Moved repository to git.kokuwa.io

.github/CODEOWNERS

@@ -1,2 +0,0 @@
-# https://docs.github.com/en/github/creating-cloning-and-archiving-repositories/about-code-owners#codeowners-syntax
-* @sschnabe @rpahli @fabian-schlegel @jschwarze @wistefan @monotek

.github/dependabot.yml

@@ -1,14 +0,0 @@
-version: 2
-updates:
-  - package-ecosystem: maven
-    directory: /
-    schedule:
-      interval: daily
-    allow:
-      - dependency-name: io.kokuwa.maven:maven-parent
-      - dependency-name: org.keycloak:keycloak-quarkus-server
-  - package-ecosystem: github-actions
-    directory: /
-    schedule:
-      interval: monthly
-      day: monday

.github/settings.xml

@@ -1,16 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<!-- https://github.com/actions/setup-java/issues/85 -->
-<settings>
-	<servers>
-		<server>
-			<id>sonatype-nexus</id>
-			<username>${env.SERVER_USERNAME}</username>
-			<password>${env.SERVER_PASSWORD}</password>
-		</server>
-		<server>
-			<id>github.com</id>
-			<username>nope</username>
-			<password>${env.GIT_ACTION_TOKEN}</password>
-		</server>
-	</servers>
-</settings>

.github/workflows/build.yaml

@@ -1,50 +1,42 @@
-name: Build
+name: Verify
 
 on:
-  push:
+  - pull_request
-    branches: [main]
+  - push:
+      branches: [main]
+
+env:
+  MAVEN_ARGS: --batch-mode --color=always --no-transfer-progress
 
 jobs:
 
   build:
     runs-on: ubuntu-latest
-    env:
-      MAVEN_ARGS: --batch-mode --color=always --no-transfer-progress --settings=.github/settings.xml
     steps:
-      - name: docker/login-action docker.io
+      - uses: actions/checkout@main
-        uses: docker/login-action@v3.4.0
+      - uses: actions/setup-java@main
-        with:
-          registry: docker.io
-          username: ${{ secrets.DOCKERIO_USERNAME }}
-          password: ${{ secrets.DOCKERIO_TOKEN }}
-      - name: docker/login-action ghcr.io
-        uses: docker/login-action@v3.4.0
-        with:
-          registry: ghcr.io
-          username: ${{ github.actor }}
-          password: ${{ secrets.GIT_ACTION_TOKEN }}
-      - run: git config --global user.name "${{ vars.KOKUWA_IO_BOT_NAME }}"
-      - run: git config --global user.email "${{ vars.KOKUWA_IO_BOT_EMAIL }}"
-      - uses: actions/checkout@v4
-        with:
-          token: ${{ secrets.GIT_ACTION_TOKEN }}
-      - uses: crazy-max/ghaction-import-gpg@v6
-        with:
-          gpg_private_key: ${{ secrets.GPG_PRIVATE_KEY }}
-          passphrase: ${{ secrets.GPG_PASSPHRASE }}
-          git_user_signingkey: true
-          git_commit_gpgsign: true
-      - uses: actions/setup-java@v4
         with:
           distribution: temurin
           java-version: 17
           cache: maven
-          server-id: sonatype-nexus
+      - run: mvn verify
-          server-username: SERVER_USERNAME
+
-          server-password: SERVER_PASSWORD
+  versions:
-          gpg-private-key: ${{ secrets.GPG_PRIVATE_KEY }}
+    runs-on: ubuntu-latest
-          gpg-passphrase: GPG_PASSPHRASE
+    strategy:
-      - run: mvn $MAVEN_ARGS deploy
+      fail-fast: false
-        env:
+      matrix:
-          SERVER_USERNAME: ${{ secrets.SONATYPE_NEXUS_USERNAME }}
+        version:
-          SERVER_PASSWORD: ${{ secrets.SONATYPE_NEXUS_PASSWORD }}
+          - 22.0.5
+          - 23.0.7
+          - 24.0.5
+          - 25.0.6
+          - 26.2.5
+    steps:
+      - uses: actions/checkout@main
+      - uses: actions/setup-java@main
+        with:
+          distribution: temurin
+          java-version: 17
+          cache: maven
+      - run: mvn verify -Dversion.org.keycloak.test=${{ matrix.version }}

.github/workflows/lint.yaml

@@ -0,0 +1,23 @@
+name: Lint
+
+on: push
+
+jobs:
+
+  renovate:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@main
+      - uses: docker://kokuwaio/renovate-config-validator
+
+  markdownlint:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@main
+      - uses: docker://kokuwaio/markdownlint
+
+  yamllint:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@main
+      - uses: docker://kokuwaio/yamllint

.github/workflows/pr.yaml

@@ -1,58 +0,0 @@
-name: PullRequest
-
-on: pull_request
-
-env:
-  MAVEN_ARGS: --batch-mode --color=always --no-transfer-progress
-
-jobs:
-
-  yaml:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-      - uses: ibiqlik/action-yamllint@v3
-        with:
-          format: colored
-          strict: true
-
-  markdown:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-      - uses: avto-dev/markdown-lint@v1
-        with:
-          args: /github/workspace
-
-  build:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-java@v4
-        with:
-          distribution: temurin
-          java-version: 17
-          cache: maven
-      - run: mvn $MAVEN_ARGS verify
-
-  versions:
-    runs-on: ubuntu-latest
-    strategy:
-      fail-fast: false
-      matrix:
-        version:
-          - 22.0.5
-          - 23.0.7
-          - 24.0.5
-          - 25.0.6
-          - 26.0.8
-          - 26.1.5
-          - 26.2.5
-    steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-java@v4
-        with:
-          distribution: temurin
-          java-version: 17
-          cache: maven
-      - run: mvn $MAVEN_ARGS verify -Dcheck.skip -Dversion.org.keycloak.test=${{ matrix.version }}

.github/workflows/release.yaml

@@ -1,50 +0,0 @@
-name: Release
-
-on: workflow_dispatch
-
-jobs:
-  build:
-    runs-on: ubuntu-latest
-    env:
-      MAVEN_ARGS: --batch-mode --color=always --no-transfer-progress --settings=.github/settings.xml
-    steps:
-      - name: docker/login-action docker.io
-        uses: docker/login-action@v3.4.0
-        with:
-          registry: docker.io
-          username: ${{ secrets.DOCKERIO_USERNAME }}
-          password: ${{ secrets.DOCKERIO_TOKEN }}
-      - name: docker/login-action ghcr.io
-        uses: docker/login-action@v3.4.0
-        with:
-          registry: ghcr.io
-          username: ${{ github.actor }}
-          password: ${{ secrets.GIT_ACTION_TOKEN }}
-      - run: git config --global user.name "${{ vars.KOKUWA_IO_BOT_NAME }}"
-      - run: git config --global user.email "${{ vars.KOKUWA_IO_BOT_EMAIL }}"
-      - uses: actions/checkout@v4
-        with:
-          token: ${{ secrets.GIT_ACTION_TOKEN }}
-      - uses: crazy-max/ghaction-import-gpg@v6
-        with:
-          gpg_private_key: ${{ secrets.GPG_PRIVATE_KEY }}
-          passphrase: ${{ secrets.GPG_PASSPHRASE }}
-          git_user_signingkey: true
-          git_commit_gpgsign: true
-      - uses: actions/setup-java@v4
-        with:
-          distribution: temurin
-          java-version: 17
-          cache: maven
-          server-id: sonatype-nexus
-          server-username: SERVER_USERNAME
-          server-password: SERVER_PASSWORD
-          gpg-private-key: ${{ secrets.GPG_PRIVATE_KEY }}
-          gpg-passphrase: GPG_PASSPHRASE
-      - run: mvn $MAVEN_ARGS release:prepare -Darguments="$MAVEN_ARGS"
-      - run: mvn $MAVEN_ARGS release:perform -Darguments="$MAVEN_ARGS"
-        env:
-          SERVER_USERNAME: ${{ secrets.SONATYPE_NEXUS_USERNAME }}
-          SERVER_PASSWORD: ${{ secrets.SONATYPE_NEXUS_PASSWORD }}
-          GIT_ACTION_TOKEN: ${{ secrets.GIT_ACTION_TOKEN }}
-          GPG_PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }}

.justfile

@@ -0,0 +1,21 @@
+# https://just.systems/man/en/
+
+[private]
+@default:
+	just --list --unsorted
+
+# Run linter.
+@lint:
+	docker run --rm --read-only --volume=$(pwd):$(pwd):ro --workdir=$(pwd) kokuwaio/hadolint
+	docker run --rm --read-only --volume=$(pwd):$(pwd):ro --workdir=$(pwd) kokuwaio/yamllint
+	docker run --rm --read-only --volume=$(pwd):$(pwd):rw --workdir=$(pwd) kokuwaio/markdownlint --fix
+	docker run --rm --read-only --volume=$(pwd):$(pwd):ro --workdir=$(pwd) kokuwaio/renovate
+	docker run --rm --read-only --volume=$(pwd):$(pwd):ro --workdir=$(pwd) woodpeckerci/woodpecker-cli lint
+
+# Build image with local docker daemon.
+@build:
+	docker build . --tag=kokuwaio/keycloak-event-metrics:dev
+
+# Inspect image layers with `dive`.
+@dive: build
+	dive build .

