+1 thank you! On Mon, Nov 9, 2026 at 3:06 AM Jean-Louis Monteiro <[email protected]> wrote:
> +1 > -- > Jean-Louis Monteiro > http://twitter.com/jlouismonteiro > http://www.tomitribe.com > > > On Mon, Nov 9, 2026 at 9:23 AM Martin Wiesner via dev < > [email protected]> > wrote: > > > Hi folks, > > > > +1 (non-binding) > > > > Verified sha256/sh512 hashes and signatures: => VALID > > > > I've tested on three applications: JAX-WS, JAX-RS, JPA, CDI, Servlets, > and > > EARs. > > From what I can tell: everything looks fine. > > > > Java version: 25.0.5, vendor: Eclipse Adoptium, runtime: > > /Library/Java/JavaVirtualMachines/temurin-25.0.5.jdk/Contents/Home > > Default locale: de_DE, platform encoding: UTF-8 > > OS name: "mac os x", version: "27.2", arch: "aarch64", family: "mac" > > > > In addition, I ran (runtime) checks on a Linux/Ubuntu env. > > > > Thanks to all contributors and for prepping this release candidate. > > > > Gruß > > Martin > > > > > Am 04.11.2026 um 21:43 schrieb Richard Zowalla via dev < > > [email protected]>: > > > > > > +1 (binding), with one remark. > > > > > > Checked: sha256/sha512, SHA3-256 against the ATR manifest, GPG > > signatures against KEYS (8D339D37), ATR/dist.dev/Nexus staging artifacts > > identical, git tag 72f98dd2, LICENSE/NOTICE, zip == tar.gz, plus > > distribution starts/stops cleanly on Java 25. > > > > > > Remark: the source release still contains > > > examples/jpa-hibernate-arquillian/temp/hibernate-core-jakarta-5.6.8.Final.jar > > (LGPL, unreferenced). Mark removed it on main in 025ea74a99 but the > removal > > was not backported to tomee-10.x, so it has shipped in every 10.x source > > release. Please cherry-pick that commit to tomee-10.x; if we don't > re-roll, > > it must be gone for 10.3.1. > > > > > > Non-blocking: 10.3.0-SNAPSHOT leftovers in tomee-deb and ~20 example > > poms. > > > > > > Thanks > > > Richard > > > > > >> Am 04.11.2026 um 13:51 schrieb jungm.apache.org via dev < > > [email protected]>: > > >> > > >> Hello TomEE, > > >> > > >> I'd like to call a vote on releasing the following artifacts as > > >> Apache TomEE 10.3.0. This vote is being conducted using a > > >> Beta version of the Apache Trusted Releases (ATR) platform. > > >> Please report any bugs or issues to the ASF Tooling team. > > >> > > >> The page of the release candidate from ATR revision 00002, > > >> which includes downloads, can be found at: > > >> > > >> https://releases.apache.org/vote/tomee/10.3.0 > > >> > > >> The file manifest for ATR revision 00002, including file digests, > > >> can be found at: > > >> > > >> https://releases.apache.org/manifest/tomee/10.3.0/00002 > > >> > > >> The release artifacts are signed with one or more OpenPGP keys from: > > >> > > >> https://downloads.apache.org/tomee/KEYS > > >> > > >> Please review the release candidate and vote accordingly. > > >> > > >> The artifacts are also available traditionally via dist: > > https://dist.apache.org/repos/dist/dev/tomee/staging-1255/tomee-10.3.0/ > > >> Git tag: https://github.com/apache/tomee/tree/tomee-project-10.3.0 > > (72f98dd23572a5064e238fc31bf6c9c7aa45eb73) > > >> Maven staging repo: > > https://repository.apache.org/content/repositories/orgapachetomee-1255/ > > >> > > >> Jira changelog: > > >> > > >> Bug > > >> [TOMEE-2044] - threadPool-queue (in ServicePool) from ejbd-Service > is > > never processed > > >> [TOMEE-3726] - Queue is visible in JNDI Tree (java://id-resource) > > >> [TOMEE-4011] - Multi-threaded Deployment of multiple war-files runs > > in TomEERuntimeException > > >> [TOMEE-4029] - Use of JWKS forces kid to be present in JWTs > > >> [TOMEE-4240] - The implementation for mail.mime.parameters.strict > > parameter is missing in jakarta\mail\internet\ParameterList.java class of > > geronimo-mail_2.1_spec-1.0.0-M1.jar in TomEE 9.1.0 > > >> [TOMEE-4438] - Disable releases for apache-snapshot repo > > >> [TOMEE-4547] - MultipartMessage