This is a vote to release Apache Wicket 11.0.0
Please download the source distributions found in our staging area
linked below.
I have included the signatures for both the source archives.
## Expedited release vote
This candidate replaces the previous 11.0.0 candidate, whose vote was
cancelled. It differs from that candidate only in the OpenRewrite
recipes of wicket-migration (GitHub issue #1739), the release script
(GitHub issue #1749) and documentation; the other modules have no code
changes. As those were already reviewed, this vote closes as soon as it
has three binding +1 votes, instead of after 72 hours. If you need more
time to review, say so and the vote stays open.
[ ] Yes, release Apache Wicket 11.0.0
[ ] No, don't release Apache Wicket 11.0.0, because ...
Distributions, changelog, keys and signatures can be found at:
https://dist.apache.org/repos/dist/dev/wicket/11.0.0
Staging repository:
https://repository.apache.org/content/repositories/orgapachewicket-1284/
The binaries are available in the above link, as are a staging
repository for Maven. Typically the vote is on the source, but should
you find a problem with one of the binaries, please let me know, I can
re-roll them some way or the other.
Staging git repository data:
Repository: https://github.com/dashorst/wicket.git
Branch: build/wicket-11.0.0
Release tag: rel/wicket-11.0.0
========================================================================
CHANGELOG for 11.0.0:
** Bug
* [WICKET-7107] - CSP Header not rendered when using
RedirectPolicy.AUTO_REDIRECT
* [WICKET-7182] - Wicket Autocomplete calls event on a non jquery object
* [WICKET-7186] - wicket 10.9.0 / 10.9.1 leaks File Reaper threads
* [WICKET-7189] - make partial page update creation pluggable.
* [WICKET-7199] - Vulnerable dependencies need to be updated
* [WICKET-7203] - wicket-extensions: Dependency on
jackson-databind should be optional in module-info.java
* [WICKET-7205] - CSP-Headers not set if RenderPageRequestHandler
wrapped in more than one IRequestHandlerDelegates
* [GH-1576] - BUG since 10.11.0: Wrong escaping in Button
label,while getEscapeModelStrings=false
* [GH-1582] - build fails on SignOut
* [GH-1593] - Typo in WARN message
* [GH-1616] -
AsynchronousPageStoreTest.storeAsynchronousContextClosed never
observes its own assertions
* [GH-1620] - TrapFocusBehavior: Tab/Shift+Tab at trap boundary
throws TypeError on wicket-10.x
* [GH-1646] - Wicket.Event.remove does not remove a listener added
for several event types
* [GH-1647] - The WebSocket charts example calls jQuery.parseJSON,
which jQuery 4 removed
* [GH-1650] - AjaxButton triggering the submit event also submits
the form in Firefox
* [GH-1658] - The quickstart archetype's Start.java does not
compile against Jetty 12
* [GH-1659] - CrossOrigin.USE_CREDENTIALS renders user-credentials
instead of use-credentials
* [GH-1670] - problems with upload to resource
* [GH-1678] - Quickstart archetype: give slf4j-simple test scope
* [GH-1688] - WebSocket: Request wrappers break the Servlet header
contract (case-sensitive lookup, single-use enumerations)
* [GH-1721] - Fix the failures in release.sh found while releasing 9.25.0
* [GH-1739] - MigrateToWicket11 leaves the org.apache.wicket
dependencies at their Wicket 10 version
* [GH-1749] - release.sh generates a wrong staging repository ID
and a duplicated changelog
** New Feature
* [WICKET-7169] - Make partHeaderSizeMax in AbstractFileUpload configurable
* [WICKET-7190] - Unified cryptography API
* [WICKET-7196] - Allow unescaped wicket:label tags
* [GH-1492] - AjaxRequestHandler generation of PartialPageUpdate
is not extensible
* [GH-1583] - create a version of wicket ajax and all the other
standard components that is jQuery independent.
* [GH-1614] - Make LoadableDetachableModel#detach() final and add
detach hooks that receive the attached object
* [GH-1631] - Add Ajax veil behaviors that block the page, or a
component, while a request runs
* [GH-1669] - multiple file upload to resource + drag and drop
files and upload to resource.
** Improvement
* [WICKET-7135] - Work on deprecation warnings
* [WICKET-7144] - Improve Ajax updates of form component panels
* [WICKET-7172] - Support new CSP style, script directives
* [WICKET-7176] - Bump up CDI API and Weld versions
* [WICKET-7179] - add support for jQuery 4.0.0
* [WICKET-7184] - Make <wicket:header-items/> HTML spec compliant
* [WICKET-7187] - JavaScript header items: `module` for content,
and import maps
* [WICKET-7188] - Sign file upload resource constraints
* [WICKET-7191] - Deprecate HTML5Attributes and move its logic to
FormComponet hierarchy
* [WICKET-7192] - restrict SourcesPage to resources of the page's
own package
* [WICKET-7195] - Add tag type="search" to those supported by TextField
* [WICKET-7200] - Align class-vs-package resolution across the
wicket-auth-roles annotations
* [WICKET-7204] - Don't use INJECTION for ByteBuddy proxy creation
** Task
* [WICKET-7193] - Deprecate and remove IAuthenticationStrategy
* [WICKET-7194] - Deprecate and remove Include
* [GH-1584] - Redundant japicmp exclusions need to removed
* [GH-1699] - Include GitHub issues in the release notes built by
build-changelog.sh
* [GH-1708] - build-versions.py fails on Python 3 and misses the
experimental modules
