dev  

Messages by Date

• 2026/10/13 (tomcat) 03/06: Correct the dynamic table index calculation after HPACK encoder roll-over remm
• 2026/10/13 (tomcat) 04/06: Cap the header frame payload buffer expansion at the maximum frame size remm
• 2026/10/13 (tomcat) branch 10.1.x updated (4f192f60fb -> 1c1d9d0582) remm
• 2026/10/13 (tomcat) 05/06: Fix flow control over-allocation when releasing the HTTP/2 connection back log remm
• 2026/10/13 (tomcat) 06/06: Fix CLOSED_RX unexpected frames handling remm
• 2026/10/13 (tomcat) 02/06: Validate the range of HTTP/2 settings provided by the administrator remm
• 2026/10/13 (tomcat) 01/06: Validate the initial flow control window size provided by the administrator remm
• 2026/10/13 (tomcat) 06/06: Fix CLOSED_RX unexpected frames handling remm
• 2026/10/13 (tomcat) 02/06: Validate the range of HTTP/2 settings provided by the administrator remm
• 2026/10/13 (tomcat) 04/06: Cap the header frame payload buffer expansion at the maximum frame size remm
• 2026/10/13 (tomcat) branch 11.0.x updated (6212c21a6a -> 40dd3edff6) remm
• 2026/10/13 (tomcat) 02/09: Validate the range of HTTP/2 settings provided by the administrator remm
• 2026/10/13 (tomcat) 05/09: Fix flow control over-allocation when releasing the HTTP/2 connection back log remm
• 2026/10/13 (tomcat) 09/09: Merge branch 'main' of [email protected]:apache/tomcat.git into main remm
• 2026/10/13 (tomcat) 01/09: Validate the initial flow control window size provided by the administrator remm
• 2026/10/13 (tomcat) 08/09: Merge branch 'main' of [email protected]:apache/tomcat.git into main remm
• 2026/10/13 (tomcat) 03/09: Correct the dynamic table index calculation after HPACK encoder roll-over remm
• 2026/10/13 (tomcat) branch main updated (d4a85e0ba1 -> 6029ea6073) remm
• 2026/10/13 (tomcat) branch main updated: Remove JAASRealm support class schultz
• 2026/10/13 (tomcat) branch 9.0.x updated: Add deprecation warning schultz
• 2026/10/13 (tomcat) branch 11.0.x updated: Fix potential race during session expiration. markt
• 2026/10/13 (tomcat) branch 10.1.x updated: Add deprecation warning schultz
• 2026/10/13 (tomcat) branch 11.0.x updated: Add deprecation warning schultz
• 2026/10/13 (tomcat) branch main updated: Remove additional references to JAASRealm schultz
• 2026/10/13 (tomcat) branch 9.0.x updated: Fix potential race during session expiration. markt
• 2026/10/13 (tomcat) branch main updated: Fix potential race during session expiration. markt
• 2026/10/13 Re: (tomcat) 12/16: Remove sessions from the manager map by instance identity Mark Thomas
• 2026/10/13 Re: [PROPOSAL] Deprecate JAAS Realm in 10.0.x and remove in 10.1.x Christopher Schultz
• 2026/10/13 (tomcat) branch 10.1.x updated: Mark JAASRealm as deprecated. schultz
• 2026/10/13 (tomcat) branch 9.0.x updated: Revert "Remove sessions from the manager map by instance identity" remm
• 2026/10/13 (tomcat) branch 11.0.x updated: Mark JAASRealm as deprecated. schultz
• 2026/10/13 (tomcat) branch 11.0.x updated: Revert "Remove sessions from the manager map by instance identity" remm
• 2026/10/13 Re: [PROPOSAL] Pull and shade commons-pool2 and commons-dbcp2 during release builds Mark Thomas
• 2026/10/13 (tomcat) branch main updated: Revert "Remove sessions from the manager map by instance identity" remm
• 2026/10/13 Re: (tomcat) 12/16: Remove sessions from the manager map by instance identity Rémy Maucherat
• 2026/10/13 Re: (tomcat) 12/16: Remove sessions from the manager map by instance identity Mark Thomas
• 2026/10/13 Re: [PROPOSAL] Pull and shade commons-pool2 and commons-dbcp2 during release builds Christopher Schultz
• 2026/10/13 Re: [PROPOSAL] Enable SecureLifecycleListener by default Mark Thomas
• 2026/10/13 Re: [PROPOSAL] Deprecate JAAS Realm in 10.0.x and remove in 10.1.x Mark Thomas
