[ANNOUNCE] Apache Wicket 10.0.0 released
The Apache Wicket PMC is proud to announce Apache Wicket 10.0.0! Apache Wicket is an open source Java component oriented web application framework that powers thousands of web applications and web sites for governments, stores, universities, cities, banks, email providers, and more. You can find more about Apache Wicket at https://wicket.apache.org This release marks another minor release of Wicket 10. We use semantic versioning for the development of Wicket, and as such no API breaks are present in this release compared to 10.0.0. New and noteworthy -- This release fixes the following security issue: * CVE-2024-27439 - 'Possible bypass of CSRF protection' Using this release -- With Apache Maven update your dependency to (and don't forget to update any other dependencies on Wicket projects to the same version): org.apache.wicket wicket-core 10.0.0 Or download and build the distribution yourself, or use our convenience binary package you can find here: * Download: http://wicket.apache.org/start/wicket-10.x.html#manually Upgrading from earlier versions --- If you upgrade from 10.y.z this release is a drop in replacement. If you come from a version prior to 10.0.0, please read our Wicket 10 migration guide found at * http://s.apache.org/wicket10migrate Have fun! — The Wicket team CHANGELOG for 10.0.0: ** Sub-task * [WICKET-7089] - Set cookie SameSite only if the container supports it ** Bug * [WICKET-7081] - Open packages to expose resources to other modules * [WICKET-7086] - Injecting Spring bean may cause ClassCastException * [WICKET-7087] - AjaxLazyLoadPanelTester not available in 10.0.0-M2 * [WICKET-7090] - Files in release jars do not have a modification timestamp set * [WICKET-7091] - FilePageStore throws NPE * [WICKET-7096] - stylesheets referenced via automatic linking miss nonce attribute ** Improvement * [WICKET-7080] - [Events] make default events delivery machinery pluggable and roll usable annotation based one * [WICKET-7082] - Easier to work with polymorphic values inside IModel * [WICKET-7083] - Trigger client side validation when using SubmitLinks * [WICKET-7088] - Improve test reliability by resolving nondeterministic order of Set and Map * [WICKET-7093] - Add support for missing CSP directives * [WICKET-7094] - Make all CSP schemes configurable * [WICKET-7099] - Validate FormTester constructor parameter workingForm ** Task * [WICKET-7079] - Update the user guide with the new wicket-tester module * [WICKET-7100] - Update commons-fileupload2 to 2.0.0-M2 ** Bug * [WICKET-7056] - HttpSessionStore#getAttribute called on invalidated session * [WICKET-7061] - When I move from 9.13.0->9.14.0, my importmaps fail to parse correctly due to presence of the CDATA wrapping. * [WICKET-7065] - TextFilteredPropertyColumn violates CSP * [WICKET-7067] - DefaultExceptionMapper should not set disableCaching for WebSocketResponse * [WICKET-7070] - Quick start generated app has multiple errors * [WICKET-7071] - Problems when calling request.getInputStream() before executing WicketFilter * [WICKET-7072] - JUnit code in /src/main/java breaks JPMS support in Eclipse IDE * [WICKET-7074] - [AJAX] malformed XML is produced if an error is produced during AJAX rendering and a redirect is issued * [WICKET-7076] - JavaScriptReferenceType newly created is not serializable * [WICKET-7077] - 2 spring web application contexts are created ** Improvement * [WICKET-7039] - Improve Accessibility of wicket-autocomplete.js * [WICKET-7060] - Minor improvements to wicket-examples * [WICKET-7063] - Convert all Application_*.properties to Application_*.utf8.properties * [WICKET-7066] - Add possibility to define type-Attribute of JavascriptHeaderItem as "module" * [WICKET-7068] - Current tree themes are not RTL friendly * [WICKET-7078] - CSP: inline JS in Choices and Selection of Palette ** Task * [WICKET-7064] - commons-fileupload2 dependency should be added back * [WICKET-7069] - assertTrue(equals()) in