.woodpecker/deploy.yaml

@@ -0,0 +1,50 @@
+when:
+  instance: ci.kokuwa.io
+  repo: keycloak/keycloak-event-metrics
+  event: [manual, push]
+  branch: main
+  path: [.woodpecker/deploy.yaml, Dockerfile, pom.xml, src/main/**]
+
+services:
+  - name: dockerd
+    image: kokuwaio/dockerd
+    privileged: true
+    ports: [2375, 8080]
+
+steps:
+
+  maven:
+    image: maven:3.9.10-eclipse-temurin-17
+    commands: mvn deploy
+    environment:
+      MAVEN_ARGS: --batch-mode --color=always --no-transfer-progress --settings=.woodpecker/maven/settings.xml
+      MAVEN_GPG_KEY: {from_secret: woodpecker_gpg_key}
+      SONATYPE_ORG_USERNAME: {from_secret: sonatype_org_username}
+      SONATYPE_ORG_PASSWORD: {from_secret: sonatype_org_password}
+
+  image:
+    image: kokuwaio/buildctl
+    settings:
+      name:
+        - docker.io/kokuwaio/keycloak-event-metrics:snapshot
+        - ghcr.io/kokuwaio/keycloak-event-metrics:snapshot
+      build-args: {MAVEN_MIRROR_CENTRAL: "${MAVEN_MIRROR_CENTRAL}"}
+      platform: [linux/amd64, linux/arm64]
+      auth:
+        "https://index.docker.io/v1/":
+          username: {from_secret: docker_io_username}
+          password: {from_secret: docker_io_password}
+        ghcr.io:
+          username: {from_secret: ghcr_io_username}
+          password: {from_secret: ghcr_io_password}
+      annotation:
+        org.opencontainers.image.title: Keycloak Metrics
+        org.opencontainers.image.description: Provides metrics for Keycloak user/admin events and user/client/session count.
+        org.opencontainers.image.url: $CI_REPO_URL
+        org.opencontainers.image.documentation: $CI_REPO_URL/README.md
+        org.opencontainers.image.source: $CI_REPO_CLONE_URL
+        org.opencontainers.image.revision: $CI_COMMIT_SHA
+        org.opencontainers.image.vendor: kokuwa.io
+        org.opencontainers.image.licenses: EUPL-1.2
+        org.opencontainers.image.ref.name: kokuwaio/keycloak-event-metrics
+        org.opencontainers.image.version: snapshot

.woodpecker/dockerhub.yaml

@@ -0,0 +1,17 @@
+when:
+  instance: ci.kokuwa.io
+  repo: keycloak/keycloak-event-metrics
+  event: [manual, push]
+  branch: main
+  path: [.woodpecker/dockerhub.yaml, README.md]
+
+steps:
+
+  metadata:
+    image: kokuwaio/dockerhub-metadata
+    settings:
+      repository: kokuwaio/keycloak-event-metrics
+      description-short: Provides metrics for Keycloak user/admin events and user/client/session count.
+      categories: monitoring-and-observability
+      username: {from_secret: dockerhub_username}
+      password: {from_secret: dockerhub_password}

.woodpecker/lint.yaml

@@ -0,0 +1,26 @@
+when:
+  event: [manual, pull_request, push]
+  branch: main
+  path: [.woodpecker/lint.yaml, renovate.json, Dockerfile, "**/*.y*ml", "**/*.md"]
+
+steps:
+
+  renovate:
+    image: kokuwaio/renovate-config-validator
+    depends_on: []
+    when: [path: [.woodpecker/lint.yaml, renovate.json]]
+
+  yaml:
+    image: kokuwaio/yamllint
+    depends_on: []
+    when: [path: [.woodpecker/lint.yaml, .yamllint.yaml, "**/*.y*ml"]]
+
+  markdown:
+    image: kokuwaio/markdownlint
+    depends_on: []
+    when: [path: [.woodpecker/lint.yaml, .markdownlint.yaml, "**/*.md"]]
+
+  dockerfile:
+    image: kokuwaio/hadolint
+    depends_on: []
+    when: [path: [.woodpecker/lint.yaml, Dockerfile]]

.woodpecker/maven/settings.xml

@@ -0,0 +1,33 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<settings xmlns="http://maven.apache.org/SETTINGS/1.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/SETTINGS/1.0.0 https://maven.apache.org/xsd/settings-1.0.0.xsd">
+	<interactiveMode>false</interactiveMode>
+	<localRepository>/woodpecker/.m2</localRepository>
+	<servers>
+		<server>
+			<id>git.kokuwa.io</id>
+			<username>${env.FORGEJO_USERNAME}</username>
+			<password>${env.FORGEJO_PASSWORD}</password>
+		</server>
+		<server>
+			<id>sonatype.org</id>
+			<username>${env.SONATYPE_ORG_USERNAME}</username>
+			<password>${env.SONATYPE_ORG_PASSWORD}</password>
+		</server>
+		<server>
+			<id>docker.io</id>
+			<username>${env.DOCKER_IO_USERNAME}</username>
+			<password>${env.DOCKER_IO_PASSWORD}</password>
+		</server>
+		<server>
+			<id>ghcr.io</id>
+			<username>${env.GHCR_IO_USERNAME}</username>
+			<password>${env.GHCR_IO_PASSWORD}</password>
+		</server>
+	</servers>
+	<mirrors>
+		<mirror>
+			<url>http://mirror.woodpecker.svc.cluster.local/maven2</url>
+			<mirrorOf>central</mirrorOf>
+		</mirror>
+	</mirrors>
+</settings>

.woodpecker/release.yaml

@@ -0,0 +1,61 @@
+when:
+  instance: ci.kokuwa.io
+  repo: keycloak/keycloak-event-metrics
+  event: deployment
+  branch: main
+
+steps:
+
+  maven:
+    image: maven:3.9.10-eclipse-temurin-17
+    commands:
+      # setup git with ssk key signing
+      - git config user.email "$GIT_USER_EMAIL"
+      - git config user.name "$GIT_USER_NAME"
+      - git config commit.gpgsign true
+      - git config gpg.format ssh
+      - git config user.signingkey /run/secrets/sign.pub
+      - install -m 400 /dev/null /run/secrets/sign && echo "$GIT_SIGN_KEY" > /run/secrets/sign
+      - install -m 444 /dev/null /run/secrets/sign.pub && echo "$GIT_SIGN_PUB" > /run/secrets/sign.pub
+      # release & write version to env file for image
+      - mvn release:prepare release:perform
+      - echo "VERSION=$(mvn help:evaluate --quiet --file=target/checkout/pom.xml -Dexpression=project.version -DforceStdout)" > maven.env
+    environment:
+      MAVEN_ARGS: --batch-mode --color=always --no-transfer-progress --settings=.woodpecker/maven/settings.xml
+      MAVEN_GPG_KEY: {from_secret: woodpecker_gpg_key}
+      GIT_SIGN_KEY: {from_secret: woodpecker_sign_key}
+      GIT_SIGN_PUB: {from_secret: woodpecker_sign_pub}
+      FORGEJO_USERNAME: {from_secret: woodpecker_username}
+      FORGEJO_PASSWORD: {from_secret: woodpecker_password}
+      SONATYPE_ORG_USERNAME: {from_secret: sonatype_org_username}
+      SONATYPE_ORG_PASSWORD: {from_secret: sonatype_org_password}
+
+  image:
+    image: kokuwaio/buildctl
+    settings:
+      env-file: maven.env
+      name:
+        - docker.io/kokuwaio/keycloak-event-metrics:latest
+        - docker.io/kokuwaio/keycloak-event-metrics:$VERSION
+        - ghcr.io/kokuwaio/keycloak-event-metrics:latest
+        - ghcr.io/kokuwaio/keycloak-event-metrics:$VERSION
+      build-args: {MAVEN_MIRROR_CENTRAL: "${MAVEN_MIRROR_CENTRAL}"}
+      platform: [linux/amd64, linux/arm64]
+      auth:
+        "https://index.docker.io/v1/":
+          username: {from_secret: docker_io_username}
+          password: {from_secret: docker_io_password}
+        ghcr.io:
+          username: {from_secret: ghcr_io_username}
+          password: {from_secret: ghcr_io_password}
+      annotation:
+        org.opencontainers.image.title: Keycloak Metrics
+        org.opencontainers.image.description: Provides metrics for Keycloak user/admin events and user/client/session count.
+        org.opencontainers.image.url: $CI_REPO_URL
+        org.opencontainers.image.documentation: $CI_REPO_URL/README.md
+        org.opencontainers.image.source: $CI_REPO_CLONE_URL
+        org.opencontainers.image.revision: $CI_COMMIT_SHA
+        org.opencontainers.image.vendor: kokuwa.io
+        org.opencontainers.image.licenses: EUPL-1.2
+        org.opencontainers.image.ref.name: kokuwaio/keycloak-event-metrics
+        org.opencontainers.image.version: $VERSION

