Update from template (auto-merged)

.config/checkstyle/checkstyle.xml

@@ -146,6 +146,7 @@
 		<module name="UnnecessarySemicolonInTryWithResources"/>
 		<module name="UnusedImports"/>
 		<module name="UnusedLocalVariable"/>
+		<module name="UnusedTryResourceShouldBeUnnamed"/>
 		<module name="UpperEll"/>
 		<module name="VisibilityModifier">
 			<property name="packageAllowed" value="true"/>

.config/pmd/java/ruleset.xml

@@ -13,6 +13,7 @@
 	<!-- About: Formatting -->
 	<!-- Some lines (e.g. description, examples and CDATA) have to start without any indents or this will result in incorrect formatting -->
 
+	<rule ref="category/java/bestpractices.xml/AssertStatementInTest"/>
 	<rule ref="category/java/bestpractices.xml/AvoidPrintStackTrace"/>
 	<rule ref="category/java/bestpractices.xml/AvoidUsingHardCodedIP"/>
 	<rule ref="category/java/bestpractices.xml/ConstantsInInterface"/>
@@ -45,8 +46,10 @@
 	<rule ref="category/java/codestyle.xml/LambdaCanBeMethodReference"/>
 	<rule ref="category/java/codestyle.xml/NoPackage"/>
 	<rule ref="category/java/codestyle.xml/PrematureDeclaration"/>
+	<rule ref="category/java/codestyle.xml/UnnecessaryBlock"/>
 	<rule ref="category/java/codestyle.xml/UnnecessarySemicolon"/>
 	<rule ref="category/java/codestyle.xml/VariableCanBeInlined"/>
+	<rule ref="category/java/codestyle.xml/VariableDeclarationUsageDistance"/>
 
 	<rule ref="category/java/design.xml">
 		<!-- Sometimes abstract classes have just fields -->
@@ -154,6 +157,7 @@
 	<rule ref="category/java/errorprone.xml/InstantiationToGetClass"/>
 	<rule ref="category/java/errorprone.xml/InvalidLogMessageFormat"/>
 	<rule ref="category/java/errorprone.xml/JumbledIncrementer"/>
+	<rule ref="category/java/errorprone.xml/JUnitJupiterTestNoPrivateModifier"/>
 	<rule ref="category/java/errorprone.xml/MisplacedNullCheck"/>
 	<rule ref="category/java/errorprone.xml/MoreThanOneLogger"/>
 	<rule ref="category/java/errorprone.xml/NonStaticInitializer"/>
@@ -417,7 +421,8 @@ If you are 100% sure that you escaped the value properly and you have no better
 				<value>
 <![CDATA[
 //ConstructorCall[pmd-java:typeIs('com.vaadin.flow.component.Html')] |
-//MethodCall[@MethodName='setAttribute' and //ImportDeclaration[starts-with(@PackageName,'com.vaadin')]]/ArgumentList/StringLiteral[1][contains(lower-case(@Image),'html')]
+//MethodCall[@MethodName='setAttribute' and //ImportDeclaration[starts-with(@PackageName,'com.vaadin')]]/ArgumentList/StringLiteral[1][contains(lower-case(@Image),'html')] |
+//MethodCall[pmd-java:matchesSig('com.vaadin.flow.dom.Element#setProperty(java.lang.String,java.lang.String)')]/ArgumentList/StringLiteral[1][contains(lower-case(@Image),'html')]
 ]]>
 				</value>
 			</property>

.github/workflows/broken-links.yml

@@ -13,7 +13,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 15
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - run: mv .github/.lycheeignore .lycheeignore
 

.github/workflows/check-build.yml

@@ -31,7 +31,7 @@ jobs:
         java: [21, 25]
         distribution: [temurin]
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v7
 
     - name: Set up JDK
       uses: actions/setup-java@v5
@@ -40,7 +40,7 @@ jobs:
         java-version: ${{ matrix.java }}
 
     - name: Cache Maven
-      uses: actions/cache@v5
+      uses: actions/cache@v6
       with:
         path: ~/.m2/repository
         key: ${{ runner.os }}-mvn-build-${{ hashFiles('**/pom.xml') }}
@@ -93,7 +93,7 @@ jobs:
         java: [21]
         distribution: [temurin]
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v7
 
     - name: Set up JDK
       uses: actions/setup-java@v5
@@ -102,15 +102,15 @@ jobs:
         java-version: ${{ matrix.java }}
 
     - name: Cache Maven
-      uses: actions/cache@v5
+      uses: actions/cache@v6
       with:
         path: ~/.m2/repository
         key: ${{ runner.os }}-mvn-checkstyle-${{ hashFiles('**/pom.xml') }}
         restore-keys: |
           ${{ runner.os }}-mvn-checkstyle-
 
