This is an automated email from the ASF dual-hosted git repository.
markt-asf pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/tomcat.git
The following commit(s) were added to refs/heads/main by this push:
new 9aa153f667 Remove entries for changes that have been back-ported
9aa153f667 is described below
commit 9aa153f6671488afd9ae5dad784ab79b461c1ccf
Author: Mark Thomas <[email protected]>
AuthorDate: Tue Nov 10 17:17:07 2026 +0000
Remove entries for changes that have been back-ported
---
webapps/docs/changelog.xml | 96 ----------------------------------------------
1 file changed, 96 deletions(-)
diff --git a/webapps/docs/changelog.xml b/webapps/docs/changelog.xml
index 210637a998..870417cc17 100644
--- a/webapps/docs/changelog.xml
+++ b/webapps/docs/changelog.xml
@@ -117,10 +117,6 @@
<update>
The minimum Java version has been updated to Java 21. (markt)
</update>
- <scode>
- Switch to using <code>String.strip()</code> rather than
- <code>String.trim()</code> where appropriate. (markt)
- </scode>
</changelog>
</subsection>
<subsection name="Catalina">
@@ -135,18 +131,6 @@
were treated as <code>true</code> for some uses and
<code>false</code> for others. (remm)
</fix>
- <fix>
- Lower the log level to debug when OpenSSL initialization fails in
- <code>OpenSSLLifecycleListener</code> to avoid stack traces
- when <code>libssl.so</code> is not present and to align the behavior
- of the <code>isAvailable()</code> check with the
- <code>AprLifecycleListener</code> and gracefully fail when natives
- are not present. (csutherl)
- </fix>
- <fix>
- Prevent duplicate log messages when clustering JARs are not present on
- startup. (csutherl)
- </fix>
<add>
Add the Jakarta EE 12 XML schemas. (markt)
</add>
@@ -160,11 +144,6 @@
<code>AccessLog</code> and was not implemented in a scalable way.
(remm)
</update>
- <add>
- Added support for limiting the number of parameters in HTTP requests
through
- the new <code>ParameterLimitValve</code>. The valve allows configurable
- URL-specific limits on the number of parameters. (dsoumis)
- </add>
<fix>
Remove the <code>useAcceptRanges</code> initialisation parameter for
the default servlet. It is now effectively hard coded to
@@ -181,13 +160,6 @@
always return <code>null</code> if the provided name starts with
<code>/</code>. (markt)
</fix>
- <fix>
- Update <code>StoreRegistry</code> to dynamically load optional
clustering
- classes rather than statically referencing them. This matches the
pattern
- used in <code>Catalina.addClusterRuleSet()</code> and prevents
- <code>NoClassDefFoundError</code> when
<code>StoreConfigLifecycleListener</code>
- is configured but clustering classes are not available. (csutherl)
- </fix>
<update>
Update the default value for the <code>allowPostAsGet</code>
initialisation parameter of the Default servlet from <code>true</code>
@@ -225,12 +197,6 @@
Add constants to <code>HttpServletResponse</code> for the HTTP status
codes defined in RFC 6585. (markt)
</scode>
- <add>
- Enhance <code>version.sh</code> and <code>version.bat</code> to display
- APR, Tomcat Native, and OpenSSL version information (both APR and FFM
- implementations), along with version compatibility warnings and
- third-party library version information. (csutherl)
- </add>
<fix>
Reject BASIC authorization with no password, to comply with RFC 7617
strictly. (remm)
@@ -281,47 +247,9 @@
<update>
Remove NIO2 connector. (remm)
</update>
- <update>
- Add specific certificate selection code for TLS 1.3 supporting post
- quantum cryptography. Certificates defined with type
- <code>MLDSA</code> will be selected depending on the TLS client hello.
- (remm)
- </update>
- <update>
- Add <code>groups</code> attribute on <code>SSLHostConfig</code>
- allowing to restrict which groups can be enabled on the SSL engine.
- (remm)
- </update>
<update>
Remove support for HTTP 0.9. (markt)
</update>
- <fix>
- <bug>70236</bug>: Fix a stalled TLS handshake with the OpenSSL based
- implementations of <code>SSLEngine</code> when the first flight of
- handshake messages sent by the server is too large to fit in the
- buffer used by the BIO pair. Patch submitted by Lukas Hellebrandt.
- (remm)
- </fix>
- <fix>
- Ensure the Tomcat Native based OpenSSL <code>SSLContext</code> does not
- drop TLS 1.3 when rebuilding the list of enabled protocols during
- initialization. (dsoumis)
- </fix>
- <update>
- When a <code>Certificate</code> is configured using a key store and no
- <code>certificateKeyAlias</code> is set, ignore key entries whose
- certificate has a malformed Extended Key Usage extension or one that
- does not permit TLS server authentication when automatically selecting
- which key in the key store to use. A configured
- <code>certificateKeyAlias</code> is used even if its certificate is not
- valid for TLS server authentication, except in the Windows-MY key store
- accessed through the SunMSCAPI provider: there, if the configured
- certificate is not valid but the store holds a valid certificate under
- that alias with a numeric suffix appended - the format that provider
uses
- to give unique aliases to several certificates that share a name - the
- suffixed certificate is used instead.
- (dsoumis)
- </update>
<!-- Entries for backport and removal before 12.0.0-M1 below this line
-->
</changelog>
</subsection>
@@ -361,10 +289,6 @@
Add support for <code>java.util.Optional</code> to the empty operator.
(markt)
</add>
- <fix>
- Route <code>JspC</code> servlet context logging through Ant when used
as
- an Ant task. (sainadh777)
- </fix>
<!-- Entries for backport and removal before 12.0.0-M1 below this line
-->
</changelog>
</subsection>
@@ -410,10 +334,6 @@
Manager: Drop session handling dedicated to extracting the locale from
Tapestry attributes, used for locale session sorting. (remm)
</update>
- <update>
- Documentation: Describe how to configure the Windows certificate store
- and reload externally renewed TLS certificates. (dsoumis)
- </update>
<!-- Entries for backport and removal before 12.0.0-M1 below this line
-->
</changelog>
</subsection>
@@ -436,25 +356,9 @@
Remove the <code>modules/cxf</code> optional module and the JAX-RS
support it provided. (remm)
</update>
- <update>
- Update Maven Resolver Ant Tasks to 1.6.1. (rjung)
- </update>
- <add>
- Add test profile system for selective test execution. Profiles can be
- specified via <code>-Dtest.profile=<name></code> to run specific
- test subsets without using patterns directly. Profile patterns are
- defined in <code>test-profiles.properties</code>. (csutherl)
- </add>
<update>
Update Derby to 10.17.1.0. (markt)
</update>
- <add>
- Add warning when OpenSSL binary is not found. (csutherl)
- </add>
- <add>
- Add check for Tomcat Native library, and log warning when it's not
found
- to make it easier to see when it's not used by the suite. (csutherl)
- </add>
<update>
Update Checkstyle to 14.1.0. (markt)
</update>
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
