release: the v1.9.1-ce (202407) release

This is a bugfix, renovate, and update release intended to provide a
modernized version to end users and packagers.

News:
- it is called version `1.9.1-ce` or `v1.9.1-ce` (the release/package name);
- it should be more stable than bleeding packages;
- we can backport fixes to it (if needed);
- it will be available as a regular release;
- this is the `john-packages` (itself) 0.95 release;
- It's based on an upstream tarball release.

BREAKING CHANGES:
- From now on, we have stopped building SSE2 binaries;
- From now on, we will discontinue all builds for 32-bit architectures.

Signed-off-by: Claudio André <[email protected]>

.github/ISSUE_TEMPLATE/bug_report.yml

@@ -16,7 +16,7 @@ body:
       description: Select the appropriate versions.
       multiple: true
       options:
-        - 1.9J1+2404
+        - 1.9.1-ce
         - latest bleeding
     validations:
       required: true

RELEASE-NOTES.md

@@ -1,32 +1,30 @@
 # Release Notes
 
-## Release [rolling-2404](https://github.com/openwall/john-packages/releases/tag/rolling-2404) (2024-04-05)
+The X86_64 binaries require either AVX, AVX2, AVX512F or AVX512BW.
 
-Version `1.9J1+2404`. This is a maintenance release:
+## Release [1.9.1-ce](https://github.com/openwall/john-packages/releases/tag/v1.9.1-ce) (2024-07-01)
 
-April’s bugfix release.
+Version `1.9.1-ce`. This is a bugfix, renovate, and update release intended to provide a
+modernized version to end users and packagers:
 
 ### Breaking Changes
 
-- Due to hardware unavailability, we have stopped building the macOS X86 (Intel CPU) package;
-- Due to hardware limitations, we have stopped building SSE2 binaries (only on Linux for now).
+- From now on, we have stopped building SSE2 binaries;
+- From now on, we will discontinue all builds for 32-bit architectures.
 
 ### Bugfixes
 
-- Some random bugfixes here and there.
+- Minor and important bugfixes.
 
 ### Improvements
 
-- Add arm64 Docker image (with NVIDIA GPU support);
 - Add new formats and/or implementations;
-  - Armory wallet, Keplr wallet, Argon2 OpenCL.
-- \*2john improvements;
-  - Add a modern version of pdf2john (.py; Python 3).
-- Improve OpenCL detection;
-  - Start using dynamic OpenCL binding (dynamically load OpenCL library);
-  - Add Khronos Group OpenCL header files (use this local copy of the OpenCL headers);
-- Some random optimizations here and there;
-- Minor documentations tweaks.
+  - Add a new SM3 hash function.
+- Add SLSA level 1 to GitHub Releases;
+- Add more details and traceability to the produced build logs;
+- Update dependencies and pin dependency versions to improve repeatability and security;
+- Add `Combinator` external mode (combines words in pairs);
+- Provide packages via `zip` archive and avoid the risk and need of using `7zip`.
 
 ### Binaries Available
 
@@ -35,7 +33,7 @@ April’s bugfix release.
   - bundle (for X86_64);
   - via FlatHub (for X86_64 and aarch64).
 - macOS (for M1 and above);
-- Snap (for X86_64, armhf, arm64, ppc64el, riscv64, and s390x);
+- Snap (for X86_64, arm64, ppc64el, riscv64, and s390x);
 - Windows (for X86_64).
 
 All except s390x and riscv64 binaries support SIMD.

deploy/Release.ID

@@ -1 +1 @@
-roll+
+v1.9.1-ce

docs/newsletter.md

@@ -2,7 +2,9 @@
 
 Welcome to July’s edition of the Newsletter!
 
-**Everyone should upgrade to `1.9J1+2404`** or its corresponding upstream commit:
+**John the Ripper release mode is on!**. Let's welcome `1.9.1-ce` version, the **latest release**.
+
+**Everyone should upgrade to `1.9.1-ce`** or its corresponding upstream commit:
 
 - it contains several bugfixes, including some important ones related to formats bugs and OpenCL NVIDIA on Windows;
 - it contains several important improvements such as "opportunistic dupe suppression".
@@ -41,5 +43,5 @@ Also:
 
 ## Recommendation
 
-Install (or update your installation to) `1.9J1+2404` (**rolling-2404**) or to the upstream commit
+Install (or update your installation to) `1.9.1-ce` or to the upstream commit
 [f9fedd2](https://github.com/openwall/john/commit/f9fedd238b0b1d69181c1fef033b85c787e96e57).