Plugin POM has successfully moved to SpotBugs in 2.36: https://github.com/jenkinsci/plugin-pom/blob/master/CHANGELOG.md#336 .
Now we could do the same in Parent POM for Jenkins components, and in the Jenkins core itself.
CC Baptiste Mathus Joseph Petersen James Nord
yes please and replace the JSR-305 annotations \o/
What is the overall status here? Core is patched; do we need something done in plugin POMs?