* [JENKINS-42707] AccessDeniedException vulnerability in ReverseBuildTrigger.

* [JENKINS-42707] Added tests to expose the issue

* [JENKINS-42707] Log message according to permission (DISCOVER/READ)

* [JENKINS-42707] Use MockAuthorizationStrategy

* [JENKINS-42707] Remove internationalization for logger

[JENKINS-42959] Correctly compare key algorithms during key verification
[FIXED JENKINS-44046][FIXED JENKINS-43979] Use a larger default key size to fix issues when using SHA256 MACs during Diffe-Helman key exchange against older versions of OpenSSH

Fixes issues encountered following the recent move to the latest Trilead version. These fix 2 underlying issues:

    diffe-helman-sha256 Key Exchange needs at least 2048 bits of data to generate a key against OpenSSH 6.4 and below.
    Known hosts comparison incorrectly compares the hostname against the key value meaning key verification always fails when using known hosts files

Suppressing test flakiness

* [JENKINS-42728] Updating view with CLI using different view type should fail

- Additionally, updating a view using an XML that will be converted by XStream via an alias
  will succeed.

[FIXES JENKINS-42728]

* Remove TestView

* update test

Indicate the actual protocol being served by TcpSlaveAgentListener

[JENKINS-43929] Specific cache control header on ajax.jelly

[JENKINS-44010] NPE in setup wizard

[FIXED JENKINS-44010] It is possible for Jenkins.crumbIssuer to be unset while the setup wizard is running.

Improved OldDataMonitorTest.unlocatableRun

* Do not load detached plugins during tests.
Also warn about plugins which force us to create classes.jar.

* Porting POM fix from #2795: we must allow snapshots from repo.jenkins-ci.org so as to be able to test upstream component PRs.

* Fixed failures in tests which assumed detached plugins were being loaded.

* jenkins-test-harness 2.20

* Unreproducible test failure on CI, probably due to timing.

[JENKINS-43733] Pick up the latest release of version-number library

[FIXED JENKINS-43936] Only migrate legacy users once per restart

Bump Trilead version to receive a number of security enhancements

Change rss feed build name

* [JENKINS-43825] - Refactor WindowsProcess to a separate class and optimize logging

* [JENKINS-43825] - Refactor the code to properly propagate WindowsProcessException in ProcessTree to the top level

* [JENKINS-43825] - Polish logging

* [JENKINS-43828] - s/WindowsProcess/WindowsOSProcess

* [JENKINS-43825] - Next time I will try to compile the code before submitting

Avoids creating unversioned file test/0/build.xml.

* [JENKINS-43653] - Ensure AbstractItem#delete() NPE and RTE safety when checking executors.

This change adds missing NPE checks and also improves handling of Executables#getParentOf(), which may throw undocumented Runtime exceptions if Executable uses core API below 1.377 and does not implement getParent(). Executor#stop() has been also modified to explicitly handle the issue though there is still the same issue with estimated execution times.

* [JENKINS-43653] - Address comments from @jglick, restrict newly introduced API

* [JENKINS-43653] - Address comments from @stephenc

* [JENKINS-43653] - Cleanup "unrelevant" changes to make @stephenc and @jglick happy

* [JENKINS-43653] - Cleanup the leftover

* [JENKINS-43653] - Drop the changes in Executables

Fix Javadoc generation error due to incomplete class reference

[JENKINS-42717] - Prevent NPE when a non-existent Default View is specified in the global config (#2815)

* [JENKINS-42717] - Document view management methods in Jenkins and ViewGroupMixIn

* [KENKINS-42717] - GlobalDefauldViewConfiguration should not fail with NPE when the view is missing

* [JENKINS-42717] - Draft the direct unit test

* [JENKINS-42717] - Fix the tes implementation

* [JENKINS-42717] - Make FormException localizable

* [JENKINS-42717] - Fix te build glitch

[JENKINS-43531] Plugins may not be expecting InvalidPathException