A read-only plugin parameter can still be set by the user which leads
to an invalid repackaged archive. This commit actually ignores the field
and uses the standard attribute instead.

Closes gh-16202

Closes gh-16334

See gh-16341

Closes gh-16364

Closes gh-16363

Closes gh-16362

Closes gh-16361

* pr/16341:
  Add missing class condition on thymeleaf-spring5

This commit adds an extra check for the presence of thymeleaf-spring5
library on the classpath. ThymeleafAutoConfiguration is now only
considered if both thymeleaf-spring5 and thymeleaf jars are present.

Closes gh-16341

* gh-16320:
  Polish "Use HTTPS for external links wherever possible"
  Use HTTPS for external links wherever possible

Closes gh-16320

See gh-16320

See gh-16320

* gh-16319:
  Polish "Use HTTPS for external links wherever possible"
  Use HTTPS for external links wherever possible

See gh-16319

See gh-16319

See gh-16316

* gh-16318:
  Polish "Use HTTPS for external links wherever possible"
  Use HTTPS for external links wherever possible

See gh-16381

See gh-16318

* gh-16317:
  Polish "Use HTTPS for external links wherever possible"
  Use HTTPS for external links wherever possible

Closes gh-16317

See gh-16317

See gh-16317

See gh-16316

* gh-16316:
  Polish "Use HTTPS for external links wherever possible"
  Use HTTPS for external links wherever possible

Closes gh-16316

See gh-16316

See gh-16316

Closes gh-16268

See gh-16268