On 10/11/2026 14:21, Mark Thomas via dev wrote:
On 09/11/2026 21:37, Rémy Maucherat via dev wrote:
The proposed Apache Tomcat 9.0.124 release is now available for voting.
The notable changes compared to 9.0.123 are:
- Large number of bugfixes to jdbc-pool
- The JAAS realm is now deprecated and will be removed in Tomcat 12
- Deprecate the EncryptInterceptor and replace it with TLS-PSK support
to encrypt cluster traffic
For full details, see the changelog:
https://nightlies.apache.org/tomcat/tomcat-9.0.x/docs/changelog.html
It can be obtained from:
https://dist.apache.org/repos/dist/dev/tomcat/tomcat-9/v9.0.124/
The Maven staging repo is:
https://repository.apache.org/content/repositories/orgapachetomcat-1613
The tag is:
https://github.com/apache/tomcat/tree/9.0.124
6a78f8c622f03f7d8abef0179c85d958de000475
The proposed 9.0.124 release is:
[ ] -1, Broken - do not release
[X] +1, Stable - go ahead and release as 9.0.124
Test pass on:
- MacOS with Tomcat Native 1.3.10 and OpenSSL 4.1.0
- Linux with Tomcat Native 1.3.10 and locally built OpenSSL 3.5.9
- Windows with Tomcat Native 1.3.10 and OpenSSL 3.5.9
Release is reproducible for source.
The source bundle includes the target directory for the jdbc-pool module
which it should not. The source bundles match apart from that directory.
Note: This makes the source bundle close to double the size it should
be. I'd have no objection to removing the target directory / replacing
those bundles. I don't think a new tag is required.
Mark
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
