[tomcat] branch main updated: Include .editorconfig in text files that need consistent line endings

2022-01-20 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/main by this push: new 11de0ba Include .editorconfig in text files that nee

[tomcat] branch main updated (11de0ba -> c0ffa1f)

2022-01-20 Thread remm
This is an automated email from the ASF dual-hosted git repository. remm pushed a change to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git. from 11de0ba Include .editorconfig in text files that need consistent line endings add c0ffa1f Default to Java 11 for

[tomcat] branch main updated (c0ffa1f -> 97ce57a)

2022-01-20 Thread remm
This is an automated email from the ASF dual-hosted git repository. remm pushed a change to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git. from c0ffa1f Default to Java 11 for the example add 97ce57a Clarify that webapps stay the same No new revisions were a

[tomcat] branch 10.0.x updated: Clarify that webapps stay the same

2022-01-20 Thread remm
This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch 10.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/10.0.x by this push: new 91517d5 Clarify that webapps stay the same 91517d

[tomcat] branch 9.0.x updated: Clarify that webapps stay the same

2022-01-20 Thread remm
This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/9.0.x by this push: new 7916ab7 Clarify that webapps stay the same 7916ab7

Re: [VOTE][RESULT] Release Apache Tomcat 10.1.0-M10

2022-01-20 Thread Mark Thomas
The following votes were cast: Binding: +1: remm, isapir, csutherl, markt No other votes were cast. The vote therefore passes. Thanks to everyone who contributed to this release. Mark On 15/01/2022 12:49, Mark Thomas wrote: The proposed Apache Tomcat 10.1.0-M10 release is now available for

svn commit: r52166 - /dev/tomcat/tomcat-10/v10.1.0-M10/ /release/tomcat/tomcat-10/v10.1.0-M10/

2022-01-20 Thread markt
Author: markt Date: Thu Jan 20 10:46:37 2022 New Revision: 52166 Log: Release Apache Tomcat 10.1.0-M10 Added: release/tomcat/tomcat-10/v10.1.0-M10/ - copied from r52165, dev/tomcat/tomcat-10/v10.1.0-M10/ Removed: dev/tomcat/tomcat-10/v10.1.0-M10/ --

[tomcat] branch main updated: Add release date for 10.1.0-M10

2022-01-20 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/main by this push: new 720af73 Add release date for 10.1.0-M10 720af73 is d

Re: [VOTE] Release Apache Tomcat 10.0.16

2022-01-20 Thread Mark Thomas
The following votes were cast: Binding: +1: isapir, remm, markt No other votes were cast. The vote therefore passes. Thanks to everyone who contributed to this release. Mark On 15/01/2022 14:10, Mark Thomas wrote: The proposed Apache Tomcat 10.0.16 release is now available for voting. Apa

Re: [VOTE][RESULT] Release Apache Tomcat 10.0.16

2022-01-20 Thread Mark Thomas
Resending with the updated subject line The following votes were cast: Binding: +1: isapir, remm, markt No other votes were cast. The vote therefore passes. Thanks to everyone who contributed to this release. Mark On 15/01/2022 14:10, Mark Thomas wrote: The proposed Apache Tomcat 10.0.16

svn commit: r52167 - /dev/tomcat/tomcat-10/v10.0.16/ /release/tomcat/tomcat-10/v10.0.16/

2022-01-20 Thread markt
Author: markt Date: Thu Jan 20 10:56:14 2022 New Revision: 52167 Log: Release Apache Tomcat 10.0.16 Added: release/tomcat/tomcat-10/v10.0.16/ - copied from r52166, dev/tomcat/tomcat-10/v10.0.16/ Removed: dev/tomcat/tomcat-10/v10.0.16/ --

[tomcat] branch 10.0.x updated: Add release date for 10.0.16

2022-01-20 Thread markt
This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 10.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/10.0.x by this push: new f7c720d Add release date for 10.0.16 f7c720d is

