Changelog

#6883 - Welcome file redirects do not honor the relativeRedirectAllowed option
#6870 - Encode control characters in URIUtil.encodePath
#6869 - Correct Content-Type within HTML error pages
#6860 - IPv6 format
#6652 - Improve ReservedThreadExecutor dump
#6618 - ID token azp claim should not be required if aud is single value array
#6617 - Add basic auth support for OpenId token endpoint (client_secret_basic)
#6603 - HTTP/2 max local stream count exceeded
#6562 - HttpOutput.write(ByteBuffer buffer)
#6558 - Allow to configure return type in JSON array parsing
#6554 - Allow creation of DefaultIdentityService without realmName.
#6553 - Review usage of Authentication.UNAUTHENTICATED in SecurityHandler
#6535 - Non blocking ReservedThreadExecutor
#6520 - Error page has HTML error when writePoweredBy is enabled.
#6487 - Expose ServletHolder getter in ServletHandler$ChainEnd for auditing libraries to use

Updated Dependencies