This is an automated email from the ASF dual-hosted git repository.
bitstorm pushed a commit to branch asf-site
in repository https://gitbox.apache.org/repos/asf/wicket-site.git
The following commit(s) were added to refs/heads/asf-site by this push:
new 75e7626a Announce for 8.18
75e7626a is described below
commit 75e7626ad5184b9d2709a99d11f95f5cddb24e9d
Author: Andrea Del Bene <[email protected]>
AuthorDate: Fri May 15 12:58:47 2026 +0200
Announce for 8.18
---
2026/_posts/2026-05-15-wicket-8.18.0-released.md | 112 +++++++++
_config.yml | 4 +-
content/archetype-catalog.xml | 32 +--
content/atom.xml | 186 ++++++++------
content/feed.xml | 168 ++++++++-----
content/index.html | 50 ++--
content/learn/index.html | 6 +-
.../news/2026/05/15/wicket-8.18.0-released.html | 271 +++++++++++++++++++++
content/news/2026/05/index.html | 11 +
content/news/index.html | 7 +
content/start/download.html | 2 +-
content/start/quickstart.html | 18 +-
content/start/wicket-8.x.html | 30 +--
13 files changed, 667 insertions(+), 230 deletions(-)
diff --git a/2026/_posts/2026-05-15-wicket-8.18.0-released.md
b/2026/_posts/2026-05-15-wicket-8.18.0-released.md
new file mode 100644
index 00000000..d7a2ad64
--- /dev/null
+++ b/2026/_posts/2026-05-15-wicket-8.18.0-released.md
@@ -0,0 +1,112 @@
+---
+layout: post
+title: Apache Wicket 8.18.0 released
+---
+The Apache Wicket PMC is proud to announce Apache Wicket 8.18.0!
+
+Apache Wicket is an open source Java component oriented web application
+framework that powers thousands of web applications and web sites for
+governments, stores, universities, cities, banks, email providers, and
+more. You can find more about Apache Wicket at https://wicket.apache.org
+
+This release marks another minor release of Wicket 8. We
+use semantic versioning for the development of Wicket, and as such no
+API breaks are present in this release compared to 8.0.0.
+
+New and noteworthy
+------------------
+ * CVE-2026-43646 crafted URLs can bypass PackageResourceGuard
+ * CVE-2026-42509 crafted strings can break out of the JavaScript sequence
+ * CVE-2026-40010 possible session fixation using AuthenticatedWebSession
+
+
+Using this release
+------------------
+
+With Apache Maven update your dependency to (and don't forget to
+update any other dependencies on Wicket projects to the same version):
+
+{% highlight xml%}
+<dependency>
+ <groupId>org.apache.wicket</groupId>
+ <artifactId>wicket-core</artifactId>
+ <version>8.18.0</version>
+</dependency>
+{% endhighlight%}
+
+Or download and build the distribution yourself, or use our
+convenience binary package you can find here:
+
+ * Download: http://wicket.apache.org/start/wicket-8.x.html#manually
+
+<!--more-->
+
+Upgrading from earlier versions
+-------------------------------
+
+If you upgrade from 8.y.z this release is a drop in replacement. If
+you come from a version prior to 8.0.0, please read our Wicket 8
+migration guide found at
+
+ * http://s.apache.org/wicket8migrate
+
+Have fun!
+
+— The Wicket team
+
+
+========================================================================
+
+ The signatures for the source release artefacts:
+
+
+Signature for apache-wicket-8.18.0.zip:
+
+<div class='highlight'><pre>
+-----BEGIN PGP SIGNATURE-----
+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+=qjtY
+-----END PGP SIGNATURE-----
+</pre></div>
+
+
+Signature for apache-wicket-8.18.0.tar.gz:
+
+<div class='highlight'><pre>
+-----BEGIN PGP SIGNATURE-----
+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+=UZ5J
+-----END PGP SIGNATURE-----
+</pre></div>
+
+
+========================================================================
+
+### This Release
+
+#### CHANGELOG for 8.18.0:
+
diff --git a/_config.yml b/_config.yml
index 0e79a70b..b2acad9f 100644
--- a/_config.yml
+++ b/_config.yml
@@ -18,14 +18,14 @@ wicket:
version: 10.9.0
version_90: 9.23.0
version_10: 10.9.0
- version_80: 8.17.0
+ version_80: 8.18.0
version_70: 7.18.0
version_60: 6.30.0
version_15: 1.5.16
version_14: 1.4.23
version_13: 1.3.7
released: 2026-05-5
- versions: [6.30.0, 1.5.16, 1.4.23, 7.18.0, 8.17.0, 9.23.0, 10.9.0,
1.5-SNAPSHOT, 6.31.0-SNAPSHOT, 7.19.0-SNAPSHOT, 8.18.0-SNAPSHOT,
9.24.0-SNAPSHOT, 10.10.0-SNAPSHOT]
+ versions: [6.30.0, 1.5.16, 1.4.23, 7.18.0, 8.18.0, 9.23.0, 10.9.0,
9.24.0-SNAPSHOT, 10.10.0-SNAPSHOT]
live_examples_url: http://examples10x.wicket.apache.org/
diff --git a/content/archetype-catalog.xml b/content/archetype-catalog.xml
index be2b87c2..a8439af7 100644
--- a/content/archetype-catalog.xml
+++ b/content/archetype-catalog.xml
@@ -16,34 +16,6 @@
<description>Wicket 9.24.0-SNAPSHOT
Quickstart</description>
</archetype>
- <archetype>
- <groupId>org.apache.wicket</groupId>
- <artifactId>wicket-archetype-quickstart</artifactId>
- <version>8.18.0-SNAPSHOT</version>
- <description>Wicket 8.18.0-SNAPSHOT
Quickstart</description>
- </archetype>
-
- <archetype>
- <groupId>org.apache.wicket</groupId>
- <artifactId>wicket-archetype-quickstart</artifactId>
- <version>7.19.0-SNAPSHOT</version>
- <description>Wicket 7.19.0-SNAPSHOT
Quickstart</description>
- </archetype>
-
- <archetype>
- <groupId>org.apache.wicket</groupId>
- <artifactId>wicket-archetype-quickstart</artifactId>
- <version>6.31.0-SNAPSHOT</version>
- <description>Wicket 6.31.0-SNAPSHOT
Quickstart</description>
- </archetype>
-
- <archetype>
- <groupId>org.apache.wicket</groupId>
- <artifactId>wicket-archetype-quickstart</artifactId>
- <version>1.5-SNAPSHOT</version>
- <description>Wicket 1.5-SNAPSHOT
Quickstart</description>
- </archetype>
-
<archetype>
<groupId>org.apache.wicket</groupId>
<artifactId>wicket-archetype-quickstart</artifactId>
@@ -61,8 +33,8 @@
<archetype>
<groupId>org.apache.wicket</groupId>
<artifactId>wicket-archetype-quickstart</artifactId>
- <version>8.17.0</version>
