Re: [VOTE] Release Apache Tomcat 9.0.120

Rémy,

Thanks for RMing.

On 7/3/26 4:27 AM, Rémy Maucherat wrote:
> The proposed Apache Tomcat 9.0.120 release is now available for voting.
> 
> The notable changes compared to 9.0.119 are:
> 
> - Correcting a regression that broke integration with jsvc
> 
> - Correcting a regression that broke re-use of tag files
> 
> - Align DIGEST authentication with RFC 7616 and require clients to
>     provide a valid qop parameter.
> 
> For full details, see the changelog:
> https://nightlies.apache.org/tomcat/tomcat-9.0.x/docs/changelog.html
> 
> It can be obtained from:
> https://dist.apache.org/repos/dist/dev/tomcat/tomcat-9/v9.0.120/
> 
> The Maven staging repo is:
> https://repository.apache.org/content/repositories/orgapachetomcat-1598
> 
> The tag is:
> https://github.com/apache/tomcat/tree/9.0.120
> 8fc613dd46061308028b75ed99571db00b9db4e0
> 
> The proposed 9.0.120 release is:
> [ ] -1, Broken - do not release
> [ ] +1, Stable - go ahead and release as 9.0.120

+1 for stable release.

The build is reproducible on MacOS aarch64 and all unit tests pass.

Details:
* Environment
*  Java (build):    openjdk version "25.0.3" 2026-04-21 LTS OpenJDK 
Runtime Environment Temurin-25.0.3+9 (build 25.0.3+9-LTS) OpenJDK 64-Bit 
Server VM Temurin-25.0.3+9 (build 25.0.3+9-LTS, mixed mode, sharing)
*  Java (test):     openjdk version "25.0.3" 2026-04-21 LTS OpenJDK 
Runtime Environment Temurin-25.0.3+9 (build 25.0.3+9-LTS) OpenJDK 64-Bit 
Server VM Temurin-25.0.3+9 (build 25.0.3+9-LTS, mixed mode, sharing)
*  Ant:             Apache Ant(TM) version 1.10.17 compiled on April 6 2026
*  OS:              Darwin 25.3.0 arm64
*  cc:              Apple clang version 21.0.0 (clang-2100.1.1.101)
*  make:            GNU Make 3.81
*  OpenSSL:         OpenSSL 3.6.2 7 Apr 2026 (Library: OpenSSL 3.6.2 7 
Apr 2026)
*  APR:             1.7.6
*
* Valid SHA-512 signature for apache-tomcat-9.0.120.zip
* Valid GPG signature for apache-tomcat-9.0.120.zip
* Valid SHA-512 signature for apache-tomcat-9.0.120.tar.gz
* Valid GPG signature for apache-tomcat-9.0.120.tar.gz
* Valid SHA-512 signature for apache-tomcat-9.0.120.exe
* Valid GPG signature for apache-tomcat-9.0.120.exe
* Valid Windows Digital Signature for apache-tomcat-9.0.120.exe
* Valid SHA512 signature for apache-tomcat-9.0.120-src.zip
* Valid GPG signature for apache-tomcat-9.0.120-src.zip
* Valid SHA512 signature for apache-tomcat-9.0.120-src.tar.gz
* Valid GPG signature for apache-tomcat-9.0.120-src.tar.gz
*
* Binary Zip and tarball: Same
* Source Zip and tarball: Same
*
* Building dependencies returned: 0
* Tomcat builds cleanly
* tcnative builds cleanly
* Junit Tests: PASSED

-chris