You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tomcat.apache.org by Rémy Maucherat <re...@apache.org> on 2026/05/01 20:40:50 UTC
[VOTE] Release Apache Tomcat 9.0.118
The proposed Apache Tomcat 9.0.118 release is now available for voting.
The notable changes compared to 9.0.117 are:
- Enhance version.sh and version.bat to display APR, Tomcat Native, and
OpenSSL version information.
- Free private keys, keys and certificates after use in FFM based connector
configuration.
For full details, see the changelog:
https://nightlies.apache.org/tomcat/tomcat-9.0.x/docs/changelog.html
It can be obtained from:
https://dist.apache.org/repos/dist/dev/tomcat/tomcat-9/v9.0.118/
The Maven staging repo is:
https://repository.apache.org/content/repositories/orgapachetomcat-1589
The tag is:
https://github.com/apache/tomcat/tree/9.0.118
b4aab5184c1cf1acc0e845e0fd7306dee578e16b
The proposed 9.0.118 release is:
[ ] -1, Broken - do not release
[ ] +1, Stable - go ahead and release as 9.0.118
Rémy
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org
Re: [VOTE] Release Apache Tomcat 9.0.118
Posted by Mark Thomas <ma...@apache.org>.
On 01/05/2026 21:40, Rémy Maucherat wrote:
> The proposed 9.0.118 release is:
> [ ] -1, Broken - do not release
> [X] +1, Stable - go ahead and release as 9.0.118
Tests pass on:
- MacOS, Temurin 25.0.3, Native 1.3.7, OpenSSL 3.6.2
- Windows, Temurin 25.0.3, Native 1.3.7, OpenSSL 3.0.19
- Linux, Temurin 25.0.3, Native 1.3.7, 3.0.13 (Ubuntu)
Build is cross-platform binary reproducible
Build is not cross-platform source reproducible due to line endings in
*.mdd files (already fixed)
Mark
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org
Re: [VOTE] Release Apache Tomcat 9.0.118
Posted by Rainer Jung <ra...@kippdata.de>.
See comment about version.sh in the 11.0.22 vote thread.
Am 01.05.26 um 22:40 schrieb Rémy Maucherat:
> The proposed Apache Tomcat 9.0.118 release is now available for voting.
>
> The notable changes compared to 9.0.117 are:
>
> - Enhance version.sh and version.bat to display APR, Tomcat Native, and
> OpenSSL version information.
>
> - Free private keys, keys and certificates after use in FFM based connector
> configuration.
>
> For full details, see the changelog:
> https://nightlies.apache.org/tomcat/tomcat-9.0.x/docs/changelog.html
>
> It can be obtained from:
> https://dist.apache.org/repos/dist/dev/tomcat/tomcat-9/v9.0.118/
>
> The Maven staging repo is:
> https://repository.apache.org/content/repositories/orgapachetomcat-1589
>
> The tag is:
> https://github.com/apache/tomcat/tree/9.0.118
> b4aab5184c1cf1acc0e845e0fd7306dee578e16b
>
> The proposed 9.0.118 release is:
> [ ] -1, Broken - do not release
> [ ] +1, Stable - go ahead and release as 9.0.118
>
> Rémy
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org
Re: [VOTE] Release Apache Tomcat 9.0.118
Posted by Christopher Schultz <ch...@christopherschultz.net>.
Rémy,
Thanks for RMing.
On 5/1/26 4:40 PM, Rémy Maucherat wrote:
> The proposed Apache Tomcat 9.0.118 release is now available for voting.
>
> The notable changes compared to 9.0.117 are:
>
> - Enhance version.sh and version.bat to display APR, Tomcat Native, and
> OpenSSL version information.
>
> - Free private keys, keys and certificates after use in FFM based connector
> configuration.
>
> For full details, see the changelog:
> https://nightlies.apache.org/tomcat/tomcat-9.0.x/docs/changelog.html
>
> It can be obtained from:
> https://dist.apache.org/repos/dist/dev/tomcat/tomcat-9/v9.0.118/
>
> The Maven staging repo is:
> https://repository.apache.org/content/repositories/orgapachetomcat-1589
>
> The tag is:
> https://github.com/apache/tomcat/tree/9.0.118
> b4aab5184c1cf1acc0e845e0fd7306dee578e16b
>
> The proposed 9.0.118 release is:
> [ ] -1, Broken - do not release
> [ ] +1, Stable - go ahead and release as 9.0.118
+1 for stable release
The build is reproducible and all the unit tests pass on MacOS aarch64.
