diff --git a/CREATE_RELEASE.md b/CREATE_RELEASE.md
index 10c969e94..fa1244b37 100644
--- a/CREATE_RELEASE.md
+++ b/CREATE_RELEASE.md
@@ -8,7 +8,7 @@ and 2023.01 in the `pom.xml`.
### Release notes:
Update the release notes with the correct version. Use `git shortlog -s -n --since "JAN 06 2023"` for the list of
-committers.
+committers. In order to fetch the list of issues included use: `git log --graph --pretty='%C(auto)%d%Creset%s' v2023.4..origin/main`
```
mvn versions:set
diff --git a/README.md b/README.md
index 9c148cb67..112de463b 100644
--- a/README.md
+++ b/README.md
@@ -1,4 +1,4 @@
-# WebGoat 8: A deliberately insecure Web Application
+# WebGoat: A deliberately insecure Web Application
[](https://github.com/WebGoat/WebGoat/actions/workflows/build.yml)
[](https://jdk.java.net/)
diff --git a/RELEASE_NOTES.md b/RELEASE_NOTES.md
index 78aeae1e3..92dbd100e 100644
--- a/RELEASE_NOTES.md
+++ b/RELEASE_NOTES.md
@@ -1,5 +1,40 @@
# WebGoat release notes
+## Version 2023.5
+
+### New functionality
+
+- Implement JWT jku example (#1552)
+- Java 21 initial support (#1622)
+- improve MFAC lesson hint texts for a better user experience (#1424)
+- upgrade to Spring Boot version 3 (#1477)
+
+### Bug fixes
+
+- typo in WebGoad.txt (#1667)
+- search box moved and jwt encode/decode with little delay (#1664)
+- skip validation for JWT (#1663)
+- fixed issue in JWT test tool and added robot test (#1658)
+- Password reset link test condition more strict and move all WebWolf links to /WebWolf (#1645)
+- fix servers id (#1619)
+- potential NPE in the stored XSS assignment
+- crypto basics broken links
+- fixes the default change in trailing slash matching and address the affected assignments
+- hint that was breaking the template, causing hints from different assignments to mix (#1424)
+- HijackSession lesson template deprecated Tymeleaf attribute
+- Fix NPE in IDOR lesson
+- Add new assignment IT tests
+- XSS mitigation
+- Stored Cross-Site Scripting Lesson
+- Add Assignment7 Tests
+- Fix IDOR lesson
+- remove steps from release script (#1509)
+- robotframework fails due to updated dependencies (#1508)
+- fix Java image inside Docker file The image now downloads the correct Java version based on the architecture.
+- Fix typo of HijackSession_content0.adoc
+- Restrict SSRF Regexes
+- update challenge code - Flags are now wired through a Spring config - Introduced Flag class - Removed Flags from the FlagController
+
## Version 2023.4
### New functionality
diff --git a/pom.xml b/pom.xml
index f98c4213a..18aeb39c0 100644
--- a/pom.xml
+++ b/pom.xml
@@ -10,7 +10,7 @@
org.owasp.webgoat
webgoat
- 2023.5-SNAPSHOT
+ 2023.5
jar
WebGoat