub App to create or update workflow `.github/workflows/xxx.yml` without `workflows` permission
           token: ${{ secrets.UPDATE_FROM_TEMPLATE_PAT }}
-      
+
       - name: Init Git
         run: |
           git config --global user.email "111048771+xdev-gh-bot@users.noreply.github.com"

From d820b9eacc7e793cf359835c9568b45b089835a0 Mon Sep 17 00:00:00 2001
From: AB <a.bierler@xdev-software.de>
Date: Thu, 28 Aug 2025 12:05:51 +0200
Subject: [PATCH 16/39] Enable pmd analysis cache

---
 pom.xml                      | 1 +
 template-placeholder/pom.xml | 1 +
 2 files changed, 2 insertions(+)

diff --git a/pom.xml b/pom.xml
index c495b40d..f7785493 100644
--- a/pom.xml
+++ b/pom.xml
@@ -72,6 +72,7 @@
 						<artifactId>maven-pmd-plugin</artifactId>
 						<version>3.27.0</version>
 						<configuration>
+							<analysisCache>true</analysisCache>
 							<includeTests>true</includeTests>
 							<printFailingErrors>true</printFailingErrors>
 							<rulesets>
diff --git a/template-placeholder/pom.xml b/template-placeholder/pom.xml
index 15dacb08..aab5f187 100644
--- a/template-placeholder/pom.xml
+++ b/template-placeholder/pom.xml
@@ -242,6 +242,7 @@
 						<artifactId>maven-pmd-plugin</artifactId>
 						<version>3.27.0</version>
 						<configuration>
+							<analysisCache>true</analysisCache>
 							<includeTests>true</includeTests>
 							<printFailingErrors>true</printFailingErrors>
 							<rulesets>

From 85ec7061c2ae7c76130343512dfb119ef7a8e3ea Mon Sep 17 00:00:00 2001
From: XDEV Renovate Bot <renovate@xdev-software.de>
Date: Mon, 1 Sep 2025 04:21:34 +0000
Subject: [PATCH 17/39] Update dependency com.puppycrawl.tools:checkstyle to
 v11.0.1

---
 pom.xml                      | 2 +-
 template-placeholder/pom.xml | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/pom.xml b/pom.xml
index f7785493..abef334e 100644
--- a/pom.xml
+++ b/pom.xml
@@ -45,7 +45,7 @@
 							<dependency>
 								<groupId>com.puppycrawl.tools</groupId>
 								<artifactId>checkstyle</artifactId>
-								<version>11.0.0</version>
+								<version>11.0.1</version>
 							</dependency>
 						</dependencies>
 						<configuration>
diff --git a/template-placeholder/pom.xml b/template-placeholder/pom.xml
index aab5f187..e8666847 100644
--- a/template-placeholder/pom.xml
+++ b/template-placeholder/pom.xml
@@ -215,7 +215,7 @@
 							<dependency>
 								<groupId>com.puppycrawl.tools</groupId>
 								<artifactId>checkstyle</artifactId>
-								<version>11.0.0</version>
+								<version>11.0.1</version>
 							</dependency>
 						</dependencies>
 						<configuration>

From c41665b0458f1c666bc722214b2b68e883215005 Mon Sep 17 00:00:00 2001
From: AB <a.bierler@xdev-software.de>
Date: Tue, 2 Sep 2025 11:21:09 +0200
Subject: [PATCH 18/39] PMD: AvoidUnmanagedThreads

---
 .config/pmd/java/ruleset.xml | 22 ++++++++++++++++++++++
 1 file changed, 22 insertions(+)

diff --git a/.config/pmd/java/ruleset.xml b/.config/pmd/java/ruleset.xml
index 02a037fb..b52a0f36 100644
--- a/.config/pmd/java/ruleset.xml
+++ b/.config/pmd/java/ruleset.xml
@@ -218,6 +218,28 @@
 		</properties>
 	</rule>
 
+	<rule name="AvoidUnmanagedThreads"
+		language="java"
+		message="Avoid unmanaged threads"
+		class="net.sourceforge.pmd.lang.rule.xpath.XPathRule">
+		<description>
+			Trying to manually manage threads usually gets quickly out of control and may result in various problems like uncontrollable spawning of threads.
+			Threads can also not be cancelled properly.
+
+			Use managed Thread services like ``ExecutorService`` and ``CompletableFuture`` instead.
+		</description>
+		<priority>3</priority>
+		<properties>
+			<property name="xpath">
+				<value>
+					<![CDATA[
+//MethodCall[pmd-java:matchesSig('java.lang.Thread#start()') or pmd-java:matchesSig('java.lang.Thread#startVirtualThread(java.lang.Runnable)') or pmd-java:matchesSig('java.lang.Thread$Builder#start(java.lang.Runnable)')]
+]]>
+				</value>
+			</property>
+		</properties>
+	</rule>
+
 	<rule name="JavaObjectSerializationIsUnsafe"
 		language="java"
 		message="Using Java Object (De-)Serialization is unsafe and has led to too many security vulnerabilities"

From 3b31f0b840130f6af0374197fcceef70f90b014f Mon Sep 17 00:00:00 2001
From: AB <a.bierler@xdev-software.de>
Date: Tue, 2 Sep 2025 11:26:59 +0200
Subject: [PATCH 19/39] Fix format

---
 .config/pmd/java/ruleset.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.config/pmd/java/ruleset.xml b/.config/pmd/java/ruleset.xml
index b52a0f36..c9cf652f 100644
--- a/.config/pmd/java/ruleset.xml
+++ b/.config/pmd/java/ruleset.xml
@@ -226,7 +226,7 @@
 			Trying to manually manage threads usually gets quickly out of control and may result in various problems like uncontrollable spawning of threads.
 			Threads can also not be cancelled properly.
 
-			Use managed Thread services like ``ExecutorService`` and ``CompletableFuture`` instead.
+			Use managed Thread services like `ExecutorService` and `CompletableFuture` instead.
 		</description>
 		<priority>3</priority>
 		<properties>

From ebe579f2592e6c6550531f43182ed92923c8998b Mon Sep 17 00:00:00 2001
From: AB <a.bierler@xdev-software.de>
Date: Tue, 2 Sep 2025 15:09:22 +0200
Subject: [PATCH 20/39] PMD: Add PostConstruct and PreDestroy

---
 .config/pmd/java/ruleset.xml | 43 ++++++++++++++++++++++++++++++++++++
 1 file changed, 43 insertions(+)

diff --git a/.config/pmd/java/ruleset.xml b/.config/pmd/java/ruleset.xml
index c9cf652f..ebdbd83a 100644
--- a/.config/pmd/java/ruleset.xml
+++ b/.config/pmd/java/ruleset.xml
@@ -218,6 +218,49 @@
 		</properties>
 	</rule>
 
+	<rule name="AvoidPostConstruct"
+		language="java"
+		message="Avoid @PostConstruct"
+		class="net.sourceforge.pmd.lang.rule.xpath.XPathRule">
+		<description>
+			Using a `@PostConstruct` method is usually only done when field injection is used and initialization needs to be performed after that.
+
+			It's better to do this directly in the constructor with constructor injection, so that all logic will be encapsulated there.
+			This also makes using the bean in environments where JavaEE is not present - for example in tests - a lot easier, as forgetting to call the `@PostConstruct` method is no longer possible.
+		</description>
+		<priority>3</priority>
+		<properties>
+			<property name="xpath">
+				<value>
+					<![CDATA[
+//MethodDeclaration[pmd-java:hasAnnotation('jakarta.annotation.PostConstruct')]
+]]>
+				</value>
+			</property>
+		</properties>
+	</rule>
+
+	<rule name="AvoidPreDestroy"
+		language="java"
+		message="Avoid @PreDestroy"
+		class="net.sourceforge.pmd.lang.rule.xpath.XPathRule">
+		<description>
+			`@PreDestroy` should be replaced by implementing `AutoCloseable` and overwriting the `close` method instead.
+
+			This also makes using the bean in environments where JavaEE is not present - for example in tests - a lot easier, as forgetting to call the `@PreDestroy` method is no much more difficult.
+		</description>
+		<priority>3</priority>
+		<properties>
+			<property name="xpath">
+				<value>
+					<![CDATA[
+//MethodDeclaration[pmd-java:hasAnnotation('jakarta.annotation.PreDestroy')]
+]]>
+				</value>
+			</property>
+		</properties>
+	</rule>
+
 	<rule name="AvoidUnmanagedThreads"
 		language="java"
 		message="Avoid unmanaged threads"

From d23faec4c3627f4109e8738119a0900e40bba459 Mon Sep 17 00:00:00 2001
From: AB <a.bierler@xdev-software.de>
Date: Wed, 3 Sep 2025 09:35:50 +0200
Subject: [PATCH 21/39] Init

---
 .config/checkstyle/checkstyle.xml            | 150 +++++++++
 .config/checkstyle/suppressions.xml          |   6 +
 .config/pmd/java/ruleset.xml                 | 310 +++++++++++++++++++
 .gitattributes                               |   5 +
 .gitignore                                   |  46 +++
 .idea/PMDPlugin.xml                          |  16 +
 .idea/checkstyle-idea.xml                    |  20 ++
 .idea/codeStyles/Project.xml                 |  99 ++++++
 .idea/codeStyles/codeStyleConfig.xml         |   5 +
 .idea/externalDependencies.xml               |   7 +
 .idea/inspectionProfiles/Project_Default.xml |   6 +
 .idea/saveactions_settings.xml               |  22 ++
 12 files changed, 692 insertions(+)
 create mode 100644 .config/checkstyle/checkstyle.xml
 create mode 100644 .config/checkstyle/suppressions.xml
 create mode 100644 .config/pmd/java/ruleset.xml
 create mode 100644 .gitattributes
 create mode 100644 .gitignore
 create mode 100644 .idea/PMDPlugin.xml
 create mode 100644 .idea/checkstyle-idea.xml
 create mode 100644 .idea/codeStyles/Project.xml
 create mode 100644 .idea/codeStyles/codeStyleConfig.xml
 create mode 100644 .idea/externalDependencies.xml
 create mode 100644 .idea/inspectionProfiles/Project_Default.xml
 create mode 100644 .idea/saveactions_settings.xml

