OpenAPI specification version 3.0.4

[rartych]

Problem description
As indicated in camaraproject/Commonalities#338 OAS 3.0.4 was published.
The release notes describe following changes related to security:

• Added a note that a security array that is empty or missing does not indicate that no security arrangements exist for this API.

• Updated references to other standards where newer versions are available, and added more explanation for OpenIDConnect.

• Added a "Security Concerns" section containing advice for implementers and users of OpenAPI.

Expected action
Analysis of impact of new version on ICM documents, input to Commonalities on the updating the OAS version in Design Guidelines - camaraproject/Commonalities#338

Additional context
https://www.openapis.org/blog/2024/10/25/announcing-openapi-specification-patch-releases

[jpengar]

This issue will be moved to the ICM backlog in accordance with the conclusions set forth in: camaraproject/Commonalities#338.
@AxelNennker @sebdewet @rartych