* bump tomcat version to  9.0.58 to fix cve
[CVE-2022-23181](https://lists.apache.org/thread/l8x62p3k19yfcb208jo4zrb83k5mfwg9)

Our internal repository was mirroring restlet repository, it's not the case anymore.

Fix it by adding restlet repo to the pom

bump tomcat version to 9.0.56 to fix cve [CVE-2021-42340](https://security.netapp.com/advisory/ntap-20211104-0001/)

cherry pick commit 872fd7d and 5aeb603 PRs #430 and #431  to enable formatMsgNoLookups to mitigate impact CVE-2021-44228 with custom client's code

* fix(datasource): make proposed changes to datasource
* specify removeAbandoned="false"

Relates to [RUNTIME-495](https://bonitasoft.atlassian.net/browse/RUNTIME-495)

That period was poluting logs in case of a xa resource that is not
recoverable.
This can happen when a arjuna is commiting an XA transaction but the
connection fails at that time. In that case Arjuna does not know what to
do with the XA transaction and tries to recover it each time (it is in
HEURISTIC_HAZARD state). This happens even if there is a single
resource. In that case, it requires an human action to remove the
resource form the transaction log.

Set that period to 2 hours by default to reduce the impact on logs while
keeping the issue visible.

Relates to [RUNTIME-45](https://bonitasoft.atlassian.net/browse/RUNTIME-45)
Relates to [RUNTIME-625](https://bonitasoft.atlassian.net/browse/RUNTIME-625)

default web.xml added with 60min session-timeout.
The change was needed to match with bonita config:
#bonita.tenant.session.duration=3600000

The timeout is set while building the bundle zip

Closes [RUNTIME-117](https://bonitasoft.atlassian.net/browse/RUNTIME-117)

Previously, when attempting to recover a XAConnection, no new connection was initialized. The recovery failed, and was retried indefinitely.

We now check if there is an active connection, attempt to close it properly and then create a new one.

Closes [RUNTIME-45](https://bonitasoft.atlassian.net/browse/RUNTIME-45)

* there is no conflict with commons-collections
* commons-logging and commons-codec seem to be uses in a different version in bundle-test only but bundle-test depends on bonita-client only and those are server dependencies

Allow to specify the user with docker run parameter `--user`.

Doing this will change the user with which the container is run.
If the user given is not root, we do not try to change some of the folders ownership using `chown` or `chmod`.
To allow this behavior, at docker build, we open access rights of few folders to 777 (all users can do anything) and then restrict them if we are root at startup. This is a common strategy to support that. See:
https://github.com/docker-library/postgres/pull/253


This comes with some limitation: mounted folder need to have correct access rights configured when running with this option

Closes [RUNTIME-547](https://bonitasoft.atlassian.net/browse/RUNTIME-547)
Relates to [PF-6998](https://bonitasoft.atlassian.net/browse/PF-6998)

move all ENV and ARG as low as possible to restore cache-ability

on Maven Central, by removing the parent pom

Closes [RUNTIME-540](https://bonitasoft.atlassian.net/browse/RUNTIME-540)

`RUN` instructions are highly cachable but must be put before more volatile `COPY` instructions.

Put all "static" bits first and then the ones that are more likely to change.

Put copy instructions at the end only.

docker hub has refused our pull request because our Dockerfile uses a multi-layer with a non official images. The docker policy forbid this practice. more details [here](https://github.com/docker-library/official-images/pull/10960#issuecomment-926809718)

Closes [RUNTIME-539](https://bonitasoft.atlassian.net/browse/RUNTIME-539)

# Conflicts:
#	bundle-tests/pom.xml
#	community/bonita-war/pom.xml
#	community/pom.xml
#	community/resources/api-extension-example/pom.xml
#	community/resources/api-extension-viewer/pom.xml
#	community/resources/bonita-theme-archetype/pom.xml
#	community/resources/bonita-theme/pom.xml
#	community/resources/bootstrap-default-theme/pom.xml
#	community/resources/example/pom.xml
#	community/resources/groovy-example/pom.xml
#	community/resources/html-example/pom.xml
#	community/resources/looknfeel/pom.xml
#	community/resources/pom.xml
#	community/resources/process-autogenerated-form/pom.xml
#	community/resources/step-autogenerated-form/pom.xml
#	community/tomcat-resources/bonita-tomcat-juli/pom.xml
#	community/tomcat-resources/pom.xml
#	community/tomcat-resources/tomcat-distrib-for-bonita/pom.xml
#	community/tomcat-resources/tomcat-jta/pom.xml
#	community/tomcat/pom.xml
#	pom.xml
#	subscription/bonita-war/pom.xml
#	subscription/pom.xml
#	subscription/resources/cosmo-theme/pom.xml
#	subscription/resources/flatly-theme/pom.xml
#	subscription/resources/pom.xml
#	subscription/resources/readable-theme/pom.xml
#	subscription/resources/simplex-theme/pom.xml
#	subscription/resources/superhero-theme/pom.xml
#	subscription/tomcat/pom.xml

in version 2.0: https://github.com/apangin/jattach

to be able to debug running envs more easily, in particular in customer environments.