.woodpecker/verify.yaml

@@ -0,0 +1,24 @@
+when:
+  event: [manual, pull_request]
+  path: [.woodpecker/verify.yaml, pom.xml, src/**]
+
+services:
+  - name: dockerd
+    image: kokuwaio/dockerd
+    privileged: true
+    ports: [2375, 8080]
+
+steps:
+
+  test:
+    image: maven:3.9.10-eclipse-temurin-17
+    commands: mvn verify -P-deploy
+    environment:
+      MAVEN_ARGS: --batch-mode --color=always --no-transfer-progress --settings=.woodpecker/maven/settings.xml
+
+  image:
+    image: kokuwaio/buildctl
+    settings:
+      platform: [linux/amd64, linux/arm64]
+    when:
+      instance: ci.kokuwa.io

.woodpecker/versions.yaml

@@ -0,0 +1,26 @@
+when:
+  event: [manual, pull_request]
+  path: [.woodpecker/versions.yaml, pom.xml, src/**]
+
+depends_on: [verify]
+matrix:
+  KEYCLOAK_VERSION:
+    - 22.0.5
+    - 23.0.7
+    - 24.0.5
+    - 25.0.6
+    - 26.2.5
+
+services:
+  - name: dockerd
+    image: kokuwaio/dockerd
+    privileged: true
+    ports: [2375, 8080]
+
+steps:
+
+  test:
+    image: maven:3.9.10-eclipse-temurin-17
+    commands: mvn verify -Dversion.org.keycloak.test="$KEYCLOAK_VERSION" -P-deploy,-check
+    environment:
+      MAVEN_ARGS: --batch-mode --color=always --no-transfer-progress --settings=.woodpecker/maven/settings.xml

Dockerfile

@@ -0,0 +1,15 @@
+FROM maven:3.9.10-eclipse-temurin-17 AS build
+SHELL ["/usr/bin/bash", "-e", "-u", "-c"]
+WORKDIR /build
+ARG MAVEN_ARGS="--batch-mode --color=always --no-transfer-progress"
+ARG MAVEN_MIRROR_CENTRAL
+RUN mkdir "$HOME/.m2" && printf "<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n\
+<settings>\n\
+	<localRepository>/tmp/mvn-repo</localRepository>\n\
+	<mirrors><mirror><url>%s</url><mirrorOf>central</mirrorOf></mirror></mirrors>\n\
+</settings>" "${MAVEN_MIRROR_CENTRAL:-https://repo.maven.apache.org/maven2}" > "$HOME/.m2/settings.xml"
+COPY . .
+RUN --mount=type=cache,target=/tmp/mvn-repo mvn package -DskipTests -P=-dev
+
+FROM busybox:1.37.0-uclibc
+COPY --from=build --chmod=444 /build/target/keycloak-event-metrics.jar /opt/keycloak/providers/keycloak-event-metrics.jar

Dockerfile.dockerignore

@@ -0,0 +1,5 @@
+*
+.*
+
+!pom.xml
+!src/main/**

LICENSE

@@ -1,201 +1,288 @@
-                                 Apache License
-                           Version 2.0, January 2004
-                        http://www.apache.org/licenses/
 
-   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+                      EUROPEAN UNION PUBLIC LICENCE v. 1.2
+                      EUPL © the European Union 2007, 2016
 
-   1. Definitions.
+This European Union Public Licence (the ‘EUPL’) applies to the Work (as defined
+below) which is provided under the terms of this Licence. Any use of the Work,
+other than as authorised under this Licence is prohibited (to the extent such
+use is covered by a right of the copyright holder of the Work).
 
-      "License" shall mean the terms and conditions for use, reproduction,
+The Work is provided under the terms of this Licence when the Licensor (as
-      and distribution as defined by Sections 1 through 9 of this document.
+defined below) has placed the following notice immediately following the
+copyright notice for the Work:
 
-      "Licensor" shall mean the copyright owner or entity authorized by
+        Licensed under the EUPL
-      the copyright owner that is granting the License.
 
-      "Legal Entity" shall mean the union of the acting entity and all
+or has expressed by any other means his willingness to license under the EUPL.
-      other entities that control, are controlled by, or are under common
-      control with that entity. For the purposes of this definition,
-      "control" means (i) the power, direct or indirect, to cause the
-      direction or management of such entity, whether by contract or
-      otherwise, or (ii) ownership of fifty percent (50%) or more of the
-      outstanding shares, or (iii) beneficial ownership of such entity.
 
-      "You" (or "Your") shall mean an individual or Legal Entity
+1. Definitions
-      exercising permissions granted by this License.
 
-      "Source" form shall mean the preferred form for making modifications,
+In this Licence, the following terms have the following meaning:
-      including but not limited to software source code, documentation
-      source, and configuration files.
 
-      "Object" form shall mean any form resulting from mechanical
+- ‘The Licence’: this Licence.
-      transformation or translation of a Source form, including but
-      not limited to compiled object code, generated documentation,
-      and conversions to other media types.
 
-      "Work" shall mean the work of authorship, whether in Source or
+- ‘The Original Work’: the work or software distributed or communicated by the
-      Object form, made available under the License, as indicated by a
+  Licensor under this Licence, available as Source Code and also as Executable
-      copyright notice that is included in or attached to the work
+  Code as the case may be.
-      (an example is provided in the Appendix below).
 
-      "Derivative Works" shall mean any work, whether in Source or Object
+- ‘Derivative Works’: the works or software that could be created by the
-      form, that is based on (or derived from) the Work and for which the
+  Licensee, based upon the Original Work or modifications thereof. This Licence
-      editorial revisions, annotations, elaborations, or other modifications
+  does not define the extent of modification or dependence on the Original Work
-      represent, as a whole, an original work of authorship. For the purposes
+  required in order to classify a work as a Derivative Work; this extent is
-      of this License, Derivative Works shall not include works that remain
+  determined by copyright law applicable in the country mentioned in Article 15.
-      separable from, or merely link (or bind by name) to the interfaces of,
-      the Work and Derivative Works thereof.
 
-      "Contribution" shall mean any work of authorship, including
+- ‘The Work’: the Original Work or its Derivative Works.
-      the original version of the Work and any modifications or additions
-      to that Work or Derivative Works thereof, that is intentionally
-      submitted to Licensor for inclusion in the Work by the copyright owner
-      or by an individual or Legal Entity authorized to submit on behalf of
-      the copyright owner. For the purposes of this definition, "submitted"
-      means any form of electronic, verbal, or written communication sent
-      to the Licensor or its representatives, including but not limited to
-      communication on electronic mailing lists, source code control systems,
-      and issue tracking systems that are managed by, or on behalf of, the
-      Licensor for the purpose of discussing and improving the Work, but
-      excluding communication that is conspicuously marked or otherwise
-      designated in writing by the copyright owner as "Not a Contribution."
 
-      "Contributor" shall mean Licensor and any individual or Legal Entity
+- ‘The Source Code’: the human-readable form of the Work which is the most
-      on behalf of whom a Contribution has been received by Licensor and
+  convenient for people to study and modify.
-      subsequently incorporated within the Work.
 
-   2. Grant of Copyright License. Subject to the terms and conditions of
+- ‘The Executable Code’: any code which has generally been compiled and which is
-      this License, each Contributor hereby grants to You a perpetual,
+  meant to be interpreted by a computer as a program.
-      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
-      copyright license to reproduce, prepare Derivative Works of,
-      publicly display, publicly perform, sublicense, and distribute the
-      Work and such Derivative Works in Source or Object form.
 
