Hello

+1

Thanks .

On Wed, Nov 4, 2026, 08:54 Markus Jung via dev <[email protected]> wrote:

> Hey all,
>
>
> this was the first time I'm trying to run a release via ATR. You should
> be able to just reply with your vote as usual and hopefully ATR will
> pick it up.
>
>
> ATR doesn't really know what a changelog is surprisingly, so here we go:
> It's been almost 4 months since M1 was released, M2 brings a lot of
> changes. We fixed quite a lot of bugs, updated dependencies along the
> way as usual. We also took care of hardening in specific areas and
> dropped unsued legacy modules.
>
>
> Git tag is https://github.com/apache/tomee/tree/tomee-project-11.0.0-M2
> (f643580164967139789bc4deefe3732c8d506b10)
>
> Artifacts are also available traditionally via dist:
> https://dist.apache.org/repos/dist/dev/tomee/staging-1254/tomee-11.0.0-M2/
>
>
> Full changelog from jira:
>
> Bug
>
>      [TOMEE-2044] - threadPool-queue (in ServicePool) from ejbd-Service
> is never processed
>      [TOMEE-2764] - Path not appended when using
> UriBuilder.fromUri().path() with file scheme
>      [TOMEE-2970] - JaxRS Server Sent events implementation leaves lots
> of warning logs
>      [TOMEE-3726] - Queue is visible in JNDI Tree (java://id-resource)
>      [TOMEE-3782] - cdi-request-scope example not working
>      [TOMEE-4011] - Multi-threaded Deployment of multiple war-files runs
> in TomEERuntimeException
>      [TOMEE-4029] - Use of JWKS forces kid to be present in JWTs
>      [TOMEE-4240] - The implementation for mail.mime.parameters.strict
> parameter is missing in jakarta\mail\internet\ParameterList.java class
> of geronimo-mail_2.1_spec-1.0.0-M1.jar in TomEE 9.1.0
>      [TOMEE-4438] - Disable releases for apache-snapshot repo
>      [TOMEE-4547] - MultipartMessage not build correctly with
> Jakarta.mail / Interferes with Geronimo-mail
>      [TOMEE-4589] - openejb reports an error in web.xml which is wrong
>      [TOMEE-4620] - Misspelled field accesToken in OIDC TokenResponse
> prevents interoperability with custom JSON providers (Jackson)
>      [TOMEE-4631] - arquillian-tomee-remote: static "registered" latch
> breaks container re-registration on a second Arquillian Manager (e.g.
> failsafe rerunFailingTestsCount)
>      [TOMEE-4642] - Deployment fails when a war lists a servlet or
> filter class it does not package
>      [TOMEE-4655] - A failed CDI/EJB deployment leaks its deployment ID
> into later apps
>      [TOMEE-4657] - Bean Validation XML config fails on stock Plume:
> MOXy beats JAXB RI in ServiceLoader
>      [TOMEE-4674] - Using otel.config.file in TomEE fails
>      [TOMEE-4682] - SecurityContext.authenticate() does not persist the
> session (bypasses HttpServletRequest.authenticate())
>      [TOMEE-4699] - ThreadContext constructor is not thread-safe,
> causing loss of submitted tasks.
>      [TOMEE-4703] - ApplicationThreadContextProvider stores a live
> ThreadContext reference instead of an immutable snapshot
>      [TOMEE-4704] - CUTask.invoke() does not safely propagate errors to
> ManagedTask
>      [TOMEE-4711] - Jakarta Data repositories fail when called from a
> @Transactional CDI method
>      [TOMEE-4712] - MDB endpoints are activated before the application's
> other EJBs are started
>      [TOMEE-4714] - TomEEEmbeddedExtension (JUnit 5) can not start the
> container again after it was closed
>      [TOMEE-4715] - TomEE embedded application runner does not inject
> @Resource into the @Application descriptor
>      [TOMEE-4716] - MicroProfile Health endpoints are not deployed when
> the webapp declares a JAX-RS Application subclass
>      [TOMEE-4727] - Jakarta Data repository fails when called from an
> AFTER_SUCCESS transactional observer
>      [TOMEE-4728] - MicroProfile Health endpoint runs the providers of a
> declared JAX-RS application
>      [TOMEE-4729] - MP-JWT security state is not restored for
> asynchronous requests
>      [TOMEE-4730] - MP-JWT ignores class-level security annotations of a
> resource superclass
>      [TOMEE-4731] - TxThreadContextRestorer fails with NPE when managed
> threads end after the container shut down
>
> Improvement
>
>      [TOMEE-1619] - Add exception message to Alerts
