Include published security advisories in release notes

[stianst]

Description

Release notes currently only include GitHub issues with either the milestone or the release/x.y.z label. However, as we are switching back to using security advisories the release notes should also include published security advisories.

We may also want to highlight CVEs in third-party dependencies a bit more, perhaps we should list these in a Security advisories heading together with security advisories in Keycloak.

Discussion

No response

Motivation

No response

Details

No response