-   3. Grant of Patent License. Subject to the terms and conditions of
+- ‘The Licensor’: the natural or legal person that distributes or communicates
-      this License, each Contributor hereby grants to You a perpetual,
+  the Work under the Licence.
-      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
-      (except as stated in this section) patent license to make, have made,
-      use, offer to sell, sell, import, and otherwise transfer the Work,
-      where such license applies only to those patent claims licensable
-      by such Contributor that are necessarily infringed by their
-      Contribution(s) alone or by combination of their Contribution(s)
-      with the Work to which such Contribution(s) was submitted. If You
-      institute patent litigation against any entity (including a
-      cross-claim or counterclaim in a lawsuit) alleging that the Work
-      or a Contribution incorporated within the Work constitutes direct
-      or contributory patent infringement, then any patent licenses
-      granted to You under this License for that Work shall terminate
-      as of the date such litigation is filed.
 
-   4. Redistribution. You may reproduce and distribute copies of the
+- ‘Contributor(s)’: any natural or legal person who modifies the Work under the
-      Work or Derivative Works thereof in any medium, with or without
+  Licence, or otherwise contributes to the creation of a Derivative Work.
-      modifications, and in Source or Object form, provided that You
-      meet the following conditions:
 
-      (a) You must give any other recipients of the Work or
+- ‘The Licensee’ or ‘You’: any natural or legal person who makes any usage of
-          Derivative Works a copy of this License; and
+  the Work under the terms of the Licence.
 
-      (b) You must cause any modified files to carry prominent notices
+- ‘Distribution’ or ‘Communication’: any act of selling, giving, lending,
-          stating that You changed the files; and
+  renting, distributing, communicating, transmitting, or otherwise making
+  available, online or offline, copies of the Work or providing access to its
+  essential functionalities at the disposal of any other natural or legal
+  person.
 
-      (c) You must retain, in the Source form of any Derivative Works
+2. Scope of the rights granted by the Licence
-          that You distribute, all copyright, patent, trademark, and
-          attribution notices from the Source form of the Work,
-          excluding those notices that do not pertain to any part of
-          the Derivative Works; and
 
-      (d) If the Work includes a "NOTICE" text file as part of its
+The Licensor hereby grants You a worldwide, royalty-free, non-exclusive,
-          distribution, then any Derivative Works that You distribute must
+sublicensable licence to do the following, for the duration of copyright vested
-          include a readable copy of the attribution notices contained
+in the Original Work:
-          within such NOTICE file, excluding those notices that do not
-          pertain to any part of the Derivative Works, in at least one
-          of the following places: within a NOTICE text file distributed
-          as part of the Derivative Works; within the Source form or
-          documentation, if provided along with the Derivative Works; or,
-          within a display generated by the Derivative Works, if and
-          wherever such third-party notices normally appear. The contents
-          of the NOTICE file are for informational purposes only and
-          do not modify the License. You may add Your own attribution
-          notices within Derivative Works that You distribute, alongside
-          or as an addendum to the NOTICE text from the Work, provided
-          that such additional attribution notices cannot be construed
-          as modifying the License.
 
-      You may add Your own copyright statement to Your modifications and
+- use the Work in any circumstance and for all usage,
-      may provide additional or different license terms and conditions
+- reproduce the Work,
-      for use, reproduction, or distribution of Your modifications, or
+- modify the Work, and make Derivative Works based upon the Work,
-      for any such Derivative Works as a whole, provided Your use,
+- communicate to the public, including the right to make available or display
-      reproduction, and distribution of the Work otherwise complies with
+  the Work or copies thereof to the public and perform publicly, as the case may
-      the conditions stated in this License.
+  be, the Work,
+- distribute the Work or copies thereof,
+- lend and rent the Work or copies thereof,
+- sublicense rights in the Work or copies thereof.
 
-   5. Submission of Contributions. Unless You explicitly state otherwise,
+Those rights can be exercised on any media, supports and formats, whether now
-      any Contribution intentionally submitted for inclusion in the Work
+known or later invented, as far as the applicable law permits so.
-      by You to the Licensor shall be under the terms and conditions of
-      this License, without any additional terms or conditions.
-      Notwithstanding the above, nothing herein shall supersede or modify
-      the terms of any separate license agreement you may have executed
-      with Licensor regarding such Contributions.
 
-   6. Trademarks. This License does not grant permission to use the trade
+In the countries where moral rights apply, the Licensor waives his right to
-      names, trademarks, service marks, or product names of the Licensor,
+exercise his moral right to the extent allowed by law in order to make effective
-      except as required for reasonable and customary use in describing the
+the licence of the economic rights here above listed.
-      origin of the Work and reproducing the content of the NOTICE file.
 
-   7. Disclaimer of Warranty. Unless required by applicable law or
+The Licensor grants to the Licensee royalty-free, non-exclusive usage rights to
-      agreed to in writing, Licensor provides the Work (and each
+any patents held by the Licensor, to the extent necessary to make use of the
-      Contributor provides its Contributions) on an "AS IS" BASIS,
+rights granted on the Work under this Licence.
-      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
-      implied, including, without limitation, any warranties or conditions
-      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
-      PARTICULAR PURPOSE. You are solely responsible for determining the
-      appropriateness of using or redistributing the Work and assume any
-      risks associated with Your exercise of permissions under this License.
 
-   8. Limitation of Liability. In no event and under no legal theory,
+3. Communication of the Source Code
-      whether in tort (including negligence), contract, or otherwise,
-      unless required by applicable law (such as deliberate and grossly
-      negligent acts) or agreed to in writing, shall any Contributor be
-      liable to You for damages, including any direct, indirect, special,
-      incidental, or consequential damages of any character arising as a
-      result of this License or out of the use or inability to use the
-      Work (including but not limited to damages for loss of goodwill,
-      work stoppage, computer failure or malfunction, or any and all
-      other commercial damages or losses), even if such Contributor
-      has been advised of the possibility of such damages.
 
-   9. Accepting Warranty or Additional Liability. While redistributing
+The Licensor may provide the Work either in its Source Code form, or as
-      the Work or Derivative Works thereof, You may choose to offer,
+Executable Code. If the Work is provided as Executable Code, the Licensor
-      and charge a fee for, acceptance of support, warranty, indemnity,
+provides in addition a machine-readable copy of the Source Code of the Work
-      or other liability obligations and/or rights consistent with this
+along with each copy of the Work that the Licensor distributes or indicates, in
-      License. However, in accepting such obligations, You may act only
+a notice following the copyright notice attached to the Work, a repository where
-      on Your own behalf and on Your sole responsibility, not on behalf
+the Source Code is easily and freely accessible for as long as the Licensor
-      of any other Contributor, and only if You agree to indemnify,
+continues to distribute or communicate the Work.
-      defend, and hold each Contributor harmless for any liability
-      incurred by, or claims asserted against, such Contributor by reason
-      of your accepting any such warranty or additional liability.
 
-   END OF TERMS AND CONDITIONS
+4. Limitations on copyright
 
-   APPENDIX: How to apply the Apache License to your work.
+Nothing in this Licence is intended to deprive the Licensee of the benefits from
+any exception or limitation to the exclusive rights of the rights owners in the
+Work, of the exhaustion of those rights or of other applicable limitations
+thereto.
 
-      To apply the Apache License to your work, attach the following
+5. Obligations of the Licensee
-      boilerplate notice, with the fields enclosed by brackets "[]"
-      replaced with your own identifying information. (Don't include
-      the brackets!)  The text should be enclosed in the appropriate
-      comment syntax for the file format. We also recommend that a
-      file or class name and description of purpose be included on the
-      same "printed page" as the copyright notice for easier
-      identification within third-party archives.
 
-   Copyright [yyyy] [name of copyright owner]
+The grant of the rights mentioned above is subject to some restrictions and
+obligations imposed on the Licensee. Those obligations are the following:
 
-   Licensed under the Apache License, Version 2.0 (the "License");
+Attribution right: The Licensee shall keep intact all copyright, patent or
-   you may not use this file except in compliance with the License.
+trademarks notices and all notices that refer to the Licence and to the
-   You may obtain a copy of the License at
+disclaimer of warranties. The Licensee must include a copy of such notices and a
+copy of the Licence with every copy of the Work he/she distributes or
+communicates. The Licensee must cause any Derivative Work to carry prominent
+notices stating that the Work has been modified and the date of modification.
 
-       http://www.apache.org/licenses/LICENSE-2.0
+Copyleft clause: If the Licensee distributes or communicates copies of the
+Original Works or Derivative Works, this Distribution or Communication will be
+done under the terms of this Licence or of a later version of this Licence
+unless the Original Work is expressly distributed only under this version of the
+Licence — for example by communicating ‘EUPL v. 1.2 only’. The Licensee
+(becoming Licensor) cannot offer or impose any additional terms or conditions on
+the Work or Derivative Work that alter or restrict the terms of the Licence.
 