- <description>Wicket 8.17.0 Quickstart</description>
+ <version>8.18.0</version>
+ <description>Wicket 8.18.0 Quickstart</description>
</archetype>
<archetype>
diff --git a/content/atom.xml b/content/atom.xml
index 293ba516..c9a3e0e7 100644
--- a/content/atom.xml
+++ b/content/atom.xml
@@ -3,7 +3,7 @@
<title>Apache Wicket</title>
<link href="http://wicket.apache.org/atom.xml"; rel="self"/>
<link href="http://wicket.apache.org/"/>
- <updated>2026-05-13T16:11:54+00:00</updated>
+ <updated>2026-05-15T10:57:45+00:00</updated>
<id>http://wicket.apache.org/</id>
<author>
<name>Apache Wicket</name>
@@ -11,6 +11,119 @@
</author>
+ <entry>
+ <title>Apache Wicket 8.18.0 released</title>
+ <link
href="http://wicket.apache.org/news/2026/05/15/wicket-8.18.0-released.html"/>
+ <updated>2026-05-15T00:00:00+00:00</updated>
+
<id>http://wicket.apache.org/news/2026/05/15/wicket-8.18.0-released</id>
+ <content type="html"><p>The Apache Wicket PMC is proud to
announce Apache Wicket 8.18.0!</p>
+
+<p>Apache Wicket is an open source Java component oriented web
application
+framework that powers thousands of web applications and web sites for
+governments, stores, universities, cities, banks, email providers, and
+more. You can find more about Apache Wicket at
https://wicket.apache.org</p>
+
+<p>This release marks another minor release of Wicket 8. We
+use semantic versioning for the development of Wicket, and as such no
+API breaks are present in this release compared to 8.0.0.</p>
+
+<h2 id="new-and-noteworthy">New and noteworthy</h2>
+<ul>
+ <li>CVE-2026-43646 crafted URLs can bypass
PackageResourceGuard</li>
+ <li>CVE-2026-42509 crafted strings can break out of the JavaScript
sequence</li>
+ <li>CVE-2026-40010 possible session fixation using
AuthenticatedWebSession</li>
+</ul>
+
+<h2 id="using-this-release">Using this release</h2>
+
+<p>With Apache Maven update your dependency to (and don’t forget to
+update any other dependencies on Wicket projects to the same
version):</p>
+
+<figure class="highlight"><pre><code
class="language-xml" data-lang="xml"><span
class="nt">&lt;dependency&gt;</span>
+ <span
class="nt">&lt;groupId&gt;</span>org.apache.wicket<span
class="nt">&lt;/groupId&gt;</span>
+ <span
class="nt">&lt;artifactId&gt;</span>wicket-core<span
class="nt">&lt;/artifactId&gt;</span>
+ <span
class="nt">&lt;version&gt;</span>8.18.0<span
class="nt">&lt;/version&gt;</span>
+<span
class="nt">&lt;/dependency&gt;</span></code></pre></figure>
+
+<p>Or download and build the distribution yourself, or use our
+convenience binary package you can find here:</p>
+
+<ul>
+ <li>Download:
http://wicket.apache.org/start/wicket-8.x.html#manually</li>
+</ul>
+
+<!--more-->
+
+<h2 id="upgrading-from-earlier-versions">Upgrading from
earlier versions</h2>
+
+<p>If you upgrade from 8.y.z this release is a drop in replacement. If
+you come from a version prior to 8.0.0, please read our Wicket 8
+migration guide found at</p>
+
+<ul>
+ <li>http://s.apache.org/wicket8migrate</li>
+</ul>
+
+<p>Have fun!</p>
+
+<p>— The Wicket team</p>
+
+<p>========================================================================</p>
+
+<div class="language-plaintext highlighter-rouge"><div
class="highlight"><pre
class="highlight"><code>The signatures for the source
release artefacts:
+</code></pre></div></div>
+
+<p>Signature for apache-wicket-8.18.0.zip:</p>
+
+<div class="highlight"><pre>
+-----BEGIN PGP SIGNATURE-----
+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+=qjtY
+-----END PGP SIGNATURE-----
+</pre></div>
+
+<p>Signature for apache-wicket-8.18.0.tar.gz:</p>
+
+<div class="highlight"><pre>
+-----BEGIN PGP SIGNATURE-----
+
+iQIzBAABCgAdFiEE0a6YZHC1pJw+aieyh48B+qjTVuEFAmoAjhcACgkQh48B+qjT
+VuG2cw//bIhw0+osmE563g7XFeEmmWkbZSTsbuPU2k7gAQQdBsl/wxqV2layc1J/
+GD2/Y2pUhgYmOn9+zv/duW1b86LcIHAeoJ1F7LsxtP10nbxRm4rhOE6oGTTyh6OO
+zbR9IKi0I7IOEexVvdhA1nrn4mXXTqOfefwA22qh4TEsanraBpABXvWCsIBYsbND
+ssPnlHOES+wOOxADvNu99Z5JnuEUyEpQwv5eaM3aCZCa+moJZ4Ex5jPg8jrUsIke
+aWGHEyAGPdGash7Chsb5xs9bfmr8Q5jFMYerz2x68U/zQtF2WIHVcwB/qVpPzvxr
+UA2I+bPOPworDLXlopZIsavEcL0ASgDVpimtWnZ753JQkiODhAWUtyFJhhNbgW5c
+GJE9GBlbVdvvN/wfT3Jpqh9JuwUpX/47zGnpKNb76NB4IoZYb4/RJTRqmxDoePEp
+b6WHklV5p0jaZ7vQpvxU1p+eNgNlEv02o2vHzoj62pKp50/w/OAlXhwdtvacedwM
+z2O2CXQFiiv3Hqr9LKafBn2m/b4cj74mASmyWt/ZH1UDJtzgj5rJqYdRb/4hkHeC
+MR5c0b8b3K9d+4tFOGY+bkl6xSc2vjX2T4yA4DGsUQvNrZ3ThrhB6WHgcyNycTjh
+DF8M4iwiVu1p91zgp1SQ+mXMzvX+2FNs/EXSgeZ89WhRJkwdSdQ=
+=UZ5J
+-----END PGP SIGNATURE-----
+</pre></div>
+
+<p>========================================================================</p>
+
+<h3 id="this-release">This Release</h3>
+
+<h4 id="changelog-for-8180">CHANGELOG for 8.18.0:</h4>
+
+</content>
+ </entry>
+
<entry>
<title>Apache Wicket 9.23.0 released</title>
<link
href="http://wicket.apache.org/news/2026/05/13/wicket-9.23.0-released.html"/>
@@ -738,77 +851,6 @@
jMbkfQlOUl+CxZvbUBh2MfyE+RQGCiu7oNKPuFHbShiKylaCVf0goXzWfbJWRz7y
<li>[WICKET-7137] - Make resource URL sanitization
extendable</li>
</ul>
-</content>
- </entry>
-
- <entry>
- <title>Apache Wicket 9.20.0 released</title>
- <link
href="http://wicket.apache.org/news/2025/01/27/wicket-9.20.0-released.html"/>
- <updated>2025-01-27T00:00:00+00:00</updated>
-
<id>http://wicket.apache.org/news/2025/01/27/wicket-9.20.0-released</id>
- <content type="html"><p>The Apache Wicket PMC is proud to
announce Apache Wicket 9.20.0!</p>
-
-<p>Apache Wicket is an open source Java component oriented web
application
-framework that powers thousands of web applications and web sites for
-governments, stores, universities, cities, banks, email providers, and
-more. You can find more about Apache Wicket at
https://wicket.apache.org</p>
-
-<p>This release marks another minor release of Wicket 9. We
-use semantic versioning for the development of Wicket, and as such no
