You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tomcat.apache.org by Rémy Maucherat <re...@apache.org> on 2025/12/02 20:04:25 UTC

[VOTE] Release Apache Tomcat 9.0.113

The proposed Apache Tomcat 9.0.113 release is now available for voting.

The notable changes compared to 9.0.112 are:

- Add strictSNI attribute on the Connector to allow matching the
   SSLHostConfig configuration associated with the SNI host name to the
   SSLHostConfig configuration matched from the HTTP protocol host name.
   Non matching configurations will cause the request to be rejected. The
   attribute default value is true, enabling the matching.

- Correct a regression introduced in 9.0.109 that broke some clustering
   configurations.

- Update Commons Daemon to 1.5.0.

- Add profiles to the testsuite.

For full details, see the changelog:
https://nightlies.apache.org/tomcat/tomcat-9.0.x/docs/changelog.html

It can be obtained from:
https://dist.apache.org/repos/dist/dev/tomcat/tomcat-9/v9.0.113/

The Maven staging repo is:
https://repository.apache.org/content/repositories/orgapachetomcat-1573

The tag is:
https://github.com/apache/tomcat/tree/9.0.113
1da89d3d01aece456d622548d92055a60ff19c37

The proposed 9.0.113 release is:
[ ] -1, Broken - do not release
[ ] +1, Stable - go ahead and release as 9.0.113

Rémy

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org


Re: [VOTE] Release Apache Tomcat 9.0.113

Posted by jean-frederic clere <jf...@gmail.com>.
On 12/2/25 9:04 PM, Rémy Maucherat wrote:
> [X] +1, Stable - go ahead and release as 9.0.113

Tested on fedora 42 with tc-native-1.3.1

-- 
Cheers

Jean-Frederic

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org


Re: [VOTE] Release Apache Tomcat 9.0.113

Posted by Christopher Schultz <ch...@christopherschultz.net>.
Rémy,

(This time, reply to the list as well as Rémy directly)

On 12/2/25 3:04 PM, Rémy Maucherat wrote:
 > The proposed Apache Tomcat 9.0.113 release is now available for voting.
 >
 > The notable changes compared to 9.0.112 are:
 >
 > - Add strictSNI attribute on the Connector to allow matching the
 >     SSLHostConfig configuration associated with the SNI host name to the
 >     SSLHostConfig configuration matched from the HTTP protocol host name.
 >     Non matching configurations will cause the request to be 
rejected. The
 >     attribute default value is true, enabling the matching.
 >
 > - Correct a regression introduced in 9.0.109 that broke some clustering
 >     configurations.
 >
 > - Update Commons Daemon to 1.5.0.
 >
 > - Add profiles to the testsuite.
 >
 > For full details, see the changelog:
 > https://nightlies.apache.org/tomcat/tomcat-9.0.x/docs/changelog.html
 >
 > It can be obtained from:
 > https://dist.apache.org/repos/dist/dev/tomcat/tomcat-9/v9.0.113/
 >
 > The Maven staging repo is:
 > https://repository.apache.org/content/repositories/orgapachetomcat-1573
 >
 > The tag is:
 > https://github.com/apache/tomcat/tree/9.0.113
 > 1da89d3d01aece456d622548d92055a60ff19c37
 >
 > The proposed 9.0.113 release is:
 > [ ] -1, Broken - do not release
 > [ ] +1, Stable - go ahead and release as 9.0.113

+1 for stable release.

The build is 100% reproducible and all unit tests pass on MacOS aarch64.