diff --git a/.config/checkstyle/checkstyle.xml b/.config/checkstyle/checkstyle.xml
new file mode 100644
index 00000000..43b52907
--- /dev/null
+++ b/.config/checkstyle/checkstyle.xml
@@ -0,0 +1,150 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE module PUBLIC "-//Puppy Crawl//DTD Check Configuration 1.3//EN"
+		"http://www.puppycrawl.com/dtds/configuration_1_3.dtd">
+<module name="Checker">
+	<!-- Only check code -->
+	<property name="fileExtensions" value="java"/>
+	<property name="severity" value="error"/>
+
+	<property name="tabWidth" value="4"/>
+
+	<module name="SuppressionFilter">
+		<property name="file" value=".config/checkstyle/suppressions.xml"/>
+	</module>
+
+	<module name="FileLength"/>
+	<module name="LineLength">
+		<property name="max" value="120"/>
+		<property name="fileExtensions" value="java"/>
+		<!-- Ignore default + links -->
+		<property name="ignorePattern" value="(^(package|import))|(^\s*(\/\/|\*) .*https?.*$)"/>
+	</module>
+	<module name="NewlineAtEndOfFile"/>
+
+	<module name="RegexpSingleline">
+		<!-- Ignore inside block comments (*) -->
+		<property name="format" value="[^\s\*][\s]{1,}$"/>
+		<property name="minimum" value="0"/>
+		<property name="maximum" value="0"/>
+		<property name="message" value="Line has trailing whitespaces"/>
+	</module>
+
+	<!-- Generated code -->
+	<module name="SuppressionSingleFilter">
+		<property name="checks" value="."/>
+		<property name="files" value="[\\/]src[\\/]gen(erated)?[\\/].*\.java$"/>
+	</module>
+	<!-- Test code -->
+	<module name="SuppressionSingleFilter">
+		<property name="checks" value="MagicNumberCheck"/>
+		<property name="files" value="[\\/]test[\\/].*\.java$"/>
+	</module>
+
+	<!-- Suppressions -->
+	<module name="SuppressWarningsFilter"/>
+	<!-- https://github.com/checkstyle/checkstyle/issues/7287 -->
+	<module name="SuppressWithPlainTextCommentFilter">
+		<property name="offCommentFormat" value="// CHECKSTYLE\:OFF ([\w\|]+)"/>
+		<property name="onCommentFormat" value="// CHECKSTYLE\:ON ([\w\|]+)"/>
+		<property name="checkFormat" value="$1"/>
+	</module>
+
+	<module name="TreeWalker">
+		<!-- Checks - sorted alphabetically -->
+		<module name="ArrayTypeStyle"/>
+		<module name="AvoidDoubleBraceInitialization"/>
+		<module name="AvoidStarImport"/>
+		<module name="ConstantName"/>
+		<module name="DefaultComesLast"/>
+		<module name="EmptyBlock"/>
+		<module name="EmptyCatchBlock"/>
+		<module name="EmptyForInitializerPad"/>
+		<module name="EmptyForIteratorPad"/>
+		<module name="EmptyStatement"/>
+		<module name="EqualsHashCode"/>
+		<module name="ExplicitInitialization">
+			<property name="severity" value="info"/>
+		</module>
+		<module name="FinalClass"/>
+		<module name="FinalParameters"/>
+		<module name="GenericWhitespace"/>
+		<module name="HideUtilityClassConstructor"/>
+		<module name="IllegalCatch">
+			<!-- https://docs.pmd-code.org/pmd-doc-7.11.0/pmd_rules_java_errorprone.html#avoidcatchingnpe -->
+			<!-- https://docs.pmd-code.org/pmd-doc-7.11.0/pmd_rules_java_errorprone.html#avoidcatchingthrowable -->
+			<property name="illegalClassNames" value="Error,Throwable,NullPointerException,java.lang.Error,java.lang.Throwable,java.lang.NullPointerException"/>
+		</module>
+		<module name="IllegalImport"/>
+		<module name="InterfaceIsType"/>
+		<module name="JavadocStyle">
+			<property name="checkFirstSentence" value="false"/>
+		</module>
+		<module name="LeftCurly">
+			<!-- Default minus Lambda -->
+			<property name="tokens" value="ANNOTATION_DEF, CLASS_DEF, CTOR_DEF, ENUM_CONSTANT_DEF, ENUM_DEF, INTERFACE_DEF, LITERAL_CASE, LITERAL_CATCH, LITERAL_DEFAULT, LITERAL_DO, LITERAL_ELSE, LITERAL_FINALLY, LITERAL_FOR, LITERAL_IF, LITERAL_SWITCH, LITERAL_SYNCHRONIZED, LITERAL_TRY, LITERAL_WHILE, METHOD_DEF, OBJBLOCK, STATIC_INIT, RECORD_DEF, COMPACT_CTOR_DEF"/>
+			<property name="option" value="nl"/>
+		</module>
+		<module name="LocalFinalVariableName"/>
+		<module name="LocalVariableName"/>
+		<module name="MagicNumber">
+			<property name="ignoreAnnotation" value="true"/>
+			<property name="ignoreFieldDeclaration" value="true"/>
+			<property name="ignoreHashCodeMethod" value="true"/>
+			<!-- Defaults + other common constant values (e.g. time) -->
+			<property name="ignoreNumbers" value="-1, 0, 1, 2, 3, 4, 5, 10, 12, 24, 31, 60, 100, 1000"/>
+		</module>
+		<module name="MemberName"/>
+		<module name="MethodLength"/>
+		<module name="MethodName"/>
+		<module name="MethodParamPad"/>
+		<module name="MissingDeprecated"/>
+		<module name="MissingOverride"/>
+		<module name="ModifierOrder"/>
+		<module name="NeedBraces"/>
+		<module name="NoClone"/>
+		<module name="NoFinalizer"/>
+		<module name="NonEmptyAtclauseDescription"/>
+		<module name="NoWhitespaceAfter"/>
+		<module name="NoWhitespaceBefore"/>
+		<module name="OneStatementPerLine"/>
+		<module name="OneTopLevelClass"/>
+		<module name="OperatorWrap"/>
+		<module name="OuterTypeNumber"/>
+		<module name="PackageName"/>
+		<module name="ParameterName"/>
+		<module name="ParenPad"/>
+		<module name="RedundantImport"/>
+		<module name="RequireThis"/>
+		<module name="RightCurly">
+			<property name="option" value="alone"/>
+		</module>
+		<module name="SimplifyBooleanExpression"/>
+		<module name="StaticVariableName"/>
+		<module name="StringLiteralEquality"/>
+		<module name="SuppressWarningsHolder"/>
+		<module name="TodoComment">
+			<property name="severity" value="info"/>
+		</module>
+		<module name="TypecastParenPad"/>
+		<module name="TypeName"/>
+		<module name="UnnecessaryParentheses"/>
+		<module name="UnnecessarySemicolonAfterOuterTypeDeclaration"/>
+		<module name="UnnecessarySemicolonAfterTypeMemberDeclaration"/>
+		<module name="UnnecessarySemicolonInEnumeration"/>
+		<module name="UnnecessarySemicolonInTryWithResources"/>
+		<module name="UnusedImports"/>
+		<module name="UnusedLocalVariable"/>
+		<module name="UpperEll"/>
+		<module name="VisibilityModifier">
+			<property name="packageAllowed" value="true"/>
+			<property name="protectedAllowed" value="true"/>
+		</module>
+		<module name="WhitespaceAfter">
+			<property name="tokens" value="COMMA,SEMI"/>
+		</module>
+		<module name="WhitespaceAround">
+			<property name="tokens"
+					  value="ASSIGN,BAND,BAND_ASSIGN,BOR,BOR_ASSIGN,BSR,BSR_ASSIGN,BXOR,BXOR_ASSIGN,COLON,DIV,DIV_ASSIGN,EQUAL,GE,GT,LAND,LCURLY,LE,LOR,LT,MINUS,MINUS_ASSIGN,MOD,MOD_ASSIGN,NOT_EQUAL,PLUS,PLUS_ASSIGN,QUESTION,RCURLY,SL,SLIST,SL_ASSIGN,SR,SR_ASSIGN,STAR,STAR_ASSIGN,TYPE_EXTENSION_AND"/>
+		</module>
+	</module>
+</module>
diff --git a/.config/checkstyle/suppressions.xml b/.config/checkstyle/suppressions.xml
new file mode 100644
index 00000000..16d385e3
--- /dev/null
+++ b/.config/checkstyle/suppressions.xml
@@ -0,0 +1,6 @@
+<?xml version="1.0"?>
+<!DOCTYPE suppressions PUBLIC
+		"-//Checkstyle//DTD SuppressionFilter Configuration 1.2//EN"
+		"https://checkstyle.org/dtds/suppressions_1_2.dtd">
+<suppressions>
+</suppressions>
diff --git a/.config/pmd/java/ruleset.xml b/.config/pmd/java/ruleset.xml
new file mode 100644
index 00000000..ebdbd83a
--- /dev/null
+++ b/.config/pmd/java/ruleset.xml
@@ -0,0 +1,310 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<ruleset name="Default"
+		 xmlns="http://pmd.sourceforge.net/ruleset/2.0.0"
+		 xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+		 xsi:schemaLocation="http://pmd.sourceforge.net/ruleset/2.0.0 https://pmd.sourceforge.io/ruleset_2_0_0.xsd">
+
+	<description>
+		This ruleset checks the code for discouraged programming constructs.
+	</description>
+
+	<!-- Only rules that don't overlap with CheckStyle! -->
+
+	<rule ref="category/java/bestpractices.xml/AvoidPrintStackTrace"/>
+	<rule ref="category/java/bestpractices.xml/AvoidStringBufferField"/>
+	<rule ref="category/java/bestpractices.xml/AvoidUsingHardCodedIP"/>
+	<rule ref="category/java/bestpractices.xml/ConstantsInInterface"/>
+	<rule ref="category/java/bestpractices.xml/ExhaustiveSwitchHasDefault"/>
+	<rule ref="category/java/bestpractices.xml/LiteralsFirstInComparisons"/>
+	<!-- CheckStyle can't handle this switch behavior -> delegated to PMD -->
+	<rule ref="category/java/bestpractices.xml/NonExhaustiveSwitch"/>
+	<rule ref="category/java/bestpractices.xml/OneDeclarationPerLine">
+		<properties>
+			<property name="strictMode" value="true"/>
+		</properties>
+	</rule>
+	<rule ref="category/java/bestpractices.xml/PreserveStackTrace"/>
+	<rule ref="category/java/bestpractices.xml/SimplifiableTestAssertion"/>
+	<rule ref="category/java/bestpractices.xml/SystemPrintln"/>
+	<rule ref="category/java/bestpractices.xml/UnusedAssignment"/>
+	<rule ref="category/java/bestpractices.xml/UnusedFormalParameter"/>
+	<rule ref="category/java/bestpractices.xml/UnusedPrivateField"/>
+	<rule ref="category/java/bestpractices.xml/UnusedPrivateMethod"/>
+	<rule ref="category/java/bestpractices.xml/UseCollectionIsEmpty"/>
+	<rule ref="category/java/bestpractices.xml/UseEnumCollections"/>
+	<rule ref="category/java/bestpractices.xml/UseStandardCharsets"/>
+	<rule ref="category/java/bestpractices.xml/UseTryWithResources"/>
+
+	<!-- Native code is platform dependent; Loading external native libs might pose a security threat -->
+	<rule ref="category/java/codestyle.xml/AvoidUsingNativeCode"/>
+	<rule ref="category/java/codestyle.xml/IdenticalCatchBranches"/>
+	<rule ref="category/java/codestyle.xml/LambdaCanBeMethodReference"/>
+	<rule ref="category/java/codestyle.xml/NoPackage"/>
+	<rule ref="category/java/codestyle.xml/PrematureDeclaration"/>
+	<rule ref="category/java/codestyle.xml/UnnecessarySemicolon"/>
+
+	<rule ref="category/java/design.xml">
+		<!-- Sometimes abstract classes have just fields -->
+		<exclude name="AbstractClassWithoutAnyMethod"/>
+
+		<!-- Using RuntimeExceptions is ok -->
+		<exclude name="AvoidCatchingGenericException"/>
+		<exclude name="AvoidThrowingRawExceptionTypes"/>
+
+		<!-- Limit too low -->
+		<exclude name="AvoidDeeplyNestedIfStmts"/>
+
+		<!-- Limit too low -->
+		<exclude name="CouplingBetweenObjects"/>
+
+		<!-- Limit too low -->
+		<exclude name="CyclomaticComplexity"/>
+
+		<!-- Makes entity classes impossible -->
+		<exclude name="DataClass"/>
+