-API breaks are present in this release compared to 9.0.0.</p>
-
-<h2 id="using-this-release">Using this release</h2>
-
-<p>With Apache Maven update your dependency to (and don’t forget to
-update any other dependencies on Wicket projects to the same
version):</p>
-
-<figure class="highlight"><pre><code
class="language-xml" data-lang="xml"><span
class="nt">&lt;dependency&gt;</span>
- <span
class="nt">&lt;groupId&gt;</span>org.apache.wicket<span
class="nt">&lt;/groupId&gt;</span>
- <span
class="nt">&lt;artifactId&gt;</span>wicket-core<span
class="nt">&lt;/artifactId&gt;</span>
- <span
class="nt">&lt;version&gt;</span>9.20.0<span
class="nt">&lt;/version&gt;</span>
-<span
class="nt">&lt;/dependency&gt;</span></code></pre></figure>
-
-<p>Or download and build the distribution yourself, or use our
-convenience binary package you can find here:</p>
-
-<ul>
- <li>Download:
http://wicket.apache.org/start/wicket-9.x.html#manually</li>
-</ul>
-
-<!--more-->
-
-<h2 id="upgrading-from-earlier-versions">Upgrading from
earlier versions</h2>
-
-<p>If you upgrade from 9.y.z this release is a drop in replacement. If
-you come from a version prior to 9.0.0, please read our Wicket 9
-migration guide found at</p>
-
-<ul>
- <li>http://s.apache.org/wicket9migrate</li>
-</ul>
-
-<p>Have fun!</p>
-
-<p>— The Wicket team</p>
-
-<p>========================================================================</p>
-
-<h3 id="this-release">This Release</h3>
-
-<h4 id="changelog-for-9200">CHANGELOG for 9.20.0:</h4>
-
-<h5 id="improvement">Improvement</h5>
-
-<ul>
- <li>[WICKET-7137] - Make resource URL sanitization
extendable</li>
-</ul>
-
-<h5 id="task">Task</h5>
-
-<ul>
- <li>[WICKET-7139] - Update OSGi imports for Wicket 9.x</li>
-</ul>
-
</content>
</entry>
diff --git a/content/feed.xml b/content/feed.xml
index 098691a4..7e76648a 100644
--- a/content/feed.xml
+++ b/content/feed.xml
@@ -1,4 +1,107 @@
-<?xml version="1.0" encoding="utf-8"?><feed
xmlns="http://www.w3.org/2005/Atom"; ><generator uri="https://jekyllrb.com/";
version="4.4.1">Jekyll</generator><link href="http://0.0.0.0:4000/feed.xml";
rel="self" type="application/atom+xml" /><link href="http://0.0.0.0:4000/";
rel="alternate" type="text/html"
/><updated>2026-05-13T16:11:54+00:00</updated><id>http://0.0.0.0:4000/feed.xml</id><title
type="html">Apache Wicket</title><entry><title type="html">Apache Wicket
9.23.0 released</title><l [...]
+<?xml version="1.0" encoding="utf-8"?><feed
xmlns="http://www.w3.org/2005/Atom"; ><generator uri="https://jekyllrb.com/";
version="4.4.1">Jekyll</generator><link href="http://0.0.0.0:4000/feed.xml";
rel="self" type="application/atom+xml" /><link href="http://0.0.0.0:4000/";
rel="alternate" type="text/html"
/><updated>2026-05-15T10:57:45+00:00</updated><id>http://0.0.0.0:4000/feed.xml</id><title
type="html">Apache Wicket</title><entry><title type="html">Apache Wicket
8.18.0 released</title><l [...]
+
+<p>Apache Wicket is an open source Java component oriented web application
+framework that powers thousands of web applications and web sites for
+governments, stores, universities, cities, banks, email providers, and
+more. You can find more about Apache Wicket at https://wicket.apache.org</p>
+
+<p>This release marks another minor release of Wicket 8. We
+use semantic versioning for the development of Wicket, and as such no
+API breaks are present in this release compared to 8.0.0.</p>
+
+<h2 id="new-and-noteworthy">New and noteworthy</h2>
+<ul>
+ <li>CVE-2026-43646 crafted URLs can bypass PackageResourceGuard</li>
+ <li>CVE-2026-42509 crafted strings can break out of the JavaScript
sequence</li>
+ <li>CVE-2026-40010 possible session fixation using
AuthenticatedWebSession</li>
+</ul>
+
+<h2 id="using-this-release">Using this release</h2>
+
+<p>With Apache Maven update your dependency to (and don’t forget to
+update any other dependencies on Wicket projects to the same version):</p>
+
+<figure class="highlight"><pre><code class="language-xml"
data-lang="xml"><span class="nt"><dependency></span>
+ <span class="nt"><groupId></span>org.apache.wicket<span
class="nt"></groupId></span>
+ <span class="nt"><artifactId></span>wicket-core<span
class="nt"></artifactId></span>
+ <span class="nt"><version></span>8.18.0<span
class="nt"></version></span>
+<span class="nt"></dependency></span></code></pre></figure>
+
+<p>Or download and build the distribution yourself, or use our
+convenience binary package you can find here:</p>
+
+<ul>
+ <li>Download: http://wicket.apache.org/start/wicket-8.x.html#manually</li>
+</ul>
+
+<!--more-->
+
+<h2 id="upgrading-from-earlier-versions">Upgrading from earlier versions</h2>
+
+<p>If you upgrade from 8.y.z this release is a drop in replacement. If
+you come from a version prior to 8.0.0, please read our Wicket 8
+migration guide found at</p>
+
+<ul>
+ <li>http://s.apache.org/wicket8migrate</li>
+</ul>
+
+<p>Have fun!</p>
+
+<p>— The Wicket team</p>
+
+<p>========================================================================</p>
+
+<div class="language-plaintext highlighter-rouge"><div class="highlight"><pre
class="highlight"><code>The signatures for the source release artefacts:
+</code></pre></div></div>
+
+<p>Signature for apache-wicket-8.18.0.zip:</p>
+
+<div class="highlight"><pre>
+-----BEGIN PGP SIGNATURE-----
+
+iQIzBAABCgAdFiEE0a6YZHC1pJw+aieyh48B+qjTVuEFAmoAjhcACgkQh48B+qjT
+VuEl7w//VcFIS7l+cujEpGHwykz+oUDdzlKrUMWDdrgj3SH3/STXooqaTyyO0vu8
+lwilX/ZWHPP1AIMa0xRZAUN3ZPXCuqpWS7boKvbqZieKH1oVpmfQhp1gDJ4yuv3M
+wF1PkDqap2+qDJOiD/bJarkwJfHLp4q5nBCObHNNwEcHNFiltZKqrBrSypONu6jR
+xr9u04SdoMVvDmqggG3VqXneILzw/YJdrl/PKYEgCJAU75gIxpEr4a/9L3LdIJK/
+bmehgvf+zr6mXqXnE3x5bM/4SsrnxdLlwJcVUbSae8q5jBO6vM9a5a4t5ntBvelD
++DHvOR51C0iDqbZO/dKTmIas2T/fE9LtW7e24Vwsq7xDIuDL2h7tjY2C/x82JgvC
+6OP9VTCpmBUGNxCLdvZ5v9gTuDkqrQr9wUHluppI0RhErI7y/QLMPfZS2mnWYHkS
