TLDR: Please review the packaging / signatures / whatever even though the 9.0.47 release is cancelled !
The proposed Apache Tomcat 9.0.47 release is now available for voting. The notable changes compared to 9.0.46 are: - Improve robustness of HTTP/2 HPACK decoding - Improvements to the handling of the Transfer-Encoding header - Review code used to generate Java source from JSPs and tags and remove code found to be unnecessary. - Backport the updated blocking NIO code and optimizations from Tomcat 10.0. Along with lots of other bug fixes and improvements. For full details, see the changelog: https://ci.apache.org/projects/tomcat/tomcat-9.0.x/docs/changelog.html <https://ci.apache.org/projects/tomcat/tomcat9/docs/changelog.html> It can be obtained from: https://dist.apache.org/repos/dist/dev/tomcat/tomcat-9/v9.0.47/ The Maven staging repo is: https://repository.apache.org/content/repositories/orgapachetomcat-1314/ The tag is: https://github.com/apache/tomcat/tree/9.0.47 e2febebd2fffc10764f70bdd7a3c879f571b3795 The proposed 9.0.47 release is: [X] Broken - do not release Broken due to an issue with the reflection code generator that did not get updated after the NIO backport (one introspected class is now missing). Unfortunately this part is not usually run so I never noticed it until I did the release target. Rémy