Hey all,
this was the first time I'm trying to run a release via ATR. You should
be able to just reply with your vote as usual and hopefully ATR will
pick it up.
ATR doesn't really know what a changelog is surprisingly, so here we go:
It's been almost 4 months since M1 was released, M2 brings a lot of
changes. We fixed quite a lot of bugs, updated dependencies along the
way as usual. We also took care of hardening in specific areas and
dropped unsued legacy modules.
Git tag is https://github.com/apache/tomee/tree/tomee-project-11.0.0-M2
(f643580164967139789bc4deefe3732c8d506b10)
Artifacts are also available traditionally via dist:
https://dist.apache.org/repos/dist/dev/tomee/staging-1254/tomee-11.0.0-M2/
Full changelog from jira:
Bug
[TOMEE-2044] - threadPool-queue (in ServicePool) from ejbd-Service
is never processed
[TOMEE-2764] - Path not appended when using
UriBuilder.fromUri().path() with file scheme
[TOMEE-2970] - JaxRS Server Sent events implementation leaves lots
of warning logs
[TOMEE-3726] - Queue is visible in JNDI Tree (java://id-resource)
[TOMEE-3782] - cdi-request-scope example not working
[TOMEE-4011] - Multi-threaded Deployment of multiple war-files runs
in TomEERuntimeException
[TOMEE-4029] - Use of JWKS forces kid to be present in JWTs
[TOMEE-4240] - The implementation for mail.mime.parameters.strict
parameter is missing in jakarta\mail\internet\ParameterList.java class
of geronimo-mail_2.1_spec-1.0.0-M1.jar in TomEE 9.1.0
[TOMEE-4438] - Disable releases for apache-snapshot repo
[TOMEE-4547] - MultipartMessage not build correctly with
Jakarta.mail / Interferes with Geronimo-mail
[TOMEE-4589] - openejb reports an error in web.xml which is wrong
[TOMEE-4620] - Misspelled field accesToken in OIDC TokenResponse
prevents interoperability with custom JSON providers (Jackson)
[TOMEE-4631] - arquillian-tomee-remote: static "registered" latch
breaks container re-registration on a second Arquillian Manager (e.g.
failsafe rerunFailingTestsCount)
[TOMEE-4642] - Deployment fails when a war lists a servlet or
filter class it does not package
[TOMEE-4655] - A failed CDI/EJB deployment leaks its deployment ID
into later apps
[TOMEE-4657] - Bean Validation XML config fails on stock Plume:
MOXy beats JAXB RI in ServiceLoader
[TOMEE-4674] - Using otel.config.file in TomEE fails
[TOMEE-4682] - SecurityContext.authenticate() does not persist the
session (bypasses HttpServletRequest.authenticate())
[TOMEE-4699] - ThreadContext constructor is not thread-safe,
causing loss of submitted tasks.
[TOMEE-4703] - ApplicationThreadContextProvider stores a live
ThreadContext reference instead of an immutable snapshot
[TOMEE-4704] - CUTask.invoke() does not safely propagate errors to
ManagedTask
[TOMEE-4711] - Jakarta Data repositories fail when called from a
@Transactional CDI method
[TOMEE-4712] - MDB endpoints are activated before the application's
other EJBs are started
[TOMEE-4714] - TomEEEmbeddedExtension (JUnit 5) can not start the
container again after it was closed
[TOMEE-4715] - TomEE embedded application runner does not inject
@Resource into the @Application descriptor
[TOMEE-4716] - MicroProfile Health endpoints are not deployed when
the webapp declares a JAX-RS Application subclass
[TOMEE-4727] - Jakarta Data repository fails when called from an
AFTER_SUCCESS transactional observer
[TOMEE-4728] - MicroProfile Health endpoint runs the providers of a
declared JAX-RS application
[TOMEE-4729] - MP-JWT security state is not restored for
asynchronous requests
[TOMEE-4730] - MP-JWT ignores class-level security annotations of a
resource superclass
[TOMEE-4731] - TxThreadContextRestorer fails with NPE when managed