• 2026/10/13 Re: [PROPOSAL] Change embedded ZIP packaging to put zipped files into a subdirectory Mark Thomas
• 2026/10/13 Re: [PROPOSAL] Pull and shade commons-pool2 and commons-dbcp2 during release builds Mark Thomas
• 2026/10/13 (tomcat) branch 9.0.x updated: Add (AI generated) tests for Default Servlet / Accept-Encoding and fix the failures these tests exposed. markt
• 2026/10/13 (tomcat) branch 10.1.x updated: Add (AI generated) tests for Default Servlet / Accept-Encoding and fix the failures these tests exposed. markt
• 2026/10/13 (tomcat) branch 11.0.x updated: Add (AI generated) tests for Default Servlet / Accept-Encoding and fix the failures these tests exposed. markt
• 2026/10/13 (tomcat) branch main updated: Add (AI generated) tests for Default Servlet / Accept-Encoding and fix the failures these tests exposed. markt
• 2026/10/13 (tomcat) 05/06: API compatibility remm
• 2026/10/13 Buildbot failure in on tomcat-11.0.x buildbot
• 2026/10/13 (tomcat) 01/06: Fix end-of-input and ReadListener call-back contract for upgraded NIO connections remm
• 2026/10/13 (tomcat) 01/06: Fix end-of-input and ReadListener call-back contract for upgraded NIO connections remm
• 2026/10/13 (tomcat) 02/06: Report errors to upgraded connection WriteListeners at most once remm
• 2026/10/13 (tomcat) 04/06: Fix zero-length read handling in the input stream of an upgraded connection remm
• 2026/10/13 (tomcat) 06/06: API compatibility remm
• 2026/10/13 (tomcat) 05/06: API compatibility remm
• 2026/10/13 (tomcat) 03/06: Always de-register upgraded connection statistics when the container closes the connection remm
• 2026/10/13 (tomcat) branch 9.0.x updated (e9ab89c1c6 -> 719a09a353) remm
• 2026/10/13 (tomcat) 03/06: Always de-register upgraded connection statistics when the container closes the connection remm
• 2026/10/13 (tomcat) 06/06: API compatibility remm
• 2026/10/13 (tomcat) 04/06: Fix zero-length read handling in the input stream of an upgraded connection remm
• 2026/10/13 (tomcat) branch 10.1.x updated (baba50f52c -> e723ca8006) remm
• 2026/10/13 (tomcat) 02/06: Report errors to upgraded connection WriteListeners at most once remm
• 2026/10/13 (tomcat) 05/05: API compatibility remm
• 2026/10/13 (tomcat) branch 11.0.x updated (667ca17a8b -> 2caeaebbdf) remm
• 2026/10/13 (tomcat) 01/05: Fix end-of-input and ReadListener call-back contract for upgraded NIO connections remm
• 2026/10/13 (tomcat) 02/05: Report errors to upgraded connection WriteListeners at most once remm
• 2026/10/13 (tomcat) 03/05: Always de-register upgraded connection statistics when the container closes the connection remm
• 2026/10/13 (tomcat) 04/05: Fix zero-length read handling in the input stream of an upgraded connection remm
• 2026/10/13 (tomcat) 04/04: Fix zero-length read handling in the input stream of an upgraded connection remm
• 2026/10/13 (tomcat) branch main updated (593cce573e -> f2f94ce7ab) remm
• 2026/10/13 (tomcat) 01/04: Fix end-of-input and ReadListener call-back contract for upgraded NIO connections remm
• 2026/10/13 (tomcat) 02/04: Report errors to upgraded connection WriteListeners at most once remm
• 2026/10/13 (tomcat) 03/04: Always de-register upgraded connection statistics when the container closes the connection remm
• 2026/10/13 (tomcat) 14/16: Complete the CRLF state transition in ChunkedInputFilter.available() remm
• 2026/10/13 (tomcat) 13/16: Avoid caching unregistered upgrade group infos remm
• 2026/10/13 (tomcat) 10/16: Fail fast when the compressible MIME type list is set to null remm
• 2026/10/13 (tomcat) 06/16: Keep entries below an invalid multi-release version directory accessible remm
• 2026/10/13 (tomcat) 03/16: Invalidate cached collections when useClassLoaderResources differs remm
• 2026/10/13 (tomcat) 09/16: Log a warning for an invalid compression attribute value remm
• 2026/10/13 (tomcat) 16/16: Fix merge issues remm
