Am 05.05.26 um 15:44 schrieb Christopher Schultz:
The proposed Apache Tomcat 10.1.55 release is now available for
voting.

All committers and PMC members are kindly requested to provide a vote if possible. ANY TOMCAT USER MAY VOTE, though only PMC members votes are binding. We welcome non-committer votes or comments on release builds.

The notable changes compared to 10.1.54 are:

- Enhance version.sh and version.bat to display APR, Tomcat Native, and
   OpenSSL version information.

- Free private keys, keys and certificates after use in FFM based
   connector configuration.

- Various HTTP/2 validation improvements and a broader change to use
   stream resets rather than connection closures where appropriate.

For full details, see the change log:
https://nightlies.apache.org/tomcat/tomcat-10.1.x/docs/changelog.html

Applications that run on Tomcat 9 and earlier will not run on Tomcat 10 without changes. Java EE applications designed for Tomcat 9 and earlier may be placed in the $CATALINA_BASE/webapps-javaee directory and Tomcat will automatically convert them to Jakarta EE and copy them to the webapps directory.

It can be obtained from:
https://dist.apache.org/repos/dist/dev/tomcat/tomcat-10/v10.1.55/

The Maven staging repo is:
https://repository.apache.org/content/repositories/orgapachetomcat-1591

The tag is:
https://github.com/apache/tomcat/tree/10.1.55
https://github.com/apache/tomcat/commit/ c70966726754f8b3ab63b5ac846a7e7cf6eb255a

Please reply with a +1 for release or +0/-0/-1 with an explanation.

+1 to release.

Reproducibility of the build checked (including the Windows installer) using "ant verify-release" on Linux Mint 22.3. OK after setting LANG.

Original Windows installer signature verified with osslsigncode 2.10.

Unit tests ran on platforms

- RHEL 7, 8, 9 and 10 and SLES 12 and 15

using

- recent patch versions of JDK 11, 17, 21, 25, 26 and 27 (EA)

from

- Eclipse Adoptium, Azul Zulu, Amazon Coretto, Oracle, RedHat and from OpenJDK for 27

where available.

Also tested with

- tcnative 1.3.7, 2.0.14 and panama
  - tcnative including post-release memory leak patches

based on

- OpenSSL 3.0.20, 3.5.6, 3.6.2 and 4.0.0 (for tcnative 2 and panama)

Test observations:

  - IMHO nothing critical

- not all test runs are done yet, but by far most of them. Only JDK27 and some JDK26 combinations still need to run.

- TestOcspSoftFailTryLater one failures with Adopt JDK 17 and jsse on RHEL 8

  - TestOcspEnabled two failures with Adopt JDK 22 and tcnative on RHEL 10

  - in addition
    - a few crashes with tcnative (11 in 844 runs)
    - no crashes with jsse (124 runs)
    - very few failures with jsse (5 in 124 runs)
    - very few non-crash-failures with tcnative (1 in 844 runs)

Thanks for RM!

Best regards,

Rainer

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to