Re: Reproducible builds update

2022-01-20 Thread Mark Thomas
On 19/01/2022 16:56, Rémy Maucherat wrote: On Wed, Jan 19, 2022 at 5:52 PM Emmanuel Bourg wrote: Fortunately a non-reproducible javadoc isn't really important, what matters the most is to have reproducible executable packages. That seems like a reasonable statement ! Ack. I'll look at the J

Re: [VOTE] Release Apache Tomcat 9.0.58

2022-01-20 Thread Rémy Maucherat
On Sat, Jan 15, 2022 at 3:50 PM Rémy Maucherat wrote: > > The proposed Apache Tomcat 9.0.58 release is now available for voting. > > The notable changes compared to 9.0.56 are: > > - Add recycling check in the input and output stream isReady to try to >give a more informative ISE when the faca

[GitHub] [tomcat] markt-asf commented on pull request #463: Add support for additional user attributes to TomcatPrincipal

2022-01-20 Thread GitBox
markt-asf commented on pull request #463: URL: https://github.com/apache/tomcat/pull/463#issuecomment-1017381686 If we limit the back-port to Tomcat 9+, we are on Java 8 and can use default methods to maintain compatibility. -- This is an automated message from the Apache Git Service. To

Re: [VOTE] Release Apache Tomcat 9.0.58

2022-01-20 Thread Mark Thomas
On 15/01/2022 14:50, Rémy Maucherat wrote: The proposed 9.0.58 release is: [ ] Broken - do not release [X] Stable - go ahead and release as 9.0.58 (stable) Sorry, ran the tests first thing this morning and forgot to vote. All good. Mark --

[GitHub] [tomcat] cklein05 commented on pull request #463: Add support for additional user attributes to TomcatPrincipal

2022-01-20 Thread GitBox
cklein05 commented on pull request #463: URL: https://github.com/apache/tomcat/pull/463#issuecomment-1017395345 > If we limit the back-port to Tomcat 9+, we are on Java 8 and can use default methods to maintain compatibility. I guess, that's the way to go. Shall I implement these in

Re: [VOTE] Release Apache Tomcat 10.1.0-M10

2022-01-20 Thread jean-frederic clere
On 15/01/2022 13:49, Mark Thomas wrote: [X] Alpha - go ahead and release as 10.1.0-M10 (alpha) Tested on fedora34 with openjdk version "11.0.13 -- Cheers Jean-Frederic - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache

Re: [VOTE][RESULT] Release Apache Tomcat 8.5.75

2022-01-20 Thread Christopher Schultz
The following votes were cast: Binding: +1: isapir, remm, schultz No other votes were cast. Therefore, the vote passes. Thanks to everyone who contributed to this release and testing it. `1 -chris On 1/18/22 17:26, Christopher Schultz wrote: The proposed Apache Tomcat 8.5.75 release i

svn commit: r52168 - /dev/tomcat/tomcat-8/v8.5.75/ /release/tomcat/tomcat-8/v8.5.75/

2022-01-20 Thread schultz
Author: schultz Date: Thu Jan 20 12:59:02 2022 New Revision: 52168 Log: Promote release candidate to release Added: release/tomcat/tomcat-8/v8.5.75/ - copied from r52167, dev/tomcat/tomcat-8/v8.5.75/ Removed: dev/tomcat/tomcat-8/v8.5.75/ ---

Re: [VOTE] Release Apache Tomcat 9.0.58

2022-01-20 Thread Coty Sutherland
On Sat, Jan 15, 2022 at 9:51 AM Rémy Maucherat wrote: > The proposed Apache Tomcat 9.0.58 release is now available for voting. > > The notable changes compared to 9.0.56 are: > > - Add recycling check in the input and output stream isReady to try to >give a more informative ISE when the facad

svn commit: r1897251 - in /tomcat/site/trunk: ./ docs/ docs/tomcat-8.5-doc/ docs/tomcat-8.5-doc/annotationapi/ docs/tomcat-8.5-doc/annotationapi/javax/annotation/ docs/tomcat-8.5-doc/annotationapi/jav