• 2026/10/13 (tomcat) 05/16: Never return null from StandardRoot resource lookups while stopping remm
• 2026/10/13 (tomcat) 08/16: Synchronize access to the async timeout scheduling state remm
• 2026/10/13 (tomcat) 11/16: Use the hexadecimal request ID format from recycle() for new requests remm
• 2026/10/13 (tomcat) 12/16: Bound-check the AJP response header code lookup remm
• 2026/10/13 (tomcat) 15/16: Report end of stream from the buffered input filter remm
• 2026/10/13 (tomcat) branch 9.0.x updated (fea377bad3 -> e9ab89c1c6) remm
• 2026/10/13 (tomcat) 07/16: Keep asynchronous timeouts in place until they are processed remm
• 2026/10/13 (tomcat) 02/16: Avoid rebuilding the archive bloom filter on every index read remm
• 2026/10/13 (tomcat) 01/16: Fix archive index pre-check for mounted archive resource sets remm
• 2026/10/13 (tomcat) 04/16: Avoid exceptions when indexing malformed archive entry names remm
• 2026/10/13 (tomcat) 14/16: Avoid caching unregistered upgrade group infos remm
• 2026/10/13 (tomcat) 15/16: Complete the CRLF state transition in ChunkedInputFilter.available() remm
• 2026/10/13 (tomcat) 13/16: Bound-check the AJP response header code lookup remm
• 2026/10/13 (tomcat) 07/16: Keep asynchronous timeouts in place until they are processed remm
• 2026/10/13 (tomcat) 12/16: Report a content length of Integer.MAX_VALUE as an int remm
• 2026/10/13 (tomcat) 10/16: Fail fast when the compressible MIME type list is set to null remm
• 2026/10/13 (tomcat) 02/16: Avoid rebuilding the archive bloom filter on every index read remm
• 2026/10/13 (tomcat) 05/16: Never return null from StandardRoot resource lookups while stopping remm
• 2026/10/13 (tomcat) 04/16: Avoid exceptions when indexing malformed archive entry names remm
• 2026/10/13 (tomcat) 11/16: Use the hexadecimal request ID format from recycle() for new requests remm
• 2026/10/13 (tomcat) 16/16: Report end of stream from the buffered input filter remm
• 2026/10/13 (tomcat) 03/16: Invalidate cached collections when useClassLoaderResources differs remm
• 2026/10/13 (tomcat) 06/16: Keep entries below an invalid multi-release version directory accessible remm
• 2026/10/13 (tomcat) branch 10.1.x updated (5061dfb754 -> baba50f52c) remm
• 2026/10/13 (tomcat) 08/16: Synchronize access to the async timeout scheduling state remm
• 2026/10/13 (tomcat) 01/16: Fix archive index pre-check for mounted archive resource sets remm
• 2026/10/13 (tomcat) 09/16: Log a warning for an invalid compression attribute value remm
• 2026/10/13 (tomcat) 05/16: Never return null from StandardRoot resource lookups while stopping remm
• 2026/10/13 (tomcat) 11/16: Use the hexadecimal request ID format from recycle() for new requests remm
• 2026/10/13 (tomcat) 09/16: Log a warning for an invalid compression attribute value remm
• 2026/10/13 (tomcat) 16/16: Report end of stream from the buffered input filter remm
• 2026/10/13 Re: (tomcat) branch 11.0.x updated: Java compatibility Rémy Maucherat
• 2026/10/13 (tomcat) 03/16: Invalidate cached collections when useClassLoaderResources differs remm
• 2026/10/13 (tomcat) 13/16: Bound-check the AJP response header code lookup remm
• 2026/10/13 (tomcat) 06/16: Keep entries below an invalid multi-release version directory accessible remm
• 2026/10/13 (tomcat) 15/16: Complete the CRLF state transition in ChunkedInputFilter.available() remm
• 2026/10/13 (tomcat) 08/16: Synchronize access to the async timeout scheduling state remm
• 2026/10/13 (tomcat) branch 11.0.x updated (89fd736b0f -> 667ca17a8b) remm
• 2026/10/13 (tomcat) 01/16: Fix archive index pre-check for mounted archive resource sets remm
• 2026/10/13 (tomcat) 02/16: Avoid rebuilding the archive bloom filter on every index read remm
• 2026/10/13 (tomcat) 12/16: Report a content length of Integer.MAX_VALUE as an int remm