tests should be replaced with assertEquals * [WICKET-7073] - Update JQuery to 3.7.1 ** Bug * [WICKET-6895] - Links to examples in documentation points to old version of 8x * [WICKET-6896] - AutoCompleteTextField re-opens dropdown item list after item has been selected * [WICKET-6897] - Javadoc build fails on fresh checkout of master or rel/wicket-9.3.0 * [WICKET-6902] - Change of PartialPageUpdate order of onAfterResponse and writePriorityEvaluations makes IListener.onAfterResponde ignore prepended javascripts * [WICKET-6908] - Possible bug / edge case where page is not detached * [WICKET-6913] - Java 17 compatibility with cglib * [WICKET-6914] - Visibi
Re: [VOTE] Release Apache Wicket 10.0.0 - TAKE 2
Thank you, this vote passes! On 3/11/24 20:35, Laurent Almeras wrote: +1 * Build and install in local maven repository from provided archive (tar.gz) * Update wicket version to stable release, rebuild, test and run a codebase we work for a while and based on 10.0 SNAPSHOT versions (spring boot / spring / hibernate - based) Laurent De : Thomas Heigl Envoyé : lundi 11 mars 2024 18:00 À : dev@wicket.apache.org Objet : Re: [VOTE] Release Apache Wicket 10.0.0 - TAKE 2 +1 Upgraded our main app, ran CI tests and did exploratory tests. Best, Thomas On Mon, Mar 11, 2024 at 5:41 PM Tobias Soloschenko wrote: +1 kind regards Tobias Am 11.03.2024 um 17:17 schrieb Andrea Del Bene : +1 to release Migrated tutorial examples to wicket 10 and tested. On Mon, Mar 11, 2024 at 1:19 PM Martin Grigorov wrote: +1 to release ! Tested: - local build from the .tar.gz file - create a new project from the archetype - build and test wicket-jquery-selectors, wicket-webjars and wicket-bootstrap - test various Wicket examples on Tomcat 11 On Fri, Mar 8, 2024 at 8:55 PM Andrea Del Bene wrote: This is a vote to release Apache Wicket 10.0.0 Please download the source distributions found in our staging area linked below. I have included the signatures for both the source archives. This vote lasts for 72 hours minimum. [ ] Yes, release Apache Wicket 10.0.0 [ ] No, don't release Apache Wicket 10.0.0, because ... Distributions, changelog, keys and signatures can be found at: https://dist.apache.org/repos/dist/dev/wicket/10.0.0 Staging repository: https://repository.apache.org/content/repositories/orgapachewicket-1200/ The binaries are available in the above link, as are a staging repository for Maven. Typically the vote is on the source, but should you find a problem with one of the binaries, please let me know, I can re-roll them some way or the other. Staging git repository data: Repository: g...@github.com:bitstorm/wicket.git Branch: build/wicket-10.0.0 Release tag: rel/wicket-10.0.0 CHANGELOG for 10.0.0: ** Sub-task * [WICKET-7089] - Set cookie SameSite only if the container supports it ** Bug * [WICKET-7081] - Open packages to expose resources to other modules * [WICKET-7086] - Injecting Spring bean may cause ClassCastException * [WICKET-7087] - AjaxLazyLoadPanelTester not available in 10.0.0-M2 * [WICKET-7090] - Files in release jars do not have a modification timestamp set * [WICKET-7091] - FilePageStore throws NPE * [WICKET-7096] - stylesheets referenced via automatic linking miss nonce attribute ** Improvement * [WICKET-7080] - [Events] make default events delivery machinery pluggable and roll usable annotation based one * [WICKET-7082] - Easier to work with polymorphic values inside IModel * [WICKET-7083] - Trigger client side validation when using SubmitLinks * [WICKET-7088] - Improve test reliability by resolving nondeterministic order of Set and Map * [WICKET-7093] - Add support for missing CSP directives * [WICKET-7094] - Make all CSP schemes configurable * [WICKET-7099] - Validate FormTester constructor parameter workingForm ** Task * [WICKET-7079] - Update the user guide with the new wicket-tester module * [WICKET-7100] - Update commons-fileupload2 to 2.0.0-M2 -- Andrea Del Bene. Apache Wicket committer.
