ci: Replace CodeQL autobuild with explicit Maven compile

[bernardladenthin]

Summary

• Replace the generic CodeQL autobuild action with an explicit mvn --batch-mode compile step in the CodeQL workflow
• Ensures consistent, reproducible builds during security analysis by using the project's standard Maven build command
• Improves transparency and control over the build process used for code scanning

Test plan

• CI is green on this branch

Related issues / PRs

Checklist

• I have read CONTRIBUTING.md and CODE_OF_CONDUCT.md
• My commits follow Conventional Commits
• No security-sensitive changes (if there are, I have notified the maintainer privately per SECURITY.md)

https://claude.ai/code/session_01FGnfLjjGbiZxknfbUnnwUr

[claude]

Review Summary

✅ Approved — This is a low-risk, well-motivated CI improvement.

What's Good

1. Solves a real Maven version incompatibility — autobuild downloads Maven 3.8.8, but git-commit-id-maven-plugin@10.0.0 requires Maven ≥3.9.0. This change uses the system Maven (installed by setup-java), which is correct.

2. Consistent with sibling repos — Aligns with the pattern already used in three other workspace repos, reducing maintenance burden.

3. Improves transparency — Explicit mvn --batch-mode compile is clearer than the black-box autobuild action, which is valuable for security scanning workflows.

4. Matches project standards — The command follows the same --batch-mode pattern used elsewhere in your CI workflows.

5. Minimal and focused — The change is narrow and does exactly one thing.

No Concerns

• Syntax and formatting are correct
• The Maven goal (compile) is appropriate for CodeQL's analysis
• No security implications
• CI is passing

Recommendation: ✅ Ready to merge.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[claude]

Review Summary

✅ Approved — Two focused, well-motivated changes:

CI/Build Improvement (CodeQL workflow)

• ✅ Correctly replaces autobuild with explicit mvn --batch-mode compile
• ✅ Solves the Maven 3.8.8 → git-commit-id-maven-plugin 10.0.0 incompatibility
• ✅ Aligns with the pattern already in use across sibling repositories (java-llama.cpp, BAF, llamacpp-ai-index-maven-plugin)
• ✅ Batch mode appropriate for CI environments

Javadoc Cleanup

• ✅ Correctly removes the incomplete duplicate Javadoc block
• ✅ Retains the canonical, comprehensive block with full @param/@return documentation
• ✅ Fixes the Error Prone NotJavadoc warning that was failing CodeQL builds
• ✅ No semantic loss — the removed comment simply duplicated information in the retained block

Overall Assessment

• Clear commit messages following Conventional Commits
• No security implications
• All checklist items completed
• CI green on this branch ✅