SpringBoot 3.5.7 is released. With the release several security findings popped up again. I have updated the version and will ship the update with RC2 hopefully today.
The past week I have been working on creating a new license book. With the feedback from Tim and Lars we now have a new one produced by our own generator. I have further improvements for this in mind. For example, at the moment a single large file is produced that is packaged with all distributions. But actually the dependencies depend on the distributions.
We are producing and publishing SBOMs with the release now. Same issue as for the license book: The SBOMs should be distribution specific.
I’ll file issues for both issues. Not sure if this makes it into the final release, but I do not think it is mandatory. The current state is already a good progress.
I have been working also on improving the release workflow. One important change is the improvement on the “Dry Run” feature, which is now on by default. It performs all necessary steps except for any remote operations. The release typically makes changes (version updates) in the Git repo, this is now suppressed. And JReleaser runs properly in Dry Mode and performs any action, except for remote ones (upload to Maven Central, marking issues as released, upload release artifacts). Also, the Docker build is not triggered. All in all, the dry run mode gives us now a much better handle to test a release.
Since dry run is only dry, I plan to perform an actual release today. If this performs well I do not expect surprises next week friday for the final release.
And reminder: Test, test, test! Note that the release is build from release/1.x branch! The main branch has already evolved quite much. If you build locally, check out the release branch.
Also help to document the release. The main release notes are in .github/jreleaser/changelog.tpl. Edit this file.