* [JENKINS-31598] upgrade commons-collections due to CVE against v3.2.1

* Fix broken tests

Update findFormItem so it can return checked radio buttons

[JENKINS-42141] Fix performance issue in code merging Tool installer list

* Remove changelog from jenkinsci/jenkins repository
* Add tombstone file directing people to jenkins-infra/jenkins.io

[JENKINS-18734] - Call perform(AbstractBuild build, Launcher launcher, BuildListener listener) if implemented in BuildStep

[FIXED JENKINS-36872] Switch to com.mysema.maven:apt-maven-plugin for Java 8 support

[JENKINS-32820, JENKINS-42164] - Windows service restart does not retain the build queue

[JENKINS-40710, JENKINS-41513, JENKINS-41852, JENKINS-41730] - Update remoting to 3.5

Typo

[JENKINS-33358] update Groovy to 2.4.8

Security232Test seems flaky

Annotations for FederatedLoginService.

[FIXED JENKINS-41987] Check for null return values from InstanceIdentityProvider methods

https://github.com/jenkinsci/remoting/edit/master/CHANGELOG.md

Fixed issues:

* [JENKINS-40710](https://issues.jenkins-ci.org/browse/JENKINS-40710) - Match headers case-insensitively in `JnlpAgentEndpointResolver` in order to be compliant with HTTP2 lower-case headers. ([PR #139](https://github.com/jenkinsci/remoting/pull/139), [PR #140](https://github.com/jenkinsci/remoting/pull/140))
* [JENKINS-41513](https://issues.jenkins-ci.org/browse/JENKINS-41513) - Prevent `NullPointerException` in `JnlpAgentEndpointResolver` when receiving a header with `null` name. ([PR #140](https://github.com/jenkinsci/remoting/pull/140))
* [JENKINS-41852](https://issues.jenkins-ci.org/browse/JENKINS-41852) - Fix exported object pinning logic to prevent release due to the integer overflow. ([PR #148](https://github.com/jenkinsci/remoting/pull/148))

Improvements:

* [JENKINS-41730](https://issues.jenkins-ci.org/browse/JENKINS-41730) - Add the new `org.jenkinsci.remoting.engine.JnlpAgentEndpointResolver.ignoreJenkinsAgentProtocolsHeader` property, which allows specifying a custom list of supported protocols instead of the one returned by the Jenkins master. ([PR #146](https://github.com/jenkinsci/remoting/pull/146))
* Print the Filesystem Jar Cache directory location in the error message when this cache directory is not writable. ([PR #143](https://github.com/jenkinsci/remoting/pull/143))
* Replace `MimicException` with the older `ProxyException` when serializing non-serializable exceptions thrown by the remote code. ([PR #141](https://github.com/jenkinsci/remoting/pull/141))
* Use OID of the `ClassLoaderProxy` in error message when the proxy cannot be located in the export table. ([PR #147](https://github.com/jenkinsci/remoting/pull/147))

[FIX JENKINS-41264] followup fixing methods' references in javadoc

[JENKINS-41899] Update version-number dependency to 1.3

[JENKINS-18734] - Call perform(AbstractBuild build, Launcher launcher, BuildListener listener) if implemented in BuildStep

[FIX JENKINS-41765] Allow groovy CLI command via SSH

[FIX JENKINS-32938] Usage Statistics needs a section otherwise it can be kind of hard to find

Conflicts:
	core/src/main/java/hudson/WebAppMain.java
	core/src/main/java/hudson/lifecycle/SolarisSMFLifecycle.java
	core/src/main/java/hudson/lifecycle/UnixLifecycle.java