## Validator Changes
* Add support for private NPM registries requiring authentication
* Don't check FHIRPaths on differentials - not enough type info to test reliably
* Fix bugs in FHIRPath handling of logical models
* Fix minor bugs in type handling for Logical Models and R3 Profile validation
* Remove spurious warning message validating CDA documents
* Add value set qa checking
* Fixes to validator for new CDA package (proper handling of logical model types)
* Fix up bi-di warning message
* Add provisional support for alternate codes
* Workaround ClinicalImpression definition problem in core spec
* Fix to get context variables right when running invariants + fix for parent not always being populated + check type in derived profiles
* Fix checking FHIRPath statements on inner elements of type slices
* Fix scan of naming systems (error validating namespaces)
* Fix issue checking invariant expressions in R5
## Other code changes
* FHIRPath in HAPI mode: Strip returned IIdType of qualifier, version, and resourceType
* Update R4 and R4B FHIRPath implementations for changes picked up in R5 usage
* Fix obligation rendering message
* Fix missing extensions when converting value set properties
* Fix type of x-unknown-code-system in $validate-code response
* Fix CDA validation test case
* Much work on TxServer test case framework + Update terminology server implementation and tests for changes to test cases
* OMOP Vocabulary and ICFImporter development
* Add OWASP dependency check (#1347), upgrade many packages, remove ShEx
* Add github action to upload results
* Remove unused javalin dependency, also generate html reports
* Added test case for ExampleScenario conversion (R4/R5) and significantly bulked up the conversion process
* Remove unneeded resources (#1346) (help16.png)
* Add test for setVsAsUrl parameter setting (#1345)
***NO_CI***
* Add owasp dependency scan
* Add github action to upload results
* Remove unused javalin dependency, also generate html reports
* formats instead of format
* Restore javalin dependency (make revert easier later if necessary)
* Set OWASP to run on PR plus better names for sarif upload
## Validator Changes
* Fix up processing conditions in -watch mode
* Fixes for validating against logical models (for fixed up CDA core package)
* Better testing of extension context (when limited to profile)
* Fix handling of UCUM codes when no terminology server
* Report hints and warnings on some code validation that had been not reported
* Better validation of valuesets when checking derived profiles
## Other code changes
* Render reference identifier if there is one when rendering references
* Hide empty place holder column when rendering by profile
* Fix npe rendering extensions + improve base64 presentation
* OMOP terminology importer
* update SPDX code system in R4/R4B for support for not-open-source
* Fix up type handling for conversions between R4/R4B and R5 (OperationDefinition fix)
***NO_CI***
## Validator Changes
* no changes
## Other code changes
* Fix for SPDR not-open-source in code
* fix name and title in VSAC import process
* More work on Android support + fix issues in NPM package installation that caused
***NO_CI***
## Validator Changes
* no changes
## Other code changes
* Fix for SPDR not-open-source in code
* fix name and title in VSAC import process
* More work on Android support
***NO_CI***
## Validator Changes
* Fix issue loading SPDX value set + Fix missing code for 'not-open-source'
* Allow target to be treated as source when validating FML
* Fix issues validating names and urls for logical models
* Don't duplicate warnings about missing expressions on invariants in R5
## Other code changes
* Handle case where base hasn't got a snapshot generating snapshots
***NO_CI***
## Validator Changes
* Fix check for correct type name use in logical models (for CDA)
* Fix bug loading packages (introduced working on minimal loading)
* Fir NPE processing R3 Structure Definitions
* exempt ele-1 from constraint consistency checking
* Add -watch-scan-delay and -watch-settle-time
* fix missing error validating structure maps
* Fix bug with erroneous warning in snapshot generation about profile not being found
* Update SPDX code system to latest version
* Output proper filename in validation log
## Other code changes
* Refactor version utility code
* Fix help placeholders
* Better error when handling loading resources
* fix duplicate element generation in CDA.AD type snapshot generation
* Fix message about rendering problem. Actual solution... not sure.
* Minimal Memory model changes for Npm for Android
***NO_CI***