RE: [VOTE] Release Apache Wicket 10.0.0 - TAKE 2
+1 * Build and install in local maven repository from provided archive (tar.gz) * Update wicket version to stable release, rebuild, test and run a codebase we work for a while and based on 10.0 SNAPSHOT versions (spring boot / spring / hibernate - based) Laurent De : Thomas Heigl Envoyé : lundi 11 mars 2024 18:00 À : dev@wicket.apache.org Objet : Re: [VOTE] Release Apache Wicket 10.0.0 - TAKE 2 +1 Upgraded our main app, ran CI tests and did exploratory tests. Best, Thomas On Mon, Mar 11, 2024 at 5:41 PM Tobias Soloschenko wrote: > +1 > > kind regards > > Tobias > > > Am 11.03.2024 um 17:17 schrieb Andrea Del Bene : > > > > +1 to release > > > > Migrated tutorial examples to wicket 10 and tested. > > > >> On Mon, Mar 11, 2024 at 1:19 PM Martin Grigorov > >> wrote: > >> > >> +1 to release ! > >> > >> Tested: > >> - local build from the .tar.gz file > >> - create a new project from the archetype > >> - build and test wicket-jquery-selectors, wicket-webjars and > >> wicket-bootstrap > >> - test various Wicket examples on Tomcat 11 > >> > >> On Fri, Mar 8, 2024 at 8:55 PM Andrea Del Bene > >> wrote: > >> > >>> This is a vote to release Apache Wicket 10.0.0 > >>> > >>> Please download the source distributions found in our staging area > >>> linked below. > >>> > >>> I have included the signatures for both the source archives. This vote > >>> lasts for 72 hours minimum. > >>> > >>> [ ] Yes, release Apache Wicket 10.0.0 > >>> [ ] No, don't release Apache Wicket 10.0.0, because ... > >>> > >>> Distributions, changelog, keys and signatures can be found at: > >>> > >>> https://dist.apache.org/repos/dist/dev/wicket/10.0.0 > >>> > >>> Staging repository: > >>> > >>> > https://repository.apache.org/content/repositories/orgapachewicket-1200/ > >>> > >>> The binaries are available in the above link, as are a staging > >>> repository for Maven. Typically the vote is on the source, but should > >>> you find a problem with one of the binaries, please let me know, I can > >>> re-roll them some way or the other. > >>> > >>> Staging git repository data: > >>> > >>> Repository: g...@github.com:bitstorm/wicket.git > >>> Branch: build/wicket-10.0.0 > >>> Release tag: rel/wicket-10.0.0 > >>> > >>> > >>> > > >>> > >>> CHANGELOG for 10.0.0: > >>> > >>> ** Sub-task > >>> > >>> * [WICKET-7089] - Set cookie SameSite only if the container > supports > >>> it > >>> > >>> ** Bug > >>> > >>> * [WICKET-7081] - Open packages to expose resources to other > modules > >>> * [WICKET-7086] - Injecting Spring bean may cause > ClassCastException > >>> * [WICKET-7087] - AjaxLazyLoadPanelTester not available in > 10.0.0-M2 > >>> * [WICKET-7090] - Files in release jars do not have a modification > >>> timestamp set > >>> * [WICKET-7091] - FilePageStore throws NPE > >>> * [WICKET-7096] - stylesheets referenced via automatic linking miss > >>> nonce attribute > >>> > >>> ** Improvement > >>> > >>> * [WICKET-7080] - [Events] make default events delivery machinery > >>> pluggable and roll usable annotation based one > >>> * [WICKET-7082] - Easier to work with polymorphic values inside > >> IModel > >>> * [WICKET-7083] - Trigger client side validation when using > >>> SubmitLinks > >>> * [WICKET-7088] - Improve test reliability by resolving > >>> nondeterministic order of Set and Map > >>> * [WICKET-7093] - Add support for missing CSP directives > >>> * [WICKET-7094] - Make all CSP schemes configurable > >>> * [WICKET-7099] - Validate FormTester constructor parameter > >>> workingForm > >>> > >>> ** Task > >>> > >>> * [WICKET-7079] - Update the user guide with the new wicket-tester > >>> module > >>> * [WICKET-7100] - Update commons-fileupload2 to 2.0.0-M2 > >>> > >>> > >>> > >> > > > > > > -- > > Andrea Del Bene. > > Apache Wicket committer. >
Re: [VOTE] Release Apache Wicket 10.0.0 - TAKE 2