+GEiSGuidKLgUj0pgS95VIQmJrAY42eGP5X8fx6gXw9vEj+Oz0L8K4fZrnDgWo0QU
+WvW442dzD9FVM5N1wbC5Md8MWaQ2mzqA4wb7FKDsZchNiARsyGjflkRc+xFXr4O8
+d0OaUCEq96UnRtiFV2ZGjm12D/ICNiK2D3cfXAn0RBVa6JfhwTA1wbUVsVQQO49d
+Gm6DYGBOre7RByWg5drtRSMsY5kq0YAsTXcphRBsgvqaN5mH3do=
+=qjtY
+-----END PGP SIGNATURE-----
+</pre></div>
+
+<p>Signature for apache-wicket-8.18.0.tar.gz:</p>
+
+<div class="highlight"><pre>
+-----BEGIN PGP SIGNATURE-----
+
+iQIzBAABCgAdFiEE0a6YZHC1pJw+aieyh48B+qjTVuEFAmoAjhcACgkQh48B+qjT
+VuG2cw//bIhw0+osmE563g7XFeEmmWkbZSTsbuPU2k7gAQQdBsl/wxqV2layc1J/
+GD2/Y2pUhgYmOn9+zv/duW1b86LcIHAeoJ1F7LsxtP10nbxRm4rhOE6oGTTyh6OO
+zbR9IKi0I7IOEexVvdhA1nrn4mXXTqOfefwA22qh4TEsanraBpABXvWCsIBYsbND
+ssPnlHOES+wOOxADvNu99Z5JnuEUyEpQwv5eaM3aCZCa+moJZ4Ex5jPg8jrUsIke
+aWGHEyAGPdGash7Chsb5xs9bfmr8Q5jFMYerz2x68U/zQtF2WIHVcwB/qVpPzvxr
+UA2I+bPOPworDLXlopZIsavEcL0ASgDVpimtWnZ753JQkiODhAWUtyFJhhNbgW5c
+GJE9GBlbVdvvN/wfT3Jpqh9JuwUpX/47zGnpKNb76NB4IoZYb4/RJTRqmxDoePEp
+b6WHklV5p0jaZ7vQpvxU1p+eNgNlEv02o2vHzoj62pKp50/w/OAlXhwdtvacedwM
+z2O2CXQFiiv3Hqr9LKafBn2m/b4cj74mASmyWt/ZH1UDJtzgj5rJqYdRb/4hkHeC
+MR5c0b8b3K9d+4tFOGY+bkl6xSc2vjX2T4yA4DGsUQvNrZ3ThrhB6WHgcyNycTjh
+DF8M4iwiVu1p91zgp1SQ+mXMzvX+2FNs/EXSgeZ89WhRJkwdSdQ=
+=UZ5J
+-----END PGP SIGNATURE-----
+</pre></div>
+
+<p>========================================================================</p>
+
+<h3 id="this-release">This Release</h3>
+
+<h4 id="changelog-for-8180">CHANGELOG for
8.18.0:</h4>]]></content><author><name></name></author><category term="2026"
/><summary type="html"><![CDATA[The Apache Wicket PMC is proud to announce
Apache Wicket 8.18.0! Apache Wicket is an open source Java component oriented
web application framework that powers thousands of web applications and web
sites for governments, stores, universities, cities, banks, email providers,
and more. You can find more about Apache Wicket at https://wicket.a [...]
<p>Apache Wicket is an open source Java component oriented web application
framework that powers thousands of web applications and web sites for
@@ -638,65 +741,4 @@
jMbkfQlOUl+CxZvbUBh2MfyE+RQGCiu7oNKPuFHbShiKylaCVf0goXzWfbJWRz7y
<ul>
<li>[WICKET-7137] - Make resource URL sanitization extendable</li>
-</ul>]]></content><author><name></name></author><category term="2025"
/><summary type="html"><![CDATA[The Apache Wicket PMC is proud to announce
Apache Wicket 8.17.0! Apache Wicket is an open source Java component oriented
web application framework that powers thousands of web applications and web
sites for governments, stores, universities, cities, banks, email providers,
and more. You can find more about Apache Wicket at https://wicket.apache.org
This release marks another minor releas [...]
-
-<p>Apache Wicket is an open source Java component oriented web application
-framework that powers thousands of web applications and web sites for
-governments, stores, universities, cities, banks, email providers, and
-more. You can find more about Apache Wicket at https://wicket.apache.org</p>
-
-<p>This release marks another minor release of Wicket 9. We
-use semantic versioning for the development of Wicket, and as such no
-API breaks are present in this release compared to 9.0.0.</p>
-
-<h2 id="using-this-release">Using this release</h2>
-
-<p>With Apache Maven update your dependency to (and don’t forget to
-update any other dependencies on Wicket projects to the same version):</p>
-
-<figure class="highlight"><pre><code class="language-xml"
data-lang="xml"><span class="nt"><dependency></span>
- <span class="nt"><groupId></span>org.apache.wicket<span
class="nt"></groupId></span>
- <span class="nt"><artifactId></span>wicket-core<span
class="nt"></artifactId></span>
- <span class="nt"><version></span>9.20.0<span
class="nt"></version></span>
-<span class="nt"></dependency></span></code></pre></figure>
-
-<p>Or download and build the distribution yourself, or use our
-convenience binary package you can find here:</p>
-
-<ul>
- <li>Download: http://wicket.apache.org/start/wicket-9.x.html#manually</li>
-</ul>
-
-<!--more-->
-
-<h2 id="upgrading-from-earlier-versions">Upgrading from earlier versions</h2>
-
-<p>If you upgrade from 9.y.z this release is a drop in replacement. If
-you come from a version prior to 9.0.0, please read our Wicket 9
-migration guide found at</p>
-
-<ul>
- <li>http://s.apache.org/wicket9migrate</li>
-</ul>
-
-<p>Have fun!</p>
-
-<p>— The Wicket team</p>
-
-<p>========================================================================</p>
-
-<h3 id="this-release">This Release</h3>
-
-<h4 id="changelog-for-9200">CHANGELOG for 9.20.0:</h4>
-
-<h5 id="improvement">Improvement</h5>
-
-<ul>
- <li>[WICKET-7137] - Make resource URL sanitization extendable</li>
-</ul>
-
-<h5 id="task">Task</h5>
-
-<ul>
- <li>[WICKET-7139] - Update OSGi imports for Wicket 9.x</li>
-</ul>]]></content><author><name></name></author><category term="2025"
/><summary type="html"><![CDATA[The Apache Wicket PMC is proud to announce
Apache Wicket 9.20.0! Apache Wicket is an open source Java component oriented
web application framework that powers thousands of web applications and web
sites for governments, stores, universities, cities, banks, email providers,
and more. You can find more about Apache Wicket at https://wicket.apache.org
This release marks another minor releas [...]
\ No newline at end of file
+</ul>]]></content><author><name></name></author><category term="2025"
/><summary type="html"><![CDATA[The Apache Wicket PMC is proud to announce
Apache Wicket 8.17.0! Apache Wicket is an open source Java component oriented
web application framework that powers thousands of web applications and web
sites for governments, stores, universities, cities, banks, email providers,
and more. You can find more about Apache Wicket at https://wicket.apache.org
This release marks another minor releas [...]
