The Apache Wicket PMC is proud to announce Apache Wicket 9.25.0!
Apache Wicket is an open source Java component oriented web application
framework that powers thousands of web applications and web sites for
governments, stores, universities, cities, banks, email providers, and
more. You can find more about Apache Wicket at https://wicket.apache.org
Final release of Wicket 9
-------------------------
This is the final release of Wicket 9. With this release the 9.x
branch has reached end of life: there will be no further 9.x releases,
not even for security fixes. Wicket now releases a new major version
every three months, with a long-term support release once a year. Read
about our new release cadence and support policy at
* https://wicket.apache.org/news/2026/09/11/release-cadence.html
We use semantic versioning for the development of Wicket, and as such
no API breaks are present in this release compared to 9.0.0.
New and noteworthy
------------------
* Vulnerable dependencies have been updated (WICKET-7199)
* Fixed a regression from 9.24.0: setEscapeModelStrings(false) on a
Button had no effect, so markup in a button label was escaped
(GH-1576)
Using this release
------------------
With Apache Maven update your dependency to (and don't forget to
update any other dependencies on Wicket projects to the same version):
<dependency>
<groupId>org.apache.wicket</groupId>
<artifactId>wicket-core</artifactId>
<version>9.25.0</version>
</dependency>
Or download and build the distribution yourself, or use our
convenience binary package you can find here:
* Download: https://wicket.apache.org/versions/wicket-9.x/#manually
Upgrading from earlier versions
-------------------------------
If you upgrade from 9.y.z this release is a drop in replacement. If
you come from a version prior to 9.0.0, please read our Wicket 9
migration guide found at
* http://s.apache.org/wicket9migrate
Now that Wicket 9 has reached end of life, plan your move to Wicket 10,
our long-term support release, or to Wicket 11. For upgrade options see:
* https://wicket.apache.org/versions/wicket-9.x/#upgrade
Have fun!
— The Wicket team
========================================================================
CHANGELOG for 9.25.0:
** Bug
* [WICKET-7199] - Vulnerable dependencies need to be updated
* [WICKET-7205] - CSP-Headers not set if RenderPageRequestHandler
wrapped in more than one IRequestHandlerDelegates
* [GH-1576] - BUG since 10.11.0: Wrong escaping in Button
label,while getEscapeModelStrings=false
** Task
* [GH-1699] - Include GitHub issues in the release notes built by
build-changelog.sh
* [GH-1708] - build-versions.py fails on Python 3 and misses the
experimental modules
