Headless Server now Sends Content-Disposition Header for Non-viewable Responses

For security reasons, HeadlessServer now sends a Content-Disposition HTTP header of type "attachment" with filename="api.json" for all requests to the GraphQL endpoints.

(CMS-21766)

Third-Party Update: graphql-java to 18.1

The library com.graphql-java:graphql-java has been updated to version 18.1. The update contains several deprecations, that may affect custom code. Please see the original documentation of graphql-java for details.

(CMS-21651)