Codacy looks for ruleset.xml, so give it what it wants. Bump PMD version to the one used by Codacy, for consistency.