Mark,
Thanks for RM'ing.
On 3/16/26 1:48 PM, Mark Thomas wrote:
The proposed Apache Tomcat 11.0.20 release is now available for voting.
The notable changes compared to 11.0.18 include:
- Relax HTTP/2 header validation and respond to invalid requests with
a stream reset or a 400 response as appropriate rather then with a
connection reset.
- Fix bug 69964: Respect the configured cipher order, which was no
longer respected following the addition of TLS 1.3 specific cipher
configuration. TLS 1.3 ciphers will always be first in the list.
- Update Tomcat Native to 2.0.14 and increase the recommended version to
2.0.14
For full details, see the change log:
https://nightlies.apache.org/tomcat/tomcat-11.0.x/docs/changelog.html
Applications that run on Tomcat 9 and earlier will not run on Tomcat 11
without changes. Java EE applications designed for Tomcat 9 and earlier
may be placed in the $CATALINA_BASE/webapps-javaee directory and Tomcat
will automatically convert them to Jakarta EE and copy them to the
webapps directory. Applications using deprecated APIs may require
further changes.
It can be obtained from:
https://dist.apache.org/repos/dist/dev/tomcat/tomcat-11/v11.0.20/
The Maven staging repo is:
https://repository.apache.org/content/repositories/orgapachetomcat-1584
The tag is:
https://github.com/apache/tomcat/tree/11.0.20
1c65de6f27a3bac481514e56e3637785b65a4f2c
The proposed 11.0.20 release is:
[ ] -1 Broken - do not release
[ ] +1 Stable - go ahead and release as 11.0.20
+1 for stable release.
The build is reproducible and the unit tests all pass on MacOS aarch64.
Details:
* Environment
* Java (build): openjdk version "25.0.2" 2026-01-20 LTS OpenJDK
Runtime Environment Temurin-25.0.2+10 (build 25.0.2+10-LTS) OpenJDK
64-Bit Server VM Temurin-25.0.2+10 (build 25.0.2+10-LTS, mixed mode,
sharing)
* Java (test): openjdk version "25.0.2" 2026-01-20 LTS OpenJDK
Runtime Environment Temurin-25.0.2+10 (build 25.0.2+10-LTS) OpenJDK
64-Bit Server VM Temurin-25.0.2+10 (build 25.0.2+10-LTS, mixed mode,
sharing)
* Ant: Apache Ant(TM) version 1.10.15 compiled on August 25
2024
* OS: Darwin 25.3.0 arm64
* cc: Apple clang version 17.0.0 (clang-1700.6.4.2)
* make: GNU Make 3.81
* OpenSSL: OpenSSL 3.6.0 1 Oct 2025 (Library: OpenSSL 3.6.0 1
Oct 2025)
* APR: 1.7.6
*
* Valid SHA-512 signature for apache-tomcat-11.0.20.zip
* Valid GPG signature for apache-tomcat-11.0.20.zip
* Valid SHA-512 signature for apache-tomcat-11.0.20.tar.gz
* Valid GPG signature for apache-tomcat-11.0.20.tar.gz
* Valid SHA-512 signature for apache-tomcat-11.0.20.exe
* Valid GPG signature for apache-tomcat-11.0.20.exe
* Valid Windows Digital Signature for apache-tomcat-11.0.20.exe
* Valid SHA512 signature for apache-tomcat-11.0.20-src.zip
* Valid GPG signature for apache-tomcat-11.0.20-src.zip
* Valid SHA512 signature for apache-tomcat-11.0.20-src.tar.gz
* Valid GPG signature for apache-tomcat-11.0.20-src.tar.gz
*
* Binary Zip and tarball: Same
* Source Zip and tarball: Same
*
* Building dependencies returned: 0
* Tomcat builds cleanly
* tcnative builds cleanly
* Junit Tests: PASSED
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