• 2026/10/13 (tomcat) 10/16: Fail fast when the compressible MIME type list is set to null remm
• 2026/10/13 (tomcat) 04/16: Avoid exceptions when indexing malformed archive entry names remm
• 2026/10/13 (tomcat) 14/16: Avoid caching unregistered upgrade group infos remm
• 2026/10/13 (tomcat) 07/16: Keep asynchronous timeouts in place until they are processed remm
• 2026/10/13 (tomcat) 18/19: Merge branch 'main' of [email protected]:apache/tomcat.git into main remm
• 2026/10/13 Buildbot success in on tomcat-11.0.x buildbot
• 2026/10/13 (tomcat) 19/19: Fix changelog entries remm
• 2026/10/13 (tomcat) 07/19: Keep asynchronous timeouts in place until they are processed remm
• 2026/10/13 Re: (tomcat) branch 11.0.x updated: Java compatibility Mark Thomas
• 2026/10/13 (tomcat) 17/19: Report end of stream from the buffered input filter remm
• 2026/10/13 (tomcat) 16/19: Complete the CRLF state transition in ChunkedInputFilter.available() remm
• 2026/10/13 (tomcat) 08/19: Synchronize access to the async timeout scheduling state remm
• 2026/10/13 (tomcat) 11/19: Use the hexadecimal request ID format from recycle() for new requests remm
• 2026/10/13 (tomcat) 14/19: Restore the raw HTTP method token for methods unknown to Tomcat remm
• 2026/10/13 (tomcat) 15/19: Avoid caching unregistered upgrade group infos remm
• 2026/10/13 (tomcat) 09/19: Log a warning for an invalid compression attribute value remm
• 2026/10/13 (tomcat) 05/19: Never return null from StandardRoot resource lookups while stopping remm
• 2026/10/13 (tomcat) 01/19: Fix archive index pre-check for mounted archive resource sets remm
• 2026/10/13 (tomcat) 04/19: Avoid exceptions when indexing malformed archive entry names remm
• 2026/10/13 (tomcat) 03/19: Invalidate cached collections when useClassLoaderResources differs remm
• 2026/10/13 (tomcat) 02/19: Avoid rebuilding the archive bloom filter on every index read remm
• 2026/10/13 (tomcat) 13/19: Bound-check the AJP response header code lookup remm
• 2026/10/13 (tomcat) 06/19: Keep entries below an invalid multi-release version directory accessible remm
• 2026/10/13 (tomcat) 10/19: Fail fast when the compressible MIME type list is set to null remm
• 2026/10/13 (tomcat) branch main updated (a1fdb54c28 -> 593cce573e) remm
• 2026/10/13 (tomcat) 12/19: Report a content length of Integer.MAX_VALUE as an int remm
• 2026/10/13 (tomcat) branch dependabot/github_actions/actions/setup-java-6 deleted (was fbd7ecb967) github-bot
• 2026/10/13 (tomcat) branch 9.0.x updated: Java compatibility remm
• 2026/10/13 (tomcat) branch 10.1.x updated: Java compatibility remm
• 2026/10/13 (tomcat) branch main updated (9bd09fa687 -> a1fdb54c28) remm
• 2026/10/13 (tomcat) 01/01: Merge pull request #1082 from apache/dependabot/github_actions/actions/setup-java-6 remm
• 2026/10/13 Re: [PR] Bump actions/setup-java from 5 to 6 [tomcat] via GitHub
• 2026/10/13 (tomcat) branch 11.0.x updated: Java compatibility remm
• 2026/10/13 Buildbot failure in on tomcat-11.0.x buildbot
• 2026/10/13 (tomcat) branch 9.0.x updated: Follow-on to "Ignore malformed Accept-Encoding q-values ..." markt
• 2026/10/13 (tomcat) branch 10.1.x updated: Follow-on to "Ignore malformed Accept-Encoding q-values ..." markt
• 2026/10/13 (tomcat) branch 11.0.x updated: Follow-on to "Ignore malformed Accept-Encoding q-values ..." markt
• 2026/10/13 (tomcat) branch main updated: Follow-on to "Ignore malformed Accept-Encoding q-values ..." markt
• 2026/10/12 [PR] Bump actions/setup-java from 5 to 6 [tomcat] via GitHub
• 2026/10/12 (tomcat) branch dependabot/github_actions/actions/setup-java-6 created (now fbd7ecb967) github-bot
• 2026/10/12 (tomcat) 05/20: Ignore empty entries in the remote IP header remm
• 2026/10/12 (tomcat) 18/20: Do not resolve REMOTE_IDENT to the authenticated user in rewrite valve remm
• 2026/10/12 (tomcat) 08/20: Do not apply partial ParameterLimitValve configuration when parsing fails remm
