1.24.2

What's Changed

🔒 Security updates

• CVE-2026-54641 on Cross-Realm User Information Disclosure in UserResourceImpl.java
• CVE-2026-54640 on XXE in KNXProtocol.startAssetImport() allows arbitrary file read via unprotected XMLInputFactory.java

⭐ Enhancements

• Update org.checkerframework:checker-qual version to latest by @ebariaux in #2807
• Upgrade to gradle 9.5.1 by @ebariaux in #2835
• NPM dependencies minor version updates by @MartinaeyNL in #2842

Other changes

• CI/CD: Introduce reusable workflows by @Ekhorn in #2696
• Use gradle version catalog instead of custom properties for dependency versions by @ebariaux in #2814
• Align skip conditions with branch protection checks by @Ekhorn in #2820
• Exclude UI from backend detect changes pattern by @Ekhorn in #2816
• Cancel deployment job when cancelled by @Ekhorn in #2806
• Make get-version-details depend on install-dist by @Ekhorn in #2823
• Fix publish jobs and ci_cd.json processing by @Ekhorn in #2804
• Include package.json files in UI artifacts by @Ekhorn in #2828
• Create missing openremote/util artifact by @Ekhorn in #2830
• Align skip conditions for other env workflows with review by @Ekhorn in #2831

Full Changelog: 1.24.1...1.24.2