Am 10.09.26 um 02:01 schrieb Christopher Schultz:
The proposed Apache Tomcat 10.1.60 release is now available for
voting.
All committers and PMC members are kindly requested to provide a vote if
possible. ANY TOMCAT USER MAY VOTE, though only PMC members votes are
binding. We welcome non-committer votes or comments on release builds.
The notable changes compared to 10.1.59 are:
- Update Tomcat Native to 2.0.16 (built with OpenSSL 3.5.8 for Windows)
and make 2.0.16 the minimum required version.
- Various improvements to the RewriteValve
- Various TLS improvements including more robust OCSP and ALPN handling
- Ensure that WebSocket write timeouts apply to the complete message and
are not lost if two writes have the same timeout.
For full details, see the change log:
https://nightlies.apache.org/tomcat/tomcat-10.1.x/docs/changelog.html
Applications that run on Tomcat 9 and earlier will not run on Tomcat 10
without changes. Java EE applications designed for Tomcat 9 and earlier
may be placed in the $CATALINA_BASE/webapps-javaee directory and Tomcat
will automatically convert them to Jakarta EE and copy them to the
webapps directory.
It can be obtained from:
https://dist.apache.org/repos/dist/dev/tomcat/tomcat-10/v10.1.60/
The Maven staging repo is:
https://repository.apache.org/content/repositories/orgapachetomcat-1605
The tag is:
https://github.com/apache/tomcat/tree/10.1.60
https://github.com/apache/tomcat/
commit/3e9d04cf57c29931b872ea6265803e2b859d1238
Please reply with a +1 for release or +0/-0/-1 with an explanation.
+1 to release.
Reproducibility of the build checked (including the Windows installer)
using "ant verify-release" on Linux Mint 22.3. OK after setting LANG.
Original Windows installer signature verified with osslsigncode 2.10.
Unit tests ran on platforms
- RHEL 7, 8, 9 and 10 and SLES 12 and 15
using
- almost recent patch versions of JDK 11, JDK 17, 21, 25, 26 and 27+28 (EA)
(most tests used the JVM July releases, some were run again with the
.1 releases from August)
from
- Eclipse Adoptium, Azul Zulu, Amazon Coretto, Oracle, RedHat (missing
26) and from OpenJDK for 27+28
Also tested with
- tcnative 2.0.16 and panama
based on
- OpenSSL 3.5.8, 3.6.4, 4.0.2 and for some combinations also with
4.1.0alpha1.
Each combination of platform, JVM and JSSE or tcnative or panama only
tested for NIO or NIO2 (randomized). Total number of test combinations:
86 nio2 jsse
96 nio2 panama
237 nio2 tcnative
96 nio jsse
96 nio panama
236 nio tcnative
Test observations:
- IMHO nothing critical
- one test in
org.apache.catalina.session.TestPersistentManagerDataSourceStore using
derby was missing the assume for the needed Java version, so it fails
for Java 11. Fixed yesterday.
- in addition
- no crash failure with JSSE (183 runs)
- very few crashes with tcnative (8 in 473 runs)
- no crash failures with panama (192 runs)
- few non-crash failures with jsse (4 in 183 runs)
- very few non-crash failures with tcnative (5 in 473 runs)
- very few non-crash failures with panama (1 in 192 runs)
Especially OpenSSL 4.1.0alpha1 does not show anything problematic.
Thanks for RM!
Best regards,
Rainer
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
