What's Changed
- fix(deps): bump mariadb-java-client to 2.7.14 for CVE-2026-55856/557/558 by @david-leifker in #19556
- fix(deps): bump Jackson 2.22.2 and Parquet 1.18.1 on v1.6.0 by @david-leifker in #19701
- fix(deps): bump Spring Framework, Boot, Security, and Kafka to latest 7.0/4.0 patches by @david-leifker in #19700
- chore(python): require Python 3.11 on the v1.6.0 LTS hotfix line by @david-leifker in #19703
- fix(sec): backport authorization fixes for asset settings, form assignment, and analytics search to v1.6.0 by @supersingh05 in #19750
- fix(sec): backport remaining CVE dependency bumps to v1.6.0 by @david-leifker in #19894
Full Changelog: v1.6.0.2...v1.6.0.3rc1