On Thu, Oct 2, 2025 at 4:05 PM Christopher Schultz < [email protected]> wrote:
> Mark, > > Thanks for RMing. > > On 10/1/25 4:00 AM, Mark Thomas wrote: > > The proposed Apache Tomcat 11.0.12 release is now available for voting. > > > > The notable changes compared to 11.0.11 include: > > > > - Add specific certificate selection code for TLS 1.3 supporting post > > quantum cryptography. Certificates defined with type MLDSA will be > > selected depending on the TLS client hello. > > > > - Add groups attribute on SSLHostConfig allowing to restrict which > > groups can be enabled on the SSL engine. > > > > - Store HTTP/1.1 request headers using the original case for the header > > name rather than forcing it to lower case. > > > > > > For full details, see the change log: > > https://nightlies.apache.org/tomcat/tomcat-11.0.x/docs/changelog.html > > > > Applications that run on Tomcat 9 and earlier will not run on Tomcat 11 > > without changes. Java EE applications designed for Tomcat 9 and earlier > > may be placed in the $CATALINA_BASE/webapps-javaee directory and Tomcat > > will automatically convert them to Jakarta EE and copy them to the > > webapps directory. Applications using deprecated APIs may require > > further changes. > > > > It can be obtained from: > > https://dist.apache.org/repos/dist/dev/tomcat/tomcat-11/v11.0.12/ > > > > The Maven staging repo is: > > https://repository.apache.org/content/repositories/orgapachetomcat-1560 > > > > The tag is: > > https://github.com/apache/tomcat/tree/11.0.12 > > 7be88ea333d4b1f0ff75b8f4bc743f7f25262886 > > > > The proposed 11.0.12 release is: > > [ ] -1 Broken - do not release > > [X] +1 Stable - go ahead and release as 11.0.12 > +1 for stable release Build is reproducible and unit tests pass on Linux with Java 25 Igal > > +1 for stable release > > The build is 100% reproducible on MacOS aarch64, and all unit tests > pass. I did have to re-run the > websocket.TestWsWebSocketContainerTimeoutServer as it failed on the > first go-around, but I suspect it's very condition-dependent. > > Details: > > * Environment > * Java (build): openjdk version "25" 2025-09-16 LTS OpenJDK Runtime > Environment Temurin-25+36 (build 25+36-LTS) OpenJDK 64-Bit Server VM > Temurin-25+36 (build 25+36-LTS, mixed mode, sharing) > * Java (test): openjdk version "25" 2025-09-16 LTS OpenJDK Runtime > Environment Temurin-25+36 (build 25+36-LTS) OpenJDK 64-Bit Server VM > Temurin-25+36 (build 25+36-LTS, mixed mode, sharing) > * Ant: Apache Ant(TM) version 1.10.15 compiled on August 25 > 2024 > * OS: Darwin 24.6.0 arm64 > * cc: Apple clang version 17.0.0 (clang-1700.0.13.5) > * make: GNU Make 3.81 > * OpenSSL: OpenSSL 3.5.2 5 Aug 2025 (Library: OpenSSL 3.5.2 5 > Aug 2025) > * APR: 1.7.6 > * > * Valid SHA-512 signature for apache-tomcat-11.0.12.zip > * Valid GPG signature for apache-tomcat-11.0.12.zip > * Valid SHA-512 signature for apache-tomcat-11.0.12.tar.gz > * Valid GPG signature for apache-tomcat-11.0.12.tar.gz > * Valid SHA-512 signature for apache-tomcat-11.0.12.exe > * Valid GPG signature for apache-tomcat-11.0.12.exe > * Valid Windows Digital Signature for apache-tomcat-11.0.12.exe > * Valid SHA512 signature for apache-tomcat-11.0.12-src.zip > * Valid GPG signature for apache-tomcat-11.0.12-src.zip > * Valid SHA512 signature for apache-tomcat-11.0.12-src.tar.gz > * Valid GPG signature for apache-tomcat-11.0.12-src.tar.gz > * > * Binary Zip and tarball: Same > * Source Zip and tarball: Same > * > * Building dependencies returned: 0 > * Tomcat builds cleanly > * tcnative builds cleanly > * Junit Tests: PASSED > * > * Signature MATCH for bin/apache-tomcat-11.0.12-deployer.tar.gz > * Signature MATCH for bin/apache-tomcat-11.0.12-deployer.zip > * Signature MATCH for bin/apache-tomcat-11.0.12-fulldocs.tar.gz > * Signature MATCH for bin/apache-tomcat-11.0.12-windows-x64.zip > * Signature MATCH for bin/apache-tomcat-11.0.12-windows-x86.zip > * Signature MATCH for bin/apache-tomcat-11.0.12.exe > * Signature MATCH for bin/apache-tomcat-11.0.12.tar.gz > * Signature MATCH for bin/apache-tomcat-11.0.12.zip > * Signature MATCH for src/apache-tomcat-11.0.12-src.tar.gz > * Signature MATCH for src/apache-tomcat-11.0.12-src.zip > * > * > * SSSS SSSS > * S SS SS S > * SS S S SS > * SS S S SS > * SS SS S SS > * SS S S SS > * SSS SS SS SSS > * SS SS SS SS > * SS SS SS SS > * SS S S SS > * SS SSSSSSS SSSSSSS SS > * SSSSS SSS SSS SSSS > * SSS SSSS SS SS SSSS SS > * SS SSS SSS S S SSS SSS S > * S SSS SS SS SSS S > * S SSSSSS SS SS SSSSSS S > * S SS SSSSSSS SSSSSSS SS S > * S SSSS SS SS SSSS S > * SS SS SSSSSSSSS SSSSSSSSS SS S > * SSSS SSSS S S SSSS SS > * SSSSS SSSSSS SS SS SSSSSS SSSS > * SS SS SSSSSS SSSSSS SS SS > * SSS SSS S S SSS SSS > * SSSSSSSSSS SSSSSSSSS > * > * > * All signatures are verified; the build appears to be 100% > * reproducible. > > -chris > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [email protected] > For additional commands, e-mail: [email protected] > >
