This vote passes (I made it an expedited vote without the 72 hour limit as we already voted on the previous one, and had enough binding votes, and this only fixed the open rewrite migration scripts and some release related scripts.
4 +1 votes! Thanks for voting, I'm going forward with releasing. Martijn On Sun, Nov 1, 2026 at 8:08 PM Pedro Santos <[email protected]> wrote: > > +1 > > Pedro Santos > > Em dom., 1 de nov. de 2026 15:26, Martijn Dashorst < > [email protected]> escreveu: > > > +1 > > > > Martijn > > > > On Sun, Nov 1, 2026 at 2:42 PM Martijn Dashorst <[email protected]> > > wrote: > > > > > > This is a vote to release Apache Wicket 11.0.0 > > > > > > Please download the source distributions found in our staging area > > > linked below. > > > > > > I have included the signatures for both the source archives. > > > > > > ## Expedited release vote > > > > > > This candidate replaces the previous 11.0.0 candidate, whose vote was > > > cancelled. It differs from that candidate only in the OpenRewrite > > > recipes of wicket-migration (GitHub issue #1739), the release script > > > (GitHub issue #1749) and documentation; the other modules have no code > > > changes. As those were already reviewed, this vote closes as soon as it > > > has three binding +1 votes, instead of after 72 hours. If you need more > > > time to review, say so and the vote stays open. > > > > > > [ ] Yes, release Apache Wicket 11.0.0 > > > [ ] No, don't release Apache Wicket 11.0.0, because ... > > > > > > Distributions, changelog, keys and signatures can be found at: > > > > > > https://dist.apache.org/repos/dist/dev/wicket/11.0.0 > > > > > > Staging repository: > > > > > > > > https://repository.apache.org/content/repositories/orgapachewicket-1284/ > > > > > > The binaries are available in the above link, as are a staging > > > repository for Maven. Typically the vote is on the source, but should > > > you find a problem with one of the binaries, please let me know, I can > > > re-roll them some way or the other. > > > > > > Staging git repository data: > > > > > > Repository: https://github.com/dashorst/wicket.git > > > Branch: build/wicket-11.0.0 > > > Release tag: rel/wicket-11.0.0 > > > > > > > > > ======================================================================== > > > > > > CHANGELOG for 11.0.0: > > > > > > > > > ** Bug > > > > > > * [WICKET-7107] - CSP Header not rendered when using > > > RedirectPolicy.AUTO_REDIRECT > > > * [WICKET-7182] - Wicket Autocomplete calls event on a non jquery > > object > > > * [WICKET-7186] - wicket 10.9.0 / 10.9.1 leaks File Reaper threads > > > * [WICKET-7189] - make partial page update creation pluggable. > > > * [WICKET-7199] - Vulnerable dependencies need to be updated > > > * [WICKET-7203] - wicket-extensions: Dependency on > > > jackson-databind should be optional in module-info.java > > > * [WICKET-7205] - CSP-Headers not set if RenderPageRequestHandler > > > wrapped in more than one IRequestHandlerDelegates > > > * [GH-1576] - BUG since 10.11.0: Wrong escaping in Button > > > label,while getEscapeModelStrings=false > > > * [GH-1582] - build fails on SignOut > > > * [GH-1593] - Typo in WARN message > > > * [GH-1616] - > > > AsynchronousPageStoreTest.storeAsynchronousContextClosed never > > > observes its own assertions > > > * [GH-1620] - TrapFocusBehavior: Tab/Shift+Tab at trap boundary > > > throws TypeError on wicket-10.x > > > * [GH-1646] - Wicket.Event.remove does not remove a listener added > > > for several event types > > > * [GH-1647] - The WebSocket charts example calls jQuery.parseJSON, > > > which jQuery 4 removed > > > * [GH-1650] - AjaxButton triggering the submit event also submits > > > the form in Firefox > > > * [GH-1658] - The quickstart archetype's Start.java does not > > > compile against Jetty 12 > > > * [GH-1659] - CrossOrigin.USE_CREDENTIALS renders user-credentials > > > instead of use-credentials > > > * [GH-1670] - problems with upload to resource > > > * [GH-1678] - Quickstart archetype: give slf4j-simple test scope > > > * [GH-1688] - WebSocket: Request wrappers break the Servlet header > > > contract (case-sensitive lookup, single-use enumerations) > > > * [GH-1721] - Fix the failures in release.sh found while releasing > > 9.25.0 > > > * [GH-1739] - MigrateToWicket11 leaves the org.apache.wicket > > > dependencies at their Wicket 10 version > > > * [GH-1749] - release.sh generates a wrong staging repository ID > > > and a duplicated changelog > > > > > > ** New Feature > > > > > > * [WICKET-7169] - Make partHeaderSizeMax in AbstractFileUpload > > configurable > > > * [WICKET-7190] - Unified cryptography API > > > * [WICKET-7196] - Allow unescaped wicket:label tags > > > * [GH-1492] - AjaxRequestHandler generation of PartialPageUpdate > > > is not extensible > > > * [GH-1583] - create a version of wicket ajax and all the other > > > standard components that is jQuery independent. > > > * [GH-1614] - Make LoadableDetachableModel#detach() final and add > > > detach hooks that receive the attached object > > > * [GH-1631] - Add Ajax veil behaviors that block the page, or a > > > component, while a request runs > > > * [GH-1669] - multiple file upload to resource + drag and drop > > > files and upload to resource. > > > > > > ** Improvement > > > > > > * [WICKET-7135] - Work on deprecation warnings > > > * [WICKET-7144] - Improve Ajax updates of form component panels > > > * [WICKET-7172] - Support new CSP style, script directives > > > * [WICKET-7176] - Bump up CDI API and Weld versions > > > * [WICKET-7179] - add support for jQuery 4.0.0 > > > * [WICKET-7184] - Make <wicket:header-items/> HTML spec compliant > > > * [WICKET-7187] - JavaScript header items: `module` for content, > > > and import maps > > > * [WICKET-7188] - Sign file upload resource constraints > > > * [WICKET-7191] - Deprecate HTML5Attributes and move its logic to > > > FormComponet hierarchy > > > * [WICKET-7192] - restrict SourcesPage to resources of the page's > > > own package > > > * [WICKET-7195] - Add tag type="search" to those supported by > > TextField > > > * [WICKET-7200] - Align class-vs-package resolution across the > > > wicket-auth-roles annotations > > > * [WICKET-7204] - Don't use INJECTION for ByteBuddy proxy creation > > > > > > ** Task > > > > > > * [WICKET-7193] - Deprecate and remove IAuthenticationStrategy > > > * [WICKET-7194] - Deprecate and remove Include > > > * [GH-1584] - Redundant japicmp exclusions need to removed > > > * [GH-1699] - Include GitHub issues in the release notes built by > > > build-changelog.sh > > > * [GH-1708] - build-versions.py fails on Python 3 and misses the > > > experimental modules > >
