chore(release): prepare release 0.8.16

CHANGELOG.md

@@ -1,5 +1,24 @@
 # Changelog
 
+## [0.8.16] - 2026-02-25
+
+### Fixed
+
+* Require `spiffe://` prefix when parsing SPIFFE IDs, tightening scheme validation (#398)
+* Ensure atomic snapshot of X.509 SVID and bundles in `DefaultX509Source`, preventing torn reads under concurrency (#397)
+* Reject null bundles and empty cached SVID lists in core parsing/cache paths (#399)
+* Validate presence of JWT audience claim during parsing (#399)
+
+### Dependency updates
+
+* Bump grpcVersion from 1.77.0 to 1.79.0 (#392, #402)
+* Bump com.nimbusds:nimbus-jose-jwt from 10.6 to 10.8 (#395, #409)
+* Bump gradle-wrapper from 9.2.1 to 9.3.1 (#400, #401)
+
+### Build
+
+* Simplify Dependabot config and group coupled Gradle dependencies (#403)
+
 ## [0.8.15] - 2025-12-23
 
 ### Fixed

README.md

@@ -26,7 +26,7 @@ X.509 and JWT SVIDs and bundles.
 Download
 --------
 
-The JARs can be downloaded from [Maven Central](https://search.maven.org/search?q=g:io.spiffe%20AND%20v:0.8.15). 
+The JARs can be downloaded from [Maven Central](https://search.maven.org/search?q=g:io.spiffe%20AND%20v:0.8.16). 
 
 The dependencies can be added to `pom.xml`
 
@@ -35,7 +35,7 @@ To import the `java-spiffe-provider` component:
 <dependency>
   <groupId>io.spiffe</groupId>
   <artifactId>java-spiffe-provider</artifactId>
-  <version>0.8.15</version>
+  <version>0.8.16</version>
 </dependency>
 ```
 The `java-spiffe-provider` component imports the `java-spiffe-core` component.
@@ -45,20 +45,20 @@ To just import the `java-spiffe-core` component:
 <dependency>
   <groupId>io.spiffe</groupId>
   <artifactId>java-spiffe-core</artifactId>
-  <version>0.8.15</version>
+  <version>0.8.16</version>
 </dependency>
 ```
 
 Using Gradle:
 
 Import `java-spiffe-provider`:
 ```gradle
-implementation group: 'io.spiffe', name: 'java-spiffe-provider', version: '0.8.15'
+implementation group: 'io.spiffe', name: 'java-spiffe-provider', version: '0.8.16'
 ```
 
 Import `java-spiffe-core`:
 ```gradle
-implementation group: 'io.spiffe', name: 'java-spiffe-core', version: '0.8.15'
+implementation group: 'io.spiffe', name: 'java-spiffe-core', version: '0.8.16'
 ```
 
 ### MacOS Support
@@ -72,14 +72,14 @@ In case run on a osx-x86 architecture, add to your `pom.xml`:
 <dependency>
   <groupId>io.spiffe</groupId>
   <artifactId>grpc-netty-macos</artifactId>
-  <version>0.8.15</version>
+  <version>0.8.16</version>
   <scope>runtime</scope>
 </dependency>
 ```
 
 Using Gradle:
 ```gradle
-runtimeOnly group: 'io.spiffe', name: 'grpc-netty-macos', version: '0.8.15'
+runtimeOnly group: 'io.spiffe', name: 'grpc-netty-macos', version: '0.8.16'
 ```
 
 #### Aarch64 (M1) Architecture
@@ -91,15 +91,15 @@ If you are running the aarch64 architecture (M1 CPUs), add to your `pom.xml`:
 <dependency>
   <groupId>io.spiffe</groupId>
   <artifactId>grpc-netty-macos-aarch64</artifactId>
-  <version>0.8.15</version>
+  <version>0.8.16</version>
   <scope>runtime</scope>
 </dependency>
 ```
 
 Using Gradle:
 
 ```gradle
-runtimeOnly group: 'io.spiffe', name: 'grpc-netty-macos-aarch64', version: '0.8.15'
+runtimeOnly group: 'io.spiffe', name: 'grpc-netty-macos-aarch64', version: '0.8.16'
 ```
 
 *Caveat: not all OpenJDK distributions are aarch64 native, make sure your JDK is also running
@@ -112,7 +112,7 @@ The `java-spiffe-helper` module manages X.509 SVIDs and Bundles in Java Keystore
 
 ### Docker Image
 
-Pull the `java-spiffe-helper` image from `ghcr.io/spiffe/java-spiffe-helper:0.8.15`.
+Pull the `java-spiffe-helper` image from `ghcr.io/spiffe/java-spiffe-helper:0.8.16`.
 
 For more details, see [java-spiffe-helper/README.md](java-spiffe-helper/README.md).
 

gradle.properties

@@ -1 +1 @@
-version=0.8.15
+version=0.8.16

java-spiffe-helper/README.md

@@ -10,11 +10,11 @@ The Helper automatically gets the SVID updates and stores them in the KeyStore a
 
 On Linux:
 
-`java -jar java-spiffe-helper-0.8.15-linux-x86_64.jar`
+`java -jar java-spiffe-helper-0.8.16-linux-x86_64.jar`
 
 On Mac OS:
 
-`java -jar java-spiffe-helper-0.8.15-osx-x86_64.jar`
+`java -jar java-spiffe-helper-0.8.16-osx-x86_64.jar`
 
 You can run the utility with the `-c` or `--config` option to specify the path to the configuration file. By default, it
 will look for a configuration file named `conf/java-spiffe-helper.properties` in the current working directory.