All,
On 3/18/26 1:18 PM, Christopher Schultz wrote:
The proposed Apache Tomcat 10.1.53 release is now available for
voting.
All committers and PMC members are kindly requested to provide a vote if
possible. ANY TOMCAT USER MAY VOTE, though only PMC members votes are
binding. We welcome non-committer votes or comments on release builds.
The notable changes compared to 10.1.52 are:
- Relax HTTP/2 header validation and respond to invalid requests with
a stream reset or a 400 response as appropriate rather then with a
connection reset.
- Fix bug 69964: Respect the configured cipher order, which was no
longer respected following the addition of TLS 1.3 specific cipher
configuration. TLS 1.3 ciphers will always be first in the list.
- Update Tomcat Native to 2.0.14 and increase the recommended version to
2.0.14
For full details, see the change log:
https://nightlies.apache.org/tomcat/tomcat-10.1.x/docs/changelog.html
Applications that run on Tomcat 9 and earlier will not run on Tomcat 10
without changes. Java EE applications designed for Tomcat 9 and earlier
may be placed in the $CATALINA_BASE/webapps-javaee directory and Tomcat
will automatically convert them to Jakarta EE and copy them to the
webapps directory.
It can be obtained from:
https://dist.apache.org/repos/dist/dev/tomcat/tomcat-10/v10.1.53/
The Maven staging repo is:
https://repository.apache.org/content/repositories/orgapachetomcat-1585
The tag is:
https://github.com/apache/tomcat/tree/10.1.53
https://github.com/apache/tomcat/commit/
f3d5786aa1bd6c2a78d666afc89b2a4570f66593
Please reply with a +1 for release or +0/-0/-1 with an explanation.
+1 for stable release
All unit tests pass on MacOS aarch64.
Details:
* Environment
* Java (build): openjdk version "25.0.2" 2026-01-20 LTS OpenJDK
Runtime Environment Temurin-25.0.2+10 (build 25.0.2+10-LTS) OpenJDK
64-Bit Server VM Temurin-25.0.2+10 (build 25.0.2+10-LTS, mixed mode,
sharing)
* Java (test): openjdk version "25.0.2" 2026-01-20 LTS OpenJDK
Runtime Environment Temurin-25.0.2+10 (build 25.0.2+10-LTS) OpenJDK
64-Bit Server VM Temurin-25.0.2+10 (build 25.0.2+10-LTS, mixed mode,
sharing)
* Ant: Apache Ant(TM) version 1.10.15 compiled on August 25
2024
* OS: Darwin 25.3.0 arm64
* cc: Apple clang version 17.0.0 (clang-1700.6.4.2)
* make: GNU Make 3.81
* OpenSSL: OpenSSL 3.6.0 1 Oct 2025 (Library: OpenSSL 3.6.0 1
Oct 2025)
* APR: 1.7.6
*
* Valid SHA-512 signature for apache-tomcat-10.1.53.zip
* Valid GPG signature for apache-tomcat-10.1.53.zip
* Valid SHA-512 signature for apache-tomcat-10.1.53.tar.gz
* Valid GPG signature for apache-tomcat-10.1.53.tar.gz
* Valid SHA-512 signature for apache-tomcat-10.1.53.exe
* Valid GPG signature for apache-tomcat-10.1.53.exe
* Valid Windows Digital Signature for apache-tomcat-10.1.53.exe
* Valid SHA512 signature for apache-tomcat-10.1.53-src.zip
* Valid GPG signature for apache-tomcat-10.1.53-src.zip
* Valid SHA512 signature for apache-tomcat-10.1.53-src.tar.gz
* Valid GPG signature for apache-tomcat-10.1.53-src.tar.gz
*
* Binary Zip and tarball: Same
* Source Zip and tarball: Same
*
* Building dependencies returned: 0
* Tomcat builds cleanly
* tcnative builds cleanly
* Junit Tests: PASSED
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]