JEXL-36{1,2,3,4}: release notes

JEXL-363: getting captured variables and avoiding caching mutable literals

JEXL-364: let evaluation options flow through closures

JEXL-361: added a JEXL 3.2 compatibility engine

JEXL: remove clirr report (replaced by japicmp)

JEXL: remove clirr report (replaced by japicmp)

JEXL-362: avoid 0 positions in JexlInfo

Replace package with verify in the default goal.

Bump actions/checkout from 2 to 3 #79

Merge pull request #79 from apache/dependabot/github_actions/actions/checkout-3

Bump actions/checkout from 2 to 3

Bump actions/checkout from 2 to 3

Bumps [actions/checkout](https://github.com/actions/checkout) from 2 to 3.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v2...v3)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Add CODE_OF_CONDUCT.md

Merge pull request #78 from apache/dependabot/maven/org.apache.maven.plugins-maven-pmd-plugin-3.16.0

Bump maven-pmd-plugin from 3.15.0 to 3.16.0

JEXL-359: subtle refactor to allow implementing a 3.2-like interpreter;

JEXL-359: subtle refactor to allow implementing a 3.2-like interpreter;

Bump maven-pmd-plugin from 3.15.0 to 3.16.0

Bumps [maven-pmd-plugin](https://github.com/apache/maven-pmd-plugin) from 3.15.0 to 3.16.0.
- [Release notes](https://github.com/apache/maven-pmd-plugin/releases)
- [Commits](https://github.com/apache/maven-pmd-plugin/compare/maven-pmd-plugin-3.15.0...maven-pmd-plugin-3.16.0)

---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-pmd-plugin
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

JEXL-359: refactored OperatorController, tidy code linked to strictness, clean-up test;

Merge branch 'master' of https://gitbox.apache.org/repos/asf/commons-jexl

JEXL-357: foolproof getting package permissions thought package name;

Inline Collections.sort(Comparator).

JEXL-235: update engine version to 3.3;

JEXL-235: update engine version to 3.3;

JEXL-357: added and updated Javadoc;
- refined code to reduce clutter;
- refined tests to improve coverage;

JEXL-357: exposing parser;
-adding tests;

Merge pull request #75 from apache/dependabot/maven/com.github.siom79.japicmp-japicmp-maven-plugin-0.15.6

Bump japicmp-maven-plugin from 0.15.4 to 0.15.6

Merge pull request #76 from apache/dependabot/maven/com.puppycrawl.tools-checkstyle-9.3

Bump checkstyle from 9.2.1 to 9.3

Bump checkstyle from 9.2.1 to 9.3

Bumps [checkstyle](https://github.com/checkstyle/checkstyle) from 9.2.1 to 9.3.
- [Release notes](https://github.com/checkstyle/checkstyle/releases)
- [Commits](https://github.com/checkstyle/checkstyle/compare/checkstyle-9.2.1...checkstyle-9.3)

---
updated-dependencies:
- dependency-name: com.puppycrawl.tools:checkstyle
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Bump japicmp-maven-plugin from 0.15.4 to 0.15.6

Bumps [japicmp-maven-plugin](https://github.com/siom79/japicmp) from 0.15.4 to 0.15.6.
- [Release notes](https://github.com/siom79/japicmp/releases)
- [Changelog](https://github.com/siom79/japicmp/blob/master/release.py)
- [Commits](https://github.com/siom79/japicmp/compare/japicmp-base-0.15.4...japicmp-base-0.15.6)

---
updated-dependencies:
- dependency-name: com.github.siom79.japicmp:japicmp-maven-plugin
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Update NOTICE file for 2022.

JEXL-357: tracking CI failure on JDK17/Windows;

Merge remote-tracking branch 'origin/master'

JEXL-357: added permissions parser;
- added a (static) 'secure' permissions (used in tests);
- quiesce spotbugs on builder patterns;

Add CodeQL GitHub workflow.

JEXL-358: correct closure evaluator;
- add test;

JEXL-357: initial drop
- added NoJexl classes to Permissions;
- added parser;
- 1st parsing tests;

Merge pull request #74 from apache/dependabot/maven/com.helger.maven-ph-javacc-maven-plugin-4.1.5

Bump ph-javacc-maven-plugin from 4.1.4 to 4.1.5

Bump ph-javacc-maven-plugin from 4.1.4 to 4.1.5

Bumps [ph-javacc-maven-plugin](https://github.com/phax/ph-javacc-maven-plugin) from 4.1.4 to 4.1.5.
- [Release notes](https://github.com/phax/ph-javacc-maven-plugin/releases)
- [Commits](https://github.com/phax/ph-javacc-maven-plugin/compare/ph-javacc-maven-plugin-4.1.4...ph-javacc-maven-plugin-4.1.5)

---
updated-dependencies:
- dependency-name: com.helger.maven:ph-javacc-maven-plugin
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Fix indentation.

Bump spotbugs-maven-plugin from 4.4.1 to 4.5.3.0 #73.