\ No newline at end of file
diff --git a/content/index.html b/content/index.html
index 749bfcac..397de343 100644
--- a/content/index.html
+++ b/content/index.html
@@ -424,28 +424,24 @@
<div class="l-two-third">
<article>
- <h2>Apache Wicket 9.23.0 released</h2>
- <small>13 May 2026</small>
- <p>The Apache Wicket PMC is proud to announce Apache Wicket
9.23.0!</p>
+ <h2>Apache Wicket 8.18.0 released</h2>
+ <small>15 May 2026</small>
+ <p>The Apache Wicket PMC is proud to announce Apache Wicket
8.18.0!</p>
<p>Apache Wicket is an open source Java component oriented web application
framework that powers thousands of web applications and web sites for
governments, stores, universities, cities, banks, email providers, and
more. You can find more about Apache Wicket at https://wicket.apache.org</p>
-<p>This release marks another minor release of Wicket 9. We
+<p>This release marks another minor release of Wicket 8. We
use semantic versioning for the development of Wicket, and as such no
-API breaks are present in this release compared to 9.0.0.</p>
+API breaks are present in this release compared to 8.0.0.</p>
<h2 id="new-and-noteworthy">New and noteworthy</h2>
-
-<p>This release fixes the following security issue:</p>
-
<ul>
<li>CVE-2026-43646 crafted URLs can bypass PackageResourceGuard</li>
<li>CVE-2026-42509 crafted strings can break out of the JavaScript
sequence</li>
<li>CVE-2026-40010 possible session fixation using
AuthenticatedWebSession</li>
- <li>CVE-2026-43975 Possible malicious path traversal in
FolderUploadsFileManager</li>
</ul>
<h2 id="using-this-release">Using this release</h2>
@@ -456,33 +452,33 @@ update any other dependencies on Wicket projects to the
same version):</p>
<figure class="highlight"><pre><code class="language-xml"
data-lang="xml"><span class="nt"><dependency></span>
<span class="nt"><groupId></span>org.apache.wicket<span
class="nt"></groupId></span>
<span class="nt"><artifactId></span>wicket-core<span
class="nt"></artifactId></span>
- <span class="nt"><version></span>9.23.0<span
class="nt"></version></span>
+ <span class="nt"><version></span>8.18.0<span
class="nt"></version></span>
<span class="nt"></dependency></span></code></pre></figure>
<p>Or download and build the distribution yourself, or use our
convenience binary package you can find here:</p>
<ul>
- <li>Download: http://wicket.apache.org/start/wicket-9.x.html#manually</li>
+ <li>Download: http://wicket.apache.org/start/wicket-8.x.html#manually</li>
</ul>
- <a href="/news/2026/05/13/wicket-9.23.0-released.html">Read
more...</a>
+ <a href="/news/2026/05/15/wicket-8.18.0-released.html">Read
more...</a>
</article>
<article>
- <h2>Apache Wicket 10.9.0 released</h2>
- <small>05 May 2026</small>
- <p>The Apache Wicket PMC is proud to announce Apache Wicket
10.9.0!</p>
+ <h2>Apache Wicket 9.23.0 released</h2>
+ <small>13 May 2026</small>
+ <p>The Apache Wicket PMC is proud to announce Apache Wicket
9.23.0!</p>
<p>Apache Wicket is an open source Java component oriented web application
framework that powers thousands of web applications and web sites for
governments, stores, universities, cities, banks, email providers, and
more. You can find more about Apache Wicket at https://wicket.apache.org</p>
-<p>This release marks another minor release of Wicket 10. We
+<p>This release marks another minor release of Wicket 9. We
use semantic versioning for the development of Wicket, and as such no
-API breaks are present in this release compared to 10.0.0.</p>
+API breaks are present in this release compared to 9.0.0.</p>
<h2 id="new-and-noteworthy">New and noteworthy</h2>
@@ -503,18 +499,18 @@ update any other dependencies on Wicket projects to the
same version):</p>
<figure class="highlight"><pre><code class="language-xml"
data-lang="xml"><span class="nt"><dependency></span>
<span class="nt"><groupId></span>org.apache.wicket<span
class="nt"></groupId></span>
<span class="nt"><artifactId></span>wicket-core<span
class="nt"></artifactId></span>
- <span class="nt"><version></span>10.9.0<span
class="nt"></version></span>
+ <span class="nt"><version></span>9.23.0<span
class="nt"></version></span>
<span class="nt"></dependency></span></code></pre></figure>
<p>Or download and build the distribution yourself, or use our
convenience binary package you can find here:</p>
<ul>
- <li>Download: http://wicket.apache.org/start/wicket-10.x.html#manually</li>
+ <li>Download: http://wicket.apache.org/start/wicket-9.x.html#manually</li>
</ul>
- <a href="/news/2026/05/05/wicket-10.9.0-released.html">Read
more...</a>
+ <a href="/news/2026/05/13/wicket-9.23.0-released.html">Read
more...</a>
</article>
</div>
@@ -531,6 +527,13 @@ convenience binary package you can find here:</p>
<ul>
+ <li>
+ <h3>Apache Wicket 9.23.0 released</h3>
+ <small>13 May 2026</small>
+ The Apache Wicket PMC is proud to announce Apache Wicket
9.23.0! Apache Wicket is an open source Java component oriented web application
framework that powers...
+ <a
href="/news/2026/05/13/wicket-9.23.0-released.html">more</a>
+ </li>
+
<li>
<h3>Apache Wicket 10.9.0 released</h3>
<small>05 May 2026</small>
@@ -559,13 +562,6 @@ convenience binary package you can find here:</p>
<a
href="/news/2025/09/30/wicket-10.7.0-released.html">more</a>
</li>
- <li>
- <h3>Apache Wicket 10.6.0 released</h3>
- <small>12 Jul 2025</small>
- The Apache Wicket PMC is proud to announce Apache Wicket
10.6.0! Apache Wicket is an open source Java component oriented web application
framework that powers...
- <a
href="/news/2025/07/12/wicket-10.6.0-released.html">more</a>
- </li>
-
</ul>
</div>
</div>
diff --git a/content/learn/index.html b/content/learn/index.html
index 88ccf43a..0e8d496b 100644
--- a/content/learn/index.html
+++ b/content/learn/index.html
@@ -167,13 +167,13 @@ We also publish a news item on our website with the
announcement, and it is also
<ul>
<li>
- <p><a href="/news/2026/05/13/wicket-9.23.0-released.html">Apache Wicket
9.23.0 released</a> <small>13 May 2026</small></p>
+ <p><a href="/news/2026/05/15/wicket-8.18.0-released.html">Apache Wicket
8.18.0 released</a> <small>15 May 2026</small></p>
</li>
<li>
- <p><a href="/news/2026/05/05/wicket-10.9.0-released.html">Apache Wicket
10.9.0 released</a> <small>05 May 2026</small></p>
+ <p><a href="/news/2026/05/13/wicket-9.23.0-released.html">Apache Wicket
9.23.0 released</a> <small>13 May 2026</small></p>
</li>
<li>
- <p><a href="/news/2025/12/21/wicket-10.8.0-released.html">Apache Wicket
10.8.0 released</a> <small>21 Dec 2025</small></p>
