Hi all,

As discussed, here is the vote for Apache TomEE 9.0.0.RC1. This is a
release candidate implementing Jakarta EE 9.1 and MicroProfile 5. It is
fully passing MicroProfile 5 TCK and only has a few failures for Jakarta
TCK, hence the release candidate.

This is a jakarta namespace compatible version. And it will result in a
final version as soon as we can get the few TCK failures fixed.

Binaries and sources
https://dist.apache.org/repos/dist/dev/tomee/staging-1208/

Staging repository
https://repository.apache.org/content/repositories/orgapachetomee-1208

CI last green build
https://ci-builds.apache.org/job/Tomee/job/master-build-full/797/

Releases notes
= Apache TomEE 9.0.0.RC1 Release Notes
:index-group: Release Notes
:jbake-type: page
:jbake-status: published

== Dependency upgrade

[.compact]
 - link:https://issues.apache.org/jira/browse/TOMEE-4100[TOMEE-4100]  XBean
4.22
 - link:https://issues.apache.org/jira/browse/TOMEE-4083[TOMEE-4083]
Commons CLI 1.5.0
 - link:https://issues.apache.org/jira/browse/TOMEE-3800[TOMEE-3800] DBCP
2.9.0
 - link:https://issues.apache.org/jira/browse/TOMEE-4037[TOMEE-4037]
Eclipse Mojarra 3.0.2
 - link:https://issues.apache.org/jira/browse/TOMEE-4036[TOMEE-4036]
EclipseLink 3.0.3
 - link:https://issues.apache.org/jira/browse/TOMEE-3980[TOMEE-3980] HSQLDB
2.7.0
 - link:https://issues.apache.org/jira/browse/TOMEE-4019[TOMEE-4019] HSQLDB
2.7.0
 - link:https://issues.apache.org/jira/browse/TOMEE-4086[TOMEE-4086] HSQLDB
2.7.1
 - link:https://issues.apache.org/jira/browse/TOMEE-4039[TOMEE-4039]
Hibernate 6.1
 - link:https://issues.apache.org/jira/browse/TOMEE-4093[TOMEE-4093]
Hibernate 6.1.4.Final
 - link:https://issues.apache.org/jira/browse/TOMEE-4038[TOMEE-4038]
Jackson 2.13.4
 - link:https://issues.apache.org/jira/browse/TOMEE-4026[TOMEE-4026]
Johnzon 1.2.19
 - link:https://issues.apache.org/jira/browse/TOMEE-4030[TOMEE-4030] Log4J2
2.18.0
 - link:https://issues.apache.org/jira/browse/TOMEE-4097[TOMEE-4097]
MicroProfile Fault Tolerance API 4.0.2
 - link:https://issues.apache.org/jira/browse/TOMEE-4098[TOMEE-4098]
MicroProfile Health API 4.0.1
 - link:https://issues.apache.org/jira/browse/TOMEE-4099[TOMEE-4099]
MicroProfile Rest Client API 3.0.1
 - link:https://issues.apache.org/jira/browse/TOMEE-3999[TOMEE-3999]
MyFaces 3.0.2
 - link:https://issues.apache.org/jira/browse/TOMEE-4054[TOMEE-4054]
Snakeyaml 1.33
 - link:https://issues.apache.org/jira/browse/TOMEE-3831[TOMEE-3831] TomEE
should support library asm9.1 support fully Java 17
 - link:https://issues.apache.org/jira/browse/TOMEE-4040[TOMEE-4040] Tomcat
10.0.23
 - link:https://issues.apache.org/jira/browse/TOMEE-4096[TOMEE-4096] Tomcat
10.0.27
 - link:https://issues.apache.org/jira/browse/TOMEE-4018[TOMEE-4018]
bcprov-jdk15on 1.70
 - link:https://issues.apache.org/jira/browse/TOMEE-4006[TOMEE-4006] slf4j
1.7.36

