5.0.1-release-notes (#5073)

Author: hmottestad

scripts/release.sh

@@ -241,7 +241,7 @@ git push --set-upstream origin "merge_main_into_develop_after_release_${MVN_VERS
 
 echo "Creating pull request to merge the merge-branch into develop"
 gh pr create -B develop --title "sync develop branch after release ${MVN_VERSION_RELEASE}" --body "Merge using merge commit rather than rebase"
-echo "It's ok to merge this PR later, so wait for the Jenkins tests to finish."
+echo "It's ok to merge this PR later, so wait for the CI tests to finish."
 read -n 1 -srp "Press any key to continue (ctrl+c to cancel)"; printf "\n\n";
 
 mvn clean -Dmaven.clean.failOnError=false
@@ -277,7 +277,7 @@ cp -f "site/static/javadoc/${MVN_VERSION_RELEASE}.tgz" "site/static/javadoc/late
 git add --all
 git commit -s -a -m "javadocs for ${MVN_VERSION_RELEASE}"
 git push --set-upstream origin "${RELEASE_NOTES_BRANCH}"
-gh pr create -B main --title "${RELEASE_NOTES_BRANCH}" --body "Javadocs, release-notes and news item for ${MVN_VERSION_RELEASE}"
+gh pr create -B main --title "${RELEASE_NOTES_BRANCH}" --body "Javadocs, release-notes and news item for ${MVN_VERSION_RELEASE}.\n\n - [ ] check that [Jenkins](https://ci.eclipse.org/rdf4j/) finished publishing the release\n - [ ] remember to also [add the release here on GitHub](https://github.com/eclipse-rdf4j/rdf4j/releases/new?tag=${MVN_VERSION_RELEASE}&title=RDF4JRDF4J%20${MVN_VERSION_RELEASE}) (include announcement)"
 
 echo "Javadocs are in git branch ${RELEASE_NOTES_BRANCH}"
 

site/content/download.md

@@ -5,15 +5,15 @@ toc: true
 
 You can either retrieve RDF4J via Apache Maven, or download the SDK or onejar directly.
 
-## RDF4J 5.0.0 (latest)
+## RDF4J 5.0.1 (latest)
 
-RDF4J 5.0.0 is our latest stable release. It requires Java 11 minimally.
-For details on what’s new and how to upgrade, see the [release and upgrade notes](/release-notes/5.0.0).
+RDF4J 5.0.1 is our latest stable release. It requires Java 11 minimally.
+For details on what’s new and how to upgrade, see the [release and upgrade notes](/release-notes/5.0.1).
 
-- [RDF4J 5.0.0 SDK (zip)](http://www.eclipse.org/downloads/download.php?file=/rdf4j/eclipse-rdf4j-5.0.0-sdk.zip)<br/>
+- [RDF4J 5.0.1 SDK (zip)](http://www.eclipse.org/downloads/download.php?file=/rdf4j/eclipse-rdf4j-5.0.1-sdk.zip)<br/>
   Full Eclipse RDF4J SDK, containing all libraries, RDF4J Server, Workbench, and Console applications, and Javadoc API.
 
-- [RDF4J 5.0.0 onejar](http://www.eclipse.org/downloads/download.php?file=/rdf4j/eclipse-rdf4j-5.0.0-onejar.jar)<br/>
+- [RDF4J 5.0.1 onejar](http://www.eclipse.org/downloads/download.php?file=/rdf4j/eclipse-rdf4j-5.0.1-onejar.jar)<br/>
   Single jar file for easy inclusion of the full RDF4J toolkit in your Java project.
 
 - [RDF4J artifacts](https://search.maven.org/search?q=org.eclipse.rdf4j) on the [Maven Central Repository](http://search.maven.org/)
@@ -28,7 +28,7 @@ You can include RDF4J as a Maven dependency in your Java project by including th
         <dependency>
             <groupId>org.eclipse.rdf4j</groupId>
             <artifactId>rdf4j-bom</artifactId>
-            <version>5.0.0</version>
+            <version>5.0.1</version>
             <type>pom</type>
             <scope>import</scope>
         </dependency>

site/content/news/rdf4j-501.md

@@ -0,0 +1,14 @@
+---
+title: "RDF4J 5.0.1 released"
+date: 2024-07-09T17:08:30+0200
+layout: "single"
+categories: ["news"]
+---
+RDF4J 5.0.1 is now available. This is a patch release fixing 8 bugs.
+
+For more details, have a look at the [release notes](/release-notes/5.0.1).
+<!--more-->
+### Links
+
+- [Download RDF4J](/download/)
+- [release notes](/release-notes/5.0.1).

site/content/release-notes/5.0.1.md

@@ -0,0 +1,24 @@
+---
+title: "5.0.1"
+toc: true
+---
+RDF4J 5.0.1 is a patch release that fixes 8 issues.
+
+For a complete overview, see [all issues fixed in 5.0.1](https://github.com/eclipse/rdf4j/milestone/108?closed=1).
+
+### Security
+
+The following dependencies and/or transitive dependencies have been updated to address security vulnerabilities:
+ - Upgraded spring to 5.3.37
+ - Upgraded snappy-java to 1.1.10.5
+ - Upgraded netty to 4.1.111
+
+These upgrades fix several issues reported in various CVEs (more details can be found in the RDF4J github [issue list](https://github.com/eclipse-rdf4j/rdf4j/issues?q=is%3Aissue+label%3Asecurity+is%3Aclosed) ).
+While these vulnerabilities may or may not affect the security of RDF4J itself in a real-world environment, 
+users are nevertheless recommended to consider upgrading to the latest version of RDF4J.
+
+
+### Acknowledgements
+
+This release was made possible by contributions from Florian Kleedorfer, Håvard M. Ottestad, Matthew Nguyen, Bart Hanssens,
+Pete Edwards and Jerven Bolleman.