+1
> Am 26.10.2026 um 18:17 schrieb Martijn Dashorst <[email protected]>:
>
> xThis is a vote to release Apache Wicket 11.0.0
>
> Please download the source distributions found in our staging area
> linked below.
>
> I have included the signatures for both the source archives. This vote
> lasts for 72 hours minimum.
>
> [ ] Yes, release Apache Wicket 11.0.0
> [ ] No, don't release Apache Wicket 11.0.0, because ...
>
> Distributions, changelog, keys and signatures can be found at:
>
> https://dist.apache.org/repos/dist/dev/wicket/11.0.0
>
> Staging repository:
>
> https://repository.apache.org/content/repositories/orgapachewicket-1279/
>
> The binaries are available in the above link, as are a staging
> repository for Maven. Typically the vote is on the source, but should
> you find a problem with one of the binaries, please let me know, I can
> re-roll them some way or the other.
>
> Staging git repository data:
>
> Repository: https://github.com/dashorst/wicket.git
> Branch: build/wicket-11.0.0
> Release tag: rel/wicket-11.0.0
>
>
> ========================================================================
>
> CHANGELOG for 11.0.0:
>
> ** Bug
>
> * [WICKET-7107] - CSP Header not rendered when using
> RedirectPolicy.AUTO_REDIRECT
> * [WICKET-7182] - Wicket Autocomplete calls event on a non jquery object
> * [WICKET-7186] - wicket 10.9.0 / 10.9.1 leaks File Reaper threads
> * [WICKET-7189] - make partial page update creation pluggable.
> * [WICKET-7199] - Vulnerable dependencies need to be updated
> * [WICKET-7203] - wicket-extensions: Dependency on jackson-databind
> should be optional in module-info.java
> * [WICKET-7205] - CSP-Headers not set if RenderPageRequestHandler
> wrapped in more than one IRequestHandlerDelegates
> * [GH-1576] - BUG since 10.11.0: Wrong escaping in Button label,while
> getEscapeModelStrings=false
> * [GH-1582] - build fails on SignOut
> * [GH-1593] - Typo in WARN message
> * [GH-1616] - AsynchronousPageStoreTest.storeAsynchronousContextClosed
> never observes its own assertions
> * [GH-1620] - TrapFocusBehavior: Tab/Shift+Tab at trap boundary throws
> TypeError on wicket-10.x
> * [GH-1646] - Wicket.Event.remove does not remove a listener added for
> several event types
> * [GH-1647] - The WebSocket charts example calls jQuery.parseJSON,
> which jQuery 4 removed
> * [GH-1650] - AjaxButton triggering the submit event also submits the
> form in Firefox
> * [GH-1658] - The quickstart archetype's Start.java does not compile
> against Jetty 12
> * [GH-1659] - CrossOrigin.USE_CREDENTIALS renders user-credentials
> instead of use-credentials
> * [GH-1670] - problems with upload to resource
> * [GH-1678] - Quickstart archetype: give slf4j-simple test scope
> * [GH-1688] - WebSocket: Request wrappers break the Servlet header
> contract (case-sensitive lookup, single-use enumerations)
> * [GH-1721] - Fix the failures in release.sh found while releasing
> 9.25.0
>
> ** New Feature
>
> * [WICKET-7169] - Make partHeaderSizeMax in AbstractFileUpload
> configurable
> * [WICKET-7190] - Unified cryptography API
> * [WICKET-7196] - Allow unescaped wicket:label tags
> * [GH-1492] - AjaxRequestHandler generation of PartialPageUpdate is not
> extensible
> * [GH-1583] - create a version of wicket ajax and all the other
> standard components that is jQuery independent.
> * [GH-1614] - Make LoadableDetachableModel#detach() final and add
> detach hooks that receive the attached object
> * [GH-1631] - Add Ajax veil behaviors that block the page, or a
> component, while a request runs
> * [GH-1669] - multiple file upload to resource + drag and drop files
> and upload to resource.
>
> ** Improvement
>
> * [WICKET-7135] - Work on deprecation warnings
> * [WICKET-7144] - Improve Ajax updates of form component panels
> * [WICKET-7172] - Support new CSP style, script directives
> * [WICKET-7176] - Bump up CDI API and Weld versions
> * [WICKET-7179] - add support for jQuery 4.0.0
> * [WICKET-7184] - Make <wicket:header-items/> HTML spec compliant
> * [WICKET-7187] - JavaScript header items: `module` for content, and
> import maps
> * [WICKET-7188] - Sign file upload resource constraints
> * [WICKET-7191] - Deprecate HTML5Attributes and move its logic to
> FormComponet hierarchy
> * [WICKET-7192] - restrict SourcesPage to resources of the page's own
> package
> * [WICKET-7195] - Add tag type="search" to those supported by TextField
> * [WICKET-7200] - Align class-vs-package resolution across the
> wicket-auth-roles annotations
> * [WICKET-7204] - Don't use INJECTION for ByteBuddy proxy creation
>
> ** Task
>
> * [WICKET-7193] - Deprecate and remove IAuthenticationStrategy
> * [WICKET-7194] - Deprecate and remove Include
> * [GH-1584] - Redundant japicmp exclusions need to removed
> * [GH-1699] - Include GitHub issues in the release notes built by
> build-changelog.sh
> * [GH-1708] - build-versions.py fails on Python 3 and misses the
> experimental modules
