## Validator Changes
* Security Fix: Move all instantiation of transformerFactory to XMLUtils and set ACCESS_EXTERNAL flags automatically (slightly improvement to output message, but closes possible attack vector)
* Handle 308 redirects when fetching packages
* Fix NPE in ValueSetValidator
* Fix for NPE in IGLoader
* fix version conversion problem for ConceptMap (4<->5): relationship comment getting lost for noMap entries
* Add check for multiple WG extensions (HL7 context)
## Other code changes
* Suppress spurious logging statement
* Add Australian CDA name prefix & uri to mapping transform code
* Add new messages for tx.fhir.org
* Remove narrative from snapshot tests
* Improve complex extension rendering when rendering by profile
* Rewrite processing of map statements when generating snapshots to fix known bugs
* Updates to Capability Statement rendering (and minor Operation Definition rendering improvement)
* Fix wrong reference to CDA classes for unscoped class names
* fix rendering issue for R4 relationship codes in ConceptMap
* rework decimal lowBoundary() and highBoundary() after discussion on Zulip, and add extensive testing
* Fix existing test case for fixed up boundary handling in FHIRPath
* Add CodeSystem fetching for selected code systems for VSAC import
* Drop to saxon 11.6 for now
* fix issue with json unicode whitespace enscaping
* get Java generator running again (though no code regenerated)
* don't escape unicode whitespace in json files
* Fix NPE in questionnaire renderer
* Hack workaround for R4 issue with ProcessPriority
* Rewrite concurrency management for file system package cache
***NO_CI***
## Validator Changes
* Improved handling of display validation for various languages
* fix xml:space message after discussion on Zulip
## Other code changes
* ValueSet rendering improvements
* Add isUnknownLocalReferencesNotLinks to RenderingContext
* Fix up conceptMap rendering (remove spurious summary table)
* Add R6 ballot 2 to FHIRVersion enum in R5
* rendering fixes for implementers
* improve rendering of bindings with no value sets
***NO_CI***
## Validator Changes
* Improve performance of supplement processing
* Add support for validating xml:space
* Fix NPE validating maps
* Fix duplicate removal code that caused missed WARNING messages (#1698)
* Fix interaction between terminology cache and validation location (#1700)
* Better concept map validation
* Improved base64 parsing error
* Add support for unknown code system version validating concept maps
* Fix bug using wrong profile when profiling recursive properties
## Other code changes
* Return null for all toCode enum params that are null
* fix bugs adding publishing WG in element mode
* Fix equality method that caused missed WARNING messages
* fix rendering issues
* rendering fixes for R6 build
* don't throw error for wrong rendering mode
* Document rendering fixes - subject and section
* more work on forcing valid html generation
* more hyperlink validation improvements
* further fixes to link validation
* fix list inside paragraph
* fix actor capabilities in wrong place
* Support missing datatypes
* Fill out missing anchors
* Fix wrong handling of contained resources)
* #1678 - add div to children when exploring Narrative
***NO_CI***
markiantorno
Grahame Grieve
Grahame Grieve
Rob Eastwood
Vassil Peytchev
Vassil Peytchev
dotasek