All relevant changes are listed below.
New Features
[ONEP-1702] - Add capability to create custom permissions to be consumed by external applications or microservices
[ONEP-1858] - Biz extension: New API end-point for external sales orders
[ONEP-1866] - API for setting user's student state (student status scraper)
[ONEP-1870] - Add optional 'id' field to User's addresses
[ONEP-1872] - Use email template to configure email-address-verification message
[ONEP-1874] - Find wallet by user's PersonalID
[ONEP-1877] - Discount Campaign to apply discounts to multiple products
[ONEP-1880] - Support embedding login in iframe with top=true parameter
[ONEP-1882] - Wallet API: Add an externally generated 'referenceNumber' field to deposit/withdraw transactions
[ONEP-1885] - API for reading User's event log
Improvements
[ONEP-1862] - Use email templates to verify email addresses
[ONEP-1867] - User list API filter supports searching by PersonalIdentityCode
[ONEP-1883] - Improve SAML User Directory usability
Bug fixes
[ONEP-1853] - Incorrect handling of 'claims.value' and 'claims.values' during OIDC auth
[ONEP-1868] - Logout servlet should not work as an open redirector
[ONEP-1871] - OpenID client frontchannel URLs not called with iframe during /ui logout
[ONEP-1886] - Datastorage API: delete single key sets value to null instead of deleting key