Group upgrade and remove useless spotbugs annotation

plugin-modernizer-core/src/main/java/io/jenkins/tools/pluginmodernizer/core/config/Config.java

@@ -1,6 +1,5 @@
 package io.jenkins.tools.pluginmodernizer.core.config;
 
-import edu.umd.cs.findbugs.annotations.SuppressFBWarnings;
 import io.jenkins.tools.pluginmodernizer.core.model.Plugin;
 import io.jenkins.tools.pluginmodernizer.core.model.Recipe;
 import java.net.URL;
@@ -9,7 +8,6 @@
 
 public class Config {
 
-    @SuppressFBWarnings(value = "MS_SHOULD_BE_FINAL", justification = "Because usage on ConsoleLogFilter")
     private static boolean DEBUG = false;
 
     public static void setDebug(boolean debug) {

plugin-modernizer-core/src/main/java/io/jenkins/tools/pluginmodernizer/core/github/GHService.java

@@ -1,6 +1,5 @@
 package io.jenkins.tools.pluginmodernizer.core.github;
 
-import edu.umd.cs.findbugs.annotations.SuppressFBWarnings;
 import io.jenkins.tools.pluginmodernizer.core.config.Config;
 import io.jenkins.tools.pluginmodernizer.core.config.Settings;
 import io.jenkins.tools.pluginmodernizer.core.model.ModernizerException;
@@ -54,7 +53,6 @@
 import org.slf4j.Logger;
 import org.slf4j.LoggerFactory;
 
-@SuppressFBWarnings(value = "PATH_TRAVERSAL_IN", justification = "false positive")
 public class GHService {
 
     private static final Logger LOG = LoggerFactory.getLogger(GHService.class);

plugin-modernizer-core/src/main/java/io/jenkins/tools/pluginmodernizer/core/impl/MavenInvoker.java

@@ -1,7 +1,6 @@
 package io.jenkins.tools.pluginmodernizer.core.impl;
 
 import edu.umd.cs.findbugs.annotations.Nullable;
-import edu.umd.cs.findbugs.annotations.SuppressFBWarnings;
 import io.jenkins.tools.pluginmodernizer.core.config.Config;
 import io.jenkins.tools.pluginmodernizer.core.config.Settings;
 import io.jenkins.tools.pluginmodernizer.core.model.JDK;
@@ -26,7 +25,6 @@
 import org.slf4j.Logger;
 import org.slf4j.LoggerFactory;
 
-@SuppressFBWarnings(value = "PATH_TRAVERSAL_IN", justification = "false positive")
 public class MavenInvoker {
 
     /**

plugin-modernizer-core/src/main/java/io/jenkins/tools/pluginmodernizer/core/recipes/EnsureIndexJelly.java

@@ -1,6 +1,5 @@
 package io.jenkins.tools.pluginmodernizer.core.recipes;
 
-import edu.umd.cs.findbugs.annotations.SuppressFBWarnings;
 import io.jenkins.tools.pluginmodernizer.core.extractor.ArchetypeCommonFile;
 import io.jenkins.tools.pluginmodernizer.core.extractor.PluginMetadata;
 import io.jenkins.tools.pluginmodernizer.core.extractor.PomResolutionVisitor;
@@ -63,7 +62,6 @@ public ShouldCreate getInitialValue(ExecutionContext ctx) {
     }
 
     @Override
-    @SuppressFBWarnings("NP_NULL_ON_SOME_PATH_FROM_RETURN_VALUE")
     public TreeVisitor<?, ExecutionContext> getScanner(ShouldCreate shouldCreate) {
         PluginMetadata metadata = new PluginMetadata();
         return new TreeVisitor<>() {

plugin-modernizer-core/src/main/java/io/jenkins/tools/pluginmodernizer/core/recipes/RemoveReleaseDrafter.java

@@ -1,6 +1,5 @@
 package io.jenkins.tools.pluginmodernizer.core.recipes;
 
-import edu.umd.cs.findbugs.annotations.SuppressFBWarnings;
 import io.jenkins.tools.pluginmodernizer.core.extractor.ArchetypeCommonFile;
 import java.util.concurrent.atomic.AtomicBoolean;
 import org.openrewrite.ExecutionContext;
@@ -14,7 +13,6 @@
 /**
  * Remove release drafter if CD is in place (overlap of workflow)
  */
-@SuppressFBWarnings(value = "PATH_TRAVERSAL_IN", justification = "No user input")
 public class RemoveReleaseDrafter extends ScanningRecipe<AtomicBoolean> {
 
     /**

plugin-modernizer-core/src/main/java/io/jenkins/tools/pluginmodernizer/core/recipes/SetupDependabot.java

@@ -1,6 +1,5 @@
 package io.jenkins.tools.pluginmodernizer.core.recipes;
 
-import edu.umd.cs.findbugs.annotations.SuppressFBWarnings;
 import io.jenkins.tools.pluginmodernizer.core.extractor.ArchetypeCommonFile;
 import java.util.Collection;
 import java.util.Collections;
@@ -19,7 +18,6 @@
 /**
  * Setup Dependabot.
  */
-@SuppressFBWarnings(value = "PATH_TRAVERSAL_IN", justification = "No user input")
 public class SetupDependabot extends ScanningRecipe<AtomicBoolean> {
 
     /**

pom.xml

@@ -5,7 +5,7 @@
   <parent>
     <groupId>org.jenkins-ci</groupId>
     <artifactId>jenkins</artifactId>
-    <version>1.128</version>
+    <version>1.130</version>
     <relativePath />
   </parent>
 
@@ -59,8 +59,9 @@
     <gson.version>2.12.1</gson.version>
     <jackson.version>2.17.2</jackson.version>
     <maven.version>3.9.9</maven.version>
+    <commons-codec.version>1.18.0</commons-codec.version>
     <jacoco-maven-plugin.version>0.8.12</jacoco-maven-plugin.version>
-    <jgit.version>7.1.0.202411261347-r</jgit.version>
+    <jgit.version>7.2.0.202503040940-r</jgit.version>
     <github-api.version>2.0-alpha-3</github-api.version>
     <commons-compress.version>1.27.1</commons-compress.version>
     <guava.version>33.4.0-jre</guava.version>
@@ -130,6 +131,11 @@
         <artifactId>guice</artifactId>
         <version>${guice.version}</version>
       </dependency>
+      <dependency>
+        <groupId>commons-codec</groupId>
+        <artifactId>commons-codec</artifactId>
+        <version>${commons-codec.version}</version>
+      </dependency>
       <dependency>
         <groupId>commons-io</groupId>
         <artifactId>commons-io</artifactId>