>      [TOMEE-3234] - Update Examples to use Server / API Boms
>      [TOMEE-4517] - Setup JPA 3.2 TCK
>      [TOMEE-4662] - Speed up annotation processing during WAR deploy
>      [TOMEE-4709] - Track git revision in version info
>      [TOMEE-4710] - Don't patch catalina.jar just to print TomEE Version
>
> Task
>
>      [TOMEE-2850] - Investigate and remove -j parameter from TCK setup
>      [TOMEE-4259] - Fix "cdi-tck" after OWB-4 upgrade (CDI 4.0)
>      [TOMEE-4260] - Fix "cdi-tck-embedded" after OWB-4 upgrade (CDI 4.0)
>      [TOMEE-4634] - Remove tomee-webaccess
>      [TOMEE-4675] - update to xbean-5.0.0 and owb-4.1.1
>      [TOMEE-4700] - Drop openejb-hessian
>      [TOMEE-4701] - Drop openejb-ssh
>      [TOMEE-4702] - Drop openejb-common-cli
>      [TOMEE-4705] - Migrate the Maven plugins off the Maven 2 API
>      [TOMEE-4706] - Migrate the Gradle plugin to a current Gradle version
>      [TOMEE-4707] - Drop the standalone HTTP server from openejb-http
>      [TOMEE-4733] - Pin Surefire to 3.5.x in TCK modules
>
> Dependency upgrade
>
>      [TOMEE-4623] - Jackson 2.22.0
>      [TOMEE-4624] - Tomcat 11.0.24
>      [TOMEE-4625] - CXF 4.2.2
>      [TOMEE-4627] - Commons Logging 1.4.0
>      [TOMEE-4628] - Smallrye OpenTelemtry 2.15.1
>      [TOMEE-4629] - saaj-impl 3.0.6
>      [TOMEE-4630] - ActiveMQ 6.2.7
>      [TOMEE-4632] - Eclipselink 5.0.2
>      [TOMEE-4633] - XBean 4.31
>      [TOMEE-4663] - Geronimo Mail 1.1.1
>      [TOMEE-4664] - Apache Neethi 3.2.3
>      [TOMEE-4665] - Apache ActiveMQ 6.3.0
>      [TOMEE-4667] - Jackson 2.22.1
>      [TOMEE-4668] - SmallRye Config 3.18.1
>      [TOMEE-4669] - commons-codec 1.23.0
>      [TOMEE-4670] - Mojarra 4.1.11
>      [TOMEE-4672] - Bouncycastle 1.86
>      [TOMEE-4680] - Apache CXF - CVE-2026-54225 in TomEE 10.2.0
>      [TOMEE-4683] - Jackson 2.22.2
>      [TOMEE-4684] - Johnzon 2.2.0
>      [TOMEE-4685] - JUnit 6.1.3
>      [TOMEE-4686] - SmallRye Config 3.18.2
>      [TOMEE-4687] - actions/setup-java 6.0.0
>      [TOMEE-4688] - Tomcat 11.0.27
>      [TOMEE-4689] - CXF 4.2.4
>      [TOMEE-4690] - Apache ActiveMQ 6.3.3
>      [TOMEE-4691] - Mojarra 4.1.19
>      [TOMEE-4692] - Apache BVal 3.1.0
>      [TOMEE-4693] - Plexus Classworlds 2.12.1
>      [TOMEE-4717] - MyFaces 4.1.4
>      [TOMEE-4719] - Jose4j 0.9.7
>      [TOMEE-4720] - Snakeyaml 2.7
>      [TOMEE-4722] - SLF4J 2.0.20
>      [TOMEE-4723] - Jackson 2.22.4
>      [TOMEE-4724] - Apache Neethi 3.2.4
>      [TOMEE-4725] - WSS4J 4.0.2
>      [TOMEE-4726] - commons-lang3 3.21.0
>
> Documentation
>
>      [TOMEE-3738] - Replace Hibernate Validator with BVal for "Bean
> Validation TCK"
>      [TOMEE-4673] - Remove "About the 'tomee' webapp" since Tomee
> drop-in webapp was removed in TOMEE-3724
>
>
> Thanks
>
> Markus
>
>
> On 11/4/26 11:21, jungm.apache.org via dev wrote:
> > Hello TomEE,
> >
> > I'd like to call a vote on releasing the following artifacts as
> > Apache TomEE 11.0.0-M2. This vote is being conducted using a
> > Beta version of the Apache Trusted Releases (ATR) platform.
> > Please report any bugs or issues to the ASF Tooling team.
> >
> > The page of the release candidate from ATR revision 00002,
> > which includes downloads, can be found at:
> >
> >    https://releases.apache.org/vote/tomee/11.0.0-M2
> >
> > The file manifest for ATR revision 00002, including file digests,
> > can be found at:
> >
> >    https://releases.apache.org/manifest/tomee/11.0.0-M2/00002
> >
> > The release artifacts are signed with one or more OpenPGP keys from:
> >
> >    https://downloads.apache.org/tomee/KEYS
> >
> > maven staging area:
> https://repository.apache.org/content/repositories/orgapachetomee-1254
> >
> > Please review the release candidate and vote accordingly.
> >
> > [ ] +1 Release this package
> > [ ] +0 Abstain
> > [ ] -1 Do not release this package (please provide specific comments)
> >
> > You can vote on ATR at the URL above, or manually by replying to this
> email.
> >
> > The vote is open for 72 hours.
> >
> >
> > Thanks,
> > Markus Jung (jungm)
> >
> > This email was sent by [email protected] on the Apache Trusted Releases
> platform
>

Reply via email to