All,

On 2/14/24 18:10, Christopher Schultz wrote:
The proposed Apache Tomcat 8.5.99 release is now available for voting.

The notable changes compared to 8.5.99 are:

- Add improvements to the CSRF prevention filter including the ability
   to skip adding nonces for resource name and subtree URL patterns.

- Add support for user provided SSLContext instances configured on
   SSLHostConfigCertificate instances. Based on pull request #673
   provided by Hakan Altındağ.

- Review usage of debug logging and downgrade trace or data dumping
   operations from debug level to trace.

Along with lots of other bug fixes and improvements.

For full details, see the changelog:
https://nightlies.apache.org/tomcat/tomcat-8.5.x/docs/changelog.html

It can be obtained from:
https://dist.apache.org/repos/dist/dev/tomcat/tomcat-8/v8.5.99/

The Maven staging repo is:
https://repository.apache.org/content/repositories/orgapachetomcat-1483

The tag is:
https://github.com/apache/tomcat/tree/8.5.99/
fe841cca81f15355ed4096c5c155f0ceb49a05da

The proposed 8.5.99 release is:
[ ] Broken - do not release
[ ] Stable - go ahead and release as 8.5.99 (stable)

+1 for stable release.

Works on plain servlet-based application in a development environment.

The build is reproducible on Linux minus a few discrepancies with exact JDK build numbers in JAR file MANIFEST.MF files.

Unit tests pass on MacOS and Linux.

Note that the TestMapperWebapps unit-test fails because the version of ECJ that ships with Tomcat is too old for Java 17, and I haven't made arrangements in my test harness to upgrade ECJ.

Details:

* Environment
* Java (build): openjdk version "17.0.10" 2024-01-16 OpenJDK Runtime Environment (build 17.0.10+7-Debian-1deb12u1) OpenJDK 64-Bit Server VM (build 17.0.10+7-Debian-1deb12u1, mixed mode, sharing) * Java (test): openjdk version "17.0.10" 2024-01-16 OpenJDK Runtime Environment (build 17.0.10+7-Debian-1deb12u1) OpenJDK 64-Bit Server VM (build 17.0.10+7-Debian-1deb12u1, mixed mode, sharing)
*  OS:       Linux 6.1.0-12-amd64 x86_64
*  cc:       cc (Debian 12.2.0-14) 12.2.0
*  make:     GNU Make 4.3
*  OpenSSL:  OpenSSL 1.1.1 11 Sep 2018
*  APR:      1.7.2
*
* Valid SHA-512 signature for apache-tomcat-8.5.99.zip
* Valid GPG signature for apache-tomcat-8.5.99.zip
* Valid SHA-512 signature for apache-tomcat-8.5.99.tar.gz
* Valid GPG signature for apache-tomcat-8.5.99.tar.gz
* Valid SHA-512 signature for apache-tomcat-8.5.99.exe
* Valid GPG signature for apache-tomcat-8.5.99.exe
* Valid Windows Digital Signature for apache-tomcat-8.5.99.exe
* Valid SHA512 signature for apache-tomcat-8.5.99-src.zip
* Valid GPG signature for apache-tomcat-8.5.99-src.zip
* Valid SHA512 signature for apache-tomcat-8.5.99-src.tar.gz
* Valid GPG signature for apache-tomcat-8.5.99-src.tar.gz
*
* Binary Zip and tarball: Same
* Source Zip and tarball: Same
*
* Building dependencies returned: 0
* tcnative builds cleanly
* Tomcat builds cleanly
* Junit Tests: FAILED
*
* Tests that failed:
* org.apache.catalina.mapper.TestMapperWebapps.APR.txt
* org.apache.catalina.mapper.TestMapperWebapps.NIO.txt
* org.apache.catalina.mapper.TestMapperWebapps.NIO2.txt

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Reply via email to