From 6d4f14a592a22c54884ef2825078ef59de5d9cd4 Mon Sep 17 00:00:00 2001
From: Jeremy Landis <jeremylandis@hotmail.com>
Date: Sat, 26 Apr 2025 18:30:38 -0400
Subject: [PATCH 1/6] [mvn] Bump maven profiler to 3.3

---
 .mvn/extensions.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.mvn/extensions.xml b/.mvn/extensions.xml
index 4f203dfa..7595078b 100644
--- a/.mvn/extensions.xml
+++ b/.mvn/extensions.xml
@@ -15,6 +15,6 @@
     <extension>
       <groupId>fr.jcgay.maven</groupId>
       <artifactId>maven-profiler</artifactId>
-      <version>3.2</version>
+      <version>3.3</version>
     </extension>
 </extensions>

From 3308879532b46d5b519eda5515f216357ed6ff98 Mon Sep 17 00:00:00 2001
From: Jeremy Landis <jeremylandis@hotmail.com>
Date: Sun, 27 Apr 2025 18:52:11 -0400
Subject: [PATCH 2/6] [gha] Drop java 23, add java 24 and 25-ea

---
 .github/workflows/ci.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 8e4fbd98..5cc529b4 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -9,7 +9,7 @@ jobs:
       matrix:
         cache: [maven]
         distribution: [temurin]
-        java: [17, 21, 23]
+        java: [17, 21, 24, 25-ea]
         os: [ubuntu-latest, macos-latest, windows-latest]
       fail-fast: false
       max-parallel: 4

From bdac47aac2f2cc31d69631cee279d239a4f58227 Mon Sep 17 00:00:00 2001
From: Jeremy Landis <jeremylandis@hotmail.com>
Date: Sun, 27 Apr 2025 18:52:20 -0400
Subject: [PATCH 3/6] [site] Bump fluido to 2.1.0

---
 src/site/site.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/site/site.xml b/src/site/site.xml
index a9a60dfc..fe7d4ea0 100644
--- a/src/site/site.xml
+++ b/src/site/site.xml
@@ -22,7 +22,7 @@
     <skin>
         <groupId>org.apache.maven.skins</groupId>
         <artifactId>maven-fluido-skin</artifactId>
-        <version>2.0.1</version>
+        <version>2.1.0</version>
     </skin>
     <custom>
         <fluidoSkin>

From 2016beb1c4b2e46c8a6d008a62d480aed306fe1c Mon Sep 17 00:00:00 2001
From: Jeremy Landis <jeremylandis@hotmail.com>
Date: Wed, 30 Apr 2025 20:50:50 -0400
Subject: [PATCH 4/6] [mvn] Update settings to central

---
 .mvn/settings.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.mvn/settings.xml b/.mvn/settings.xml
index 47fbda5f..3796f002 100644
--- a/.mvn/settings.xml
+++ b/.mvn/settings.xml
@@ -17,7 +17,7 @@
   <servers>
     <!-- Used for sonatype snapshots and releases -->
     <server>
-      <id>ossrh</id>
+      <id>central</id>
       <username>${env.CI_DEPLOY_USERNAME}</username>
       <password>${env.CI_DEPLOY_PASSWORD}</password>
     </server>

From 40dd30c8b48a9992b8adfc10f353482fa9d899f6 Mon Sep 17 00:00:00 2001
From: Jeremy Landis <jeremylandis@hotmail.com>
Date: Wed, 30 Apr 2025 21:20:57 -0400
Subject: [PATCH 5/6] [mvn] Remove deploy username for site

---
 .mvn/settings.xml | 1 -
 1 file changed, 1 deletion(-)

diff --git a/.mvn/settings.xml b/.mvn/settings.xml
index 3796f002..96385ecb 100644
--- a/.mvn/settings.xml
+++ b/.mvn/settings.xml
@@ -34,7 +34,6 @@
     <!-- Github deployments (site) -->
     <server>
       <id>github</id>
-      <username>${env.CI_DEPLOY_USERNAME}</username>
       <password>${env.GITHUB_TOKEN}</password>
     </server>
 

From b4d753db429b84c625d6afc4beeac2e83db45457 Mon Sep 17 00:00:00 2001
From: Jeremy Landis <jeremylandis@hotmail.com>
Date: Sat, 3 May 2025 15:45:43 -0400
Subject: [PATCH 6/6] [gha] Add explicit permissions

---
 .github/workflows/ci.yaml        | 2 ++
 .github/workflows/coveralls.yaml | 2 ++
 .github/workflows/sonatype.yaml  | 2 ++
 3 files changed, 6 insertions(+)

diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 5cc529b4..6df21c05 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -2,6 +2,8 @@ name: Java CI
 
 on: [workflow_dispatch, push, pull_request]
 
+permissions: read-all
+
 jobs:
   test:
     runs-on: ${{ matrix.os }}
diff --git a/.github/workflows/coveralls.yaml b/.github/workflows/coveralls.yaml
index 78e9d000..ea89ba0e 100644
--- a/.github/workflows/coveralls.yaml
+++ b/.github/workflows/coveralls.yaml
@@ -2,6 +2,8 @@ name: Coveralls
 
 on: [push, pull_request]
 
+permissions: read-all
+
 jobs:
   build:
     if: github.repository_owner == '42BV'
diff --git a/.github/workflows/sonatype.yaml b/.github/workflows/sonatype.yaml
index 265e31e9..e6cc4f72 100644
--- a/.github/workflows/sonatype.yaml
+++ b/.github/workflows/sonatype.yaml
@@ -5,6 +5,8 @@ on:
     branches:
       - master
 
+permissions: read-all
+
 jobs:
   build:
     if: github.repository_owner == 'hazendaz' && ! contains(toJSON(github.event.head_commit.message), '[maven-release-plugin]')