On Thu, Apr 3, 2025 at 3:16 PM Christopher Schultz <ch...@christopherschultz.net> wrote: > > Rémy, > > Thanks for RMing. > > On 4/1/25 2:56 PM, Rémy Maucherat wrote: > > The proposed Apache Tomcat 9.0.103 release is now available for voting. > > > > The notable changes compared to 9.0.102 are: > > > > - Remove the requirement that an MD5 implementation must be provided > > by JRE. > > > > - Improve the handling of %nn URL encoding in the RewriteValve > > > > - Various improvements to the JsonErrorReportValve > > > > For full details, see the changelog: > > https://nightlies.apache.org/tomcat/tomcat-9.0.x/docs/changelog.html > > > > It can be obtained from: > > https://dist.apache.org/repos/dist/dev/tomcat/tomcat-9/v9.0.103/ > > > > The Maven staging repo is: > > https://repository.apache.org/content/repositories/orgapachetomcat-1542 > > > > The tag is: > > https://github.com/apache/tomcat/tree/9.0.103 > > e504eff41c93116b8aa01b5e48a91c35de02effc > > > > The proposed 9.0.103 release is: > > [ ] -1, Broken - do not release > > [ ] +1, Stable - go ahead and release as 9.0.103 > > -1 for stable release > > The Windows installer binary has an invalid signature. I typically use > osslsigncode to check the signature but just in case, I verified on a > Windows 11 system that Windows 11 reports an invalid signature. > > Other than that, the release looks good to me. Unit tests pass on MacOS > aarch64, and the build is reproducible including the Windows binary itself.
I have no idea why the signature would be there but invalid. We'll see on the next attempt I guess. I'll leave the vote open for some additional feedback or info. Meanwhile I don't see any plans to remove the Java 8 compilation support from Java 25 (still there in EA 16), so updating the build to be using Java 22+ like in Tomcat 10.1 looks possible. This would greatly improve the LTS outlook for Tomcat 9 ! https://bugs.openjdk.org/browse/JDK-8353565?jql=project%20%3D%20JDK%20AND%20fixVersion%20%3D%20%2225%22%20AND%20component%20%3D%20tools%20AND%20Subcomponent%20in%20(javac%2C%20javac%2C%20javac%2C%20javac) Rémy > * Junit Tests: PASSED > chris@Mac:~/git/apache-tomcat-stuff$ grep '^*' tomcat-9.0.103.log > * Environment > * Java (build): openjdk version "17.0.14" 2025-01-21 OpenJDK Runtime > Environment Temurin-17.0.14+7 (build 17.0.14+7) OpenJDK 64-Bit Server VM > Temurin-17.0.14+7 (build 17.0.14+7, mixed mode, sharing) > * Java (ffm): openjdk version "23.0.2" 2025-01-21 OpenJDK Runtime > Environment Temurin-23.0.2+7 (build 23.0.2+7) OpenJDK 64-Bit Server VM > Temurin-23.0.2+7 (build 23.0.2+7, mixed mode, sharing) > * Java (test): openjdk version "23.0.2" 2025-01-21 OpenJDK Runtime > Environment Temurin-23.0.2+7 (build 23.0.2+7) OpenJDK 64-Bit Server VM > Temurin-23.0.2+7 (build 23.0.2+7, mixed mode, sharing) > * Ant: Apache Ant(TM) version 1.10.15 compiled on August 25 > 2024 > * OS: Darwin 24.4.0 arm64 > * cc: Apple clang version 16.0.0 (clang-1600.0.26.4) > * make: GNU Make 3.81 > * OpenSSL: OpenSSL 3.4.1 11 Feb 2025 (Library: OpenSSL 3.4.1 11 > Feb 2025) > * APR: 1.7.5 > * > * Valid SHA-512 signature for apache-tomcat-9.0.103.zip > * Valid GPG signature for apache-tomcat-9.0.103.zip > * Valid SHA-512 signature for apache-tomcat-9.0.103.tar.gz > * Valid GPG signature for apache-tomcat-9.0.103.tar.gz > * Valid SHA-512 signature for apache-tomcat-9.0.103.exe > * Valid GPG signature for apache-tomcat-9.0.103.exe > * !! Invalid Windows Digital Signature for apache-tomcat-9.0.103.exe > * Valid SHA512 signature for apache-tomcat-9.0.103-src.zip > * Valid GPG signature for apache-tomcat-9.0.103-src.zip > * Valid SHA512 signature for apache-tomcat-9.0.103-src.tar.gz > * Valid GPG signature for apache-tomcat-9.0.103-src.tar.gz > * > * Binary Zip and tarball: Same > * Source Zip and tarball: Same > * > * Building dependencies returned: 0 > * Tomcat builds cleanly > * tcnative builds cleanly > * Junit Tests: PASSED > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org > For additional commands, e-mail: dev-h...@tomcat.apache.org > --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org