The fileĀ src/assembly/src.xml still refers to the FindBugs config
instead of the SpotBugs config. Preparing 2.8.0-RC2.
diff --git a/pom.xml b/pom.xml
index 99c1d19..5a34184 100644
--- a/pom.xml
+++ b/pom.xml
@@ -267,7 +267,7 @@
     <maven.compiler.target>1.8</maven.compiler.target>
     <commons.componentid>io</commons.componentid>
     <commons.module.name>org.apache.commons.io</commons.module.name>
-    <commons.rc.version>RC1</commons.rc.version>
+    <commons.rc.version>RC2</commons.rc.version>
     <commons.bc.version>2.7</commons.bc.version>
     <commons.release.version>2.8.0</commons.release.version>
     <commons.release.desc>(requires Java 8)</commons.release.desc>
diff --git a/src/assembly/src.xml b/src/assembly/src.xml
index 9c28efc..f5373b0 100644
--- a/src/assembly/src.xml
+++ b/src/assembly/src.xml
@@ -25,12 +25,15 @@
         <fileSet>
             <includes>
                 <include>checkstyle.xml</include>
-                <include>findbugs-exclude-filter.xml</include>
+                <include>CONTRIBUTING.md</include>
                 <include>LICENSE.txt</include>
                 <include>NOTICE.txt</include>
                 <include>pom.xml</include>
                 <include>PROPOSAL.html</include>
+                <include>README.md</include>
                 <include>RELEASE-NOTES.txt</include>
+                <include>SECURITY.md</include>
+                <include>spotbugs-exclude-filter.xml</include>
             </includes>
         </fileSet>
         <fileSet>