Closes [RUNTIME-497](https://bonitasoft.atlassian.net/browse/RUNTIME-497)

* feat(reporting): remove default Jasper reports from distribution

* Reporting capabilities are still there, though (through APIs)
* completely remove Jasper report tests

Add specific logging configuration for SSO features

Relates to [RUNTIME-279](https://bonitasoft.atlassian.net/browse/RUNTIME-279)

* remove bootswatch themes
* update npm deps for `bonita-theme` and `default-theme`
* remove `bonita-theme-archetype` as it has been extracted from this
project a while ago
(https://github.com/bonitasoft/bonita-theme-archetype)
* remove groovy compiler dependencies as we are not building rest api
extensions anymore

as the tomcat 9 pulled version is the right one now

Relates to [RUNTIME-434](https://bonitasoft.atlassian.net/browse/RUNTIME-434)

remove it from runtime BOM because it is now in the engine BOM

Relates to [RUNTIME-434](https://bonitasoft.atlassian.net/browse/RUNTIME-434)

* bump tomcat version to 9.0.52
* bump servlet api to 4.0.1
* cargo extends the good Tomcat9xInstalledLocalContainer

Relates to [RUNTIME-434](https://bonitasoft.atlassian.net/browse/RUNTIME-434)

This change is done to avoid conflicts when building docker image in PRs (e.g. PR tag a
7.13.0-SNAPSHOT and dev does the same at the same time)

Add a new option `-t` on the `build.sh`. It takes in input a tag name
and it overrides the default tag (`bonitasoft/...:7.x.y-SNAPSHOT`)

This simplifies the build and push of image on `quay` (it avoid using an
intermediate tag)

Relates to [RUNTIME-418](https://bonitasoft.atlassian.net/browse/RUNTIME-418)

# Conflicts:
#	bundle-tests/pom.xml
#	community/bonita-war/pom.xml
#	community/pom.xml
#	community/resources/api-extension-example/pom.xml
#	community/resources/api-extension-viewer/pom.xml
#	community/resources/bonita-theme-archetype/pom.xml
#	community/resources/bonita-theme/pom.xml
#	community/resources/bootstrap-default-theme/pom.xml
#	community/resources/example/pom.xml
#	community/resources/groovy-example/pom.xml
#	community/resources/html-example/pom.xml
#	community/resources/looknfeel/pom.xml
#	community/resources/pom.xml
#	community/resources/process-autogenerated-form/pom.xml
#	community/resources/step-autogenerated-form/pom.xml
#	community/tomcat-resources/bonita-tomcat-juli/pom.xml
#	community/tomcat-resources/pom.xml
#	community/tomcat-resources/tomcat-distrib-for-bonita/pom.xml
#	community/tomcat-resources/tomcat-jta/pom.xml
#	community/tomcat/pom.xml
#	pom.xml
#	subscription/bonita-war/pom.xml
#	subscription/pom.xml
#	subscription/resources/cosmo-theme/pom.xml
#	subscription/resources/flatly-theme/pom.xml
#	subscription/resources/pom.xml
#	subscription/resources/readable-theme/pom.xml
#	subscription/resources/simplex-theme/pom.xml
#	subscription/resources/superhero-theme/pom.xml
#	subscription/tomcat/pom.xml

# Conflicts:
#	bundle-tests/pom.xml
#	community/bonita-war/pom.xml
#	community/pom.xml
#	community/resources/api-extension-example/pom.xml
#	community/resources/api-extension-viewer/pom.xml
#	community/resources/bonita-theme-archetype/pom.xml
#	community/resources/bonita-theme/pom.xml
#	community/resources/bootstrap-default-theme/pom.xml
#	community/resources/example/pom.xml
#	community/resources/groovy-example/pom.xml
#	community/resources/html-example/pom.xml
#	community/resources/looknfeel/pom.xml
#	community/resources/pom.xml
#	community/resources/process-autogenerated-form/pom.xml
#	community/resources/step-autogenerated-form/pom.xml
#	community/tomcat-resources/bonita-tomcat-juli/pom.xml
#	community/tomcat-resources/pom.xml
#	community/tomcat-resources/tomcat-distrib-for-bonita/pom.xml
#	community/tomcat-resources/tomcat-jta/pom.xml
#	community/tomcat/pom.xml
#	pom.xml
#	subscription/bonita-war/pom.xml
#	subscription/pom.xml
#	subscription/resources/cosmo-theme/pom.xml
#	subscription/resources/flatly-theme/pom.xml
#	subscription/resources/pom.xml
#	subscription/resources/readable-theme/pom.xml
#	subscription/resources/simplex-theme/pom.xml
#	subscription/resources/superhero-theme/pom.xml
#	subscription/tomcat/pom.xml

covers [RUNTIME-397](https://bonitasoft.atlassian.net/browse/RUNTIME-397)