+		<!-- Used commonly particular in bigger methods with upstream throws -->
+		<exclude name="ExceptionAsFlowControl"/>
+
+		<!-- Limit too low -->
+		<exclude name="ExcessiveImports"/>
+
+		<!-- Handled by TooManyFields/TooManyMethods -->
+		<exclude name="ExcessivePublicCount"/>
+
+		<!-- Prohibits accessing members using multiple depths -->
+		<exclude name="LawOfDemeter"/>
+
+		<!-- No effect -->
+		<exclude name="LoosePackageCoupling"/>
+
+		<!-- Prohibits singleton pattern -->
+		<exclude name="MutableStaticState"/>
+
+		<!-- Checks LoC, already handled by Checkstyle -->
+		<exclude name="NcssCount"/>
+
+		<!-- Some override methods or Junit require this -->
+		<exclude name="SignatureDeclareThrowsException"/>
+
+		<!-- Reports FP for equals methods -->
+		<exclude name="SimplifyBooleanReturns"/>
+
+		<!-- Limit too low -->
+		<exclude name="TooManyFields"/>
+
+		<!-- Limit too low -->
+		<exclude name="TooManyMethods"/>
+
+		<!-- Limit too low -->
+		<exclude name="UseObjectForClearerAPI"/>
+	</rule>
+
+	<rule ref="category/java/design.xml/AvoidDeeplyNestedIfStmts">
+		<properties>
+			<property name="problemDepth" value="4"/>
+		</properties>
+	</rule>
+	<rule ref="category/java/design.xml/CouplingBetweenObjects">
+		<properties>
+			<property name="threshold" value="100"/>
+		</properties>
+	</rule>
+	<rule ref="category/java/design.xml/CyclomaticComplexity">
+		<properties>
+			<property name="classReportLevel" value="150"/>
+			<property name="methodReportLevel" value="25"/>
+			<property name="cycloOptions" value=""/>
+		</properties>
+	</rule>
+	<rule ref="category/java/design.xml/ExcessiveImports">
+		<properties>
+			<property name="minimum" value="200"/>
+		</properties>
+	</rule>
+	<rule ref="category/java/design.xml/TooManyFields">
+		<properties>
+			<property name="maxfields" value="50"/>
+		</properties>
+	</rule>
+	<rule ref="category/java/design.xml/TooManyMethods">
+		<properties>
+			<property name="maxmethods" value="100"/>
+		</properties>
+	</rule>
+
+	<rule ref="category/java/errorprone.xml/AssignmentToNonFinalStatic"/>
+	<rule ref="category/java/errorprone.xml/AvoidDecimalLiteralsInBigDecimalConstructor"/>
+	<rule ref="category/java/errorprone.xml/AvoidMultipleUnaryOperators"/>
+	<rule ref="category/java/errorprone.xml/AvoidUsingOctalValues"/>
+	<rule ref="category/java/errorprone.xml/BrokenNullCheck"/>
+	<rule ref="category/java/errorprone.xml/ComparisonWithNaN"/>
+	<rule ref="category/java/errorprone.xml/DoNotCallGarbageCollectionExplicitly"/>
+	<rule ref="category/java/errorprone.xml/DontImportSun"/>
+	<rule ref="category/java/errorprone.xml/DontUseFloatTypeForLoopIndices"/>
+	<rule ref="category/java/errorprone.xml/EqualsNull"/>
+	<rule ref="category/java/errorprone.xml/IdempotentOperations"/>
+	<rule ref="category/java/errorprone.xml/ImplicitSwitchFallThrough"/>
+	<rule ref="category/java/errorprone.xml/InstantiationToGetClass"/>
+	<rule ref="category/java/errorprone.xml/InvalidLogMessageFormat"/>
+	<rule ref="category/java/errorprone.xml/JumbledIncrementer"/>
+	<rule ref="category/java/errorprone.xml/MisplacedNullCheck"/>
+	<rule ref="category/java/errorprone.xml/MoreThanOneLogger"/>
+	<rule ref="category/java/errorprone.xml/NonStaticInitializer"/>
+	<rule ref="category/java/errorprone.xml/ReturnFromFinallyBlock"/>
+	<rule ref="category/java/errorprone.xml/SingletonClassReturningNewInstance"/>
+	<rule ref="category/java/errorprone.xml/UnconditionalIfStatement"/>
+	<rule ref="category/java/errorprone.xml/UnnecessaryCaseChange"/>
+	<rule ref="category/java/errorprone.xml/UselessOperationOnImmutable"/>
+
+
+	<rule ref="category/java/multithreading.xml">
+		<!-- Just bloats code; improved in JEP-491/Java 24+ -->
+		<exclude name="AvoidSynchronizedAtMethodLevel"/>
+
+		<!-- NOPE -->
+		<exclude name="DoNotUseThreads"/>
+
+		<!-- Doesn't detect nested thread safe singleton pattern -->
+		<exclude name="NonThreadSafeSingleton"/>
+
+		<!-- Should relevant for fields that use multithreading which is rare -->
+		<exclude name="UseConcurrentHashMap"/>
+	</rule>
+
+	<rule ref="category/java/performance.xml">
+		<!-- This was fixed in Java 10 -->
+		<exclude name="AvoidFileStream"/>
+
+		<!-- Used everywhere and has neglectable performance impact -->
+		<exclude name="AvoidInstantiatingObjectsInLoops"/>
+
+		<!-- Handled by checkstyle -->
+		<exclude name="RedundantFieldInitializer"/>
+
+		<!-- Nowadays optimized by compiler; No code bloating needed -->
+		<exclude name="UseStringBufferForStringAppends"/>
+	</rule>
+
+	<rule ref="category/java/performance.xml/TooFewBranchesForSwitch">
+		<properties>
+			<!-- If you have one case only please use a if -->
+			<property name="minimumNumberCaseForASwitch" value="2"/>
+		</properties>
+	</rule>
+
+	<rule ref="category/java/security.xml"/>
+
+	<rule name="AvoidSystemSetterCall"
+		language="java"
+		message="Setters of java.lang.System should not be called unless really needed"
+		class="net.sourceforge.pmd.lang.rule.xpath.XPathRule">
+		<description>
+			Calling setters of java.lang.System usually indicates bad design and likely causes unexpected behavior.
+			For example, it may break when multiple Threads are setting the value.
+			It may also overwrite user defined options or properties.
+
+			Try to pass the value only to the place where it's really needed and use it there accordingly.
+		</description>
+		<priority>3</priority>
+		<properties>
+			<property name="xpath">
+				<value>
+					<![CDATA[
+//MethodCall[starts-with(@MethodName,'set')]/TypeExpression[pmd-java:typeIsExactly('java.lang.System')]
+]]>
+				</value>
+			</property>
+		</properties>
+	</rule>
+
+	<rule name="AvoidPostConstruct"
+		language="java"
+		message="Avoid @PostConstruct"
+		class="net.sourceforge.pmd.lang.rule.xpath.XPathRule">
+		<description>
+			Using a `@PostConstruct` method is usually only done when field injection is used and initialization needs to be performed after that.
+
+			It's better to do this directly in the constructor with constructor injection, so that all logic will be encapsulated there.
+			This also makes using the bean in environments where JavaEE is not present - for example in tests - a lot easier, as forgetting to call the `@PostConstruct` method is no longer possible.
+		</description>
+		<priority>3</priority>
+		<properties>
+			<property name="xpath">
+				<value>
+					<![CDATA[
+//MethodDeclaration[pmd-java:hasAnnotation('jakarta.annotation.PostConstruct')]
+]]>
+				</value>
+			</property>
+		</properties>
+	</rule>
+
+	<rule name="AvoidPreDestroy"
+		language="java"
+		message="Avoid @PreDestroy"
+		class="net.sourceforge.pmd.lang.rule.xpath.XPathRule">
+		<description>
+			`@PreDestroy` should be replaced by implementing `AutoCloseable` and overwriting the `close` method instead.
+
+			This also makes using the bean in environments where JavaEE is not present - for example in tests - a lot easier, as forgetting to call the `@PreDestroy` method is no much more difficult.
+		</description>
+		<priority>3</priority>
+		<properties>
+			<property name="xpath">
+				<value>
+					<![CDATA[
+//MethodDeclaration[pmd-java:hasAnnotation('jakarta.annotation.PreDestroy')]
+]]>
+				</value>
+			</property>
+		</properties>
+	</rule>
+
+	<rule name="AvoidUnmanagedThreads"
+		language="java"
+		message="Avoid unmanaged threads"
+		class="net.sourceforge.pmd.lang.rule.xpath.XPathRule">
+		<description>
+			Trying to manually manage threads usually gets quickly out of control and may result in various problems like uncontrollable spawning of threads.
+			Threads can also not be cancelled properly.
+
+			Use managed Thread services like `ExecutorService` and `CompletableFuture` instead.
+		</description>
+		<priority>3</priority>
+		<properties>
+			<property name="xpath">
+				<value>
+					<![CDATA[
+//MethodCall[pmd-java:matchesSig('java.lang.Thread#start()') or pmd-java:matchesSig('java.lang.Thread#startVirtualThread(java.lang.Runnable)') or pmd-java:matchesSig('java.lang.Thread$Builder#start(java.lang.Runnable)')]
+]]>
+				</value>
+			</property>
+		</properties>
+	</rule>
+
+	<rule name="JavaObjectSerializationIsUnsafe"
+		language="java"
+		message="Using Java Object (De-)Serialization is unsafe and has led to too many security vulnerabilities"
+		class="net.sourceforge.pmd.lang.rule.xpath.XPathRule">
+		<description>
+			Nearly every known usage of (Java) Object Deserialization has resulted in [a security vulnerability](https://cloud.google.com/blog/topics/threat-intelligence/hunting-deserialization-exploits?hl=en).
+			Vulnerabilities are so common that there are [dedicated projects for exploit payload generation](https://github.com/frohoff/ysoserial).
+
+			Java Object Serialization may also fail to deserialize when the underlying classes are changed.
+
+			Use proven data interchange formats like JSON instead.
+		</description>
+		<priority>2</priority>
+		<properties>
+			<property name="xpath">
+				<value>
+					<![CDATA[
+//ClassDeclaration[@Interface = false()]/ClassBody/FieldDeclaration/VariableDeclarator/VariableId[@Name='serialVersionUID'] |
+//ConstructorCall/ClassType[pmd-java:typeIsExactly('java.io.ObjectInputStream') or pmd-java:typeIsExactly('java.io.ObjectOutputStream')]
+]]>
+				</value>
+			</property>
+		</properties>
+	</rule>
+</ruleset>
diff --git a/.gitattributes b/.gitattributes
new file mode 100644
index 00000000..0f9f33e7
--- /dev/null
+++ b/.gitattributes
@@ -0,0 +1,5 @@
+# Auto detect text files and perform LF normalization
+* text=auto
+
+# Force sh files to have LF
+*.sh text eol=lf
diff --git a/.gitignore b/.gitignore
new file mode 100644
index 00000000..ea952953
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1,46 @@
+# Compiled class file
+*.class
+
+# Log file
+*.log
+
+# Package/Binary Files don't belong into a git repo
+*.jar
+*.war
+*.ear
+*.zip
+*.tar.gz
+*.dll
+*.exe
+*.bin
+
+# virtual machine crash logs, see http://www.java.com/en/download/help/error_hotspot.xml
+hs_err_pid*
+
+# Eclipse
+.metadata
+.settings
+.classpath
+.project
+
+# == IntelliJ ==
+*.iml
+*.ipr
+
+# Some files are user/installation independent and are used for configuring the IDE
