+1 Op wo 28 okt 2026 om 14:17 schreef Ernesto Reinaldo Barreiro < [email protected]>:
> +1 to release! I have a couple of complex applications running on 11 and > they seem to work just fine! > > On Wed, Oct 28, 2026 at 7:11 AM Martijn Dashorst <[email protected]> > wrote: > > > This is a vote to release Apache Wicket 11.0.0 (Round 2) > > > > Please download the source distributions found in our staging area > > linked below. > > > > I have included the signatures for both the source archives. This vote > > lasts for 72 hours minimum. > > > > [ ] Yes, release Apache Wicket 11.0.0 > > [ ] No, don't release Apache Wicket 11.0.0, because ... > > > > Distributions, changelog, keys and signatures can be found at: > > > > https://dist.apache.org/repos/dist/dev/wicket/11.0.0 > > > > Staging repository: > > > > > > https://repository.apache.org/content/repositories/orgapachewicket-1280/ > > > > The binaries are available in the above link, as are a staging > > repository for Maven. Typically the vote is on the source, but should > > you find a problem with one of the binaries, please let me know, I can > > re-roll them some way or the other. > > > > Staging git repository data: > > > > Repository: https://github.com/dashorst/wicket.git > > Branch: build/wicket-11.0.0 > > Release tag: rel/wicket-11.0.0 > > > > > > ======================================================================== > > > > CHANGELOG for 11.0.0: > > > > ** Bug > > > > * [WICKET-7107] - CSP Header not rendered when using > > RedirectPolicy.AUTO_REDIRECT > > * [WICKET-7182] - Wicket Autocomplete calls event on a non jquery > > object > > * [WICKET-7186] - wicket 10.9.0 / 10.9.1 leaks File Reaper threads > > * [WICKET-7189] - make partial page update creation pluggable. > > * [WICKET-7199] - Vulnerable dependencies need to be updated > > * [WICKET-7203] - wicket-extensions: Dependency on jackson-databind > > should be optional in module-info.java > > * [WICKET-7205] - CSP-Headers not set if RenderPageRequestHandler > > wrapped in more than one IRequestHandlerDelegates > > * [GH-1576] - BUG since 10.11.0: Wrong escaping in Button label,while > > getEscapeModelStrings=false > > * [GH-1582] - build fails on SignOut > > * [GH-1593] - Typo in WARN message > > * [GH-1616] - > AsynchronousPageStoreTest.storeAsynchronousContextClosed > > never observes its own assertions > > * [GH-1620] - TrapFocusBehavior: Tab/Shift+Tab at trap boundary > throws > > TypeError on wicket-10.x > > * [GH-1646] - Wicket.Event.remove does not remove a listener added > for > > several event types > > * [GH-1647] - The WebSocket charts example calls jQuery.parseJSON, > > which jQuery 4 removed > > * [GH-1650] - AjaxButton triggering the submit event also submits the > > form in Firefox > > * [GH-1658] - The quickstart archetype's Start.java does not compile > > against Jetty 12 > > * [GH-1659] - CrossOrigin.USE_CREDENTIALS renders user-credentials > > instead of use-credentials > > * [GH-1670] - problems with upload to resource > > * [GH-1678] - Quickstart archetype: give slf4j-simple test scope > > * [GH-1688] - WebSocket: Request wrappers break the Servlet header > > contract (case-sensitive lookup, single-use enumerations) > > * [GH-1721] - Fix the failures in release.sh found while releasing > > 9.25.0 > > > > ** New Feature > > > > * [WICKET-7169] - Make partHeaderSizeMax in AbstractFileUpload > > configurable > > * [WICKET-7190] - Unified cryptography API > > * [WICKET-7196] - Allow unescaped wicket:label tags > > * [GH-1492] - AjaxRequestHandler generation of PartialPageUpdate is > not > > extensible > > * [GH-1583] - create a version of wicket ajax and all the other > > standard components that is jQuery independent. > > * [GH-1614] - Make LoadableDetachableModel#detach() final and add > > detach hooks that receive the attached object > > * [GH-1631] - Add Ajax veil behaviors that block the page, or a > > component, while a request runs > > * [GH-1669] - multiple file upload to resource + drag and drop files > > and upload to resource. > > > > ** Improvement > > > > * [WICKET-7135] - Work on deprecation warnings > > * [WICKET-7144] - Improve Ajax updates of form component panels > > * [WICKET-7172] - Support new CSP style, script directives > > * [WICKET-7176] - Bump up CDI API and Weld versions > > * [WICKET-7179] - add support for jQuery 4.0.0 > > * [WICKET-7184] - Make <wicket:header-items/> HTML spec compliant > > * [WICKET-7187] - JavaScript header items: `module` for content, and > > import maps > > * [WICKET-7188] - Sign file upload resource constraints > > * [WICKET-7191] - Deprecate HTML5Attributes and move its logic to > > FormComponet hierarchy > > * [WICKET-7192] - restrict SourcesPage to resources of the page's own > > package > > * [WICKET-7195] - Add tag type="search" to those