-   Unless required by applicable law or agreed to in writing, software
+Compatibility clause: If the Licensee Distributes or Communicates Derivative
-   distributed under the License is distributed on an "AS IS" BASIS,
+Works or copies thereof based upon both the Work and another work licensed under
-   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+a Compatible Licence, this Distribution or Communication can be done under the
-   See the License for the specific language governing permissions and
+terms of this Compatible Licence. For the sake of this clause, ‘Compatible
-   limitations under the License.
+Licence’ refers to the licences listed in the appendix attached to this Licence.
+Should the Licensee's obligations under the Compatible Licence conflict with
+his/her obligations under this Licence, the obligations of the Compatible
+Licence shall prevail.
+
+Provision of Source Code: When distributing or communicating copies of the Work,
+the Licensee will provide a machine-readable copy of the Source Code or indicate
+a repository where this Source will be easily and freely available for as long
+as the Licensee continues to distribute or communicate the Work.
+
+Legal Protection: This Licence does not grant permission to use the trade names,
+trademarks, service marks, or names of the Licensor, except as required for
+reasonable and customary use in describing the origin of the Work and
+reproducing the content of the copyright notice.
+
+6. Chain of Authorship
+
+The original Licensor warrants that the copyright in the Original Work granted
+hereunder is owned by him/her or licensed to him/her and that he/she has the
+power and authority to grant the Licence.
+
+Each Contributor warrants that the copyright in the modifications he/she brings
+to the Work are owned by him/her or licensed to him/her and that he/she has the
+power and authority to grant the Licence.
+
+Each time You accept the Licence, the original Licensor and subsequent
+Contributors grant You a licence to their contributions to the Work, under the
+terms of this Licence.
+
+7. Disclaimer of Warranty
+
+The Work is a work in progress, which is continuously improved by numerous
+Contributors. It is not a finished work and may therefore contain defects or
+‘bugs’ inherent to this type of development.
+
+For the above reason, the Work is provided under the Licence on an ‘as is’ basis
+and without warranties of any kind concerning the Work, including without
+limitation merchantability, fitness for a particular purpose, absence of defects
+or errors, accuracy, non-infringement of intellectual property rights other than
+copyright as stated in Article 6 of this Licence.
+
+This disclaimer of warranty is an essential part of the Licence and a condition
+for the grant of any rights to the Work.
+
+8. Disclaimer of Liability
+
+Except in the cases of wilful misconduct or damages directly caused to natural
+persons, the Licensor will in no event be liable for any direct or indirect,
+material or moral, damages of any kind, arising out of the Licence or of the use
+of the Work, including without limitation, damages for loss of goodwill, work
+stoppage, computer failure or malfunction, loss of data or any commercial
+damage, even if the Licensor has been advised of the possibility of such damage.
+However, the Licensor will be liable under statutory product liability laws as
+far such laws apply to the Work.
+
+9. Additional agreements
+
+While distributing the Work, You may choose to conclude an additional agreement,
+defining obligations or services consistent with this Licence. However, if
+accepting obligations, You may act only on your own behalf and on your sole
+responsibility, not on behalf of the original Licensor or any other Contributor,
+and only if You agree to indemnify, defend, and hold each Contributor harmless
+for any liability incurred by, or claims asserted against such Contributor by
+the fact You have accepted any warranty or additional liability.
+
+10. Acceptance of the Licence
+
+The provisions of this Licence can be accepted by clicking on an icon ‘I agree’
+placed under the bottom of a window displaying the text of this Licence or by
+affirming consent in any other similar way, in accordance with the rules of
+applicable law. Clicking on that icon indicates your clear and irrevocable
+acceptance of this Licence and all of its terms and conditions.
+
+Similarly, you irrevocably accept this Licence and all of its terms and
+conditions by exercising any rights granted to You by Article 2 of this Licence,
+such as the use of the Work, the creation by You of a Derivative Work or the
+Distribution or Communication by You of the Work or copies thereof.
+
+11. Information to the public
+
+In case of any Distribution or Communication of the Work by means of electronic
+communication by You (for example, by offering to download the Work from a
+remote location) the distribution channel or media (for example, a website) must
+at least provide to the public the information requested by the applicable law
+regarding the Licensor, the Licence and the way it may be accessible, concluded,
+stored and reproduced by the Licensee.
+
+12. Termination of the Licence
+
+The Licence and the rights granted hereunder will terminate automatically upon
+any breach by the Licensee of the terms of the Licence.
+
+Such a termination will not terminate the licences of any person who has
+received the Work from the Licensee under the Licence, provided such persons
+remain in full compliance with the Licence.
+
+13. Miscellaneous
+
+Without prejudice of Article 9 above, the Licence represents the complete
+agreement between the Parties as to the Work.
+
+If any provision of the Licence is invalid or unenforceable under applicable
+law, this will not affect the validity or enforceability of the Licence as a
+whole. Such provision will be construed or reformed so as necessary to make it
+valid and enforceable.
+
+The European Commission may publish other linguistic versions or new versions of
+this Licence or updated versions of the Appendix, so far this is required and
+reasonable, without reducing the scope of the rights granted by the Licence. New
+versions of the Licence will be published with a unique version number.
+
+All linguistic versions of this Licence, approved by the European Commission,
+have identical value. Parties can take advantage of the linguistic version of
+their choice.
+
+14. Jurisdiction
+
+Without prejudice to specific agreement between parties,
+
+- any litigation resulting from the interpretation of this License, arising
+  between the European Union institutions, bodies, offices or agencies, as a
+  Licensor, and any Licensee, will be subject to the jurisdiction of the Court
+  of Justice of the European Union, as laid down in article 272 of the Treaty on
+  the Functioning of the European Union,
+
+- any litigation arising between other parties and resulting from the
+  interpretation of this License, will be subject to the exclusive jurisdiction
+  of the competent court where the Licensor resides or conducts its primary
+  business.
+
+15. Applicable Law
+
+Without prejudice to specific agreement between parties,
+
+- this Licence shall be governed by the law of the European Union Member State
+  where the Licensor has his seat, resides or has his registered office,
+
+- this licence shall be governed by Belgian law if the Licensor has no seat,
+  residence or registered office inside a European Union Member State.
+
+Appendix
+
+‘Compatible Licences’ according to Article 5 EUPL are:
+
+- GNU General Public License (GPL) v. 2, v. 3
+- GNU Affero General Public License (AGPL) v. 3
+- Open Software License (OSL) v. 2.1, v. 3.0
+- Eclipse Public License (EPL) v. 1.0
+- CeCILL v. 2.0, v. 2.1
+- Mozilla Public Licence (MPL) v. 2
+- GNU Lesser General Public Licence (LGPL) v. 2.1, v. 3
+- Creative Commons Attribution-ShareAlike v. 3.0 Unported (CC BY-SA 3.0) for
+  works other than software
+- European Union Public Licence (EUPL) v. 1.1, v. 1.2
+- Québec Free and Open-Source Licence — Reciprocity (LiLiQ-R) or Strong
+  Reciprocity (LiLiQ-R+).
+
+The European Commission may update this Appendix to later versions of the above
+licences without producing a new version of the EUPL, as long as they provide
+the rights granted in Article 2 of this Licence and protect the covered Source
+Code from exclusive appropriation.
+
+All other changes or additions to this Appendix require the production of a new
+EUPL version.

README.md

@@ -1,10 +1,15 @@
 # Keycloak Metrics
 
-Provides metrics for Keycloak user/admin events and user/client/session count. Tested on Keycloak [22-26](.github/workflows/pr.yaml#L48-L53).
+Provides metrics for Keycloak user/admin events and user/client/session count. Tested on Keycloak [22-26](.woodpecker/verify.yaml#L7-L11).
 
