chore: import ordering, final parameters, dependency analysis, and update deps

.mvn/wrapper/maven-wrapper.properties

@@ -1,3 +1,3 @@
 wrapperVersion=3.3.4
 distributionType=only-script
-distributionUrl=https://repo.maven.apache.org/maven2/org/apache/maven/apache-maven/3.9.12/apache-maven-3.9.12-bin.zip
+distributionUrl=https://repo.maven.apache.org/maven2/org/apache/maven/apache-maven/3.9.14/apache-maven-3.9.14-bin.zip

SECURITY.md

@@ -0,0 +1,39 @@
+# Security Policy
+
+## Supported Versions
+
+The following versions of `base.build` are currently supported with security updates:
+
+| Version | Supported          |
+|---------|--------------------|
+| 0.21.x  | :white_check_mark: |
+| < 0.21  | :x:                |
+
+## Reporting a Vulnerability
+
+This is a Workday sponsored project hosted on GitHub.
+
+To report a security vulnerability, please **do not** open a public GitHub issue. Instead:
+
+1. Navigate to the [Security Advisories](https://https://github.com/workday/base.build/security/advisories) page for
+   this repository and click **Report a vulnerability**.
+
+2. Alternatively, contact the project maintainers directly by emailing the developers.
+
+### What to Include
+
+Please include as much of the following information as possible to help us understand and reproduce the issue:
+
+- The type of vulnerability (e.g. dependency with known CVE, insecure API usage, credential leak)
+- The affected module(s) and version(s)
+- Step-by-step instructions to reproduce the issue
+- Any proof-of-concept code or test cases
+- The potential impact and severity assessment
+
+### Response Timeline
+
+| Stage                  | Target           |
+|------------------------|------------------|
+| Acknowledgement        | 2 business days  |
+| Severity assessment    | 5 business days  |
+| Fix or mitigation plan | 15 business days |

base-archiving/pom.xml

@@ -44,14 +44,7 @@
         <!-- Test Dependencies -->
         <dependency>
             <groupId>org.junit.jupiter</groupId>
-            <artifactId>junit-jupiter</artifactId>
-            <version>${junit.version}</version>
-            <scope>test</scope>
-        </dependency>
-
-        <dependency>
-            <groupId>org.junit.jupiter</groupId>
-            <artifactId>junit-jupiter-params</artifactId>
+            <artifactId>junit-jupiter-api</artifactId>
             <version>${junit.version}</version>
             <scope>test</scope>
         </dependency>

base-archiving/src/main/java/build/base/archiving/AbstractTarBuilder.java

@@ -21,6 +21,9 @@
  */
 
 import build.base.foundation.Closeables;
+import org.kamranzafar.jtar.TarEntry;
+import org.kamranzafar.jtar.TarHeader;
+import org.kamranzafar.jtar.TarOutputStream;
 
 import java.io.BufferedInputStream;
 import java.io.IOException;
@@ -29,10 +32,6 @@
 import java.nio.file.Path;
 import java.util.ArrayDeque;
 
-import org.kamranzafar.jtar.TarEntry;
-import org.kamranzafar.jtar.TarHeader;
-import org.kamranzafar.jtar.TarOutputStream;
-
 /**
  * An abstract {@link ArchiveBuilder} of Tape Archives (.tar files).
  *

base-archiving/src/test/java/build/base/archiving/JarBuilderTests.java

@@ -1,6 +1,8 @@
 package build.base.archiving;
 
-import static org.assertj.core.api.Assertions.assertThat;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.io.TempDir;
 
 import java.io.File;
 import java.io.IOException;
@@ -10,9 +12,7 @@
 import java.util.jar.Attributes;
 import java.util.jar.JarFile;
 
-import org.junit.jupiter.api.BeforeEach;
-import org.junit.jupiter.api.Test;
-import org.junit.jupiter.api.io.TempDir;
+import static org.assertj.core.api.Assertions.assertThat;
 
 /**
  * Tests for {@link JarBuilder}.

base-archiving/src/test/java/build/base/archiving/TarBuilderTests.java

@@ -1,16 +1,16 @@
 package build.base.archiving;
 
-import static org.assertj.core.api.Assertions.assertThat;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.io.TempDir;
 
 import java.io.File;
 import java.io.IOException;
 import java.nio.file.Files;
 import java.nio.file.Path;
 import java.nio.file.Paths;
 
-import org.junit.jupiter.api.BeforeEach;
-import org.junit.jupiter.api.Test;
-import org.junit.jupiter.api.io.TempDir;
+import static org.assertj.core.api.Assertions.assertThat;
 
 /**
  * Tests for {@link TarBuilder}s.

base-assertion/pom.xml

@@ -50,7 +50,7 @@
         <!-- Test Dependencies -->
         <dependency>
             <groupId>org.junit.jupiter</groupId>
-            <artifactId>junit-jupiter</artifactId>
+            <artifactId>junit-jupiter-api</artifactId>
             <version>${junit.version}</version>
             <scope>test</scope>
         </dependency>

base-assertion/src/main/java/build/base/assertion/CompletableFutureAssertion.java

