Hotfix installation

Please make sure you consult the page Hotfix Installation Notes for any additional actions needed to complete the installation.

Main correction(s) provided

• Fix hot reload restart strategy
• Fixed OAuth2 service provider creation/update accepting a blank authorization server URL
• Jaeger and Zipkin reporters now include the service option.
• Fixed PostgreSQL XA datasource configuration where properties were incorrectly named, preventing successful connections when XA mode was enabled.
• Thumbnails are now properly generated for illustrator and postscript MIME types.
• Added an opt-in check to refuse creating a user with the same id as an existing group, and vice versa.
• CMISQL queries combining a JOIN and a CONTAINS() clause no longer fail.

Task(s)

• Improved Avro serialization security by restricting reflection-based (de)serialization to trusted packages.

Improvement(s)

• Dev-mode Docker containers now keep streaming the Nuxeo server log to standard output after a log file rollover, so docker logs / docker compose logs no longer goes │ silent and requires a container restart to see new entries.