+ <p><a href="/news/2026/05/05/wicket-10.9.0-released.html">Apache Wicket
10.9.0 released</a> <small>05 May 2026</small></p>
</li>
</ul>
diff --git a/content/news/2026/05/15/wicket-8.18.0-released.html
b/content/news/2026/05/15/wicket-8.18.0-released.html
new file mode 100644
index 00000000..56b669be
--- /dev/null
+++ b/content/news/2026/05/15/wicket-8.18.0-released.html
@@ -0,0 +1,271 @@
+<!DOCTYPE html>
+<html lang="en">
+ <head>
+ <meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1">
+ <meta charset="utf-8">
+
+
+
+ <title>Apache Wicket 8.18.0 released | Apache Wicket</title>
+ <meta name="viewport" content="width=device-width, initial-scale=1" />
+
+ <link rel="shortcut icon" href="/favicon.ico"
type="image/vnd.microsoft.icon" />
+ <link rel="stylesheet" href="/css/style.css" type="text/css"
media="screen" />
+ <link href="/css/font-awesome.min.css" rel="stylesheet" />
+
+ <script src="/javascript/jquery-3.7.1.min.js"></script>
+
+
+ </head>
+ <body class="">
+ <div class="header default">
+ <div class="l-container">
+
+<nav class="mainmenu">
+ <div class="nav-logo">
+ <a href="/"><img src="/img/logo-apachewicket.svg" alt="Apache Wicket"></a>
+</div>
+
+ <div class="nav-container">
+
+
+
+
+
+ <!-- /start/quickstart.html ||
/news/2026/05/15/wicket-8.18.0-released.html -->
+
+
+
+ <a href="/start/quickstart.html" class=" nav-items">Quick Start</a>
+
+
+
+
+
+ <!-- /start/download.html ||
/news/2026/05/15/wicket-8.18.0-released.html -->
+
+
+
+ <a href="/start/download.html" class=" nav-items">Download</a>
+
+
+
+
+
+ <!-- /learn || /news/2026/05/15/wicket-8.18.0-released.html -->
+
+
+
+ <a href="/learn" class=" nav-items">Documentation</a>
+
+
+
+
+
+ <!-- /help || /news/2026/05/15/wicket-8.18.0-released.html -->
+
+
+
+ <a href="/help" class=" nav-items">Support</a>
+
+
+
+
+
+ <!-- /contribute ||
/news/2026/05/15/wicket-8.18.0-released.html -->
+
+
+
+ <a href="/contribute" class=" nav-items">Contribute</a>
+
+
+
+
+
+ <!-- /community || /news/2026/05/15/wicket-8.18.0-released.html
-->
+
+
+
+ <a href="/community" class=" nav-items">Community</a>
+
+
+
+
+
+ <!-- /apache || /news/2026/05/15/wicket-8.18.0-released.html -->
+
+
+
+ <a href="/apache" class=" nav-items">Apache</a>
+
+ </div>
+ <div class="nav-container ">
+ <a href="https://github.com/apache/wicket"; rel="noreferrer noopener
noreferrer" target="_blank"><i class="fa fa-github nav-items"></i></a>
+ <a href="https://builtwithwicket.tumblr.com"; rel="noreferrer noopener
noreferrer" target="_blank"><i class="fa fa-tumblr nav-items"></i></a>
+ </div>
+</nav>
+
+ </div>
+</div>
+<main>
+ <div class="l-container">
+ <header class="l-full preamble">
+ <h1>Apache Wicket 8.18.0 released</h1>
+
+
+
+ </header>
+ <section class="toc left post ">
+ <div id="toc" class="toc">
+<div id="toc-title"><h2>Table of Contents</h2></div>
+<ul>
+<li class="toc--level-1 toc--section-1"><a href="#new-and-noteworthy"><span
class="toc-number">1</span> <span class="toc-text">New and
noteworthy</span></a></li>
+<li class="toc--level-1 toc--section-2"><a href="#using-this-release"><span
class="toc-number">2</span> <span class="toc-text">Using this
release</span></a></li>
+<li class="toc--level-1 toc--section-3">
+<a href="#upgrading-from-earlier-versions"><span class="toc-number">3</span>
<span class="toc-text">Upgrading from earlier versions</span></a><ul><li
class="toc--level-2 toc--section-4"><a href="#this-release"><span
class="toc-number">3.1</span> <span class="toc-text">This
Release</span></a></li></ul>
+</li>
+</ul>
+</div>
+ </section>
+ <section>
+ <div class="l-full">
+ <p class="meta">15 May 2026</p>
+ <p>The Apache Wicket PMC is proud to announce Apache Wicket 8.18.0!</p>
+
+<p>Apache Wicket is an open source Java component oriented web application
+framework that powers thousands of web applications and web sites for
+governments, stores, universities, cities, banks, email providers, and
+more. You can find more about Apache Wicket at https://wicket.apache.org</p>
+
+<p>This release marks another minor release of Wicket 8. We
+use semantic versioning for the development of Wicket, and as such no
+API breaks are present in this release compared to 8.0.0.</p>
+
+<h2 id="new-and-noteworthy">New and noteworthy</h2>
+<ul>
+ <li>CVE-2026-43646 crafted URLs can bypass PackageResourceGuard</li>
+ <li>CVE-2026-42509 crafted strings can break out of the JavaScript
sequence</li>
+ <li>CVE-2026-40010 possible session fixation using
AuthenticatedWebSession</li>
+</ul>
+
+<h2 id="using-this-release">Using this release</h2>
+
+<p>With Apache Maven update your dependency to (and don’t forget to
+update any other dependencies on Wicket projects to the same version):</p>
+
+<figure class="highlight"><pre><code class="language-xml"
data-lang="xml"><span class="nt"><dependency></span>
+ <span class="nt"><groupId></span>org.apache.wicket<span
class="nt"></groupId></span>
+ <span class="nt"><artifactId></span>wicket-core<span
class="nt"></artifactId></span>
+ <span class="nt"><version></span>8.18.0<span
class="nt"></version></span>
+<span class="nt"></dependency></span></code></pre></figure>
+
+<p>Or download and build the distribution yourself, or use our
+convenience binary package you can find here:</p>
+
+<ul>
+ <li>Download: http://wicket.apache.org/start/wicket-8.x.html#manually</li>
+</ul>
+
+<!--more-->
+
+<h2 id="upgrading-from-earlier-versions">Upgrading from earlier versions</h2>
+
+<p>If you upgrade from 8.y.z this release is a drop in replacement. If
+you come from a version prior to 8.0.0, please read our Wicket 8
+migration guide found at</p>
+
+<ul>
+ <li>http://s.apache.org/wicket8migrate</li>
+</ul>
+
+<p>Have fun!</p>
+
+<p>— The Wicket team</p>
+
+<p>========================================================================</p>
+
+<div class="language-plaintext highlighter-rouge"><div class="highlight"><pre
class="highlight"><code>The signatures for the source release artefacts:
+</code></pre></div></div>
+
+<p>Signature for apache-wicket-8.18.0.zip:</p>
+
+<div class="highlight"><pre>
+-----BEGIN PGP SIGNATURE-----
+
+iQIzBAABCgAdFiEE0a6YZHC1pJw+aieyh48B+qjTVuEFAmoAjhcACgkQh48B+qjT
+VuEl7w//VcFIS7l+cujEpGHwykz+oUDdzlKrUMWDdrgj3SH3/STXooqaTyyO0vu8
+lwilX/ZWHPP1AIMa0xRZAUN3ZPXCuqpWS7boKvbqZieKH1oVpmfQhp1gDJ4yuv3M
+wF1PkDqap2+qDJOiD/bJarkwJfHLp4q5nBCObHNNwEcHNFiltZKqrBrSypONu6jR
+xr9u04SdoMVvDmqggG3VqXneILzw/YJdrl/PKYEgCJAU75gIxpEr4a/9L3LdIJK/
+bmehgvf+zr6mXqXnE3x5bM/4SsrnxdLlwJcVUbSae8q5jBO6vM9a5a4t5ntBvelD
