Better exception message if a SecurityRealm doesn't respect the API contract and return null (#2407)

* Getter exception message if the SecurityRealm doesn't respect the API contract and return null.

* Use NullPointerException instead of IllegalStateException to not change the behaviour of the method.

* [JENKINS-33600] - User#isIdOrFullnameAllowed() should be tolerant against null parameters

* [JENKINS-33600] - Add the follow-up TODO

[JENKINS-35098] Disable AutoBrowserHolder by default to improve the changelog rendering performance (#2371)

* [FIXED JENKINS-35098] Deleting AutoBrowserHolder.

* Normalizing form binding scheme for AbstractProject.scm.

* At @oleg-nenashev’s insistence, restoring AutoBrowserHolder, though not using it by default.

* Using SystemProperties at @oleg-nenashev’s recommendation.

Signed-off-by: NNicolas De Loof <nicolas.deloof@gmail.com>

Commit 7efb9090 seems to have done
without paying attention to what javadoc refers to.

getItem() and contains() act exactly the same

[FIXED JENKINS-31915] Proxy settings in plugins page are ignored

* [FIXED JENKINS-34881] - handle non-default security settings for new installs

* Ensure permissions

* Initial security authentication token should still follow redirects

* State label name as well in order to disambiguate when used from FormValidation#aggregate

* JENKINS-35198 Add failing test for clear identification of the issue and future regression test

* JENKINS-35198 Fix DelegatingComputerLauncher logic for filtering out subclasses as possible delegates

this logic is by default, and subclasses can still allow the selection of other DelegatingComputerLauncher instances as delegates.

* JENKINS-34708 - UpdateCenter.EnableJob not properly setting status

* Restore if (status instanceof Pending)

* [JENKINS-31417] CLI command connect-node extracted from core to CLI

connect-node extended to accept multiple node names
connect-node covered by test-cases

* Slighty modified Javadoc

* Fixed translations after rebase

* [JENKINS-34531] Extended CLI online-node for accepting multiple agents

Polished and extended related TC as well.

* Simplified string composition

* Simplified initialization of HashSet

[FIXED JENKINS-34880] do not show warnings if tool installer is present in at least 1 update site (#2361)

* [JENKINS-34854] - Migrate missing Integer and Boolean properties to SystemProperties

* [JENKINS-34854] - API methods for Long variables

* [JENKINS-34854] - Migrate Long settings to SystemProperties

* [JENKINS-34854] - Leftover change (I should use Save All)

* [JENKINS-34854] - Some fixes in Long methods Javadoc and log messages

Add Upgrade Wizard
Add 'replace' handlebars method in jenkins.js
Fix state transitions to follow a single basic pattern
Suggested plugins selected by default
Add an install state for INITIAL_SECURITY_SETUP
Removed duplicate setupWizard.js on page [FIX JENKINS-34676]
Exclude plugins which are already installed when determining platform
Change 'snooze' to not look like a 'close' button
Make sure unlock screen doesn't show up after new install
Add compatibility check when offering suggested plugins
More appropriate handling of security token filter

[FIXED JENKINS-34883] the legacy default update site can be different from the one specified by ID_DEFAULT

- [x] - Avoid String concatenation
- [x] - Switch to R/W lock instead of the specialized container with a significant overhead

And provided a way for plugins to define safe parameters
by extending ParametersAction

* fix read of 'SystemProperties' values before init of the context

* fix constructor and test

* revert help-spec_fr.html

* revert help-spec_fr.html

* revert help-spec_fr.html

[JENKINS-34755] Migrate to SystemProperties and restrict access to the engine

* [JENKINS-34681] Allow custom default plugin managers

* [JENKINS-34681] Convert remaining properties to SystemProperties.

* [JENKINS-34733] - Allow overriding Jenkins UpdateCenter by a custom implementation

* [JENKINS-34733] - Reduce the logging level for the custom update center selection

* [JENKINS-34733 and JENKINS-34674] - Use SystemProperties in the UpdateCenter

* [JENKINS-28071] generalise BuildCommand target from AbstractProject to Job

This allows e.g. WorkflowJob to build, fixing symptom [JENKINS-29826]

* fixup! [JENKINS-28071] generalise BuildCommand target from AbstractProject to Job

* fixup! [JENKINS-28071] generalise BuildCommand target from AbstractProject to Job

* [JENKINS-34745] - Prevent CheckUpdates PeriodicWork death in the case of the missing update site signature

* [JENKINS-34745] - Fix typo in the validator

* [JENKINS-34745] - Fix the formatting of the validation message (cc @lanwen)

* Fix NPE getting size of parameterDefinitions.size

* Protect get against NPE

* readResolve and adequate List management

* [JENKINS-34370] Simplify code

* Address comments

* Address comments

* Use NullPointerException