Closes gh-13245

Update contributing documentation and the issue template with
instructions on how to report security vulnerabilities.

Closes gh-12509

Closes gh-13127

Prior to 3db5c70b, RelaxedDataBinder would use a ConversionService
to convert a String into a File via its ObjectToObjectConverter.
3db5c70b changed the configuration of the data binder such that a
FileEditor was registered. Property editors take precedence over any
conversion service so the FileEditor was used instead. This caused a
regression as the FileEditor uses slightly unusual logic for a String
to File conversion. Specifically, when given a value of ".", it will
locate a ClassPathResource for the root of the classpath and use the
result of calling getFile() on that resource. This fails when the
root of the classpath is in a jar file and also provides a different
result when the root of the classpath is not the current directory.

This commit updates RelaxedDataBinder to suppress the registration
of an editor for File. This restores the behaviour prior to 3db5c70b
by allowing the ConversionService to be used instead.

Closes gh-12786

See gh-13196

* pr/13175:
  Polish "Respect lombok.AccessLevel attributes"
  Respect lombok.AccessLevel attributes

Closes gh-13175

See gh-13175

Closes gh-12995

Closes gh-13167

Previously, when the embedded Undertow container was stopped, the
servlet deployment was stopped but it was not undeployed. This meant
that contextDestroyed() callback of any registered
ServletContextListeners was not called.

This commit updates UndertowEmbeddedServletContainer to call undeploy
on the deployment manager in addition to the existing call to stop.
Undeploying the servlet deployment calls Undertow to drive the
contextDestroyed callback on any registered ServletContextListeners.

Closes gh-13134

* gh-12071:
  Polish "Suppress debug log output during Logback initialization"
  Suppress debug log output during Logback initialization

See gh-12071

Closes gh-12071

Closes gh-13150

Closes gh-13056

* gh-12958:
  Polish "Unwrap InvocationTargetException in isLogConfigurationMessage"
  Unwrap InvocationTargetException in isLogConfigurationMessage

Closes gh-12958

See gh-12958

Closes gh-13032

* pr/13117:
  Polish "Add support for Jersey WrappingResourceConfig"
  Add support for Jersey WrappingResourceConfig

Closes gh-13117

See gh-13117

Closes gh-13080

Closes gh-13015

Closes gh-13098

Closes gh-13028

Closes gh-13014

Closes gh-13097

Closes gh-13013

Closes gh-13097