On Thu, Apr 3, 2025 at 3:16 PM Christopher Schultz
<ch...@christopherschultz.net> wrote:
>
> Rémy,
>
> Thanks for RMing.
>
> On 4/1/25 2:56 PM, Rémy Maucherat wrote:
> > The proposed Apache Tomcat 9.0.103 release is now available for voting.
> >
> > The notable changes compared to 9.0.102 are:
> >
> > - Remove the requirement that an MD5 implementation must be provided
> >     by JRE.
> >
> > - Improve the handling of %nn URL encoding in the RewriteValve
> >
> > - Various improvements to the JsonErrorReportValve
> >
> > For full details, see the changelog:
> > https://nightlies.apache.org/tomcat/tomcat-9.0.x/docs/changelog.html
> >
> > It can be obtained from:
> > https://dist.apache.org/repos/dist/dev/tomcat/tomcat-9/v9.0.103/
> >
> > The Maven staging repo is:
> > https://repository.apache.org/content/repositories/orgapachetomcat-1542
> >
> > The tag is:
> > https://github.com/apache/tomcat/tree/9.0.103
> > e504eff41c93116b8aa01b5e48a91c35de02effc
> >
> > The proposed 9.0.103 release is:
> > [ ] -1, Broken - do not release
> > [ ] +1, Stable - go ahead and release as 9.0.103
>
> -1 for stable release
>
> The Windows installer binary has an invalid signature. I typically use
> osslsigncode to check the signature but just in case, I verified on a
> Windows 11 system that Windows 11 reports an invalid signature.
>
> Other than that, the release looks good to me. Unit tests pass on MacOS
> aarch64, and the build is reproducible including the Windows binary itself.

I have no idea why the signature would be there but invalid. We'll see
on the next attempt I guess. I'll leave the vote open for some
additional feedback or info.

Meanwhile I don't see any plans to remove the Java 8 compilation
support from Java 25 (still there in EA 16), so updating the build to
be using Java 22+ like in Tomcat 10.1 looks possible. This would
greatly improve the LTS outlook for Tomcat 9 !
https://bugs.openjdk.org/browse/JDK-8353565?jql=project%20%3D%20JDK%20AND%20fixVersion%20%3D%20%2225%22%20AND%20component%20%3D%20tools%20AND%20Subcomponent%20in%20(javac%2C%20javac%2C%20javac%2C%20javac)

Rémy

> * Junit Tests: PASSED
> chris@Mac:~/git/apache-tomcat-stuff$ grep '^*' tomcat-9.0.103.log
> * Environment
> *  Java (build):    openjdk version "17.0.14" 2025-01-21 OpenJDK Runtime
> Environment Temurin-17.0.14+7 (build 17.0.14+7) OpenJDK 64-Bit Server VM
> Temurin-17.0.14+7 (build 17.0.14+7, mixed mode, sharing)
> *  Java (ffm):      openjdk version "23.0.2" 2025-01-21 OpenJDK Runtime
> Environment Temurin-23.0.2+7 (build 23.0.2+7) OpenJDK 64-Bit Server VM
> Temurin-23.0.2+7 (build 23.0.2+7, mixed mode, sharing)
> *  Java (test):     openjdk version "23.0.2" 2025-01-21 OpenJDK Runtime
> Environment Temurin-23.0.2+7 (build 23.0.2+7) OpenJDK 64-Bit Server VM
> Temurin-23.0.2+7 (build 23.0.2+7, mixed mode, sharing)
> *  Ant:             Apache Ant(TM) version 1.10.15 compiled on August 25
> 2024
> *  OS:              Darwin 24.4.0 arm64
> *  cc:              Apple clang version 16.0.0 (clang-1600.0.26.4)
> *  make:            GNU Make 3.81
> *  OpenSSL:         OpenSSL 3.4.1 11 Feb 2025 (Library: OpenSSL 3.4.1 11
> Feb 2025)
> *  APR:             1.7.5
> *
> * Valid SHA-512 signature for apache-tomcat-9.0.103.zip
> * Valid GPG signature for apache-tomcat-9.0.103.zip
> * Valid SHA-512 signature for apache-tomcat-9.0.103.tar.gz
> * Valid GPG signature for apache-tomcat-9.0.103.tar.gz
> * Valid SHA-512 signature for apache-tomcat-9.0.103.exe
> * Valid GPG signature for apache-tomcat-9.0.103.exe
> * !! Invalid Windows Digital Signature for apache-tomcat-9.0.103.exe
> * Valid SHA512 signature for apache-tomcat-9.0.103-src.zip
> * Valid GPG signature for apache-tomcat-9.0.103-src.zip
> * Valid SHA512 signature for apache-tomcat-9.0.103-src.tar.gz
> * Valid GPG signature for apache-tomcat-9.0.103-src.tar.gz
> *
> * Binary Zip and tarball: Same
> * Source Zip and tarball: Same
> *
> * Building dependencies returned: 0
> * Tomcat builds cleanly
> * tcnative builds cleanly
> * Junit Tests: PASSED
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: dev-h...@tomcat.apache.org
>

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Reply via email to