TODO (but not limited to):

• check if 1.4 builds use the latest base images (or need to be updated to fresher ones)
  • verify if renovate config in rhdh/showcase and operator repos is working to keep base images up to date
  • RPM CVEs are generally not documented as KNOWN ISSUES so there's nothing to put in the release notes for base image or RPM concerns

• check for other CVE issues closed in 1.4
  • these are already logged as JIRAs and handled by the RHDH security team; if not fixed in 1.4, can include Known Issue text via the RN fields in the JIRA

• for CVEs that are fixed in 1.4 and noteworthy, draft release notes in https://github.com/redhat-developer/red-hat-developers-documentation-rhdh/tree/release-1.3/modules/release-notes using the python and bask scripts to convert text into adoc.