+1 Upgraded our main app, ran CI tests and did exploratory tests. Best, Thomas On Mon, Mar 11, 2024 at 5:41 PM Tobias Soloschenko wrote: > +1 > > kind regards > > Tobias > > > Am 11.03.2024 um 17:17 schrieb Andrea Del Bene : > > > > +1 to release > > > > Migrated tutorial examples to wicket 10 and tested. > > > >> On Mon, Mar 11, 2024 at 1:19 PM Martin Grigorov > >> wrote: > >> > >> +1 to release ! > >> > >> Tested: > >> - local build from the .tar.gz file > >> - create a new project from the archetype > >> - build and test wicket-jquery-selectors, wicket-webjars and > >> wicket-bootstrap > >> - test various Wicket examples on Tomcat 11 > >> > >> On Fri, Mar 8, 2024 at 8:55 PM Andrea Del Bene > >> wrote: > >> > >>> This is a vote to release Apache Wicket 10.0.0 > >>> > >>> Please download the source distributions found in our staging area > >>> linked below. > >>> > >>> I have included the signatures for both the source archives. This vote > >>> lasts for 72 hours minimum. > >>> > >>> [ ] Yes, release Apache Wicket 10.0.0 > >>> [ ] No, don't release Apache Wicket 10.0.0, because ... > >>> > >>> Distributions, changelog, keys and signatures can be found at: > >>> > >>> https://dist.apache.org/repos/dist/dev/wicket/10.0.0 > >>> > >>> Staging repository: > >>> > >>> > https://repository.apache.org/content/repositories/orgapachewicket-1200/ > >>> > >>> The binaries are available in the above link, as are a staging > >>> repository for Maven. Typically the vote is on the source, but should > >>> you find a problem with one of the binaries, please let me know, I can > >>> re-roll them some way or the other. > >>> > >>> Staging git repository data: > >>> > >>> Repository: g...@github.com:bitstorm/wicket.git > >>> Branch: build/wicket-10.0.0 > >>> Release tag: rel/wicket-10.0.0 > >>> > >>> > >>> > > >>> > >>> CHANGELOG for 10.0.0: > >>> > >>> ** Sub-task > >>> > >>> * [WICKET-7089] - Set cookie SameSite only if the container > supports > >>> it > >>> > >>> ** Bug > >>> > >>> * [WICKET-7081] - Open packages to expose resources to other > modules > >>> * [WICKET-7086] - Injecting Spring bean may cause > ClassCastException > >>> * [WICKET-7087] - AjaxLazyLoadPanelTester not available in > 10.0.0-M2 > >>> * [WICKET-7090] - Files in release jars do not have a modification > >>> timestamp set > >>> * [WICKET-7091] - FilePageStore throws NPE > >>> * [WICKET-7096] - stylesheets referenced via automatic linking miss > >>> nonce attribute > >>> > >>> ** Improvement > >>> > >>> * [WICKET-7080] - [Events] make default events delivery machinery > >>> pluggable and roll usable annotation based one > >>> * [WICKET-7082] - Easier to work with polymorphic values inside > >> IModel > >>> * [WICKET-7083] - Trigger client side validation when using > >>> SubmitLinks > >>> * [WICKET-7088] - Improve test reliability by resolving > >>> nondeterministic order of Set and Map > >>> * [WICKET-7093] - Add support for missing CSP directives > >>> * [WICKET-7094] - Make all CSP schemes configurable > >>> * [WICKET-7099] - Validate FormTester constructor parameter > >>> workingForm > >>> > >>> ** Task > >>> > >>> * [WICKET-7079] - Update the user guide with the new wicket-tester > >>> module > >>> * [WICKET-7100] - Update commons-fileupload2 to 2.0.0-M2 > >>> > >>> > >>> > >> > > > > > > -- > > Andrea Del Bene. > > Apache Wicket committer. >
Re: [VOTE] Release Apache Wicket 10.0.0 - TAKE 2
+1 kind regards Tobias > Am 11.03.2024 um 17:17 schrieb Andrea Del Bene : > > +1 to release > > Migrated tutorial examples to wicket 10 and tested. > >> On Mon, Mar 11, 2024 at 1:19 PM Martin Grigorov >> wrote: >> >> +1 to release ! >> >> Tested: >> - local build from the .tar.gz file >> - create a new project from the archetype >> - build and test wicket-jquery-selectors, wicket-webjars and >> wicket-bootstrap >> - test various Wicket examples on Tomcat 11 >> >> On Fri, Mar 8, 2024 at 8:55 PM Andrea Del Bene >> wrote: >> >>> This is a vote to release Apache Wicket 10.0.0 >>> >>> Please download the source distributions