Jetty Release 9.4.52

[joakime]

Jetty Versions:
This release process will produce releases: 9.4.52

Target Date:
Aug 16, 2023

Tasks:

• Create the release(s) issue.
• Update the target Jetty version(s) in the issue.
• Update the target release date in the issue.
• Link this issue to the target GitHub Project(s).
• Assign this issue to a "release manager".
• Review draft security advisories. Ensure that issues are created and assigned to GitHub Projects to capture any advisories that will be announced.
• Update GitHub Project(s)
  • Create new project for the next releases (not this release).
  • Ensure new project is public (not private)
  • Freeze the target GitHub Project(s) by editing their names to "Jetty X.Y.Z FROZEN"
  • Review the issues/PRs assigned to the target GitHub Project(s). Any tasks that are not-yet-started are moved to next releases.
• Review dependabot status. Manually run dependabot if needed and review resulting PRs for inclusion.
• Wait 24 hours from last change to the issues/PRs included in FROZEN GitHub Project(s).
• Verify target project(s) are complete.
• Assign issue to "build manager", who will stage the releases.
  • Create and use branches release/<ver> to perform version specific release work from.
  • Ensure VERSION.txt additions for each release will be meaningful, descriptive, correct text.
  • Stage 9.4 release with Java 11.
  • Push release branches release/<ver> to to https://github.com/eclipse/jetty.project
  • Push release tags jetty-<ver> to https://github.com/eclipse/jetty.project
  • Edit a draft release (for each Jetty release) in GitHub (https://github.com/eclipse/jetty.project/releases). Content is generated with the "changelog tool".
    Be mindful of the order you create multiple release drafts. The first one created will be the "oldest" when published. (eg: Draft is 9, then 10, then 11)
    The last created "draft" will show up as "latest" in the github UI.
    If you have to reroll, you'll have to delete the drafts and recreate them (especially so if 9 w/timestamp is in the mix of releases being worked on)
• Assign issue to "test manager", who will oversee the testing of the staged releases.
  • Test CometD.
  • Test Reactive HttpClient.
  • Test Load Generator.
  • Test Jetty Docker images.
  • Test other Jetty OSS integrations.
  • Check TCK CI.
  • Test sponsored integrations.
  • Check CI for performance regressions.
  • Notify interested parties and invite testing of the staged release(s).
  • Assign issue back to "release manager".
• Collect release votes from committers.
• Promote staged releases.
• Merge release branches back to main branches and delete release branches.
• Verify release existence in Maven Central by triggering the Jenkins builds of CometD.
• Update Jetty versions on the website ( follow instructions in jetty-website ).
  • Update (or check) Download page is updated.
  • Update (or check) documentation page(s) are updated.
• Publish GitHub Releases
• Prepare release announcement for mailing lists.
• Publish any security advisories.
  • Edit VERSION.txt to include any actual CVE number next to correspondent issue.
  • Edit any issues for CVEs in github with their CVE number
• Notify downstream maintainers.
  • Eclipse p2 maintainer.
  • Docker maintainer.
  • Jenkins maintainer.
  • Other maintainers.

[joakime]

Staged release 9.4.52.v20230815 is now staged at https://oss.sonatype.org/content/repositories/jetty-1795/

[joakime]

Reroll ...

• Dropping staged repo https://oss.sonatype.org/content/repositories/jetty-1795/
• Dropping branch release/9.4.52
• Dropping tag jetty-9.4.52.v20230815

[joakime]

Potential release 9.4.52.v20230821 is now staged at https://oss.sonatype.org/content/repositories/jetty-1796/

[joakime]

Reroll due to merged sponsored PR #10344 ...

• Dropping staged repo https://oss.sonatype.org/content/repositories/jetty-1796/
• Dropping branch release/9.4.52
• Dropping tag jetty-9.4.52.v20230821

[joakime]

Potential release 9.4.52.v20230823 is now staged at https://oss.sonatype.org/content/repositories/jetty-1797/

[joakime]

Release jetty-9.4.52.v20230823 is now live on Maven Central

[joakime]

Make sure we address the comment in #10299 (comment) about GHSA-58qw-p7qm-5rvh

[joakime]

This release is finished.