     - name: CheckStyle Cache
-      uses: actions/cache@v5
+      uses: actions/cache@v6
       with:
         path: '**/target/checkstyle-cachefile'
         key: ${{ runner.os }}-checkstyle-${{ hashFiles('**/pom.xml') }}
@@ -129,7 +129,7 @@ jobs:
         java: [21]
         distribution: [temurin]
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v7
 
     - name: Set up JDK
       uses: actions/setup-java@v5
@@ -138,15 +138,15 @@ jobs:
         java-version: ${{ matrix.java }}
 
     - name: Cache Maven
-      uses: actions/cache@v5
+      uses: actions/cache@v6
       with:
         path: ~/.m2/repository
         key: ${{ runner.os }}-mvn-pmd-${{ hashFiles('**/pom.xml') }}
         restore-keys: |
           ${{ runner.os }}-mvn-pmd-
 
     - name: PMD Cache
-      uses: actions/cache@v5
+      uses: actions/cache@v6
       with:
         path: '**/target/pmd/pmd.cache'
         key: ${{ runner.os }}-pmd-${{ hashFiles('**/pom.xml') }}

.github/workflows/release.yml

@@ -18,7 +18,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 30
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v7
 
     - name: Set up JDK
       uses: actions/setup-java@v5
@@ -28,15 +28,15 @@ jobs:
 
     # Try to reuse existing cache from check-build
     - name: Try restore Maven Cache
-      uses: actions/cache/restore@v5
+      uses: actions/cache/restore@v6
       with:
         path: ~/.m2/repository
         key: ${{ runner.os }}-mvn-build-${{ hashFiles('**/pom.xml') }}
         restore-keys: |
           ${{ runner.os }}-mvn-build-
 
     - name: Build with Maven
-      run: ./mvnw -B clean package -Pproduction -T2C
+      run: ./mvnw -B clean package -T2C
 
     - name: Check for uncommited changes
       run: |
@@ -63,7 +63,7 @@ jobs:
     outputs:
       upload_url: ${{ steps.create-release.outputs.upload_url }}
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v7
 
     - name: Configure Git
       run: |
@@ -118,7 +118,7 @@ jobs:
     needs: [prepare-release]
     timeout-minutes: 60
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v7
 
     - name: Init Git and pull
       run: |
@@ -166,7 +166,7 @@ jobs:
     needs: [prepare-release]
     timeout-minutes: 15
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v7
 
     - name: Init Git and pull
       run: |
@@ -182,7 +182,7 @@ jobs:
 
     # Try to reuse existing cache from check-build
     - name: Try restore Maven Cache
-      uses: actions/cache/restore@v5
+      uses: actions/cache/restore@v6
       with:
         path: ~/.m2/repository
         key: ${{ runner.os }}-mvn-build-${{ hashFiles('**/pom.xml') }}
@@ -194,7 +194,7 @@ jobs:
       working-directory: ${{ env.PRIMARY_MAVEN_MODULE }}
 
     - name: Deploy to Github pages
-      uses: peaceiris/actions-gh-pages@4f9cc6602d3f66b9c108549d475ec49e8ef4d45e # v4
+      uses: peaceiris/actions-gh-pages@84c30a85c19949d7eee79c4ff27748b70285e453 # v4
       with:
         github_token: ${{ secrets.GITHUB_TOKEN }}
         publish_dir: ./${{ env.PRIMARY_MAVEN_MODULE }}/target/site
@@ -205,7 +205,7 @@ jobs:
     needs: [publish-maven]
     timeout-minutes: 10
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v7
 
     - name: Init Git and pull
       run: |

.github/workflows/report-gha-workflow-security-problems.yml

@@ -17,7 +17,7 @@ jobs:
     # Only run this in our repos (Prevent notification spam by forks)
     if: ${{ github.repository_owner == 'xdev-software' }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Check
         id: check

.github/workflows/sync-labels.yml

@@ -16,7 +16,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 10
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           sparse-checkout: .github/labels.yml
 

.github/workflows/test-deploy.yml

@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 60
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v7
 
     - name: Set up JDK
       uses: actions/setup-java@v5

.mvn/wrapper/maven-wrapper.properties

@@ -1,3 +1,3 @@
 wrapperVersion=3.3.4
 distributionType=only-script
-distributionUrl=https://repo.maven.apache.org/maven2/org/apache/maven/apache-maven/3.9.15/apache-maven-3.9.15-bin.zip
+distributionUrl=https://repo.maven.apache.org/maven2/org/apache/maven/apache-maven/3.9.16/apache-maven-3.9.16-bin.zip