++DHvOR51C0iDqbZO/dKTmIas2T/fE9LtW7e24Vwsq7xDIuDL2h7tjY2C/x82JgvC
+6OP9VTCpmBUGNxCLdvZ5v9gTuDkqrQr9wUHluppI0RhErI7y/QLMPfZS2mnWYHkS
+GEiSGuidKLgUj0pgS95VIQmJrAY42eGP5X8fx6gXw9vEj+Oz0L8K4fZrnDgWo0QU
+WvW442dzD9FVM5N1wbC5Md8MWaQ2mzqA4wb7FKDsZchNiARsyGjflkRc+xFXr4O8
+d0OaUCEq96UnRtiFV2ZGjm12D/ICNiK2D3cfXAn0RBVa6JfhwTA1wbUVsVQQO49d
+Gm6DYGBOre7RByWg5drtRSMsY5kq0YAsTXcphRBsgvqaN5mH3do=
+=qjtY
+-----END PGP SIGNATURE-----
+</pre></div>
+
+<p>Signature for apache-wicket-8.18.0.tar.gz:</p>
+
+<div class="highlight"><pre>
+-----BEGIN PGP SIGNATURE-----
+
+iQIzBAABCgAdFiEE0a6YZHC1pJw+aieyh48B+qjTVuEFAmoAjhcACgkQh48B+qjT
+VuG2cw//bIhw0+osmE563g7XFeEmmWkbZSTsbuPU2k7gAQQdBsl/wxqV2layc1J/
+GD2/Y2pUhgYmOn9+zv/duW1b86LcIHAeoJ1F7LsxtP10nbxRm4rhOE6oGTTyh6OO
+zbR9IKi0I7IOEexVvdhA1nrn4mXXTqOfefwA22qh4TEsanraBpABXvWCsIBYsbND
+ssPnlHOES+wOOxADvNu99Z5JnuEUyEpQwv5eaM3aCZCa+moJZ4Ex5jPg8jrUsIke
+aWGHEyAGPdGash7Chsb5xs9bfmr8Q5jFMYerz2x68U/zQtF2WIHVcwB/qVpPzvxr
+UA2I+bPOPworDLXlopZIsavEcL0ASgDVpimtWnZ753JQkiODhAWUtyFJhhNbgW5c
+GJE9GBlbVdvvN/wfT3Jpqh9JuwUpX/47zGnpKNb76NB4IoZYb4/RJTRqmxDoePEp
+b6WHklV5p0jaZ7vQpvxU1p+eNgNlEv02o2vHzoj62pKp50/w/OAlXhwdtvacedwM
+z2O2CXQFiiv3Hqr9LKafBn2m/b4cj74mASmyWt/ZH1UDJtzgj5rJqYdRb/4hkHeC
+MR5c0b8b3K9d+4tFOGY+bkl6xSc2vjX2T4yA4DGsUQvNrZ3ThrhB6WHgcyNycTjh
+DF8M4iwiVu1p91zgp1SQ+mXMzvX+2FNs/EXSgeZ89WhRJkwdSdQ=
+=UZ5J
+-----END PGP SIGNATURE-----
+</pre></div>
+
+<p>========================================================================</p>
+
+<h3 id="this-release">This Release</h3>
+
+<h4 id="changelog-for-8180">CHANGELOG for 8.18.0:</h4>
+
+
+</div>
+
+
+ </section>
+ </div>
+</main>
+
+ <footer>
+ <div class="l-container l-flex">
+ <div class="l-one-third left">
+ <a href="https://www.apache.org"; target="_blank" rel="noopener
noreferrer">Apache</a><br>
+ <a href="https://www.apache.org/licenses/"; target="_blank"
rel="noopener noreferrer">License</a><br>
+ <a href="https://events.apache.org/x/current-event"; target="_blank"
rel="noopener noreferrer">Events</a><br>
+ </div>
+ <div class="l-one-third">
+ <a href="https://www.apache.org/foundation/sponsorship";
target="_blank" rel="noopener noreferrer">Sponsorships</a><br>
+ <a href="https://www.apache.org/foundation/thanks"; target="_blank"
rel="noopener noreferrer">Thanks</a><br>
+ </div>
+ <div class="l-one-third">
+ <a href="https://www.apache.org/security"; target="_blank"
rel="noopener noreferrer">Security</a><br>
+ <a
href="https://privacy.apache.org/policies/privacy-policy-public.html";
target="_blank" rel="noopener noreferrer">Privacy</a><br>
+ </div>
+</div>
+<div class="l-container">
+ <div class="left">
+ <img src="https://www.apache.org/img/asf_logo.png"; style="height:90px;
float:left; margin-right:10px;">
+ <div style="margin-top:12px;">Copyright © 2025 — The Apache Software
Foundation. Apache Wicket, Wicket, Apache, the Apache feather logo, and the
Apache Wicket project logo are trademarks of The Apache Software Foundation.
All other marks mentioned may be trademarks or registered trademarks of their
respective owners.</div>
+ </div>
+</div>
+
+ </footer>
+ </body>
+</html>
diff --git a/content/news/2026/05/index.html b/content/news/2026/05/index.html
index edf085a7..a9ba522c 100644
--- a/content/news/2026/05/index.html
+++ b/content/news/2026/05/index.html
@@ -140,6 +140,17 @@ governments...</p>
<a href="/news/2026/05/13/wicket-9.23.0-released.html">more</a>
</div>
+<div class="news">
+ <h3>Apache Wicket 8.18.0 released</h3>
+ <p><small>15 May 2026</small></p>
+ <p>The Apache Wicket PMC is proud to announce Apache Wicket 8.18.0!</p>
+
+<p>Apache Wicket is an open source Java component oriented web application
+framework that powers thousands of web applications and web sites for
+governments...</p>
+ <a href="/news/2026/05/15/wicket-8.18.0-released.html">more</a>
+</div>
+
</div>
<div class="l-one-third">
diff --git a/content/news/index.html b/content/news/index.html
index ea9e8011..440a1d20 100644
--- a/content/news/index.html
+++ b/content/news/index.html
@@ -124,6 +124,13 @@
<p>This section contains all news items published in <a
href="/news/2026">2026</a>.</p>
+ <article>
+ <h3 id="/news/2026/05/15/wicket-8.18.0-released.html">Apache Wicket
8.18.0 released</h3>
+ <small>15 May 2026</small>
+ <p>The Apache Wicket PMC is proud to announce Apache Wicket 8.18.0!
Apache Wicket is an open source Java component oriented web application
framework that powers thousands of web applications and web sites for
governments, stores, universities, cities, banks, email providers, and more.
You can find more about Apache Wicket at...
+ <a href="/news/2026/05/15/wicket-8.18.0-released.html">more</a></p>
+</article>
+
<article>
<h3 id="/news/2026/05/13/wicket-9.23.0-released.html">Apache Wicket
9.23.0 released</h3>
<small>13 May 2026</small>
diff --git a/content/start/download.html b/content/start/download.html
index 30c9204b..d4be2a33 100644
--- a/content/start/download.html
+++ b/content/start/download.html
@@ -173,7 +173,7 @@
</tr>
<tr>
<td><a href="wicket-8.x.html">Wicket 8.x</a></td>
- <td>8.17.0</td>
+ <td>8.18.0</td>
<td>security fixes only, upgrade to 9.x or 10.x</td>
</tr>
</table>
diff --git a/content/start/quickstart.html b/content/start/quickstart.html
index ac03e6b6..3525afe4 100644
--- a/content/start/quickstart.html
+++ b/content/start/quickstart.html
@@ -229,22 +229,6 @@ command line to your clipboard.</p>
- <option value="8.18.0-SNAPSHOT">8.18.0-SNAPSHOT</option>
-
-
-
- <option value="7.19.0-SNAPSHOT">7.19.0-SNAPSHOT</option>
-
-
-
- <option value="6.31.0-SNAPSHOT">6.31.0-SNAPSHOT</option>
-
-
-
- <option value="1.5-SNAPSHOT">1.5-SNAPSHOT</option>
-
-
-
<option value="10.9.0" selected>10.9.0</option>
@@ -253,7 +237,7 @@ command line to your clipboard.</p>
- <option value="8.17.0">8.17.0</option>
+ <option value="8.18.0">8.18.0</option>
diff --git a/content/start/wicket-8.x.html b/content/start/wicket-8.x.html
index 5869d566..76be26e1 100644
--- a/content/start/wicket-8.x.html
+++ b/content/start/wicket-8.x.html
@@ -176,11 +176,11 @@ releases will not break compatibility.</p>
<h3 id="change-log">Change log</h3>
<p>To see what changed in these releases you can read the
-<a href="https://www.apache.org/dist/wicket/8.17.0/CHANGELOG-8.x";
target="_blank" rel="noopener noreferrer">change log</a>.</p>
+<a href="https://www.apache.org/dist/wicket/8.18.0/CHANGELOG-8.x";
target="_blank" rel="noopener noreferrer">change log</a>.</p>
<h2 id="download">Download</h2>
-<p>The most recent test version in this branch is: <strong>8.17.0</strong>.
