All dependencies are up-to-date with exception of jdk8 needs.
Numerous internal bugs were fixed per scanning reports (findbugs/spotbugs, checkstyle, pmd, others).
Additional support added to stop/start connectors.
Last RC was back in August 2017. See commit history for other changes. Original plans for 3.0.0 were on ice due to how logs not on the classpath can be addressed since prior version had a work around. That issue has not been resolved and we have simply gone too long without a release. Due to tomcat and jackson vulnerabilties it felt more important to just get a release out and let people kick the tires on it.