3.2.5

• Security: OwaspHtmlTemplateOutput guards are case-insensitive (see advisory GHSA-2hfm-x4p2-r9hw)
• Security: URL guard for <a href> cannot be bypassed by an embedded tab or newline (see advisory GHSA-mw9h-prf3-cr4h)
• Security: Guard iframe srcdoc against xss, guard other url attributes besides a/href and also guard against data: urls (see advisory GHSA-hvg6-pc44-97gv)
• Support parameters with annotations using = (#552)
• New extension to generate JSpecify @NullMarked package info for templates (#550)
• CLI to run code generation, as an alternative to Maven/Gradle plugins (#560)
• Fixed a varargs parsing bug (#561)
• Templates generated via the jte-models extensions no longer depend on it (#477)
• Fixed line number computation in various edge cases (#570)