Merge pull request #73 from apache/dependabot/maven/com.github.spotbugs-spotbugs-maven-plugin-4.5.3.0

Bump spotbugs-maven-plugin from 4.4.1 to 4.5.3.0

Bump spotbugs-maven-plugin from 4.4.1 to 4.5.3.0

Bumps [spotbugs-maven-plugin](https://github.com/spotbugs/spotbugs-maven-plugin) from 4.4.1 to 4.5.3.0.
- [Release notes](https://github.com/spotbugs/spotbugs-maven-plugin/releases)
- [Commits](https://github.com/spotbugs/spotbugs-maven-plugin/compare/spotbugs-maven-plugin-4.4.1...spotbugs-maven-plugin-4.5.3.0)

---
updated-dependencies:
- dependency-name: com.github.spotbugs:spotbugs-maven-plugin
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Run dependabot once a week.

Bump checkstyle from 9.2 to 9.2.1 #72.

Merge pull request #72 from apache/dependabot/maven/com.puppycrawl.tools-checkstyle-9.2.1

Bump checkstyle from 9.2 to 9.2.1

Bump checkstyle from 9.2 to 9.2.1

Bumps [checkstyle](https://github.com/checkstyle/checkstyle) from 9.2 to 9.2.1.
- [Release notes](https://github.com/checkstyle/checkstyle/releases)
- [Commits](https://github.com/checkstyle/checkstyle/compare/checkstyle-9.2...checkstyle-9.2.1)

---
updated-dependencies:
- dependency-name: com.puppycrawl.tools:checkstyle
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Merge branch 'master' of https://gitbox.apache.org/repos/asf/commons-jexl

JEXL: winter cleaning;
- restoring CI build, take 2

Merge pull request #70 from apache/dependabot/maven/com.github.siom79.japicmp-japicmp-maven-plugin-0.15.4

Bump japicmp-maven-plugin from 0.15.3 to 0.15.4

Bump japicmp-maven-plugin from 0.15.3 to 0.15.4

Bumps [japicmp-maven-plugin](https://github.com/siom79/japicmp) from 0.15.3 to 0.15.4.
- [Release notes](https://github.com/siom79/japicmp/releases)
- [Changelog](https://github.com/siom79/japicmp/blob/master/release.py)
- [Commits](https://github.com/siom79/japicmp/compare/japicmp-base-0.15.3...japicmp-base-0.15.4)

---
updated-dependencies:
- dependency-name: com.github.siom79.japicmp:japicmp-maven-plugin
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

JEXL: winter cleaning;
- restoring CI build

JEXL: winter cleaning;
- switched from clirr to japicmp;
- configured pmd and addressed top issues;
- improved test coverage;
- various nitpicks in javadoc and comments;

Merge pull request #68 from apache/dependabot/github_actions/actions/cache-2.1.7

Bump actions/cache from 2.1.6 to 2.1.7

Merge pull request #69 from apache/dependabot/maven/com.puppycrawl.tools-checkstyle-9.2

Bump checkstyle from 9.1 to 9.2

JEXL-353: changed doc for not-in/not-match example result

JEXL-354: allow signed numbers as pragma values

Bump checkstyle from 9.1 to 9.2

Bumps [checkstyle](https://github.com/checkstyle/checkstyle) from 9.1 to 9.2.
- [Release notes](https://github.com/checkstyle/checkstyle/releases)
- [Commits](https://github.com/checkstyle/checkstyle/compare/checkstyle-9.1...checkstyle-9.2)

---
updated-dependencies:
- dependency-name: com.puppycrawl.tools:checkstyle
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Bump actions/cache from 2.1.6 to 2.1.7

Bumps [actions/cache](https://github.com/actions/cache) from 2.1.6 to 2.1.7.
- [Release notes](https://github.com/actions/cache/releases)
- [Commits](https://github.com/actions/cache/compare/v2.1.6...v2.1.7)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Merge pull request #67 from apache/dependabot/github_actions/actions/checkout-2.4.0

Bump actions/checkout from 2.3.5 to 2.4.0

Merge pull request #66 from apache/dependabot/maven/com.puppycrawl.tools-checkstyle-9.1

Bump checkstyle from 8.45.1 to 9.1

Bump actions/checkout from 2.3.5 to 2.4.0

Bumps [actions/checkout](https://github.com/actions/checkout) from 2.3.5 to 2.4.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v2.3.5...v2.4.0)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Merge pull request #63 from apache/dependabot/maven/org.apache.maven.plugins-maven-pmd-plugin-3.15.0

Bump maven-pmd-plugin from 3.14.0 to 3.15.0

Merge pull request #65 from apache/dependabot/github_actions/actions/checkout-2.3.5

Bump actions/checkout from 2.3.4 to 2.3.5

Bump checkstyle from 8.45.1 to 9.1

Bumps [checkstyle](https://github.com/checkstyle/checkstyle) from 8.45.1 to 9.1.
- [Release notes](https://github.com/checkstyle/checkstyle/releases)
- [Commits](https://github.com/checkstyle/checkstyle/compare/checkstyle-8.45.1...checkstyle-9.1)

---
updated-dependencies:
- dependency-name: com.puppycrawl.tools:checkstyle
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Bump actions/checkout from 2.3.4 to 2.3.5

Bumps [actions/checkout](https://github.com/actions/checkout) from 2.3.4 to 2.3.5.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v2.3.4...v2.3.5)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Update GitHub build from Java 16 to 17.