@@ -22,13 +22,10 @@
 
 import build.base.foundation.Capture;
 import build.base.option.Timeout;
-import static org.assertj.core.api.Assertions.catchThrowable;
-import static org.assertj.core.error.ShouldNotHaveThrown.shouldNotHaveThrown;
-import static org.assertj.core.error.future.ShouldBeCancelled.shouldBeCancelled;
-import static org.assertj.core.error.future.ShouldBeCompleted.shouldBeCompleted;
-import static org.assertj.core.error.future.ShouldBeCompletedExceptionally.shouldHaveCompletedExceptionally;
-import static org.assertj.core.error.future.ShouldNotBeCancelled.shouldNotBeCancelled;
-import static org.assertj.core.error.future.ShouldNotBeCompleted.shouldNotBeCompleted;
+import org.assertj.core.api.AbstractAssert;
+import org.assertj.core.api.AbstractThrowableAssert;
+import org.assertj.core.api.Assertions;
+import org.assertj.core.api.ObjectAssert;
 
 import java.time.Duration;
 import java.util.Optional;
@@ -38,10 +35,13 @@
 import java.util.concurrent.TimeUnit;
 import java.util.concurrent.TimeoutException;
 
-import org.assertj.core.api.AbstractAssert;
-import org.assertj.core.api.AbstractThrowableAssert;
-import org.assertj.core.api.Assertions;
-import org.assertj.core.api.ObjectAssert;
+import static org.assertj.core.api.Assertions.catchThrowable;
+import static org.assertj.core.error.ShouldNotHaveThrown.shouldNotHaveThrown;
+import static org.assertj.core.error.future.ShouldBeCancelled.shouldBeCancelled;
+import static org.assertj.core.error.future.ShouldBeCompleted.shouldBeCompleted;
+import static org.assertj.core.error.future.ShouldBeCompletedExceptionally.shouldHaveCompletedExceptionally;
+import static org.assertj.core.error.future.ShouldNotBeCancelled.shouldNotBeCancelled;
+import static org.assertj.core.error.future.ShouldNotBeCompleted.shouldNotBeCompleted;
 
 /**
  * An {@code assertj} Assertion Class for {@link CompletableFuture}s.

base-assertion/src/main/java/build/base/assertion/IteratorAssert.java

@@ -22,6 +22,7 @@
 
 import build.base.foundation.iterator.matching.IteratorPatternMatcher;
 import build.base.foundation.iterator.matching.IteratorPatternMatchers;
+import org.assertj.core.api.Assertions;
 
 import java.util.ArrayList;
 import java.util.Iterator;
@@ -30,8 +31,6 @@
 import java.util.stream.Collectors;
 import java.util.stream.Stream;
 
-import org.assertj.core.api.Assertions;
-
 /**
  * An {@code assertj}-like Assertion Class for {@link IteratorPatternMatcher}s evaluated against
  * an immediately-available source of elements.

base-assertion/src/main/java/build/base/assertion/IteratorPatternMatcherSequenceAssertion.java

@@ -21,11 +21,10 @@
  */
 
 import build.base.foundation.iterator.matching.Sequence;
+import org.assertj.core.api.Assertions;
 
 import java.util.Objects;
 
-import org.assertj.core.api.Assertions;
-
 /**
  * An {@code assertj}-like assertion step wrapping a {@link Sequence}, allowing the fluent
  * definition of ordering constraints and terminal evaluation.

base-assertion/src/main/java/build/base/assertion/RetryableAssertion.java

@@ -28,13 +28,12 @@
 import build.base.retryable.PermanentFailureException;
 import build.base.retryable.Retryable;
 import build.base.retryable.RetryablePredicate;
-
-import java.util.Objects;
-
 import org.assertj.core.api.AbstractThrowableAssert;
 import org.assertj.core.api.Assertions;
 import org.assertj.core.api.ObjectAssert;
 
+import java.util.Objects;
+
 /**
  * An {@code assertj}-like Assertion Class for {@link Retryable}s.
  *

base-assertion/src/test/java/build/base/assertion/CompletableFutureAssertionTests.java

@@ -1,9 +1,9 @@
 package build.base.assertion;
 
-import java.util.concurrent.CompletableFuture;
-
 import org.junit.jupiter.api.Test;
 
+import java.util.concurrent.CompletableFuture;
+
 /**
  * Tests for {@link CompletableFutureAssertionTests}.
  *

base-assertion/src/test/java/build/base/assertion/EventuallyTests.java

@@ -5,17 +5,17 @@
 import build.base.retryable.PermanentFailureException;
 import build.base.retryable.PermanentlyFailingRetryable;
 import build.base.retryable.Retryable;
-import static org.assertj.core.api.Assertions.assertThat;
-import static org.assertj.core.api.Fail.fail;
-import static org.junit.jupiter.api.Assertions.assertThrows;
+import org.junit.jupiter.api.Test;
 
 import java.time.Duration;
 import java.time.Instant;
 import java.util.concurrent.CompletableFuture;
 import java.util.concurrent.atomic.AtomicInteger;
 import java.util.function.Function;
 
