Release Play 2.8.16

[mkurz]

Preparing the release

Better to do this in advance:

• [ ] Make sure that other teams inside Lightbend are aware of the upcoming release, even if it is a minor/patch one
  • [ ] Lightbend Telemetry Team
  • [ ] Akka Team
• []

Do the Release (Full document)

• x[]

  • [ ] release play-json
  • [ ] Look for PRs that should be merged.
  • [ ] Look at status:needs-backport, status:needs-forwardport issues/PRs (including closed ones).
  • [ ] Look at issues/PRs tagged milestone version (including closed ones).
  • [ ] Update any dependencies that are needed. (e.g JDK, Scala)
  • [ ] release play-ws
  • [ ] Look for PRs that should be merged.
  • [ ] Look at status:needs-backport, status:needs-forwardport issues/PRs (including closed ones).
  • [ ] Look at issues/PRs tagged milestone version (including closed ones).
  • [ ] Update any dependencies that are needed. (e.g JDK, Scala)
  • [ ] Make sure play-ws uses new play-json
  • [ ] release twirl
  • [ ] Look for PRs that should be merged.
  • [ ] Look at status:needs-backport, status:needs-forwardport, status:needs-backport-1.3 issues/PRs (including closed ones).
  • [ ] Look at issues/PRs tagged milestone version (including closed ones).
  • [ ] Update any dependencies that are needed. (e.g JDK, Scala)

• x[]

  • [ ] Look for PRs that should be merged.
  • [ ] Look at status:needs-backport, status:needs-forwardport, status:needs-backport-2.6 issues/PRs (including closed ones).
  • [x] Look at issues/PRs tagged milestone version (including closed ones).
  • [x] Update any dependencies that are needed. (e.g JDK, Scala)
  • [ ] Make sure play uses new play-json, play-ws, twirl

• x[]

  • [ ] release play-slick
  • [ ] release scalatestplus-play
  • [ ] release play-grpc

• x[]

• []

• x[]

• []

• x[]

  • x[]
  • x[]
  • []
  • x[]

• x[]

  • [x] Write a topic on https://discuss.lightbend.com/
  • [x] Write a release on https://github.com/playframework/playframework/releases
  • [ ] Send an internal email to eng-updates
  • [x] Tweet about the new release.

• x[]

[ihostage]

Looks like we should actualize the issue template of Play Release 😄

[BillyAutrey]

A good portion of the first half doesn't apply, because it was a very minor release for CVEs. We can follow-up if we want to release some fixes for the other sub-projects. But, we skipped releases for play-json, play-ws, twirl, play-slick, scalatestplus-play, and play-grpc.

[felipebonezi]

What do you think to add play-ebean into the external modules checklist as well? Most Java developers use it as a project dependency.

[mkurz]

@felipebonezi Please provide a pull request to add play-ebean, thanks!

[mkurz]

Closing, I already also posted to the security mailing list (https://groups.google.com/g/play-framework-security, however I want to retire that list as soon it is possible to subscribe to GHSA notifications on GitHub, see https://github.com/github-community/community/discussions/12226#discussioncomment-2489025 )

[mkurz]

(Also yes this issue template needs update, we'll do that next release :wink: )