Update GitHub build from Java 17-EA to 18-EA but comment it (not there
yet).

JEXL: avoid reusing arguments

Bump maven-pmd-plugin from 3.14.0 to 3.15.0

Bumps [maven-pmd-plugin](https://github.com/apache/maven-pmd-plugin) from 3.14.0 to 3.15.0.
- [Release notes](https://github.com/apache/maven-pmd-plugin/releases)
- [Commits](https://github.com/apache/maven-pmd-plugin/compare/maven-pmd-plugin-3.14.0...maven-pmd-plugin-3.15.0)

---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-pmd-plugin
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

AdoptOpenJDK is moving to the Eclipse Foundation and rebranding as
Eclipse Temurin.

Merge pull request #61 from YunLemon/Modify_Travis_1

Improve Travis CI build Performance

Improve Travis CI build Performance

Merge pull request #60 from apache/dependabot/maven/com.puppycrawl.tools-checkstyle-8.45.1

Bump checkstyle from 8.45 to 8.45.1

Bump checkstyle from 8.45 to 8.45.1

Bumps [checkstyle](https://github.com/checkstyle/checkstyle) from 8.45 to 8.45.1.
- [Release notes](https://github.com/checkstyle/checkstyle/releases)
- [Commits](https://github.com/checkstyle/checkstyle/compare/checkstyle-8.45...checkstyle-8.45.1)

---
updated-dependencies:
- dependency-name: com.puppycrawl.tools:checkstyle
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Merge pull request #59 from apache/dependabot/maven/com.puppycrawl.tools-checkstyle-8.45

Bump checkstyle from 8.44 to 8.45

Bump checkstyle from 8.44 to 8.45

Bumps [checkstyle](https://github.com/checkstyle/checkstyle) from 8.44 to 8.45.
- [Release notes](https://github.com/checkstyle/checkstyle/releases)
- [Commits](https://github.com/checkstyle/checkstyle/compare/checkstyle-8.44...checkstyle-8.45)

---
updated-dependencies:
- dependency-name: com.puppycrawl.tools:checkstyle
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Update README.md

JEXL: post 3.2.1 clean-up

JEXL: post 3.2.1 clean-up

JEXL: post 3.2.1 clean-up

JEXL: post 3.2.1 clean-up

Merge pull request #58 from apache/dependabot/maven/com.puppycrawl.tools-checkstyle-8.44

Bump checkstyle from 8.43 to 8.44

Bump checkstyle from 8.43 to 8.44

Bumps [checkstyle](https://github.com/checkstyle/checkstyle) from 8.43 to 8.44.
- [Release notes](https://github.com/checkstyle/checkstyle/releases)
- [Commits](https://github.com/checkstyle/checkstyle/compare/checkstyle-8.43...checkstyle-8.44)

---
updated-dependencies:
- dependency-name: com.puppycrawl.tools:checkstyle
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Bump to next development version

JEXL: preparing 3.2.1

[maven-release-plugin] prepare for next development iteration

[maven-release-plugin] prepare release commons-jexl3-3.2

JEXL: preparing 3.2.1

JEXL: add spotbugs:check to default goal

JEXL-342: baseline as test code

JEXL-342: fixed error handling (inner JexlException.Method throw) and reporting (line info)

JEXL: unused import

JEXL-352: restore call to parser.jjtree.reset() after parse

JEXL: add serialVersionUID to exceptions to avoid japicmp complaints in the future

JEXL-351: interpret jexl:{print,include} in template scripts and avoid sandboxed introspection, add test, changes and release notes.

Replace Java 15 with Java 16 in Travis CI.

Merge pull request #57 from csamak/master

More parser compatibility fixes for JavaCC/JJTree

More parser compatibility fixes for JavaCC/JJTree

I'm not sure why STATIC=false was commented out? Without it, generating
the parser with JavaCC does not work.

The Parser constructor taking String throws ParseException (a checked
exception) when generated with JavaCC. I'm not sure why, but the
StringProvider exception does not.

For the pragmaValue changes, unreachable statements were generated. See
http://consoliii.blogspot.com/2014/05/javacc-modern-mode-how-to-resolve.html

With these changes I'm able to use JavaCC and everything passes again.

JEXL-350: release notes, changes, pom

JEXL-350: ensure null can be allowed/blocked as a property to read/write in sandbox, tests, verbosity

Merge pull request #54 from csamak/master

Use the "modern" parser template

Merge pull request #55 from csamak/typos

Fix small typos in comments throughout