+# See also https://stackoverflow.com/a/35279076
+
+.idea/*
+!.idea/saveactions_settings.xml
+!.idea/checkstyle-idea.xml
+!.idea/externalDependencies.xml
+!.idea/PMDPlugin.xml
+
+!.idea/inspectionProfiles/
+.idea/inspectionProfiles/*
+!.idea/inspectionProfiles/Project_Default.xml
+
+!.idea/codeStyles/
+.idea/codeStyles/*
+!.idea/codeStyles/codeStyleConfig.xml
+!.idea/codeStyles/Project.xml
diff --git a/.idea/PMDPlugin.xml b/.idea/PMDPlugin.xml
new file mode 100644
index 00000000..0936e518
--- /dev/null
+++ b/.idea/PMDPlugin.xml
@@ -0,0 +1,16 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<project version="4">
+  <component name="PMDPlugin">
+    <option name="customRuleSets">
+      <list>
+        <option value="$PROJECT_DIR$\.config\pmd\java\ruleset.xml" />
+      </list>
+    </option>
+    <option name="inEditorAnnotationRules">
+      <list>
+        <option value="$PROJECT_DIR$\.config\pmd\java\ruleset.xml" />
+      </list>
+    </option>
+    <option name="skipTestSources" value="false" />
+  </component>
+</project>
\ No newline at end of file
diff --git a/.idea/checkstyle-idea.xml b/.idea/checkstyle-idea.xml
new file mode 100644
index 00000000..ec555b58
--- /dev/null
+++ b/.idea/checkstyle-idea.xml
@@ -0,0 +1,20 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<project version="4">
+  <component name="CheckStyle-IDEA" serialisationVersion="2">
+    <checkstyleVersion>11.0.0</checkstyleVersion>
+    <scanScope>JavaOnlyWithTests</scanScope>
+    <suppressErrors>true</suppressErrors>
+    <copyLibs>true</copyLibs>
+    <option name="thirdPartyClasspath" />
+    <option name="activeLocationIds">
+      <option value="1d81ed75-9d2a-4a5a-8852-5fc05c1396b5" />
+    </option>
+    <option name="locations">
+      <list>
+        <ConfigurationLocation id="bundled-sun-checks" type="BUNDLED" scope="All" description="Sun Checks">(bundled)</ConfigurationLocation>
+        <ConfigurationLocation id="bundled-google-checks" type="BUNDLED" scope="All" description="Google Checks">(bundled)</ConfigurationLocation>
+        <ConfigurationLocation id="1d81ed75-9d2a-4a5a-8852-5fc05c1396b5" type="PROJECT_RELATIVE" scope="All" description="XDEV Checks">$PROJECT_DIR$/.config/checkstyle/checkstyle.xml</ConfigurationLocation>
+      </list>
+    </option>
+  </component>
+</project>
\ No newline at end of file
diff --git a/.idea/codeStyles/Project.xml b/.idea/codeStyles/Project.xml
new file mode 100644
index 00000000..19681faa
--- /dev/null
+++ b/.idea/codeStyles/Project.xml
@@ -0,0 +1,99 @@
+<component name="ProjectCodeStyleConfiguration">
+  <code_scheme name="Project" version="173">
+    <option name="FORMATTER_TAGS_ENABLED" value="true" />
+    <JavaCodeStyleSettings>
+      <option name="GENERATE_FINAL_LOCALS" value="true" />
+      <option name="GENERATE_FINAL_PARAMETERS" value="true" />
+      <option name="CLASS_COUNT_TO_USE_IMPORT_ON_DEMAND" value="99" />
+      <option name="NAMES_COUNT_TO_USE_IMPORT_ON_DEMAND" value="99" />
+      <option name="PACKAGES_TO_USE_IMPORT_ON_DEMAND">
+        <value />
+      </option>
+      <option name="IMPORT_LAYOUT_TABLE">
+        <value>
+          <package name="" withSubpackages="true" static="true" />
+          <emptyLine />
+          <package name="java" withSubpackages="true" static="false" />
+          <emptyLine />
+          <package name="javax" withSubpackages="true" static="false" />
+          <emptyLine />
+          <package name="jakarta" withSubpackages="true" static="false" />
+          <emptyLine />
+          <package name="org" withSubpackages="true" static="false" />
+          <emptyLine />
+          <package name="com" withSubpackages="true" static="false" />
+          <emptyLine />
+          <package name="" withSubpackages="true" static="false" />
+        </value>
+      </option>
+    </JavaCodeStyleSettings>
+    <codeStyleSettings language="JAVA">
+      <option name="LINE_COMMENT_AT_FIRST_COLUMN" value="false" />
+      <option name="LINE_COMMENT_ADD_SPACE" value="true" />
+      <option name="BLOCK_COMMENT_ADD_SPACE" value="true" />
+      <option name="LINE_COMMENT_ADD_SPACE_ON_REFORMAT" value="true" />
+      <option name="KEEP_FIRST_COLUMN_COMMENT" value="false" />
+      <option name="KEEP_CONTROL_STATEMENT_IN_ONE_LINE" value="false" />
+      <option name="KEEP_BLANK_LINES_IN_DECLARATIONS" value="1" />
+      <option name="KEEP_BLANK_LINES_IN_CODE" value="1" />
+      <option name="KEEP_BLANK_LINES_BEFORE_RBRACE" value="0" />
+      <option name="BLANK_LINES_AFTER_IMPORTS" value="2" />
+      <option name="BLANK_LINES_AROUND_CLASS" value="2" />
+      <option name="BRACE_STYLE" value="2" />
+      <option name="CLASS_BRACE_STYLE" value="2" />
+      <option name="METHOD_BRACE_STYLE" value="2" />
+      <option name="ELSE_ON_NEW_LINE" value="true" />
+      <option name="WHILE_ON_NEW_LINE" value="true" />
+      <option name="CATCH_ON_NEW_LINE" value="true" />
+      <option name="FINALLY_ON_NEW_LINE" value="true" />
+      <option name="ALIGN_MULTILINE_PARAMETERS" value="false" />
+      <option name="ALIGN_MULTILINE_RESOURCES" value="false" />
+      <option name="SPACE_AFTER_TYPE_CAST" value="false" />
+      <option name="SPACE_BEFORE_IF_PARENTHESES" value="false" />
+      <option name="SPACE_BEFORE_WHILE_PARENTHESES" value="false" />
+      <option name="SPACE_BEFORE_FOR_PARENTHESES" value="false" />
+      <option name="SPACE_BEFORE_TRY_PARENTHESES" value="false" />
+      <option name="SPACE_BEFORE_CATCH_PARENTHESES" value="false" />
+      <option name="SPACE_BEFORE_SWITCH_PARENTHESES" value="false" />
+      <option name="SPACE_BEFORE_SYNCHRONIZED_PARENTHESES" value="false" />
+      <option name="SPACE_BEFORE_SWITCH_LBRACE" value="false" />
+      <option name="SPACE_BEFORE_ELSE_KEYWORD" value="false" />
+      <option name="SPACE_BEFORE_CATCH_KEYWORD" value="false" />
+      <option name="SPACE_BEFORE_FINALLY_KEYWORD" value="false" />
+      <option name="CALL_PARAMETERS_WRAP" value="5" />
+      <option name="CALL_PARAMETERS_LPAREN_ON_NEXT_LINE" value="true" />
+      <option name="METHOD_PARAMETERS_WRAP" value="5" />
+      <option name="METHOD_PARAMETERS_LPAREN_ON_NEXT_LINE" value="true" />
+      <option name="RESOURCE_LIST_WRAP" value="5" />
+      <option name="EXTENDS_LIST_WRAP" value="5" />
+      <option name="THROWS_LIST_WRAP" value="5" />
+      <option name="EXTENDS_KEYWORD_WRAP" value="1" />
+      <option name="THROWS_KEYWORD_WRAP" value="1" />
+      <option name="METHOD_CALL_CHAIN_WRAP" value="5" />
+      <option name="BINARY_OPERATION_WRAP" value="1" />
+      <option name="BINARY_OPERATION_SIGN_ON_NEXT_LINE" value="true" />
+      <option name="TERNARY_OPERATION_WRAP" value="5" />
+      <option name="ARRAY_INITIALIZER_WRAP" value="5" />
+      <option name="ARRAY_INITIALIZER_LBRACE_ON_NEXT_LINE" value="true" />
+      <option name="ASSIGNMENT_WRAP" value="1" />
+      <option name="WRAP_COMMENTS" value="true" />
+      <option name="IF_BRACE_FORCE" value="3" />
+      <option name="DOWHILE_BRACE_FORCE" value="3" />
+      <option name="WHILE_BRACE_FORCE" value="3" />
+      <option name="FOR_BRACE_FORCE" value="3" />
+      <option name="WRAP_LONG_LINES" value="true" />
+      <option name="PARAMETER_ANNOTATION_WRAP" value="1" />
+      <option name="VARIABLE_ANNOTATION_WRAP" value="2" />
+      <indentOptions>
+        <option name="CONTINUATION_INDENT_SIZE" value="4" />
+        <option name="USE_TAB_CHARACTER" value="true" />
+        <option name="KEEP_INDENTS_ON_EMPTY_LINES" value="true" />
+      </indentOptions>
+    </codeStyleSettings>
+    <codeStyleSettings language="XML">
+      <indentOptions>
+        <option name="USE_TAB_CHARACTER" value="true" />
+      </indentOptions>
+    </codeStyleSettings>
+  </code_scheme>
+</component>
diff --git a/.idea/codeStyles/codeStyleConfig.xml b/.idea/codeStyles/codeStyleConfig.xml
new file mode 100644
index 00000000..79ee123c
--- /dev/null
+++ b/.idea/codeStyles/codeStyleConfig.xml
@@ -0,0 +1,5 @@
+<component name="ProjectCodeStyleConfiguration">
+  <state>
+    <option name="USE_PER_PROJECT_SETTINGS" value="true" />
+  </state>
+</component>
\ No newline at end of file
diff --git a/.idea/externalDependencies.xml b/.idea/externalDependencies.xml
new file mode 100644
index 00000000..78be5b8e
--- /dev/null
+++ b/.idea/externalDependencies.xml
@@ -0,0 +1,7 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<project version="4">
+  <component name="ExternalDependencies">
+    <plugin id="CheckStyle-IDEA" />
+    <plugin id="software.xdev.saveactions" />
+  </component>
+</project>
\ No newline at end of file
diff --git a/.idea/inspectionProfiles/Project_Default.xml b/.idea/inspectionProfiles/Project_Default.xml
new file mode 100644
index 00000000..6a1691d5
--- /dev/null
+++ b/.idea/inspectionProfiles/Project_Default.xml
@@ -0,0 +1,6 @@
+<component name="InspectionProjectProfileManager">
+  <profile version="1.0">
+    <option name="myName" value="Project Default" />
+    <inspection_tool class="JavadocReference" enabled="true" level="WARNING" enabled_by_default="true" />
+  </profile>
+</component>
\ No newline at end of file
diff --git a/.idea/saveactions_settings.xml b/.idea/saveactions_settings.xml
new file mode 100644
index 00000000..12a4f040
--- /dev/null
+++ b/.idea/saveactions_settings.xml
@@ -0,0 +1,22 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<project version="4">
+  <component name="SaveActionSettings">
+    <option name="actions">
+      <set>
+        <option value="activate" />
+        <option value="activateOnBatch" />
+        <option value="processAsync" />
+        <option value="organizeImports" />
+        <option value="reformatChangedCode" />
+        <option value="fieldCanBeFinal" />
+        <option value="localCanBeFinal" />
+        <option value="unqualifiedFieldAccess" />
+        <option value="unqualifiedMethodAccess" />
+        <option value="missingOverrideAnnotation" />
+        <option value="explicitTypeCanBeDiamond" />
+        <option value="unnecessarySemicolon" />
+      </set>
+    </option>
+    <option name="configurationPath" value="" />
+  </component>
+</project>
\ No newline at end of file

