• AAE-49678 Update Supply Chain Review GH AW to latest by @dsibilio in https://github.com/Activiti/Activiti/pull/5504
• AAE-49744 Update Supply Chain Review GH AW to latest by @dsibilio in https://github.com/Activiti/Activiti/pull/5505
• AAE-49428 Fix null variable validation by @dthornton-hyl in https://github.com/Activiti/Activiti/pull/5503
• AAE-49074 Eliminate PostgreSQL cached plan errors in rolling deployments via explicit Task columns by @fkindgen in https://github.com/Activiti/Activiti/pull/5492

• @dthornton-hyl made their first contribution in https://github.com/Activiti/Activiti/pull/5503

Full Changelog: https://github.com/Activiti/Activiti/compare/7.21.0-rc.506...7.21.0-rc.507

• 06a692e: [py] fix no_proxy matching so empty entries and substrings do not bypass the proxy (#17884) (Navin Chandra) #17884
• 6b2b086: [java] Fix By.name() double String.format on names containing '%' (#17888) (Titus Fortner) #17888
• 076d428: [dotnet] [bidi] Remove optional command timeout in command options (#17891) (Nikolay Borisenko) #17891

Full Changelog: https://github.com/Activiti/Activiti/compare/7.21.0-rc.505...7.21.0-rc.506

• build(deps): bump joda-time:joda-time from 2.14.2 to 2.14.3 by @dependabot[bot] in https://github.com/Activiti/Activiti/pull/5499
• build(deps): bump com.puppycrawl.tools:checkstyle from 13.8.0 to 13.9.0 by @dependabot[bot] in https://github.com/Activiti/Activiti/pull/5500
• build(deps): bump the github-actions group across 2 directories with 16 updates by @dependabot[bot] in https://github.com/Activiti/Activiti/pull/5501
• build(deps): bump io.github.vishwakarma:zjsonpatch from 0.6.2 to 0.6.3 by @dependabot[bot] in https://github.com/Activiti/Activiti/pull/5498

• AAE-49313 Move jackson-bom before spring-boot-dependencies by @dsibilio in https://github.com/Activiti/Activiti/pull/5496

Full Changelog: https://github.com/Activiti/Activiti/compare/7.21.0-rc.504...7.21.0-rc.505

Full Changelog: https://github.com/Activiti/Activiti/compare/7.21.0-rc.503...7.21.0-rc.504

Full Changelog: https://github.com/Activiti/Activiti/compare/7.21.0-rc.502...7.21.0-rc.503

Full Changelog: https://github.com/Activiti/Activiti/compare/7.21.0-rc.501...7.21.0-rc.502

• d879eda: [java] Fix By.className()/By.id() misescaping non-ASCII leading digits (#17815) (Diego Molina) #17815

• Auto-port 4.1: AsciiString.cached(String) should sanitize the provided String (#13749) by @netty-project-bot in https://github.com/netty/netty/pull/17069
• AsciiString.cached(String) should sanitize the provided String (#13749) (#17007) by @normanmaurer in https://github.com/netty/netty/pull/17075
• Fix AsciiString.cached(String) performance regression (#17074) by @normanmaurer in https://github.com/netty/netty/pull/17080
• Auto-port 4.1: SslHandler: Fix possible buffer leak when an OOME is thrown during allocation by @netty-project-bot in https://github.com/netty/netty/pull/17078
• Fix AsciiString.cached(String) performance regression (#17074) by @normanmaurer in https://github.com/netty/netty/pull/17083
• Auto-port 4.1: Add HttpContentCompressor constructor with ability to specify desired maxPipelineDepth by @netty-project-bot in https://github.com/netty/netty/pull/17085
• Auto-port 4.1: Fix AdaptiveByteBuf._setLongLE calling checked setLongLE by @netty-project-bot in https://github.com/netty/netty/pull/17102
• Auto-port 4.1: Reject negative maxOrder in PooledByteBufAllocator by @netty-project-bot in https://github.com/netty/netty/pull/17095
• Auto-port 4.1: Snappy: Guard decoder against invalid chunk lengths by @netty-project-bot in https://github.com/netty/netty/pull/17110
• Backport #16079 and #17114 by @hyperxpro in https://github.com/netty/netty/pull/17134
• Auto-port 4.1: Use safe decompressor in Lz4FrameDecoder by @netty-project-bot in https://github.com/netty/netty/pull/17121
• Auto-port 4.1: Configure TestLens for the PR builds by @netty-project-bot in https://github.com/netty/netty/pull/17133
• Fix maxAllocation for brotli-encoded content in HttpContentDecompress… by @chrisvest in https://github.com/netty/netty/pull/17124
• Propagate the CI envionment variables through to the docker builds (#… by @chrisvest in https://github.com/netty/netty/pull/17143
• Auto-port 4.1: fix(mqtt): drop UNSUBACK reason codes for MQTT 3.x encoding by @netty-project-bot in https://github.com/netty/netty/pull/17137
• Fix buddy cache evicting chunks with live buffers (#17154) by @franz1981 in https://github.com/netty/netty/pull/17176
• Auto-port 4.1: Avoid classloader leak via GlobalEventExecutor terminationFuture failure by @netty-project-bot in https://github.com/netty/netty/pull/17189
• Auto-port 4.1: HttpObjectEncoder / DefaultHttp2FrameWriter: fix buffer leak when a Throwable is thrown during header encoding by @netty-project-bot in https://github.com/netty/netty/pull/17178
• BrotliEncoder: Prevent duplicate close scheduling (#17175) by @normanmaurer in https://github.com/netty/netty/pull/17193
• Auto-port 4.1: Update compress-lzf to 1.2.1 by @netty-project-bot in https://github.com/netty/netty/pull/17197
• Do not write WebSocket handshake response to the tail of the pipeline (#17192) by @normanmaurer in https://github.com/netty/netty/pull/17200
• HttpServerCodec: do not consume the method queue for 1xx interim responses (#17182) by @normanmaurer in https://github.com/netty/netty/pull/17203
• Adaptive allocator backports by @chrisvest in https://github.com/netty/netty/pull/17206
• Weakly reference engines from the OpenSSL engine map (#17199) by @chrisvest in https://github.com/netty/netty/pull/17205
• Auto-port 4.1: Add .editorconfig to enforce consistent coding style by @netty-project-bot in https://github.com/netty/netty/pull/17209
• Update surefire plugin to latest version (#17210) by @normanmaurer in https://github.com/netty/netty/pull/17212
• Update to latest netty-tcnative release (#17056) by @chrisvest in https://github.com/netty/netty/pull/17122
• Merge changes from forks (#17213) by @normanmaurer in https://github.com/netty/netty/pull/17217

Full Changelog: https://github.com/netty/netty/compare/netty-4.1.136.Final...netty-4.1.137.Final