Update oss-parent to 5, metricshub/workflows to v8 and the site to Doxia 2

[NassimBtk]

GitHub runners now ship Maven 3.10.0 (image ubuntu24/20261004 and later). This PR aligns the project with MetricsHub/jflat and MetricsHub/simple-http-java.

What changed

• oss-parent 4 → 5. The only change is central-publishing-maven-plugin 0.7.0 → 0.11.0.
• metricshub/workflows v6 → v8 (build, deploy and release). The inputs are unchanged. v8 also keeps the Resolver local-repository files out of the release bundle with Maven 3.10 (Release with Maven 3.10: keep Resolver files out of the Central bundle workflows#39).
  • v7 declares https://central.sonatype.com as an origin of server central (Declare Central as an origin of server central for Maven 3.10 workflows#36).
  • Maven 3.10 needs this to send the publishing token to Central. Without it, snapshot deploys fail with HTTP 401 ("Not using credentials of server 'central' for repository https://central.sonatype.com").
• Site with Doxia 2, as in Issue #69 - Build the site with Doxia 2 jflat#70 and community-connectors:
  • maven-site-plugin 4.0.0-M16 with maven-skin-tools 1.8.01.
  • src/site/site.xml in the SITE 2.0.0 format with sentry-maven-skin 8.0.00. Same links, menus, keywords and logo. ® becomes ®.
  • With Maven 3.10, maven-site-plugin 3.12.1 from oss-parent mixes Velocity 1.7 and 2.x and fails (AbstractMethodError on org.apache.velocity.tools.ToolContext).

Validation

• jflat and simple-http-java use the same workflows (v8). Their deploys on Maven 3.10.0 end in BUILD SUCCESS, and new snapshots are published on Central (the origin step passes).
• This PR's CI runs the build (and the site) on the runner's Maven. The Doxia 2 site already builds in CI in Issue #69 - Build the site with Doxia 2 jflat#70 and Issue #62 - Build the site with Doxia 2 simple-http-java#63.
• After the merge, check the first Maven Deploy run on main:
  • no "Not using credentials of server 'central'" warning in the deploy step;
  • central-publishing:publish ends in BUILD SUCCESS;
  • a new snapshot timestamp appears on Central.

🤖 Generated with Claude Code

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-10-08T16:31:52.512317Z	dfc350c	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.