From bba9aa6a907b7cd020e9123fdf8f8e87e71db92d Mon Sep 17 00:00:00 2001
From: AB <a.bierler@xdev-software.de>
Date: Wed, 3 Sep 2025 16:42:18 +0200
Subject: [PATCH 22/39] No EoL

---
 .idea/codeStyles/Project.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.idea/codeStyles/Project.xml b/.idea/codeStyles/Project.xml
index 19681faa..21e0aff9 100644
--- a/.idea/codeStyles/Project.xml
+++ b/.idea/codeStyles/Project.xml
@@ -96,4 +96,4 @@
       </indentOptions>
     </codeStyleSettings>
   </code_scheme>
-</component>
+</component>
\ No newline at end of file

From d9d62c2822497313d1c28370dc19dfa0a0549338 Mon Sep 17 00:00:00 2001
From: AB <a.bierler@xdev-software.de>
Date: Wed, 10 Sep 2025 14:48:28 +0200
Subject: [PATCH 23/39] Enabled PMD analysis cache

---
 codec-sha256/pom.xml            | 1 +
 crypto-symmetric/pom.xml        | 1 +
 csp/pom.xml                     | 1 +
 demo/pom.xml                    | 1 +
 metrics/pom.xml                 | 1 +
 oauth2-oidc-remember-me/pom.xml | 1 +
 oauth2-oidc/pom.xml             | 1 +
 vaadin/pom.xml                  | 1 +
 web-sidecar-actuator/pom.xml    | 1 +
 web-sidecar-common/pom.xml      | 1 +
 web/pom.xml                     | 1 +
 11 files changed, 11 insertions(+)

diff --git a/codec-sha256/pom.xml b/codec-sha256/pom.xml
index 88c4df5b..319dff8a 100644
--- a/codec-sha256/pom.xml
+++ b/codec-sha256/pom.xml
@@ -257,6 +257,7 @@
 						<artifactId>maven-pmd-plugin</artifactId>
 						<version>3.27.0</version>
 						<configuration>
+							<analysisCache>true</analysisCache>
 							<includeTests>true</includeTests>
 							<printFailingErrors>true</printFailingErrors>
 							<rulesets>
diff --git a/crypto-symmetric/pom.xml b/crypto-symmetric/pom.xml
index e55e27fd..daf1fe47 100644
--- a/crypto-symmetric/pom.xml
+++ b/crypto-symmetric/pom.xml
@@ -257,6 +257,7 @@
 						<artifactId>maven-pmd-plugin</artifactId>
 						<version>3.27.0</version>
 						<configuration>
+							<analysisCache>true</analysisCache>
 							<includeTests>true</includeTests>
 							<printFailingErrors>true</printFailingErrors>
 							<rulesets>
diff --git a/csp/pom.xml b/csp/pom.xml
index 41756f8c..dbe0d219 100644
--- a/csp/pom.xml
+++ b/csp/pom.xml
@@ -266,6 +266,7 @@
 						<artifactId>maven-pmd-plugin</artifactId>
 						<version>3.27.0</version>
 						<configuration>
+							<analysisCache>true</analysisCache>
 							<includeTests>true</includeTests>
 							<printFailingErrors>true</printFailingErrors>
 							<rulesets>
diff --git a/demo/pom.xml b/demo/pom.xml
index eac30316..d3edc090 100644
--- a/demo/pom.xml
+++ b/demo/pom.xml
@@ -275,6 +275,7 @@
 						<artifactId>maven-pmd-plugin</artifactId>
 						<version>3.27.0</version>
 						<configuration>
+							<analysisCache>true</analysisCache>
 							<includeTests>true</includeTests>
 							<printFailingErrors>true</printFailingErrors>
 							<rulesets>
diff --git a/metrics/pom.xml b/metrics/pom.xml
index f00695fc..a12d4288 100644
--- a/metrics/pom.xml
+++ b/metrics/pom.xml
@@ -261,6 +261,7 @@
 						<artifactId>maven-pmd-plugin</artifactId>
 						<version>3.27.0</version>
 						<configuration>
+							<analysisCache>true</analysisCache>
 							<includeTests>true</includeTests>
 							<printFailingErrors>true</printFailingErrors>
 							<rulesets>
diff --git a/oauth2-oidc-remember-me/pom.xml b/oauth2-oidc-remember-me/pom.xml
index 3850ee9e..dd231317 100644
--- a/oauth2-oidc-remember-me/pom.xml
+++ b/oauth2-oidc-remember-me/pom.xml
@@ -291,6 +291,7 @@
 						<artifactId>maven-pmd-plugin</artifactId>
 						<version>3.27.0</version>
 						<configuration>
+							<analysisCache>true</analysisCache>
 							<includeTests>true</includeTests>
 							<printFailingErrors>true</printFailingErrors>
 							<rulesets>
diff --git a/oauth2-oidc/pom.xml b/oauth2-oidc/pom.xml
index 0408ef1b..c0c04066 100644
--- a/oauth2-oidc/pom.xml
+++ b/oauth2-oidc/pom.xml
@@ -310,6 +310,7 @@
 						<artifactId>maven-pmd-plugin</artifactId>
 						<version>3.27.0</version>
 						<configuration>
+							<analysisCache>true</analysisCache>
 							<includeTests>true</includeTests>
 							<printFailingErrors>true</printFailingErrors>
 							<rulesets>
diff --git a/vaadin/pom.xml b/vaadin/pom.xml
index f45cc491..dc7cb692 100644
--- a/vaadin/pom.xml
+++ b/vaadin/pom.xml
@@ -307,6 +307,7 @@
 						<artifactId>maven-pmd-plugin</artifactId>
 						<version>3.27.0</version>
 						<configuration>
+							<analysisCache>true</analysisCache>
 							<includeTests>true</includeTests>
 							<printFailingErrors>true</printFailingErrors>
 							<rulesets>
diff --git a/web-sidecar-actuator/pom.xml b/web-sidecar-actuator/pom.xml
index 2ef4efb9..0796784c 100644
--- a/web-sidecar-actuator/pom.xml
+++ b/web-sidecar-actuator/pom.xml
@@ -294,6 +294,7 @@
 						<artifactId>maven-pmd-plugin</artifactId>
 						<version>3.27.0</version>
 						<configuration>
+							<analysisCache>true</analysisCache>
 							<includeTests>true</includeTests>
 							<printFailingErrors>true</printFailingErrors>
 							<rulesets>
diff --git a/web-sidecar-common/pom.xml b/web-sidecar-common/pom.xml
index c84e0f70..468779bf 100644
--- a/web-sidecar-common/pom.xml
+++ b/web-sidecar-common/pom.xml
@@ -271,6 +271,7 @@
 						<artifactId>maven-pmd-plugin</artifactId>
 						<version>3.27.0</version>
 						<configuration>
+							<analysisCache>true</analysisCache>
 							<includeTests>true</includeTests>
 							<printFailingErrors>true</printFailingErrors>
 							<rulesets>
diff --git a/web/pom.xml b/web/pom.xml
index 0aa3e192..2e494c74 100644
--- a/web/pom.xml
+++ b/web/pom.xml
@@ -261,6 +261,7 @@
 						<artifactId>maven-pmd-plugin</artifactId>
 						<version>3.27.0</version>
 						<configuration>
+							<analysisCache>true</analysisCache>
 							<includeTests>true</includeTests>
 							<printFailingErrors>true</printFailingErrors>
 							<rulesets>

From 1ea10c6d1f3bda0927574e2b81c0cc45240d4b82 Mon Sep 17 00:00:00 2001
From: XDEV Renovate Bot <renovate@xdev-software.de>
Date: Wed, 10 Sep 2025 12:50:01 +0000
Subject: [PATCH 24/39] Update com.vaadin to v24.8.8

---
 demo/pom.xml   | 2 +-
 vaadin/pom.xml | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/demo/pom.xml b/demo/pom.xml
index d3edc090..ca29823e 100644
--- a/demo/pom.xml
+++ b/demo/pom.xml
@@ -22,7 +22,7 @@
 		<project.reporting.outputEncoding>UTF-8</project.reporting.outputEncoding>
 
 		<!-- Dependency Version Groups -->
-		<com.vaadin.version>24.8.5</com.vaadin.version>
+		<com.vaadin.version>24.8.8</com.vaadin.version>
 
 		<org.springframework.boot.version>3.5.4</org.springframework.boot.version>
 	</properties>
diff --git a/vaadin/pom.xml b/vaadin/pom.xml
index dc7cb692..2911ec09 100644
--- a/vaadin/pom.xml
+++ b/vaadin/pom.xml
@@ -62,7 +62,7 @@
 			<dependency>
 				<groupId>com.vaadin</groupId>
 				<artifactId>vaadin-bom</artifactId>
-				<version>24.8.5</version>
+				<version>24.8.8</version>
 				<type>pom</type>
 				<scope>import</scope>
 			</dependency>

From c6dd4b9066b6cba7a7d4b64c81473db7a5f6b042 Mon Sep 17 00:00:00 2001
From: XDEV Renovate Bot <renovate@xdev-software.de>
Date: Wed, 10 Sep 2025 12:50:16 +0000
Subject: [PATCH 25/39] Update dependency
 org.apache.maven.plugins:maven-javadoc-plugin to v3.11.3

---
 codec-sha256/pom.xml             | 2 +-
 crypto-symmetric-managed/pom.xml | 2 +-
 crypto-symmetric/pom.xml         | 2 +-
 csp/pom.xml                      | 2 +-
 metrics/pom.xml                  | 2 +-
 oauth2-oidc-remember-me/pom.xml  | 2 +-
 oauth2-oidc/pom.xml              | 2 +-
 vaadin/pom.xml                   | 2 +-
 web-sidecar-actuator/pom.xml     | 2 +-
 web-sidecar-common/pom.xml       | 2 +-
 web/pom.xml                      | 2 +-
 11 files changed, 11 insertions(+), 11 deletions(-)

