diff --git a/CREATE_RELEASE.md b/CREATE_RELEASE.md index 10c969e94..fa1244b37 100644 --- a/CREATE_RELEASE.md +++ b/CREATE_RELEASE.md @@ -8,7 +8,7 @@ and 2023.01 in the `pom.xml`. ### Release notes: Update the release notes with the correct version. Use `git shortlog -s -n --since "JAN 06 2023"` for the list of -committers. +committers. In order to fetch the list of issues included use: `git log --graph --pretty='%C(auto)%d%Creset%s' v2023.4..origin/main` ``` mvn versions:set diff --git a/README.md b/README.md index 9c148cb67..112de463b 100644 --- a/README.md +++ b/README.md @@ -1,4 +1,4 @@ -# WebGoat 8: A deliberately insecure Web Application +# WebGoat: A deliberately insecure Web Application [![Build](https://github.com/WebGoat/WebGoat/actions/workflows/build.yml/badge.svg?branch=develop)](https://github.com/WebGoat/WebGoat/actions/workflows/build.yml) [![java-jdk](https://img.shields.io/badge/java%20jdk-17-green.svg)](https://jdk.java.net/) diff --git a/RELEASE_NOTES.md b/RELEASE_NOTES.md index 78aeae1e3..92dbd100e 100644 --- a/RELEASE_NOTES.md +++ b/RELEASE_NOTES.md @@ -1,5 +1,40 @@ # WebGoat release notes +## Version 2023.5 + +### New functionality + +- Implement JWT jku example (#1552) +- Java 21 initial support (#1622) +- improve MFAC lesson hint texts for a better user experience (#1424) +- upgrade to Spring Boot version 3 (#1477) + +### Bug fixes + +- typo in WebGoad.txt (#1667) +- search box moved and jwt encode/decode with little delay (#1664) +- skip validation for JWT (#1663) +- fixed issue in JWT test tool and added robot test (#1658) +- Password reset link test condition more strict and move all WebWolf links to /WebWolf (#1645) +- fix servers id (#1619) +- potential NPE in the stored XSS assignment +- crypto basics broken links +- fixes the default change in trailing slash matching and address the affected assignments +- hint that was breaking the template, causing hints from different assignments to mix (#1424) +- HijackSession lesson template deprecated Tymeleaf attribute +- Fix NPE in IDOR lesson +- Add new assignment IT tests +- XSS mitigation +- Stored Cross-Site Scripting Lesson +- Add Assignment7 Tests +- Fix IDOR lesson +- remove steps from release script (#1509) +- robotframework fails due to updated dependencies (#1508) +- fix Java image inside Docker file The image now downloads the correct Java version based on the architecture. +- Fix typo of HijackSession_content0.adoc +- Restrict SSRF Regexes +- update challenge code - Flags are now wired through a Spring config - Introduced Flag class - Removed Flags from the FlagController + ## Version 2023.4 ### New functionality diff --git a/pom.xml b/pom.xml index f98c4213a..18aeb39c0 100644 --- a/pom.xml +++ b/pom.xml @@ -10,7 +10,7 @@ org.owasp.webgoat webgoat - 2023.5-SNAPSHOT + 2023.5 jar WebGoat