• update Node.js toolchain version to 24.18.0 (#17742) #17742 (Diego Molina)

• 0a3d94a: [build] Automated Browser Version Update (#17744) (Selenium CI Bot) #17744
• 740b692: [java] Tighten JSON number lexer to match RFC 8259 (#17739) (Simon Mavi Stewart) #17739
• 90cbf90: [java] Enforce commas between JSON elements; accept trailing commas (#17738) (Simon Mavi Stewart) #17738

Full Changelog: https://github.com/Activiti/Activiti/compare/7.21.0-rc.398...7.21.0-rc.399

Full Changelog: https://github.com/Activiti/Activiti/compare/7.21.0-rc.397...7.21.0-rc.398

• Add SBOM to published artifacts.
• Check for traversable paths injected into class files as a rather hypothetical attack vector.

Full Changelog: https://github.com/Activiti/Activiti/compare/7.21.0-rc.396...7.21.0-rc.397

• 0779019: [build] Automated Browser Version Update (#17730) (Selenium CI Bot) #17730
• 3e8e318: [java] Fix JSON parser EOF sentinel collision with U+FFFF (#17737) (Simon Mavi Stewart) #17737
• d037099: [java] Reject unescaped control characters in JSON strings (#17740) (Simon Mavi Stewart) #17740
• 79f3706: [rust] Support multiple names for Firefox binary in Linux (#17695) (Boni García) #17732

Full Changelog: https://github.com/Activiti/Activiti/compare/7.21.0-rc.395...7.21.0-rc.396

Full Changelog: https://github.com/Activiti/Activiti/compare/7.21.0-rc.394...7.21.0-rc.395

Full Changelog: https://github.com/Activiti/Activiti/compare/7.21.0-rc.393...7.21.0-rc.394