diff --git a/codec-sha256/pom.xml b/codec-sha256/pom.xml
index 319dff8a..f162bf02 100644
--- a/codec-sha256/pom.xml
+++ b/codec-sha256/pom.xml
@@ -117,7 +117,7 @@
 			<plugin>
 				<groupId>org.apache.maven.plugins</groupId>
 				<artifactId>maven-javadoc-plugin</artifactId>
-				<version>3.11.2</version>
+				<version>3.11.3</version>
 				<executions>
 					<execution>
 						<id>attach-javadocs</id>
diff --git a/crypto-symmetric-managed/pom.xml b/crypto-symmetric-managed/pom.xml
index 6510b8aa..a4a8de32 100644
--- a/crypto-symmetric-managed/pom.xml
+++ b/crypto-symmetric-managed/pom.xml
@@ -143,7 +143,7 @@
 			<plugin>
 				<groupId>org.apache.maven.plugins</groupId>
 				<artifactId>maven-javadoc-plugin</artifactId>
-				<version>3.11.2</version>
+				<version>3.11.3</version>
 				<executions>
 					<execution>
 						<id>attach-javadocs</id>
diff --git a/crypto-symmetric/pom.xml b/crypto-symmetric/pom.xml
index daf1fe47..8c0f9374 100644
--- a/crypto-symmetric/pom.xml
+++ b/crypto-symmetric/pom.xml
@@ -117,7 +117,7 @@
 			<plugin>
 				<groupId>org.apache.maven.plugins</groupId>
 				<artifactId>maven-javadoc-plugin</artifactId>
-				<version>3.11.2</version>
+				<version>3.11.3</version>
 				<executions>
 					<execution>
 						<id>attach-javadocs</id>
diff --git a/csp/pom.xml b/csp/pom.xml
index dbe0d219..a196eb11 100644
--- a/csp/pom.xml
+++ b/csp/pom.xml
@@ -132,7 +132,7 @@
 			<plugin>
 				<groupId>org.apache.maven.plugins</groupId>
 				<artifactId>maven-javadoc-plugin</artifactId>
-				<version>3.11.2</version>
+				<version>3.11.3</version>
 				<executions>
 					<execution>
 						<id>attach-javadocs</id>
diff --git a/metrics/pom.xml b/metrics/pom.xml
index a12d4288..42fa152f 100644
--- a/metrics/pom.xml
+++ b/metrics/pom.xml
@@ -127,7 +127,7 @@
 			<plugin>
 				<groupId>org.apache.maven.plugins</groupId>
 				<artifactId>maven-javadoc-plugin</artifactId>
-				<version>3.11.2</version>
+				<version>3.11.3</version>
 				<executions>
 					<execution>
 						<id>attach-javadocs</id>
diff --git a/oauth2-oidc-remember-me/pom.xml b/oauth2-oidc-remember-me/pom.xml
index dd231317..026d1ebc 100644
--- a/oauth2-oidc-remember-me/pom.xml
+++ b/oauth2-oidc-remember-me/pom.xml
@@ -151,7 +151,7 @@
 			<plugin>
 				<groupId>org.apache.maven.plugins</groupId>
 				<artifactId>maven-javadoc-plugin</artifactId>
-				<version>3.11.2</version>
+				<version>3.11.3</version>
 				<executions>
 					<execution>
 						<id>attach-javadocs</id>
diff --git a/oauth2-oidc/pom.xml b/oauth2-oidc/pom.xml
index c0c04066..1a3e8a7f 100644
--- a/oauth2-oidc/pom.xml
+++ b/oauth2-oidc/pom.xml
@@ -170,7 +170,7 @@
 			<plugin>
 				<groupId>org.apache.maven.plugins</groupId>
 				<artifactId>maven-javadoc-plugin</artifactId>
-				<version>3.11.2</version>
+				<version>3.11.3</version>
 				<executions>
 					<execution>
 						<id>attach-javadocs</id>
diff --git a/vaadin/pom.xml b/vaadin/pom.xml
index dc7cb692..c67a107b 100644
--- a/vaadin/pom.xml
+++ b/vaadin/pom.xml
@@ -173,7 +173,7 @@
 			<plugin>
 				<groupId>org.apache.maven.plugins</groupId>
 				<artifactId>maven-javadoc-plugin</artifactId>
-				<version>3.11.2</version>
+				<version>3.11.3</version>
 				<executions>
 					<execution>
 						<id>attach-javadocs</id>
diff --git a/web-sidecar-actuator/pom.xml b/web-sidecar-actuator/pom.xml
index 0796784c..2fb1ae5e 100644
--- a/web-sidecar-actuator/pom.xml
+++ b/web-sidecar-actuator/pom.xml
@@ -154,7 +154,7 @@
 			<plugin>
 				<groupId>org.apache.maven.plugins</groupId>
 				<artifactId>maven-javadoc-plugin</artifactId>
-				<version>3.11.2</version>
+				<version>3.11.3</version>
 				<executions>
 					<execution>
 						<id>attach-javadocs</id>
diff --git a/web-sidecar-common/pom.xml b/web-sidecar-common/pom.xml
index 468779bf..5476661f 100644
--- a/web-sidecar-common/pom.xml
+++ b/web-sidecar-common/pom.xml
@@ -137,7 +137,7 @@
 			<plugin>
 				<groupId>org.apache.maven.plugins</groupId>
 				<artifactId>maven-javadoc-plugin</artifactId>
-				<version>3.11.2</version>
+				<version>3.11.3</version>
 				<executions>
 					<execution>
 						<id>attach-javadocs</id>
diff --git a/web/pom.xml b/web/pom.xml
index 2e494c74..5b949ff9 100644
--- a/web/pom.xml
+++ b/web/pom.xml
@@ -127,7 +127,7 @@
 			<plugin>
 				<groupId>org.apache.maven.plugins</groupId>
 				<artifactId>maven-javadoc-plugin</artifactId>
-				<version>3.11.2</version>
+				<version>3.11.3</version>
 				<executions>
 					<execution>
 						<id>attach-javadocs</id>

From eecd09bf3701ea30d361cd2e10acbfe2e2d8a673 Mon Sep 17 00:00:00 2001
From: XDEV Renovate Bot <renovate@xdev-software.de>
Date: Wed, 10 Sep 2025 12:50:18 +0000
Subject: [PATCH 26/39] Update dependency org.mariadb.jdbc:mariadb-java-client
 to v3.5.5

---
 demo/pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/demo/pom.xml b/demo/pom.xml
index d3edc090..7c415e04 100644
--- a/demo/pom.xml
+++ b/demo/pom.xml
@@ -105,7 +105,7 @@
 			<dependency>
 				<groupId>org.mariadb.jdbc</groupId>
 				<artifactId>mariadb-java-client</artifactId>
-				<version>3.5.4</version>
+				<version>3.5.5</version>
 				<!-- https://mariadb.com/kb/en/about-mariadb-connector-j/#size-consideration -->
 				<exclusions>
 					<exclusion>

From 0ac7a8dde8f6cae83fb2211e51355ef3f363e003 Mon Sep 17 00:00:00 2001
From: XDEV Renovate Bot <renovate@xdev-software.de>
Date: Wed, 10 Sep 2025 12:50:19 +0000
Subject: [PATCH 27/39] Update dependency
 org.springdoc:springdoc-openapi-starter-webmvc-ui to v2.8.13

---
 demo/pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/demo/pom.xml b/demo/pom.xml
index d3edc090..df04f5fd 100644
--- a/demo/pom.xml
+++ b/demo/pom.xml
@@ -82,7 +82,7 @@
 			<dependency>
 				<groupId>org.springdoc</groupId>
 				<artifactId>springdoc-openapi-starter-webmvc-ui</artifactId>
-				<version>2.8.9</version>
+				<version>2.8.13</version>
 			</dependency>
 
 			<dependency>

From cbf9e52b332e29c40eff4156a5ace82a589df4f5 Mon Sep 17 00:00:00 2001
From: XDEV Renovate Bot <renovate@xdev-software.de>
Date: Wed, 10 Sep 2025 12:50:20 +0000
Subject: [PATCH 28/39] Update dependency
 software.xdev:testcontainers-advanced-imagebuilder to v2.2.1

---
 demo/integration-tests/pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/demo/integration-tests/pom.xml b/demo/integration-tests/pom.xml
index cc6c5ec1..e753963f 100644
--- a/demo/integration-tests/pom.xml
+++ b/demo/integration-tests/pom.xml
@@ -86,7 +86,7 @@
 			<dependency>
 				<groupId>software.xdev</groupId>
 				<artifactId>testcontainers-advanced-imagebuilder</artifactId>
-				<version>2.2.0</version>
+				<version>2.2.1</version>
 			</dependency>
 			<dependency>
 				<groupId>org.testcontainers</groupId>

From 5c65700dc76b60008436b4902e3b5ec73f340ab4 Mon Sep 17 00:00:00 2001
From: XDEV Renovate Bot <renovate@xdev-software.de>
Date: Wed, 10 Sep 2025 12:50:22 +0000
Subject: [PATCH 29/39] Update org.springframework.boot to v3.5.5

---
 crypto-symmetric-managed/pom.xml | 2 +-
 csp/pom.xml                      | 2 +-
 demo/pom.xml                     | 2 +-
 metrics/pom.xml                  | 2 +-
 oauth2-oidc-remember-me/pom.xml  | 2 +-
 oauth2-oidc/pom.xml              | 2 +-
 vaadin/pom.xml                   | 2 +-
 web-sidecar-actuator/pom.xml     | 2 +-
 web-sidecar-common/pom.xml       | 2 +-
 web/pom.xml                      | 2 +-
 10 files changed, 10 insertions(+), 10 deletions(-)

diff --git a/crypto-symmetric-managed/pom.xml b/crypto-symmetric-managed/pom.xml
index 6510b8aa..3646f834 100644
--- a/crypto-symmetric-managed/pom.xml
+++ b/crypto-symmetric-managed/pom.xml
@@ -54,7 +54,7 @@
 			<dependency>
 				<groupId>org.springframework.boot</groupId>
 				<artifactId>spring-boot-dependencies</artifactId>
-				<version>3.5.4</version>
+				<version>3.5.5</version>
 				<type>pom</type>
 				<scope>import</scope>
 			</dependency>
diff --git a/csp/pom.xml b/csp/pom.xml
index dbe0d219..e4b0514b 100644
--- a/csp/pom.xml
+++ b/csp/pom.xml
@@ -54,7 +54,7 @@
 			<dependency>
 				<groupId>org.springframework.boot</groupId>
 				<artifactId>spring-boot-dependencies</artifactId>
-				<version>3.5.4</version>
+				<version>3.5.5</version>
 				<type>pom</type>
 				<scope>import</scope>
 			</dependency>
diff --git a/demo/pom.xml b/demo/pom.xml
index d3edc090..20423acf 100644
--- a/demo/pom.xml
+++ b/demo/pom.xml
@@ -24,7 +24,7 @@
 		<!-- Dependency Version Groups -->
 		<com.vaadin.version>24.8.5</com.vaadin.version>
 
-		<org.springframework.boot.version>3.5.4</org.springframework.boot.version>
+		<org.springframework.boot.version>3.5.5</org.springframework.boot.version>
 	</properties>
 