found in our staging area >>> linked below. >>> >>> I have included the signatures for both the source archives. This vote >>> lasts for 72 hours minimum. >>> >>> [ ] Yes, release Apache Wicket 10.0.0 >>> [ ] No, don't release Apache Wicket 10.0.0, because ... >>> >>> Distributions, changelog, keys and signatures can be found at: >>> >>> https://dist.apache.org/repos/dist/dev/wicket/10.0.0 >>> >>> Staging repository: >>> >>> https://repository.apache.org/content/repositories/orgapachewicket-1200/ >>> >>> The binaries are available in the above link, as are a staging >>> repository for Maven. Typically the vote is on the source, but should >>> you find a problem with one of the binaries, please let me know, I can >>> re-roll them some way or the other. >>> >>> Staging git repository data: >>> >>> Repository: g...@github.com:bitstorm/wicket.git >>> Branch: build/wicket-10.0.0 >>> Release tag: rel/wicket-10.0.0 >>> >>> >>> >>> >>> CHANGELOG for 10.0.0: >>> >>> ** Sub-task >>> >>> * [WICKET-7089] - Set cookie SameSite only if the container supports >>> it >>> >>> ** Bug >>> >>> * [WICKET-7081] - Open packages to expose resources to other modules >>> * [WICKET-7086] - Injecting Spring bean may cause ClassCastException >>> * [WICKET-7087] - AjaxLazyLoadPanelTester not available in 10.0.0-M2 >>> * [WICKET-7090] - Files in release jars do not have a modification >>> timestamp set >>> * [WICKET-7091] - FilePageStore throws NPE >>> * [WICKET-7096] - stylesheets referenced via automatic linking miss >>> nonce attribute >>> >>> ** Improvement >>> >>> * [WICKET-7080] - [Events] make default events delivery machinery >>> pluggable and roll usable annotation based one >>> * [WICKET-7082] - Easier to work with polymorphic values inside >> IModel >>> * [WICKET-7083] - Trigger client side validation when using >>> SubmitLinks >>> * [WICKET-7088] - Improve test reliability by resolving >>> nondeterministic order of Set and Map >>> * [WICKET-7093] - Add support for missing CSP directives >>> * [WICKET-7094] - Make all CSP schemes configurable >>> * [WICKET-7099] - Validate FormTester constructor parameter >>> workingForm >>> >>> ** Task >>> >>> * [WICKET-7079] - Update the user guide with the new wicket-tester >>> module >>> * [WICKET-7100] - Update commons-fileupload2 to 2.0.0-M2 >>> >>> >>> >> > > > -- > Andrea Del Bene. > Apache Wicket committer.
Re: [VOTE] Release Apache Wicket 10.0.0 - TAKE 2
+1 to release Migrated tutorial examples to wicket 10 and tested. On Mon, Mar 11, 2024 at 1:19 PM Martin Grigorov wrote: > +1 to release ! > > Tested: > - local build from the .tar.gz file > - create a new project from the archetype > - build and test wicket-jquery-selectors, wicket-webjars and > wicket-bootstrap > - test various Wicket examples on Tomcat 11 > > On Fri, Mar 8, 2024 at 8:55 PM Andrea Del Bene > wrote: > > > This is a vote to release Apache Wicket 10.0.0 > > > > Please download the source distributions found in our staging area > > linked below. > > > > I have included the signatures for both the source archives. This vote > > lasts for 72 hours minimum. > > > > [ ] Yes, release Apache Wicket 10.0.0 > > [ ] No, don't release Apache Wicket 10.0.0, because ... > > > > Distributions, changelog, keys and signatures can be found at: > > > > https://dist.apache.org/repos/dist/dev/wicket/10.0.0 > > > > Staging repository: > > > > https://repository.apache.org/content/repositories/orgapachewicket-1200/ > > > > The binaries are available in the above link, as are a staging > > repository for Maven. Typically the vote is on the source, but should > > you find a problem with one of the binaries, please let me know, I can > > re-roll them some way or the other. > > > > Staging git repository data: > > > > Repository: g...