Plan for 2.0.0-M9 release.

A 2.0.0-M9 released is required by @adamsero. Ideally for the end of the week. (https://github.com/eclipse/leshan/pull/1313#issuecomment-1266648467)

Current modification are :

140f8b893: Remove Unused local variable and add checkstyle rule about that.
2fdf9f17f: #1304 Refactored timestamps to use BigDecimal and Instant
d4939f091: Updates demo frontend dependencies
84a055bba: Upgrade jackson depndencies (2.13.3 => 2.13.4)
e6af61d53: Upgrade maven plugins dependencies
f5accbcf1: Integration of Californium 3.7.0
ecc113c43: #1305 : Added toString, hashCode and equals to ObserveCompositeRequest
d3cf1a2aa: Timestamps in seconds instead of milliseconds in ManualDataSender
b14a7406f: #1301: Fix relative timestamp issue of SenML decoder.
a9e1741a3: #1298: fix issue about EC Key Pair with java 15 or higher
eb6f51c35: Add "write checks" permissions for test reports github action
f0d72633d: Update SECURITY.md to add CVE-2022-2576 issue.
009aab986: no checkstyle or java import check if code doesn't compile
d31212d36: No github action on Draft PR.
fbc9f75f7: add requireUpperBoundDeps rules to maven-enforcer-plugin.
c0a73763d: Revapi should not alway check API on v1.0.0 but on the last released.

@adamsero :

• is there something more we need to add ?
• do you (or orange) need time to test current master in your product to be sure it’s fine to you ?

One more details, I see a dependabot bot altert about current Jackson library, I think we are not concerned as we don’t use UNWRAP_SINGLE_VALUE_ARRAYS setting but maybe better to upgrade anyway. The “problem” : there is only a rc1 version available with the fix. So I don’t know if we should wait, or ? (See : https://github.com/FasterXML/jackson-databind/issues/3590#issuecomment-1269625267)

[sbernard31]

@adamsero the 2.0.0-M9 should be available but not yet visible at https://search.maven.org.

[sbernard31]

I think we can close this one.