-[![Apache License, Version 2.0, January 2004](https://img.shields.io/github/license/kokuwaio/keycloak-event-metrics.svg?label=License)](http://www.apache.org/licenses/)
 [![Maven Central](https://img.shields.io/maven-central/v/io.kokuwa.keycloak/keycloak-event-metrics.svg?label=Maven%20Central)](https://central.sonatype.com/search?namespace=io.kokuwa.keycloak&q=keycloak-event-metrics)
-[![Build](https://img.shields.io/github/actions/workflow/status/kokuwaio/keycloak-event-metrics/build.yaml?label=Build)](https://github.com/kokuwaio/keycloak-event-metrics/actions/workflows/build.yaml)
+[![pulls](https://img.shields.io/docker/pulls/kokuwaio/keycloak-event-metrics)](https://hub.docker.com/r/kokuwaio/keycloak-event-metrics)
+[![size](https://img.shields.io/docker/image-size/kokuwaio/keycloak-event-metrics)](https://hub.docker.com/r/kokuwaio/keycloak-event-metrics)
+[![dockerfile](https://img.shields.io/badge/source-Dockerfile%20-blue)](https://git.kokuwa.io/keycloak/keycloak-event-metrics/src/branch/main/Dockerfile)
+[![license](https://img.shields.io/badge/License-EUPL%201.2-blue)](https://git.kokuwa.io/keycloak/keycloak-event-metrics/src/branch/main/LICENSE)
+[![prs](https://img.shields.io/gitea/pull-requests/open/keycloak/keycloak-event-metrics?gitea_url=https%3A%2F%2Fgit.kokuwa.io)](https://git.kokuwa.io/keycloak/keycloak-event-metrics/pulls)
+[![issues](https://img.shields.io/gitea/issues/open/keycloak/keycloak-event-metrics?gitea_url=https%3A%2F%2Fgit.kokuwa.io)](https://git.kokuwa.io/keycloak/keycloak-event-metrics/issues)
+[![build](https://ci.kokuwa.io/api/badges/keycloak/keycloak-event-metrics/status.svg)](https://ci.kokuwa.io/repos/keycloak/keycloak-event-metrics/)
 
 ## Why?
 
@@ -114,7 +119,7 @@ If scrapping takes less than `KC_METRICS_STATS_INFO_THRESHOLD` duration will be
 
 ### Grafana Dashboard
 
-Can be found here: [kokuwaio/keycloak keycloak-metrics.json](https://github.com/kokuwaio/keycloak/blob/main/src/test/k3s/dev/grafana/files/dashboards/keycloak-metrics.json)
+Can be found here: [keycloak-metrics.json](https://git.kokuwa.io/keycloak/keycloak/blob/main/src/test/k3s/dev/grafana/files/dashboards/keycloak-metrics.json)
 
 ### Testcontainers
 
@@ -131,7 +136,7 @@ This images are based on busybox, so you can use cp to copy the jar into your ke
 
 ### Docker
 
-Check: [kokuwaio/keycloak](https://github.com/kokuwaio/keycloak)
+Check: [kowaio/keycloak](https://git.kokuwa.io/keycloak/keycloak)
 
 Dockerfile:
 
@@ -145,7 +150,7 @@ FROM debian:stable-slim AS metrics
 RUN apt-get -qq update
 RUN apt-get -qq install --yes --no-install-recommends ca-certificates wget
 
-ARG METRICS_VERSION=1.0.0
+ARG METRICS_VERSION=2.0.0
 ARG METRICS_FILE=keycloak-event-metrics-${METRICS_VERSION}.jar
 ARG METRICS_URL=https://repo1.maven.org/maven2/io/kokuwa/keycloak/keycloak-event-metrics/${METRICS_VERSION}
 
@@ -159,7 +164,7 @@ RUN mv ${METRICS_FILE} /opt/keycloak/providers
 ### build keycloak with metrics
 ###
 
-FROM quay.io/keycloak/keycloak:25.0.1
+FROM quay.io/keycloak/keycloak:25.2.5
 
 ENV KEYCLOAK_ADMIN=admin
 ENV KEYCLOAK_ADMIN_PASSWORD=password

pom.xml

@@ -4,11 +4,11 @@
 
 	<groupId>io.kokuwa.keycloak</groupId>
 	<artifactId>keycloak-event-metrics</artifactId>
-	<version>1.1.2-SNAPSHOT</version>
+	<version>2.0.0-SNAPSHOT</version>
 
 	<name>Keycloak Metrics</name>
 	<description>Provides metrics for Keycloak user/admin events</description>
-	<url>https://github.com/kokuwaio/keycloak-event-metrics</url>
+	<url>https://git.kokuwa.io/keycloak/keycloak-event-metrics</url>
 	<inceptionYear>2023</inceptionYear>
 	<organization>
 		<name>Kokuwa.io</name>
@@ -16,8 +16,8 @@
 	</organization>
 	<licenses>
 		<license>
-			<name>Apache-2.0</name>
+			<name>EUPL-1.2</name>
-			<url>https://www.apache.org/licenses/LICENSE-2.0.txt</url>
+			<url>https://eupl.eu/1.2/en</url>
 			<distribution>repo</distribution>
 		</license>
 	</licenses>
@@ -33,27 +33,23 @@
 	</developers>
 
 	<scm>
-		<url>https://github.com/kokuwaio/keycloak-event-metrics</url>
+		<url>https://git.kokuwa.io/keycloak/keycloak-event-metrics</url>
-		<connection>scm:git:https://github.com/kokuwaio/keycloak-event-metrics.git</connection>
+		<connection>scm:git:https://git.kokuwa.io/keycloak/keycloak-event-metrics.git</connection>
-		<developerConnection>scm:git:https://github.com/kokuwaio/keycloak-event-metrics.git</developerConnection>
+		<developerConnection>scm:git:https://git.kokuwa.io/keycloak/keycloak-event-metrics.git</developerConnection>
 		<tag>HEAD</tag>
 	</scm>
 	<issueManagement>
-		<system>github</system>
+		<system>forgejo</system>
-		<url>https://github.com/kokuwaio/keycloak-event-metrics/issues</url>
+		<url>https://git.kokuwa.io/keycloak/keycloak-event-metrics/issues</url>
 	</issueManagement>
 	<ciManagement>
-		<system>github</system>
+		<system>woodpecker</system>
-		<url>https://github.com/kokuwaio/keycloak-event-metrics/actions</url>
+		<url>https://ci.kokuwa.io/repos/keycloak/keycloak-event-metrics</url>
 	</ciManagement>
 	<distributionManagement>
-		<repository>
-			<id>sonatype-nexus</id>
-			<url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
-		</repository>
 		<snapshotRepository>
-			<id>sonatype-nexus</id>
+			<id>sonatype.org</id>
-			<url>https://oss.sonatype.org/content/repositories/snapshots/</url>
+			<url>https://central.sonatype.com/repository/maven-snapshots/</url>
 		</snapshotRepository>
 	</distributionManagement>
 
@@ -83,28 +79,8 @@
 		<!-- ============================= Versions ============================== -->
 		<!-- ===================================================================== -->
 
-		<version.org.apache.maven.plugins.clean>3.4.1</version.org.apache.maven.plugins.clean>
-		<version.org.apache.maven.plugins.compiler>3.14.0</version.org.apache.maven.plugins.compiler>
-		<version.org.apache.maven.plugins.deploy>3.1.4</version.org.apache.maven.plugins.deploy>
-		<version.org.apache.maven.plugins.gpg>3.2.7</version.org.apache.maven.plugins.gpg>
-		<version.org.apache.maven.plugins.install>3.1.4</version.org.apache.maven.plugins.install>
-		<version.org.apache.maven.plugins.jar>3.4.2</version.org.apache.maven.plugins.jar>
-		<version.org.apache.maven.plugins.javadoc>3.11.2</version.org.apache.maven.plugins.javadoc>
-		<version.org.apache.maven.plugins.release>3.1.1</version.org.apache.maven.plugins.release>
-		<version.org.apache.maven.plugins.resources>3.3.1</version.org.apache.maven.plugins.resources>
-		<version.org.apache.maven.plugins.site>3.21.0</version.org.apache.maven.plugins.site>
-		<version.org.apache.maven.plugins.source>3.3.1</version.org.apache.maven.plugins.source>
-		<version.org.apache.maven.plugins.surefire>3.5.3</version.org.apache.maven.plugins.surefire>
-		<version.org.codehaus.mojo.tidy>1.4.0</version.org.codehaus.mojo.tidy>
-		<version.org.codehaus.mojo.versions>2.18.0</version.org.codehaus.mojo.versions>
-		<version.org.sonatype.plugins.nexus>1.7.0</version.org.sonatype.plugins.nexus>
-		<version.net.revelc.code.formatter>2.26.0</version.net.revelc.code.formatter>
-		<version.net.revelc.code.impsort>1.12.0</version.net.revelc.code.impsort>
-		<version.io.fabric8.docker>0.46.0</version.io.fabric8.docker>
-
 		<version.org.keycloak>26.2.5</version.org.keycloak>
 		<version.org.keycloak.test>${version.org.keycloak}</version.org.keycloak.test>
-		<version.org.testcontainers>1.18.3</version.org.testcontainers>
 
 	</properties>
 
@@ -153,6 +129,15 @@
 					<groupId>org.jboss.resteasy</groupId>
 					<artifactId>resteasy-multipart-provider</artifactId>
 				</exclusion>
+				<!-- The POM for ... is invalid -->
+				<exclusion>
+					<groupId>com.sun.istack</groupId>
+					<artifactId>istack-commons-tools</artifactId>
+				</exclusion>
+				<exclusion>
+					<groupId>com.sun.istack</groupId>
+					<artifactId>istack-commons-runtime</artifactId>
+				</exclusion>
 			</exclusions>
 		</dependency>
 
