Closes gh-26272

* gh-26264:
  Rename nohttp whitelist to allowlist

Closes gh-26264

See gh-26264

Closes gh-26260

sun.security.x509.AlgorithmId.get(String) isn't thread-safe and can
lead to null be returned for an algorithm that should be present.

This commit aims to work around this problem by avoiding the call
to AlgorithmId.get(String). It does so by configuring the
PKCS12 key protection algorithm to one that starts with
pbewithhmacsha (case insensitive). This short-circuits the logic
in PKCS12KeyStore.mapPBEAlgorithmToOID(String) and avoids the call to
AlgorithmId.get(String). Thanks again to @dreis2211 for the
suggestion.

The work around is only used when building with Java 8 as the problem
was fixed in Java 9.

Closes gh-26252

Closes gh-26256

Closes gh-26255

See gh-26248

Closes gh-26250

Closes gh-26247

Closes gh-26245

Fixes gh-26240

Closes gh-26241

Closes gh-26239

Closes gh-26236

Fixes gh-26234

Prior to this commit, the `spring.web.resources.cache.use-last-modified`
configuration property support was lost during a merge operation right
before 2.4.2.

This is due to an invalid test that missed this unintended change. This
commit fixes both problems.

Fixes gh-26212

Closes gh-26210

* pr/26209:
  Align Maven version in system requirements with what is actually tested

Closes gh-26209

See gh-26209

Closes gh-24247

Closes gh-26194

Closes gh-26195

Closes gh-26198

Closes gh-26197

See gh-26188

* pr/26188:
  Polish

Closes gh-26188

See gh-26188

Closes gh-26185

Closes gh-25610

Closes gh-26181

Closes gh-26179

Closes gh-26177

Closes gh-26173

Closes gh-26175

Closes gh-26174

Closes gh-26171

* pr/26167:
  Use new update site for Spring Java Format's Eclipse plugin

Closes gh-26167