threads end after the container shut down
Improvement
[TOMEE-1619] - Add exception message to Alerts
[TOMEE-3234] - Update Examples to use Server / API Boms
[TOMEE-4517] - Setup JPA 3.2 TCK
[TOMEE-4662] - Speed up annotation processing during WAR deploy
[TOMEE-4709] - Track git revision in version info
[TOMEE-4710] - Don't patch catalina.jar just to print TomEE Version
Task
[TOMEE-2850] - Investigate and remove -j parameter from TCK setup
[TOMEE-4259] - Fix "cdi-tck" after OWB-4 upgrade (CDI 4.0)
[TOMEE-4260] - Fix "cdi-tck-embedded" after OWB-4 upgrade (CDI 4.0)
[TOMEE-4634] - Remove tomee-webaccess
[TOMEE-4675] - update to xbean-5.0.0 and owb-4.1.1
[TOMEE-4700] - Drop openejb-hessian
[TOMEE-4701] - Drop openejb-ssh
[TOMEE-4702] - Drop openejb-common-cli
[TOMEE-4705] - Migrate the Maven plugins off the Maven 2 API
[TOMEE-4706] - Migrate the Gradle plugin to a current Gradle version
[TOMEE-4707] - Drop the standalone HTTP server from openejb-http
[TOMEE-4733] - Pin Surefire to 3.5.x in TCK modules
Dependency upgrade
[TOMEE-4623] - Jackson 2.22.0
[TOMEE-4624] - Tomcat 11.0.24
[TOMEE-4625] - CXF 4.2.2
[TOMEE-4627] - Commons Logging 1.4.0
[TOMEE-4628] - Smallrye OpenTelemtry 2.15.1
[TOMEE-4629] - saaj-impl 3.0.6
[TOMEE-4630] - ActiveMQ 6.2.7
[TOMEE-4632] - Eclipselink 5.0.2
[TOMEE-4633] - XBean 4.31
[TOMEE-4663] - Geronimo Mail 1.1.1
[TOMEE-4664] - Apache Neethi 3.2.3
[TOMEE-4665] - Apache ActiveMQ 6.3.0
[TOMEE-4667] - Jackson 2.22.1
[TOMEE-4668] - SmallRye Config 3.18.1
[TOMEE-4669] - commons-codec 1.23.0
[TOMEE-4670] - Mojarra 4.1.11
[TOMEE-4672] - Bouncycastle 1.86
[TOMEE-4680] - Apache CXF - CVE-2026-54225 in TomEE 10.2.0
[TOMEE-4683] - Jackson 2.22.2
[TOMEE-4684] - Johnzon 2.2.0
[TOMEE-4685] - JUnit 6.1.3
[TOMEE-4686] - SmallRye Config 3.18.2
[TOMEE-4687] - actions/setup-java 6.0.0
[TOMEE-4688] - Tomcat 11.0.27
[TOMEE-4689] - CXF 4.2.4
[TOMEE-4690] - Apache ActiveMQ 6.3.3
[TOMEE-4691] - Mojarra 4.1.19
[TOMEE-4692] - Apache BVal 3.1.0
[TOMEE-4693] - Plexus Classworlds 2.12.1
[TOMEE-4717] - MyFaces 4.1.4
[TOMEE-4719] - Jose4j 0.9.7
[TOMEE-4720] - Snakeyaml 2.7
[TOMEE-4722] - SLF4J 2.0.20
[TOMEE-4723] - Jackson 2.22.4
[TOMEE-4724] - Apache Neethi 3.2.4
[TOMEE-4725] - WSS4J 4.0.2
[TOMEE-4726] - commons-lang3 3.21.0
Documentation
[TOMEE-3738] - Replace Hibernate Validator with BVal for "Bean
Validation TCK"
[TOMEE-4673] - Remove "About the 'tomee' webapp" since Tomee
drop-in webapp was removed in TOMEE-3724
Thanks
Markus
On 11/4/26 11:21, jungm.apache.org via dev wrote:
Hello TomEE,
I'd like to call a vote on releasing the following artifacts as
Apache TomEE 11.0.0-M2. This vote is being conducted using a
Beta version of the Apache Trusted Releases (ATR) platform.
Please report any bugs or issues to the ASF Tooling team.
The page of the release candidate from ATR revision 00002,
which includes downloads, can be found at:
https://releases.apache.org/vote/tomee/11.0.0-M2
The file manifest for ATR revision 00002, including file digests,
can be found at:
https://releases.apache.org/manifest/tomee/11.0.0-M2/00002
The release artifacts are signed with one or more OpenPGP keys from:
https://downloads.apache.org/tomee/KEYS
maven staging area:
https://repository.apache.org/content/repositories/orgapachetomee-1254
Please review the release candidate and vote accordingly.
[ ] +1 Release this package
[ ] +0 Abstain
[ ] -1 Do not release this package (please provide specific comments)
You can vote on ATR at the URL above, or manually by replying to this email.
The vote is open for 72 hours.
Thanks,
Markus Jung (jungm)
This email was sent by [email protected] on the Apache Trusted Releases platform
