You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tomcat.apache.org by Christopher Schultz <ch...@christopherschultz.net> on 2023/06/02 18:07:38 UTC

[VOTE] Release Apache Tomcat 8.5.90

The proposed Apache Tomcat 8.5.90 release is now available for voting.

The notable changes compared to 8.5.89 are:

- Add support for virtual threads. (Java 21+ only)

- Update HTTP/2 to use the RFC-9218 prioritization scheme.

- Deprecate the xssProtectionEnabled from HttpHeaderSecurityFilter
   and set the default value to false.

- Update Tomcat Native to 1.2.37 which includes binaries for Windows
   built with OpenSSL 1.1.1u.

Along with lots of other bug fixes and improvements.

For full details, see the changelog:
https://nightlies.apache.org/tomcat/tomcat-8.5.x/docs/changelog.html

It can be obtained from:
https://dist.apache.org/repos/dist/dev/tomcat/tomcat-8/v8.5.90/

The Maven staging repo is:
https://repository.apache.org/content/repositories/orgapachetomcat-1438

The tag is:
https://github.com/apache/tomcat/tree/8.5.90/
136713c528bfcd31563c1e7b7685d4983bb3559c

The proposed 8.5.90 release is:
[ ] Broken - do not release
[ ] Stable - go ahead and release as 8.5.90 (stable)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org


Re: [VOTE] Release Apache Tomcat 8.5.90

Posted by Igal Sapir <is...@apache.org>.
On Fri, Jun 2, 2023 at 11:08 AM Christopher Schultz <
chris@christopherschultz.net> wrote:

> The proposed Apache Tomcat 8.5.90 release is now available for voting.
>
> The notable changes compared to 8.5.89 are:
>
> - Add support for virtual threads. (Java 21+ only)
>
> - Update HTTP/2 to use the RFC-9218 prioritization scheme.
>
> - Deprecate the xssProtectionEnabled from HttpHeaderSecurityFilter
>    and set the default value to false.
>
> - Update Tomcat Native to 1.2.37 which includes binaries for Windows
>    built with OpenSSL 1.1.1u.
>
> Along with lots of other bug fixes and improvements.
>
> For full details, see the changelog:
> https://nightlies.apache.org/tomcat/tomcat-8.5.x/docs/changelog.html
>
> It can be obtained from:
> https://dist.apache.org/repos/dist/dev/tomcat/tomcat-8/v8.5.90/
>
> The Maven staging repo is:
> https://repository.apache.org/content/repositories/orgapachetomcat-1438
>
> The tag is:
> https://github.com/apache/tomcat/tree/8.5.90/
> 136713c528bfcd31563c1e7b7685d4983bb3559c
>
> The proposed 8.5.90 release is:
> [ ] Broken - do not release
> [X] Stable - go ahead and release as 8.5.90 (stable)
>

+1

Unit tests pass except for org.apache.catalina.mapper.TestMapperWebapps
but that one has been failing before on my system.

Igal



>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: dev-help@tomcat.apache.org
>
>

Re: [VOTE] Release Apache Tomcat 8.5.90

Posted by Rémy Maucherat <re...@apache.org>.
On Fri, Jun 2, 2023 at 8:08 PM Christopher Schultz
<ch...@christopherschultz.net> wrote:
>
> The proposed Apache Tomcat 8.5.90 release is now available for voting.
>
> The notable changes compared to 8.5.89 are:
>
> - Add support for virtual threads. (Java 21+ only)
>
> - Update HTTP/2 to use the RFC-9218 prioritization scheme.
>
> - Deprecate the xssProtectionEnabled from HttpHeaderSecurityFilter
>    and set the default value to false.
>
> - Update Tomcat Native to 1.2.37 which includes binaries for Windows
>    built with OpenSSL 1.1.1u.
>
> Along with lots of other bug fixes and improvements.
>
> For full details, see the changelog:
> https://nightlies.apache.org/tomcat/tomcat-8.5.x/docs/changelog.html
>
> It can be obtained from:
> https://dist.apache.org/repos/dist/dev/tomcat/tomcat-8/v8.5.90/
>
> The Maven staging repo is:
> https://repository.apache.org/content/repositories/orgapachetomcat-1438
>
> The tag is:
> https://github.com/apache/tomcat/tree/8.5.90/
> 136713c528bfcd31563c1e7b7685d4983bb3559c
>
> The proposed 8.5.90 release is:
> [ ] Broken - do not release
> [X] Stable - go ahead and release as 8.5.90 (stable)

Rémy

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org


Re: [VOTE] Release Apache Tomcat 8.5.90

Posted by Mark Thomas <ma...@apache.org>.
On 02/06/2023 19:07, Christopher Schultz wrote:

> The proposed 8.5.90 release is:
> [ ] Broken - do not release
> [X] Stable - go ahead and release as 8.5.90 (stable)

Tests pass on Windows, Linux, MacOS (M1) and MacOS (Intel).

I have confirmed that the release binaries are reproducible.

The source releases are only reproducible on Windows due to a 
line-ending issue (my fault) with the file _listing.xslt that was added 
to the tests. This has been fixed for the next set of releases.