Details:
* Environment
* Java (build): openjdk version "25.0.2" 2026-01-20 LTS OpenJDK
Runtime Environment Temurin-25.0.2+10 (build 25.0.2+10-LTS) OpenJDK
64-Bit Server VM Temurin-25.0.2+10 (build 25.0.2+10-LTS, mixed mode,
sharing)
* Java (test): openjdk version "25.0.2" 2026-01-20 LTS OpenJDK
Runtime Environment Temurin-25.0.2+10 (build 25.0.2+10-LTS) OpenJDK
64-Bit Server VM Temurin-25.0.2+10 (build 25.0.2+10-LTS, mixed mode,
sharing)
* Ant: Apache Ant(TM) version 1.10.15 compiled on August 25
2024
* OS: Darwin 25.3.0 arm64
* cc: Apple clang version 21.0.0 (clang-2100.0.123.102)
* make: GNU Make 3.81
* OpenSSL: OpenSSL 3.6.1 27 Jan 2026 (Library: OpenSSL 3.6.1 27
Jan 2026)
* APR: 1.7.6
*
* Valid SHA-512 signature for apache-tomcat-9.0.118.zip
* Valid GPG signature for apache-tomcat-9.0.118.zip
* Valid SHA-512 signature for apache-tomcat-9.0.118.tar.gz
* Valid GPG signature for apache-tomcat-9.0.118.tar.gz
* Valid SHA-512 signature for apache-tomcat-9.0.118.exe
* Valid GPG signature for apache-tomcat-9.0.118.exe
* Valid Windows Digital Signature for apache-tomcat-9.0.118.exe
* Valid SHA512 signature for apache-tomcat-9.0.118-src.zip
* Valid GPG signature for apache-tomcat-9.0.118-src.zip
* Valid SHA512 signature for apache-tomcat-9.0.118-src.tar.gz
* Valid GPG signature for apache-tomcat-9.0.118-src.tar.gz
*
* Binary Zip and tarball: Same
* Source Zip and tarball: Same
*
* Building dependencies returned: 0
* Tomcat builds cleanly
* tcnative builds cleanly
* Junit Tests: PASSED
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org
Re: [VOTE] Release Apache Tomcat 9.0.118
Posted by Rainer Jung <ra...@kippdata.de>.
Am 01.05.26 um 22:40 schrieb Rémy Maucherat:
> The proposed Apache Tomcat 9.0.118 release is now available for voting.
>
> The notable changes compared to 9.0.117 are:
>
> - Enhance version.sh and version.bat to display APR, Tomcat Native, and
> OpenSSL version information.
>
> - Free private keys, keys and certificates after use in FFM based connector
> configuration.
>
> For full details, see the changelog:
> https://nightlies.apache.org/tomcat/tomcat-9.0.x/docs/changelog.html
>
> It can be obtained from:
> https://dist.apache.org/repos/dist/dev/tomcat/tomcat-9/v9.0.118/
>
> The Maven staging repo is:
> https://repository.apache.org/content/repositories/orgapachetomcat-1589
>
> The tag is:
> https://github.com/apache/tomcat/tree/9.0.118
> b4aab5184c1cf1acc0e845e0fd7306dee578e16b
>
> The proposed 9.0.118 release is:
> [ ] -1, Broken - do not release
> [ ] +1, Stable - go ahead and release as 9.0.118
+1 to release.
Reproducibility of the build checked (including the Windows installer)
using "ant verify-release" on Linux Mint 22.3. OK after setting LANG.
Original Windows installer signature verified with osslsigncode 2.10.
Unit tests ran on platforms
- RHEL 7, 8, 9 and 10 and SLES 12 and 15
using
- recent patch versions of JDK 8, 11, 17, 21, 25, 26 and 27 (EA)
from
- Eclipse Adoptium, Azul Zulu, Amazon Coretto, Oracle, RedHat and from
OpenJDK for 27
where available.
Also tested with
- tcnative 1.3.7, 2.0.14 and panama
- tcnative including post-release memory leak patches
based on
- OpenSSL 3.0.20, 3.5.6, 3.6.2 and 4.0.0 (for tcnative 2 and panama)
Test observations:
- IMHO nothing critical
- not all test runs are done yet, but by far most of them. Only JDK27
and some JDK25 and 26 combinations still need to run.
- post-release test fixes for TestProxyErrorReportValve and
TestAccessLogValveFile applied
- post-release test fixes for TestStandardJarScanner,
TestOcspSoftFailInternalError, TestOcspSoftFailTryLater and
TestSslHandshakeFailure (only for Java 8) applied
- TestOcspSoftFailTryLater two failures with JDK 17 and JDK 21 (only
jsse)
- TestOcspEnabled one failures with amazon JDK 21 tcnative on RHEL 9
- in addition
- very few crashes with tcnative (6 in 834 runs)
- very few crashes with jsse (2 in 122 runs)
- very few failures with jsse (3 in 122 runs)
- very few non-crash-failures with tcnative (2 in 834 runs)
Thanks for RM!
Best regards,
Rainer
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org
[VOTE][RESULT] Release Apache Tomcat 9.0.118
Posted by Rémy Maucherat <re...@apache.org>.
The following votes were cast:
Binding:
+1: rjung, markt, schultz
The vote therefore passes.
Thanks to everyone who contributed to this release.
Rémy
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org