DCA11Y-3315 - Record i18n keys used through a function-call namespace, including n(938).I18n.getText(...) and t.n(u)().I18n.getText(...). Generated .i18n.properties files now identify metadata version 2 in a comment, keeping the properties namespace reserved for translation keys.
NEPTUNE-454 - Upgrade Crowd to 7.2.4.

Refuse to extract ZIP and TAR.GZ entries that would resolve outside the target directory (path traversal), e.g. when unpacking <dataPath>/<productDataPath> home data or installing the SDK with atlas-update. Effective entry paths are checked after trimming or flattening using the current platform's rules for absolute paths (including drive-letter and UNC paths on Windows). Entry paths, entry types and existing destination components are checked before extraction, rejecting archive links and special files and preventing writes through existing symbolic links. Preflight failures leave the destination untouched; later extraction failures can leave partial output. The Spring XML to Java transform also confines generated writes, validates resource paths before conversion, and preserves input XML until all generated outputs are written.