WIP Lots of improvements

.github/workflows/main.yml

@@ -43,17 +43,10 @@ jobs:
         with:
           cache-read-only: ${{ github.event_name != 'push' || github.ref != 'refs/heads/main' }}
 
-      - name: Spotless Check
-          # Spotless must run in a different invocation, because
-          # it has some weird Gradle configuration/variant issue
-        if: ${{ matrix.java-version == '21' }}
-        run: ./gradlew spotlessCheck --scan
-
       - name: Build
         run: >
           ./gradlew --rerun-tasks ${{ env.ADDITIONAL_GRADLE_OPTS }}
           assemble check publishToMavenLocal
-          -x jmh -x spotlessCheck -x testNative
           --scan
 
       - name: Quarkus native smoke
@@ -65,9 +58,6 @@ jobs:
         # because these tasks intentionally do not depend on the publishToMavenLocal tasks.
         run: ./gradlew buildToolIntegrations
 
-      - name: Microbenchmarks
-        run: ./gradlew jmh
-
       - name: Capture test results
         uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
         if: failure()

SECURITY.md

@@ -1,10 +1,10 @@
 # Security Policy
 
-The project is in a very early stage.
-
 ## Supported Versions
 
-None, yet.
+Only the latest published release receives security fixes. Older releases are not supported.
+
+Reports affecting older releases are still welcome, but any fix will target the latest release.
 
 ## Reporting a Vulnerability
 

benchmarks/build.gradle.kts

@@ -0,0 +1,46 @@
+/*
+ * Copyright (C) 2026 The Authors of CEL-Java
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+plugins {
+  `java-library`
+  alias(libs.plugins.jmh)
+  id("cel-conventions")
+}
+
+configurations.all {
+  exclude(group = "org.projectnessie.cel", module = "cel-generated-pb")
+}
+
+dependencies {
+  implementation(project(":cel-core"))
+  implementation(project(":cel-jackson3"))
+  implementation(project(":cel-generated-pb3"))
+  implementation(testFixtures(project(":cel-generated-pb3")))
+  implementation(libs.protobuf.java3)
+
+  testImplementation(platform(libs.junit.bom))
+  testImplementation(libs.bundles.junit.testing)
+  testRuntimeOnly("org.junit.jupiter:junit-jupiter-engine")
+  testRuntimeOnly("org.junit.platform:junit-platform-launcher")
+
+  jmhImplementation(libs.jmh.core)
+  jmhAnnotationProcessor(libs.jmh.generator.annprocess)
+  jmhImplementation(libs.cel.expr.java)
+}
+
+jmh { jmhVersion.set(libs.versions.jmh.get()) }
+
+tasks.named("assemble") { dependsOn(tasks.named("jmhJar")) }