docs: release notes

.github/workflows/release.yml

@@ -2,10 +2,10 @@ name: Build and Deploy Release
 
 ##
 ## Automates the release process
-## 1. Update the 'body:' below and the changelog.md
+## 1. Run `./list-changes.sh` and update the changelog.md.
 ## 2. Run `./prepare-release.sh`
 ## 3. Create PR, merge PR
-## 4. Run `git push origin main --tags`
+## 4. Run `git push origin --tags`
 ##
 
 permissions:
@@ -186,12 +186,7 @@ jobs:
           prerelease: false
           draft: false
           body: |
-            - fix: utilize maven proxy if present (#6255)
-            - fix: allow api key in cli to be quoted (#6253)
-            - fix: use correct maven plugin reporting plugin (#6244)
-            - fix: correct trailing comma in JSON report (#6245)
-
-            See the full listing of [changes](https://github.com/jeremylong/DependencyCheck/milestone/74?closed=1).
+            Refer to the [CHANGELOG.md](https://github.com/jeremylong/DependencyCheck/blob/main/CHANGELOG.md#change-log) for information about improvements and upgrade notes.
 
       - name: Upload CLI
         id: upload-release-cli

CHANGELOG.md

@@ -1,5 +1,20 @@
 # Change Log
 
+## [Version 9.0.5](https://github.com/jereong/DependencyCheck/releases/tag/v9.0.5) (2023-12-13)
+
+- fix: make NVD API endpoint configurable (#6287)
+- fix: synch last modified timestamp for NVD API (#6281)
+- fix: read NVD cache meta files if cache.properties does not exist (#6282)
+- fix: correct property for nonProxyHosts (#6285)
+- fix: reduce apache http logging (#6280)
+- fix: store last modified timestamp for RetireJS and the Hosted Suppression File in db (#6271)
+- build: bump golang in the docker image (#6274)
+- fix: use temporary files to reduce memory usage during the NVD Update (#6270)
+- fix: use BIT for Oracle DB instead of Boolean when calling prepared statements (#6264)
+- fix: showing all reference tags in reports (#6259)
+
+See the full listing of [changes](https://github.com/jeremylong/DependencyCheck/milestone/75?closed=1).
+
 ## [Version 9.0.4](https://github.com/jereong/DependencyCheck/releases/tag/v9.0.4) (2023-12-08)
 
 - fix: utilize maven proxy if present (#6255)