🐛 Bug fixes

• JENKINS-75914 - Do not mask empty secrets (#378) @Kevin-CB

📦 Dependency updates

• Bump io.jenkins.tools.bom:bom-2.479.x from 4488.v7fe26526366e to 5043.v855ff4819a_0f (#375) @dependabot[bot]
• Bump org.xmlunit:xmlunit-matchers from 2.10.0 to 2.10.3 (#370) @dependabot[bot]
• Bump org.jenkins-ci.plugins:plugin from 5.9 to 5.18 (#372) @dependabot[bot]
• Bump io.jenkins.tools.incrementals:git-changelist-maven-extension from 1.8 to 1.10 (#374) @dependabot[bot]

🔒 Security

• Fix SECURITY-3499

🔒 Security

• Fix SECURITY-3499
  Backport of 696.v256688029804 on top of 687.v619cb_15e923f.

✍ Other changes

• Enable Jenkins Security Scan (#311) @strangelookingnerd

📦 Dependency updates

• Require Java 17 or newer; migrate to EE 9 (#318) @basil
• Bump org.jenkins-ci.plugins:plugin from 4.86 to 4.88 (#316) @dependabot
• Bump org.jenkins-ci.plugins:plugin from 4.81 to 4.86 (#314) @dependabot

👷 Changes for plugin developers

• Remove missed occurence of FileOnMasterKeyStoreSource (#312) @jtnord

👻 Maintenance

• do not rely on long deprecated FileOnMasterKeyStoreSource (#310) @jtnord

🐛 Bug fixes

• JENKINS-72412 - Overmasking when trivial “secrets” bound (#306) @jglick

👻 Maintenance

• Improved usage of MissingContextVariableException (#288) @jglick

📦 Dependency updates

• Bump io.jenkins.tools.bom:bom-2.414.x from 2746.vb_79a_1d3e7b_c8 to 2982.vdce2153031a_0 (#305) @dependabot
• Bump org.xmlunit:xmlunit-matchers from 2.9.1 to 2.10.0 (#307) @dependabot
• Bump org.jenkins-ci.plugins:plugin from 4.79 to 4.81 (#304) @dependabot
• Bump io.jenkins.tools.incrementals:git-changelist-maven-extension from 1.7 to 1.8 (#303) @dependabot
• Bump org.jenkins-ci.plugins:plugin from 4.77 to 4.79 (#297) @dependabot
• Bump io.jenkins.tools.bom:bom-2.414.x from 2543.vfb_1a_5fb_9496d to 2746.vb_79a_1d3e7b_c8 (#289) @dependabot

👷 Changes for plugin developers

• Fixes invalid context expectation in test (#287) @alecharp

📦 Dependency updates

• Suppress warnings for spotbugs 4.8.3 (#286) @MarkEWaite
• Bump org.jenkins-ci.plugins:plugin from 4.75 to 4.76 (#285) @dependabot
• Bump io.jenkins.tools.bom:bom-2.387.x from 2244.vd60654536b_96 to 2543.vfb_1a_5fb_9496d (#282) @dependabot
• jep-227 downstream usage (#280) @Vlatombe
• Bump org.jenkins-ci.plugins:plugin from 4.74 to 4.75 (#281) @dependabot

👷 Changes for plugin developers

• Ignore temporary files in BindingStepTest.grep (#279) @jglick

👻 Maintenance

• Test with Java 21 (#273) @MarkEWaite

📦 Dependency updates

• Bump org.jenkins-ci.plugins:plugin from 4.73 to 4.74 (#276) @dependabot

🚀 New features and improvements

• Add base64 masking (#269) @Kevin-CB

📦 Dependency updates

• Bump org.jenkins-ci.plugins:plugin from 4.71 to 4.73 (#267) @dependabot