Updated the documentation to include the latest
revisions of draft-ietf-kitten-scram-2fa, draft-melnikov-sasl2,
draft-melnikov-scram-bis, draft-melnikov-scram-sha-512, and
draft-melnikov-scram-sha3-512 in the set of LDAP-related
specifications.

Updated the LDAP SDK so that the next release will have a version
number of 7.0.3, and update tests to ensure preserving backward
compatibility with the 7.0.2 release.

Removed the ManageCertificatesSecurityManager class and its
associated test case.  This class was used in an initial
implementation of the manage-certificates tool, which relied on
invoking the Java keytool utility for certain functions, and the
security manager was used to prevent keytool from killing the JVM
by calling System.exit.  manage-certificates was long ago updated so
that it no longer relies on keytool and no longer needs the security
manager, but the security manager was not removed.  It's not part of
the public API, so this doesn't affect backward compatibility in any
way, and security manager functionality has been deprecated from
later versions of Java and may be removed, so there's no good reason
to keep it around.

Fixed an issue in which the LDAP SDK did not properly handle
certificates with a notBefore or notAfter timestamp that fell in the
year 2049 if that timestamp was encoded with the antiquated UTCTime
syntax, which only uses two digits to express the year.  The X.509
specification indicates that UTCTimestamp values with years of "00"
through "49" should be interpreted as the years 2000 through 2049,
and that UTCTime years of "50" through "99" should be interpreted as
the years 1950 through 1999, but the LDAP SDK incorrectly treated a
year of "49" as 1949 instead of 2049.  All other year values were
properly handled in accordance with the X.509 specification.

Updated client-side support for the Ping Identity-proprietary
transaction settings request control to add the ability to indicate
that the server may attempt to acquire a scoped lock that may only be
used for specific operations that have the potential to conflict with
each other.

Improved error reporting in the dump-dns tool (which can be used to
obtain a list of the DNs of the entries beneath a specified base DN
in a Ping Identity Directory Server instance).

Made a further change to the transaction settings request control to
add the ability to specify the single-writer lock behavior, which
could previously only be controlled through the server
configuration.  We also removed the ability to specify the scoped
lock timeout, as the backend lock timeout will be used for that
purpose (as well as for the backend exclusive and single-writer
locks).

Updated the oid-reference.html file to use a UTF-8 file encoding.

Updated the StaticUtils toLowerCase, toUpperCase, and getBytes
methods to make their implementations simpler and more efficient.
These methods were originally implemented in a way that made them
faster than the corresponding methods in the Java String class,
especially for the common case in which the strings contained only
ASCII characters.  However, in modern Java versions (Java 9 and
later), strings are backed by byte arrays rather than character
arrays, and it is now just as fast or faster to use the String
methods.  As such, the LDAP SDK implementations of these methods are
now primarily wrappers around the corresponding Java methods, but
with special handling for null values.

Updated client-side support for the transaction settings request
control to add support for a flag that indicates whether the control
should be taken into consideration when the operation is replicated
to other servers in the topology.

Updated the ldifmodify tool to report an error if any of the
sourceLDIF, changesLDIF, or targetLDIF arguments referred to the
same file.  They must all refer to different files.

Updated client-side support for the Ping Identity Directory Server's
version monitor entry to handle attributes used to indicate whether
the server is running in FIPS-compliant mode (either FIPS 140-2 or
FIPS 104-3).

Updated the set of LDAP-related specifications to include the latest
revisions of the draft-bucksch-sasl-passkey,
draft-bucksch-sasl-rememberme, draft-codere-ldapsyntax,
draft-ietf-kitten-sasl-ht, draft-ietf-kitten-sasl-rememberme, and
draft-schmaus-kitten-sasl-ht drafts.

Improved the IP address argument value validator to catch additional
types of malformed IPv4 addresses that were previously accepted.
Also, improved performance when validating IPv4 addresses.

Updated the LDAP SDK so that the next release will have a version
number of 7.0.4.  Also, update tests to ensure that we preserve
backward compatibility with the 7.0.3 release.

Updated the server set blacklist manager to improve debug logging in
the event that servers are added to or removed from the blacklist.
The round robin and fewest connections server sets can be configured
to use this blacklist manager to temporarily avoid attempting to
create connections to a server when health checking determines that
it's not in an acceptably usable state.

Improved performance and reduced contention when retrieving
environment variables from the JVM process.

Updated the PropertyManager class to make it possible to cache
property values for faster access with less contention.  Caching is
disabled by default, but you can enable it by specifying a maximum
cache duration.  Additional methods are provided to clear the cache,
and to populate the cache based on the currently defined system
properties and environment variables.