Hi, Congratulations on the release.
I'm afraid your download page needs a bit of work. The signatures, checksums, and KEYS must be downloaded from the https://downloads.apache.org, and not from the dist/wiket directory. Thank you for following the Apache requirements for downloads. Warm regards, Craig > On Dec 18, 2024, at 13:44, Andrea Del Bene <adelb...@apache.org> wrote: > > The Apache Wicket PMC is proud to announce Apache Wicket 10.3.0! > > Apache Wicket is an open source Java component oriented web application > framework that powers thousands of web applications and web sites for > governments, stores, universities, cities, banks, email providers, and > more. You can find more about Apache Wicket at https://wicket.apache.org > > This release marks another minor release of Wicket 10. We > use semantic versioning for the development of Wicket, and as such no > API breaks are present in this release compared to 10.0.0. > > New and noteworthy > ------------------ > > This release fixes the following security issue: > > * CVE-2024-53299 'An attacker can intentionally trigger a memory leak' > Reported by Pedro Santos. > > > Using this release > > ------------------ > > With Apache Maven update your dependency to (and don't forget to > update any other dependencies on Wicket projects to the same version): > > <dependency> > <groupId>org.apache.wicket</groupId> > <artifactId>wicket-core</artifactId> > <version>10.3.0</version> > </dependency> > > Or download and build the distribution yourself, or use our > convenience binary package you can find here: > > * Download: http://wicket.apache.org/start/wicket-10.x.html#manually > > Upgrading from earlier versions > ------------------------------- > > If you upgrade from 10.y.z this release is a drop in replacement. If > you come from a version prior to 10.0.0, please read our Wicket 10 > migration guide found at > > * http://s.apache.org/wicket10migrate > > Have fun! > > — The Wicket team > > > ======================================================================== > > CHANGELOG for 10.3.0: > > ** Bug > > * [WICKET-3899] - IFormVisitorParticipant don't get tested when > validating form validators dependent components > * [WICKET-7024] - Wrong static resource urls when their generation is > triggered by <wicket:link> > * [WICKET-7124] - The quickstart archetype fails to build > * [WICKET-7125] - To use cdi-unit CreationalContext to inject beans in > Wicket components during tests > > ** Improvement > > * [WICKET-7123] - Form.setDefaultButton() supports only one button per > form hierarchy > * [WICKET-7131] - Improve accessibility and screen reader support for > auto-complete component > * [WICKET-7133] - Ability move focus back to the autocomplete field when > selecting an item using the Tab key > Craig L Russell c...@apache.org
