Hotfix installation

Please make sure you consult the page Hotfix Installation Notes for any additional actions needed to complete the installation.

Main correction(s) provided

• Fix a code path that might corrupt the merged PDF within PDF.MergeWithBlos
• Fix hot reload restart strategy
• Jaeger and Zipkin reporters now include the service option.
• Fixed PostgreSQL XA datasource configuration where properties were incorrectly named, preventing successful connections when XA mode was enabled.
• Thumbnails are now properly generated for illustrator and postscript MIME types.
• Added an opt-in check to refuse creating a user with the same id as an existing group, and vice versa.

New Feature(s)

• Users, groups and group members can now be exported as CSV server-side via the new userCSVExport and groupCSVExport bulk actions on the user and group REST endpoints.
• New NXQLPredicate and NotRoutesPredicate are available to define custom audit routing.
• New live attribute on route descriptor.
• New routeAudit bulk action to purge audit backend.
• New "purge" management rest API audit endpoint to submit the "routeAudit" BAF scrolling a query and dispatching through named routes

Task(s)

• com.google.http-client artifacts bumped to 2.2.0 - google-cloud-storage bumped to 2.73.0
• Improved Avro serialization security by restricting reflection-based (de)serialization to trusted packages.

Improvement(s)

• Use NXQL#withNow instead of NXQL#TESTNXQLNOW
• Dev-mode Docker containers now keep streaming the Nuxeo server log to standard output after a log file rollover, so docker logs / docker compose logs no longer goes │ silent and requires a container restart to see new entries.