From 76ee550c9d3b9f0e559f044e18136b74c167fef2 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Micha=C5=82=20Trojnara?= <Michal.Trojnara@stunnel.org>
Date: Sat, 29 Jun 2024 20:16:47 +0200
Subject: [PATCH] Release 2.9
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Signed-off-by: MichaƂ Trojnara <Michal.Trojnara@stunnel.org>
---
 .github/workflows/ci.yml |  2 +-
 CMakeLists.txt           |  2 +-
 NEWS.md                  | 14 +++++++++++---
 3 files changed, 13 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 96689c8..8e19dbe 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -7,7 +7,7 @@ on:
 env:
   # Customize the CMake build type here (Release, Debug, RelWithDebInfo, etc.)
   BUILD_TYPE: Release
-  version: osslsigncode-2.9-dev
+  version: osslsigncode-2.9
 
 jobs:
   build:
diff --git a/CMakeLists.txt b/CMakeLists.txt
index e7c0ee9..082935b 100644
--- a/CMakeLists.txt
+++ b/CMakeLists.txt
@@ -16,7 +16,7 @@ project(osslsigncode
     LANGUAGES C)
 
 # force nonstandard version format for development packages
-set(DEV "-dev")
+set(DEV "")
 set(PROJECT_VERSION "${PROJECT_VERSION_MAJOR}.${PROJECT_VERSION_MINOR}${DEV}")
 
 # version and contact information
diff --git a/NEWS.md b/NEWS.md
index 713e465..d21ef2d 100644
--- a/NEWS.md
+++ b/NEWS.md
@@ -1,13 +1,21 @@
 # osslsigncode change log
 
-### 2.9 (unreleased)
+### 2.9 (2024.06.29)
 
 - added a 64 bit long pseudo-random NONCE in the TSA request
-- used native HTTP client with OpenSSL 3.0 or later, removed libcurl dependency
+- missing NID_pkcs9_signingTime is no longer an error
+- added support for PEM-encoded CRLs
+- fixed the APPX central directory sorting order
+- added a special "-" file name to read the passphrase from stdin
+  (by Steve McIntyre)
+- used native HTTP client with OpenSSL 3.x, removing libcurl dependency
+- added '-login' option to force a login to PKCS11 engines
+  (by Brad Hughes)
 - added the "-ignore-crl" option to disable fetching and verifying
   CRL Distribution Points
 - changed error output to stderr instead of stdout
-- improved testing
+- various testing framework improvements
+- various memory corruption fixes
 
 ### 2.8 (2024.03.03)