I did get one unit test failure which passed on the second try. This 
might be a timing issue with the test:

TEST-org.apache.catalina.filters.TestRateLimitFilterWithExactRateLimiter.NIO.txt

Testcase: testUnexposeHeaderAndEnforceRateLimitWith4Clients took 13.23 sec
         FAILED
expected:<200> but was:<0>
junit.framework.AssertionFailedError: expected:<200> but was:<0>
         at 
org.apache.catalina.filters.TestRateLimitFilterWithExactRateLimiter.testRateLimitWith1Clients(TestRateLimitFilterWithExactRateLimiter.java:74)
         at 
org.apache.catalina.filters.TestRateLimitFilterWithExactRateLimiter.testUnexposeHeaderAndEnforceRateLimitWith4Clients(TestRateLimitFilterWithExactRateLimiter.java:126)
         at 
java.base/jdk.internal.reflect.DirectMethodHandleAccessor.invoke(DirectMethodHandleAccessor.java:104)

Details:

* Environment
*  Java (build):    openjdk version "25.0.1" 2025-10-21 LTS OpenJDK 
Runtime Environment Temurin-25.0.1+8 (build 25.0.1+8-LTS) OpenJDK 64-Bit 
Server VM Temurin-25.0.1+8 (build 25.0.1+8-LTS, mixed mode, sharing)
*  Java (test):     openjdk version "25.0.1" 2025-10-21 LTS OpenJDK 
Runtime Environment Temurin-25.0.1+8 (build 25.0.1+8-LTS) OpenJDK 64-Bit 
Server VM Temurin-25.0.1+8 (build 25.0.1+8-LTS, mixed mode, sharing)
*  Ant:             Apache Ant(TM) version 1.10.15 compiled on August 25 
2024
*  OS:              Darwin 24.6.0 arm64
*  cc:              Apple clang version 17.0.0 (clang-1700.3.19.1)
*  make:            GNU Make 3.81
*  OpenSSL:         OpenSSL 3.6.0 1 Oct 2025 (Library: OpenSSL 3.6.0 1 
Oct 2025)
*  APR:             1.7.6
*
* Valid SHA-512 signature for apache-tomcat-9.0.113.zip
* Valid GPG signature for apache-tomcat-9.0.113.zip
* Valid SHA-512 signature for apache-tomcat-9.0.113.tar.gz
* Valid GPG signature for apache-tomcat-9.0.113.tar.gz
* Valid SHA-512 signature for apache-tomcat-9.0.113.exe
* Valid GPG signature for apache-tomcat-9.0.113.exe
* Valid Windows Digital Signature for apache-tomcat-9.0.113.exe
* Valid SHA512 signature for apache-tomcat-9.0.113-src.zip
* Valid GPG signature for apache-tomcat-9.0.113-src.zip
* Valid SHA512 signature for apache-tomcat-9.0.113-src.tar.gz
* Valid GPG signature for apache-tomcat-9.0.113-src.tar.gz
*
* Binary Zip and tarball: Same
* Source Zip and tarball: Same
*
* Building dependencies returned: 0
* Tomcat builds cleanly
* tcnative builds cleanly
* Junit Tests: PASSED

-chris


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org


Re: [VOTE] Release Apache Tomcat 9.0.113

Posted by Coty Sutherland <cs...@redhat.com>.
On Tue, Dec 2, 2025 at 3:05 PM Rémy Maucherat <re...@apache.org> wrote:

> The proposed Apache Tomcat 9.0.113 release is now available for voting.
>
> The notable changes compared to 9.0.112 are:
>
> - Add strictSNI attribute on the Connector to allow matching the
>    SSLHostConfig configuration associated with the SNI host name to the
>    SSLHostConfig configuration matched from the HTTP protocol host name.
>    Non matching configurations will cause the request to be rejected. The
>    attribute default value is true, enabling the matching.
>
> - Correct a regression introduced in 9.0.109 that broke some clustering
>    configurations.
>
> - Update Commons Daemon to 1.5.0.
>
> - Add profiles to the testsuite.
>
> For full details, see the changelog:
> https://nightlies.apache.org/tomcat/tomcat-9.0.x/docs/changelog.html
>
> It can be obtained from:
> https://dist.apache.org/repos/dist/dev/tomcat/tomcat-9/v9.0.113/
>
> The Maven staging repo is:
> https://repository.apache.org/content/repositories/orgapachetomcat-1573
>
> The tag is:
> https://github.com/apache/tomcat/tree/9.0.113
> 1da89d3d01aece456d622548d92055a60ff19c37
>
> The proposed 9.0.113 release is:
> [ ] -1, Broken - do not release
> [x] +1, Stable - go ahead and release as 9.0.113
>