== Bug

[.compact]
 - link:https://issues.apache.org/jira/browse/TOMEE-4101[TOMEE-4101] Typo
with EL22Adaptor implementation in openwebbeans.properties
 - link:https://issues.apache.org/jira/browse/TOMEE-4102[TOMEE-4102] TomEE
logs SEVERE: Expected ContextBinding to have the method getThreadName()
 - link:https://issues.apache.org/jira/browse/TOMEE-4032[TOMEE-4032] Class
cast Exception when undeploying application with @PostConstruct LifeCycle
 - link:https://issues.apache.org/jira/browse/TOMEE-3795[TOMEE-3795] Proxy
class definition does not work in Java 17+
 - link:https://issues.apache.org/jira/browse/TOMEE-4014[TOMEE-4014] Unable
to see TomEE version in Tomcat home page with Java 17
 - link:https://issues.apache.org/jira/browse/TOMEE-4041[TOMEE-4041] 4 CVE
Vulnerabilities in snakeyaml-1.30.jar
 - link:https://issues.apache.org/jira/browse/TOMEE-4001[TOMEE-4001]
CVE-2022-34305 displaying user provided data without filtering, exposing a
XSS vulnerability

== Task

[.compact]
 - link:https://issues.apache.org/jira/browse/TOMEE-4022[TOMEE-4022] Move
to Apache Rat
 - link:https://issues.apache.org/jira/browse/TOMEE-4028[TOMEE-4028]
Replace cucumber shading and replace with cucumber-jakarta-openejb
 - link:https://issues.apache.org/jira/browse/TOMEE-4035[TOMEE-4035]
Upgrade SmallRye, Jackson and others
 - link:https://issues.apache.org/jira/browse/TOMEE-3914[TOMEE-3914] Spring
3 Dependencies in TomEE Root POM
 - link:https://issues.apache.org/jira/browse/TOMEE-4088[TOMEE-4088] Add
workaround for CVE-2022-41853 (hsqldb)

== Documentation

[.compact]
 - link:https://issues.apache.org/jira/browse/TOMEE-4023[TOMEE-4023]
Comparison pages with wrong specs per profiles

== Sub-task

[.compact]
 - link:https://issues.apache.org/jira/browse/TOMEE-3890[TOMEE-3890]
Replace Apache Geronimo Microprofile with Smallrye
 - link:https://issues.apache.org/jira/browse/TOMEE-3896[TOMEE-3896]
SmallRye Metrics integration
 - link:https://issues.apache.org/jira/browse/TOMEE-3897[TOMEE-3897]
SmallRye Health integration
 - link:https://issues.apache.org/jira/browse/TOMEE-3898[TOMEE-3898]
SmallRye Config integration
 - link:https://issues.apache.org/jira/browse/TOMEE-3899[TOMEE-3899]
SmallRye Fault Tolerant integration
 - link:https://issues.apache.org/jira/browse/TOMEE-4007[TOMEE-4007] Clean
up ASM dependency
 - link:https://issues.apache.org/jira/browse/TOMEE-3900[TOMEE-3900]
SmallRye OpenAPI integration
 - link:https://issues.apache.org/jira/browse/TOMEE-3947[TOMEE-3947]
Elliptic Curve ES256 signature algorithm
 - link:https://issues.apache.org/jira/browse/TOMEE-3948[TOMEE-3948]
Decryption of JWTs using RSA-OAEP and A256GCM algorithms
 - link:https://issues.apache.org/jira/browse/TOMEE-3949[TOMEE-3949]
Support for JWT audience aud claim
 - link:https://issues.apache.org/jira/browse/TOMEE-3909[TOMEE-3909] Pass
MicroProfile Rest Client TCK
 - link:https://issues.apache.org/jira/browse/TOMEE-3910[TOMEE-3910] Pass
MicroProfile JWT TCK
 - link:https://issues.apache.org/jira/browse/TOMEE-3955[TOMEE-3955] Fix
TomEE :: Examples :: Arquillian Persistence Extension Sample

== Fixed Common Vulnerabilities and Exposures (CVEs)

[.compact]
 - link:https://issues.apache.org/jira/browse/TOMEE-4086[TOMEE-4086] HSQLDB
2.7.1
 - link:https://issues.apache.org/jira/browse/TOMEE-4041[TOMEE-4041] 4 CVE
Vulnerabilities in snakeyaml-1.30.jar
 - link:https://issues.apache.org/jira/browse/TOMEE-4001[TOMEE-4001]
CVE-2022-34305 displaying user provided data without filtering, exposing a
XSS vulnerability
 - link:https://issues.apache.org/jira/browse/TOMEE-4088[TOMEE-4088] Add
workaround for CVE-2022-41853 (hsqldb)

Please VOTE

 [+1] go ship it
 [+0] meh, don't care
 [-1] stop, there is a ${showstopper}

 The VOTE is open for 72h or as long as needed.
--
Jean-Louis Monteiro
http://twitter.com/jlouismonteiro
http://www.tomitribe.com

Reply via email to