 	<modules>
diff --git a/metrics/pom.xml b/metrics/pom.xml
index a12d4288..212b3d6e 100644
--- a/metrics/pom.xml
+++ b/metrics/pom.xml
@@ -54,7 +54,7 @@
 			<dependency>
 				<groupId>org.springframework.boot</groupId>
 				<artifactId>spring-boot-dependencies</artifactId>
-				<version>3.5.4</version>
+				<version>3.5.5</version>
 				<type>pom</type>
 				<scope>import</scope>
 			</dependency>
diff --git a/oauth2-oidc-remember-me/pom.xml b/oauth2-oidc-remember-me/pom.xml
index dd231317..b0b810f7 100644
--- a/oauth2-oidc-remember-me/pom.xml
+++ b/oauth2-oidc-remember-me/pom.xml
@@ -54,7 +54,7 @@
 			<dependency>
 				<groupId>org.springframework.boot</groupId>
 				<artifactId>spring-boot-dependencies</artifactId>
-				<version>3.5.4</version>
+				<version>3.5.5</version>
 				<type>pom</type>
 				<scope>import</scope>
 			</dependency>
diff --git a/oauth2-oidc/pom.xml b/oauth2-oidc/pom.xml
index c0c04066..9a0c4882 100644
--- a/oauth2-oidc/pom.xml
+++ b/oauth2-oidc/pom.xml
@@ -54,7 +54,7 @@
 			<dependency>
 				<groupId>org.springframework.boot</groupId>
 				<artifactId>spring-boot-dependencies</artifactId>
-				<version>3.5.4</version>
+				<version>3.5.5</version>
 				<type>pom</type>
 				<scope>import</scope>
 			</dependency>
diff --git a/vaadin/pom.xml b/vaadin/pom.xml
index dc7cb692..e58e5c6e 100644
--- a/vaadin/pom.xml
+++ b/vaadin/pom.xml
@@ -54,7 +54,7 @@
 			<dependency>
 				<groupId>org.springframework.boot</groupId>
 				<artifactId>spring-boot-dependencies</artifactId>
-				<version>3.5.4</version>
+				<version>3.5.5</version>
 				<type>pom</type>
 				<scope>import</scope>
 			</dependency>
diff --git a/web-sidecar-actuator/pom.xml b/web-sidecar-actuator/pom.xml
index 0796784c..b49c3a0e 100644
--- a/web-sidecar-actuator/pom.xml
+++ b/web-sidecar-actuator/pom.xml
@@ -54,7 +54,7 @@
 			<dependency>
 				<groupId>org.springframework.boot</groupId>
 				<artifactId>spring-boot-dependencies</artifactId>
-				<version>3.5.4</version>
+				<version>3.5.5</version>
 				<type>pom</type>
 				<scope>import</scope>
 			</dependency>
diff --git a/web-sidecar-common/pom.xml b/web-sidecar-common/pom.xml
index 468779bf..d7e62457 100644
--- a/web-sidecar-common/pom.xml
+++ b/web-sidecar-common/pom.xml
@@ -54,7 +54,7 @@
 			<dependency>
 				<groupId>org.springframework.boot</groupId>
 				<artifactId>spring-boot-dependencies</artifactId>
-				<version>3.5.4</version>
+				<version>3.5.5</version>
 				<type>pom</type>
 				<scope>import</scope>
 			</dependency>
diff --git a/web/pom.xml b/web/pom.xml
index 2e494c74..b5e3bb25 100644
--- a/web/pom.xml
+++ b/web/pom.xml
@@ -54,7 +54,7 @@
 			<dependency>
 				<groupId>org.springframework.boot</groupId>
 				<artifactId>spring-boot-dependencies</artifactId>
-				<version>3.5.4</version>
+				<version>3.5.5</version>
 				<type>pom</type>
 				<scope>import</scope>
 			</dependency>

From 5de9cfe9f0b26d9c0252a8ce79036d725972baff Mon Sep 17 00:00:00 2001
From: XDEV Renovate Bot <renovate@xdev-software.de>
Date: Wed, 10 Sep 2025 12:50:23 +0000
Subject: [PATCH 30/39] Update dependency
 org.seleniumhq.selenium:selenium-dependencies-bom to v4.35.0

---
 demo/integration-tests/pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/demo/integration-tests/pom.xml b/demo/integration-tests/pom.xml
index cc6c5ec1..6797d73e 100644
--- a/demo/integration-tests/pom.xml
+++ b/demo/integration-tests/pom.xml
@@ -62,7 +62,7 @@
 			<dependency>
 				<groupId>org.seleniumhq.selenium</groupId>
 				<artifactId>selenium-dependencies-bom</artifactId>
-				<version>4.34.0</version>
+				<version>4.35.0</version>
 				<type>pom</type>
 				<scope>import</scope>
 			</dependency>

From 026ded8c5e16ebb0d09829b92d032f01653a21a3 Mon Sep 17 00:00:00 2001
From: XDEV Renovate Bot <renovate@xdev-software.de>
Date: Wed, 10 Sep 2025 12:50:24 +0000
Subject: [PATCH 31/39] Update actions/checkout action to v5

---
 .github/workflows/run-integration-tests.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/run-integration-tests.yml b/.github/workflows/run-integration-tests.yml
index a067cfdc..6bdafd04 100644
--- a/.github/workflows/run-integration-tests.yml
+++ b/.github/workflows/run-integration-tests.yml
@@ -35,7 +35,7 @@ jobs:
     runs-on: ubuntu-latest
     if: ${{ !(github.event_name == 'pull_request' && startsWith(github.head_ref, 'renovate/')) }}
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v5
 
     - name: Set up JDK
       uses: actions/setup-java@v4

From 42700b9b1fcd248408dca9d772ce19942ea51c00 Mon Sep 17 00:00:00 2001
From: XDEV Renovate Bot <renovate@xdev-software.de>
Date: Wed, 10 Sep 2025 12:50:26 +0000
Subject: [PATCH 32/39] Update actions/setup-java action to v5

---
 .github/workflows/run-integration-tests.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/run-integration-tests.yml b/.github/workflows/run-integration-tests.yml
index a067cfdc..f3d42ffc 100644
--- a/.github/workflows/run-integration-tests.yml
+++ b/.github/workflows/run-integration-tests.yml
@@ -38,7 +38,7 @@ jobs:
     - uses: actions/checkout@v4
 
     - name: Set up JDK
-      uses: actions/setup-java@v4
+      uses: actions/setup-java@v5
       with:
         distribution: temurin
         java-version: ${{ matrix.java }}

From 9db52d644c4da5ffb1fdc3dba9c5167e1fa1fa4c Mon Sep 17 00:00:00 2001
From: AB <a.bierler@xdev-software.de>
Date: Wed, 10 Sep 2025 14:53:28 +0200
Subject: [PATCH 33/39] Use mariadb lts

---
 demo/_dev_infra/docker-compose.yml       | 2 +-
 demo/integration-tests/tci-db/Dockerfile | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/demo/_dev_infra/docker-compose.yml b/demo/_dev_infra/docker-compose.yml
index b3e1068a..e0d2e999 100644
--- a/demo/_dev_infra/docker-compose.yml
+++ b/demo/_dev_infra/docker-compose.yml
@@ -1,7 +1,7 @@
 services:
   db:
     container_name: "db"
-    image: mariadb:11
+    image: mariadb:lts
     env_file: db.env
     ports:
       - "3306:3306"
diff --git a/demo/integration-tests/tci-db/Dockerfile b/demo/integration-tests/tci-db/Dockerfile
index afb54e8f..4ef81004 100644
--- a/demo/integration-tests/tci-db/Dockerfile
+++ b/demo/integration-tests/tci-db/Dockerfile
@@ -1,4 +1,4 @@
-FROM mariadb:11.8
+FROM mariadb:lts
 
 SHELL ["/bin/bash", "-c"]
 

From ae057cba9dd3f87fec7d84e34098d0672e076dc8 Mon Sep 17 00:00:00 2001
From: AB <a.bierler@xdev-software.de>
Date: Wed, 10 Sep 2025 15:04:23 +0200
Subject: [PATCH 34/39] Use constructor injection

---
 .../sse/web/cookie/DefaultCookieSecureService.java     | 10 +++-------
 .../xdev/sse/web/cookie/auto/CookieAutoConfig.java     |  6 ++++--
 2 files changed, 7 insertions(+), 9 deletions(-)

diff --git a/web/src/main/java/software/xdev/sse/web/cookie/DefaultCookieSecureService.java b/web/src/main/java/software/xdev/sse/web/cookie/DefaultCookieSecureService.java
index 559bb2bd..d175be00 100644
--- a/web/src/main/java/software/xdev/sse/web/cookie/DefaultCookieSecureService.java
+++ b/web/src/main/java/software/xdev/sse/web/cookie/DefaultCookieSecureService.java
@@ -15,11 +15,8 @@
  */
 package software.xdev.sse.web.cookie;
 
-import jakarta.annotation.PostConstruct;
-
 import org.slf4j.Logger;
 import org.slf4j.LoggerFactory;
-import org.springframework.beans.factory.annotation.Value;
 
 
 public class DefaultCookieSecureService implements CookieSecureService
@@ -33,12 +30,11 @@ public class DefaultCookieSecureService implements CookieSecureService
 	 * https://www.baeldung.com/spring-security-session
 	 * </a>
 	 */
-	@Value("${server.servlet.session.cookie.secure:true}")
-	private boolean secure;
+	private final boolean secure;
 	
-	@PostConstruct
-	protected void postConstruct()
+	public DefaultCookieSecureService(final boolean secure)
 	{
+		this.secure = secure;
 		if(!this.secure)
 		{
 			LOG.info("Cookies will NOT be secured (as defined in 'server.servlet.session.cookie.secure')");
diff --git a/web/src/main/java/software/xdev/sse/web/cookie/auto/CookieAutoConfig.java b/web/src/main/java/software/xdev/sse/web/cookie/auto/CookieAutoConfig.java
index fca611a0..7b1371f8 100644
--- a/web/src/main/java/software/xdev/sse/web/cookie/auto/CookieAutoConfig.java
+++ b/web/src/main/java/software/xdev/sse/web/cookie/auto/CookieAutoConfig.java
@@ -15,6 +15,7 @@
  */
 package software.xdev.sse.web.cookie.auto;
 
+import org.springframework.beans.factory.annotation.Value;
 import org.springframework.boot.autoconfigure.AutoConfiguration;
 import org.springframework.boot.autoconfigure.condition.ConditionalOnMissingBean;
 import org.springframework.boot.autoconfigure.condition.ConditionalOnProperty;
@@ -31,9 +32,10 @@ public class CookieAutoConfig
 {
 	@ConditionalOnMissingBean
 	@Bean
-	public CookieSecureService cookieSecureService()
+	public CookieSecureService cookieSecureService(
+		@Value("${server.servlet.session.cookie.secure:true}") final boolean secure)
 	{
-		return new DefaultCookieSecureService();
+		return new DefaultCookieSecureService(secure);
 	}
 	
 	@ConditionalOnMissingBean

From bfe0a04dff4bb1c1a6d4a73e0e4bd9af6832fe32 Mon Sep 17 00:00:00 2001
From: AB <a.bierler@xdev-software.de>
Date: Wed, 10 Sep 2025 15:05:22 +0200
Subject: [PATCH 35/39] Update CHANGELOG.md

---
 CHANGELOG.md | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 514b7460..f619fc78 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,3 +1,7 @@
+# 1.2.2
+* Minor code cleanup
+* Updated dependencies
+
 # 1.2.1
 * Added more tests
 * Updated dependencies

From cad78d3d784ec51beeaa96d0d8b0af2bcbbea0cd Mon Sep 17 00:00:00 2001
From: XDEV Renovate Bot <renovate@xdev-software.de>
Date: Wed, 10 Sep 2025 13:05:37 +0000
Subject: [PATCH 36/39] Update dependency com.puppycrawl.tools:checkstyle to
 v11.0.1