@@ -219,6 +204,7 @@
 	</dependencies>
 
 	<build>
+		<finalName>${project.artifactId}</finalName>
 		<testResources>
 			<testResource>
 				<directory>${project.basedir}/src/test/resources</directory>
@@ -227,15 +213,10 @@
 		</testResources>
 		<pluginManagement>
 			<plugins>
-				<plugin>
-					<groupId>org.apache.maven.plugins</groupId>
-					<artifactId>maven-clean-plugin</artifactId>
-					<version>${version.org.apache.maven.plugins.clean}</version>
-				</plugin>
 				<plugin>
 					<groupId>org.apache.maven.plugins</groupId>
 					<artifactId>maven-compiler-plugin</artifactId>
-					<version>${version.org.apache.maven.plugins.compiler}</version>
+					<version>3.14.0</version>
 					<configuration>
 						<compilerArgument>${maven.compiler.compilerArgument}</compilerArgument>
 					</configuration>
@@ -243,41 +224,41 @@
 				<plugin>
 					<groupId>org.apache.maven.plugins</groupId>
 					<artifactId>maven-deploy-plugin</artifactId>
-					<version>${version.org.apache.maven.plugins.deploy}</version>
+					<version>3.1.4</version>
 				</plugin>
 				<plugin>
 					<groupId>org.apache.maven.plugins</groupId>
 					<artifactId>maven-failsafe-plugin</artifactId>
-					<version>${version.org.apache.maven.plugins.surefire}</version>
+					<version>3.5.3</version>
 				</plugin>
 				<plugin>
 					<groupId>org.apache.maven.plugins</groupId>
 					<artifactId>maven-gpg-plugin</artifactId>
-					<version>${version.org.apache.maven.plugins.gpg}</version>
+					<version>3.2.7</version>
 				</plugin>
 				<plugin>
 					<groupId>org.apache.maven.plugins</groupId>
 					<artifactId>maven-install-plugin</artifactId>
-					<version>${version.org.apache.maven.plugins.install}</version>
+					<version>3.1.4</version>
 				</plugin>
 				<plugin>
 					<groupId>org.apache.maven.plugins</groupId>
 					<artifactId>maven-jar-plugin</artifactId>
-					<version>${version.org.apache.maven.plugins.jar}</version>
+					<version>3.4.2</version>
 				</plugin>
 				<plugin>
 					<groupId>org.apache.maven.plugins</groupId>
 					<artifactId>maven-javadoc-plugin</artifactId>
-					<version>${version.org.apache.maven.plugins.javadoc}</version>
+					<version>3.11.2</version>
 				</plugin>
 				<plugin>
 					<groupId>org.apache.maven.plugins</groupId>
 					<artifactId>maven-release-plugin</artifactId>
-					<version>${version.org.apache.maven.plugins.release}</version>
+					<version>3.1.1</version>
 					<configuration>
-						<preparationGoals>clean verify</preparationGoals>
+						<preparationGoals>test</preparationGoals>
 						<preparationProfiles>check</preparationProfiles>
-						<goals>deploy</goals>
+						<goals>deploy -DskipITs</goals>
 						<releaseProfiles>deploy,release</releaseProfiles>
 						<signTag>true</signTag>
 						<scmReleaseCommitComment>@{prefix} prepare release @{releaseLabel} [CI SKIP]</scmReleaseCommitComment>
@@ -287,7 +268,7 @@
 				<plugin>
 					<groupId>org.apache.maven.plugins</groupId>
 					<artifactId>maven-resources-plugin</artifactId>
-					<version>${version.org.apache.maven.plugins.resources}</version>
+					<version>3.3.1</version>
 					<configuration>
 						<propertiesEncoding>${project.build.propertiesEncoding}</propertiesEncoding>
 					</configuration>
@@ -295,43 +276,32 @@
 				<plugin>
 					<groupId>org.apache.maven.plugins</groupId>
 					<artifactId>maven-site-plugin</artifactId>
-					<version>${version.org.apache.maven.plugins.site}</version>
+					<version>3.21.0</version>
 				</plugin>
 				<plugin>
 					<groupId>org.apache.maven.plugins</groupId>
 					<artifactId>maven-source-plugin</artifactId>
-					<version>${version.org.apache.maven.plugins.source}</version>
+					<version>3.3.1</version>
 				</plugin>
 				<plugin>
 					<groupId>org.apache.maven.plugins</groupId>
 					<artifactId>maven-surefire-plugin</artifactId>
-					<version>${version.org.apache.maven.plugins.surefire}</version>
+					<version>3.5.3</version>
 				</plugin>
 				<plugin>
 					<groupId>org.codehaus.mojo</groupId>
 					<artifactId>tidy-maven-plugin</artifactId>
-					<version>${version.org.codehaus.mojo.tidy}</version>
+					<version>1.4.0</version>
 				</plugin>
 				<plugin>
-					<groupId>org.codehaus.mojo</groupId>
+					<groupId>org.sonatype.central</groupId>
-					<artifactId>versions-maven-plugin</artifactId>
+					<artifactId>central-publishing-maven-plugin</artifactId>
-					<version>${version.org.codehaus.mojo.versions}</version>
+					<version>0.8.0</version>
-					<configuration>
-						<generateBackupPoms>false</generateBackupPoms>
-						<ignoredVersions>
-							<ignoredVersion>^.*-(alpha|beta|M)-?[0-9]+$</ignoredVersion>
-						</ignoredVersions>
-					</configuration>
-				</plugin>
-				<plugin>
-					<groupId>org.sonatype.plugins</groupId>
-					<artifactId>nexus-staging-maven-plugin</artifactId>
-					<version>${version.org.sonatype.plugins.nexus}</version>
 				</plugin>
 				<plugin>
 					<groupId>net.revelc.code.formatter</groupId>
 					<artifactId>formatter-maven-plugin</artifactId>
-					<version>${version.net.revelc.code.formatter}</version>
+					<version>2.26.0</version>
 					<configuration>
 						<configFile>${formatter.configFile}</configFile>
 					</configuration>
@@ -339,12 +309,7 @@
 				<plugin>
 					<groupId>net.revelc.code</groupId>
 					<artifactId>impsort-maven-plugin</artifactId>
-					<version>${version.net.revelc.code.impsort}</version>
+					<version>1.12.0</version>
-				</plugin>
-				<plugin>
-					<groupId>io.fabric8</groupId>
-					<artifactId>docker-maven-plugin</artifactId>
-					<version>${version.io.fabric8.docker}</version>
 				</plugin>
 			</plugins>
 		</pluginManagement>
@@ -496,7 +461,7 @@
 						<executions>
 							<execution>
 								<goals>
-									<goal>jar-no-fork</goal>
+									<goal>jar</goal>
 								</goals>
 							</execution>
 						</executions>
@@ -507,109 +472,12 @@
 						<executions>
 							<execution>
 								<goals>
-									<goal>javadoc-no-fork</goal>
+									<goal>jar</goal>
 								</goals>
 							</execution>
 						</executions>
 					</plugin>
 