• 2026/10/12 (tomcat) 07/22: Fall back to the default error report when the properties bundle is absent remm
• 2026/10/12 (tomcat) 03/20: Fix NPE in the extended access log servlet context element remm
• 2026/10/12 (tomcat) 11/21: Reject a SemaphoreValve concurrency lower than one remm
• 2026/10/12 Re: Hackathon at Community Over Code Glasgow — is Tomcat interested? Fatima Qaisar
• 2026/10/12 svn commit: r1939057 - in tomcat/site/trunk/docs/tomcat-9.0-doc/api/org/apache: catalina/storeconfig catalina/util jasper/compiler tomcat/util/http/parser remm
• 2026/10/12 (tomcat) 09/21: Apply the first matching URL pattern in configuration order remm
• 2026/10/12 (tomcat) 02/21: Fix NPE in ExtendedAccessLogValve.open() after a failed open remm
• 2026/10/12 Buildbot failure in on tomcat-9.0.x buildbot
• 2026/10/12 (tomcat) branch 11.0.x updated (da915321d6 -> 64c36bcb1d) remm
• 2026/10/12 (tomcat) 21/22: API compatibility fixes remm
• 2026/10/12 (tomcat) 04/20: Fix NPE in LoadBalancerDrainingValve with no requested session id remm
• 2026/10/12 (tomcat) 12/21: Ignore invalid certificate headers in SSLValve remm
• 2026/10/12 (tomcat) 16/22: Bound the rewrite rule loop and reject negative skip values remm
• 2026/10/12 (tomcat) 08/20: Do not apply partial ParameterLimitValve configuration when parsing fails remm
• 2026/10/12 (tomcat) 04/22: Fix NPE in LoadBalancerDrainingValve with no requested session id remm
• 2026/10/12 (tomcat) branch 10.1.x updated (a9ebacac5e -> 0c61ca536b) remm
• 2026/10/12 (tomcat) 10/21: Hold the SemaphoreValve permit across asynchronous processing remm
• 2026/10/12 (tomcat) 01/20: Correct the content type of WebDAV error reports remm
• 2026/10/12 (tomcat) 13/20: Interrupt a stuck thread only once per request remm
• 2026/10/12 (tomcat) 17/20: Fix TIME_MON and TIME_WDAY values in the rewrite valve remm
• 2026/10/12 (tomcat) 19/22: Accept any whitespace as key/value separator in txt and rnd rewrite maps remm
• 2026/10/12 (tomcat) 11/22: Reject a SemaphoreValve concurrency lower than one remm
• 2026/10/12 [PR] Hold the standalone identifier marker in the EvaluationContext [tomcat] via GitHub
• 2026/10/12 (tomcat) 05/21: Ignore empty entries in the remote IP header remm
• 2026/10/12 Re: [PROPOSAL] Pull and shade commons-pool2 and commons-dbcp2 during release builds Rémy Maucherat
• 2026/10/12 (tomcat) 17/22: Fix TIME_MON and TIME_WDAY values in the rewrite valve remm
• 2026/10/12 svn commit: r1939056 - in tomcat/site/trunk/docs/tomcat-9.0-doc: . annotationapi annotationapi/javax/annotation annotationapi/javax/annotation/security annotationapi/javax/annotation/sql api api/org/apache/catalina api/org/apache/catalina/ant api/org/a... remm
• 2026/10/12 (tomcat) 02/22: Fix NPE in ExtendedAccessLogValve.open() after a failed open remm
• 2026/10/12 (tomcat) 10/22: Hold the SemaphoreValve permit across asynchronous processing remm
• 2026/10/12 Buildbot failure in on tomcat-10.1.x buildbot
• 2026/10/12 (tomcat) 18/20: Do not resolve REMOTE_IDENT to the authenticated user in rewrite valve remm
• 2026/10/12 Re: [PROPOSAL] Pull and shade commons-pool2 and commons-dbcp2 during release builds Christopher Schultz
• 2026/10/12 [PROPOSAL] Pull and shade commons-pool2 and commons-dbcp2 during release builds Christopher Schultz
• 2026/10/12 (tomcat) 19/20: Accept any whitespace as key/value separator in txt and rnd rewrite maps remm
• 2026/10/12 Re: [PR] Add missing Simplified Chinese translations for rewrite valve [tomcat] via GitHub
• 2026/10/12 Re: Hackathon at Community Over Code Glasgow — is Tomcat interested? Coty Sutherland
• 2026/10/12 Re: [PROPOSAL] Enable SecureLifecycleListener by default Christopher Schultz
• 2026/10/12 (tomcat) 15/20: Reject RewriteCond and RewriteRule lines with extra tokens remm

• Earlier messages
• Later messages