Mark

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org


Re: [VOTE] Release Apache Tomcat 8.5.90

Posted by Christopher Schultz <ch...@christopherschultz.net>.
All,

On 6/2/23 14:07, Christopher Schultz wrote:
> The proposed Apache Tomcat 8.5.90 release is now available for voting.
> 
> The notable changes compared to 8.5.89 are:
> 
> - Add support for virtual threads. (Java 21+ only)
> 
> - Update HTTP/2 to use the RFC-9218 prioritization scheme.
> 
> - Deprecate the xssProtectionEnabled from HttpHeaderSecurityFilter
>    and set the default value to false.
> 
> - Update Tomcat Native to 1.2.37 which includes binaries for Windows
>    built with OpenSSL 1.1.1u.
> 
> Along with lots of other bug fixes and improvements.
> 
> For full details, see the changelog:
> https://nightlies.apache.org/tomcat/tomcat-8.5.x/docs/changelog.html
> 
> It can be obtained from:
> https://dist.apache.org/repos/dist/dev/tomcat/tomcat-8/v8.5.90/
> 
> The Maven staging repo is:
> https://repository.apache.org/content/repositories/orgapachetomcat-1438
> 
> The tag is:
> https://github.com/apache/tomcat/tree/8.5.90/
> 136713c528bfcd31563c1e7b7685d4983bb3559c
> 
> The proposed 8.5.90 release is:
> [ ] Broken - do not release
> [ ] Stable - go ahead and release as 8.5.90 (stable)

+1 for stable release

Works on an application in a development environment. Unit test failures 
are expected in this environment.

Details:

* Environment
*  Java (build):     openjdk version "1.8.0_292" OpenJDK Runtime 
Environment (build 1.8.0_292-8u292-b10-0+deb9u1-b10) OpenJDK 64-Bit 
Server VM (build 25.292-b10, mixed mode)
*  Java (test):     openjdk version "1.8.0_292" OpenJDK Runtime 
Environment (build 1.8.0_292-8u292-b10-0+deb9u1-b10) OpenJDK 64-Bit 
Server VM (build 25.292-b10, mixed mode)
*  OS:       Linux 5.10.0-19-amd64 x86_64
*  cc:       cc (Debian 10.2.1-6) 10.2.1 20210110
*  make:     GNU Make 4.3
*  OpenSSL:  OpenSSL 1.1.1 11 Sep 2018
*  APR:      1.7.0
*
* Valid SHA-512 signature for apache-tomcat-8.5.90.zip
* Valid GPG signature for apache-tomcat-8.5.90.zip
* Valid SHA-512 signature for apache-tomcat-8.5.90.tar.gz
* Valid GPG signature for apache-tomcat-8.5.90.tar.gz
* Valid SHA-512 signature for apache-tomcat-8.5.90.exe
* Valid GPG signature for apache-tomcat-8.5.90.exe
* Valid Windows Digital Signature for apache-tomcat-8.5.90.exe
* Valid SHA512 signature for apache-tomcat-8.5.90-src.zip
* Valid GPG signature for apache-tomcat-8.5.90-src.zip
* Valid SHA512 signature for apache-tomcat-8.5.90-src.tar.gz
* Valid GPG signature for apache-tomcat-8.5.90-src.tar.gz
*
* Binary Zip and tarball: Same
* Source Zip and tarball: Same
*
* Building dependencies returned: 0
* tcnative builds cleanly
* Tomcat builds cleanly
* Junit Tests: FAILED
*
* Tests that failed:
* org.apache.tomcat.util.net.jsse.TestPEMFile.APR.txt
* org.apache.tomcat.util.net.jsse.TestPEMFile.NIO.txt
* org.apache.tomcat.util.net.jsse.TestPEMFile.NIO2.txt
* org.apache.tomcat.util.net.openssl.ciphers.TestCipher.APR.txt
* org.apache.tomcat.util.net.openssl.ciphers.TestCipher.NIO.txt
* org.apache.tomcat.util.net.openssl.ciphers.TestCipher.NIO2.txt
* 
org.apache.tomcat.util.net.openssl.ciphers.TestOpenSSLCipherConfigurationParser.APR.txt
* 
org.apache.tomcat.util.net.openssl.ciphers.TestOpenSSLCipherConfigurationParser.NIO.txt
* 
org.apache.tomcat.util.net.openssl.ciphers.TestOpenSSLCipherConfigurationParser.NIO2.txt
* org.apache.tomcat.websocket.TestWsWebSocketContainerSSL.APR.txt
* org.apache.tomcat.websocket.TestWsWebSocketContainerSSL.NIO.txt
* org.apache.tomcat.websocket.TestWsWebSocketContainerSSL.NIO2.txt


-chris

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org


Re: [VOTE] Release Apache Tomcat 8.5.90

Posted by Han Li <li...@apache.org>.

> On Jun 3, 2023, at 02:07, Christopher Schultz <ch...@christopherschultz.net> wrote:
> 
> The proposed Apache Tomcat 8.5.90 release is now available for voting.
> 
> The notable changes compared to 8.5.89 are:
> 
> - Add support for virtual threads. (Java 21+ only)
> 
> - Update HTTP/2 to use the RFC-9218 prioritization scheme.
> 
> - Deprecate the xssProtectionEnabled from HttpHeaderSecurityFilter
>  and set the default value to false.
> 
> - Update Tomcat Native to 1.2.37 which includes binaries for Windows
>  built with OpenSSL 1.1.1u.
> 
> Along with lots of other bug fixes and improvements.
> 
> For full details, see the changelog:
> https://nightlies.apache.org/tomcat/tomcat-8.5.x/docs/changelog.html
> 
> It can be obtained from:
> https://dist.apache.org/repos/dist/dev/tomcat/tomcat-8/v8.5.90/
> 
> The Maven staging repo is:
> https://repository.apache.org/content/repositories/orgapachetomcat-1438
> 
> The tag is:
> https://github.com/apache/tomcat/tree/8.5.90/
> 136713c528bfcd31563c1e7b7685d4983bb3559c
> 
> The proposed 8.5.90 release is:
> [ ] Broken - do not release
> [X ] Stable - go ahead and release as 8.5.90 (stable)
+1
Tests pass.

Han

> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: dev-help@tomcat.apache.org
> 


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org