Update release notes wrt #844

Author: cowtowncoder

README.md

@@ -104,6 +104,7 @@ instance of which is constructed by `JsonFactory`:
 An example can be found from [Reading and Writing Event Streams](http://www.cowtowncoder.com/blog/archives/2009/01/entry_132.html)
 
 -----
+
 ## Compatibility
 
 ### JDK
@@ -124,6 +125,18 @@ for information on Android SDK versions to Android Release names see [Android ve
 
 -----
 
+## Release Process
+
+Starting with Jackson 2.15, releases of this module will be [SLSA](https://slsa.dev/) compliant: see issue #844 for details.
+
+Release process is triggered by
+
+    ./release.sh
+
+script which uses Maven Release plug-in under the hood (earlier release plug-in was directly invoked).
+
+-----
+
 ## Support
 
 ### Community support

release-notes/CREDITS-2.x

@@ -351,3 +351,6 @@ Markus Spika  (DemonicTutor@github)
    if `tokenFilter` is null
   (2.14.2)
 
+Pedro Nacht (pnacht@github)
+  * Contributed #844: Add SLSA provenance via build script
+  (2.15.0)

release-notes/VERSION-2.x

@@ -19,6 +19,8 @@ JSON library.
 #827: Add numeric value size limits via `StreamReadConstraints` (fixes
   `sonatype-2022-6438`)
  (contributed by @pjfanning)
+#844: Add SLSA provenance via build script
+ (contributed by Pedro N)
 #851: Add `StreamReadFeature.USE_FAST_BIG_DECIMAL_PARSER` to enable
   faster `BigDecimal`, `BigInteger` parsing
  (contributed by @pjfanning)