-					<!-- docker image -->
-					<plugin>
-						<groupId>io.fabric8</groupId>
-						<artifactId>docker-maven-plugin</artifactId>
-						<executions>
-							<execution>
-								<id>build</id>
-								<phase>install</phase>
-								<goals>
-									<goal>build</goal>
-								</goals>
-							</execution>
-							<execution>
-								<id>push</id>
-								<phase>deploy</phase>
-								<goals>
-									<goal>push</goal>
-								</goals>
-							</execution>
-						</executions>
-						<configuration>
-							<verbose>build</verbose>
-							<images>
-								<image>
-									<name>docker.io/kokuwaio/keycloak-event-metrics:${project.version}</name>
-									<build>
-										<from>docker.io/library/busybox:1.37.0-uclibc@sha256:cc57e0ff4b6d3138931ff5c7180d18078813300e2508a25fb767a4d36df30d4d</from>
-										<assembly>
-											<basedir>${file.separator}</basedir>
-											<inline>
-												<files>
-													<file>
-														<source>${project.build.directory}/${project.build.finalName}.jar</source>
-														<destName>${project.artifactId}.jar</destName>
-														<fileMode>444</fileMode>
-													</file>
-												</files>
-											</inline>
-										</assembly>
-										<labels>
-											<!-- https://github.com/opencontainers/image-spec/blob/main/annotations.md -->
-											<org.opencontainers.image.title>${project.name}</org.opencontainers.image.title>
-											<org.opencontainers.image.description>${project.description}</org.opencontainers.image.description>
-											<org.opencontainers.image.url>${project.url}</org.opencontainers.image.url>
-											<org.opencontainers.image.source>${project.scm.url}</org.opencontainers.image.source>
-											<org.opencontainers.image.vendor>${project.organization.name}</org.opencontainers.image.vendor>
-											<org.opencontainers.image.authors>https://github.com/orgs/kokuwaio/people</org.opencontainers.image.authors>
-											<org.opencontainers.image.licenses>${project.licenses[0].name}</org.opencontainers.image.licenses>
-											<org.opencontainers.image.version>${project.version}</org.opencontainers.image.version>
-											<org.opencontainers.image.base.name>docker.io/library/busybox:1.37.0-uclibc</org.opencontainers.image.base.name>
-											<org.opencontainers.image.base.digest>sha256:cc57e0ff4b6d3138931ff5c7180d18078813300e2508a25fb767a4d36df30d4d</org.opencontainers.image.base.digest>
-										</labels>
-									</build>
-								</image>
-								<image>
-									<name>ghcr.io/kokuwaio/keycloak-event-metrics:${project.version}</name>
-									<build>
-										<from>docker.io/library/busybox:1.37.0-uclibc@sha256:cc57e0ff4b6d3138931ff5c7180d18078813300e2508a25fb767a4d36df30d4d</from>
-										<assembly>
-											<basedir>${file.separator}</basedir>
-											<inline>
-												<files>
-													<file>
-														<source>${project.build.directory}/${project.build.finalName}.jar</source>
-														<destName>${project.artifactId}.jar</destName>
-														<fileMode>444</fileMode>
-													</file>
-												</files>
-											</inline>
-										</assembly>
-										<labels>
-											<!-- https://github.com/opencontainers/image-spec/blob/main/annotations.md -->
-											<org.opencontainers.image.title>${project.name}</org.opencontainers.image.title>
-											<org.opencontainers.image.description>${project.description}</org.opencontainers.image.description>
-											<org.opencontainers.image.url>${project.url}</org.opencontainers.image.url>
-											<org.opencontainers.image.source>${project.scm.url}</org.opencontainers.image.source>
-											<org.opencontainers.image.vendor>${project.organization.name}</org.opencontainers.image.vendor>
-											<org.opencontainers.image.authors>https://github.com/orgs/kokuwaio/people</org.opencontainers.image.authors>
-											<org.opencontainers.image.licenses>${project.licenses[0].name}</org.opencontainers.image.licenses>
-											<org.opencontainers.image.version>${project.version}</org.opencontainers.image.version>
-											<org.opencontainers.image.base.name>docker.io/library/busybox:1.37.0-uclibc</org.opencontainers.image.base.name>
-											<org.opencontainers.image.base.digest>sha256:cc57e0ff4b6d3138931ff5c7180d18078813300e2508a25fb767a4d36df30d4d</org.opencontainers.image.base.digest>
-										</labels>
-									</build>
-								</image>
-							</images>
-						</configuration>
-					</plugin>
-
-				</plugins>
-			</build>
-		</profile>
-		<profile>
-			<id>release</id>
-			<build>
-				<plugins>
-
 					<!-- sign before upload -->
 					<plugin>
 						<groupId>org.apache.maven.plugins</groupId>
@@ -619,22 +487,31 @@
 								<goals>
 									<goal>sign</goal>
 								</goals>
+								<configuration>
+									<signer>bc</signer>
+								</configuration>
 							</execution>
 						</executions>
 					</plugin>
 
-					<!-- autoclose sonatype nexus repo -->
+				</plugins>
-					<plugin>
+			</build>
-						<groupId>org.sonatype.plugins</groupId>
+		</profile>
-						<artifactId>nexus-staging-maven-plugin</artifactId>
+		<profile>
-						<extensions>true</extensions>
+			<id>release</id>
-						<configuration>
+			<build>
-							<serverId>sonatype-nexus</serverId>
+				<plugins>
-							<nexusUrl>https://oss.sonatype.org/</nexusUrl>
+					<plugin>
-							<autoReleaseAfterClose>true</autoReleaseAfterClose>
+						<groupId>org.sonatype.central</groupId>
-						</configuration>
+						<artifactId>central-publishing-maven-plugin</artifactId>
-					</plugin>
+						<extensions>true</extensions>
-
+						<configuration>
+							<skipPublishing>true</skipPublishing>
+							<publishingServerId>sonatype.org</publishingServerId>
+							<autoPublish>true</autoPublish>
+							<waitUntil>published</waitUntil>
+						</configuration>
+					</plugin>
 				</plugins>
 			</build>
 		</profile>

renovate.json

@@ -0,0 +1,5 @@
+{
+	"$schema": "https://docs.renovatebot.com/renovate-schema.json",
+	"extends": ["local>infrastructure/renovate-config", ":reviewer(stephan.schnabel)"],
+	"pinDigests": false
+}

src/test/java/io/kokuwa/keycloak/metrics/junit/KeycloakExtension.java

@@ -15,6 +15,7 @@ import org.junit.jupiter.api.extension.ParameterContext;
 import org.junit.jupiter.api.extension.ParameterResolver;
 import org.keycloak.admin.client.Keycloak;
 import org.keycloak.admin.client.token.TokenService;
+import org.testcontainers.containers.FixedHostPortGenericContainer;
 import org.testcontainers.containers.GenericContainer;
 import org.testcontainers.containers.wait.strategy.Wait;
 import org.testcontainers.utility.MountableFile;
@@ -45,30 +46,33 @@ public class KeycloakExtension implements BeforeAllCallback, ParameterResolver {
 			throw new Exception("Failed to read properties", e);
 		}
 		var version = properties.getProperty("version");
+		var image = "quay.io/keycloak/keycloak:" + version;
 		var jar = properties.getProperty("jar");
 		var timeout = properties.getProperty("timeout");
 
-		// create and start container
+		// create and start container - use fixed port in ci
 
-		@SuppressWarnings("resource")
+		@SuppressWarnings({ "resource", "deprecation" })
-		var container = new GenericContainer<>("quay.io/keycloak/keycloak:" + version)
+		var container = (System.getenv("CI") == null
-				.withEnv("KEYCLOAK_ADMIN", "admin")
+				? new GenericContainer<>(image).withExposedPorts(8080)
-				.withEnv("KEYCLOAK_ADMIN_PASSWORD", "password")
+				: new FixedHostPortGenericContainer<>(image).withFixedExposedPort(8080, 8080));
-				.withEnv("KC_LOG_LEVEL", "io.kokuwa:trace")
-				// otherwise port 9000 will be used, with this config we can test different keycloak versions
-				.withEnv("KC_LEGACY_OBSERVABILITY_INTERFACE", "true")
-				.withEnv("KC_HEALTH_ENABLED", "true")
-				.withEnv("KC_METRICS_ENABLED", "true")
-				.withEnv("KC_METRICS_STATS_ENABLED", "true")
-				.withEnv("KC_METRICS_STATS_INTERVAL", "PT1s")
-				.withCopyFileToContainer(MountableFile.forHostPath(jar), "/opt/keycloak/providers/metrics.jar")
-				.withLogConsumer(out -> System.out.print(out.getUtf8String()))
-				.withExposedPorts(8080)
-				.withStartupTimeout(Duration.parse(timeout))
-				.waitingFor(Wait.forHttp("/health").forPort(8080))
-				.withCommand("start-dev");
 		try {
-			container.start();
+			container
+					.withEnv("KEYCLOAK_ADMIN", "admin")
+					.withEnv("KEYCLOAK_ADMIN_PASSWORD", "password")
+					.withEnv("KC_LOG_LEVEL", "io.kokuwa:trace")
+					// otherwise port 9000 will be used, with this config we can test different keycloak versions
+					.withEnv("KC_LEGACY_OBSERVABILITY_INTERFACE", "true")
+					.withEnv("KC_HEALTH_ENABLED", "true")
+					.withEnv("KC_METRICS_ENABLED", "true")
+					.withEnv("KC_METRICS_STATS_ENABLED", "true")
+					.withEnv("KC_METRICS_STATS_INTERVAL", "PT1s")
+					.withCopyFileToContainer(MountableFile.forHostPath(jar), "/opt/keycloak/providers/metrics.jar")
+					.withLogConsumer(out -> System.out.print(out.getUtf8String()))
+					.withStartupTimeout(Duration.parse(timeout))
+					.waitingFor(Wait.forHttp("/health").forPort(8080).withStartupTimeout(Duration.ofMinutes(10)))
+					.withCommand("start-dev")
+					.start();
 		} catch (RuntimeException e) {
 			throw new Exception("Failed to start keycloak", e);
 		}