Re: [VOTE] Release Apache Tomcat 11.0.24

Am 03.07.26 um 09:40 schrieb Mark Thomas:
> The proposed Apache Tomcat 11.0.24 release is now available for voting.
> 
> The notable changes compared to 11.0.23 include:
> 
> - Correcting a regression that broke integration with jsvc
> 
> - Correcting a regression that broke re-use of tag files
> 
> - Align DIGEST authentication with RFC 7616 and require clients to
>    provide a valid qop parameter.
> 
> For full details, see the change log:
> https://nightlies.apache.org/tomcat/tomcat-11.0.x/docs/changelog.html
> 
> Applications that run on Tomcat 9 and earlier will not run on Tomcat 11 
> without changes. Java EE applications designed for Tomcat 9 and earlier 
> may be placed in the $CATALINA_BASE/webapps-javaee directory and Tomcat 
> will automatically convert them to Jakarta EE and copy them to the 
> webapps directory. Applications using deprecated APIs may require 
> further changes.
> 
> It can be obtained from:
> https://dist.apache.org/repos/dist/dev/tomcat/tomcat-11/v11.0.24/
> 
> The Maven staging repo is:
> https://repository.apache.org/content/repositories/orgapachetomcat-1597
> The tag is:
> https://github.com/apache/tomcat/tree/11.0.24
> 4f33a9eca48c5cbf5963dd213b74866e629154ad
> 
> The proposed 11.0.24 release is:
> [ ] -1 Broken - do not release
> [ ] +1 Stable - go ahead and release as 11.0.24

+1 to release.

Reproducibility of the build checked (including the Windows installer) 
using "ant verify-release" on Linux Mint 22.3. OK after setting LANG.

Original Windows installer signature verified with osslsigncode 2.10.

Unit tests ran on platforms

- RHEL 8, 9 and 10 and SLES 15

using

- recent patch versions of JDK 17, 21, 25, 26 and 27+28 (EA)

from

- Eclipse Adoptium, Azul Zulu, Amazon Coretto, Oracle, RedHat and from 
OpenJDK for 27

where available.

Also tested with

- tcnative 2.0.15 and panama

based on

- OpenSSL 3.5.7, 3.6.3 and 4.0.1

Each combination of platform, JVM and JSSE or tcnative or panama only 
tested for NIO or NIO2 (randomized). Total number of test combinations:

      42 nio2 jsse
      65 nio2 panama
     119 nio2 tcnative
      39 nio jsse
      64 nio panama
     124 nio tcnative

Test observations:

   - IMHO nothing critical

   - in addition
     - very few crashes with tcnative (1 in 243 runs)
     - no crash failures with panama (129 runs)
     - very few non-crash failures with jsse (1 in 81 runs)
     - no non-crash failures with tcnative (243 runs)
     - no non-crash failures with panama (129 runs)

Thanks for RM!

Best regards,

Rainer