---
 codec-sha256/pom.xml             | 2 +-
 crypto-symmetric-managed/pom.xml | 2 +-
 crypto-symmetric/pom.xml         | 2 +-
 csp/pom.xml                      | 2 +-
 demo/pom.xml                     | 2 +-
 metrics/pom.xml                  | 2 +-
 oauth2-oidc-remember-me/pom.xml  | 2 +-
 oauth2-oidc/pom.xml              | 2 +-
 vaadin/pom.xml                   | 2 +-
 web-sidecar-actuator/pom.xml     | 2 +-
 web-sidecar-common/pom.xml       | 2 +-
 web/pom.xml                      | 2 +-
 12 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/codec-sha256/pom.xml b/codec-sha256/pom.xml
index f162bf02..7e8fe4ba 100644
--- a/codec-sha256/pom.xml
+++ b/codec-sha256/pom.xml
@@ -230,7 +230,7 @@
 							<dependency>
 								<groupId>com.puppycrawl.tools</groupId>
 								<artifactId>checkstyle</artifactId>
-								<version>11.0.0</version>
+								<version>11.0.1</version>
 							</dependency>
 						</dependencies>
 						<configuration>
diff --git a/crypto-symmetric-managed/pom.xml b/crypto-symmetric-managed/pom.xml
index 19e5ba4d..42039b35 100644
--- a/crypto-symmetric-managed/pom.xml
+++ b/crypto-symmetric-managed/pom.xml
@@ -250,7 +250,7 @@
 							<dependency>
 								<groupId>com.puppycrawl.tools</groupId>
 								<artifactId>checkstyle</artifactId>
-								<version>11.0.0</version>
+								<version>11.0.1</version>
 							</dependency>
 						</dependencies>
 						<configuration>
diff --git a/crypto-symmetric/pom.xml b/crypto-symmetric/pom.xml
index 8c0f9374..fa3acf46 100644
--- a/crypto-symmetric/pom.xml
+++ b/crypto-symmetric/pom.xml
@@ -230,7 +230,7 @@
 							<dependency>
 								<groupId>com.puppycrawl.tools</groupId>
 								<artifactId>checkstyle</artifactId>
-								<version>11.0.0</version>
+								<version>11.0.1</version>
 							</dependency>
 						</dependencies>
 						<configuration>
diff --git a/csp/pom.xml b/csp/pom.xml
index afff6591..6df738d8 100644
--- a/csp/pom.xml
+++ b/csp/pom.xml
@@ -239,7 +239,7 @@
 							<dependency>
 								<groupId>com.puppycrawl.tools</groupId>
 								<artifactId>checkstyle</artifactId>
-								<version>11.0.0</version>
+								<version>11.0.1</version>
 							</dependency>
 						</dependencies>
 						<configuration>
diff --git a/demo/pom.xml b/demo/pom.xml
index c37518fb..2e564d28 100644
--- a/demo/pom.xml
+++ b/demo/pom.xml
@@ -248,7 +248,7 @@
 							<dependency>
 								<groupId>com.puppycrawl.tools</groupId>
 								<artifactId>checkstyle</artifactId>
-								<version>11.0.0</version>
+								<version>11.0.1</version>
 							</dependency>
 						</dependencies>
 						<configuration>
diff --git a/metrics/pom.xml b/metrics/pom.xml
index 324a4fd3..be488345 100644
--- a/metrics/pom.xml
+++ b/metrics/pom.xml
@@ -234,7 +234,7 @@
 							<dependency>
 								<groupId>com.puppycrawl.tools</groupId>
 								<artifactId>checkstyle</artifactId>
-								<version>11.0.0</version>
+								<version>11.0.1</version>
 							</dependency>
 						</dependencies>
 						<configuration>
diff --git a/oauth2-oidc-remember-me/pom.xml b/oauth2-oidc-remember-me/pom.xml
index f68fbd11..1ac01d73 100644
--- a/oauth2-oidc-remember-me/pom.xml
+++ b/oauth2-oidc-remember-me/pom.xml
@@ -264,7 +264,7 @@
 							<dependency>
 								<groupId>com.puppycrawl.tools</groupId>
 								<artifactId>checkstyle</artifactId>
-								<version>11.0.0</version>
+								<version>11.0.1</version>
 							</dependency>
 						</dependencies>
 						<configuration>
diff --git a/oauth2-oidc/pom.xml b/oauth2-oidc/pom.xml
index 0abffb89..b2ebd07a 100644
--- a/oauth2-oidc/pom.xml
+++ b/oauth2-oidc/pom.xml
@@ -283,7 +283,7 @@
 							<dependency>
 								<groupId>com.puppycrawl.tools</groupId>
 								<artifactId>checkstyle</artifactId>
-								<version>11.0.0</version>
+								<version>11.0.1</version>
 							</dependency>
 						</dependencies>
 						<configuration>
diff --git a/vaadin/pom.xml b/vaadin/pom.xml
index db6502d3..38e458a2 100644
--- a/vaadin/pom.xml
+++ b/vaadin/pom.xml
@@ -280,7 +280,7 @@
 							<dependency>
 								<groupId>com.puppycrawl.tools</groupId>
 								<artifactId>checkstyle</artifactId>
-								<version>11.0.0</version>
+								<version>11.0.1</version>
 							</dependency>
 						</dependencies>
 						<configuration>
diff --git a/web-sidecar-actuator/pom.xml b/web-sidecar-actuator/pom.xml
index fc031a64..8b000ef9 100644
--- a/web-sidecar-actuator/pom.xml
+++ b/web-sidecar-actuator/pom.xml
@@ -267,7 +267,7 @@
 							<dependency>
 								<groupId>com.puppycrawl.tools</groupId>
 								<artifactId>checkstyle</artifactId>
-								<version>11.0.0</version>
+								<version>11.0.1</version>
 							</dependency>
 						</dependencies>
 						<configuration>
diff --git a/web-sidecar-common/pom.xml b/web-sidecar-common/pom.xml
index 4aedf0ba..f81bdf00 100644
--- a/web-sidecar-common/pom.xml
+++ b/web-sidecar-common/pom.xml
@@ -244,7 +244,7 @@
 							<dependency>
 								<groupId>com.puppycrawl.tools</groupId>
 								<artifactId>checkstyle</artifactId>
-								<version>11.0.0</version>
+								<version>11.0.1</version>
 							</dependency>
 						</dependencies>
 						<configuration>
diff --git a/web/pom.xml b/web/pom.xml
index 466a4751..c67a309c 100644
--- a/web/pom.xml
+++ b/web/pom.xml
@@ -234,7 +234,7 @@
 							<dependency>
 								<groupId>com.puppycrawl.tools</groupId>
 								<artifactId>checkstyle</artifactId>
-								<version>11.0.0</version>
+								<version>11.0.1</version>
 							</dependency>
 						</dependencies>
 						<configuration>

From c4d99bbfb781549d1685df6afd22f025bb61a3e5 Mon Sep 17 00:00:00 2001
From: XDEV Renovate Bot <renovate@xdev-software.de>
Date: Wed, 10 Sep 2025 13:05:43 +0000
Subject: [PATCH 37/39] Update dependency software.xdev.tci:bom to v2.6.0

---
 demo/integration-tests/pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/demo/integration-tests/pom.xml b/demo/integration-tests/pom.xml
index 954534c7..27a2a117 100644
--- a/demo/integration-tests/pom.xml
+++ b/demo/integration-tests/pom.xml
@@ -99,7 +99,7 @@
 			<dependency>
 				<groupId>software.xdev.tci</groupId>
 				<artifactId>bom</artifactId>
-				<version>2.4.1</version>
+				<version>2.6.0</version>
 				<type>pom</type>
 				<scope>import</scope>
 			</dependency>

From 94e1c2299dca808eeebf0604e70b50eab6ce5516 Mon Sep 17 00:00:00 2001
From: AB <a.bierler@xdev-software.de>
Date: Wed, 10 Sep 2025 15:06:42 +0200
Subject: [PATCH 38/39] Fix pmd

---
 .../src/main/java/software/xdev/sse/demo/Application.java        | 1 +
 .../src/main/java/software/xdev/sse/demo/Application.java        | 1 +
 2 files changed, 2 insertions(+)

diff --git a/demo/webapp-rest/src/main/java/software/xdev/sse/demo/Application.java b/demo/webapp-rest/src/main/java/software/xdev/sse/demo/Application.java
index dc5515b1..6e8e5b66 100644
--- a/demo/webapp-rest/src/main/java/software/xdev/sse/demo/Application.java
+++ b/demo/webapp-rest/src/main/java/software/xdev/sse/demo/Application.java
@@ -12,6 +12,7 @@
 @SpringBootApplication
 public class Application
 {
+	@SuppressWarnings("PMD.AvoidSystemSetterCall")
 	public static void main(final String[] args)
 	{
 		System.setProperty(
diff --git a/demo/webapp-vaadin/src/main/java/software/xdev/sse/demo/Application.java b/demo/webapp-vaadin/src/main/java/software/xdev/sse/demo/Application.java
index 7625e89e..abbc749d 100644
--- a/demo/webapp-vaadin/src/main/java/software/xdev/sse/demo/Application.java
+++ b/demo/webapp-vaadin/src/main/java/software/xdev/sse/demo/Application.java
@@ -22,6 +22,7 @@
 @EnableAutoConfiguration(exclude = {ErrorMvcAutoConfiguration.class})
 public class Application
 {
+	@SuppressWarnings("PMD.AvoidSystemSetterCall")
 	public static void main(final String[] args)
 	{
 		System.setProperty(

From 69311a2a951825183105c893bedc7b88730e8f5e Mon Sep 17 00:00:00 2001
From: AB <a.bierler@xdev-software.de>
Date: Wed, 10 Sep 2025 15:17:21 +0200
Subject: [PATCH 39/39] Update to tci v2.6

---
 .../main/java/software/xdev/sse/demo/tci/db/DBTCI.java | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/demo/integration-tests/tci-db/src/main/java/software/xdev/sse/demo/tci/db/DBTCI.java b/demo/integration-tests/tci-db/src/main/java/software/xdev/sse/demo/tci/db/DBTCI.java
index cbfb7752..974949bc 100644
--- a/demo/integration-tests/tci-db/src/main/java/software/xdev/sse/demo/tci/db/DBTCI.java
+++ b/demo/integration-tests/tci-db/src/main/java/software/xdev/sse/demo/tci/db/DBTCI.java
@@ -5,8 +5,6 @@
 
 import javax.sql.DataSource;
 
-import jakarta.persistence.Entity;
-
 import org.mariadb.jdbc.MariaDbDataSource;
 import org.slf4j.Logger;
 import org.slf4j.LoggerFactory;
@@ -16,7 +14,7 @@
 import software.xdev.sse.demo.persistence.config.DefaultJPAConfig;
 import software.xdev.sse.demo.tci.db.containers.DBContainer;
 import software.xdev.tci.db.BaseDBTCI;
-import software.xdev.tci.db.persistence.classfinder.DynamicClassFinder;
+import software.xdev.tci.db.persistence.classfinder.DynamicPersistenceClassFinder;
 import software.xdev.tci.db.persistence.hibernate.HibernateEntityManagerControllerFactory;
 
 
@@ -29,6 +27,9 @@ public class DBTCI extends BaseDBTCI<DBContainer>
 	@SuppressWarnings("java:S2068") // This is a test calm down
 	public static final String DB_PASSWORD = "test";
 	
+	private static final DynamicPersistenceClassFinder ENTITY_CLASSES_FINDER = new DynamicPersistenceClassFinder()
+		.withSearchForPersistenceClasses(DefaultJPAConfig.ENTITY_PACKAGE);
+	
 	public DBTCI(
 		final DBContainer container,
 		final String networkAlias,
@@ -38,8 +39,7 @@ public DBTCI(
 			container,
 			networkAlias,
 			migrateAndInitializeEMC,
-			() -> new HibernateEntityManagerControllerFactory(new DynamicClassFinder()
-				.withSearchForAnnotatedClasses(DefaultJPAConfig.ENTITY_PACKAGE, Entity.class)));
+			() -> new HibernateEntityManagerControllerFactory(ENTITY_CLASSES_FINDER));
 		this.withDatabase(DB_DATABASE)
 			.withUsername(DB_USERNAME)
 			.withPassword(DB_PASSWORD);