2022-01-20 Thread schultz
Author: schultz Date: Thu Jan 20 13:32:41 2022 New Revision: 1897251 URL: http://svn.apache.org/viewvc?rev=1897251&view=rev Log: Update web site to announce Release 8.5.75 and include documentation. [This commit notification would consist of 76 parts, which exceeds the limit of 50 ones, so it w

[ANN] Apache Tomcat 8.5.75 available

2022-01-20 Thread Christopher Schultz
The Apache Tomcat team announces the immediate availability of Apache Tomcat 8.5.75. Apache Tomcat 8 is an open source software implementation of the Java Servlet, JavaServer Pages, Java Unified Expression Language, Java WebSocket and Java Authentication Service Provider Interface for Containers

[VOTE][RESULT] Release Apache Tomcat 9.0.58

2022-01-20 Thread Rémy Maucherat
The following votes were cast: Binding: +1: isapir, remm, markt, csutherl No other votes were cast. Therefore, the vote passes. Thanks to everyone who contributed to this release and testing it. Rémy - To unsubscribe, e-mail:

svn commit: r52170 - /dev/tomcat/tomcat-9/v9.0.58/ /release/tomcat/tomcat-9/v9.0.58/

2022-01-20 Thread remm
Author: remm Date: Thu Jan 20 13:53:28 2022 New Revision: 52170 Log: Apache Tomcat 9.0.58 Added: release/tomcat/tomcat-9/v9.0.58/ - copied from r52169, dev/tomcat/tomcat-9/v9.0.58/ Removed: dev/tomcat/tomcat-9/v9.0.58/ --

[Bug 65802] Invalid header name should be rejected in the HTTP server response

2022-01-20 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=65802 --- Comment #7 from Nils R --- To add to that point, I found out another reason to push this issue forward. The HTTP/2.0 RFC (https://datatracker.ietf.org/doc/html/rfc7540#section-10.3) says in the "Intermediary Encapsulation Attack" section :

[tomcat] branch 8.5.x updated: Update release date.

2022-01-20 Thread schultz
This is an automated email from the ASF dual-hosted git repository. schultz pushed a commit to branch 8.5.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/8.5.x by this push: new 8f34559 Update release date. 8f34559 is describe

svn commit: r52171 - /release/tomcat/tomcat-8/v8.5.73/

2022-01-20 Thread schultz
Author: schultz Date: Thu Jan 20 14:14:37 2022 New Revision: 52171 Log: Drop old release artifacts. Removed: release/tomcat/tomcat-8/v8.5.73/ - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional comman

svn commit: r1897253 - in /tomcat/site/trunk/docs/tomcat-9.0-doc: ./ annotationapi/ annotationapi/javax/annotation/ annotationapi/javax/annotation/security/ annotationapi/javax/annotation/sql/ api/ ap

2022-01-20 Thread remm
Author: remm Date: Thu Jan 20 14:19:15 2022 New Revision: 1897253 URL: http://svn.apache.org/viewvc?rev=1897253&view=rev Log: Update docs for 9.0.58 [This commit notification would consist of 80 parts, which exceeds the limit of 50 ones, so it was shortened to the summary.] ---

svn commit: r1897255 - in /tomcat/site/trunk/docs/tomcat-9.0-doc/api/org/apache: catalina/mbeans/ coyote/http11/upgrade/ tomcat/util/buf/ tomcat/util/security/

2022-01-20 Thread remm
Author: remm Date: Thu Jan 20 14:31:04 2022 New Revision: 1897255 URL: http://svn.apache.org/viewvc?rev=1897255&view=rev Log: Update docs for 9.0.58 (part 2) Added: tomcat/site/trunk/docs/tomcat-9.0-doc/api/org/apache/coyote/http11/upgrade/UpgradeApplicationBufferHandler.html tomcat/sit

svn commit: r1897256 - in /tomcat/site/trunk: docs/ xdocs/

2022-01-20 Thread remm
Author: remm Date: Thu Jan 20 14:36:40 2022 New Revision: 1897256 URL: http://svn.apache.org/viewvc?rev=1897256&view=rev Log: Update docs for 9.0.58 (part 3) Modified: tomcat/site/trunk/docs/doap_Tomcat.rdf tomcat/site/trunk/docs/download-90.html tomcat/site/trunk/docs/index.html

