What's Changed

• adjusts remaining drift around checkout configuration by @codefromthecrypt in #1435
• Adds SECURITY.md and scanning workflow by @codefromthecrypt in #1437
• docker: bumps zipkin test images by @codefromthecrypt in #1436
• Remove brave-instrumentation-benchmarks from brave-bom since this artifact is not published to Maven Central by @reta in #1446
• Routine dependency updates by @reta in #1447
• Note about potential deadlock with virtual threads by @shakuzen in #1448
• Adds RocketMQ plugin by @CodePrometheus in #1449
• Fix Spring XML configuration resource by @emmanuel-ferdman in #1451
• Remove mention of JDBC tracing by @reftel in #1439
• Updates all dependencies that don't require instrumentation changes by @reta in #1452

New Contributors

• @CodePrometheus made their first contribution in #1449
• @emmanuel-ferdman made their first contribution in #1451

Full Changelog: 6.0.3...6.1.0