-import org.junit.jupiter.api.Test;
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.assertj.core.api.Fail.fail;
+import static org.junit.jupiter.api.Assertions.assertThrows;
 
 /**
  * Tests for {@link Eventually}.

base-assertion/src/test/java/build/base/assertion/IteratorAssertTests.java

@@ -1,12 +1,11 @@
 package build.base.assertion;
 
-import static org.assertj.core.api.Assertions.assertThat;
-import static org.assertj.core.api.Assertions.assertThatThrownBy;
+import org.junit.jupiter.api.Test;
 
 import java.util.List;
 import java.util.stream.Stream;
 
-import org.junit.jupiter.api.Test;
+import static org.assertj.core.api.Assertions.assertThatThrownBy;
 
 /**
  * Tests for {@link IteratorAssert}.

base-assertion/src/test/java/build/base/assertion/IteratorPatternMatcherRetryableAssertionTests.java

@@ -2,15 +2,14 @@
 
 import build.base.option.Timeout;
 import build.base.retryable.Retryable;
-
-import static org.assertj.core.api.Assertions.assertThat;
-import static org.assertj.core.api.Assertions.assertThatThrownBy;
+import org.junit.jupiter.api.Test;
 
 import java.time.Duration;
 import java.util.List;
 import java.util.concurrent.atomic.AtomicInteger;
 
-import org.junit.jupiter.api.Test;
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.assertj.core.api.Assertions.assertThatThrownBy;
 
 /**
  * Tests for {@link IteratorPatternMatcherRetryableAssertion}.

base-commandline/pom.xml

@@ -25,21 +25,20 @@
 
         <dependency>
             <groupId>build.base</groupId>
-            <artifactId>base-table</artifactId>
+            <artifactId>base-foundation</artifactId>
             <version>${revision}</version>
         </dependency>
 
-        <!-- Test Dependencies -->
         <dependency>
-            <groupId>org.junit.jupiter</groupId>
-            <artifactId>junit-jupiter</artifactId>
-            <version>${junit.version}</version>
-            <scope>test</scope>
+            <groupId>build.base</groupId>
+            <artifactId>base-table</artifactId>
+            <version>${revision}</version>
         </dependency>
 
+        <!-- Test Dependencies -->
         <dependency>
             <groupId>org.junit.jupiter</groupId>
-            <artifactId>junit-jupiter-params</artifactId>
+            <artifactId>junit-jupiter-api</artifactId>
             <version>${junit.version}</version>
             <scope>test</scope>
         </dependency>

base-commandline/src/test/java/build/base/commandline/CommandLineParserTests.java

@@ -3,13 +3,13 @@
 import build.base.configuration.AbstractValueOption;
 import build.base.configuration.Configuration;
 import build.base.configuration.Option;
-import static org.assertj.core.api.Assertions.assertThat;
-import static org.junit.jupiter.api.Assertions.assertThrows;
+import org.junit.jupiter.api.Test;
 
 import java.util.Objects;
 import java.util.stream.Stream;
 
-import org.junit.jupiter.api.Test;
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.junit.jupiter.api.Assertions.assertThrows;
 
 /**
  * Tests for the {@link CommandLineParser} and the {@link CommandLine} interface/annotations.

base-configuration/pom.xml

@@ -26,14 +26,7 @@
         <!-- Test Dependencies -->
         <dependency>
             <groupId>org.junit.jupiter</groupId>
-            <artifactId>junit-jupiter</artifactId>
-            <version>${junit.version}</version>
-            <scope>test</scope>
-        </dependency>
-
-        <dependency>
-            <groupId>org.junit.jupiter</groupId>
-            <artifactId>junit-jupiter-params</artifactId>
+            <artifactId>junit-jupiter-api</artifactId>
             <version>${junit.version}</version>
             <scope>test</scope>
         </dependency>
@@ -60,6 +53,7 @@
                 <artifactId>maven-dependency-plugin</artifactId>
                 <executions>
                     <execution>
+                        <id>dependency-properties</id>
                         <goals>
                             <goal>properties</goal>
                         </goals>

base-configuration/src/main/java/build/base/configuration/Configuration.java

@@ -20,14 +20,14 @@
  * #L%
  */
 
-import static build.base.configuration.Option.getDefaultOption;
-
 import java.lang.reflect.Array;
 import java.util.Optional;
 import java.util.function.Consumer;
 import java.util.function.Supplier;
 import java.util.stream.Stream;
 
+import static build.base.configuration.Option.getDefaultOption;
+
 /**
  * An <strong>immutable</strong> {@link java.util.Map}-like structure for managing zero or more configuration
  * {@link Option}s, discriminating (keying) them by the concrete {@link Class} of the said {@link Option}s.
@@ -247,7 +247,7 @@ default <T extends Option> void ifPresent(final Class<T> classOfOption,
      * @return a {@link Stream} of {@link Option}s implementing the specified type
      */
     @SuppressWarnings("unchecked")
-    default <I> Stream<I> stream(Class<I> requiredClass) {
+    default <I> Stream<I> stream(final Class<I> requiredClass) {
 
         return stream()
             .filter(requiredClass::isInstance)