pom.xml

@@ -45,7 +45,7 @@
 							<dependency>
 								<groupId>com.puppycrawl.tools</groupId>
 								<artifactId>checkstyle</artifactId>
-								<version>13.4.2</version>
+								<version>13.6.0</version>
 							</dependency>
 						</dependencies>
 						<configuration>
@@ -83,12 +83,12 @@
 							<dependency>
 								<groupId>net.sourceforge.pmd</groupId>
 								<artifactId>pmd-core</artifactId>
-								<version>7.24.0</version>
+								<version>7.25.0</version>
 							</dependency>
 							<dependency>
 								<groupId>net.sourceforge.pmd</groupId>
 								<artifactId>pmd-java</artifactId>
-								<version>7.24.0</version>
+								<version>7.25.0</version>
 							</dependency>
 						</dependencies>
 					</plugin>

vaadin-chartjs-wrapper-demo/pnpm-workspace.yaml

@@ -1,25 +1,13 @@
 # Delay install of newly released packages to prevent supply chain attacks
 minimumReleaseAge: 180 # 3h
+minimumReleaseAgeExclude:
+  - "@xdevsoftware/*"
 overrides:
   # Remove unused packages
-  # glob CLI unused
-  "jackspeak": "npm:empty-npm-package@1.0.0"
-  "foreground-child": "npm:empty-npm-package@1.0.0"
-  "package-json-from-dist": "npm:empty-npm-package@1.0.0"
   # rollup-plugin-visualizer CLI unused
   "yargs": "npm:empty-npm-package@1.0.0"
   "open": "npm:empty-npm-package@1.0.0"
   # transform-ast test only
   "nanobench": "npm:empty-npm-package@1.0.0"
-  # Workbox unused
-  "workbox-google-analytics": "npm:empty-npm-package@1.0.0"
-  "@surma/rollup-plugin-off-main-thread": "npm:empty-npm-package@1.0.0"
-  "@babel/preset-env": "npm:empty-npm-package@1.0.0"
-  "@babel/runtime": "npm:empty-npm-package@1.0.0"
-  "@rollup/plugin-replace@2.4.2": "npm:empty-npm-package@1.0.0"
-  "@rollup/plugin-babel": "npm:empty-npm-package@1.0.0"
-  "@rollup/plugin-node-resolve": "npm:empty-npm-package@1.0.0"
-  "@rollup/plugin-terser": "npm:empty-npm-package@1.0.0"
-  "tempy": "npm:empty-npm-package@1.0.0"
-  # Disable telemetry
-  "@vaadin/vaadin-usage-statistics": "npm:empty-npm-package@1.0.0"
+  # Usage statistics
+  "@vaadin/vaadin-usage-statistics": "npm:@xdevsoftware/vaadin-usage-statistics-opt-out@1.0.2"

vaadin-chartjs-wrapper-demo/pom.xml

@@ -29,9 +29,9 @@
 		<mainClass>software.xdev.vaadin.Application</mainClass>
 
 		<!-- Dependency-Versions -->
-		<vaadin.version>25.1.3</vaadin.version>
+		<vaadin.version>25.1.5</vaadin.version>
 
-		<org.springframework.boot.version>4.0.5</org.springframework.boot.version>
+		<org.springframework.boot.version>4.0.6</org.springframework.boot.version>
 	</properties>
 
 	<dependencyManagement>

vaadin-chartjs-wrapper/pom.xml

@@ -49,7 +49,7 @@
 		<project.reporting.outputEncoding>UTF-8</project.reporting.outputEncoding>
 
 		<!-- Dependency-Versions -->
-		<vaadin.version>25.1.3</vaadin.version>
+		<vaadin.version>25.1.5</vaadin.version>
 	</properties>
 
 	<dependencyManagement>
@@ -239,7 +239,7 @@
 					<plugin>
 						<groupId>org.sonatype.central</groupId>
 						<artifactId>central-publishing-maven-plugin</artifactId>
-						<version>0.10.0</version>
+						<version>0.11.0</version>
 						<extensions>true</extensions>
 						<configuration>
 							<publishingServerId>sonatype-central-portal</publishingServerId>
@@ -261,7 +261,7 @@
 							<dependency>
 								<groupId>com.puppycrawl.tools</groupId>
 								<artifactId>checkstyle</artifactId>
-								<version>13.4.2</version>
+								<version>13.6.0</version>
 							</dependency>
 						</dependencies>
 						<configuration>
@@ -299,12 +299,12 @@
 							<dependency>
 								<groupId>net.sourceforge.pmd</groupId>
 								<artifactId>pmd-core</artifactId>
-								<version>7.24.0</version>
+								<version>7.25.0</version>
 							</dependency>
 							<dependency>
 								<groupId>net.sourceforge.pmd</groupId>
 								<artifactId>pmd-java</artifactId>
-								<version>7.24.0</version>
+								<version>7.25.0</version>
 							</dependency>
 						</dependencies>
 					</plugin>