[tomcat] branch 9.0.x updated: Update with release date

2022-01-20 Thread remm
This is an automated email from the ASF dual-hosted git repository. remm pushed a commit to branch 9.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/9.0.x by this push: new cc34038 Update with release date cc34038 is describ

[ANN] Apache Tomcat 9.0.58 available

2022-01-20 Thread Rémy Maucherat
The Apache Tomcat team announces the immediate availability of Apache Tomcat 9.0.58. Apache Tomcat 9 is an open source software implementation of the Java Servlet, JavaServer Pages, Java Unified Expression Language, Java WebSocket and JASPIC technologies. Apache Tomcat 9.0.58 is a bugfix and feat

Re: [tomcat] branch main updated: Remove unnecessary references to compile.source and compile.target

2022-01-20 Thread Rainer Jung
Am 13.01.2022 um 17:36 schrieb ma...@apache.org: This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/main by this push: new 0

[Bug 65820] New: HTTP Basic Authentication no longer supported

2022-01-20 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=65820 Bug ID: 65820 Summary: HTTP Basic Authentication no longer supported Product: Tomcat 9 Version: unspecified Hardware: PC Status: NEW Severity: normal Priority

[Bug 65820] HTTP Basic Authentication no longer supported

2022-01-20 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=65820 joao.paulo.mart...@gmail.com changed: What|Removed |Added OS||All --- Comment #1 from

Re: [tomcat] branch main updated: Update (currently unused) reproducible build timestamp

2022-01-20 Thread Rainer Jung
Am 15.01.2022 um 12:56 schrieb ma...@apache.org: This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomcat.git The following commit(s) were added to refs/heads/main by this push: new c

[Bug 65820] HTTP Basic Authentication no longer supported

2022-01-20 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=65820 --- Comment #2 from joao.paulo.mart...@gmail.com --- Or even simpler, taking into account the Valve that suppose to limit access to local only (to confirm if is effective) simples remove authentication and assume that localhost is a safe zone.

svn commit: r1897258 - in /tomcat/site/trunk: ./ docs/tomcat-10.1-doc/ docs/tomcat-10.1-doc/annotationapi/ docs/tomcat-10.1-doc/annotationapi/jakarta/annotation/ docs/tomcat-10.1-doc/annotationapi/jak

2022-01-20 Thread markt
Author: markt Date: Thu Jan 20 16:22:45 2022 New Revision: 1897258 URL: http://svn.apache.org/viewvc?rev=1897258&view=rev Log: Update docs for 10.1.0-M10 release [This commit notification would consist of 84 parts, which exceeds the limit of 50 ones, so it was shortened to the summary.] --

svn commit: r1897259 - in /tomcat/site/trunk: docs/download-10.html docs/index.html docs/migration-10.1.html docs/oldnews.html docs/whichversion.html xdocs/download-10.xml xdocs/index.xml xdocs/migrat

2022-01-20 Thread markt
Author: markt Date: Thu Jan 20 16:31:40 2022 New Revision: 1897259 URL: http://svn.apache.org/viewvc?rev=1897259&view=rev Log: Update site for 10.1.0-M10 release Modified: tomcat/site/trunk/docs/download-10.html tomcat/site/trunk/docs/index.html tomcat/site/trunk/docs/migration-10.1.h

[ANN] Apache Tomcat 10.1.0-M10 (alpha) available

2022-01-20 Thread Mark Thomas
The Apache Tomcat team announces the immediate availability of Apache Tomcat 10.1.0-M10 (alpha). Apache Tomcat 10 is an open source software implementation of the Jakarta Servlet, Jakarta Server Pages, Jakarta Expression Language, Jakarta WebSocket, Jakarta Authentication and Jakarta Annotations

svn commit: r52173 - /release/tomcat/tomcat-10/v10.1.0-M8/

2022-01-20 Thread markt
Author: markt Date: Thu Jan 20 17:06:34 2022 New Revision: 52173 Log: Drop 10.1.0-M8 from mirror network Removed: release/tomcat/tomcat-10/v10.1.0-M8/ - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For addition

svn commit: r1897262 - in /tomcat/site/trunk: ./ docs/tomcat-10.0-doc/ docs/tomcat-10.0-doc/annotationapi/ docs/tomcat-10.0-doc/annotationapi/jakarta/annotation/ docs/tomcat-10.0-doc/annotationapi/jak

