Rémy,
Thanks for RMing.
On 3/16/26 11:26 AM, Rémy Maucherat wrote:
The proposed Apache Tomcat 9.0.116 release is now available for voting.
The notable changes compared to 9.0.115 are:
- Relax HTTP/2 header validation and respond to invalid requests with
a stream reset or a 400 response as appropriate rather then with a
connection reset.
- Fix bug 69964: Respect the configured cipher order, which was no
longer respected following the addition of TLS 1.3 specific cipher
configuration. TLS 1.3 ciphers will always be first in the list.
- Update Tomcat Native to 1.3.7 / 2.0.14 and increase the recommended
version to 1.3.7 / 2.0.14
For full details, see the changelog:
https://nightlies.apache.org/tomcat/tomcat-9.0.x/docs/changelog.html
It can be obtained from:
https://dist.apache.org/repos/dist/dev/tomcat/tomcat-9/v9.0.116/
The Maven staging repo is:
https://repository.apache.org/content/repositories/orgapachetomcat-1583
The tag is:
https://github.com/apache/tomcat/tree/9.0.116
d2c7dce5e94d6d1d81ad7d66402140b1c1962a53
The proposed 9.0.116 release is:
[ ] -1, Broken - do not release
[ ] +1, Stable - go ahead and release as 9.0.116
+1 for stable release
The release is 100% reproducible and the unit tests all pass on MacOS
aarch64.
Details:
* Environment
* Java (build): openjdk version "25.0.2" 2026-01-20 LTS OpenJDK
Runtime Environment Temurin-25.0.2+10 (build 25.0.2+10-LTS) OpenJDK
64-Bit Server VM Temurin-25.0.2+10 (build 25.0.2+10-LTS, mixed mode,
sharing)
* Java (test): openjdk version "25.0.2" 2026-01-20 LTS OpenJDK
Runtime Environment Temurin-25.0.2+10 (build 25.0.2+10-LTS) OpenJDK
64-Bit Server VM Temurin-25.0.2+10 (build 25.0.2+10-LTS, mixed mode,
sharing)
* Ant: Apache Ant(TM) version 1.10.15 compiled on August 25
2024
* OS: Darwin 25.3.0 arm64
* cc: Apple clang version 17.0.0 (clang-1700.6.4.2)
* make: GNU Make 3.81
* OpenSSL: OpenSSL 3.6.0 1 Oct 2025 (Library: OpenSSL 3.6.0 1
Oct 2025)
* APR: 1.7.6
*
* Valid SHA-512 signature for apache-tomcat-9.0.116.zip
* Valid GPG signature for apache-tomcat-9.0.116.zip
* Valid SHA-512 signature for apache-tomcat-9.0.116.tar.gz
* Valid GPG signature for apache-tomcat-9.0.116.tar.gz
* Valid SHA-512 signature for apache-tomcat-9.0.116.exe
* Valid GPG signature for apache-tomcat-9.0.116.exe
* Valid Windows Digital Signature for apache-tomcat-9.0.116.exe
* Valid SHA512 signature for apache-tomcat-9.0.116-src.zip
* Valid GPG signature for apache-tomcat-9.0.116-src.zip
* Valid SHA512 signature for apache-tomcat-9.0.116-src.tar.gz
* Valid GPG signature for apache-tomcat-9.0.116-src.tar.gz
*
* Binary Zip and tarball: Same
* Source Zip and tarball: Same
*
* Building dependencies returned: 0
* Tomcat builds cleanly
* tcnative builds cleanly
* Junit Tests: PASSED
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
