Host name must not be null (cloud impl should have handled such errors earlier).
doc improvement
added a convenience method
Addd a new utility for a persisted boolean
Improved XStreamDOM by adding more methods
added a convenience method
Addd a new utility for a persisted boolean
Merge branch 'rc'
[SECURITY-49] Deprecating Jenkins.getSecretKey()

We are replacing it by the ConfidentialStore class and the
ConfidentialKey class, which provides purpose-specific confidential
information that are separated from each other.

In this way, not all eggs are in one basket, and in case of a
compromise, the impact will contained.

Also replaced several insecure use of digest(secret|messsage) or
digest(message|secret) by HMAC.
[SECURITY-49] added a tool to re-key secrets

As an AdministrativeMonitor, it shows up in the manage Jenkins UI, and
allows the administrator to run a re-keying operation.
[SECURITY-49] Backing off from @Extension-based discovery.

This is because we discovered some plugins that use Secret early on in
the initialization.
Adding back the link in here.

I look at javadoc only from IDE as a part the source code, I just won't notice package-info.java.
If the DescribableList is modified, transient actions need to be rebuilt.
[SECURITY-49] mark secret.key generated by post SECURITY-49 Jenkins.

If JENKINS_HOME is created by a post SECURIT-49 Jenkins (LTS, and other
variants), then there's no need to alarm the user.
[SECURITY-49] actively invalidate bad API tokens.

If the user still has the API token that's generated from secret.key,
don't accept that.

Hopefully this is the last fix
Adding changelog
[maven-release-plugin] prepare release jenkins-1.497
[maven-release-plugin] prepare for next development iteration
updated changelog for release
updated changelog as a part of the release