6.2.0

What's Changed

• Add CodeQL security analysis workflow by @vharseko in #163
• Reduce CI build matrix on macOS/Windows and add concurrency groups by @vharseko in #164
• Run integration tests in CI and fix the openig-war IT suite by @vharseko in #165
• Enforce Javadoc doclint via inherited property and failOnWarnings by @vharseko in #166
• Fix high-severity CodeQL alerts by @vharseko in #169
• Upgrade Java version to 27 in build workflow by @vharseko in #186
• Fix Maven Central release: pin Maven 3.9.16, bump central-publishing to 0.11.0 by @vharseko in #185
• Apply Ubuntu security updates when building the Docker image by @vharseko in #187
• Reject commas in route ids in the Studio UI validator by @vharseko in #174
• Clean up CodeQL warnings in openig-core and openig-war by @vharseko in #177
• Add missing @OverRide annotations and make nested helper classes static by @vharseko in #180
• [#182] Fix Asciidoctor warnings in the OpenIG guides by @vharseko in #184
• Load jQuery over https with SRI in the UMA sample pages by @vharseko in #172
• Fix medium-severity CodeQL alerts in openig-core by @vharseko in #171
• Fix mismatched placeholders in log and exception messages by @vharseko in #173
• Harden GitHub Actions workflows: token permissions, SHA pinning, latest actions by @vharseko in #170
• [#175] Run the openig-ui QUnit suite in headless Chrome during the Maven test phase by @vharseko in #179
• Add Trivy vulnerability scanning for Docker images by @vharseko in #181
• [#188] Set up the JDK of the release for the CodeQL Java analysis, so that its results no longer follow the default JDK of the runner image by @vharseko in #189
• Close websocket sessions reliably when the upstream is missing by @vharseko in #176
• Fix note-level CodeQL findings across core, oauth2 and doc by @vharseko in #178
• Update org.openidentityplatform.openam to 16.1.4 by @vharseko in #167
• Bump vulnerable transitive dependencies and drop pebble from the Docker image by @vharseko in #190

Full Changelog: 6.1.1...6.2.0