not build correctly with > Jakarta.mail > > / Interferes with Geronimo-mail > > >> [TOMEE-4682] - SecurityContext.authenticate() does not persist the > > session (bypasses HttpServletRequest.authenticate()) > > >> [TOMEE-4699] - ThreadContext constructor is not thread-safe, causing > > loss of submitted tasks. > > >> [TOMEE-4703] - ApplicationThreadContextProvider stores a live > > ThreadContext reference instead of an immutable snapshot > > >> [TOMEE-4704] - CUTask.invoke() does not safely propagate errors to > > ManagedTask > > >> [TOMEE-4712] - MDB endpoints are activated before the application's > > other EJBs are started > > >> [TOMEE-4714] - TomEEEmbeddedExtension (JUnit 5) can not start the > > container again after it was closed > > >> [TOMEE-4715] - TomEE embedded application runner does not inject > > @Resource into the @Application descriptor > > >> [TOMEE-4716] - MicroProfile Health endpoints are not deployed when > > the webapp declares a JAX-RS Application subclass > > >> [TOMEE-4729] - MP-JWT security state is not restored for > asynchronous > > requests > > >> [TOMEE-4730] - MP-JWT ignores class-level security annotations of a > > resource superclass > > >> [TOMEE-4731] - TxThreadContextRestorer fails with NPE when managed > > threads end after the container shut down > > >> > > >> Improvement > > >> [TOMEE-1619] - Add exception message to Alerts > > >> [TOMEE-4679] - Prepare for next development iteration (10.3.x) > > >> [TOMEE-4709] - Track git revision in version info > > >> [TOMEE-4710] - Don't patch catalina.jar just to print TomEE Version > > >> > > >> Task > > >> [TOMEE-4700] - Drop openejb-hessian > > >> [TOMEE-4701] - Drop openejb-ssh > > >> [TOMEE-4702] - Drop openejb-common-cli > > >> [TOMEE-4705] - Migrate the Maven plugins off the Maven 2 API > > >> [TOMEE-4706] - Migrate the Gradle plugin to a current Gradle version > > >> [TOMEE-4707] - Drop the standalone HTTP server from openejb-http > > >> [TOMEE-4733] - Pin Surefire to 3.5.x in TCK modules > > >> > > >> Dependency upgrade > > >> [TOMEE-4663] - Geronimo Mail 1.1.1 > > >> [TOMEE-4664] - Apache Neethi 3.2.3 > > >> [TOMEE-4666] - Mojarra 4.0.20 > > >> [TOMEE-4668] - SmallRye Config 3.18.1 > > >> [TOMEE-4669] - commons-codec 1.23.0 > > >> [TOMEE-4671] - Apache ActiveMQ 6.2.8 > > >> [TOMEE-4672] - Bouncycastle 1.86 > > >> [TOMEE-4676] - CXF 4.1.9 > > >> [TOMEE-4677] - Tomcat 10.1.61 > > >> [TOMEE-4678] - Upgrade micrometer-core jar > > >> [TOMEE-4680] - Apache CXF - CVE-2026-54225 in TomEE 10.2.0 > > >> [TOMEE-4683] - Jackson 2.22.2 > > >> [TOMEE-4684] - Johnzon 2.2.0 > > >> [TOMEE-4685] - JUnit 6.1.3 > > >> [TOMEE-4686] - SmallRye Config 3.18.2 > > >> [TOMEE-4687] - actions/setup-java 6.0.0 > > >> [TOMEE-4694] - Apache ActiveMQ 6.2.10 > > >> [TOMEE-4695] - Mojarra 4.0.28 > > >> [TOMEE-4696] - Hibernate ORM 6.6.56.Final > > >> [TOMEE-4697] - XBean 5.0.0 > > >> [TOMEE-4698] - Plexus Archiver 4.14.0 > > >> [TOMEE-4718] - MyFaces 4.0.4 > > >> [TOMEE-4719] - Jose4j 0.9.7 > > >> [TOMEE-4720] - Snakeyaml 2.7 > > >> [TOMEE-4721] - Apache ActiveMQ 6.3.3 > > >> [TOMEE-4722] - SLF4J 2.0.20 > > >> [TOMEE-4723] - Jackson 2.22.4 > > >> [TOMEE-4724] - Apache Neethi 3.2.4 > > >> [TOMEE-4725] - WSS4J 4.0.2 > > >> [TOMEE-4726] - commons-lang3 3.21.0 > > >> > > >> Documentation > > >> [TOMEE-4673] - Remove "About the 'tomee' webapp" since Tomee drop-in > > webapp was removed in TOMEE-3724 > > >> > > >> > > >> [ ] +1 Release this package > > >> [ ] +0 Abstain > > >> [ ] -1 Do not release this package (please provide specific comments) > > >> > > >> You can vote on ATR at the URL above, or manually by replying to this > > email. > > >> > > >> The vote is open for 72 hours. > > >> > > >> > > >> Thanks, > > >> Markus Jung (jungm) > > >> > > >> This email was sent by [email protected] on the Apache Trusted > Releases > > platform > > > > > > > > -- Atentamente: César Hernández.