supported by > TextField > > * [WICKET-7200] - Align class-vs-package resolution across the > > wicket-auth-roles annotations > > * [WICKET-7204] - Don't use INJECTION for ByteBuddy proxy creation > > > > ** Task > > > > * [WICKET-7193] - Deprecate and remove IAuthenticationStrategy > > * [WICKET-7194] - Deprecate and remove Include > > * [GH-1584] - Redundant japicmp exclusions need to removed > > * [GH-1699] - Include GitHub issues in the release notes built by > > build-changelog.sh > > * [GH-1708] - build-versions.py fails on Python 3 and misses the > > experimental modules > > ======================================================================== > > > > CHANGELOG for 11.0.0: > > > > ** Bug > > > > * [WICKET-7107] - CSP Header not rendered when using > > RedirectPolicy.AUTO_REDIRECT > > * [WICKET-7182] - Wicket Autocomplete calls event on a non jquery > > object > > * [WICKET-7186] - wicket 10.9.0 / 10.9.1 leaks File Reaper threads > > * [WICKET-7189] - make partial page update creation pluggable. > > * [WICKET-7199] - Vulnerable dependencies need to be updated > > * [WICKET-7203] - wicket-extensions: Dependency on jackson-databind > > should be optional in module-info.java > > * [WICKET-7205] - CSP-Headers not set if RenderPageRequestHandler > > wrapped in more than one IRequestHandlerDelegates > > * [GH-1576] - BUG since 10.11.0: Wrong escaping in Button label,while > > getEscapeModelStrings=false > > * [GH-1582] - build fails on SignOut > > * [GH-1593] - Typo in WARN message > > * [GH-1616] - > AsynchronousPageStoreTest.storeAsynchronousContextClosed > > never observes its own assertions > > * [GH-1620] - TrapFocusBehavior: Tab/Shift+Tab at trap boundary > throws > > TypeError on wicket-10.x > > * [GH-1646] - Wicket.Event.remove does not remove a listener added > for > > several event types > > * [GH-1647] - The WebSocket charts example calls jQuery.parseJSON, > > which jQuery 4 removed > > * [GH-1650] - AjaxButton triggering the submit event also submits the > > form in Firefox > > * [GH-1658] - The quickstart archetype's Start.java does not compile > > against Jetty 12 > > * [GH-1659] - CrossOrigin.USE_CREDENTIALS renders user-credentials > > instead of use-credentials > > * [GH-1670] - problems with upload to resource > > * [GH-1678] - Quickstart archetype: give slf4j-simple test scope > > * [GH-1688] - WebSocket: Request wrappers break the Servlet header > > contract (case-sensitive lookup, single-use enumerations) > > * [GH-1721] - Fix the failures in release.sh found while releasing > > 9.25.0 > > > > ** New Feature > > > > * [WICKET-7169] - Make partHeaderSizeMax in AbstractFileUpload > > configurable > > * [WICKET-7190] - Unified cryptography API > > * [WICKET-7196] - Allow unescaped wicket:label tags > > * [GH-1492] - AjaxRequestHandler generation of PartialPageUpdate is > not > > extensible > > * [GH-1583] - create a version of wicket ajax and all the other > > standard components that is jQuery independent. > > * [GH-1614] - Make LoadableDetachableModel#detach() final and add > > detach hooks that receive the attached object > > * [GH-1631] - Add Ajax veil behaviors that block the page, or a > > component, while a request runs > > * [GH-1669] - multiple file upload to resource + drag and drop files > > and upload to resource. > > > > ** Improvement > > > > * [WICKET-7135] - Work on deprecation warnings > > * [WICKET-7144] - Improve Ajax updates of form component panels > > * [WICKET-7172] - Support new CSP style, script directives > > * [WICKET-7176] - Bump up CDI API and Weld versions > > * [WICKET-7179] - add support for jQuery 4.0.0 > > * [WICKET-7184] - Make <wicket:header-items/> HTML spec compliant > > * [WICKET-7187] - JavaScript header items: `module` for content, and > > import maps > > * [WICKET-7188] - Sign file upload resource constraints > > * [WICKET-7191] - Deprecate HTML5Attributes and move its logic to > > FormComponet hierarchy > > * [WICKET-7192] - restrict SourcesPage to resources of the page's own > > package > > * [WICKET-7195] - Add tag type="search" to those supported by > TextField > > * [WICKET-7200] - Align class-vs-package resolution across the > > wicket-auth-roles annotations > > * [WICKET-7204] - Don't use INJECTION for ByteBuddy proxy creation > > > > ** Task > > > > * [WICKET-7193] - Deprecate and remove IAuthenticationStrategy > > * [WICKET-7194] - Deprecate and remove Include > > * [GH-1584] - Redundant japicmp exclusions need to removed > > * [GH-1699] - Include GitHub issues in the release notes built by > > build-changelog.sh > > * [GH-1708] - build-versions.py fails on Python 3 and misses the > > experimental modules > > > > > -- > Regards - > Ernesto Reinaldo Barreiro > Apache Wicket Committer > Emerging artist > https://www.instagram.com/reinaldo.barreiro.art/ >