2022-01-20 Thread markt
Author: markt Date: Thu Jan 20 17:32:14 2022 New Revision: 1897262 URL: http://svn.apache.org/viewvc?rev=1897262&view=rev Log: Update docs for 10.0.16 release! [This commit notification would consist of 83 parts, which exceeds the limit of 50 ones, so it was shortened to the summary.]

[Bug 65820] HTTP Basic Authentication no longer supported

2022-01-20 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=65820 Christopher Schultz changed: What|Removed |Added Status|NEW |NEEDINFO --- Comment #3 from Chr

svn commit: r1897266 - in /tomcat/site/trunk: docs/ xdocs/

2022-01-20 Thread markt
Author: markt Date: Thu Jan 20 18:31:40 2022 New Revision: 1897266 URL: http://svn.apache.org/viewvc?rev=1897266&view=rev Log: Update site for 10.0.16 release Modified: tomcat/site/trunk/docs/doap_Tomcat.rdf tomcat/site/trunk/docs/download-10.html tomcat/site/trunk/docs/index.html

[ANN] Apache Tomcat 10.0.16 available

2022-01-20 Thread Mark Thomas
The Apache Tomcat team announces the immediate availability of Apache Tomcat 10.0.16. This release is targeted at Jakarta EE 9. Applications that run on Tomcat 9 and earlier will not run on Tomcat 10 without changes. Java EE applications designed for Tomcat 9 and earlier may be placed in the $

svn commit: r52175 - /release/tomcat/tomcat-10/v10.0.14/

2022-01-20 Thread markt
Author: markt Date: Thu Jan 20 18:38:24 2022 New Revision: 52175 Log: Drop 10.0.14 from mirror network Removed: release/tomcat/tomcat-10/v10.0.14/ - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional c

svn commit: r52176 - /release/tomcat/tomcat-9/v9.0.56/

2022-01-20 Thread markt
Author: markt Date: Thu Jan 20 18:38:50 2022 New Revision: 52176 Log: Drop 9.0.56 from mirror network Removed: release/tomcat/tomcat-9/v9.0.56/ - To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional comm

[Bug 65820] HTTP Basic Authentication no longer supported

2022-01-20 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=65820 joao.paulo.mart...@gmail.com changed: What|Removed |Added Status|NEEDINFO|NEW --- Comment #4 from

Re: Reproducible builds update

2022-01-20 Thread Mark Thomas
On 20/01/2022 11:02, Mark Thomas wrote: On 19/01/2022 16:56, Rémy Maucherat wrote: On Wed, Jan 19, 2022 at 5:52 PM Emmanuel Bourg wrote: Fortunately a non-reproducible javadoc isn't really important, what matters the most is to have reproducible executable packages. That seems like a reasona

[Bug 65820] HTTP Basic Authentication no longer supported

2022-01-20 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=65820 --- Comment #5 from Christopher Schultz --- (In reply to joao.paulo.martins from comment #4) > Even so it is considered an unsecure approach using http basic > authentication, might worth a change. [*] citation needed HTTP Basic Authenticatio

[Bug 65820] HTTP Basic Authentication no longer supported

2022-01-20 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=65820 joao.paulo.mart...@gmail.com changed: What|Removed |Added Status|NEW |NEEDINFO --- Comment #6

[Bug 65828] New: [10.0.16] The gpg sign file is missing for the tar file

2022-01-20 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=65828 Bug ID: 65828 Summary: [10.0.16] The gpg sign file is missing for the tar file Product: Tomcat 10 Version: unspecified Hardware: PC OS: Linux