Prepare release 2.3.7

pom.xml

@@ -41,20 +41,21 @@
     <parent>
         <groupId>org.springframework.boot</groupId>
         <artifactId>spring-boot-starter-parent</artifactId>
-        <version>3.5.4</version>
+        <version>3.5.6</version>
     </parent>
 
     <properties>
         <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
         <java.version>17</java.version>
         <doxia-module-markdown.version>1.5</doxia-module-markdown.version>
-        <jacoco.version>0.8.10</jacoco.version>
-        <dependency-check-maven.version>12.1.3</dependency-check-maven.version>
+        <jacoco.version>0.8.13</jacoco.version>
+        <dependency-check-maven.version>12.1.6</dependency-check-maven.version>
         <logback-ecs-encoder.version>1.7.0</logback-ecs-encoder.version>
         <logback.encoder.version>7.4</logback.encoder.version>
         <maven-project-info-reports-plugin.version>2.8</maven-project-info-reports-plugin.version>
         <maven-release-plugin.version>2.5.3</maven-release-plugin.version>
         <maven-site-plugin.version>3.8.2</maven-site-plugin.version>
+        <commons-lang3.version>3.18.0</commons-lang3.version> <!-- Temporary fix for CVE-2025-48924 -->
     </properties>
 
     <build>

release/pom.xml

@@ -31,7 +31,7 @@
     <properties>
         <!-- A list of all the previous versions in reverse order, separated by a comma separator -->
         <!-- The current version is automatically added in the release-notes-all overview. -->
-        <versions>2.3.6,2.3.5,2.3.4,2.3.3,2.3.2,2.3.1,2.3.0,2.2.1,2.2.0,2.1.1,2.1.0,2.0.6,2.0.5,2.0.4,2.0.3,2.0.2,2.0.1,1.0.0</versions>
+        <versions>2.3.7,2.3.6,2.3.5,2.3.4,2.3.3,2.3.2,2.3.1,2.3.0,2.2.1,2.2.0,2.1.1,2.1.0,2.0.6,2.0.5,2.0.4,2.0.3,2.0.2,2.0.1,1.0.0</versions>
     </properties>
 
     <dependencies>

release/src/site/markdown/docs/2.3.7/release-notes.md

@@ -0,0 +1,24 @@
+# OC SSO Notification Service - Release Notes
+
+| Field                     | Value                       |
+|:--------------------------|:----------------------------|
+| Application               | OC SSO Notification Service |
+| Version                   | 2.3.7                       |
+| Changes since version     | 2.3.6                       |
+| Release date              | 16-10-2025 (dd-mm-yyyy)     |
+| Delivery type             | Full release                |
+
+## Changes
+
+| #        | Description                             |
+|:---------|:----------------------------------------|
+| ENT-5292 | Build release OC SSO Notification 2.3.7 |
+
+
+## Configuration changes
+
+None.
+
+## Known vulnerabilities
+
+At the time of release, this version of the application had no known vulnerabilities with a CVE of 7 or higher.