+1, LGTM

Re: [VOTE] Release Apache Tomcat 9.0.113

Posted by Mark Thomas <ma...@apache.org>.
On 02/12/2025 20:04, Rémy Maucherat wrote:
> The proposed Apache Tomcat 9.0.113 release is now available for voting.
> 
> The notable changes compared to 9.0.112 are:
> 
> - Add strictSNI attribute on the Connector to allow matching the
>     SSLHostConfig configuration associated with the SNI host name to the
>     SSLHostConfig configuration matched from the HTTP protocol host name.
>     Non matching configurations will cause the request to be rejected. The
>     attribute default value is true, enabling the matching.
> 
> - Correct a regression introduced in 9.0.109 that broke some clustering
>     configurations.
> 
> - Update Commons Daemon to 1.5.0.
> 
> - Add profiles to the testsuite.
> 
> For full details, see the changelog:
> https://nightlies.apache.org/tomcat/tomcat-9.0.x/docs/changelog.html
> 
> It can be obtained from:
> https://dist.apache.org/repos/dist/dev/tomcat/tomcat-9/v9.0.113/
> 
> The Maven staging repo is:
> https://repository.apache.org/content/repositories/orgapachetomcat-1573
> 
> The tag is:
> https://github.com/apache/tomcat/tree/9.0.113
> 1da89d3d01aece456d622548d92055a60ff19c37
> 
> The proposed 9.0.113 release is:
> [ ] -1, Broken - do not release
> [X] +1, Stable - go ahead and release as 9.0.113

+1

Tests pass on Windows, Linux and MacOS.
Build is cross-platform reproducible.

Mark


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org


Re: [VOTE] Release Apache Tomcat 9.0.113

Posted by Igal Sapir <is...@apache.org>.
Remy,

On Tue, Dec 2, 2025 at 12:04 PM Rémy Maucherat <re...@apache.org> wrote:

> The proposed Apache Tomcat 9.0.113 release is now available for voting.
>
> The notable changes compared to 9.0.112 are:
>
> - Add strictSNI attribute on the Connector to allow matching the
>    SSLHostConfig configuration associated with the SNI host name to the
>    SSLHostConfig configuration matched from the HTTP protocol host name.
>    Non matching configurations will cause the request to be rejected. The
>    attribute default value is true, enabling the matching.
>
> - Correct a regression introduced in 9.0.109 that broke some clustering
>    configurations.
>
> - Update Commons Daemon to 1.5.0.
>
> - Add profiles to the testsuite.
>
> For full details, see the changelog:
> https://nightlies.apache.org/tomcat/tomcat-9.0.x/docs/changelog.html
>
> It can be obtained from:
> https://dist.apache.org/repos/dist/dev/tomcat/tomcat-9/v9.0.113/
>
> The Maven staging repo is:
> https://repository.apache.org/content/repositories/orgapachetomcat-1573
>
> The tag is:
> https://github.com/apache/tomcat/tree/9.0.113
> 1da89d3d01aece456d622548d92055a60ff19c37
>
> The proposed 9.0.113 release is:
> [ ] -1, Broken - do not release
> [X] +1, Stable - go ahead and release as 9.0.113
>

Thanks for RM'ing

Build is reproducible and unit tests pass with intermittent failures
of org.apache.tomcat.websocket.server.TestAsyncMessagesPerformance which
seems to be a flaky test

Igal



>
> Rémy
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: dev-help@tomcat.apache.org
>
>

[VOTE][RESULT] Release Apache Tomcat 9.0.113

Posted by Rémy Maucherat <re...@apache.org>.
The following votes were cast:

Binding:
+1: markt, csutherl, jfclere, schultz, isapir

The vote therefore passes.

Thanks to everyone who contributed to this release.

Rémy

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org