+<p>The most recent test version in this branch is: <strong>8.18.0</strong>.
You can test the current state of development using <a href="#maven">Maven</a>
or <a href="#manually">download it manually</a>.</p>
<h3 id="maven">Using Apache Maven</h3>
@@ -190,7 +190,7 @@ You can test the current state of development using <a
href="#maven">Maven</a> o
<figure class="highlight"><pre><code class="language-xml"
data-lang="xml"><span class="nt"><dependency></span>
<span class="nt"><groupId></span>org.apache.wicket<span
class="nt"></groupId></span>
<span class="nt"><artifactId></span>wicket-core<span
class="nt"></artifactId></span>
- <span class="nt"><version></span>8.17.0<span
class="nt"></version></span>
+ <span class="nt"><version></span>8.18.0<span
class="nt"></version></span>
<span class="nt"></dependency></span></code></pre></figure>
<p>Add the snippet above to your project’s POM in the dependency
@@ -208,26 +208,26 @@ accordingly).</p>
from source:</p>
<ul>
- <li>Download source <a
href="http://www.apache.org/dyn/closer.cgi/wicket/8.17.0/apache-wicket-8.17.0.tar.gz";
target="_blank" rel="noopener noreferrer">apache-wicket-8.17.0.tar.gz</a>
-(<a
href="https://www.apache.org/dist/wicket/8.17.0/apache-wicket-8.17.0.tar.gz.asc";
target="_blank" rel="noopener noreferrer">PGP</a>,
-<a
href="https://www.apache.org/dist/wicket/8.17.0/apache-wicket-8.17.0.tar.gz.sha256";
target="_blank" rel="noopener noreferrer">SHA-256</a>
+ <li>Download source <a
href="http://www.apache.org/dyn/closer.cgi/wicket/8.18.0/apache-wicket-8.18.0.tar.gz";
target="_blank" rel="noopener noreferrer">apache-wicket-8.18.0.tar.gz</a>
+(<a
href="https://www.apache.org/dist/wicket/8.18.0/apache-wicket-8.18.0.tar.gz.asc";
target="_blank" rel="noopener noreferrer">PGP</a>,
+<a
href="https://www.apache.org/dist/wicket/8.18.0/apache-wicket-8.18.0.tar.gz.sha256";
target="_blank" rel="noopener noreferrer">SHA-256</a>
)</li>
- <li>Download source <a
href="http://www.apache.org/dyn/closer.cgi/wicket/8.17.0/apache-wicket-8.17.0.zip";
target="_blank" rel="noopener noreferrer">apache-wicket-8.17.0.zip</a>
-(<a
href="https://www.apache.org/dist/wicket/8.17.0/apache-wicket-8.17.0.zip.asc";
target="_blank" rel="noopener noreferrer">PGP</a>,
-<a
href="https://www.apache.org/dist/wicket/8.17.0/apache-wicket-8.17.0.zip.sha256";
target="_blank" rel="noopener noreferrer">SHA-256</a>
+ <li>Download source <a
href="http://www.apache.org/dyn/closer.cgi/wicket/8.18.0/apache-wicket-8.18.0.zip";
target="_blank" rel="noopener noreferrer">apache-wicket-8.18.0.zip</a>
+(<a
href="https://www.apache.org/dist/wicket/8.18.0/apache-wicket-8.18.0.zip.asc";
target="_blank" rel="noopener noreferrer">PGP</a>,
+<a
href="https://www.apache.org/dist/wicket/8.18.0/apache-wicket-8.18.0.zip.sha256";
target="_blank" rel="noopener noreferrer">SHA-256</a>
)</li>
</ul>
<p>Or use the following links to get the pre-packaged binaries instead:</p>
<ul>
- <li>Download binaries <a
href="http://www.apache.org/dyn/closer.cgi/wicket/8.17.0/binaries/apache-wicket-8.17.0-bin.tar.gz";
target="_blank" rel="noopener noreferrer">apache-wicket-8.17.0-bin.tar.gz</a>
-(<a
href="https://www.apache.org/dist/wicket/8.17.0/binaries/apache-wicket-8.17.0-bin.tar.gz.asc";
target="_blank" rel="noopener noreferrer">PGP</a>,
-<a
href="https://www.apache.org/dist/wicket/8.17.0/binaries/apache-wicket-8.17.0-bin.tar.gz.sha256";
target="_blank" rel="noopener noreferrer">SHA-256</a>
+ <li>Download binaries <a
href="http://www.apache.org/dyn/closer.cgi/wicket/8.18.0/binaries/apache-wicket-8.18.0-bin.tar.gz";
target="_blank" rel="noopener noreferrer">apache-wicket-8.18.0-bin.tar.gz</a>
+(<a
href="https://www.apache.org/dist/wicket/8.18.0/binaries/apache-wicket-8.18.0-bin.tar.gz.asc";
target="_blank" rel="noopener noreferrer">PGP</a>,
+<a
href="https://www.apache.org/dist/wicket/8.18.0/binaries/apache-wicket-8.18.0-bin.tar.gz.sha256";
target="_blank" rel="noopener noreferrer">SHA-256</a>
)</li>
- <li>Download binaries <a
href="http://www.apache.org/dyn/closer.cgi/wicket/8.17.0/binaries/apache-wicket-8.17.0-bin.zip";
target="_blank" rel="noopener noreferrer">apache-wicket-8.17.0-bin.zip</a>
-(<a
href="https://www.apache.org/dist/wicket/8.17.0/binaries/apache-wicket-8.17.0-bin.zip.asc";
target="_blank" rel="noopener noreferrer">PGP</a>,
-<a
href="https://www.apache.org/dist/wicket/8.17.0/binaries/apache-wicket-8.17.0-bin.zip.sha256";
target="_blank" rel="noopener noreferrer">SHA-256</a>
+ <li>Download binaries <a
href="http://www.apache.org/dyn/closer.cgi/wicket/8.18.0/binaries/apache-wicket-8.18.0-bin.zip";
target="_blank" rel="noopener noreferrer">apache-wicket-8.18.0-bin.zip</a>
+(<a
href="https://www.apache.org/dist/wicket/8.18.0/binaries/apache-wicket-8.18.0-bin.zip.asc";
target="_blank" rel="noopener noreferrer">PGP</a>,
+<a
href="https://www.apache.org/dist/wicket/8.18.0/binaries/apache-wicket-8.18.0-bin.zip.sha256";
target="_blank" rel="noopener noreferrer">SHA-256</a>
)</li>
</ul>
![https://www.apache.org/img/asf_logo.png"](https://www.apache.org/img/asf_logo.png"){kind=link}