@github.com:bitstorm/wicket.git > > Branch: build/wicket-10.0.0 > > Release tag: rel/wicket-10.0.0 > > > > > > > > > > CHANGELOG for 10.0.0: > > > > ** Sub-task > > > > * [WICKET-7089] - Set cookie SameSite only if the container supports > > it > > > > ** Bug > > > > * [WICKET-7081] - Open packages to expose resources to other modules > > * [WICKET-7086] - Injecting Spring bean may cause ClassCastException > > * [WICKET-7087] - AjaxLazyLoadPanelTester not available in 10.0.0-M2 > > * [WICKET-7090] - Files in release jars do not have a modification > > timestamp set > > * [WICKET-7091] - FilePageStore throws NPE > > * [WICKET-7096] - stylesheets referenced via automatic linking miss > > nonce attribute > > > > ** Improvement > > > > * [WICKET-7080] - [Events] make default events delivery machinery > > pluggable and roll usable annotation based one > > * [WICKET-7082] - Easier to work with polymorphic values inside > IModel > > * [WICKET-7083] - Trigger client side validation when using > > SubmitLinks > > * [WICKET-7088] - Improve test reliability by resolving > > nondeterministic order of Set and Map > > * [WICKET-7093] - Add support for missing CSP directives > > * [WICKET-7094] - Make all CSP schemes configurable > > * [WICKET-7099] - Validate FormTester constructor parameter > > workingForm > > > > ** Task > > > > * [WICKET-7079] - Update the user guide with the new wicket-tester > > module > > * [WICKET-7100] - Update commons-fileupload2 to 2.0.0-M2 > > > > > > > -- Andrea Del Bene. Apache Wicket committer.
Re: [VOTE] Release Apache Wicket 10.0.0 - TAKE 2
+1 to release ! Tested: - local build from the .tar.gz file - create a new project from the archetype - build and test wicket-jquery-selectors, wicket-webjars and wicket-bootstrap - test various Wicket examples on Tomcat 11 On Fri, Mar 8, 2024 at 8:55 PM Andrea Del Bene wrote: > This is a vote to release Apache Wicket 10.0.0 > > Please download the source distributions found in our staging area > linked below. > > I have included the signatures for both the source archives. This vote > lasts for 72 hours minimum. > > [ ] Yes, release Apache Wicket 10.0.0 > [ ] No, don't release Apache Wicket 10.0.0, because ... > > Distributions, changelog, keys and signatures can be found at: > > https://dist.apache.org/repos/dist/dev/wicket/10.0.0 > > Staging repository: > > https://repository.apache.org/content/repositories/orgapachewicket-1200/ > > The binaries are available in the above link, as are a staging > repository for Maven. Typically the vote is on the source, but should > you find a problem with one of the binaries, please let me know, I can > re-roll them some way or the other. > > Staging git repository data: > > Repository: g...@github.com:bitstorm/wicket.git > Branch: build/wicket-10.0.0 > Release tag: rel/wicket-10.0.0 > > > > > CHANGELOG for 10.0.0: > > ** Sub-task > > * [WICKET-7089] - Set cookie SameSite only if the container supports > it > > ** Bug > > * [WICKET-7081] - Open packages to expose resources to other modules > * [WICKET-7086] - Injecting Spring bean may cause ClassCastException > * [WICKET-7087] - AjaxLazyLoadPanelTester not available in 10.0.0-M2 > * [WICKET-7090] - Files in release jars do not have a modification > timestamp set > * [WICKET-7091] - FilePageStore throws NPE > * [WICKET-7096] - stylesheets referenced via automatic linking miss > nonce attribute > > ** Improvement > > * [WICKET-7080] - [Events] make default events delivery machinery > pluggable and roll usable annotation based one > * [WICKET-7082] - Easier to work with polymorphic values inside IModel > * [WICKET-7083] - Trigger client side validation when using > SubmitLinks > * [WICKET-7088] - Improve test reliability by resolving > nondeterministic order of Set and Map > * [WICKET-7093] - Add support for missing CSP directives > * [WICKET-7094] - Make all CSP schemes configurable > * [WICKET-7099] - Validate FormTester constructor parameter > workingForm > > ** Task > > * [WICKET-7079] - Update the user guide with the new wicket-tester > module > * [WICKET-7100] - Update commons-fileupload2 to 2.0.0-M2 > > >
