SecureDrop 2.9.0

changelog.md

@@ -1,35 +1,17 @@
 # Changelog
 
-## 2.9.0~rc3
-
-### Journalist API
-* Added support for HTTP range request for submissions and replies endpoints (#7160, #7189)
-
-### Development
-* Ignored safety alerts 42926, 51385, 53048, 53868, 53869, 54219, 54421, 59473, 60026, 65505, 66667, 71591, 71594, 71595, 71608, 71680, 71681, 71684 (#7190)
-
-## 2.9.0~rc2
+## 2.9.0
 
 ### Web applications
+* Added accessibility improvements (#6536)
 * Dependency updates:
   * (Rust) sequoia-openpgp from 1.17.0 to 1.20.0 (#7178)
 
-### Operations
-* Added opt-in Tor PoW defense for the Source Interface (#7175)
-
-### Development
-* Ignored safety alert 70895 (#7179)
-* Added support for development virtualenv in Debian 12 (#7154)
-
-## 2.9.0~rc1
-
-### Web applications
-* Added accessibility improvements (#6536)
-
 ### Journalist API
-* Added support for HTTP range request for submissions and replies endpoints (#7160)
+* Added support for partial content requests for submissions and replies endpoints (#7160, #7189)
 
 ### Operations
+* Added opt-in Tor PoW defense for the Source Interface (#7175)
 * Updated SecureDrop signing key with new expiry date of 2027-05-24 (#7167)
 
 ### Development
@@ -38,12 +20,12 @@
 * Fixed loaddata.py date generation bug (#7156)
 * Updated test signing key (#7150)
 * Added persistence for onion addresses created with `make dev-tor` (#7124)
-* Ignored safety alerts 66278, 65212, 65401, 65193, 65510, 65511, 66700, 66777, 66704, 66710, 70612, 71064 (#7145, #7149, #7157, #7170)
+* Ignored safety alerts 66278, 65212, 65401, 65193, 65510, 65511, 66700, 66777, 66704, 66710, 70612, 71064, 42926, 51385, 53048, 53868, 53869, 54219, 54421, 59473, 60026, 65505, 66667, 71591, 71594, 71595, 71608, 71680, 71681, 71684, 70895 (#7145, #7149, #7157, #7170, #7179, #7190)
+* Added support for development virtualenv in Debian 12 (#7154)
 * Dependency updates:
   * black from 22.3.0 to 24.3.0 (#7144)
   * pillow from 10.2.0 to 10.3.0 (#7149)
 
-
 ## 2.8.0
 
 ### Web applications

install_files/ansible-base/group_vars/all/securedrop

@@ -2,7 +2,7 @@
 # Variables that apply to both the app and monitor server go in this file
 # If the monitor or app server need different values define the variable in
 # hosts_vars/app.yml or host_vars/mon.yml
-securedrop_version: "2.9.0~rc3"
+securedrop_version: "2.9.0"
 securedrop_app_code_sdist_name: "securedrop-app-code-{{ securedrop_version | replace('~', '-') }}.tar.gz"
 
 grsecurity: true

molecule/shared/stable.ver

@@ -1 +1 @@
-2.8.0
+2.9.0

securedrop/debian/changelog

@@ -1,3 +1,9 @@
+securedrop (2.9.0+focal) focal; urgency=medium
+
+  * see changelog.md 
+
+ -- SecureDrop Team <[email protected]>  Thu, 27 Jun 2024 13:42:10 -0400
+
 securedrop (2.9.0~rc3+focal) focal; urgency=medium
 
   * see changelog.md 

securedrop/setup.py

@@ -4,7 +4,7 @@
 
 setuptools.setup(
     name="securedrop-app-code",
-    version="2.9.0~rc3",
+    version="2.9.0",
     author="Freedom of the Press Foundation",
     author_email="[email protected]",
     description="SecureDrop Server",

securedrop/version.py

@@ -1 +1 @@
-__version__ = "2.9.0~rc3"
+__version__ = "2.9.0"